This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/dOGEvxWz_zQwe0ywxB_yohVohyM.roa File: dOGEvxWz_zQwe0ywxB_yohVohyM.roa (raw, json) Hash identifier: mrA0JieT5fE1JYF+wUVSCw2S+TnNb/74IV4H+fC+v3w= Subject key identifier: 74:E1:84:BF:15:B3:FF:34:30:7B:4C:B0:C4:1F:F2:A2:15:68:87:23 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 019B7DCA436A241CACBF8BF1414B81B8F1E6 Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/dOGEvxWz_zQwe0ywxB_yohVohyM.roa Signing time: Fri 02 Jan 2026 08:19:25 +0000 ROA not before: Fri 02 Jan 2026 08:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48095 IP address blocks: 2.56.44.0/23 maxlen: 23 2.56.46.0/23 maxlen: 23 5.253.160.0/23 maxlen: 23 5.253.162.0/23 maxlen: 23 45.67.176.0/23 maxlen: 23 45.67.178.0/23 maxlen: 23 83.150.238.0/24 maxlen: 24 83.150.239.0/24 maxlen: 24 85.209.136.0/23 maxlen: 23 85.209.138.0/23 maxlen: 23 141.98.92.0/23 maxlen: 23 141.98.94.0/23 maxlen: 23 152.89.8.0/23 maxlen: 23 152.89.10.0/23 maxlen: 23 171.22.36.0/23 maxlen: 23 171.22.38.0/23 maxlen: 23 188.119.88.0/23 maxlen: 23 188.119.90.0/23 maxlen: 23 193.168.180.0/23 maxlen: 23 193.168.182.0/23 maxlen: 23 194.38.28.0/23 maxlen: 23 194.38.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:43:6a:24:1c:ac:bf:8b:f1:41:4b:81:b8:f1:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Jan 2 08:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74e184bf15b3ff34307b4cb0c41ff2a215688723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8b:10:9f:99:f0:58:23:59:eb:0d:b5:a4:ce: 22:fc:d5:b9:98:f8:99:65:3c:4d:5f:2f:b3:cd:fd: 6a:41:9a:93:ac:62:1d:6d:45:f5:fe:c5:92:80:ce: f7:bf:c6:a0:85:58:44:f2:25:6a:2d:d5:5e:b7:2d: a1:a1:82:46:d6:f3:58:8a:31:32:29:e8:e3:d0:67: 71:6f:b1:af:6e:d1:c3:18:aa:44:b1:55:56:3a:a2: 70:49:37:2b:59:9e:50:2c:09:44:31:a5:2b:48:bc: 4d:3d:9f:d0:41:a7:27:54:c8:ab:f4:0b:64:09:9f: dd:da:38:81:69:11:ef:62:ea:60:9e:58:fe:47:9f: 17:b3:23:02:f4:37:6d:c8:71:6e:e4:af:32:36:cf: 24:11:43:2a:46:f7:3d:1f:7c:74:ab:26:1b:d4:ad: bc:25:77:cf:e8:a9:f6:ba:7d:ee:1f:48:e7:a3:4a: c4:b2:a9:af:90:55:7e:3f:39:3e:96:ff:f0:cf:19: 2c:fd:e1:56:4e:6c:67:f4:f7:f1:0e:5f:74:22:61: ea:5c:3c:6b:4e:a5:2f:f7:eb:e3:9d:ab:80:46:68: 0c:ad:e9:b5:36:8e:be:50:a4:6f:d0:38:bc:d6:d2: ff:5d:9c:2b:64:31:15:7f:98:cc:a7:4b:1e:ff:24: 6f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E1:84:BF:15:B3:FF:34:30:7B:4C:B0:C4:1F:F2:A2:15:68:87:23 X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/dOGEvxWz_zQwe0ywxB_yohVohyM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.44.0/22 5.253.160.0/22 45.67.176.0/22 83.150.238.0/23 85.209.136.0/22 141.98.92.0/22 152.89.8.0/22 171.22.36.0/22 188.119.88.0/22 193.168.180.0/22 194.38.28.