This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/rPBNoiA3LAaZSrs5VWA0yP3yN1k.roa File: rPBNoiA3LAaZSrs5VWA0yP3yN1k.roa (raw, json) Hash identifier: z7hppX01cLUTFRyiAAh/aHIOnNRzj8Vo6jXh0hDhpac= Subject key identifier: AC:F0:4D:A2:20:37:2C:06:99:4A:BB:39:55:60:34:C8:FD:F2:37:59 Certificate issuer: /CN=5a756994bb292e49ecc6337b7f95d69ee2af61e1 Certificate serial: 019B7D5BD652090BC20CD8194C1532C49C62 Authority key identifier: 5A:75:69:94:BB:29:2E:49:EC:C6:33:7B:7F:95:D6:9E:E2:AF:61:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/rPBNoiA3LAaZSrs5VWA0yP3yN1k.roa Signing time: Fri 02 Jan 2026 06:18:49 +0000 ROA not before: Fri 02 Jan 2026 06:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12360 IP address blocks: 5.57.192.0/21 maxlen: 24 77.236.104.0/21 maxlen: 24 77.236.112.0/21 maxlen: 24 79.171.176.0/21 maxlen: 24 82.115.96.0/19 maxlen: 24 93.119.240.0/20 maxlen: 24 178.248.216.0/21 maxlen: 24 185.5.168.0/22 maxlen: 24 185.39.108.0/23 maxlen: 24 192.54.67.0/24 maxlen: 24 192.54.68.0/22 maxlen: 24 212.7.160.0/19 maxlen: 24 217.17.16.0/20 maxlen: 24 2a01:5580::/32 maxlen: 48 2a02:1628::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.mft rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:d6:52:09:0b:c2:0c:d8:19:4c:15:32:c4:9c:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a756994bb292e49ecc6337b7f95d69ee2af61e1 Validity Not Before: Jan 2 06:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acf04da220372c06994abb39556034c8fdf23759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c6:c9:69:04:c8:71:e3:89:ee:7d:fe:05:2e: e9:2e:d1:fe:3c:d6:be:e8:e0:39:dc:c0:dc:30:82: e9:7c:c0:8e:56:f4:7c:1a:01:54:af:9d:bd:ca:de: fe:a0:e0:15:33:a7:fd:2f:3d:46:aa:b0:86:f9:a2: f7:1d:d7:a8:42:36:0f:fa:d0:0e:87:8b:82:22:b6: d7:ff:dc:28:a8:a6:b7:3e:b9:46:52:f2:3e:24:e4: a0:4e:ff:dc:c3:6a:4e:4e:24:bd:c8:64:7d:cf:76: 42:cb:d8:eb:64:66:5a:30:76:f4:4b:e0:71:65:67: b3:b1:b5:c5:c8:73:60:b6:2e:54:5c:23:d1:fe:8f: 10:fb:5f:25:dc:a0:68:4b:3a:66:2f:5a:9c:86:d3: fd:60:85:4c:fb:38:d3:ed:6b:a2:f8:10:c7:48:01: a0:5d:05:4b:24:0d:39:2d:43:dc:84:db:9d:34:aa: 2d:8a:11:5e:fd:16:92:31:4f:0f:39:b2:4e:70:08: 87:3f:c8:c0:7f:5e:c0:21:4e:f0:b1:e3:99:32:fe: 61:9d:40:e6:7a:17:1e:01:ee:00:9c:7a:de:99:2e: 93:df:53:58:de:28:ce:85:d2:51:a6:9a:0b:7a:97: c4:19:0c:9f:ef:ab:37:c4:bd:4d:e1:cf:ab:ce:1f: 06:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F0:4D:A2:20:37:2C:06:99:4A:BB:39:55:60:34:C8:FD:F2:37:59 X509v3 Authority Key Identifier: keyid:5A:75:69:94:BB:29:2E:49:EC:C6:33:7B:7F:95:D6:9E:E2:AF:61:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/rPBNoiA3LAaZSrs5VWA0yP3yN1k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.57.192.0/21 77.236.104.0-77.236.119.255 79.171.176.0/21 82.115.96.0/19 93.119.240.0/20 178.248.216.0/21 185.5.168.0/22 