This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/A34_GTeXqKfeFieH-K6SMhQYDeM.roa File: A34_GTeXqKfeFieH-K6SMhQYDeM.roa (raw, json) Hash identifier: kMGUuf+bmu2QhGj0B3VWZCeUdZ8iNJFffakS/R7WXBo= Subject key identifier: 03:7E:3F:19:37:97:A8:A7:DE:16:27:87:F8:AE:92:32:14:18:0D:E3 Certificate issuer: /CN=e61c07c951488f04cb3b0fd338af84d77e46bf52 Certificate serial: 019B7F83CB2EC02CB5F3CD270CA03E31D822 Authority key identifier: E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/A34_GTeXqKfeFieH-K6SMhQYDeM.roa Signing time: Fri 02 Jan 2026 16:21:42 +0000 ROA not before: Fri 02 Jan 2026 16:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39603 IP address blocks: 5.173.0.0/17 maxlen: 17 5.173.128.0/18 maxlen: 18 5.173.192.0/19 maxlen: 19 31.174.0.0/15 maxlen: 15 46.112.0.0/16 maxlen: 16 46.113.0.0/16 maxlen: 16 89.108.192.0/18 maxlen: 18 89.108.200.0/21 maxlen: 21 89.108.208.0/21 maxlen: 21 94.254.128.0/17 maxlen: 17 94.254.128.0/20 maxlen: 20 94.254.144.0/20 maxlen: 20 94.254.160.0/19 maxlen: 19 94.254.192.0/19 maxlen: 19 94.254.224.0/20 maxlen: 20 109.243.0.0/16 maxlen: 16 109.243.128.0/17 maxlen: 17 109.243.192.0/18 maxlen: 18 164.126.0.0/15 maxlen: 15 2a00:1981::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:cb:2e:c0:2c:b5:f3:cd:27:0c:a0:3e:31:d8:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e61c07c951488f04cb3b0fd338af84d77e46bf52 Validity Not Before: Jan 2 16:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=037e3f193797a8a7de162787f8ae923214180de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:94:bf:c6:16:74:ee:1d:49:60:1c:b9:64:2a: 82:50:00:80:79:15:28:95:80:27:bb:65:b0:e8:87: f8:c3:76:29:62:db:c2:3a:00:91:b4:95:5b:ea:46: fb:1e:74:ab:7e:f6:c7:77:fe:d7:f7:9a:fb:a6:6f: ea:ec:a6:39:cf:bf:d4:26:52:33:91:7d:35:01:7f: 77:40:d3:ad:c3:6a:be:71:b9:60:55:b5:35:49:c3: fb:e7:3e:f9:36:2a:11:df:1f:9c:9c:ea:bf:98:db: 84:f9:88:0c:ef:81:30:06:52:5a:16:79:b0:ed:d9: b2:8e:f9:8b:8e:77:39:27:a4:eb:56:3e:36:73:a1: 8e:6d:2f:9b:12:3e:55:95:50:05:88:bd:2f:48:be: a6:f0:f9:68:60:dd:b2:4e:ba:73:0b:60:d4:f1:14: 91:72:2b:93:50:c3:45:a2:37:d4:ea:2c:65:33:f5: f1:5e:9f:99:0a:99:8d:f2:99:07:1f:20:dd:ea:4a: c7:de:42:d0:e6:52:3f:7e:af:c8:6f:52:54:e7:82: 07:26:27:6e:dd:80:7e:bd:cf:8a:ad:82:37:44:c0: 53:95:cf:90:45:df:66:02:a8:3f:a0:21:33:03:8c: e5:9a:45:1c:ca:9e:9f:8e:4a:4a:9e:1e:02:4f:1a: ee:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7E:3F:19:37:97:A8:A7:DE:16:27:87:F8:AE:92:32:14:18:0D:E3 X509v3 Authority Key Identifier: keyid:E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/A34_GTeXqKfeFieH-K6SMhQYDeM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.173.0.0-5.173.223.255 31.174.0.0/15 46.112.0.0/15 89.108.192.0/18 