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:56:e2:f6:03:38:aa:40:10:4d:2a:59:66:80:e3:f2:f5:69: 0d:4a:db:92:25:80:db:e1:0f:c0:c7:06:86:cc:ef:d9:78:fc: 6a:79:d3:59:b1:71:dc:54:2e:2a:fa:65:33:39:c3:d5:17:d1: 2b:cf:92:be:77:91:85:4f:5f:ad:1e:f8:9d:a4:45:32:31:90: 42:bf:e4:4c:28:c1:e3:fd:bd:ff:09:0b:3d:78:fb:3e:4d:80: 2a:73:dd:3e:3e:2a:ac:1d:5f:91:ef:b6:31:7c:c5:be:77:cc: 1a:cb:ff:96:9e:be:00:c9:1c:50:b9:8b:8e:58:5e:cb:39:95: 52:7d:0c:6a:52:63:f6:77:00:5f:23:37:7a:a7:a8:c3:f1:a9: 4d:6d:7c:8c:c6:0f:c6:61:c1:ae:c5:84:90:7d:d4:af:34:66: 8a:f9:f1:8e:85:88:32:8e:c1:02:ca:40:e4:cb:78:9e:42:38: 26:c7:45:3a:00:af:ad:77:9f:34:db:20:4c:18:d3:6b:34:78: f3:f9:f1:bb:6b:6d:de:f8:cd:d1:3a:42:98:f6:99:8c:4b:52: a9:ae:61:43:ed:d6:db:1d:ff:6f:63:e5:7d:8d:77:ce:31:27: 17:09:5a:99:f9:36:7f:28:db:08:9c:6e:60:19:3b:3d:75:55: 85:02:60:84 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt9ykNqJBysv4vxQUuBuPHmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjYwMTAyMDgxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGUxODRiZjE1YjNmZjM0MzA3YjRjYjBjNDFmZjJhMjE1Njg4NzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIsQn5nwWCNZ6w21pM4i/NW5mPiZ ZTxNXy+zzf1qQZqTrGIdbUX1/sWSgM73v8aghVhE8iVqLdVety2hoYJG1vNYijEy Kejj0Gdxb7GvbtHDGKpEsVVWOqJwSTcrWZ5QLAlEMaUrSLxNPZ/QQacnVMir9Atk CZ/d2jiBaRHvYupgnlj+R58XsyMC9DdtyHFu5K8yNs8kEUMqRvc9H3x0qyYb1K28 JXfP6Kn2un3uH0jno0rEsqmvkFV+Pzk+lv/wzxks/eFWTmxn9PfxDl90ImHqXDxr TqUv9+vjnauARmgMrem1No6+UKRv0Di81tL/XZwrZDEVf5jMp0se/yRvcwIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFHThhL8Vs/80MHtMsMQf8qIVaIcjMB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvZE9HRXZ4V3pfelF3ZTB5d3hCX3lvaFZvaHlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQCAjgsAwQC Bf2gAwQCLUOwAwQBU5buAwQCVdGIAwQCjWJcAwQCmFkIAwQCqxYkAwQCvHdYAwQC wai0AwQCwiYcMA0GCSqGSIb3DQEBCwUAA4IBAQCKVuL2AziqQBBNKllmgOPy9WkN StuSJYDb4Q/AxwaGzO/ZePxqedNZsXHcVC4q+mUzOcPVF9Erz5K+d5GFT1+tHvid pEUyMZBCv+RMKMHj/b3/CQs9ePs+TYAqc90+PiqsHV+R77YxfMW+d8way/+Wnr4A yRxQuYuOWF7LOZVSfQxqUmP2dwBfIzd6p6jD8alNbXyMxg/GYcGuxYSQfdSvNGaK +fGOhYgyjsECykDky3ieQjgmx0U6AK+td5802yBMGNNrNHjz+fG7a23e+M3ROkKY 9pmMS1KprmFD7dbbHf9vY+V9jXfOMScXCVqZ+TZ/KNsInG5gGTs9dVWFAmCE -----END CERTIFICATE-----Generated at Mon Jan 26 14:13:30 2026 by rpki-client