185.39.108.0/23 192.54.67.0-192.54.71.255 212.7.160.0/19 217.17.16.0/20 IPv6: 2a01:5580::/32 2a02:1628::/32 Signature Algorithm: sha256WithRSAEncryption 38:ea:e9:52:f3:e6:44:e5:05:48:db:74:a0:80:7b:1f:e1:98: b9:55:e4:a5:d7:12:d6:ae:e7:c5:21:ad:cb:51:17:86:1b:c5: 8e:24:1b:89:92:ce:e1:63:13:bf:20:d0:4f:b8:94:04:8b:86: 49:dc:09:99:f0:79:a8:81:86:bc:ce:d7:d1:8b:ec:25:48:d3: 77:b4:e8:4a:e4:15:9f:ee:14:0c:90:dd:8b:2a:ca:83:f8:72: 33:6a:7d:f3:9e:20:61:a7:82:c5:4a:24:39:ba:f8:0b:bd:c5: b3:dd:9b:8f:7e:01:8a:c5:d1:89:c9:bf:2a:1d:fb:d6:4e:3d: cf:9b:d3:a4:7e:0c:72:29:a1:42:9c:65:81:ca:48:e9:88:5b: d6:0b:30:1a:90:15:a9:14:f9:b6:51:3d:15:6a:8f:cb:c4:ca: 5c:f3:db:c5:4d:1d:92:ae:b1:38:e1:b8:62:72:4d:34:42:c2: ec:b1:39:9e:9c:14:43:1f:53:88:73:78:e9:2f:cf:6b:01:2c: 1e:42:ac:bc:b3:d9:7d:12:41:d6:04:67:b9:f8:f0:1d:56:ca: 15:91:f0:2a:c6:ee:af:a3:5d:ef:23:9f:dd:d7:e6:88:26:ff: 28:43:18:a5:27:fc:a8:91:23:4f:30:ac:66:7a:6a:99:04:43: 32:53:4f:3e -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgISAZt9W9ZSCQvCDNgZTBUyxJxiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNzU2OTk0YmIyOTJlNDllY2M2MzM3YjdmOTVkNjllZTJh ZjYxZTEwHhcNMjYwMTAyMDYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2YwNGRhMjIwMzcyYzA2OTk0YWJiMzk1NTYwMzRjOGZkZjIzNzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcbJaQTIceOJ7n3+BS7pLtH+PNa+ 6OA53MDcMILpfMCOVvR8GgFUr529yt7+oOAVM6f9Lz1GqrCG+aL3HdeoQjYP+tAO h4uCIrbX/9woqKa3PrlGUvI+JOSgTv/cw2pOTiS9yGR9z3ZCy9jrZGZaMHb0S+Bx ZWezsbXFyHNgti5UXCPR/o8Q+18l3KBoSzpmL1qchtP9YIVM+zjT7Wui+BDHSAGg XQVLJA05LUPchNudNKotihFe/RaSMU8PObJOcAiHP8jAf17AIU7wseOZMv5hnUDm ehceAe4AnHremS6T31NY3ijOhdJRppoLepfEGQyf76s3xL1N4c+rzh8G9QIDAQAB o4ICbDCCAmgwHQYDVR0OBBYEFKzwTaIgNywGmUq7OVVgNMj98jdZMB8GA1UdIwQY MBaAFFp1aZS7KS5J7MYze3+V1p7ir2HhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV25WcGxMc3BMa25zeGpON2Y1WFdudUt2WWVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84M2IwN2YtMWQyMi00YWUwLWEyZGUt NGUwYWE0MmExNWE4LzEvclBCTm9pQTNMQWFaU3JzNVZXQTB5UDN5TjFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi84M2IwN2YtMWQyMi00YWUwLWEyZGUtNGUwYWE0MmExNWE4 LzEvV25WcGxMc3BMa25zeGpON2Y1WFdudUt2WWVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwWAQCAAEwUgMEAwU5wDAM AwQDTexoAwQDTexwAwQDT6uwAwQFUnNgAwQEXXfwAwQDsvjYAwQCuQWoAwQBuSds MAwDBADANkMDBAPANkADBAXUB6ADBATZERAwFAQCAAIwDgMFACoBVYADBQAqAhYo MA0GCSqGSIb3DQEBCwUAA4IBAQA46ulS8+ZE5QVI23SggHsf4Zi5VeSl1xLWrufF Ia3LUReGG8WOJBuJks7hYxO/INBPuJQEi4ZJ3AmZ8HmogYa8ztfRi+wlSNN3tOhK 5BWf7hQMkN2LKsqD+HIzan3zniBhp4LFSiQ5uvgLvcWz3ZuPfgGKxdGJyb8qHfvW Tj3Pm9OkfgxyKaFCnGWBykjpiFvWCzAakBWpFPm2UT0Vao/LxMpc89vFTR2SrrE4 4bhick00QsLssTmenBRDH1OIc3jpL89rASweQqy8s9l9EkHWBGe5+PAdVsoVkfAq xu6vo13vI5/d1+aIJv8oQxilJ/yokSNPMKxmemqZBEMyU08+ -----END CERTIFICATE-----Generated at Mon Feb 9 21:18:44 2026 by rpki-client