This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/5NYOEIQboozTIFjSj_jtvYBeRg4.roa File: 5NYOEIQboozTIFjSj_jtvYBeRg4.roa (raw, json) Hash identifier: hVyTV+QaAN7uda2J0NNZJ/OdtG08jxXsltCydDml1OQ= Subject key identifier: E4:D6:0E:10:84:1B:A2:8C:D3:20:58:D2:8F:F8:ED:BD:80:5E:46:0E Certificate issuer: /CN=c1eb076d16702c7dbea972e2972ef576a1f2c873 Certificate serial: 019B7D5C62F74C33C5148B73A6821F1241B5 Authority key identifier: C1:EB:07:6D:16:70:2C:7D:BE:A9:72:E2:97:2E:F5:76:A1:F2:C8:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/5NYOEIQboozTIFjSj_jtvYBeRg4.roa Signing time: Fri 02 Jan 2026 06:19:25 +0000 ROA not before: Fri 02 Jan 2026 06:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197133 IP address blocks: 91.197.136.0/22 maxlen: 24 178.248.208.0/21 maxlen: 24 178.251.248.0/21 maxlen: 24 185.32.100.0/23 maxlen: 24 185.32.102.0/24 maxlen: 24 185.114.128.0/22 maxlen: 24 193.202.121.0/24 maxlen: 24 194.69.194.0/23 maxlen: 24 194.143.132.0/23 maxlen: 24 217.114.200.0/21 maxlen: 24 217.114.207.0/24 maxlen: 24 2a02:1740::/32 maxlen: 48 2a03:d280::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:62:f7:4c:33:c5:14:8b:73:a6:82:1f:12:41:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1eb076d16702c7dbea972e2972ef576a1f2c873 Validity Not Before: Jan 2 06:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4d60e10841ba28cd32058d28ff8edbd805e460e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b7:2c:66:8e:98:c3:d5:ae:5a:d8:7b:40:25: 48:1e:fc:07:82:2f:f5:1f:b5:17:a9:68:90:df:e7: 6d:3f:46:d4:d5:bb:27:0c:a2:63:17:55:18:79:d8: 78:a7:1f:9d:b5:66:46:2a:9b:b9:ae:a7:70:7a:75: 15:e2:d9:2e:19:69:32:6b:18:1d:71:ad:7d:9e:37: 2b:11:d6:a8:16:d7:1a:35:9c:b3:38:f9:1f:57:e6: 82:a5:29:c8:ac:32:c0:e1:fc:57:d9:e5:8a:31:1b: 12:d1:f2:c7:3f:24:b0:f8:ce:73:f4:e5:e1:60:a4: 12:3f:aa:e2:34:a5:d2:29:e0:7d:38:9c:7e:ee:cf: e4:c3:dd:e2:a1:0c:ba:64:8c:7e:7b:93:64:92:09: 6f:af:5b:c0:36:90:27:5d:de:d5:d1:af:df:21:97: 9b:44:a4:05:79:ef:46:34:9d:2d:9c:b6:78:52:3b: e8:c3:4d:70:ab:77:55:e6:cb:7e:f7:23:4b:af:e0: ff:47:3a:db:46:f3:0a:12:cf:d4:f5:92:ee:5b:63: a5:fb:70:d0:c1:50:8b:1a:bf:cf:ae:9e:69:44:c1: 41:80:2e:5f:7e:c9:89:e2:20:6d:86:3d:a6:c6:3b: d0:18:48:e1:06:83:c9:41:19:9b:50:9a:67:0a:39: 9c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D6:0E:10:84:1B:A2:8C:D3:20:58:D2:8F:F8:ED:BD:80:5E:46:0E X509v3 Authority Key Identifier: keyid:C1:EB:07:6D:16:70:2C:7D:BE:A9:72:E2:97:2E:F5:76:A1:F2:C8:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/5NYOEIQboozTIFjSj_jtvYBeRg4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.136.0/22 178.248.208.0/21 178.251.248.0/21 185.32.100.0-185.32.102.255 185.114.128.0/22 193.202.121.0/24 194.69.194.0/23 194.143.132.0/23 