This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/iU8buUitA6QcqdqbYKXA_ah66tM.roa File: iU8buUitA6QcqdqbYKXA_ah66tM.roa (raw, json) Hash identifier: SmpXABX0CgD3QwC0/HSkGjGaO3ioZWYOFJbOjTKYwlI= Subject key identifier: 89:4F:1B:B9:48:AD:03:A4:1C:A9:DA:9B:60:A5:C0:FD:A8:7A:EA:D3 Certificate issuer: /CN=5bb5f05f12b52076868eefcd14afcec192fe2cf2 Certificate serial: 019B7E3795E9C4DA96F8AB14DA7A14A5CAB1 Authority key identifier: 5B:B5:F0:5F:12:B5:20:76:86:8E:EF:CD:14:AF:CE:C1:92:FE:2C:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/iU8buUitA6QcqdqbYKXA_ah66tM.roa Signing time: Fri 02 Jan 2026 10:18:50 +0000 ROA not before: Fri 02 Jan 2026 10:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57869 IP address blocks: 5.154.168.0/23 maxlen: 23 5.154.228.0/23 maxlen: 23 5.154.248.0/22 maxlen: 22 5.154.248.0/23 maxlen: 23 5.154.250.0/23 maxlen: 23 82.118.0.0/20 maxlen: 20 82.118.0.0/22 maxlen: 22 82.118.2.0/24 maxlen: 24 82.118.3.0/24 maxlen: 24 82.118.4.0/22 maxlen: 22 82.118.5.0/24 maxlen: 24 82.118.6.0/24 maxlen: 24 82.118.7.0/24 maxlen: 24 82.118.8.0/22 maxlen: 22 82.118.8.0/24 maxlen: 24 82.118.9.0/24 maxlen: 24 82.118.10.0/24 maxlen: 24 82.118.11.0/24 maxlen: 24 82.118.12.0/23 maxlen: 23 82.118.14.0/23 maxlen: 23 185.36.68.0/22 maxlen: 22 185.36.68.0/23 maxlen: 23 185.36.70.0/23 maxlen: 23 213.91.96.0/22 maxlen: 22 213.91.100.0/22 maxlen: 22 213.91.104.0/22 maxlen: 22 213.91.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:95:e9:c4:da:96:f8:ab:14:da:7a:14:a5:ca:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bb5f05f12b52076868eefcd14afcec192fe2cf2 Validity Not Before: Jan 2 10:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=894f1bb948ad03a41ca9da9b60a5c0fda87aead3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:97:44:b7:ea:a0:6e:55:ad:23:02:ad:2e:b8: 73:b8:91:b2:d2:91:68:0f:78:56:52:72:bc:99:9f: cb:91:c8:f9:0c:68:2e:84:18:e6:f2:23:5d:2f:fe: b6:fd:8f:fe:b1:8b:f0:f7:af:fe:51:a7:0c:1e:58: b2:4b:e2:cf:65:76:c8:f0:c2:e0:a7:1d:87:b7:c2: 40:c3:6a:f1:b8:92:97:e3:44:33:31:cc:74:5c:27: 0b:de:99:cb:49:d6:81:d2:f0:55:57:b7:4b:0c:7f: b0:d9:a5:47:ec:cc:a6:7d:f1:e2:cb:d6:d8:a5:6b: 49:5f:ec:35:51:96:34:86:5e:82:42:1d:24:79:e9: aa:ca:e8:5b:55:7a:af:21:f5:24:fb:c4:b7:66:25: 58:a6:d7:18:1d:57:7c:be:a7:37:f5:5f:64:74:f7: ee:d5:21:05:79:9d:d3:a1:b3:a4:6c:dd:94:2d:61: ce:7a:e8:a6:45:7a:7b:ac:b5:bb:17:9e:35:31:27: 39:7e:cc:0a:e2:fb:4f:1e:cd:9b:90:38:52:f0:7b: 6b:cc:2e:84:db:4e:f3:17:0b:17:df:d9:5c:ea:bd: 0c:cf:78:e4:3d:55:ad:85:a6:9e:b4:8a:c0:85:b4: 20:f4:dc:95:ba:a0:ba:7a:d3:dd:35:6e:72:ac:25: a6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4F:1B:B9:48:AD:03:A4:1C:A9:DA:9B:60:A5:C0:FD:A8:7A:EA:D3 X509v3 Authority Key Identifier: keyid:5B:B5:F0:5F:12:B5:20:76:86:8E:EF:CD:14:AF:CE:C1:92:FE:2C:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/iU8buUitA6QcqdqbYKXA_ah66tM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.168.0/23 5.154.228.0/23 5.154.248.0/22 82.118.0.0/20 185.36.68.0/22 213.91.96.0/20 Signature Algorithm: sha256WithRSAEncryption 02:46:c0:30:58:c1:d2:a8:64:24:c2:0b:ff:0c:27:79:32:6d: e5:46:b7:b6:a6:ee:7d:6f:cd:67:18:96:05:21:4a:bd:90:6f: 59:67:8b:90:5a:e2:87:96:fe:74:62:78:d8:9e:78:8c:47:35: c1:2c:12:e2:23:a3:c0:48:7a:6d:0b:e3:d6:0b:0a:17:13:1e: fd:a5:12:d9:a4:0c:55:5d:1f:4f:56:bc:c5:5b:61:db:f2:85: fe:0f:54:da:d4:73:59:db:ab:31:68:83:32:3d:b0:2e:30:f4: ac:16:2b:78:bd:08:07:d0:ba:b0:b6:f5:f4:89:a0:b8:8a:b7: a2:26:22:e2:1e:af:ea:d1:d8:74:3b:35:44:0a:36:65:93:fe: 39:5c:09:70:6f:3f:7a:a0:c3:a8:9b:0a:45:b5:3b:5f:1f:11: d3:33:9a:3e:bb:8a:46:3c:1e:3c:8b:ab:cc:79:ab:f1:63:85: ca:2e:09:fb:a5:7f:35:db:65:f2:0c:8f:61:af:f0:b1:cb:ac: b2:91:cc:70:c6:8e:b6:98:a2:33:b7:b9:ba:a0:38:69:02:6e: eb:5c:64:ea:14:01:e3:8c:ab:c4:81:48:fc:16:5c:d7:fe:d1: bc:77:e2:b2:dc:e3:2c:9a:f7:1e:75:08:de:46:c2:82:e7:12: 7b:b9:24:02 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt+N5XpxNqW+KsU2noUpcqxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViYjVmMDVmMTJiNTIwNzY4NjhlZWZjZDE0YWZjZWMxOTJm ZTJjZjIwHhcNMjYwMTAyMTAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTRmMWJiOTQ4YWQwM2E0MWNhOWRhOWI2MGE1YzBmZGE4N2FlYWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpdEt+qgblWtIwKtLrhzuJGy0pFo D3hWUnK8mZ/Lkcj5DGguhBjm8iNdL/62/Y/+sYvw96/+UacMHliyS+LPZXbI8MLg px2Ht8JAw2rxuJKX40QzMcx0XCcL3pnLSdaB0vBVV7dLDH+w2aVH7MymffHiy9bY pWtJX+w1UZY0hl6CQh0keemqyuhbVXqvIfUk+8S3ZiVYptcYHVd8vqc39V9kdPfu 1SEFeZ3TobOkbN2ULWHOeuimRXp7rLW7F541MSc5fswK4vtPHs2bkDhS8HtrzC6E 207zFwsX39lc6r0Mz3jkPVWthaaetIrAhbQg9NyVuqC6etPdNW5yrCWmBwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFIlPG7lIrQOkHKnam2ClwP2oeurTMB8GA1UdIwQY MBaAFFu18F8StSB2ho7vzRSvzsGS/izyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzdYd1h4SzFJSGFHanVfTkZLX093WkwtTFBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85OGFkYzEtNmZmOC00OTU5LWEzNDQt ZGI2Y2E2ZTRkNGEzLzEvaVU4YnVVaXRBNlFjcWRxYllLWEFfYWg2NnRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS85OGFkYzEtNmZmOC00OTU5LWEzNDQtZGI2Y2E2ZTRkNGEz LzEvVzdYd1h4SzFJSGFHanVfTkZLX093WkwtTFBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBBZqoAwQB BZrkAwQCBZr4AwQEUnYAAwQCuSREAwQE1VtgMA0GCSqGSIb3DQEBCwUAA4IBAQAC RsAwWMHSqGQkwgv/DCd5Mm3lRre2pu59b81nGJYFIUq9kG9ZZ4uQWuKHlv50YnjY nniMRzXBLBLiI6PASHptC+PWCwoXEx79pRLZpAxVXR9PVrzFW2Hb8oX+D1Ta1HNZ 26sxaIMyPbAuMPSsFit4vQgH0LqwtvX0iaC4ireiJiLiHq/q0dh0OzVECjZlk/45 XAlwbz96oMOomwpFtTtfHxHTM5o+u4pGPB48i6vMeavxY4XKLgn7pX8122XyDI9h r/Cxy6yykcxwxo62mKIzt7m6oDhpAm7rXGTqFAHjjKvEgUj8FlzX/tG8d+Ky3OMs mvcedQjeRsKC5xJ7uSQC -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:06 2026 by rpki-client