This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/com7AGbcg6rq-RMKjJZb9Yd9Nmk.roa File: com7AGbcg6rq-RMKjJZb9Yd9Nmk.roa (raw, json) Hash identifier: MDoGJcJ4G5Krxrk0LLNHmW1LvznE/ooEfQBze5H+eN0= Subject key identifier: 72:89:BB:00:66:DC:83:AA:EA:F9:13:0A:8C:96:5B:F5:87:7D:36:69 Certificate issuer: /CN=f1f186e97097c8417d9437d70cfdfc527331b5a8 Certificate serial: 019B7E392B3FCDA26875A0CE824BE76C9377 Authority key identifier: F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/com7AGbcg6rq-RMKjJZb9Yd9Nmk.roa Signing time: Fri 02 Jan 2026 10:20:34 +0000 ROA not before: Fri 02 Jan 2026 10:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39683 IP address blocks: 5.61.96.0/21 maxlen: 24 5.61.111.0/24 maxlen: 24 185.252.22.0/23 maxlen: 23 195.189.224.0/23 maxlen: 23 195.189.224.0/24 maxlen: 24 195.189.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2b:3f:cd:a2:68:75:a0:ce:82:4b:e7:6c:93:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1f186e97097c8417d9437d70cfdfc527331b5a8 Validity Not Before: Jan 2 10:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7289bb0066dc83aaeaf9130a8c965bf5877d3669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d8:d1:a4:19:5b:98:2f:eb:e2:5e:e5:4f:ab: 5a:e2:5f:c9:e3:e4:87:38:b0:c4:18:a3:fb:17:d2: 25:33:50:35:27:cc:bb:6e:42:52:d7:52:d7:e9:e0: 30:8c:8d:56:d5:a0:11:03:21:cd:03:bd:01:c6:3e: 5d:ae:4a:88:b0:f6:31:17:41:42:8c:89:b5:13:ca: 37:b4:88:33:fe:74:a2:9c:6d:e4:21:ff:f4:d5:8a: ab:af:07:96:d0:03:e3:57:35:06:f8:c5:48:d8:9b: 6b:15:bd:e6:7e:a2:b1:7b:ef:aa:a9:ef:a7:fa:b9: 37:4e:8a:e3:08:8a:4b:d2:ba:f3:4e:56:62:cd:6d: 40:4c:78:9b:5d:8c:eb:c8:c8:ca:72:1f:a5:95:d6: d8:f2:bc:1c:14:5e:ab:c0:d2:02:99:2d:8d:83:d7: b3:dd:1f:5e:d1:a4:7d:87:3d:fe:d8:b2:2a:d6:1f: 62:a0:cb:a3:1a:f0:25:a8:fa:e8:42:65:c0:96:6c: 0d:71:76:15:8d:9f:bf:f4:7c:12:43:f4:e2:84:ee: 8c:26:f2:e5:0d:2e:9d:1d:c9:1a:41:97:90:72:b5: 77:67:39:75:0b:ac:d3:8e:41:94:9a:a0:2a:c5:ea: d7:f9:e5:f4:ed:9a:54:fe:47:ed:eb:35:97:ef:64: 36:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:89:BB:00:66:DC:83:AA:EA:F9:13:0A:8C:96:5B:F5:87:7D:36:69 X509v3 Authority Key Identifier: keyid:F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/com7AGbcg6rq-RMKjJZb9Yd9Nmk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.61.96.0/21 5.61.111.0/24 185.252.22.0/23 195.189.224.0/23 Signature Algorithm: sha256WithRSAEncryption 10:ec:93:82:c8:39:c5:f1:7e:bf:c9:2e:a2:a4:65:9c:73:88: e3:69:61:e7:73:b3:42:85:be:d5:58:dc:67:cb:02:40:f1:2f: 16:f5:95:f0:38:bb:16:a3:03:7a:22:46:4e:68:f7:88:79:d0: ba:9f:cc:18:b0:5c:dd:15:27:f2:46:4f:8e:79:5f:70:4c:f4: 86:42:88:1d:ac:5e:43:63:42:e1:95:94:fc:fb:65:d5:a2:d7: 8b:e0:c8:fb:8e:e9:bf:42:75:ac:e9:3f:f4:e4:3b:cf:75:7d: c1:3f:9a:a9:73:a9:fb:1b:71:0f:17:41:1f:2e:ed:7f:5b:e1: f1:6e:12:19:f5:5b:00:1f:fe:ed:9a:96:07:cd:67:2d:3f:ee: 23:5e:1b:74:29:ff:9b:24:86:a3:10:27:b9:78:08:00:5b:fe: d0:7d:33:30:59:bf:85:f5:bb:10:a7:1e:65:07:8d:16:8a:36: c4:10:c4:4c:00:7a:3d:9c:f4:d8:8d:12:2e:cc:0e:47:0d:6a: f8:66:ac:04:34:e5:f5:3d:a6:2e:ca:54:0a:83:2f:a8:34:09: 56:ec:cb:ec:f8:e0:1f:56:2d:18:12:3d:9d:28:37:c4:fc:b7: af:9f:65:b4:b6:82:61:8f:3c:d2:82:cf:a3:2b:21:86:98:c3: 33:a8:4f:ab -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+OSs/zaJodaDOgkvnbJN3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZjE4NmU5NzA5N2M4NDE3ZDk0MzdkNzBjZmRmYzUyNzMz MWI1YTgwHhcNMjYwMTAyMTAyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Mjg5YmIwMDY2ZGM4M2FhZWFmOTEzMGE4Yzk2NWJmNTg3N2QzNjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdjRpBlbmC/r4l7lT6ta4l/J4+SH OLDEGKP7F9IlM1A1J8y7bkJS11LX6eAwjI1W1aARAyHNA70Bxj5drkqIsPYxF0FC jIm1E8o3tIgz/nSinG3kIf/01YqrrweW0APjVzUG+MVI2JtrFb3mfqKxe++qqe+n +rk3TorjCIpL0rrzTlZizW1ATHibXYzryMjKch+lldbY8rwcFF6rwNICmS2Ng9ez 3R9e0aR9hz3+2LIq1h9ioMujGvAlqProQmXAlmwNcXYVjZ+/9HwSQ/TihO6MJvLl DS6dHckaQZeQcrV3Zzl1C6zTjkGUmqAqxerX+eX07ZpU/kft6zWX72Q2kwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHKJuwBm3IOq6vkTCoyWW/WHfTZpMB8GA1UdIwQY MBaAFPHxhulwl8hBfZQ31wz9/FJzMbWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGZHRzZYQ1h5RUY5bERmWERQMzhVbk14dGFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81YzNiOTktYjhlZi00ZWQxLTg1N2Mt YjY1Y2QxMzYyNjJlLzEvY29tN0FHYmNnNnJxLVJNS2pKWmI5WWQ5Tm1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi81YzNiOTktYjhlZi00ZWQxLTg1N2MtYjY1Y2QxMzYyNjJl LzEvOGZHRzZYQ1h5RUY5bERmWERQMzhVbk14dGFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDBT1gAwQA BT1vAwQBufwWAwQBw73gMA0GCSqGSIb3DQEBCwUAA4IBAQAQ7JOCyDnF8X6/yS6i pGWcc4jjaWHnc7NChb7VWNxnywJA8S8W9ZXwOLsWowN6IkZOaPeIedC6n8wYsFzd FSfyRk+OeV9wTPSGQogdrF5DY0LhlZT8+2XVoteL4Mj7jum/QnWs6T/05DvPdX3B P5qpc6n7G3EPF0EfLu1/W+HxbhIZ9VsAH/7tmpYHzWctP+4jXht0Kf+bJIajECe5 eAgAW/7QfTMwWb+F9bsQpx5lB40WijbEEMRMAHo9nPTYjRIuzA5HDWr4ZqwENOX1 PaYuylQKgy+oNAlW7Mvs+OAfVi0YEj2dKDfE/Levn2W0toJhjzzSgs+jKyGGmMMz qE+r -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:29 2026 by rpki-client