This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/1-K5viE_tD80UCpoY9vGuHEt9bYY.roa File: 1-K5viE_tD80UCpoY9vGuHEt9bYY.roa (raw, json) Hash identifier: 0PAUh76wGv4SeSVcF89n/81BqOvrny0HN1SsAK5KcyI= Subject key identifier: F8:AE:6F:88:4F:ED:0F:CD:14:0A:9A:18:F6:F1:AE:1C:4B:7D:6D:86 Certificate issuer: /CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1 Certificate serial: 019B7F852F70CE48211D54FF2952ACA98B5F Authority key identifier: BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/1-K5viE_tD80UCpoY9vGuHEt9bYY.roa Signing time: Fri 02 Jan 2026 16:23:13 +0000 ROA not before: Fri 02 Jan 2026 16:23:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47586 IP address blocks: 37.77.108.0/22 maxlen: 24 80.249.204.0/22 maxlen: 24 87.239.0.0/21 maxlen: 24 91.214.56.0/22 maxlen: 24 93.190.16.0/21 maxlen: 24 109.235.184.0/21 maxlen: 24 146.19.211.0/24 maxlen: 24 158.58.128.0/21 maxlen: 24 185.30.116.0/22 maxlen: 24 193.0.148.0/22 maxlen: 24 194.114.128.0/22 maxlen: 24 195.64.156.0/23 maxlen: 24 2a00:b160::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:2f:70:ce:48:21:1d:54:ff:29:52:ac:a9:8b:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1 Validity Not Before: Jan 2 16:23:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8ae6f884fed0fcd140a9a18f6f1ae1c4b7d6d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:73:cd:28:00:05:22:0f:ae:74:a4:3c:e7:1d: 0b:5d:a4:a3:b7:d7:cf:a6:a9:dc:e4:c9:c3:8c:aa: 76:08:25:8f:fb:b9:5b:56:1a:bd:c0:d6:38:36:9f: 42:93:fd:51:66:59:e3:f6:2a:f6:45:51:57:75:ca: 69:f5:28:f4:e2:31:87:6f:40:77:a0:45:5a:18:ee: 93:65:9d:84:32:07:f4:d4:38:7e:6f:b1:5c:25:cc: 6d:c3:32:f7:24:e4:ed:9e:cc:dc:97:7c:f6:e2:32: 15:49:0e:04:8c:f0:e7:af:4a:02:41:4a:de:96:23: f5:a9:20:f0:d7:3e:82:1d:a5:c7:08:9e:8b:3e:a9: c5:ec:7d:c9:a6:4f:c6:a3:4a:b5:02:bf:bb:23:10: b6:2b:9e:98:db:13:c2:a2:d4:d0:99:0b:5a:03:b9: 34:84:27:ca:4b:db:63:fc:b1:3f:ad:79:20:f5:67: 62:5c:46:6c:b0:37:2e:bf:cc:44:92:10:c5:90:9d: f7:ed:da:7b:e7:80:47:e8:a1:7c:fb:a7:90:67:bb: 61:de:5f:a5:c5:d0:ff:38:02:12:1d:23:6b:21:35: 8c:de:a1:d6:41:09:32:31:6f:95:b0:65:b8:e0:a5: 70:86:dc:80:70:c1:6b:3f:96:0e:0a:7e:9b:41:f5: 64:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AE:6F:88:4F:ED:0F:CD:14:0A:9A:18:F6:F1:AE:1C:4B:7D:6D:86 X509v3 Authority Key Identifier: keyid:BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/1-K5viE_tD80UCpoY9vGuHEt9bYY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.77.108.0/22 80.249.204.0/22 87.239.0.0/21 91.214.56.0/22 93.190.16.0/21 109.235.184.0/21 146.19.211.0/24 158.58.128.0/21 185.30.116.0/22 193.0.148.0/22 194.114.128.0/22 195.64.156.0/23 IPv6: 2a00:b160::/32 Signature Algorithm: sha256WithRSAEncryption b1:59:15:88:72:4b:00:11:39:32:ae:4e:9a:03:da:d5:63:6a: d2:f4:d3:c1:11:58:6c:ad:eb:00:57:2e:25:b8:bc:40:13:e3: e0:e3:3a:1d:a6:92:b8:9d:b1:89:29:ba:31:0f:48:fd:90:8e: 50:16:7c:ce:80:fe:18:ea:ee:1d:ef:96:95:5d:04:79:35:3f: 1d:bc:ac:4e:4c:86:cd:f1:55:85:a7:2f:89:ba:45:e0:08:70: 60:f3:cb:f6:ab:df:5d:3c:a3:c0:3a:98:fc:54:2e:5c:d4:99: 48:82:b4:f0:1d:a4:df:75:6c:b8:a5:ce:fc:de:96:82:a9:a7: 62:9f:f4:eb:17:ae:82:e3:89:a6:29:8f:75:b0:03:a7:de:b1: 42:d4:ff:4d:1a:db:35:d4:9c:cd:0b:97:0f:c3:a3:06:94:79: 77:a4:b5:3f:15:80:42:15:02:b7:bb:28:ad:7c:f9:d3:81:3d: 2d:ea:35:46:cf:1c:a5:26:d6:19:5b:9a:27:00:a4:8d:78:ac: 3c:5a:d0:ba:40:1c:89:5d:02:99:75:24:e4:11:7f:6e:7b:f1: 03:f7:6b:9a:63:40:82:76:38:77:c4:dd:28:a8:07:9b:8e:f9: 10:b7:a0:88:69:7b:4e:05:3b:10:e7:ed:10:bc:5f:da:ac:69: df:b2:db:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgISAZt/hS9wzkghHVT/KVKsqYtfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNjYzYzZlNzc5ZGFlOWJkYjA0Njg1NGYxODlmZThjNWMz YzMyZTEwHhcNMjYwMTAyMTYyMzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGFlNmY4ODRmZWQwZmNkMTQwYTlhMThmNmYxYWUxYzRiN2Q2ZDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnPNKAAFIg+udKQ85x0LXaSjt9fP pqnc5MnDjKp2CCWP+7lbVhq9wNY4Np9Ck/1RZlnj9ir2RVFXdcpp9Sj04jGHb0B3 oEVaGO6TZZ2EMgf01Dh+b7FcJcxtwzL3JOTtnszcl3z24jIVSQ4EjPDnr0oCQUre liP1qSDw1z6CHaXHCJ6LPqnF7H3Jpk/Go0q1Ar+7IxC2K56Y2xPCotTQmQtaA7k0 hCfKS9tj/LE/rXkg9WdiXEZssDcuv8xEkhDFkJ337dp754BH6KF8+6eQZ7th3l+l xdD/OAISHSNrITWM3qHWQQkyMW+VsGW44KVwhtyAcMFrP5YOCn6bQfVkOwIDAQAB o4ICWzCCAlcwHQYDVR0OBBYEFPiub4hP7Q/NFAqaGPbxrhxLfW2GMB8GA1UdIwQY MBaAFLxmPG53na6b2wRoVPGJ/oxcPDLhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkdZOGJuZWRycHZiQkdoVThZbi1qRnc4TXVFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83YThmM2YtMzA0Yy00YTI2LWFlY2Et MThiZGZlOGNjMGNkLzEvMS1LNXZpRV90RDgwVUNwb1k5dkd1SEV0OWJZWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzcvN2E4ZjNmLTMwNGMtNGEyNi1hZWNhLTE4YmRmZThjYzBj ZC8xL3ZHWThibmVkcnB2YkJHaFU4WW4takZ3OE11RS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBwBggrBgEFBQcBBwEB/wRhMF8wTgQCAAEwSAMEAiVNbAME AlD5zAMEA1fvAAMEAlvWOAMEA12+EAMEA23ruAMEAJIT0wMEA546gAMEArkedAME AsEAlAMEAsJygAMEAcNAnDANBAIAAjAHAwUAKgCxYDANBgkqhkiG9w0BAQsFAAOC AQEAsVkViHJLABE5Mq5OmgPa1WNq0vTTwRFYbK3rAFcuJbi8QBPj4OM6HaaSuJ2x iSm6MQ9I/ZCOUBZ8zoD+GOruHe+WlV0EeTU/HbysTkyGzfFVhacvibpF4AhwYPPL 9qvfXTyjwDqY/FQuXNSZSIK08B2k33VsuKXO/N6WgqmnYp/06xeuguOJpimPdbAD p96xQtT/TRrbNdSczQuXD8OjBpR5d6S1PxWAQhUCt7sorXz504E9Leo1Rs8cpSbW GVuaJwCkjXisPFrQukAciV0CmXUk5BF/bnvxA/drmmNAgnY4d8TdKKgHm475ELeg iGl7TgU7EOftELxf2qxp37Lb8A== -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:35 2026 by rpki-client