This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/t8niaCudsUklWmI60ErEEk9qVaY.roa File: t8niaCudsUklWmI60ErEEk9qVaY.roa (raw, json) Hash identifier: 9AT4+zyzuGSGoAFcdQAqXDdfcjjYBcKBFUicQGTapwg= Subject key identifier: B7:C9:E2:68:2B:9D:B1:49:25:5A:62:3A:D0:4A:C4:12:4F:6A:55:A6 Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7 Certificate serial: 019B7F14127858901E7D28FC6501E1BFDEB0 Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/t8niaCudsUklWmI60ErEEk9qVaY.roa Signing time: Fri 02 Jan 2026 14:19:40 +0000 ROA not before: Fri 02 Jan 2026 14:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214143 IP address blocks: 212.11.1.0/24 maxlen: 24 212.11.2.0/24 maxlen: 24 212.11.3.0/24 maxlen: 24 212.11.4.0/24 maxlen: 24 212.11.5.0/24 maxlen: 24 212.11.7.0/24 maxlen: 24 212.11.11.0/24 maxlen: 24 212.11.12.0/24 maxlen: 24 212.11.14.0/24 maxlen: 24 212.11.15.0/24 maxlen: 24 212.11.45.0/24 maxlen: 24 212.11.46.0/24 maxlen: 24 212.11.47.0/24 maxlen: 24 212.11.50.0/24 maxlen: 24 212.11.51.0/24 maxlen: 24 212.11.53.0/24 maxlen: 24 212.11.54.0/24 maxlen: 24 212.11.57.0/24 maxlen: 24 212.11.58.0/24 maxlen: 24 212.11.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:12:78:58:90:1e:7d:28:fc:65:01:e1:bf:de:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7 Validity Not Before: Jan 2 14:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7c9e2682b9db149255a623ad04ac4124f6a55a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:54:42:55:1b:e0:0c:a6:39:d0:5b:87:a4:d1: b2:bc:c5:8e:ba:91:5a:d5:be:30:a9:b1:c0:25:1f: 09:b3:b2:69:ca:96:4e:96:a3:6d:be:ac:9c:8a:7e: 9f:ad:dc:e8:df:0a:d8:66:6d:85:86:6b:dc:7f:12: 9b:ad:38:9e:78:e5:ee:82:80:ae:03:cd:b0:05:e5: 62:a0:61:99:be:40:cd:1f:c9:40:8c:69:3a:bf:84: f1:84:84:fc:51:45:5d:d5:78:cf:38:ff:56:6c:62: 02:ef:3e:cb:cc:9a:bb:8e:0f:e2:59:55:51:c0:b3: 9c:e7:fc:89:9c:ab:50:7e:e0:14:a9:cb:34:29:ac: c7:23:11:03:8d:6e:45:47:b4:62:86:4e:b9:bb:04: ab:e4:46:04:2d:29:bc:3d:51:9d:6c:70:52:9d:59: ba:f6:48:c8:16:fc:9a:e1:65:b6:77:6d:5c:6b:9e: 47:0d:ad:da:29:22:fd:60:28:6b:94:8e:4d:4d:6d: 41:c7:28:5c:d7:ae:d1:90:76:49:bc:c5:40:9a:a5: 18:97:cf:80:70:47:fa:12:e3:ce:0b:49:14:5d:df: 40:1f:0d:aa:ac:75:6c:e8:8e:1a:78:86:a0:c4:f3: 0f:14:44:06:9b:b0:52:88:8e:b1:07:76:1e:9e:bb: 9c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C9:E2:68:2B:9D:B1:49:25:5A:62:3A:D0:4A:C4:12:4F:6A:55:A6 X509v3 Authority Key Identifier: keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/t8niaCudsUklWmI60ErEEk9qVaY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.11.1.0-212.11.5.255 212.11.7.0/24 212.11.11.0-212.11.12.255 