This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/t3R9MpZvNi4B5O3PeMlZmxothNM.roa File: t3R9MpZvNi4B5O3PeMlZmxothNM.roa (raw, json) Hash identifier: 0Evh98kS6qvThrmAMvnRdgVdKBcCHS0mGPabP0ZsQ58= Subject key identifier: B7:74:7D:32:96:6F:36:2E:01:E4:ED:CF:78:C9:59:9B:1A:2D:84:D3 Certificate issuer: /CN=5a4a47d582bb0e9680f89258ab96d05867d352ef Certificate serial: 019B7C7FB9E9179CAD03294D55E6811C076B Authority key identifier: 5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/t3R9MpZvNi4B5O3PeMlZmxothNM.roa Signing time: Fri 02 Jan 2026 02:18:24 +0000 ROA not before: Fri 02 Jan 2026 02:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61137 IP address blocks: 5.53.96.0/21 maxlen: 21 5.53.96.0/22 maxlen: 22 5.53.100.0/24 maxlen: 24 91.229.64.0/24 maxlen: 24 91.229.65.0/24 maxlen: 24 109.205.28.0/23 maxlen: 23 185.76.128.0/22 maxlen: 22 185.76.130.0/24 maxlen: 24 185.76.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:b9:e9:17:9c:ad:03:29:4d:55:e6:81:1c:07:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a4a47d582bb0e9680f89258ab96d05867d352ef Validity Not Before: Jan 2 02:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7747d32966f362e01e4edcf78c9599b1a2d84d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3f:b8:53:48:4b:9e:3c:34:e3:e1:6d:05:3c: 0c:e4:79:03:3c:d6:8c:b3:c4:ea:ed:01:26:6b:70: 03:e3:55:8f:06:e8:94:a3:89:0a:32:4d:ca:c3:b4: 47:29:20:1c:86:b9:59:e7:6f:68:6c:41:8e:f1:86: 72:06:89:c8:65:2e:bd:55:ff:6b:04:70:77:30:53: e6:e2:c3:30:5e:15:3e:f8:22:b7:19:5f:7f:52:09: b8:70:54:fb:e4:50:86:81:3f:17:84:14:2d:fe:db: 64:65:c3:dd:98:fe:e2:f6:2e:cf:dd:29:d2:06:b2: 15:15:f2:44:c2:eb:c5:84:8b:4d:2b:21:c9:fb:e5: d1:be:92:c7:18:f0:cc:8e:cb:13:2b:32:72:03:ec: 9e:b8:19:80:a4:69:02:45:44:74:10:9e:a9:23:69: 5d:5f:4f:c6:d1:9b:07:6f:8a:b6:28:a1:b9:ac:c1: 21:ea:65:3d:4a:43:49:1f:cf:1b:26:2d:3f:23:a9: 6a:c5:09:d9:7f:13:4d:f1:76:8c:10:01:42:36:d4: 9d:45:de:3a:22:ec:95:b4:3e:99:35:53:56:4b:46: b2:c0:4f:be:95:68:97:64:d5:4b:d3:9f:3b:23:fb: 40:d8:89:71:75:63:f3:4b:9c:e4:58:f2:bc:cf:12: c4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:74:7D:32:96:6F:36:2E:01:E4:ED:CF:78:C9:59:9B:1A:2D:84:D3 X509v3 Authority Key Identifier: keyid:5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/t3R9MpZvNi4B5O3PeMlZmxothNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.53.96.0/21 91.229.64.0/23 109.205.28.0/23 185.76.128.