This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/p9tIdO6L7fJLCOoIZJHKF9Loy6c.roa File: p9tIdO6L7fJLCOoIZJHKF9Loy6c.roa (raw, json) Hash identifier: lpUoV5nI79wko7rOO/y0tl5z383kCVtwMVztStwsXyI= Subject key identifier: A7:DB:48:74:EE:8B:ED:F2:4B:08:EA:08:64:91:CA:17:D2:E8:CB:A7 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA76DDB3723761A51C3CE2BACD3F025 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/p9tIdO6L7fJLCOoIZJHKF9Loy6c.roa Signing time: Fri 02 Jan 2026 12:21:00 +0000 ROA not before: Fri 02 Jan 2026 12:21:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34892 IP address blocks: 5.158.232.0/24 maxlen: 24 5.158.233.0/24 maxlen: 24 5.158.234.0/23 maxlen: 23 5.158.236.0/23 maxlen: 23 5.158.238.0/23 maxlen: 23 85.234.0.0/22 maxlen: 22 85.234.4.0/22 maxlen: 22 85.234.8.0/22 maxlen: 22 85.234.12.0/22 maxlen: 22 85.234.16.0/22 maxlen: 22 85.234.20.0/24 maxlen: 24 85.234.21.0/24 maxlen: 24 85.234.24.0/22 maxlen: 22 85.234.28.0/22 maxlen: 22 185.24.44.0/23 maxlen: 23 185.24.44.0/24 maxlen: 24 185.24.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:6d:db:37:23:76:1a:51:c3:ce:2b:ac:d3:f0:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7db4874ee8bedf24b08ea086491ca17d2e8cba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:46:e5:61:bf:9b:7d:87:c3:7e:d2:bd:d6:05: 64:95:ff:63:b1:6e:cb:ab:b9:76:45:c5:5a:d5:2e: b1:70:91:dd:05:b3:f8:a7:f1:16:0d:2f:cd:69:14: 88:e3:e3:ca:74:9f:4f:67:fd:94:f5:93:1f:30:5a: bc:e2:1c:90:e3:1d:f6:f6:3c:10:7c:d1:1d:63:f5: 64:d4:0b:9d:aa:1b:f4:8e:82:8e:27:5b:43:5c:fa: 1c:ab:c6:5e:b5:1e:e2:4f:de:a6:3e:96:46:43:be: 18:6d:ac:94:49:39:3a:dd:c2:a6:16:0d:b1:bd:e0: c9:ac:e0:03:c3:35:cd:1a:9c:d6:2f:f0:24:e1:d9: ed:cf:4a:b5:f2:d2:41:59:e7:d5:3e:dc:17:9f:d0: 32:de:e8:28:fe:73:29:0e:b5:9e:1a:c2:bf:46:dc: ed:1a:db:de:e1:72:b3:14:6c:68:34:83:04:1d:cf: 51:98:5a:05:08:24:33:53:2d:21:8c:d3:d0:46:1d: 60:45:51:77:87:da:49:e6:ae:13:31:aa:db:00:7b: 9b:b5:7a:7b:15:45:4a:38:cd:b6:92:f4:f6:16:47: b4:a2:3c:ed:c9:87:03:8a:35:20:5d:5d:92:50:74: f9:7f:21:a8:32:a1:6a:ff:10:27:ac:25:7e:54:28: ef:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DB:48:74:EE:8B:ED:F2:4B:08:EA:08:64:91:CA:17:D2:E8:CB:A7 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/p9tIdO6L7fJLCOoIZJHKF9Loy6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.158.232.0/21 85.234.0.0-85.234.21.255 85.234.24.0/21 185.24.44.0/23 Signature Algorithm: sha256WithRSAEncryption 72:2f:b7:ab:72:69:b6:13:d4:02:f1:a0:85:8b:ea:cb:7c:5f: d5:a8:b4:cb:81:ba:01:4a:39:42:16:e6:d6:88:89:5b:43:b4: d4:e9:af:43:90:dc:f3:d1:a8:35:da:8b:b5:7c:02:2f:41:74: 86:c3:5c:e7:7d:5d:19:a8:12:bd:5b:e8:11:4d:e2:7d:39:9b: 6c:ee:9a:97:99:d3:eb:01:0b:b1:24:b7:d4:ae:15:17:05:72: 8e:76:5e:c1:85:fd:18:4f:1a:12:42:3d:6f:d2:62:fa:f8:5d: 94:ef:70:21:f8:4a:5f:fd:2d:f9:25:df:18:16:eb:c4:58:b3: 40:ea:5d:56:a7:3b:f8:6d:42:4f:a7:b8:db:11:dc:eb:19:f7: e4:7d:b5:f3:1b:af:76:dd:cc:03:61:77:f3:0f:ec:4f:56:ee: d8:e6:e5:27:69:85:19:d4:df:09:37:58:57:ce:a7:3e:73:59: 48:af:72:57:b6:79:e0:ac:2f:b6:d4:05:2a:9f:a8:d2:4b:b6: 29:2c:e5:85:e2:9a:80:79:c3:75:9a:e5:53:de:5f:01:51:54: 1c:83:13:53:52:a6:28:57:f1:63:ed:32:04:9a:aa:75:63:d4: ed:9b:78:0b:58:b2:a6:86:1b:f4:40:03:40:78:05:78:18:03: 83:ad:ca:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt+p23bNyN2GlHDzius0/AlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2RiNDg3NGVlOGJlZGYyNGIwOGVhMDg2NDkxY2ExN2QyZThjYmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUblYb+bfYfDftK91gVklf9jsW7L q7l2RcVa1S6xcJHdBbP4p/EWDS/NaRSI4+PKdJ9PZ/2U9ZMfMFq84hyQ4x329jwQ fNEdY/Vk1Audqhv0joKOJ1tDXPocq8ZetR7iT96mPpZGQ74YbayUSTk63cKmFg2x veDJrOADwzXNGpzWL/Ak4dntz0q18tJBWefVPtwXn9Ay3ugo/nMpDrWeGsK/Rtzt Gtve4XKzFGxoNIMEHc9RmFoFCCQzUy0hjNPQRh1gRVF3h9pJ5q4TMarbAHubtXp7 FUVKOM22kvT2Fke0ojztyYcDijUgXV2SUHT5fyGoMqFq/xAnrCV+VCjvkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfbSHTui+3ySwjqCGSRyhfS6MunMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvcDl0SWRPNkw3ZkpMQ09vSVpKSEtGOUxveTZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAlBAIAATAfAwQDBZ7oMAsD AwFV6gMEAVXqFAMEA1XqGAMEAbkYLDANBgkqhkiG9w0BAQsFAAOCAQEAci+3q3Jp thPUAvGghYvqy3xf1ai0y4G6AUo5Qhbm1oiJW0O01OmvQ5Dc89GoNdqLtXwCL0F0 hsNc531dGagSvVvoEU3ifTmbbO6al5nT6wELsSS31K4VFwVyjnZewYX9GE8aEkI9 b9Ji+vhdlO9wIfhKX/0t+SXfGBbrxFizQOpdVqc7+G1CT6e42xHc6xn35H218xuv dt3MA2F38w/sT1bu2OblJ2mFGdTfCTdYV86nPnNZSK9yV7Z54KwvttQFKp+o0ku2 KSzlheKagHnDdZrlU95fAVFUHIMTU1KmKFfxY+0yBJqqdWPU7Zt4C1iypoYb9EAD QHgFeBgDg63KIg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:28:27 2026 by rpki-client