This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/A5IKhFWlm11jayw8_7Bk6vj54pc.roa File: A5IKhFWlm11jayw8_7Bk6vj54pc.roa (raw, json) Hash identifier: St8CrEKVhvq334z09p5zU/PvYhkboA1fll1gidQDoio= Subject key identifier: 03:92:0A:84:55:A5:9B:5D:63:6B:2C:3C:FF:B0:64:EA:F8:F9:E2:97 Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8 Certificate serial: 019B7F8179DE8722031F40C3A78C612396C1 Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/A5IKhFWlm11jayw8_7Bk6vj54pc.roa Signing time: Fri 02 Jan 2026 16:19:10 +0000 ROA not before: Fri 02 Jan 2026 16:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396356 IP address blocks: 147.136.77.0/24 maxlen: 24 147.136.85.0/24 maxlen: 24 168.199.145.0/24 maxlen: 24 168.199.166.0/24 maxlen: 24 168.199.209.0/24 maxlen: 24 168.199.218.0/24 maxlen: 24 168.199.219.0/24 maxlen: 24 168.199.220.0/24 maxlen: 24 168.199.221.0/24 maxlen: 24 168.199.222.0/24 maxlen: 24 168.199.223.0/24 maxlen: 24 168.199.224.0/24 maxlen: 24 168.199.225.0/24 maxlen: 24 168.199.226.0/24 maxlen: 24 168.199.228.0/24 maxlen: 24 168.199.229.0/24 maxlen: 24 168.199.230.0/24 maxlen: 24 168.199.232.0/24 maxlen: 24 168.199.234.0/24 maxlen: 24 168.199.235.0/24 maxlen: 24 168.199.236.0/24 maxlen: 24 168.199.237.0/24 maxlen: 24 168.199.238.0/24 maxlen: 24 168.199.239.0/24 maxlen: 24 192.95.86.0/24 maxlen: 24 192.95.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:79:de:87:22:03:1f:40:c3:a7:8c:61:23:96:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8 Validity Not Before: Jan 2 16:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03920a8455a59b5d636b2c3cffb064eaf8f9e297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:97:93:72:8a:86:67:e1:57:ed:1f:4a:92:a2: 4e:ad:88:d7:64:88:4e:46:80:25:5d:9d:75:c4:69: c8:58:cd:62:16:d2:bf:09:60:f6:6e:a1:0f:16:07: 31:b1:88:14:df:3c:4d:cd:ec:5b:32:f4:18:48:e6: 75:8a:42:b0:dd:b3:5a:f7:40:ac:9e:4f:f2:42:8b: 0a:08:4e:8f:6f:71:57:20:9a:ab:5c:70:26:21:73: 72:c1:a2:2f:2f:68:7a:28:b1:fe:43:97:85:ee:f1: a4:2e:38:47:ad:e0:4b:b1:27:a3:86:5e:6c:5b:5d: 64:63:82:5e:67:fe:5d:20:88:4d:6c:70:27:35:9e: 38:6b:de:1d:42:4a:29:54:1f:66:96:b5:81:aa:d4: 44:1a:3e:9a:5f:bf:f7:63:e7:23:7f:9f:fb:da:3c: 26:81:9a:7d:85:29:6c:07:44:9d:8c:78:05:49:01: ef:75:1e:42:cd:ea:b4:be:74:78:e3:6d:d7:de:02: 80:c4:95:be:57:19:ac:26:ca:13:5d:e7:ee:ed:1e: fb:a0:47:9f:64:ca:5a:12:e4:7e:49:4c:37:ee:b1: 2c:f9:cf:22:50:87:ff:05:ee:de:37:31:66:bc:6d: 45:be:11:3f:b3:dc:10:22:87:5a:e5:bc:1d:15:63: 5f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:92:0A:84:55:A5:9B:5D:63:6B:2C:3C:FF:B0:64:EA:F8:F9:E2:97 X509v3 Authority Key Identifier: keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/A5IKhFWlm11jayw8_7Bk6vj54pc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.136.77.0/24 147.136.85.0/24 168.199.145.0/24 168.199.166.0/24 168.199.209.0/24 168.199.218.0-168.199.226.255 168.199.228.0-168.199.230.255 168.199.232.0/24 168.199.234.0-168.199.239.255 192.95.86.0/24 192.95.91.0/24 Signature Algorithm: sha256WithRSAEncryption 97:ef:8c:66:95:fa:b3:b3:ed:07:85:4c:19:27:8b:84:50:f0: 3b:26:71:32:aa:2a:4d:59:03:44:45:c5:3c:10:a3:d2:ce:cb: 98:10:55:bd:e7:d7:52:ad:67:92:b4:97:46:37:c6:58:07:10: e5:36:ea:3c:51:79:f0:fc:55:bc:5d:2e:67:59:84:ef:8b:97: 05:13:e4:09:30:3a:16:e0:0b:27:b2:fc:42:35:e3:77:7d:1e: 5a:02:47:9b:5c:a8:78:a9:b7:f3:5c:57:48:00:4f:ce:4e:31: c7:f1:89:0b:f8:57:5a:3b:f2:66:bb:bc:2d:fc:5e:6a:4c:f0: 44:a3:54:39:c7:60:5a:fa:1a:44:1f:a4:1d:53:6c:93:cc:0c: 8a:e1:83:f4:e5:84:92:65:ca:ae:70:5c:4a:50:0f:4b:de:9e: 66:b5:04:0a:b2:e8:6b:2f:0c:24:29:43:f1:3d:4b:76:cb:75: 5c:b7:9a:d5:90:ce:88:02:c9:09:70:24:79:0c:61:cb:99:10: 15:83:92:06:39:47:d6:4c:02:b8:bf:d4:9b:95:ea:f1:59:81: 1b:19:3b:6e:72:3d:61:41:49:2f:e1:b8:cc:d5:fa:cf:af:e3: e2:d7:2a:77:c7:89:98:cd:34:b7:dd:6e:b2:c2:3b:e1:84:c8: f6:8b:18:98 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZt/gXnehyIDH0DDp4xhI5bBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4 ODE3ZDgwHhcNMjYwMTAyMTYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzkyMGE4NDU1YTU5YjVkNjM2YjJjM2NmZmIwNjRlYWY4ZjllMjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpeTcoqGZ+FX7R9KkqJOrYjXZIhO RoAlXZ11xGnIWM1iFtK/CWD2bqEPFgcxsYgU3zxNzexbMvQYSOZ1ikKw3bNa90Cs nk/yQosKCE6Pb3FXIJqrXHAmIXNywaIvL2h6KLH+Q5eF7vGkLjhHreBLsSejhl5s W11kY4JeZ/5dIIhNbHAnNZ44a94dQkopVB9mlrWBqtREGj6aX7/3Y+cjf5/72jwm gZp9hSlsB0SdjHgFSQHvdR5Czeq0vnR4423X3gKAxJW+VxmsJsoTXefu7R77oEef ZMpaEuR+SUw37rEs+c8iUIf/Be7eNzFmvG1FvhE/s9wQIoda5bwdFWNfGQIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFAOSCoRVpZtdY2ssPP+wZOr4+eKXMB8GA1UdIwQY MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt MmQxOTE4YmExYzBlLzEvQTVJS2hGV2xtMTFqYXl3OF83Qms2dmo1NHBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQAk4hNAwQA k4hVAwQAqMeRAwQAqMemAwQAqMfRMAwDBAGox9oDBACox+IwDAMEAqjH5AMEAKjH 5gMEAKjH6DAMAwQBqMfqAwQEqMfgAwQAwF9WAwQAwF9bMA0GCSqGSIb3DQEBCwUA A4IBAQCX74xmlfqzs+0HhUwZJ4uEUPA7JnEyqipNWQNERcU8EKPSzsuYEFW959dS rWeStJdGN8ZYBxDlNuo8UXnw/FW8XS5nWYTvi5cFE+QJMDoW4AsnsvxCNeN3fR5a AkebXKh4qbfzXFdIAE/OTjHH8YkL+FdaO/Jmu7wt/F5qTPBEo1Q5x2Ba+hpEH6Qd U2yTzAyK4YP05YSSZcqucFxKUA9L3p5mtQQKsuhrLwwkKUPxPUt2y3Vct5rVkM6I AskJcCR5DGHLmRAVg5IGOUfWTAK4v9SblerxWYEbGTtucj1hQUkv4bjM1frPr+Pi 1yp3x4mYzTS33W6ywjvhhMj2ixiY -----END CERTIFICATE-----Generated at Fri Jan 9 16:49:22 2026 by rpki-client