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:76:83:18:ac:cc:26:ef:73:50:db:8d:52:52:26:49:94:c2: 4c:a3:fe:1d:b3:0b:e8:7d:0e:23:be:df:4f:07:ba:9b:52:90: 27:fe:a9:7b:9a:71:88:2d:6a:ab:eb:59:5f:de:f7:d1:a9:70: 62:32:3f:a3:a4:25:73:86:5b:7a:c8:cc:0b:0b:d3:16:f1:a2: 7f:84:6c:89:c2:49:73:95:08:71:e6:76:cc:87:41:74:72:42: 8b:ca:8f:1a:3e:a1:66:3d:2e:4a:d8:95:a6:cf:53:80:b8:47: 3c:a8:45:c5:be:5d:79:24:b3:fb:08:78:3f:97:ea:ef:59:5f: e0:81:03:fa:a5:30:32:23:88:21:63:bd:26:62:54:31:ba:38: 78:da:d7:76:13:87:27:07:71:10:09:75:45:b4:21:ef:fe:fb: f9:c0:01:7f:72:38:5c:15:e2:3f:41:01:70:f7:b1:e0:d6:94: 32:00:ba:5b:0f:f8:46:bb:ab:0b:8a:af:59:51:23:06:7b:27: ba:aa:49:63:64:1c:06:32:12:8f:fd:c9:d2:2e:82:09:0b:63: a0:a3:0d:a1:09:e7:fe:99:3e:eb:fd:82:44:bf:4f:07:51:85: 63:07:5a:7f:48:d7:f7:97:a4:39:f4:9b:24:76:40:40:16:b2: 6f:66:9a:49 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8f7npF5ytAylNVeaBHAdrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNGE0N2Q1ODJiYjBlOTY4MGY4OTI1OGFiOTZkMDU4Njdk MzUyZWYwHhcNMjYwMTAyMDIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzc0N2QzMjk2NmYzNjJlMDFlNGVkY2Y3OGM5NTk5YjFhMmQ4NGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz+4U0hLnjw04+FtBTwM5HkDPNaM s8Tq7QEma3AD41WPBuiUo4kKMk3Kw7RHKSAchrlZ529obEGO8YZyBonIZS69Vf9r BHB3MFPm4sMwXhU++CK3GV9/Ugm4cFT75FCGgT8XhBQt/ttkZcPdmP7i9i7P3SnS BrIVFfJEwuvFhItNKyHJ++XRvpLHGPDMjssTKzJyA+yeuBmApGkCRUR0EJ6pI2ld X0/G0ZsHb4q2KKG5rMEh6mU9SkNJH88bJi0/I6lqxQnZfxNN8XaMEAFCNtSdRd46 IuyVtD6ZNVNWS0aywE++lWiXZNVL0587I/tA2IlxdWPzS5zkWPK8zxLESQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLd0fTKWbzYuAeTtz3jJWZsaLYTTMB8GA1UdIwQY MBaAFFpKR9WCuw6WgPiSWKuW0Fhn01LvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2twSDFZSzdEcGFBLUpKWXE1YlFXR2ZUVXU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS80Yjc1NzYtMmI5Yy00M2FmLTg4MTct NmIwMDY1NTA4OTk2LzEvdDNSOU1wWnZOaTRCNU8zUGVNbFpteG90aE5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS80Yjc1NzYtMmI5Yy00M2FmLTg4MTctNmIwMDY1NTA4OTk2 LzEvV2twSDFZSzdEcGFBLUpKWXE1YlFXR2ZUVXU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDBTVgAwQB W+VAAwQBbc0cAwQCuUyAMA0GCSqGSIb3DQEBCwUAA4IBAQCedoMYrMwm73NQ241S UiZJlMJMo/4dswvofQ4jvt9PB7qbUpAn/ql7mnGILWqr61lf3vfRqXBiMj+jpCVz hlt6yMwLC9MW8aJ/hGyJwklzlQhx5nbMh0F0ckKLyo8aPqFmPS5K2JWmz1OAuEc8 qEXFvl15JLP7CHg/l+rvWV/ggQP6pTAyI4ghY70mYlQxujh42td2E4cnB3EQCXVF tCHv/vv5wAF/cjhcFeI/QQFw97Hg1pQyALpbD/hGu6sLiq9ZUSMGeye6qkljZBwG MhKP/cnSLoIJC2Ogow2hCef+mT7r/YJEv08HUYVjB1p/SNf3l6Q59JskdkBAFrJv ZppJ -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:36 2026 by rpki-client