217.114.200.0/21 IPv6: 2a02:1740::/32 2a03:d280::/32 Signature Algorithm: sha256WithRSAEncryption 74:8b:b4:ed:b6:f4:49:8c:63:55:20:fe:82:32:19:08:26:b9: 01:24:71:70:5a:c0:8e:a1:da:d5:f9:83:bd:a8:cd:fb:98:7b: 1c:7d:76:4c:90:af:25:20:05:93:44:fe:da:9e:35:6d:6e:51: 31:a3:ce:2a:ff:18:83:d7:d3:57:61:40:98:16:18:41:14:f7: c1:0d:0a:7d:6d:d6:71:88:80:88:6e:41:ca:b6:0f:8d:75:84: df:59:e8:08:b5:b3:14:dc:c4:f4:88:8a:4a:f2:66:a9:4c:44: f4:c1:54:03:dc:25:63:e8:1a:a7:be:a9:72:aa:ac:94:a9:cf: 7b:4a:c7:e4:3d:13:26:10:28:47:14:70:dc:51:ca:a3:3a:02: 01:e5:47:0c:b9:46:fc:cf:bd:00:f3:79:ee:5a:ad:1d:1e:3e: b0:94:94:65:b2:11:b9:4b:9b:8c:19:2a:ff:f9:13:9a:b0:e2: b4:bf:a1:77:fa:38:17:b5:ad:18:69:2f:d1:06:d5:ef:3a:ef: 6c:9a:4b:ce:b7:db:72:ae:9d:3c:7c:b7:d5:b6:c2:2f:13:4e: a5:00:e4:0c:9d:5a:3b:1d:99:3a:14:1e:ef:11:35:6c:63:96: 79:81:36:92:ee:02:c9:16:69:83:a1:06:d9:73:ab:99:f6:ce: 1f:4b:24:a0 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZt9XGL3TDPFFItzpoIfEkG1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZWIwNzZkMTY3MDJjN2RiZWE5NzJlMjk3MmVmNTc2YTFm MmM4NzMwHhcNMjYwMTAyMDYxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGQ2MGUxMDg0MWJhMjhjZDMyMDU4ZDI4ZmY4ZWRiZDgwNWU0NjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbcsZo6Yw9WuWth7QCVIHvwHgi/1 H7UXqWiQ3+dtP0bU1bsnDKJjF1UYedh4px+dtWZGKpu5rqdwenUV4tkuGWkyaxgd ca19njcrEdaoFtcaNZyzOPkfV+aCpSnIrDLA4fxX2eWKMRsS0fLHPySw+M5z9OXh YKQSP6riNKXSKeB9OJx+7s/kw93ioQy6ZIx+e5Nkkglvr1vANpAnXd7V0a/fIZeb RKQFee9GNJ0tnLZ4Ujvow01wq3dV5st+9yNLr+D/RzrbRvMKEs/U9ZLuW2Ol+3DQ wVCLGr/Prp5pRMFBgC5ffsmJ4iBthj2mxjvQGEjhBoPJQRmbUJpnCjmcSwIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFOTWDhCEG6KM0yBY0o/47b2AXkYOMB8GA1UdIwQY MBaAFMHrB20WcCx9vqly4pcu9Xah8shzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2VzSGJSWndMSDItcVhMaWx5NzFkcUh5eUhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9hNDNjNmUtMzQ5Yy00OTE0LThkYTMt NmMzMmE2YWIxZWYyLzEvNU5ZT0VJUWJvb3pUSUZqU2pfanR2WUJlUmc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9hNDNjNmUtMzQ5Yy00OTE0LThkYTMtNmMzMmE2YWIxZWYy LzEvd2VzSGJSWndMSDItcVhMaWx5NzFkcUh5eUhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBEBAIAATA+AwQCW8WIAwQD svjQAwQDsvv4MAwDBAK5IGQDBAC5IGYDBAK5coADBADBynkDBAHCRcIDBAHCj4QD BAPZcsgwFAQCAAIwDgMFACoCF0ADBQAqA9KAMA0GCSqGSIb3DQEBCwUAA4IBAQB0 i7TttvRJjGNVIP6CMhkIJrkBJHFwWsCOodrV+YO9qM37mHscfXZMkK8lIAWTRP7a njVtblExo84q/xiD19NXYUCYFhhBFPfBDQp9bdZxiICIbkHKtg+NdYTfWegItbMU 3MT0iIpK8mapTET0wVQD3CVj6BqnvqlyqqyUqc97SsfkPRMmEChHFHDcUcqjOgIB 5UcMuUb8z70A83nuWq0dHj6wlJRlshG5S5uMGSr/+ROasOK0v6F3+jgXta0YaS/R BtXvOu9smkvOt9tyrp08fLfVtsIvE06lAOQMnVo7HZk6FB7vETVsY5Z5gTaS7gLJ FmmDoQbZc6uZ9s4fSySg -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:53 2026 by rpki-client