This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/r5XWJBGKNAQjzKjZKPXr5PFoepw.roa File: r5XWJBGKNAQjzKjZKPXr5PFoepw.roa (raw, json) Hash identifier: ky24FBG3oozcNo49stCKjgR7t7k44RW8nw/ONOs9Mb4= Subject key identifier: AF:95:D6:24:11:8A:34:04:23:CC:A8:D9:28:F5:EB:E4:F1:68:7A:9C Certificate issuer: /CN=738e65fb03e6d607d8be204345d6e05a460b9a4f Certificate serial: 019B77C6F7FCBF3D90756DACE90A271DAD66 Authority key identifier: 73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/r5XWJBGKNAQjzKjZKPXr5PFoepw.roa Signing time: Thu 01 Jan 2026 04:18:06 +0000 ROA not before: Thu 01 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213307 IP address blocks: 94.154.12.0/24 maxlen: 24 2a05:7700::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f7:fc:bf:3d:90:75:6d:ac:e9:0a:27:1d:ad:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=738e65fb03e6d607d8be204345d6e05a460b9a4f Validity Not Before: Jan 1 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af95d624118a340423cca8d928f5ebe4f1687a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:24:60:55:d5:d7:f5:3f:76:0f:09:25:8c:65: 23:26:e8:fe:c5:e3:5e:6f:1f:50:42:ad:33:ee:27: a0:de:1f:d1:54:c2:cb:19:6f:ec:a1:f7:35:45:27: 51:ec:e4:69:eb:4f:1c:de:23:66:f1:2e:2e:ed:74: 9a:19:6c:b2:40:6d:8d:5b:32:30:cf:66:00:09:ed: 61:9c:45:78:86:16:63:24:7f:d1:80:6f:47:51:75: 13:73:f1:eb:0d:f1:33:70:30:d1:c6:a4:6f:3e:3e: 3c:16:e8:8b:3d:a1:59:1f:ba:a4:4c:36:9f:ba:2b: b2:ab:36:86:1d:bb:5b:cf:7a:ef:7c:9d:cb:cf:4f: 53:6f:38:9b:23:9c:44:e1:d2:b1:74:fa:15:0e:59: f8:13:ec:3c:35:b9:0c:bd:16:6e:e7:c2:2c:89:8c: 15:e4:3c:ff:bc:4e:23:65:88:09:d9:03:5b:cd:d8: 5d:37:86:a4:e2:16:ef:98:12:0b:36:b8:bc:b5:d4: 8a:f1:d2:26:e8:fc:69:78:16:eb:8a:df:cb:c0:e2: ba:26:f8:e5:ce:b2:3e:eb:1a:9b:2f:80:a0:b3:ed: f5:db:20:14:57:0f:98:e0:0e:3c:dd:6e:97:10:72: 2f:ef:0f:44:10:84:2a:7c:65:c4:ee:f0:54:ef:2d: 22:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:95:D6:24:11:8A:34:04:23:CC:A8:D9:28:F5:EB:E4:F1:68:7A:9C X509v3 Authority Key Identifier: keyid:73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/r5XWJBGKNAQjzKjZKPXr5PFoepw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.154.12.0/24 IPv6: 2a05:7700::/29 Signature Algorithm: sha256WithRSAEncryption 7e:ec:12:63:1a:97:cb:c0:23:3a:f9:48:38:e3:92:54:5a:aa: ca:41:89:21:0b:87:e8:1c:79:8c:c3:45:6f:a3:ae:35:88:61: 16:38:10:ed:6d:ff:93:b6:6c:0a:3a:3a:f5:16:41:0c:89:e2: