This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/6iTvmc7lV2G7YIaiQMU-s4NK7GE.roa File: 6iTvmc7lV2G7YIaiQMU-s4NK7GE.roa (raw, json) Hash identifier: v/QGU12lL7jXnFdRXhuFEp2CT8RQFfRo1Ne+cIb2yis= Subject key identifier: EA:24:EF:99:CE:E5:57:61:BB:60:86:A2:40:C5:3E:B3:83:4A:EC:61 Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Certificate serial: 019B7BA3C60BA2766F2B2EE7B8E176DD88FE Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/6iTvmc7lV2G7YIaiQMU-s4NK7GE.roa Signing time: Thu 01 Jan 2026 22:18:09 +0000 ROA not before: Thu 01 Jan 2026 22:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41368 IP address blocks: 5.34.128.0/19 maxlen: 24 5.183.184.0/22 maxlen: 24 89.29.128.0/20 maxlen: 20 89.29.129.0/24 maxlen: 24 89.29.132.0/24 maxlen: 24 89.29.133.0/24 maxlen: 24 89.29.135.0/24 maxlen: 24 89.29.144.0/21 maxlen: 21 89.29.149.0/24 maxlen: 24 89.29.150.0/24 maxlen: 24 89.29.151.0/24 maxlen: 24 89.29.152.0/22 maxlen: 22 89.29.155.0/24 maxlen: 24 89.29.156.0/24 maxlen: 24 89.29.157.0/24 maxlen: 24 89.29.158.0/24 maxlen: 24 89.29.159.0/24 maxlen: 24 89.29.232.0/22 maxlen: 22 89.29.233.0/24 maxlen: 24 89.29.234.0/24 maxlen: 24 89.29.236.0/22 maxlen: 22 89.29.254.0/24 maxlen: 24 176.57.104.0/22 maxlen: 22 176.57.108.0/22 maxlen: 22 176.57.108.0/24 maxlen: 24 176.57.110.0/23 maxlen: 23 185.40.37.0/24 maxlen: 24 185.40.38.0/23 maxlen: 24 185.64.243.0/24 maxlen: 24 185.74.240.0/22 maxlen: 24 185.93.80.0/22 maxlen: 24 185.123.56.0/22 maxlen: 24 185.145.40.0/22 maxlen: 24 185.214.136.0/22 maxlen: 24 185.214.138.0/24 maxlen: 24 188.92.124.0/22 maxlen: 24 193.56.164.0/22 maxlen: 24 212.119.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c6:0b:a2:76:6f:2b:2e:e7:b8:e1:76:dd:88:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Validity Not Before: Jan 1 22:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea24ef99cee55761bb6086a240c53eb3834aec61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0b:c5:67:d6:29:eb:20:95:5f:60:06:b4:e4: be:bd:24:16:e7:fb:f1:91:5c:2f:20:72:7d:2f:12: ae:b9:4d:15:a5:d0:a7:88:e1:d2:8b:09:f4:d5:41: 31:31:3d:16:fb:7b:0d:78:87:7b:af:50:5d:b6:90: f2:c0:de:b0:35:1b:26:e0:7f:31:56:fa:6c:24:39: 30:e2:7f:44:be:11:ef:8c:26:70:b5:f2:de:36:d9: ea:b7:cc:e8:7a:78:74:79:60:a9:79:3f:9a:ec:6b: 98:55:59:27:c6:0f:8f:91:ba:31:ad:58:ab:33:7e: 53:0f:e7:f8:ed:cd:af:f5:a7:be:03:d2:df:76:54: c7:73:6d:a8:ee:1f:b8:8c:1b:db:99:fb:b8:fa:40: 37:a9:db:10:8c:45:0c:06:69:12:59:31:97:21:bc: 63:d2:43:8a:37:fc:5a:4b:01:a6:b5:a7:4f:e6:51: 9c:df:f6:12:31:77:2b:0e:79:ba:4c:26:87:bf:5a: 71:a7:15:25:a4:0b:b9:93:c9:ec:f0:80:2c:a1:c4: cd:13:00:0b:ab:e0:e3:80:5c:14:44:c7:f7:4d:03: c6:69:2b:eb:01:7e:de:48:91:bf:43:b3:44:09:34: d9:96:a9:55:9e:56:f1:66:57:6d:9a:8b:b0:aa:a8: ed:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:24:EF:99:CE:E5:57:61:BB:60:86:A2:40:C5:3E:B3:83:4A:EC:61 X509v3 Authority Key Identifier: keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/6iTvmc7lV2G7YIaiQMU-s4NK7GE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.34.128.0/19 5.183.184.0/22 89.29.128.0/19 89.29.232.0/21 89.29.254.0/24 176.57.104.0/21 185.40.37.0-185.40.39.255 185.64.243.0/24 185.74.240.0/22 185.93.80.0/22 185.123.56.0/22 185.145.40.0/22 185.214.136.0/22 188.92.124.0/22 193.56.164.0/22 212.119.52.0/22 Signature Algorithm: sha256WithRSAEncryption 04:03:f9:f7:7d:b0:ea:08:c1:38:c2:18:e1:f2:b3:20:0a:c4: 87:02:e4:c2:4e:9b:0e:e5:8f:76:bd:ff:53:40:76:27:99:92: b4:f6:cd:f2:7d:9f:3d:11:b9:70:33:b1:78:48:ca:79:59:9a: 6f:03:1c:68:dc:8d:af:43:44:2c:b2:6d:a1:8d:b9:58:9f:d0: 5c:72:7c:2d:47:58:b1:b5:a3:cb:e5:0a:f4:85:69:10:39:3a: 41:88:f1:c7:fc:00:72:f3:06:5e:f0:84:07:0e:bb:fb:f6:ad: e2:31:0e:23:32:fc:f2:79:eb:5e:b9:7a:37:57:92:c2:4a:d0: 2c:73:bf:c3:99:2f:87:5f:4e:b3:e4:c7:c7:39:a0:32:88:1b: 5c:17:ed:7d:85:96:a7:2d:a9:51:cc:47:31:b4:18:65:f6:7e: 28:60:2c:92:04:e6:81:d7:34:8f:55:1f:08:62:87:ec:a1:09: 6a:ac:84:51:2f:a1:b8:6a:bb:44:7b:58:e7:40:16:ec:a6:e0: 4d:c3:ec:78:f9:44:ab:80:fd:07:ec:85:3f:be:53:d4:39:12: 44:8d:f7:2c:62:58:f8:6e:34:e0:c8:7e:78:90:95:44:99:9e: da:61:19:11:6e:c5:61:ae:14:10:cf:2e:6f:f7:25:c1:d6:bf: 32:5a:d9:1c -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgISAZt7o8YLonZvKy7nuOF23Yj+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTM5YjBjZWQzOGQ3NWNjNjNlZDUwZDZlNWNlNzJiYmI1 YjRiMTAwHhcNMjYwMTAxMjIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTI0ZWY5OWNlZTU1NzYxYmI2MDg2YTI0MGM1M2ViMzgzNGFlYzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygvFZ9Yp6yCVX2AGtOS+vSQW5/vx kVwvIHJ9LxKuuU0VpdCniOHSiwn01UExMT0W+3sNeId7r1BdtpDywN6wNRsm4H8x VvpsJDkw4n9EvhHvjCZwtfLeNtnqt8zoenh0eWCpeT+a7GuYVVknxg+PkboxrVir M35TD+f47c2v9ae+A9LfdlTHc22o7h+4jBvbmfu4+kA3qdsQjEUMBmkSWTGXIbxj 0kOKN/xaSwGmtadP5lGc3/YSMXcrDnm6TCaHv1pxpxUlpAu5k8ns8IAsocTNEwAL q+DjgFwURMf3TQPGaSvrAX7eSJG/Q7NECTTZlqlVnlbxZldtmouwqqjtcwIDAQAB o4ICbDCCAmgwHQYDVR0OBBYEFOok75nO5Vdhu2CGokDFPrODSuxhMB8GA1UdIwQY MBaAFFqTmwztONdcxj7VDW5c5yu7W0sQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgt ZDYwYjNiNmNjYTZlLzEvNmlUdm1jN2xWMkc3WUlhaVFNVS1zNE5LN0dFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgtZDYwYjNiNmNjYTZl LzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwbgQCAAEwaAMEBQUigAME AgW3uAMEBVkdgAMEA1kd6AMEAFkd/gMEA7A5aDAMAwQAuSglAwQDuSggAwQAuUDz AwQCuUrwAwQCuV1QAwQCuXs4AwQCuZEoAwQCudaIAwQCvFx8AwQCwTikAwQC1Hc0 MA0GCSqGSIb3DQEBCwUAA4IBAQAEA/n3fbDqCME4whjh8rMgCsSHAuTCTpsO5Y92 vf9TQHYnmZK09s3yfZ89EblwM7F4SMp5WZpvAxxo3I2vQ0Qssm2hjblYn9Bccnwt R1ixtaPL5Qr0hWkQOTpBiPHH/ABy8wZe8IQHDrv79q3iMQ4jMvzyeeteuXo3V5LC StAsc7/DmS+HX06z5MfHOaAyiBtcF+19hZanLalRzEcxtBhl9n4oYCySBOaB1zSP VR8IYofsoQlqrIRRL6G4artEe1jnQBbspuBNw+x4+USrgP0H7IU/vlPUORJEjfcs Ylj4bjTgyH54kJVEmZ7aYRkRbsVhrhQQzy5v9yXB1r8yWtkc -----END CERTIFICATE-----Generated at Mon Jan 26 23:43:25 2026 by rpki-client