This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/1FmJS162fQbGwB70KRRIxqQYTPA.roa File: 1FmJS162fQbGwB70KRRIxqQYTPA.roa (raw, json) Hash identifier: wZ0mqVcfmtfFGvqCihWmXQC/JMhhCh9+TH6XvIsulCo= Subject key identifier: D4:59:89:4B:5E:B6:7D:06:C6:C0:1E:F4:29:14:48:C6:A4:18:4C:F0 Certificate issuer: /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba Certificate serial: 019B7DCA3C2FEDBC9169BA81E5EBF2D5DEB8 Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/1FmJS162fQbGwB70KRRIxqQYTPA.roa Signing time: Fri 02 Jan 2026 08:19:24 +0000 ROA not before: Fri 02 Jan 2026 08:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13193 IP address blocks: 5.23.40.0/21 maxlen: 24 62.212.96.0/19 maxlen: 24 78.40.48.0/21 maxlen: 24 79.170.216.0/21 maxlen: 24 80.65.224.0/20 maxlen: 24 80.248.208.0/20 maxlen: 24 93.184.32.0/20 maxlen: 24 171.25.208.0/22 maxlen: 24 178.132.16.0/20 maxlen: 24 185.33.40.0/22 maxlen: 24 185.43.68.0/22 maxlen: 24 194.79.128.0/18 maxlen: 24 194.146.224.0/22 maxlen: 24 194.242.112.0/22 maxlen: 24 195.5.192.0/18 maxlen: 18 213.41.128.0/17 maxlen: 24 213.215.0.0/18 maxlen: 24 2001:7a8::/32 maxlen: 32 2a01:68::/32 maxlen: 32 2a01:6460::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 23:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:3c:2f:ed:bc:91:69:ba:81:e5:eb:f2:d5:de:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba Validity Not Before: Jan 2 08:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d459894b5eb67d06c6c01ef4291448c6a4184cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:13:1d:be:c7:34:b5:d3:03:06:91:b2:a7:4f: 6c:f8:70:bb:d8:89:82:bd:8d:52:71:c6:5a:3b:88: b3:79:9b:3c:61:67:14:1c:f0:01:ce:02:2f:12:b2: 3d:27:6b:80:5a:6b:ad:a6:ec:e9:0f:9d:bb:09:c8: 7f:80:b6:ad:5a:4e:2a:77:55:9f:e1:6d:ee:3e:0f: 39:37:ae:36:20:91:f7:15:9f:47:53:96:e7:7f:34: 2e:29:8d:7d:79:87:eb:67:d5:54:9e:ff:b3:ca:cb: 91:b4:b8:eb:2e:f5:e4:b3:3a:62:42:01:40:35:d3: 9c:81:0d:b8:12:e7:84:dd:a3:e7:49:1e:8c:54:0c: 0c:eb:0b:ac:64:58:64:74:b7:a8:1d:44:b2:c0:50: 68:87:b8:49:f4:99:9a:d0:db:73:ed:72:61:bd:fc: 8a:d8:05:ba:04:0e:6d:cb:a5:88:6f:61:35:67:5b: 78:f7:72:01:a6:03:33:55:56:13:c6:e7:8a:5d:05: 44:70:00:3f:06:12:02:92:35:af:d8:8d:03:be:8c: 75:a4:9d:75:06:32:36:1b:90:d8:e5:78:43:5a:11: 08:83:39:c3:9d:6d:29:ce:f1:19:9b:97:e1:71:42: db:1a:4f:96:b8:2d:01:77:5a:70:a6:bc:85:11:a3: cd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:59:89:4B:5E:B6:7D:06:C6:C0:1E:F4:29:14:48:C6:A4:18:4C:F0 X509v3 Authority Key Identifier: keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/1FmJS162fQbGwB70KRRIxqQYTPA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.23.40.0/21 62.212.96.0/19 78.40.48.0/21 79.170.216.0/21 80.65.224.0/20 80.248.208.0/20 93.184.32.0/20 171.25.208.0/22 178.132.16.0/20 185.33.40.0/22 185.43.68.0/22 194.79.128.0/18 194.146.224.0/22 194.242.112.0/22 