This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/P5FPcvGM4G8DA4xHgYsxL9lvXdo.roa File: P5FPcvGM4G8DA4xHgYsxL9lvXdo.roa (raw, json) Hash identifier: SoDznn9NTxDE0JdY4CYX77dda/8sqzkcgw6O7Y7t5YI= Subject key identifier: 3F:91:4F:72:F1:8C:E0:6F:03:03:8C:47:81:8B:31:2F:D9:6F:5D:DA Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A248E3736AF713E81ACB0141B74CDE Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/P5FPcvGM4G8DA4xHgYsxL9lvXdo.roa Signing time: Thu 01 Jan 2026 08:17:39 +0000 ROA not before: Thu 01 Jan 2026 08:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30058 IP address blocks: 195.40.3.0/24 maxlen: 24 195.40.14.0/23 maxlen: 23 195.40.64.0/23 maxlen: 23 195.40.66.0/23 maxlen: 23 195.40.68.0/23 maxlen: 23 195.40.79.0/24 maxlen: 24 195.40.81.0/24 maxlen: 24 195.40.84.0/24 maxlen: 24 195.40.90.0/24 maxlen: 24 195.40.93.0/24 maxlen: 24 195.40.98.0/23 maxlen: 23 195.40.102.0/23 maxlen: 23 195.40.124.0/23 maxlen: 23 195.40.126.0/23 maxlen: 23 195.40.164.0/23 maxlen: 23 195.40.168.0/23 maxlen: 23 195.40.170.0/23 maxlen: 23 195.40.172.0/23 maxlen: 23 195.40.174.0/23 maxlen: 23 195.40.190.0/23 maxlen: 23 195.172.126.0/23 maxlen: 23 195.172.148.0/23 maxlen: 23 195.172.208.0/23 maxlen: 23 212.135.14.0/23 maxlen: 23 212.135.176.0/23 maxlen: 24 212.135.182.0/23 maxlen: 23 212.135.184.0/23 maxlen: 23 212.135.186.0/23 maxlen: 23 212.135.188.0/24 maxlen: 24 212.135.216.0/23 maxlen: 23 212.135.224.0/23 maxlen: 23 212.135.226.0/23 maxlen: 23 212.135.229.0/24 maxlen: 24 212.135.230.0/23 maxlen: 23 212.135.232.0/23 maxlen: 23 212.135.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:48:e3:73:6a:f7:13:e8:1a:cb:01:41:b7:4c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f914f72f18ce06f03038c47818b312fd96f5dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:00:3b:2a:1c:76:44:c1:6d:42:eb:5f:b2:d2: 70:79:0e:07:45:eb:81:8c:e3:41:6f:81:f5:cc:1c: fc:a3:fc:96:f0:ab:f1:29:4d:84:23:17:6d:1f:ff: f8:48:3b:ad:ab:53:a6:da:bc:42:bb:ea:34:a9:c2: 3a:78:c0:3f:2d:a5:36:40:6e:15:04:30:1c:45:36: f3:f5:09:46:ff:3f:e7:1b:e0:8e:29:a4:82:db:a9: b5:26:a1:c5:56:d6:a5:13:cc:4a:80:fc:bb:a4:bb: 59:e5:b7:10:da:da:16:73:46:7b:87:c3:0f:fe:47: 77:dd:10:00:62:cb:33:2e:b8:87:61:a0:7e:01:1e: f2:94:39:ce:f5:3c:b8:75:e4:bc:b7:b9:01:da:2a: f5:01:2e:84:60:cc:d0:aa:da:f2:32:ec:fb:eb:19: 5c:e6:c8:4c:8d:35:a8:3a:84:59:d2:6c:76:9e:b0: cc:fc:62:76:59:cd:30:68:8f:91:3c:d2:e1:39:3c: c3:59:25:42:97:bc:a4:3a:1a:06:b5:39:6f:5a:d3: 04:2f:a7:bd:d3:b9:ee:72:19:3a:27:e2:bd:0d:b6: b7:48:55:25:83:f0:67:fa:f2:4e:81:70:f8:5f:e5: 38:4b:26:d9:3f:cc:79:02:1b:d6:b5:36:9f:52:60: 86:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:91:4F:72:F1:8C:E0:6F:03:03:8C:47:81:8B:31:2F:D9:6F:5D:DA X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/P5FPcvGM4G8DA4xHgYsxL9lvXdo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.40.3.0/24 