This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/s5Aba34aWqyN0NdTLOhM3Uae9Ks.roa File: s5Aba34aWqyN0NdTLOhM3Uae9Ks.roa (raw, json) Hash identifier: 9SQoDZzqv1EeYPtHTjtGPqXq8iWnUavkQUs9luuG8XE= Subject key identifier: B3:90:1B:6B:7E:1A:5A:AC:8D:D0:D7:53:2C:E8:4C:DD:46:9E:F4:AB Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714 Certificate serial: 019B7EA47928D6CA36E3F6DF0DC81CA49B38 Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/s5Aba34aWqyN0NdTLOhM3Uae9Ks.roa Signing time: Fri 02 Jan 2026 12:17:46 +0000 ROA not before: Fri 02 Jan 2026 12:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49332 IP address blocks: 5.57.64.0/21 maxlen: 22 80.243.144.0/20 maxlen: 21 86.111.64.0/20 maxlen: 21 86.111.84.0/23 maxlen: 24 91.212.203.0/24 maxlen: 24 176.32.0.0/21 maxlen: 22 176.39.64.0/19 maxlen: 20 176.39.64.0/20 maxlen: 21 188.190.32.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:79:28:d6:ca:36:e3:f6:df:0d:c8:1c:a4:9b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714 Validity Not Before: Jan 2 12:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3901b6b7e1a5aac8dd0d7532ce84cdd469ef4ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:13:9f:23:ac:d8:b1:9e:66:8a:3f:11:bf:51: d1:23:c7:3e:a9:00:23:06:3a:f4:76:32:8c:7d:5e: a2:2a:02:47:72:75:f0:21:8f:00:de:39:7e:52:d8: b9:9f:76:4b:16:0e:b6:72:3b:b0:ac:7f:42:48:f3: b6:eb:6c:3d:d1:33:a3:8a:b9:7d:72:e8:d0:08:c1: f4:50:b7:ac:1f:40:f2:89:18:28:bd:04:76:4d:aa: ff:9f:52:e3:af:20:75:d9:21:33:0e:b9:29:c4:94: 32:f1:0a:bd:3a:b8:f0:73:11:23:b0:bc:25:0a:91: 40:c9:28:a5:a9:be:eb:57:26:67:68:f5:17:3c:f9: d4:0f:24:a8:82:b9:91:57:9b:d5:ab:5e:57:3d:c4: d0:a1:bb:e2:4b:e1:56:ed:32:2b:86:26:b0:65:d3: 99:f0:cf:05:ca:8d:c6:e0:31:40:59:62:10:fe:e8: 2c:a1:af:eb:4f:34:64:b3:b1:4b:a3:b5:4c:9a:28: c7:e7:26:45:81:d8:03:ae:dc:68:df:90:fb:d4:02: 2f:63:a5:61:98:f7:5c:b7:0f:c2:81:c9:18:43:57: 8d:8d:f2:3d:a7:60:de:68:d1:f1:ff:9e:92:1e:6f: 09:9e:44:f3:72:dd:16:c3:b4:b5:4e:08:c0:45:7a: 31:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:90:1B:6B:7E:1A:5A:AC:8D:D0:D7:53:2C:E8:4C:DD:46:9E:F4:AB X509v3 Authority Key Identifier: keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/s5Aba34aWqyN0NdTLOhM3Uae9Ks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.57.64.0/21 80.243.144.0/20 86.111.64.0/20 86.111.84.0/23 91.212.203.0/24 176.32.0.0/21 176.39.64.0/19 188.190.32.0/19 Signature Algorithm: sha256WithRSAEncryption 8f:cc:f4:5f:f1:f2:e7:e0:ee:8a:b3:e8:be:c4:43:2d:af:e5: 39:5a:27:12:7c:63:0e:8a:fa:e8:fc:9b:49:90:f6:15:11:fa: 