This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/Av5bsVoq8UQGaosqV8V6-3ucUR4.roa File: Av5bsVoq8UQGaosqV8V6-3ucUR4.roa (raw, json) Hash identifier: QEALuD9emwTtaKDjepBpTR7X0rF/uZcvg9fbjrjCtSw= Subject key identifier: 02:FE:5B:B1:5A:2A:F1:44:06:6A:8B:2A:57:C5:7A:FB:7B:9C:51:1E Certificate issuer: /CN=b3aa951722a19971a44e62ca92d1c91284d12e21 Certificate serial: 019B77C7260A3B42A852862EBDCFFD33EA68 Authority key identifier: B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/Av5bsVoq8UQGaosqV8V6-3ucUR4.roa Signing time: Thu 01 Jan 2026 04:18:18 +0000 ROA not before: Thu 01 Jan 2026 04:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 132.187.0.0/16 maxlen: 16 141.27.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:26:0a:3b:42:a8:52:86:2e:bd:cf:fd:33:ea:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3aa951722a19971a44e62ca92d1c91284d12e21 Validity Not Before: Jan 1 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02fe5bb15a2af144066a8b2a57c57afb7b9c511e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3b:21:4b:57:3c:50:8a:66:3b:e8:46:b3:92: 39:dc:d2:d5:b3:a8:db:ae:ee:e3:f6:2f:72:41:45: f5:18:27:83:ae:fa:13:3a:85:80:8c:28:5f:30:09: e9:8d:55:0e:22:7c:52:f3:9f:8b:cf:e1:27:5d:d0: 60:2c:d0:56:3d:85:bc:f3:bb:77:ff:77:0b:d7:61: 9d:e7:41:3a:95:26:d3:db:00:cd:a7:e0:f0:89:53: ad:2d:f9:33:1b:70:8a:8b:57:2d:10:b6:93:97:50: e5:06:7a:c3:d7:a7:c0:6f:c4:dc:d6:ba:49:f1:8f: ef:ec:bd:34:3e:73:5b:2d:b6:14:fd:c1:6f:8e:0d: 77:55:44:b5:ad:5b:f8:45:c4:b0:68:25:93:e0:17: 21:86:60:23:72:3e:83:69:b4:00:fc:c0:ed:7e:a2: 97:3d:8f:af:47:57:4b:60:11:94:c5:2c:7f:0a:4c: 13:8d:b4:c8:e4:a3:c6:55:55:d3:16:ca:0a:c0:6c: b9:96:8b:f5:66:ec:c8:01:d2:4e:ed:0b:51:f7:72: e0:b4:ca:a2:b8:6e:37:24:e9:db:50:da:dd:49:43: 73:50:2d:1a:fd:41:af:38:37:9b:91:ef:93:29:36: 9c:ac:5c:1a:24:3b:ad:de:df:04:3c:b8:67:f1:eb: f6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FE:5B:B1:5A:2A:F1:44:06:6A:8B:2A:57:C5:7A:FB:7B:9C:51:1E X509v3 Authority Key Identifier: keyid:B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/Av5bsVoq8UQGaosqV8V6-3ucUR4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.187.0.0/16 141.27.0.0/16 Signature Algorithm: sha256WithRSAEncryption 70:d5:11:94:0b:01:3e:29:ff:a2:d7:23:0a:a9:a5:07:9a:37: 6a:9c:51:84:41:48:15:9f:d6:ab:03:98:d8:db:93:1f:2e:66: 3d:65:56:cc:e0:f8:7d:a5:16:c1:51:79:1c:e7:34:5b:b7:43: 