This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/hB5AbDSqiH4rz8B8k5IdA1nRfA0.roa File: hB5AbDSqiH4rz8B8k5IdA1nRfA0.roa (raw, json) Hash identifier: tVKpwayqN7JLwz8QolMBhYOxzzJLIK1oL+xvKaEZs9o= Subject key identifier: 84:1E:40:6C:34:AA:88:7E:2B:CF:C0:7C:93:92:1D:03:59:D1:7C:0D Certificate issuer: /CN=bfd070b0c9add92972fefc566c112d93717c4d6c Certificate serial: 019B78353930B52955D8612D702E8945BAA1 Authority key identifier: BF:D0:70:B0:C9:AD:D9:29:72:FE:FC:56:6C:11:2D:93:71:7C:4D:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/hB5AbDSqiH4rz8B8k5IdA1nRfA0.roa Signing time: Thu 01 Jan 2026 06:18:32 +0000 ROA not before: Thu 01 Jan 2026 06:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49586 IP address blocks: 137.221.24.0/21 maxlen: 21 137.221.25.64/27 maxlen: 27 137.221.25.112/28 maxlen: 28 185.7.132.0/22 maxlen: 22 188.95.240.0/21 maxlen: 21 188.95.240.64/26 maxlen: 26 188.95.240.72/30 maxlen: 30 188.95.240.208/29 maxlen: 29 188.95.240.216/29 maxlen: 29 188.95.240.248/29 maxlen: 29 188.95.242.16/30 maxlen: 31 188.95.242.254/31 maxlen: 31 2a00:10b0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:39:30:b5:29:55:d8:61:2d:70:2e:89:45:ba:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfd070b0c9add92972fefc566c112d93717c4d6c Validity Not Before: Jan 1 06:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=841e406c34aa887e2bcfc07c93921d0359d17c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:72:2a:31:e6:36:3c:fb:10:d9:f7:02:d0:bc: e5:77:81:1c:7c:23:3f:7b:b0:46:a0:f0:ef:f7:19: 54:c8:25:1c:76:f1:0b:99:9c:9b:af:22:a8:17:3d: 06:bf:04:d3:e2:86:3e:85:54:5e:e4:c5:1b:10:3f: 73:b3:48:99:6c:9e:33:8d:7a:4a:c6:5e:85:e4:66: 70:bb:75:c7:cd:46:41:67:e2:ce:fe:98:b6:1e:ba: 96:c1:a3:0a:d9:46:da:11:c9:23:64:d2:cf:e5:f1: cb:e4:1a:f5:5a:db:9e:61:9c:b4:9c:33:10:24:72: 65:48:11:2d:e0:dd:45:03:0b:72:e1:12:ca:f7:3f: 94:1f:29:89:e2:db:ae:55:f2:d0:16:a9:fb:d3:94: c4:48:94:43:cb:c4:d8:85:5b:99:1c:f1:1a:01:07: 21:0c:06:5d:e0:86:97:c8:48:43:62:7b:f4:47:7c: 76:0c:46:b7:8d:4b:0d:2c:5b:8b:45:57:1a:f8:a6: 6c:fb:4f:13:9f:17:06:9d:c6:ef:37:77:1c:86:fd: cd:73:50:6a:5b:10:1b:60:ee:06:aa:87:da:00:cc: 25:89:24:81:3c:ed:9d:be:19:a4:e1:79:d3:c6:89: e7:54:6a:8b:03:14:c1:6c:46:c2:88:51:3e:a9:be: 96:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1E:40:6C:34:AA:88:7E:2B:CF:C0:7C:93:92:1D:03:59:D1:7C:0D X509v3 Authority Key Identifier: keyid:BF:D0:70:B0:C9:AD:D9:29:72:FE:FC:56:6C:11:2D:93:71:7C:4D:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/hB5AbDSqiH4rz8B8k5IdA1nRfA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 137.221.24.0/21 185.7.132.0/22 