This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/v5XfI_EgEYDKfXz7O68-YeUVqdQ.roa File: v5XfI_EgEYDKfXz7O68-YeUVqdQ.roa (raw, json) Hash identifier: kvZ5cVMi6mO1HeA+gU60JgsRwkpMJcWiJ8FVL2dSw7k= Subject key identifier: BF:95:DF:23:F1:20:11:80:CA:7D:7C:FB:3B:AF:3E:61:E5:15:A9:D4 Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b Certificate serial: 019B7F83510AE5A15FFA33EA9BB7193C318F Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/v5XfI_EgEYDKfXz7O68-YeUVqdQ.roa Signing time: Fri 02 Jan 2026 16:21:10 +0000 ROA not before: Fri 02 Jan 2026 16:21:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61333 IP address blocks: 94.228.96.0/20 maxlen: 24 94.228.96.0/24 maxlen: 24 94.228.98.0/24 maxlen: 24 94.228.100.0/24 maxlen: 24 94.228.102.0/24 maxlen: 24 94.228.103.0/24 maxlen: 24 94.228.104.0/24 maxlen: 24 94.228.105.0/24 maxlen: 24 94.228.107.0/24 maxlen: 24 94.228.108.0/24 maxlen: 24 94.228.110.0/24 maxlen: 24 149.126.64.0/21 maxlen: 24 149.126.64.0/24 maxlen: 24 149.126.65.0/24 maxlen: 24 149.126.66.0/24 maxlen: 24 149.126.67.0/24 maxlen: 24 149.126.70.0/24 maxlen: 24 185.251.52.0/24 maxlen: 24 185.251.53.0/24 maxlen: 24 185.251.54.0/24 maxlen: 24 194.169.198.0/24 maxlen: 24 2a00:e30::/41 maxlen: 41 2a00:e30:64::/64 maxlen: 64 2a00:e30:80::/41 maxlen: 64 2a00:e30:280::/41 maxlen: 41 2a00:e30:a00::/40 maxlen: 48 2a00:e30:2100::/41 maxlen: 41 2a00:e30:3000::/41 maxlen: 41 2a00:e30:6900::/41 maxlen: 41 2a00:e30:ed00::/41 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:51:0a:e5:a1:5f:fa:33:ea:9b:b7:19:3c:31:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b Validity Not Before: Jan 2 16:21:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf95df23f1201180ca7d7cfb3baf3e61e515a9d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c1:5d:88:ed:70:6a:87:7c:85:bb:b4:bf:cd: ff:a9:b8:33:91:5b:9a:7e:83:18:50:f2:29:5b:6a: ee:5c:60:d7:63:e1:e4:c6:cb:20:fe:98:09:bd:57: 49:28:2a:66:f6:50:16:88:b4:eb:cb:86:97:37:00: f3:e2:b8:d7:fc:27:67:24:76:19:b6:23:eb:da:8f: bf:92:cf:86:04:63:03:36:8b:6d:e1:a4:93:ce:f1: 44:52:48:31:3f:22:7b:71:6e:fd:84:57:59:e4:16: e3:6d:fa:b9:82:af:2f:91:3a:60:59:89:1a:46:7c: 26:0f:1f:65:f9:54:ca:90:29:ba:8f:ef:66:47:c0: fe:5a:a2:10:df:62:50:50:89:be:be:cd:98:98:e3: aa:0c:48:c1:76:c0:b3:14:7d:5c:a2:78:cf:70:6f: e7:51:5f:9a:cf:62:88:ac:92:75:db:86:1c:d7:18: c7:f5:97:a7:b3:9f:6e:57:f9:3f:55:8f:e9:90:a9: f5:bc:70:f5:21:f4:28:d1:62:bb:8a:86:45:f5:84: 3b:26:f1:77:e3:e7:fe:48:13:e1:0e:c0:58:f9:da: 11:7c:fb:2b:da:6c:e2:75:45:b8:77:8c:3f:a5:1b: 43:3d:b4:e2:55:0b:4c:f8:33:99:9e:21:30:35:48: 95:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:95:DF:23:F1:20:11:80:CA:7D:7C:FB:3B:AF:3E:61:E5:15:A9:D4 X509v3 Authority Key Identifier: keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/v5XfI_EgEYDKfXz7O68-YeUVqdQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.228.96.0/20 