This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/_4iBeTs5cxfGTAtYktUUrEwV_VA.roa File: _4iBeTs5cxfGTAtYktUUrEwV_VA.roa (raw, json) Hash identifier: N664oCzOfQ38VT4ESVgwevGf4XPQ0H5eTMOYBDJq9m0= Subject key identifier: FF:88:81:79:3B:39:73:17:C6:4C:0B:58:92:D5:14:AC:4C:15:FD:50 Certificate issuer: /CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca Certificate serial: 019B783479111A608E1215E7292CB15C100C Authority key identifier: 5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/_4iBeTs5cxfGTAtYktUUrEwV_VA.roa Signing time: Thu 01 Jan 2026 06:17:43 +0000 ROA not before: Thu 01 Jan 2026 06:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56571 IP address blocks: 176.10.64.0/20 maxlen: 20 176.10.64.0/24 maxlen: 24 176.10.65.0/24 maxlen: 24 176.10.66.0/24 maxlen: 24 176.10.67.0/24 maxlen: 24 176.10.68.0/24 maxlen: 24 176.10.69.0/24 maxlen: 24 176.10.70.0/24 maxlen: 24 176.10.71.0/24 maxlen: 24 176.10.72.0/24 maxlen: 24 176.10.73.0/24 maxlen: 24 176.10.74.0/24 maxlen: 24 176.10.75.0/24 maxlen: 24 176.10.76.0/24 maxlen: 24 176.10.77.0/24 maxlen: 24 176.10.78.0/24 maxlen: 24 176.10.79.0/24 maxlen: 24 185.32.68.0/24 maxlen: 24 185.191.40.0/22 maxlen: 22 185.191.40.0/24 maxlen: 24 185.191.41.0/24 maxlen: 24 185.191.42.0/24 maxlen: 24 185.191.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:79:11:1a:60:8e:12:15:e7:29:2c:b1:5c:10:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca Validity Not Before: Jan 1 06:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff8881793b397317c64c0b5892d514ac4c15fd50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f1:97:83:c3:c3:38:e4:3f:ed:ff:82:45:07: cc:29:cf:cd:df:6e:0f:a0:ef:c8:51:31:9a:7b:78: 4f:4b:b1:51:d6:d7:df:59:0a:56:bc:5e:3f:38:3d: 17:30:2d:d2:7f:c8:0f:f7:92:4a:71:44:88:e8:de: 2f:8d:e9:d0:c8:2b:f5:bd:7e:22:0c:6b:91:04:6c: e3:9e:eb:a3:fc:67:2d:27:e1:77:32:03:a8:5b:0d: 37:a4:35:bb:ac:0e:8c:ce:55:f0:a3:cf:92:b3:88: d1:1b:78:e9:5c:5c:ea:0d:c7:d9:ba:fa:51:a0:3b: fe:93:53:48:8d:a9:df:1b:f3:94:be:3e:e3:46:e4: 55:e9:3a:87:96:db:bb:82:e4:92:76:42:85:7d:af: f9:d0:4d:62:84:1d:3c:dd:2b:28:95:b4:25:13:d0: ad:58:92:da:7f:13:06:8a:e3:9c:f7:25:88:11:16: ab:0b:b7:0b:b4:c4:dd:1f:5c:1b:8f:ba:a4:e4:36: 43:63:38:bf:b3:df:55:a0:28:19:24:8c:60:dc:8c: ce:38:dc:d7:7f:24:28:db:94:83:06:10:bb:e7:db: e3:57:2b:f2:ff:02:61:09:3c:9f:d7:58:01:3f:59: 86:bf:75:4c:5c:a6:2d:d2:f7:7b:6b:bd:64:5e:24: 5d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:88:81:79:3B:39:73:17:C6:4C:0B:58:92:D5:14:AC:4C:15:FD:50 X509v3 Authority Key Identifier: keyid:5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/_4iBeTs5cxfGTAtYktUUrEwV_VA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.10.64.0/20 