This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/5qofx5kn-ofCIj9o3NGivX2oyoc.roa File: 5qofx5kn-ofCIj9o3NGivX2oyoc.roa (raw, json) Hash identifier: 7NfNoXJjBTrvr3E7539ztDCcU2EbYZAvEuO82OgvQXg= Subject key identifier: E6:AA:1F:C7:99:27:FA:87:C2:22:3F:68:DC:D1:A2:BD:7D:A8:CA:87 Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847 Certificate serial: 019B7FF06BC640149A05DC4A9583810448E9 Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/5qofx5kn-ofCIj9o3NGivX2oyoc.roa Signing time: Fri 02 Jan 2026 18:20:21 +0000 ROA not before: Fri 02 Jan 2026 18:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47524 IP address blocks: 24.133.0.0/16 maxlen: 24 24.133.152.0/22 maxlen: 24 24.133.156.0/22 maxlen: 24 46.196.0.0/15 maxlen: 24 83.138.192.0/18 maxlen: 24 94.54.0.0/15 maxlen: 24 94.55.64.0/20 maxlen: 24 94.55.80.0/21 maxlen: 24 94.55.88.0/22 maxlen: 24 94.55.96.0/22 maxlen: 24 94.55.112.0/22 maxlen: 24 94.55.116.0/22 maxlen: 24 94.55.120.0/23 maxlen: 24 94.55.122.0/23 maxlen: 24 94.55.124.0/23 maxlen: 24 94.55.126.0/24 maxlen: 24 94.55.127.0/24 maxlen: 24 176.240.0.0/16 maxlen: 24 178.233.0.0/16 maxlen: 24 185.26.68.0/22 maxlen: 24 185.26.68.0/24 maxlen: 24 185.26.69.0/24 maxlen: 24 185.26.70.0/24 maxlen: 24 185.26.71.0/24 maxlen: 24 2a00:1d58::/29 maxlen: 48 2a00:1d58::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 08:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:6b:c6:40:14:9a:05:dc:4a:95:83:81:04:48:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847 Validity Not Before: Jan 2 18:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6aa1fc79927fa87c2223f68dcd1a2bd7da8ca87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:93:88:6a:bb:97:d1:88:f1:29:89:d4:ac:ac: 38:9a:96:82:31:19:94:27:87:8f:3b:55:e1:ac:ea: 73:a0:a8:f8:7f:6c:ac:58:93:3c:73:43:d5:d3:89: dd:d9:c2:98:9e:e0:b9:fd:4e:59:a8:3f:2c:de:e9: 39:79:2a:3f:b2:48:48:8c:78:e7:89:a9:a8:45:13: a3:6a:7a:8e:8c:e5:23:3b:0e:f7:05:45:1d:06:d4: fa:ed:cc:08:7a:7e:9c:05:31:91:b2:7a:54:4d:42: a4:a1:7a:38:e3:0d:e8:76:72:ef:97:0d:26:2e:61: 6f:4a:c2:af:1b:ba:42:58:27:87:27:2f:51:3f:da: 2c:f0:00:69:54:c5:79:ea:34:6a:a7:7a:c7:ef:01: 3b:42:85:81:7b:e6:43:ad:db:90:88:88:69:a2:43: 29:ce:34:8c:89:fa:03:78:3c:b5:ce:5d:50:c6:a7: 22:71:56:8d:a5:ad:8d:81:d1:a0:f5:68:78:ff:c7: b9:36:ff:60:76:55:f7:6b:63:4c:02:05:ae:67:df: e4:fd:98:39:b5:02:f7:3f:6b:bd:51:88:28:1e:81: d5:50:fc:37:c1:53:7a:06:88:f0:4c:c8:59:fc:1d: a9:5f:a7:dc:15:f3:0c:f9:bc:c2:30:21:cd:e2:1c: aa:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AA:1F:C7:99:27:FA:87:C2:22:3F:68:DC:D1:A2:BD:7D:A8:CA:87 X509v3 Authority Key Identifier: keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/5qofx5kn-ofCIj9o3NGivX2oyoc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.133.0.0/16 46.196.0.0/15 83.138.192.0/18 94.54.0.0/15 176.240.0.0/16 178.233.0.0/16 185.26.68.0/22 IPv6: 2a00:1d58::/29 Signature Algorithm: sha256WithRSAEncryption 3f:7d:7a:0f:a2:3f:1d:fe:ac:e1:16:11:3c:96:6d:37:ea:84: 22:63:f7:20:33:7a:8a:31:8b:37:34:32:5e:50:74:ed:1a:3f: d1:66:81:8b:8b:dc:f8:63:80:90:1b:bf:30:7c:ce:d1:1c:6f: a2:1e:9f:e0:18:71:da:5c:dd:9c:89:39:47:b2:b1:b1:67:ab: e6:6b:a9:46:36:47:b6:52:4c:34:d3:47:6c:36:38:f2:e0:7e: df:c1:a9:eb:1f:33:6b:a6:c3:a2:cb:26:82:14:dc:66:cd:1c: 67:79:93:13:8d:43:77:e8:8e:30:34:72:da:67:e1:7c:41:4e: df:a5:37:a9:22:59:ec:f6:dc:56:58:fc:a5:27:86:78:8a:cb: 5d:88:d6:e0:f2:42:e6:13:5a:4d:7f:d7:58:0f:ad:34:b1:86: fb:c5:33:34:75:8e:72:01:4d:2a:e0:43:a3:16:67:fd:7f:18: b0:11:b6:01:2a:1d:73:fc:13:a8:c6:f7:57:31:1a:2d:d5:f8: 57:03:df:e0:68:ac:e7:ea:6b:11:b1:4e:ee:4a:f6:4a:3f:5e: a4:6d:67:db:12:5d:28:50:34:a3:ad:04:e5:1e:ae:12:c5:d8: dd:70:cb:f6:10:26:23:1c:df:30:5e:81:a9:9c:43:68:76:34: 0e:1c:f0:ff -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt/8GvGQBSaBdxKlYOBBEjpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMGRhOWU3YWYwMWRlNzU0NDhmNDkwNmFhYzQxYmQyOTY0 ZTg4NDcwHhcNMjYwMTAyMTgyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmFhMWZjNzk5MjdmYTg3YzIyMjNmNjhkY2QxYTJiZDdkYThjYTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05OIaruX0YjxKYnUrKw4mpaCMRmU J4ePO1XhrOpzoKj4f2ysWJM8c0PV04nd2cKYnuC5/U5ZqD8s3uk5eSo/skhIjHjn iamoRROjanqOjOUjOw73BUUdBtT67cwIen6cBTGRsnpUTUKkoXo44w3odnLvlw0m LmFvSsKvG7pCWCeHJy9RP9os8ABpVMV56jRqp3rH7wE7QoWBe+ZDrduQiIhpokMp zjSMifoDeDy1zl1QxqcicVaNpa2NgdGg9Wh4/8e5Nv9gdlX3a2NMAgWuZ9/k/Zg5 tQL3P2u9UYgoHoHVUPw3wVN6BojwTMhZ/B2pX6fcFfMM+bzCMCHN4hyqkQIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFOaqH8eZJ/qHwiI/aNzRor19qMqHMB8GA1UdIwQY MBaAFCENqeevAd51RI9JBqrEG9KWTohHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mMjc4MjEtNGNjZi00ZDJlLThiMTUt NmUxMjc3NGY4NTFlLzEvNXFvZng1a24tb2ZDSWo5bzNOR2l2WDJveW9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9mMjc4MjEtNGNjZi00ZDJlLThiMTUtNmUxMjc3NGY4NTFl LzEvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDArBAIAATAlAwMAGIUDAwEu xAMEBlOKwAMDAV42AwMAsPADAwCy6QMEArkaRDANBAIAAjAHAwUDKgAdWDANBgkq hkiG9w0BAQsFAAOCAQEAP316D6I/Hf6s4RYRPJZtN+qEImP3IDN6ijGLNzQyXlB0 7Ro/0WaBi4vc+GOAkBu/MHzO0Rxvoh6f4Bhx2lzdnIk5R7KxsWer5mupRjZHtlJM NNNHbDY48uB+38Gp6x8za6bDossmghTcZs0cZ3mTE41Dd+iOMDRy2mfhfEFO36U3 qSJZ7PbcVlj8pSeGeIrLXYjW4PJC5hNaTX/XWA+tNLGG+8UzNHWOcgFNKuBDoxZn /X8YsBG2ASodc/wTqMb3VzEaLdX4VwPf4Gis5+prEbFO7kr2Sj9epG1n2xJdKFA0 o60E5R6uEsXY3XDL9hAmIxzfMF6BqZxDaHY0Dhzw/w== -----END CERTIFICATE-----Generated at Sat Jan 3 18:33:34 2026 by rpki-client