00:62:1e:62:75:63:20:80:64:2a:c9:52:e8:1f:4e:e3:88:2e: 40:a6:1d:67:bf:7f:ef:50:d9:18:3c:f5:18:99:08:53:22:4b: 79:33:a8:24:70:44:1e:6d:47:44:8a:4d:ae:1e:a5:98:2f:b6: 5c:a5:ca:f2:03:42:d3:7d:f9:d9:d3:c0:97:11:52:1d:73:30: 85:18:6b:8f:61:6c:7c:6d:af:e3:02:e9:c3:4b:6a:d3:89:4f: 8f:4a:12:d4:9c:dc:cf:ab:74:0a:ae:13:e5:49:d5:d4:e8:22: b0:56:86:0a:1d:88:5c:80:01:cd:f6:78:1f:6a:f0:00:43:ad: 25:e1:ef:08:e5:0b:f9:3e:49:01:d8:ed:0b:93:4c:4c:dc:9c: ed:c0:05:8a:f4:7a:7f:3e:34:a9:ad:ac:d0:34:f2:2d:4d:2e: 9c:ef:80:ab:61:1c:b6:56:ca:e8:50:d5:11:c8:6c:8d:25:1f: c6:ba:bd:aa:e8:2b:4e:09:2d:25:3e:4a:04:bf:e3:6d:69:3e: 94:b1:ea:9b -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt3xyYKO0KoUoYuvc/9M+poMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYWE5NTE3MjJhMTk5NzFhNDRlNjJjYTkyZDFjOTEyODRk MTJlMjEwHhcNMjYwMTAxMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmZlNWJiMTVhMmFmMTQ0MDY2YThiMmE1N2M1N2FmYjdiOWM1MTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jshS1c8UIpmO+hGs5I53NLVs6jb ru7j9i9yQUX1GCeDrvoTOoWAjChfMAnpjVUOInxS85+Lz+EnXdBgLNBWPYW887t3 /3cL12Gd50E6lSbT2wDNp+DwiVOtLfkzG3CKi1ctELaTl1DlBnrD16fAb8Tc1rpJ 8Y/v7L00PnNbLbYU/cFvjg13VUS1rVv4RcSwaCWT4BchhmAjcj6DabQA/MDtfqKX PY+vR1dLYBGUxSx/CkwTjbTI5KPGVVXTFsoKwGy5lov1ZuzIAdJO7QtR93LgtMqi uG43JOnbUNrdSUNzUC0a/UGvODebke+TKTacrFwaJDut3t8EPLhn8ev2GQIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFAL+W7FaKvFEBmqLKlfFevt7nFEeMB8GA1UdIwQY MBaAFLOqlRcioZlxpE5iypLRyRKE0S4hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczZxVkZ5S2htWEdrVG1MS2t0SEpFb1RSTGlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9mZGVhN2MtYTFiYy00OGE5LWFjZDMt YTAwM2M0YjYxYTVmLzEvQXY1YnNWb3E4VVFHYW9zcVY4VjYtM3VjVVI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9mZGVhN2MtYTFiYy00OGE5LWFjZDMtYTAwM2M0YjYxYTVm LzEvczZxVkZ5S2htWEdrVG1MS2t0SEpFb1RSTGlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAhLsDAwCN GzANBgkqhkiG9w0BAQsFAAOCAQEAcNURlAsBPin/otcjCqmlB5o3apxRhEFIFZ/W qwOY2NuTHy5mPWVWzOD4faUWwVF5HOc0W7dDAGIeYnVjIIBkKslS6B9O44guQKYd Z79/71DZGDz1GJkIUyJLeTOoJHBEHm1HRIpNrh6lmC+2XKXK8gNC03352dPAlxFS HXMwhRhrj2FsfG2v4wLpw0tq04lPj0oS1Jzcz6t0Cq4T5UnV1OgisFaGCh2IXIAB zfZ4H2rwAEOtJeHvCOUL+T5JAdjtC5NMTNyc7cAFivR6fz40qa2s0DTyLU0unO+A q2EctlbK6FDVEchsjSUfxrq9qugrTgktJT5KBL/jbWk+lLHqmw== -----END CERTIFICATE-----Generated at Tue Jan 27 11:27:35 2026 by rpki-client