This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/DbOeziXcPzk4KeUwNEQfmKbpBtc.roa File: DbOeziXcPzk4KeUwNEQfmKbpBtc.roa (raw, json) Hash identifier: iJzaS+LFDIToJy/KvKBwTeu0ofyf39v0k1O7+kAWgzQ= Subject key identifier: 0D:B3:9E:CE:25:DC:3F:39:38:29:E5:30:34:44:1F:98:A6:E9:06:D7 Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda Certificate serial: 019B7BA35904AAA626990AAD3FC352B4F382 Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/DbOeziXcPzk4KeUwNEQfmKbpBtc.roa Signing time: Thu 01 Jan 2026 22:17:41 +0000 ROA not before: Thu 01 Jan 2026 22:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31688 IP address blocks: 5.63.24.0/21 maxlen: 21 5.63.24.0/24 maxlen: 24 5.63.25.0/24 maxlen: 24 5.63.26.0/24 maxlen: 24 5.63.27.0/24 maxlen: 24 5.63.28.0/24 maxlen: 24 5.63.31.0/24 maxlen: 24 91.190.168.0/21 maxlen: 21 91.190.168.0/24 maxlen: 24 91.190.169.0/24 maxlen: 24 91.190.171.0/24 maxlen: 24 91.190.172.0/24 maxlen: 24 91.190.173.0/24 maxlen: 24 91.190.174.0/24 maxlen: 24 91.190.175.0/24 maxlen: 24 185.85.76.0/22 maxlen: 22 185.85.76.0/23 maxlen: 23 185.85.78.0/24 maxlen: 24 2a02:798::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:59:04:aa:a6:26:99:0a:ad:3f:c3:52:b4:f3:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda Validity Not Before: Jan 1 22:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0db39ece25dc3f393829e53034441f98a6e906d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f6:29:cb:a9:b1:89:34:67:3a:ac:37:f6:cd: d1:39:dc:96:c7:a3:33:a1:ec:1c:c0:81:6f:54:7b: bb:8b:da:6b:d1:ff:71:4e:91:fc:87:04:28:ac:b3: b2:a1:b0:22:4f:ec:31:08:76:75:17:47:bd:57:97: 2a:36:04:ad:15:fa:25:9f:c2:2d:1d:a3:fa:f2:a1: eb:ec:8d:6d:53:4a:e1:1c:f5:ab:83:53:f9:9c:04: fd:30:dc:2c:78:7e:55:66:55:7e:00:46:9f:1e:f4: d4:cb:47:53:a7:7e:3d:e2:6b:84:0b:27:bc:2d:db: 17:8f:1d:ef:a1:2b:40:0c:90:66:99:ae:26:dc:b4: c6:4e:95:3d:b3:07:41:15:3e:3f:2e:e2:02:6c:4d: c8:ac:5b:64:87:a6:40:06:cf:b5:be:14:76:94:57: 90:22:5a:35:19:5b:02:6e:eb:d3:07:20:82:1f:fe: 25:25:80:92:0d:90:8c:df:f1:15:a5:e0:73:76:34: 1b:38:c0:e7:47:e3:55:b1:33:f2:7e:37:17:2f:3e: 3d:76:8f:4a:52:49:15:1d:eb:da:a4:c0:88:23:d9: e2:e7:25:28:8e:ca:58:92:e6:e8:4e:34:39:9a:2a: 82:15:39:d4:44:2e:3a:52:1b:37:b9:83:7c:ae:a6: a4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B3:9E:CE:25:DC:3F:39:38:29:E5:30:34:44:1F:98:A6:E9:06:D7 X509v3 Authority Key Identifier: keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/DbOeziXcPzk4KeUwNEQfmKbpBtc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.63.24.0/21 