195.40.14.0/23 195.40.64.0-195.40.69.255 195.40.79.0/24 195.40.81.0/24 195.40.84.0/24 195.40.90.0/24 195.40.93.0/24 195.40.98.0/23 195.40.102.0/23 195.40.124.0/22 195.40.164.0/23 195.40.168.0/21 195.40.190.0/23 195.172.126.0/23 195.172.148.0/23 195.172.208.0/23 212.135.14.0/23 212.135.176.0/23 212.135.182.0-212.135.188.255 212.135.216.0/23 212.135.224.0/22 212.135.229.0-212.135.233.255 212.135.238.0/23 Signature Algorithm: sha256WithRSAEncryption c9:42:5b:24:df:8b:ae:e4:0f:77:63:be:bc:6a:10:1c:79:3a: ed:11:06:98:57:a4:8c:be:ff:1d:7d:bb:b8:fd:20:a0:b0:d9: b6:b1:24:e5:42:90:12:a1:5f:8a:16:3e:1c:e6:67:49:87:ba: e7:3c:62:bc:b0:4b:9c:d9:01:8f:39:de:3e:93:0d:39:59:06: e9:cd:dd:b9:70:f5:d8:44:e9:73:aa:c3:09:aa:ea:ad:a3:e7: ff:1d:a7:27:7a:0c:0b:4c:ec:0c:0b:c7:45:e9:cb:62:ae:75: 08:08:c8:05:bf:3b:9b:0f:ee:61:63:82:6d:77:4a:5c:40:89: ba:76:17:39:31:7c:b1:36:b0:e9:f5:0f:68:22:82:a1:41:a2: e6:ce:bf:f2:41:bb:17:9d:f1:a7:bf:7a:0e:6c:e5:74:2f:a4: 5e:d9:24:ee:92:34:2e:fa:bc:07:12:5e:bd:92:79:71:bd:3c: 44:da:53:f4:f1:0e:fd:45:0b:78:ee:b9:a9:e8:02:40:1b:2e: 85:40:79:40:1e:f8:59:63:55:e6:fc:51:e6:d4:75:29:0e:56: 5f:da:fd:89:1c:14:67:68:9c:01:2d:bf:6b:e7:ea:6f:f0:4c: 30:9f:01:fa:86:bd:05:43:1a:40:e6:9c:bd:49:43:a5:b7:66: 47:c6:a5:45 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt4okjjc2r3E+gaywFBt0zeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjkxNGY3MmYxOGNlMDZmMDMwMzhjNDc4MThiMzEyZmQ5NmY1ZGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AA7Khx2RMFtQutfstJweQ4HReuB jONBb4H1zBz8o/yW8KvxKU2EIxdtH//4SDutq1Om2rxCu+o0qcI6eMA/LaU2QG4V BDAcRTbz9QlG/z/nG+COKaSC26m1JqHFVtalE8xKgPy7pLtZ5bcQ2toWc0Z7h8MP /kd33RAAYsszLriHYaB+AR7ylDnO9Ty4deS8t7kB2ir1AS6EYMzQqtryMuz76xlc 5shMjTWoOoRZ0mx2nrDM/GJ2Wc0waI+RPNLhOTzDWSVCl7ykOhoGtTlvWtMEL6e9 07nuchk6J+K9Dba3SFUlg/Bn+vJOgXD4X+U4SybZP8x5AhvWtTafUmCGBQIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFD+RT3LxjOBvAwOMR4GLMS/Zb13aMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvUDVGUGN2R000RzhEQTR4SGdZc3hMOWx2WGRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHFBggrBgEFBQcBBwEB/wSBtTCBsjCBrwQCAAEwgagDBADD KAMDBAHDKA4wDAMEBsMoQAMEAcMoRAMEAMMoTwMEAMMoUQMEAMMoVAMEAMMoWgME AMMoXQMEAcMoYgMEAcMoZgMEAsMofAMEAcMopAMEA8MoqAMEAcMovgMEAcOsfgME AcOslAMEAcOs0AMEAdSHDgMEAdSHsDAMAwQB1Ie2AwQA1Ie8AwQB1IfYAwQC1Ifg MAwDBADUh+UDBAHUh+gDBAHUh+4wDQYJKoZIhvcNAQELBQADggEBAMlCWyTfi67k D3djvrxqEBx5Ou0RBphXpIy+/x19u7j9IKCw2baxJOVCkBKhX4oWPhzmZ0mHuuc8 YrywS5zZAY853j6TDTlZBunN3blw9dhE6XOqwwmq6q2j5/8dpyd6DAtM7AwLx0Xp y2KudQgIyAW/O5sP7mFjgm13SlxAibp2FzkxfLE2sOn1D2gigqFBoubOv/JBuxed 8ae/eg5s5XQvpF7ZJO6SNC76vAcSXr2SeXG9PETaU/TxDv1FC3juuanoAkAbLoVA eUAe+FljVeb8UebUdSkOVl/a/YkcFGdonAEtv2vn6m/wTDCfAfqGvQVDGkDmnL1J Q6W3ZkfGpUU= -----END CERTIFICATE-----Generated at Mon Jan 19 08:15:50 2026 by rpki-client