1b:89:be:7a:74:0b:a3:42:ce:7a:61:5f:82:3f:e5:6d:2a:bd: c2:61:8a:82:d2:37:5d:1d:4d:e9:d2:67:f7:b0:4a:3a:c1:eb: ab:c7:74:2e:37:94:90:3a:52:53:4c:57:d2:db:ea:df:7e:36: 33:44:26:75:92:a7:1f:99:77:51:b4:fd:5b:05:4c:2f:39:57: 2b:89:44:7a:5c:4f:9d:8b:ee:27:8b:1c:a6:11:23:78:20:35: 48:a2:0f:62:4b:ff:53:df:3f:3e:24:cb:48:c8:d7:49:55:00: 7e:d7:2f:a1:85:05:6b:b0:b5:45:e1:3b:d5:fd:3b:50:6e:bb: f3:4c:32:fe:ed:bb:6c:fa:c4:f1:8c:d9:21:1b:3b:af:f3:ec: 2c:31:5f:fd:e6:15:cd:cd:97:9a:8e:07:16:61:ce:37:98:03: 39:45:e5:26:4e:99:43:72:3a:bd:f6:9c:f2:4a:78:a2:3c:5d: 67:e0:5a:b0:4e:82:e8:1a:bc:b3:d6:23:d4:9c:ab:fa:ce:3d: d7:cc:be:2b:54:2b:ea:37:d0:49:1e:0a:2c:46:b6:59:89:21: 7b:38:7a:c7 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt+pHko1so24/bfDcgcpJs4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NDEyODE0NmI3YmVjOGJkMTE4NWJiZTBjM2I5MzQwYWFm NWI3MTQwHhcNMjYwMTAyMTIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzkwMWI2YjdlMWE1YWFjOGRkMGQ3NTMyY2U4NGNkZDQ2OWVmNGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBOfI6zYsZ5mij8Rv1HRI8c+qQAj Bjr0djKMfV6iKgJHcnXwIY8A3jl+Uti5n3ZLFg62cjuwrH9CSPO262w90TOjirl9 cujQCMH0ULesH0DyiRgovQR2Tar/n1LjryB12SEzDrkpxJQy8Qq9OrjwcxEjsLwl CpFAySilqb7rVyZnaPUXPPnUDySogrmRV5vVq15XPcTQobviS+FW7TIrhiawZdOZ 8M8Fyo3G4DFAWWIQ/ugsoa/rTzRks7FLo7VMmijH5yZFgdgDrtxo35D71AIvY6Vh mPdctw/CgckYQ1eNjfI9p2DeaNHx/56SHm8JnkTzct0Ww7S1TgjARXoxJwIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFLOQG2t+GlqsjdDXUyzoTN1GnvSrMB8GA1UdIwQY MBaAFPhBKBRre+yL0Rhbvgw7k0Cq9bcUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1FRW9GR3Q3N0l2UkdGdS1ERHVUUUtyMXR4US5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvZmIyNDExLTQ4NWItNDE0My05MjQx LTEzODM5NjQwYTYwNC8xL3M1QWJhMzRhV3F5TjBOZFRMT2hNM1VhZTlLcy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjIvZmIyNDExLTQ4NWItNDE0My05MjQxLTEzODM5NjQwYTYw NC8xLzEtRUVvRkd0NzdJdlJHRnUtRER1VFFLcjF0eFEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwSQYIKwYBBQUHAQcBAf8EOjA4MDYEAgABMDADBAMFOUAD BARQ85ADBARWb0ADBAFWb1QDBABb1MsDBAOwIAADBAWwJ0ADBAW8viAwDQYJKoZI hvcNAQELBQADggEBAI/M9F/x8ufg7oqz6L7EQy2v5TlaJxJ8Yw6K+uj8m0mQ9hUR +huJvnp0C6NCznphX4I/5W0qvcJhioLSN10dTenSZ/ewSjrB66vHdC43lJA6UlNM V9Lb6t9+NjNEJnWSpx+Zd1G0/VsFTC85VyuJRHpcT52L7ieLHKYRI3ggNUiiD2JL /1PfPz4ky0jI10lVAH7XL6GFBWuwtUXhO9X9O1Buu/NMMv7tu2z6xPGM2SEbO6/z 7CwxX/3mFc3Nl5qOBxZhzjeYAzlF5SZOmUNyOr32nPJKeKI8XWfgWrBOgugavLPW I9Scq/rOPdfMvitUK+o30EkeCixGtlmJIXs4esc= -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:37 2026 by rpki-client