This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/RTTvZ91An04BzsZrcK7X2zCFClc.roa File: RTTvZ91An04BzsZrcK7X2zCFClc.roa (raw, json) Hash identifier: kCKXhl0NYkaUuNNKlZZSKElx8syewh/z7QdIGywZE+c= Subject key identifier: 45:34:EF:67:DD:40:9F:4E:01:CE:C6:6B:70:AE:D7:DB:30:85:0A:57 Certificate issuer: /CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129 Certificate serial: 019B7F1480DCBF82086299A2980F14EC12AC Authority key identifier: E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/RTTvZ91An04BzsZrcK7X2zCFClc.roa Signing time: Fri 02 Jan 2026 14:20:08 +0000 ROA not before: Fri 02 Jan 2026 14:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 91.246.46.0/24 maxlen: 24 185.108.84.0/23 maxlen: 23 185.108.85.0/24 maxlen: 24 194.56.235.0/24 maxlen: 24 194.56.240.0/24 maxlen: 24 194.56.245.0/24 maxlen: 24 2a04:88c0::/30 maxlen: 30 2a04:88c0::/48 maxlen: 48 2a04:88c0:2::/48 maxlen: 48 2a04:88c0:3::/48 maxlen: 48 2a04:88c0:4::/48 maxlen: 48 2a04:88c0:5::/48 maxlen: 48 2a04:88c0:6::/48 maxlen: 48 2a04:88c0:7::/48 maxlen: 48 2a04:88c0:8::/48 maxlen: 48 2a04:88c0:9::/48 maxlen: 48 2a04:88c0:10::/48 maxlen: 48 2a04:88c0:11::/48 maxlen: 48 2a04:88c0:12::/48 maxlen: 48 2a04:88c0:13::/48 maxlen: 48 2a04:88c1::/32 maxlen: 32 2a04:88c2::/32 maxlen: 32 2a0d:6100::/29 maxlen: 29 2a0f:48c0::/29 maxlen: 29 2a0f:8680::/29 maxlen: 29 2a0f:a940::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:80:dc:bf:82:08:62:99:a2:98:0f:14:ec:12:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129 Validity Not Before: Jan 2 14:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4534ef67dd409f4e01cec66b70aed7db30850a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:22:be:66:d4:e6:c4:40:fb:99:d9:46:12:83: 2f:99:0c:df:99:9e:2d:4b:5c:7c:e1:49:1a:30:c1: 3d:03:e0:f1:2e:e8:48:9d:ef:69:58:d2:fb:4c:0b: 3d:e4:e2:f9:45:31:6b:f9:bb:a1:a0:4d:30:f4:7b: 76:ae:1d:bf:c9:8f:72:60:44:c3:cd:1a:ef:a4:80: 16:c4:5d:a0:0e:a5:b5:0e:66:fb:82:f6:9c:fe:9a: f0:bb:09:3d:ef:0d:a6:ab:71:31:26:c5:93:02:58: ba:0b:e6:05:4f:7a:67:1f:0d:cc:e5:bf:ee:57:8f: 97:38:b8:30:76:06:8b:b0:61:b6:1b:f9:11:9b:68: c1:84:05:f4:7f:2d:d6:74:43:b3:9c:67:4a:1d:31: 03:a6:18:13:9d:01:6d:d4:0e:f0:0e:cb:e5:bc:60: c1:9d:4c:fe:cc:9d:45:9c:2f:d0:ae:7b:cf:71:64: 8c:98:56:04:1c:ef:b0:85:63:cf:74:3e:61:05:8f: 69:b4:32:0e:7e:f1:02:ea:e0:c9:81:03:d0:49:56: 51:bb:bc:97:3a:49:37:19:d9:ea:3f:ff:47:a5:53: 01:dc:7f:ad:3c:24:5d:0d:91:20:42:a3:05:1c:1e: 0d:ed:20:5c:c5:1a:6c:18:af:28:4f:5b:07:20:9e: 13:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:34:EF:67:DD:40:9F:4E:01:CE:C6:6B:70:AE:D7:DB:30:85:0A:57 X509v3 Authority Key Identifier: keyid:E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/RTTvZ91An04BzsZrcK7X2zCFClc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.246.46.0/24 185.108.84.0/23 