188.95.240.0/21 IPv6: 2a00:10b0::/29 Signature Algorithm: sha256WithRSAEncryption 65:eb:29:5e:4d:60:b4:08:e7:75:2f:90:e7:ae:b3:52:95:6a: b4:64:f7:6a:70:9c:60:db:97:0d:50:f0:ef:6b:62:a8:80:36: aa:a3:88:e4:9e:2e:79:2c:14:fa:4f:e2:39:62:37:a1:a7:44: 54:fa:1a:ec:dd:4b:fa:17:f3:01:dc:e1:cd:37:04:3c:e7:bb: b3:af:8e:0d:72:bd:2c:d2:4a:39:83:01:cd:1b:e2:bd:0a:76: 62:37:e7:e8:42:b1:07:17:7a:6c:d8:b5:42:0f:cb:8a:8b:9e: 28:19:12:22:be:cd:18:53:11:5f:95:18:7d:7e:f2:ce:5f:ec: f8:ae:ce:2a:73:3a:ad:34:42:7c:61:6c:92:37:36:b7:ec:b1: ee:28:51:2c:42:2b:75:30:73:91:f8:97:51:86:2e:33:c9:9d: 4e:c8:b9:73:c5:4c:e4:0d:4b:87:3a:cc:08:2a:3b:8a:b1:e2: 84:fa:a7:33:59:5c:30:2e:ef:1c:d4:53:17:2a:27:32:f5:e2: 9e:42:79:30:01:aa:da:5a:f4:ff:81:3e:8d:86:e8:cf:36:d0: 05:b6:ea:16:2d:45:7a:38:84:c1:e1:2f:9d:0e:38:b7:35:a7: 15:89:6c:0f:ce:ea:a2:b3:13:ee:fb:6b:d0:b8:a7:78:77:0b: 6e:89:ce:82 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt4NTkwtSlV2GEtcC6JRbqhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZDA3MGIwYzlhZGQ5Mjk3MmZlZmM1NjZjMTEyZDkzNzE3 YzRkNmMwHhcNMjYwMTAxMDYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDFlNDA2YzM0YWE4ODdlMmJjZmMwN2M5MzkyMWQwMzU5ZDE3YzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunIqMeY2PPsQ2fcC0Lzld4EcfCM/ e7BGoPDv9xlUyCUcdvELmZybryKoFz0GvwTT4oY+hVRe5MUbED9zs0iZbJ4zjXpK xl6F5GZwu3XHzUZBZ+LO/pi2HrqWwaMK2UbaEckjZNLP5fHL5Br1WtueYZy0nDMQ JHJlSBEt4N1FAwty4RLK9z+UHymJ4tuuVfLQFqn705TESJRDy8TYhVuZHPEaAQch DAZd4IaXyEhDYnv0R3x2DEa3jUsNLFuLRVca+KZs+08TnxcGncbvN3cchv3Nc1Bq WxAbYO4GqofaAMwliSSBPO2dvhmk4XnTxonnVGqLAxTBbEbCiFE+qb6WiwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFIQeQGw0qoh+K8/AfJOSHQNZ0XwNMB8GA1UdIwQY MBaAFL/QcLDJrdkpcv78VmwRLZNxfE1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjlCd3NNbXQyU2x5X3Z4V2JCRXRrM0Y4VFd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xOTU0MjctNDQyNS00NTU2LTllYTYt NTNjY2E4MWU5MjI0LzEvaEI1QWJEU3FpSDRyejhCOGs1SWRBMW5SZkEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xOTU0MjctNDQyNS00NTU2LTllYTYtNTNjY2E4MWU5MjI0 LzEvdjlCd3NNbXQyU2x5X3Z4V2JCRXRrM0Y4VFd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDid0YAwQC uQeEAwQDvF/wMA0EAgACMAcDBQMqABCwMA0GCSqGSIb3DQEBCwUAA4IBAQBl6yle TWC0COd1L5DnrrNSlWq0ZPdqcJxg25cNUPDva2KogDaqo4jkni55LBT6T+I5Yjeh p0RU+hrs3Uv6F/MB3OHNNwQ857uzr44Ncr0s0ko5gwHNG+K9CnZiN+foQrEHF3ps 2LVCD8uKi54oGRIivs0YUxFflRh9fvLOX+z4rs4qczqtNEJ8YWySNza37LHuKFEs Qit1MHOR+JdRhi4zyZ1OyLlzxUzkDUuHOswIKjuKseKE+qczWVwwLu8c1FMXKicy 9eKeQnkwAaraWvT/gT6NhujPNtAFtuoWLUV6OITB4S+dDji3NacViWwPzuqisxPu +2vQuKd4dwtuic6C -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:26 2026 by rpki-client