94.254.128.0/17 109.243.0.0/16 164.126.0.0/15 IPv6: 2a00:1981::/32 Signature Algorithm: sha256WithRSAEncryption 88:29:cb:5b:28:9d:8a:b8:40:74:7d:f5:3d:53:9d:03:4f:41: 70:1d:d6:a7:0c:bc:7d:b0:7d:70:f8:f3:72:10:ed:75:60:ca: 98:19:4c:23:a5:ab:99:b9:87:78:47:e2:49:01:7d:85:2f:19: 9a:40:68:87:70:c2:d9:b0:8e:7f:08:68:46:d9:d7:55:f9:5f: ac:73:eb:a9:75:9b:50:9e:6c:d3:59:51:47:db:d0:86:db:54: f2:58:06:db:2c:d2:fb:36:c1:11:10:cd:ae:dd:9e:ed:20:1c: f0:e2:1f:2e:fd:78:b4:cd:6f:ab:84:fc:61:2e:02:ed:8f:5b: df:f4:19:5b:0f:da:8c:6c:24:89:60:25:a4:d5:c1:0e:17:23: 76:a7:49:ea:92:b0:c6:48:ea:8e:a7:4f:13:37:34:79:c5:ec: b3:ed:ce:5f:94:3f:da:71:98:8d:7d:29:6a:78:d0:83:78:48: 45:2a:2d:0d:65:a7:62:9a:73:ef:f1:cc:40:a5:d7:cc:8a:31: 79:65:72:0e:ee:8c:51:72:4e:5d:5c:0c:20:04:16:09:1c:11: 99:6a:ff:b2:39:85:4b:41:9a:19:62:37:e7:3d:75:46:76:31: a4:a4:a8:8b:7e:63:96:5f:59:30:30:06:7a:75:51:2e:1b:ec: 94:02:46:1a -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt/g8suwCy1880nDKA+MdgiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MWMwN2M5NTE0ODhmMDRjYjNiMGZkMzM4YWY4NGQ3N2U0 NmJmNTIwHhcNMjYwMTAyMTYyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzdlM2YxOTM3OTdhOGE3ZGUxNjI3ODdmOGFlOTIzMjE0MTgwZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJS/xhZ07h1JYBy5ZCqCUACAeRUo lYAnu2Ww6If4w3YpYtvCOgCRtJVb6kb7HnSrfvbHd/7X95r7pm/q7KY5z7/UJlIz kX01AX93QNOtw2q+cblgVbU1ScP75z75NioR3x+cnOq/mNuE+YgM74EwBlJaFnmw 7dmyjvmLjnc5J6TrVj42c6GObS+bEj5VlVAFiL0vSL6m8PloYN2yTrpzC2DU8RSR ciuTUMNFojfU6ixlM/XxXp+ZCpmN8pkHHyDd6krH3kLQ5lI/fq/Ib1JU54IHJidu 3YB+vc+KrYI3RMBTlc+QRd9mAqg/oCEzA4zlmkUcyp6fjkpKnh4CTxruaQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFAN+Pxk3l6in3hYnh/iukjIUGA3jMB8GA1UdIwQY MBaAFOYcB8lRSI8EyzsP0zivhNd+Rr9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWh3SHlWRklqd1RMT3dfVE9LLUUxMzVHdjFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yZGJhNWMtOWE5MC00MDUyLWExZWIt NmE4NDc3Y2I2YzJhLzEvQTM0X0dUZVhxS2ZlRmllSC1LNlNNaFFZRGVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8yZGJhNWMtOWE5MC00MDUyLWExZWItNmE4NDc3Y2I2YzJh LzEvNWh3SHlWRklqd1RMT3dfVE9LLUUxMzVHdjFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDAzBAIAATAtMAsDAwAFrQME BQWtwAMDAR+uAwMBLnADBAZZbMADBAde/oADAwBt8wMDAaR+MA0EAgACMAcDBQAq ABmBMA0GCSqGSIb3DQEBCwUAA4IBAQCIKctbKJ2KuEB0ffU9U50DT0FwHdanDLx9 sH1w+PNyEO11YMqYGUwjpauZuYd4R+JJAX2FLxmaQGiHcMLZsI5/CGhG2ddV+V+s c+updZtQnmzTWVFH29CG21TyWAbbLNL7NsEREM2u3Z7tIBzw4h8u/Xi0zW+rhPxh LgLtj1vf9BlbD9qMbCSJYCWk1cEOFyN2p0nqkrDGSOqOp08TNzR5xeyz7c5flD/a cZiNfSlqeNCDeEhFKi0NZadimnPv8cxApdfMijF5ZXIO7oxRck5dXAwgBBYJHBGZ av+yOYVLQZoZYjfnPXVGdjGkpKiLfmOWX1kwMAZ6dVEuG+yUAkYa -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:23 2026 by rpki-client