a0:18:71:4a:bf:79:38:1d:43:1f:e7:2a:bb:d0:e7:51:ab:a8: 62:7f:2f:57:37:2a:d6:a9:dc:d9:69:22:6d:91:64:81:58:93: aa:73:5e:96:a8:4a:e7:01:a1:dd:f2:a3:ab:66:4d:4f:f0:93: d5:7e:27:b8:26:f6:4a:89:62:15:59:a7:42:42:a7:32:09:54: 21:3b:2b:40:52:4b:b2:ec:37:ea:d5:a2:41:57:72:59:07:c4: 00:8c:59:f8:d5:a3:0f:8b:da:6e:45:48:0e:3b:13:16:23:9b: 4b:2c:ac:e3:f4:05:bc:9e:35:ef:e8:f2:71:64:ad:c3:6b:99: 70:47:ff:a6:dc:3c:76:41:df:52:b1:0d:d1:bb:32:07:eb:20: 1a:b0:8f:bb:ee:5b:54:4b:87:55:11:03:11:9e:34:08:f9:26: 75:5e:c7:b2:e6:08:a6:d6:8b:ee:ad:fa:0e:56:28:33:e9:de: a1:6c:d6:bf:d3:fd:3d:08:c2:9c:8c:a5:bd:15:4a:34:80:a5: e6:f5:3d:19 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xvf8vz2QdW2s6QonHa1mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczOGU2NWZiMDNlNmQ2MDdkOGJlMjA0MzQ1ZDZlMDVhNDYw YjlhNGYwHhcNMjYwMTAxMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjk1ZDYyNDExOGEzNDA0MjNjY2E4ZDkyOGY1ZWJlNGYxNjg3YTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCRgVdXX9T92DwkljGUjJuj+xeNe bx9QQq0z7ieg3h/RVMLLGW/sofc1RSdR7ORp608c3iNm8S4u7XSaGWyyQG2NWzIw z2YACe1hnEV4hhZjJH/RgG9HUXUTc/HrDfEzcDDRxqRvPj48FuiLPaFZH7qkTDaf uiuyqzaGHbtbz3rvfJ3Lz09TbzibI5xE4dKxdPoVDln4E+w8NbkMvRZu58IsiYwV 5Dz/vE4jZYgJ2QNbzdhdN4ak4hbvmBILNri8tdSK8dIm6PxpeBbrit/LwOK6Jvjl zrI+6xqbL4Cgs+312yAUVw+Y4A483W6XEHIv7w9EEIQqfGXE7vBU7y0iqQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFK+V1iQRijQEI8yo2Sj16+TxaHqcMB8GA1UdIwQY MBaAFHOOZfsD5tYH2L4gQ0XW4FpGC5pPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzQ1bC13UG0xZ2ZZdmlCRFJkYmdXa1lMbWs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iYTYxY2UtOWM4Ni00MmVmLTkwZmIt ZGQ1MTVlNjNjZmNiLzEvcjVYV0pCR0tOQVFqektqWktQWHI1UEZvZXB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9iYTYxY2UtOWM4Ni00MmVmLTkwZmItZGQ1MTVlNjNjZmNi LzEvYzQ1bC13UG0xZ2ZZdmlCRFJkYmdXa1lMbWs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAXpoMMA0E AgACMAcDBQMqBXcAMA0GCSqGSIb3DQEBCwUAA4IBAQB+7BJjGpfLwCM6+Ug445JU WqrKQYkhC4foHHmMw0Vvo641iGEWOBDtbf+TtmwKOjr1FkEMieKgGHFKv3k4HUMf 5yq70OdRq6hify9XNyrWqdzZaSJtkWSBWJOqc16WqErnAaHd8qOrZk1P8JPVfie4 JvZKiWIVWadCQqcyCVQhOytAUkuy7Dfq1aJBV3JZB8QAjFn41aMPi9puRUgOOxMW I5tLLKzj9AW8njXv6PJxZK3Da5lwR/+m3Dx2Qd9SsQ3RuzIH6yAasI+77ltUS4dV EQMRnjQI+SZ1Xsey5gim1ovurfoOVigz6d6hbNa/0/09CMKcjKW9FUo0gKXm9T0Z -----END CERTIFICATE-----Generated at Tue Feb 10 04:49:35 2026 by rpki-client