194.56.235.0/24 194.56.240.0/24 194.56.245.0/24 IPv6: 2a04:88c0::/30 2a0d:6100::/29 2a0f:48c0::/29 2a0f:8680::/29 2a0f:a940::/29 Signature Algorithm: sha256WithRSAEncryption cb:ef:28:40:6a:a1:fe:74:ac:f5:f6:9e:3d:1b:f3:e9:a8:07: 57:b3:55:32:81:ba:70:0f:7f:27:6b:94:0c:b6:21:5b:c3:2a: 6b:7f:07:26:a3:fb:fc:4e:e4:9e:5b:c0:27:3d:5c:21:9f:b5: a8:9a:4a:b5:88:d7:6e:c8:63:ac:e9:e5:d2:66:e4:53:0a:89: ff:01:20:2e:f4:75:3a:25:75:c0:8b:83:3d:30:2b:b0:46:6d: e5:c5:4a:54:ca:e8:ff:c0:64:1f:7a:34:82:ff:ed:22:8b:48: c2:fc:d1:72:1f:21:e2:4d:34:01:8e:95:86:f8:22:e7:06:0b: d4:3e:fb:5a:48:54:51:bd:0b:df:f2:7c:9a:cd:04:03:f0:50: 89:db:0e:64:25:0d:4c:a4:af:4b:96:b6:04:cf:20:83:0e:b1: bc:a1:b8:47:ab:0d:e7:43:60:9a:6c:3e:6e:d0:4e:85:70:82: de:46:2f:df:b4:6b:a7:b6:d7:fc:3c:89:3c:3c:06:07:34:56: 10:d9:98:b7:cc:a6:1f:5a:d9:92:ae:92:e6:11:6e:d5:ae:6c: e0:1b:1a:25:20:f3:52:dd:2c:24:55:dd:23:3a:97:bd:dc:7a: 36:a1:ca:94:8b:bd:91:13:cb:25:ff:1a:ef:a6:b9:e2:69:b4: 7e:1d:85:71 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgISAZt/FIDcv4IIYpmimA8U7BKsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYzViYjNkYTUzNDM1YmY0MWUxN2Y3ZGVjNDdkNDQ4NGU3 ZjMxMjkwHhcNMjYwMTAyMTQyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTM0ZWY2N2RkNDA5ZjRlMDFjZWM2NmI3MGFlZDdkYjMwODUwYTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiK+ZtTmxED7mdlGEoMvmQzfmZ4t S1x84UkaMME9A+DxLuhIne9pWNL7TAs95OL5RTFr+buhoE0w9Ht2rh2/yY9yYETD zRrvpIAWxF2gDqW1Dmb7gvac/prwuwk97w2mq3ExJsWTAli6C+YFT3pnHw3M5b/u V4+XOLgwdgaLsGG2G/kRm2jBhAX0fy3WdEOznGdKHTEDphgTnQFt1A7wDsvlvGDB nUz+zJ1FnC/QrnvPcWSMmFYEHO+whWPPdD5hBY9ptDIOfvEC6uDJgQPQSVZRu7yX Okk3GdnqP/9HpVMB3H+tPCRdDZEgQqMFHB4N7SBcxRpsGK8oT1sHIJ4TvwIDAQAB o4ICTDCCAkgwHQYDVR0OBBYEFEU072fdQJ9OAc7Ga3Cu19swhQpXMB8GA1UdIwQY MBaAFODFuz2lNDW/QeF/fexH1EhOfzEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE1XN1BhVTBOYjlCNFg5OTdFZlVTRTVfTVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83ZjdkOGYtMGRjOC00NWEyLWJjMTYt ODBhZGQ5ZWEzZTVjLzEvUlRUdlo5MUFuMDRCenNacmNLN1gyekNGQ2xjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83ZjdkOGYtMGRjOC00NWEyLWJjMTYtODBhZGQ5ZWEzZTVj LzEvNE1XN1BhVTBOYjlCNFg5OTdFZlVTRTVfTVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGIGCCsGAQUFBwEHAQH/BFMwUTAkBAIAATAeAwQAW/YuAwQB uWxUAwQAwjjrAwQAwjjwAwQAwjj1MCkEAgACMCMDBQIqBIjAAwUDKg1hAAMFAyoP SMADBQMqD4aAAwUDKg+pQDANBgkqhkiG9w0BAQsFAAOCAQEAy+8oQGqh/nSs9fae PRvz6agHV7NVMoG6cA9/J2uUDLYhW8Mqa38HJqP7/E7knlvAJz1cIZ+1qJpKtYjX bshjrOnl0mbkUwqJ/wEgLvR1OiV1wIuDPTArsEZt5cVKVMro/8BkH3o0gv/tIotI wvzRch8h4k00AY6Vhvgi5wYL1D77WkhUUb0L3/J8ms0EA/BQidsOZCUNTKSvS5a2 BM8ggw6xvKG4R6sN50Ngmmw+btBOhXCC3kYv37Rrp7bX/DyJPDwGBzRWENmYt8ym H1rZkq6S5hFu1a5s4BsaJSDzUt0sJFXdIzqXvdx6NqHKlIu9kRPLJf8a76a54mm0 fh2FcQ== -----END CERTIFICATE-----Generated at Mon Jan 19 16:50:39 2026 by rpki-client