195.5.192.0/18 213.41.128.0/17 213.215.0.0/18 IPv6: 2001:7a8::/32 2a01:68::/32 2a01:6460::/32 Signature Algorithm: sha256WithRSAEncryption 5b:1b:5d:19:e2:5a:be:09:2d:32:f7:73:93:8e:65:e1:bf:59: 88:16:bb:fe:89:e7:4e:af:78:04:eb:0d:01:81:55:3e:8c:c4: 02:45:94:48:4f:c5:35:ef:fe:a2:68:3b:44:a9:60:f8:fb:24: fb:64:47:b7:15:b2:40:e3:a4:e9:f3:fe:f4:47:97:1b:15:d4: 37:0c:de:9f:0b:68:33:ca:39:36:0b:4c:87:e8:8f:b3:20:27: 15:19:97:fc:b4:1a:1c:bd:97:98:91:f3:c7:e5:77:5d:49:05: 4a:a8:47:7f:56:99:53:45:f0:8c:ad:2c:9d:15:ec:fa:81:7a: be:89:6a:a6:10:42:b9:a7:3c:4b:d5:ac:41:dd:9b:b8:04:77: 86:55:73:cd:43:ab:cd:0b:de:8e:b3:66:43:d5:29:82:75:77: 7a:9d:e4:fc:6f:3b:3a:d1:05:c4:21:3f:43:18:02:42:2b:23: 3c:70:22:22:72:68:a7:ee:68:8b:67:0b:a0:c3:89:2f:42:cf: 8d:81:21:f9:17:83:b6:41:7e:1d:87:16:63:fa:20:5b:5b:67: cc:ba:f3:af:67:80:c9:d7:2f:fc:93:44:92:ed:c0:17:5f:b3: 30:94:b3:66:b2:23:fd:19:44:51:b3:b8:76:b7:ae:97:d3:08: f4:60:ed:8b -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgISAZt9yjwv7byRabqB5evy1d64MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZTJjZTMxMDk0ODBhZWU3YjNmZDI4NDZlYzhmODY0Njg4 NWNkYmEwHhcNMjYwMTAyMDgxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDU5ODk0YjVlYjY3ZDA2YzZjMDFlZjQyOTE0NDhjNmE0MTg0Y2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRMdvsc0tdMDBpGyp09s+HC72ImC vY1SccZaO4izeZs8YWcUHPABzgIvErI9J2uAWmutpuzpD527Cch/gLatWk4qd1Wf 4W3uPg85N642IJH3FZ9HU5bnfzQuKY19eYfrZ9VUnv+zysuRtLjrLvXkszpiQgFA NdOcgQ24EueE3aPnSR6MVAwM6wusZFhkdLeoHUSywFBoh7hJ9Jma0Ntz7XJhvfyK 2AW6BA5ty6WIb2E1Z1t493IBpgMzVVYTxueKXQVEcAA/BhICkjWv2I0Dvox1pJ11 BjI2G5DY5XhDWhEIgznDnW0pzvEZm5fhcULbGk+WuC0Bd1pwpryFEaPNBwIDAQAB o4ICiTCCAoUwHQYDVR0OBBYEFNRZiUtetn0GxsAe9CkUSMakGEzwMB8GA1UdIwQY MBaAFKfizjEJSAruez/ShG7I+GRohc26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC1MT01RbElDdTU3UDlLRWJzajRaR2lGemJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9iNjFhZGQtMzJmMC00MmY0LWEzMDEt NzgxOGE4OTQ1NmNiLzEvMUZtSlMxNjJmUWJHd0I3MEtSUkl4cVFZVFBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9iNjFhZGQtMzJmMC00MmY0LWEzMDEtNzgxOGE4OTQ1NmNi LzEvcC1MT01RbElDdTU3UDlLRWJzajRaR2lGemJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGeBggrBgEFBQcBBwEB/wSBjjCBizBsBAIAATBmAwQDBRco AwQFPtRgAwQDTigwAwQDT6rYAwQEUEHgAwQEUPjQAwQEXbggAwQCqxnQAwQEsoQQ AwQCuSEoAwQCuStEAwQGwk+AAwQCwpLgAwQCwvJwAwQGwwXAAwQH1SmAAwQG1dcA MBsEAgACMBUDBQAgAQeoAwUAKgEAaAMFACoBZGAwDQYJKoZIhvcNAQELBQADggEB AFsbXRniWr4JLTL3c5OOZeG/WYgWu/6J506veATrDQGBVT6MxAJFlEhPxTXv/qJo O0SpYPj7JPtkR7cVskDjpOnz/vRHlxsV1DcM3p8LaDPKOTYLTIfoj7MgJxUZl/y0 Ghy9l5iR88fld11JBUqoR39WmVNF8IytLJ0V7PqBer6JaqYQQrmnPEvVrEHdm7gE d4ZVc81Dq80L3o6zZkPVKYJ1d3qd5PxvOzrRBcQhP0MYAkIrIzxwIiJyaKfuaItn C6DDiS9Cz42BIfkXg7ZBfh2HFmP6IFtbZ8y6869ngMnXL/yTRJLtwBdfszCUs2ay I/0ZRFGzuHa3rpfTCPRg7Ys= -----END CERTIFICATE-----Generated at Thu Jan 8 09:14:13 2026 by rpki-client