91.190.168.0/21 185.85.76.0/22 IPv6: 2a02:798::/32 Signature Algorithm: sha256WithRSAEncryption 72:b6:c6:da:cc:05:00:cb:52:91:21:f6:59:21:5c:35:4c:0b: dc:7b:ad:c7:13:07:8d:46:72:f0:ee:2c:c9:c4:15:46:40:a2: a7:0a:c6:33:ea:a2:b7:40:36:b8:68:c7:13:7c:fa:5f:99:76: 55:59:d7:64:ff:21:fd:bc:84:7b:4a:e3:d2:b1:6e:f1:39:16: 80:3e:31:53:34:68:0f:7d:74:0d:66:98:1d:69:e2:55:fa:ad: 57:a4:29:31:94:e2:6f:03:ec:60:7a:4c:9e:3d:45:0a:73:12: 91:4d:71:ea:a5:19:c3:fe:5c:77:e7:07:9d:d9:c1:2d:f9:b3: fe:92:cc:78:e5:3f:c5:ca:e0:3e:9d:67:61:61:92:c6:2f:94: 3e:93:40:a3:2b:cb:4a:a1:71:4e:99:34:fe:a2:66:79:bf:14: cf:e0:c9:0b:88:d2:37:69:e3:dc:90:70:88:20:da:3b:a9:51: 7a:e7:36:0b:4c:54:c9:1a:e5:c4:bd:23:d8:dd:c9:42:32:a8: 6a:ab:18:d5:6d:4e:13:06:65:db:4c:a0:63:cc:42:12:57:11: 6b:33:60:0e:43:4f:a1:3f:c3:ff:63:7c:91:ba:fb:80:e4:0d: 86:5a:68:2c:c1:06:eb:ed:bb:74:8f:32:91:81:02:78:97:2e: a9:1e:f9:5f -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt7o1kEqqYmmQqtP8NStPOCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMTQxYzUwOTA4MjRkMGExN2MyOWVjNDA1MGUyMTAwNzEx M2ZiZGEwHhcNMjYwMTAxMjIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGIzOWVjZTI1ZGMzZjM5MzgyOWU1MzAzNDQ0MWY5OGE2ZTkwNmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/Ypy6mxiTRnOqw39s3ROdyWx6Mz oewcwIFvVHu7i9pr0f9xTpH8hwQorLOyobAiT+wxCHZ1F0e9V5cqNgStFfoln8It HaP68qHr7I1tU0rhHPWrg1P5nAT9MNwseH5VZlV+AEafHvTUy0dTp3494muECye8 LdsXjx3voStADJBmma4m3LTGTpU9swdBFT4/LuICbE3IrFtkh6ZABs+1vhR2lFeQ Ilo1GVsCbuvTByCCH/4lJYCSDZCM3/EVpeBzdjQbOMDnR+NVsTPyfjcXLz49do9K UkkVHevapMCII9ni5yUojspYkuboTjQ5miqCFTnURC46Uhs3uYN8rqaktwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFA2zns4l3D85OCnlMDREH5im6QbXMB8GA1UdIwQY MBaAFFoUHFCQgk0KF8KexAUOIQBxE/vaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUt ZWNlZWZmOGU4NGUwLzEvRGJPZXppWGNQems0S2VVd05FUWZtS2JwQnRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUtZWNlZWZmOGU4NGUw LzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDBT8YAwQD W76oAwQCuVVMMA0EAgACMAcDBQAqAgeYMA0GCSqGSIb3DQEBCwUAA4IBAQBytsba zAUAy1KRIfZZIVw1TAvce63HEweNRnLw7izJxBVGQKKnCsYz6qK3QDa4aMcTfPpf mXZVWddk/yH9vIR7SuPSsW7xORaAPjFTNGgPfXQNZpgdaeJV+q1XpCkxlOJvA+xg ekyePUUKcxKRTXHqpRnD/lx35wed2cEt+bP+ksx45T/FyuA+nWdhYZLGL5Q+k0Cj K8tKoXFOmTT+omZ5vxTP4MkLiNI3aePckHCIINo7qVF65zYLTFTJGuXEvSPY3clC MqhqqxjVbU4TBmXbTKBjzEISVxFrM2AOQ0+hP8P/Y3yRuvuA5A2GWmgswQbr7bt0 jzKRgQJ4ly6pHvlf -----END CERTIFICATE-----Generated at Fri Jan 2 13:02:05 2026 by rpki-client