This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/ReFoU0vqMdItTbwZ4tOM7bCmAhg.roa File: ReFoU0vqMdItTbwZ4tOM7bCmAhg.roa (raw, json) Hash identifier: AuLdH8lMRAM53ImTxBSwBIPLZa61IiJ7LX4/1Usrvg0= Subject key identifier: 45:E1:68:53:4B:EA:31:D2:2D:4D:BC:19:E2:D3:8C:ED:B0:A6:02:18 Certificate issuer: /CN=8bdc53cc2263f6fdea170d3282a20b8e71607386 Certificate serial: 019B79104BBA4F5F7795B04C081CD34EA83D Authority key identifier: 8B:DC:53:CC:22:63:F6:FD:EA:17:0D:32:82:A2:0B:8E:71:60:73:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/ReFoU0vqMdItTbwZ4tOM7bCmAhg.roa Signing time: Thu 01 Jan 2026 10:17:49 +0000 ROA not before: Thu 01 Jan 2026 10:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51110 IP address blocks: 5.102.72.0/24 maxlen: 24 5.102.73.0/24 maxlen: 24 5.102.74.0/24 maxlen: 24 5.102.75.0/24 maxlen: 24 5.102.76.0/24 maxlen: 24 5.102.77.0/24 maxlen: 24 5.102.78.0/24 maxlen: 24 5.102.79.0/24 maxlen: 24 94.124.152.0/24 maxlen: 24 94.124.153.0/24 maxlen: 24 94.124.154.0/24 maxlen: 24 94.124.155.0/24 maxlen: 24 94.124.156.0/24 maxlen: 24 94.124.157.0/24 maxlen: 24 94.124.158.0/24 maxlen: 24 94.124.159.0/24 maxlen: 24 185.91.232.0/24 maxlen: 24 185.91.233.0/24 maxlen: 24 185.91.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:4b:ba:4f:5f:77:95:b0:4c:08:1c:d3:4e:a8:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bdc53cc2263f6fdea170d3282a20b8e71607386 Validity Not Before: Jan 1 10:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45e168534bea31d22d4dbc19e2d38cedb0a60218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f9:8e:4c:20:a7:21:58:c7:cd:cb:74:db:7e: b3:3d:88:51:06:4b:1f:5a:ca:14:2a:7f:35:91:6a: c1:c7:23:f0:16:1c:7c:82:22:1e:ca:11:c8:de:91: 87:76:94:67:b5:59:74:6f:39:bf:d3:7b:db:9c:19: 9f:dc:05:67:29:c2:69:e1:d2:3b:c8:9b:e4:d2:5a: 22:ac:31:08:62:ab:02:7a:6e:8a:39:14:4f:20:cc: 5d:f2:df:9b:e0:06:04:2f:87:4e:2c:6c:fb:c6:49: e2:f8:52:22:70:55:98:e1:0f:71:13:71:85:45:58: 5f:75:74:ae:1c:8d:a4:f9:3d:62:b7:62:fd:f0:56: 32:8b:b5:d8:1e:73:bf:e5:8c:17:c5:2d:45:77:af: b2:fa:13:36:38:f8:aa:22:cd:a5:63:7b:b6:8c:ec: 53:55:98:40:5e:0d:eb:79:6c:3f:2f:76:02:3c:c5: 28:6a:cc:6a:fb:ec:0c:a9:be:e9:1c:d1:2b:68:18: cd:c6:a7:14:37:88:18:84:1c:7d:38:d7:ab:d5:09: 75:5f:95:b7:69:09:64:4a:8a:ab:a3:bb:71:2a:73: c1:fb:fd:ae:23:53:76:47:20:9b:3b:91:c1:d9:f6: fa:9c:4c:57:a7:30:99:fd:be:91:3a:fc:52:8f:29: e4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E1:68:53:4B:EA:31:D2:2D:4D:BC:19:E2:D3:8C:ED:B0:A6:02:18 X509v3 Authority Key Identifier: keyid:8B:DC:53:CC:22:63:F6:FD:EA:17:0D:32:82:A2:0B:8E:71:60:73:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/ReFoU0vqMdItTbwZ4tOM7bCmAhg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.72.0/21 