This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/r-quIjwdyrg-7CpTYAt7s6mJo7s.roa File: r-quIjwdyrg-7CpTYAt7s6mJo7s.roa (raw, json) Hash identifier: ADfzV06xxaQ5VSPcK/9eZMELmZf4strlPALlxE72GRg= Subject key identifier: AF:EA:AE:22:3C:1D:CA:B8:3E:EC:2A:53:60:0B:7B:B3:A9:89:A3:BB Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Certificate serial: 019B7AC906EFC2F311036AA651C533703D75 Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/r-quIjwdyrg-7CpTYAt7s6mJo7s.roa Signing time: Thu 01 Jan 2026 18:19:13 +0000 ROA not before: Thu 01 Jan 2026 18:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210976 IP address blocks: 5.44.46.0/24 maxlen: 24 5.44.47.0/24 maxlen: 24 37.220.81.0/24 maxlen: 24 37.220.82.0/24 maxlen: 24 37.220.83.0/24 maxlen: 24 37.220.84.0/24 maxlen: 24 37.220.85.0/24 maxlen: 24 45.95.235.0/24 maxlen: 24 46.19.68.0/24 maxlen: 24 46.19.69.0/24 maxlen: 24 81.200.154.0/24 maxlen: 24 81.200.155.0/24 maxlen: 24 81.200.156.0/24 maxlen: 24 81.200.157.0/24 maxlen: 24 85.92.108.0/24 maxlen: 24 89.191.226.0/24 maxlen: 24 141.98.235.0/24 maxlen: 24 185.166.196.0/24 maxlen: 24 185.166.197.0/24 maxlen: 24 194.31.173.0/24 maxlen: 24 194.31.174.0/24 maxlen: 24 194.31.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:06:ef:c2:f3:11:03:6a:a6:51:c5:33:70:3d:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Validity Not Before: Jan 1 18:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afeaae223c1dcab83eec2a53600b7bb3a989a3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d9:69:bd:ed:64:b8:40:41:4e:10:15:c2:27: d1:88:cd:f3:cd:ab:8a:6c:aa:50:52:36:98:d3:ac: 43:12:ae:18:f3:95:dd:33:80:0d:76:60:f5:ef:8a: ae:f9:d7:38:39:56:d1:71:24:9d:c4:42:d7:ec:59: 6f:2f:53:02:44:ac:62:f6:0e:2e:fd:77:13:9b:73: fd:d4:3a:7c:e2:32:b9:02:42:11:a1:5f:a7:94:01: 05:d2:c5:c2:88:4e:75:f6:d8:1c:b9:36:22:bd:49: 4e:4e:89:19:0d:81:42:bc:2a:9d:f2:d3:83:56:4c: 89:0f:47:ec:41:4c:ac:6e:3b:fa:1a:96:47:1d:23: ed:6e:73:6b:ce:2a:6a:53:1e:6f:fd:49:3f:8d:5e: 3c:d5:01:60:54:c9:4c:98:78:39:76:cb:c7:be:c9: 6b:9e:89:c3:87:2d:4b:1b:59:14:de:17:4f:84:d3: 3e:55:49:c1:f9:24:66:17:43:af:80:d0:8e:12:d0: eb:6b:d3:d3:39:4e:4d:9f:15:46:20:9f:71:5b:db: 44:e2:f3:0d:4b:c0:1f:56:87:7b:4e:73:2e:29:be: 29:7f:1c:40:b0:0a:cf:46:1e:48:19:13:33:08:c4: 77:a1:52:c4:75:dd:a4:44:01:e1:99:05:29:00:dd: 94:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:EA:AE:22:3C:1D:CA:B8:3E:EC:2A:53:60:0B:7B:B3:A9:89:A3:BB X509v3 Authority Key Identifier: keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/r-quIjwdyrg-7CpTYAt7s6mJo7s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.44.46.0/23 