This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/RF1SfGcG1N5bLpX0hcp041AmWfU.roa File: RF1SfGcG1N5bLpX0hcp041AmWfU.roa (raw, json) Hash identifier: s1kWCgAQUp+QoFax5vV8exMTSj2ofeEGJck0ysWTXXU= Subject key identifier: 44:5D:52:7C:67:06:D4:DE:5B:2E:95:F4:85:CA:74:E3:50:26:59:F5 Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7 Certificate serial: 019B7F140CD14E82112EBD902A5DBF031D64 Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/RF1SfGcG1N5bLpX0hcp041AmWfU.roa Signing time: Fri 02 Jan 2026 14:19:39 +0000 ROA not before: Fri 02 Jan 2026 14:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11351 IP address blocks: 84.37.32.0/20 maxlen: 24 84.37.176.0/20 maxlen: 24 84.37.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:0c:d1:4e:82:11:2e:bd:90:2a:5d:bf:03:1d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7 Validity Not Before: Jan 2 14:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=445d527c6706d4de5b2e95f485ca74e3502659f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d2:df:94:94:0c:92:19:e6:44:8a:8c:35:d1: e0:59:69:bb:65:18:62:7c:04:9c:06:e3:8c:f1:bc: b6:7f:f6:60:0c:8e:26:5f:84:b4:f1:71:b4:c6:b9: 90:04:25:34:89:42:ca:8f:a5:a5:63:78:62:b0:88: e3:68:60:59:a0:66:b7:b3:5f:82:e5:4d:f6:55:c2: b9:bc:e0:fb:b9:c0:4b:36:4f:d5:fe:18:0a:e1:4d: a0:b1:7b:8e:5d:4b:f2:06:d6:41:80:41:3e:39:e5: 0f:1d:26:33:b9:60:52:eb:24:f1:dc:20:67:3f:ac: 75:39:8e:c0:c8:2d:b6:d0:76:3b:40:5f:c1:b0:ea: 2d:de:1b:56:00:45:13:c5:63:b0:00:a7:1c:69:ff: d0:14:01:48:37:3f:95:c1:3e:91:db:e7:c5:9a:1b: 57:a7:6f:3b:40:43:4a:ac:9a:dd:80:52:99:b7:ef: 89:82:a2:2c:0f:57:62:b7:84:82:a0:43:d5:56:00: 4b:48:0a:02:b5:26:35:88:07:15:bd:36:90:9e:54: e5:7c:3c:06:ab:30:75:0d:e1:bd:e9:1c:d0:38:b8: b3:b4:e5:b5:f1:8f:6c:69:ac:ae:ed:62:25:46:82: 1f:71:7f:ea:6a:8d:e6:b5:61:f3:42:13:af:67:34: 0c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5D:52:7C:67:06:D4:DE:5B:2E:95:F4:85:CA:74:E3:50:26:59:F5 X509v3 Authority Key Identifier: keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/RF1SfGcG1N5bLpX0hcp041AmWfU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.37.32.0/20 84.37.176.0-84.37.255.255 Signature Algorithm: sha256WithRSAEncryption a2:50:be:23:5a:f6:a9:8e:19:fd:b4:e9:32:08:62:f5:11:eb: 1c:3f:0d:76:21:ed:bf:4f:aa:d6:37:c8:af:8b:a9:1d:02:d8: 09:c0:1d:13:e2:af:26:1d:b6:23:a3:3b:b3:5a:59:c7:1f:ad: 5b:f6:ee:bb:5a:04:73:24:f8:8c:48:35:2e:d3:60:c8:50:d1: 38:3e:d5:a4:a1:af:5a:94:7b:f5:fa:e1:0f:73:dc:5d:30:74: 77:7c:f0:9c:87:b0:5c:a5:c0:fd:6d:d6:0f:4d:65:37:5b:a3: 42:71:24:ad:9e:b5:9d:4e:ec:16:34:ed:e0:e1:15:b4:a5:f4: c4:8e:92:d1:3f:ef:f4:c1:81:21:5d:ab:a9:5f:c2:22:29:13: 3d:ae:d7:e7:b4:3e:b5:41:be:22:bd:a5:a7:cb:da:33:37:7e: f9:9a:c2:59:a6:bc:14:a6:2c:5b:05:2e:fa:2b:66:eb:09:91: 7f:48:50:1f:a5:31:5b:26:45:43:93:d1:4f:36:67:b8:5c:64: 54:1c:6c:07:30:04:72:be:e4:05:a3:ea:70:9d:47:dd:2c:db: 59:32:ba:ca:be:90:ba:cc:ca:9e:c6:73:58:f0:5a:50:07:cc: 18:9c:21:b6:53:36:d4:5f:52:12:13:39:1e:89:88:da:8c:6c: 0a:ad:00:f3 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt/FAzRToIRLr2QKl2/Ax1kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NTRiNjE4M2U0NTk3NDhjODllZTU0MzFiOGYzMWRlNjky YWUzYjcwHhcNMjYwMTAyMTQxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDVkNTI3YzY3MDZkNGRlNWIyZTk1ZjQ4NWNhNzRlMzUwMjY1OWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNLflJQMkhnmRIqMNdHgWWm7ZRhi fAScBuOM8by2f/ZgDI4mX4S08XG0xrmQBCU0iULKj6WlY3hisIjjaGBZoGa3s1+C 5U32VcK5vOD7ucBLNk/V/hgK4U2gsXuOXUvyBtZBgEE+OeUPHSYzuWBS6yTx3CBn P6x1OY7AyC220HY7QF/BsOot3htWAEUTxWOwAKccaf/QFAFINz+VwT6R2+fFmhtX p287QENKrJrdgFKZt++JgqIsD1dit4SCoEPVVgBLSAoCtSY1iAcVvTaQnlTlfDwG qzB1DeG96RzQOLiztOW18Y9saayu7WIlRoIfcX/qao3mtWHzQhOvZzQM+QIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFERdUnxnBtTeWy6V9IXKdONQJln1MB8GA1UdIwQY MBaAFFlUthg+RZdIyJ7lQxuPMd5pKuO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMt ZDJhZGVlZDc1NWQ4LzEvUkYxU2ZHY0cxTjViTHBYMGhjcDA0MUFtV2ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMtZDJhZGVlZDc1NWQ4 LzEvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQEVCUgMAsD BARUJbADAwFUJDANBgkqhkiG9w0BAQsFAAOCAQEAolC+I1r2qY4Z/bTpMghi9RHr HD8NdiHtv0+q1jfIr4upHQLYCcAdE+KvJh22I6M7s1pZxx+tW/buu1oEcyT4jEg1 LtNgyFDROD7VpKGvWpR79frhD3PcXTB0d3zwnIewXKXA/W3WD01lN1ujQnEkrZ61 nU7sFjTt4OEVtKX0xI6S0T/v9MGBIV2rqV/CIikTPa7X57Q+tUG+Ir2lp8vaMzd+ +ZrCWaa8FKYsWwUu+itm6wmRf0hQH6UxWyZFQ5PRTzZnuFxkVBxsBzAEcr7kBaPq cJ1H3SzbWTK6yr6QuszKnsZzWPBaUAfMGJwhtlM21F9SEhM5HomI2oxsCq0A8w== -----END CERTIFICATE-----Generated at Wed Jan 21 01:08:01 2026 by rpki-client