185.32.68.0/24 185.191.40.0/22 Signature Algorithm: sha256WithRSAEncryption 96:08:87:fd:bc:8a:ab:d6:bb:54:7a:97:46:42:de:8d:8c:06: 12:37:63:05:1a:55:f2:f4:06:45:7c:20:3c:80:29:d5:63:9d: be:4a:79:74:7b:db:a3:aa:29:6d:95:68:71:17:2a:c6:30:0d: 12:3c:73:5b:50:01:d5:08:5c:2f:4b:0a:0a:45:ec:f0:23:0d: 67:63:9a:54:15:39:af:62:be:59:af:98:22:da:3e:80:28:1c: d0:56:c7:e3:d9:91:37:74:30:35:11:0c:2f:eb:1d:f0:ea:17: 91:4d:db:ae:a8:5c:a1:b5:f0:61:8b:43:ab:be:b8:fc:d9:73: 7d:ce:9f:1a:70:02:df:d9:fe:a6:1c:0c:15:72:5b:90:3e:22: 12:29:44:1d:c3:bd:68:4d:f3:f8:c4:d9:19:ea:d6:63:4e:2d: b9:94:b8:ce:61:23:18:9a:be:b2:3c:94:59:38:38:08:86:e6: f0:8d:fd:a9:be:73:7b:1e:69:62:70:63:9e:66:a5:20:eb:ba: 8a:6d:76:e4:1b:47:f2:ea:6a:62:07:35:e7:e0:36:ae:a8:15: 35:ac:78:53:eb:20:84:6e:0d:71:d2:73:8d:c3:c9:73:e6:2e: 82:83:a6:b0:64:e4:e8:34:49:56:74:1b:91:08:c4:0b:fa:20: b2:cf:e9:19 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NHkRGmCOEhXnKSyxXBAMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMjljMDJkMjYxZjkxM2VhNWJmODNjMmJjN2MzMzQxNGE0 MmJjY2EwHhcNMjYwMTAxMDYxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjg4ODE3OTNiMzk3MzE3YzY0YzBiNTg5MmQ1MTRhYzRjMTVmZDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/GXg8PDOOQ/7f+CRQfMKc/N324P oO/IUTGae3hPS7FR1tffWQpWvF4/OD0XMC3Sf8gP95JKcUSI6N4vjenQyCv1vX4i DGuRBGzjnuuj/GctJ+F3MgOoWw03pDW7rA6MzlXwo8+Ss4jRG3jpXFzqDcfZuvpR oDv+k1NIjanfG/OUvj7jRuRV6TqHltu7guSSdkKFfa/50E1ihB083SsolbQlE9Ct WJLafxMGiuOc9yWIERarC7cLtMTdH1wbj7qk5DZDYzi/s99VoCgZJIxg3IzOONzX fyQo25SDBhC759vjVyvy/wJhCTyf11gBP1mGv3VMXKYt0vd7a71kXiRd3QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFP+IgXk7OXMXxkwLWJLVFKxMFf1QMB8GA1UdIwQY MBaAFF4pwC0mH5E+pb+Dwrx8M0FKQrzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGluQUxTWWZrVDZsdjRQQ3ZId3pRVXBDdk1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hYzEyNTMtMDQ1OS00NmNmLWIxYjkt OWFjMWE3ZTRjNDA2LzEvXzRpQmVUczVjeGZHVEF0WWt0VVVyRXdWX1ZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hYzEyNTMtMDQ1OS00NmNmLWIxYjktOWFjMWE3ZTRjNDA2 LzEvWGluQUxTWWZrVDZsdjRQQ3ZId3pRVXBDdk1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEsApAAwQA uSBEAwQCub8oMA0GCSqGSIb3DQEBCwUAA4IBAQCWCIf9vIqr1rtUepdGQt6NjAYS N2MFGlXy9AZFfCA8gCnVY52+Snl0e9ujqiltlWhxFyrGMA0SPHNbUAHVCFwvSwoK RezwIw1nY5pUFTmvYr5Zr5gi2j6AKBzQVsfj2ZE3dDA1EQwv6x3w6heRTduuqFyh tfBhi0Orvrj82XN9zp8acALf2f6mHAwVcluQPiISKUQdw71oTfP4xNkZ6tZjTi25 lLjOYSMYmr6yPJRZODgIhubwjf2pvnN7HmlicGOeZqUg67qKbXbkG0fy6mpiBzXn 4DauqBU1rHhT6yCEbg1x0nONw8lz5i6Cg6awZOToNElWdBuRCMQL+iCyz+kZ -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:16 2026 by rpki-client