This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/H7bzuNwWAw0WqWgCEkaaWLBrXww.roa File: H7bzuNwWAw0WqWgCEkaaWLBrXww.roa (raw, json) Hash identifier: qJ814Ut9PCA48je680EM2s8Vg9S3+E4bblZcpYFDxgI= Subject key identifier: 1F:B6:F3:B8:DC:16:03:0D:16:A9:68:02:12:46:9A:58:B0:6B:5F:0C Certificate issuer: /CN=5efccd7d7e308f81807051f8d487e9d829c24868 Certificate serial: 019B7E391F09C9227F236BDED7FEF4EF5222 Authority key identifier: 5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/H7bzuNwWAw0WqWgCEkaaWLBrXww.roa Signing time: Fri 02 Jan 2026 10:20:31 +0000 ROA not before: Fri 02 Jan 2026 10:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12620 IP address blocks: 62.48.96.0/19 maxlen: 19 84.55.192.0/18 maxlen: 18 176.46.192.0/18 maxlen: 18 185.179.16.0/22 maxlen: 22 195.190.160.0/19 maxlen: 19 2001:4b00::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:1f:09:c9:22:7f:23:6b:de:d7:fe:f4:ef:52:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5efccd7d7e308f81807051f8d487e9d829c24868 Validity Not Before: Jan 2 10:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fb6f3b8dc16030d16a9680212469a58b06b5f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9c:cf:fe:46:88:5f:44:ec:17:cf:a5:e2:71: 0e:14:c0:71:dd:23:46:2c:83:2f:5d:13:fc:23:91: 3c:3c:6e:db:e0:db:86:14:e3:c3:90:b4:7a:c2:65: 30:c0:36:1b:2f:b6:31:22:61:93:f3:bf:37:a6:68: 5e:6f:d2:60:f8:19:d1:38:85:c0:d7:a6:77:20:33: a8:bd:aa:a8:ff:8c:25:9e:91:9a:24:27:ec:55:2c: 37:7b:ab:46:cd:11:2c:1e:1e:b9:95:ee:20:c9:2d: 12:93:36:b0:5b:55:7d:7e:f3:5b:b4:3b:ab:d2:ef: 7c:79:e3:dc:ca:fa:56:07:75:90:19:15:d5:dc:95: 2b:3c:94:b6:8f:a8:41:04:4b:62:60:cd:2d:3e:29: 9d:0f:ee:dc:64:22:2a:a4:82:0b:fd:6b:cc:12:19: f5:32:b6:bd:c5:78:a2:66:b2:80:68:b6:9b:97:36: e0:b7:a7:45:2c:80:4e:8a:58:5d:8f:d0:73:44:9e: ae:97:59:ea:32:23:56:57:c6:35:23:49:58:97:c0: df:b1:17:04:2b:cc:fc:bc:0e:46:b9:5d:71:21:02: 6a:f9:59:a1:12:4b:bf:d8:d8:78:b4:54:30:e6:90: d9:6e:f8:ce:27:0b:2d:fd:5c:39:f0:82:ab:ed:a2: 9b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B6:F3:B8:DC:16:03:0D:16:A9:68:02:12:46:9A:58:B0:6B:5F:0C X509v3 Authority Key Identifier: keyid:5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/H7bzuNwWAw0WqWgCEkaaWLBrXww.