This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/B-5LpHxABUdZLyscoHErjkqyIKk.roa File: B-5LpHxABUdZLyscoHErjkqyIKk.roa (raw, json) Hash identifier: O/ISaaNiYJWY/Osy259CyKWIm66WcENOZJ8/yUUM18U= Subject key identifier: 07:EE:4B:A4:7C:40:05:47:59:2F:2B:1C:A0:71:2B:8E:4A:B2:20:A9 Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019B7E389994B515D1949713ED8738060A3E Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/B-5LpHxABUdZLyscoHErjkqyIKk.roa Signing time: Fri 02 Jan 2026 10:19:57 +0000 ROA not before: Fri 02 Jan 2026 10:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60380 IP address blocks: 80.86.184.0/24 maxlen: 24 80.86.188.0/23 maxlen: 23 81.209.248.0/21 maxlen: 21 83.125.6.0/23 maxlen: 23 83.133.178.0/23 maxlen: 23 83.133.240.0/20 maxlen: 20 2001:7f0:3000::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:99:94:b5:15:d1:94:97:13:ed:87:38:06:0a:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jan 2 10:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07ee4ba47c400547592f2b1ca0712b8e4ab220a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:37:11:4d:02:dc:77:5d:a3:91:35:21:a4:cb: e9:21:f3:c9:6a:5b:d4:b3:9f:d0:3e:50:b8:8c:f1: 5f:b1:6a:2e:07:f3:5b:51:71:69:b6:da:c0:4f:2b: b5:6e:85:ba:51:f5:33:f3:1f:c7:c2:06:0c:14:4f: aa:88:87:b6:7e:67:f2:d8:79:06:73:38:5b:99:55: 61:ec:bc:3c:82:6c:68:4c:45:ea:f0:b1:62:91:ac: 9e:68:4f:75:1b:37:13:c5:9e:6f:25:4f:87:be:4a: 47:aa:7d:0b:0c:8c:65:6f:57:3c:a7:7b:38:d6:a4: fe:35:22:23:3e:00:5c:e6:1b:2a:f9:61:1b:fb:66: 94:d5:9f:9c:4f:37:aa:41:f2:a6:58:02:bc:60:8f: 2c:06:c7:a9:f8:8d:50:81:00:9d:c9:74:da:b3:e1: 70:70:2a:1a:fa:4c:02:cd:54:81:4d:9a:9f:49:b3: 29:9c:29:11:31:c7:48:b4:46:ee:c7:46:f3:f7:fa: 4b:29:d8:23:66:e9:25:b9:13:ff:fe:ff:d6:f2:95: e1:e8:50:a3:32:fb:3a:68:c8:de:65:74:22:1b:2f: f7:20:07:c5:58:0c:1d:33:dd:e9:1e:25:fd:fa:9c: f9:3e:0b:33:89:87:3a:35:24:6f:ad:5a:4a:35:52: e2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:EE:4B:A4:7C:40:05:47:59:2F:2B:1C:A0:71:2B:8E:4A:B2:20:A9 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/B-5LpHxABUdZLyscoHErjkqyIKk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.86.184.0/24 80.86.188.0/23 81.209.248.0/21 83.125.6.0/23 83.133.178.0/23 83.133.240.0/20 IPv6: 2001:7f0:3000::/46 Signature Algorithm: sha256WithRSAEncryption 21:22:d7:97:4d:9b:d1:2a:4c:30:13:8e:de:33:54:84:63:d3: 62:fc:44:73:51:a8:4d:40:1a:22:84:6c:cf:33:3c:12:de:f1: d8:1b:5e:d4:4d:df:c5:f3:0d:2a:1d:af:8c:0e:f8:b9:b9:23: fc:3a:6d:78:d2:08:a8:9f:3b:01:7b:f0:19:67:59:59:cc:a6: f7:57:78:30:f8:8b:87:06:2c:08:b5:57:f9:ff:5e:5a:47:1c: 8a:a6:bb:4c:ef:65:38:ef:bc:6c:f4:a3:97:91:5c:b1:27:10: 89:c2:89:9c:ec:8b:e5:d2:07:b9:45:1d:7e:3a:53:8e:28:28: 85:f8:c3:11:f5:a5:d6:d8:e1:4d:50:ae:b5:8c:4b:fb:b9:aa: 4d:a6:12:80:db:cf:cb:32:98:1e:c9:0b:f7:80:d7:4c:ee:57: df:72:21:ef:ca:39:85:f2:b5:93:57:29:b8:37:47:18:16:d9: 8b:5a:86:5b:bd:22:08:a5:62:d2:01:ca:90:1c:8c:cb:7d:31: 9a:84:d7:2f:f4:71:46:c3:02:34:f9:70:b0:78:65:73:49:c4: cb:d0:18:02:cd:3b:0e:41:5a:60:de:2c:f9:c2:6f:eb:49:2c: 34:e9:63:10:cb:b4:42:c3:2a:43:2d:1b:60:35:41:44:64:10: ae:70:ea:b3 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt+OJmUtRXRlJcT7Yc4Bgo+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwMTAyMTAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2VlNGJhNDdjNDAwNTQ3NTkyZjJiMWNhMDcxMmI4ZTRhYjIyMGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzcRTQLcd12jkTUhpMvpIfPJalvU s5/QPlC4jPFfsWouB/NbUXFpttrATyu1boW6UfUz8x/HwgYMFE+qiIe2fmfy2HkG czhbmVVh7Lw8gmxoTEXq8LFikayeaE91GzcTxZ5vJU+HvkpHqn0LDIxlb1c8p3s4 1qT+NSIjPgBc5hsq+WEb+2aU1Z+cTzeqQfKmWAK8YI8sBsep+I1QgQCdyXTas+Fw cCoa+kwCzVSBTZqfSbMpnCkRMcdItEbux0bz9/pLKdgjZukluRP//v/W8pXh6FCj Mvs6aMjeZXQiGy/3IAfFWAwdM93pHiX9+pz5PgsziYc6NSRvrVpKNVLi/wIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFAfuS6R8QAVHWS8rHKBxK45KsiCpMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvQi01THBIeEFCVWRaTHlzY29IRXJqa3F5SUtrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAqBAIAATAkAwQAUFa4AwQB UFa8AwQDUdH4AwQBU30GAwQBU4WyAwQEU4XwMA8EAgACMAkDBwIgAQfwMAAwDQYJ KoZIhvcNAQELBQADggEBACEi15dNm9EqTDATjt4zVIRj02L8RHNRqE1AGiKEbM8z PBLe8dgbXtRN38XzDSodr4wO+Lm5I/w6bXjSCKifOwF78BlnWVnMpvdXeDD4i4cG LAi1V/n/XlpHHIqmu0zvZTjvvGz0o5eRXLEnEInCiZzsi+XSB7lFHX46U44oKIX4 wxH1pdbY4U1QrrWMS/u5qk2mEoDbz8symB7JC/eA10zuV99yIe/KOYXytZNXKbg3 RxgW2Ytahlu9IgilYtIBypAcjMt9MZqE1y/0cUbDAjT5cLB4ZXNJxMvQGALNOw5B WmDeLPnCb+tJLDTpYxDLtELDKkMtG2A1QURkEK5w6rM= -----END CERTIFICATE-----Generated at Thu Feb 5 13:56:10 2026 by rpki-client