37.220.81.0-37.220.85.255 45.95.235.0/24 46.19.68.0/23 81.200.154.0-81.200.157.255 85.92.108.0/24 89.191.226.0/24 141.98.235.0/24 185.166.196.0/23 194.31.173.0-194.31.175.255 Signature Algorithm: sha256WithRSAEncryption 4f:72:53:d9:4e:5a:0e:9f:0f:09:b0:e3:e6:de:3e:9a:34:ee: 13:b3:e5:0c:5d:03:3b:f1:f1:66:71:5c:6d:ea:13:ce:a8:74: 9a:a9:6a:4c:9a:33:66:44:e5:c7:22:9e:4c:4e:b8:8d:44:c9: fd:18:97:43:55:bb:1a:d9:1b:6f:72:bb:2b:5e:e9:0e:d1:f9: d3:8a:c1:58:56:83:ae:25:1e:36:9f:03:2c:6b:e3:9e:e1:db: 16:e6:ea:8d:6d:97:95:0f:5f:fe:18:0a:aa:49:e1:97:f8:42: ae:1c:c7:c4:07:20:96:42:1e:98:7b:7a:49:89:86:05:23:30: aa:7f:8c:5d:59:78:fc:50:5c:48:85:e4:f5:9b:b4:0b:45:79: 89:c9:b1:2c:73:97:2f:39:1a:94:f9:4f:c4:b3:c3:e1:3c:d9: 73:85:aa:20:6c:af:96:46:81:14:ca:6a:79:81:9f:83:59:8d: 20:62:26:41:a8:a0:db:62:64:5e:36:86:fd:1c:98:43:0b:98: 10:04:f1:ac:c6:eb:f5:64:4e:3f:2e:8a:fe:d0:ed:b9:9d:06: 72:d1:9b:32:f0:97:18:c2:50:46:f4:0b:bb:93:f8:22:a3:8d: 17:ab:8e:11:33:55:ca:c2:18:4a:70:07:a4:ae:62:e9:12:ed: e0:f4:47:b8 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZt6yQbvwvMRA2qmUcUzcD11MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2 NGIyMGYwHhcNMjYwMTAxMTgxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmVhYWUyMjNjMWRjYWI4M2VlYzJhNTM2MDBiN2JiM2E5ODlhM2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldlpve1kuEBBThAVwifRiM3zzauK bKpQUjaY06xDEq4Y85XdM4ANdmD174qu+dc4OVbRcSSdxELX7FlvL1MCRKxi9g4u /XcTm3P91Dp84jK5AkIRoV+nlAEF0sXCiE519tgcuTYivUlOTokZDYFCvCqd8tOD VkyJD0fsQUysbjv6GpZHHSPtbnNrzipqUx5v/Uk/jV481QFgVMlMmHg5dsvHvslr nonDhy1LG1kU3hdPhNM+VUnB+SRmF0OvgNCOEtDra9PTOU5NnxVGIJ9xW9tE4vMN S8AfVod7TnMuKb4pfxxAsArPRh5IGRMzCMR3oVLEdd2kRAHhmQUpAN2U9QIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFK/qriI8Hcq4PuwqU2ALe7OpiaO7MB8GA1UdIwQY MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct NDkwNTI0M2JjODI4LzEvci1xdUlqd2R5cmctN0NwVFlBdDdzNm1KbzdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4 LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQBBSwuMAwD BAAl3FEDBAEl3FQDBAAtX+sDBAEuE0QwDAMEAVHImgMEAVHInAMEAFVcbAMEAFm/ 4gMEAI1i6wMEAbmmxDAMAwQAwh+tAwQEwh+gMA0GCSqGSIb3DQEBCwUAA4IBAQBP clPZTloOnw8JsOPm3j6aNO4Ts+UMXQM78fFmcVxt6hPOqHSaqWpMmjNmROXHIp5M TriNRMn9GJdDVbsa2RtvcrsrXukO0fnTisFYVoOuJR42nwMsa+Oe4dsW5uqNbZeV D1/+GAqqSeGX+EKuHMfEByCWQh6Ye3pJiYYFIzCqf4xdWXj8UFxIheT1m7QLRXmJ ybEsc5cvORqU+U/Es8PhPNlzhaogbK+WRoEUymp5gZ+DWY0gYiZBqKDbYmReNob9 HJhDC5gQBPGsxuv1ZE4/Lor+0O25nQZy0Zsy8JcYwlBG9Au7k/gio40Xq44RM1XK whhKcAekrmLpEu3g9Ee4 -----END CERTIFICATE-----Generated at Wed Jan 21 11:15:15 2026 by rpki-client