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.48.96.0/19 84.55.192.0/18 176.46.192.0/18 185.179.16.0/22 195.190.160.0/19 IPv6: 2001:4b00::/29 Signature Algorithm: sha256WithRSAEncryption 2b:8e:a6:df:79:36:22:40:52:b7:8d:8b:77:f5:84:f4:27:96: fb:06:1e:c1:72:1f:ef:ed:8c:62:df:cc:fa:72:2b:52:8b:fe: 90:70:18:55:1f:eb:88:16:ee:c4:fb:2e:10:5a:03:52:5e:7f: 62:ed:9b:20:b9:b6:fb:90:99:3b:28:8a:7a:c5:d3:ea:bb:89: 0f:e1:01:d7:a1:39:4c:07:f8:f4:82:7b:34:b6:03:6f:93:fc: de:cb:dd:61:98:33:35:d9:92:27:66:8e:3e:79:e0:41:4e:ed: 84:0f:13:e0:00:fd:dd:0a:42:2b:2e:84:a9:ff:f6:38:01:ea: ed:a1:fe:b2:e6:8d:bf:eb:54:72:7d:dd:02:6e:3c:a5:15:52: 22:de:39:c1:08:78:75:36:8e:e6:0a:31:23:c4:8e:a9:17:92: 4c:36:59:8f:f9:9c:5f:ed:ca:89:bc:55:de:09:16:45:53:7d: d8:39:c3:91:89:59:9e:28:58:80:6c:47:76:f3:1b:dd:10:96: c9:1e:1f:3d:b0:98:e5:97:3f:ac:72:60:86:da:de:c0:85:6a: a5:a0:49:32:86:b8:9d:d8:5d:0d:08:a1:18:5f:19:dc:da:50: b0:7b:3a:5f:6a:83:34:60:88:db:96:63:22:5c:77:c5:7f:16: 80:67:53:72 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt+OR8JySJ/I2ve1/7071IiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZmNjZDdkN2UzMDhmODE4MDcwNTFmOGQ0ODdlOWQ4Mjlj MjQ4NjgwHhcNMjYwMTAyMTAyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmI2ZjNiOGRjMTYwMzBkMTZhOTY4MDIxMjQ2OWE1OGIwNmI1ZjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopzP/kaIX0TsF8+l4nEOFMBx3SNG LIMvXRP8I5E8PG7b4NuGFOPDkLR6wmUwwDYbL7YxImGT8783pmheb9Jg+BnROIXA 16Z3IDOovaqo/4wlnpGaJCfsVSw3e6tGzREsHh65le4gyS0SkzawW1V9fvNbtDur 0u98eePcyvpWB3WQGRXV3JUrPJS2j6hBBEtiYM0tPimdD+7cZCIqpIIL/WvMEhn1 Mra9xXiiZrKAaLablzbgt6dFLIBOilhdj9BzRJ6ul1nqMiNWV8Y1I0lYl8DfsRcE K8z8vA5GuV1xIQJq+VmhEku/2Nh4tFQw5pDZbvjOJwst/Vw58IKr7aKbEwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFB+287jcFgMNFqloAhJGmliwa18MMB8GA1UdIwQY MBaAFF78zX1+MI+BgHBR+NSH6dgpwkhoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHZ6TmZYNHdqNEdBY0ZINDFJZnAyQ25DU0dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81OTY1MGQtYzkzNS00YWE5LTk4MDQt ZDFiZDA2ZjViZjAwLzEvSDdienVOd1dBdzBXcVdnQ0VrYWFXTEJyWHd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS81OTY1MGQtYzkzNS00YWE5LTk4MDQtZDFiZDA2ZjViZjAw LzEvWHZ6TmZYNHdqNEdBY0ZINDFJZnAyQ25DU0dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQFPjBgAwQG VDfAAwQGsC7AAwQCubMQAwQFw76gMA0EAgACMAcDBQMgAUsAMA0GCSqGSIb3DQEB CwUAA4IBAQArjqbfeTYiQFK3jYt39YT0J5b7Bh7Bch/v7Yxi38z6citSi/6QcBhV H+uIFu7E+y4QWgNSXn9i7Zsgubb7kJk7KIp6xdPqu4kP4QHXoTlMB/j0gns0tgNv k/zey91hmDM12ZInZo4+eeBBTu2EDxPgAP3dCkIrLoSp//Y4Aertof6y5o2/61Ry fd0CbjylFVIi3jnBCHh1No7mCjEjxI6pF5JMNlmP+Zxf7cqJvFXeCRZFU33YOcOR iVmeKFiAbEd28xvdEJbJHh89sJjllz+scmCG2t7AhWqloEkyhrid2F0NCKEYXxnc 2lCwezpfaoM0YIjblmMiXHfFfxaAZ1Ny -----END CERTIFICATE-----Generated at Tue Feb 10 01:04:37 2026 by rpki-client