94.124.152.0/21 185.91.232.0-185.91.234.255 Signature Algorithm: sha256WithRSAEncryption 84:78:c4:1a:44:d4:2c:d4:4b:cd:9a:b2:7c:ee:66:06:95:d2: e4:81:6a:13:fc:63:67:3f:b3:95:4c:58:a7:b1:c0:7f:7a:ec: 28:8b:3a:8c:41:5a:f7:68:4a:4f:0f:45:f6:ed:59:fa:1c:07: 11:24:05:df:a4:a7:03:76:70:78:1f:9e:64:dc:83:67:a5:f2: 0e:b4:4a:dd:9a:02:73:7b:cd:fd:47:9b:bc:82:71:b9:ae:0a: 23:2c:d1:37:97:ea:86:01:9b:0f:f5:7c:32:93:47:c8:d1:50: d4:8e:8b:2c:c3:c8:75:1f:65:e6:52:af:bf:47:1a:31:31:f0: 95:4d:2f:a5:e6:93:36:c5:e7:4f:36:32:bd:e8:79:77:5b:84: f7:70:1d:9c:f3:87:f7:5a:88:b4:3e:07:29:c7:b4:30:2f:3d: 22:3f:50:e8:a5:33:9f:27:7d:9c:d0:25:49:6e:55:4c:08:10: 0d:50:c7:1b:bb:36:00:b5:4e:59:2a:1b:24:4a:ae:93:f0:48: 99:6d:f0:fe:2b:0f:61:d9:67:fa:9b:de:f1:d8:82:d9:d9:38: 41:a7:2c:48:0f:2b:fe:78:10:f9:21:98:2b:3a:fc:fd:e2:1c: 65:34:1d:47:df:3b:8a:8d:cb:6d:02:b5:34:f0:de:ef:58:ed: 72:22:9b:0b -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt5EEu6T193lbBMCBzTTqg9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZGM1M2NjMjI2M2Y2ZmRlYTE3MGQzMjgyYTIwYjhlNzE2 MDczODYwHhcNMjYwMTAxMTAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWUxNjg1MzRiZWEzMWQyMmQ0ZGJjMTllMmQzOGNlZGIwYTYwMjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPmOTCCnIVjHzct0236zPYhRBksf WsoUKn81kWrBxyPwFhx8giIeyhHI3pGHdpRntVl0bzm/03vbnBmf3AVnKcJp4dI7 yJvk0loirDEIYqsCem6KORRPIMxd8t+b4AYEL4dOLGz7xkni+FIicFWY4Q9xE3GF RVhfdXSuHI2k+T1it2L98FYyi7XYHnO/5YwXxS1Fd6+y+hM2OPiqIs2lY3u2jOxT VZhAXg3reWw/L3YCPMUoasxq++wMqb7pHNEraBjNxqcUN4gYhBx9ONer1Ql1X5W3 aQlkSoqro7txKnPB+/2uI1N2RyCbO5HB2fb6nExXpzCZ/b6ROvxSjynkswIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFEXhaFNL6jHSLU28GeLTjO2wpgIYMB8GA1UdIwQY MBaAFIvcU8wiY/b96hcNMoKiC45xYHOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTl4VHpDSmo5djNxRncweWdxSUxqbkZnYzRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMzc0MmYtMWQ3MC00ZjMxLWE5Y2Et N2FjYjIxYmE3NzNmLzEvUmVGb1UwdnFNZEl0VGJ3WjR0T003YkNtQWhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yMzc0MmYtMWQ3MC00ZjMxLWE5Y2EtN2FjYjIxYmE3NzNm LzEvaTl4VHpDSmo5djNxRncweWdxSUxqbkZnYzRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQDBWZIAwQD XnyYMAwDBAO5W+gDBAC5W+owDQYJKoZIhvcNAQELBQADggEBAIR4xBpE1CzUS82a snzuZgaV0uSBahP8Y2c/s5VMWKexwH967CiLOoxBWvdoSk8PRfbtWfocBxEkBd+k pwN2cHgfnmTcg2el8g60St2aAnN7zf1Hm7yCcbmuCiMs0TeX6oYBmw/1fDKTR8jR UNSOiyzDyHUfZeZSr79HGjEx8JVNL6XmkzbF5082Mr3oeXdbhPdwHZzzh/daiLQ+ BynHtDAvPSI/UOilM58nfZzQJUluVUwIEA1Qxxu7NgC1TlkqGyRKrpPwSJlt8P4r D2HZZ/qb3vHYgtnZOEGnLEgPK/54EPkhmCs6/P3iHGU0HUffO4qNy20CtTTw3u9Y 7XIimws= -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:27 2026 by rpki-client