149.126.64.0/21 185.251.52.0-185.251.54.255 194.169.198.0/24 IPv6: 2a00:e30::/40 2a00:e30:280::/41 2a00:e30:a00::/40 2a00:e30:2100::/41 2a00:e30:3000::/41 2a00:e30:6900::/41 2a00:e30:ed00::/41 Signature Algorithm: sha256WithRSAEncryption 29:91:63:eb:28:92:6a:13:10:d8:82:d2:d8:ef:01:f2:a5:11: 9b:86:f0:fb:66:ef:21:33:ec:17:de:b3:7c:0a:34:86:01:b5: 77:35:b0:5a:44:58:e6:94:cd:ac:b8:f5:f6:79:12:2d:cc:1a: b4:a5:5f:a0:f6:7f:42:11:d6:15:a4:9c:cd:cb:55:3c:27:6c: f1:15:30:2c:9f:51:ec:0f:d6:6f:cf:99:7f:2c:91:24:ad:52: 2d:05:60:73:34:0e:92:d7:7a:dd:e1:e5:14:c1:76:b4:6f:78: a0:18:f7:ad:19:47:f9:73:f9:bb:10:c9:af:3e:7e:3d:1a:87: b0:32:57:0c:f3:99:e4:27:88:aa:76:a8:e5:02:ec:08:e7:97: fa:44:19:c0:3d:02:3c:7d:82:cd:12:f8:ba:ce:bf:55:a8:28: 88:dc:fb:f5:0f:55:87:67:ef:30:4a:d6:84:07:38:69:cc:7c: ac:5d:91:f8:93:bd:28:f3:17:23:02:76:4f:36:cf:b1:a0:28: ef:48:61:30:f2:d0:e3:01:57:eb:53:09:12:5a:df:eb:f3:20: 5f:fa:00:66:b4:cd:cd:9b:43:06:d3:ad:1a:2b:b4:4c:e4:3e: 34:b8:4d:9e:a1:c4:f7:d2:b8:04:f3:2e:e7:89:58:3c:4d:34: ac:85:01:3d -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgISAZt/g1EK5aFf+jPqm7cZPDGPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMzUyNmFkOWZiZWM1NzRmYTRlYzNkOWJhZGI1NDMzZmRh YWNhN2IwHhcNMjYwMTAyMTYyMTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjk1ZGYyM2YxMjAxMTgwY2E3ZDdjZmIzYmFmM2U2MWU1MTVhOWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8FdiO1waod8hbu0v83/qbgzkVua foMYUPIpW2ruXGDXY+Hkxssg/pgJvVdJKCpm9lAWiLTry4aXNwDz4rjX/CdnJHYZ tiPr2o+/ks+GBGMDNott4aSTzvFEUkgxPyJ7cW79hFdZ5Bbjbfq5gq8vkTpgWYka RnwmDx9l+VTKkCm6j+9mR8D+WqIQ32JQUIm+vs2YmOOqDEjBdsCzFH1conjPcG/n UV+az2KIrJJ124Yc1xjH9Zens59uV/k/VY/pkKn1vHD1IfQo0WK7ioZF9YQ7JvF3 4+f+SBPhDsBY+doRfPsr2mzidUW4d4w/pRtDPbTiVQtM+DOZniEwNUiV3QIDAQAB o4ICaDCCAmQwHQYDVR0OBBYEFL+V3yPxIBGAyn18+zuvPmHlFanUMB8GA1UdIwQY MBaAFGI1Jq2fvsV0+k7D2brbVDP9qsp7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xZDhmYzktYjIxYi00ZGI1LTk1Y2Yt ODFjOGNlNzUwMTI0LzEvdjVYZklfRWdFWURLZlh6N082OC1ZZVVWcWRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8xZDhmYzktYjIxYi00ZGI1LTk1Y2YtODFjOGNlNzUwMTI0 LzEvWWpVbXJaLS14WFQ2VHNQWnV0dFVNXzJxeW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH4GCCsGAQUFBwEHAQH/BG8wbTAmBAIAATAgAwQEXuRgAwQD lX5AMAwDBAK5+zQDBAC5+zYDBADCqcYwQwQCAAIwPQMGACoADjAAAwcHKgAOMAKA AwYAKgAOMAoDBwcqAA4wIQADBwcqAA4wMAADBwcqAA4waQADBwcqAA4w7QAwDQYJ KoZIhvcNAQELBQADggEBACmRY+sokmoTENiC0tjvAfKlEZuG8Ptm7yEz7Bfes3wK NIYBtXc1sFpEWOaUzay49fZ5Ei3MGrSlX6D2f0IR1hWknM3LVTwnbPEVMCyfUewP 1m/PmX8skSStUi0FYHM0DpLXet3h5RTBdrRveKAY960ZR/lz+bsQya8+fj0ah7Ay VwzzmeQniKp2qOUC7Ajnl/pEGcA9Ajx9gs0S+LrOv1WoKIjc+/UPVYdn7zBK1oQH OGnMfKxdkfiTvSjzFyMCdk82z7GgKO9IYTDy0OMBV+tTCRJa3+vzIF/6AGa0zc2b QwbTrRortEzkPjS4TZ6hxPfSuATzLueJWDxNNKyFAT0= -----END CERTIFICATE-----Generated at Tue Feb 10 04:30:52 2026 by rpki-client