212.11.14.0/23 212.11.45.0-212.11.47.255 212.11.50.0/23 212.11.53.0-212.11.54.255 212.11.57.0-212.11.59.255 Signature Algorithm: sha256WithRSAEncryption 2a:a3:8f:fc:03:eb:a2:a9:15:c6:87:e8:de:32:db:e9:7a:4c: e8:0e:45:e8:fb:87:ae:49:97:1a:fe:84:b0:b6:0e:6a:20:7a: bb:4e:31:77:ca:bd:54:96:7b:ee:77:30:a4:c2:b3:4e:6a:e0: b6:8e:81:c1:ca:92:bc:2b:03:c9:28:4f:1b:89:f4:89:8c:9e: 05:2a:76:00:73:4e:42:93:2c:66:9e:fe:90:4d:01:f5:47:ee: 97:cd:c1:a8:48:dd:96:d8:cd:88:c5:56:6a:61:76:fe:ad:b7: bd:e6:39:23:88:c5:23:0a:0e:41:b1:fa:e3:48:5a:b5:25:77: 39:89:1f:37:1b:e0:ce:d9:bc:8c:b2:65:12:93:be:2b:da:41: 8c:d0:db:65:08:44:ca:11:33:c7:6c:4e:2e:2f:20:66:8e:1c: 9b:1d:ab:f2:4f:ab:91:31:e1:8b:6c:91:d9:4a:4d:56:98:1b: 25:d3:89:db:49:6f:e9:34:7d:5a:d3:0e:5b:d0:67:af:99:c7: ba:fe:1f:c3:37:4f:ac:e5:cd:18:7c:df:6f:31:a8:19:85:0a: e1:fc:c3:e3:41:ab:42:9a:dc:ab:5a:01:dd:cc:57:4e:cf:3c: 01:33:51:a9:d1:7e:02:a6:ca:42:86:b4:95:d1:90:3c:70:8a: 20:a5:2a:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgISAZt/FBJ4WJAefSj8ZQHhv96wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NTRiNjE4M2U0NTk3NDhjODllZTU0MzFiOGYzMWRlNjky YWUzYjcwHhcNMjYwMTAyMTQxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2M5ZTI2ODJiOWRiMTQ5MjU1YTYyM2FkMDRhYzQxMjRmNmE1NWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFRCVRvgDKY50FuHpNGyvMWOupFa 1b4wqbHAJR8Js7JpypZOlqNtvqycin6frdzo3wrYZm2FhmvcfxKbrTieeOXugoCu A82wBeVioGGZvkDNH8lAjGk6v4TxhIT8UUVd1XjPOP9WbGIC7z7LzJq7jg/iWVVR wLOc5/yJnKtQfuAUqcs0KazHIxEDjW5FR7Rihk65uwSr5EYELSm8PVGdbHBSnVm6 9kjIFvya4WW2d21ca55HDa3aKSL9YChrlI5NTW1Bxyhc167RkHZJvMVAmqUYl8+A cEf6EuPOC0kUXd9AHw2qrHVs6I4aeIagxPMPFEQGm7BSiI6xB3YenrucDQIDAQAB o4ICWzCCAlcwHQYDVR0OBBYEFLfJ4mgrnbFJJVpiOtBKxBJPalWmMB8GA1UdIwQY MBaAFFlUthg+RZdIyJ7lQxuPMd5pKuO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMt ZDJhZGVlZDc1NWQ4LzEvdDhuaWFDdWRzVWtsV21JNjBFckVFazlxVmFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMtZDJhZGVlZDc1NWQ4 LzEvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBeBAIAATBYMAwDBADUCwED BAHUCwQDBADUCwcwDAMEANQLCwMEANQLDAMEAdQLDjAMAwQA1AstAwQE1AsgAwQB 1AsyMAwDBADUCzUDBADUCzYwDAMEANQLOQMEAtQLODANBgkqhkiG9w0BAQsFAAOC AQEAKqOP/AProqkVxofo3jLb6XpM6A5F6PuHrkmXGv6EsLYOaiB6u04xd8q9VJZ7 7ncwpMKzTmrgto6BwcqSvCsDyShPG4n0iYyeBSp2AHNOQpMsZp7+kE0B9Uful83B qEjdltjNiMVWamF2/q23veY5I4jFIwoOQbH640hatSV3OYkfNxvgztm8jLJlEpO+ K9pBjNDbZQhEyhEzx2xOLi8gZo4cmx2r8k+rkTHhi2yR2UpNVpgbJdOJ20lv6TR9 WtMOW9Bnr5nHuv4fwzdPrOXNGHzfbzGoGYUK4fzD40GrQprcq1oB3cxXTs88ATNR qdF+AqbKQoa0ldGQPHCKIKUqvg== -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:15 2026 by rpki-client