This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/8MDk26A6HB8ESAemQVS635P3dlM.roa File: 8MDk26A6HB8ESAemQVS635P3dlM.roa (raw, json) Hash identifier: rxyUnW+DZGiT5coh/pmWc5vX6tfUq/igWAH5aJLS19c= Subject key identifier: F0:C0:E4:DB:A0:3A:1C:1F:04:48:07:A6:41:54:BA:DF:93:F7:76:53 Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 019B7758BF1E7F1512E94467B1FD041C636D Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/8MDk26A6HB8ESAemQVS635P3dlM.roa Signing time: Thu 01 Jan 2026 02:17:43 +0000 ROA not before: Thu 01 Jan 2026 02:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213122 IP address blocks: 5.226.138.0/24 maxlen: 24 185.16.204.0/24 maxlen: 24 217.146.81.0/24 maxlen: 24 217.146.88.0/24 maxlen: 24 2a01:4020:15::/48 maxlen: 48 2a01:4020:16::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:bf:1e:7f:15:12:e9:44:67:b1:fd:04:1c:63:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: Jan 1 02:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0c0e4dba03a1c1f044807a64154badf93f77653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:49:51:cb:f2:5f:4b:ae:fc:e3:93:c1:03:cd: 7b:d6:1d:62:56:aa:a2:60:af:3d:e3:be:b1:ef:a3: 03:d9:b4:dd:21:18:f9:5f:34:15:f2:4c:67:2b:2a: a4:de:c3:fa:b4:a5:61:ee:e6:cd:40:5f:e1:dd:c5: be:92:d1:bc:f6:27:ef:ee:44:fa:50:c5:0b:83:6c: 58:6d:c6:ca:c1:e4:09:e2:0f:ba:d8:e1:20:8e:2b: 44:8c:6c:5f:46:49:3d:d2:6a:ff:2a:bd:a4:53:db: 41:ec:76:97:3a:cb:e2:f4:12:1d:17:87:12:30:d3: ea:f2:cb:a2:96:28:b5:aa:b3:f1:d0:3a:26:40:8c: 27:11:be:1c:9d:d3:3e:0c:dc:d2:bf:44:a0:a5:9c: 15:98:f0:98:07:e1:78:ac:41:a6:ee:e0:2b:50:7d: e9:39:c4:50:f8:d4:8c:c7:22:c6:87:b3:e7:bc:b8: 4f:47:47:1b:84:f6:af:6e:39:81:f0:88:77:9e:79: 32:20:8a:cd:45:5d:0f:64:1c:29:e9:d9:16:e9:81: b7:02:ff:b5:da:48:70:cb:c9:ec:f6:2a:44:5f:36: 61:1f:cd:7c:83:9c:d5:d5:47:a3:f3:97:d8:5f:9d: 66:64:49:cd:b1:f4:f2:01:92:cf:a3:48:13:d8:11: 98:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C0:E4:DB:A0:3A:1C:1F:04:48:07:A6:41:54:BA:DF:93:F7:76:53 X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/8MDk26A6HB8ESAemQVS635P3dlM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.226.138.0/24 185.16.204.0/24 217.146.81.0/24 217.146.88.0/24 IPv6: 2a01:4020:15::-2a01:4020:16:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 5b:49:41:18:58:a1:e4:ad:c9:30:0b:cd:79:72:0c:ec:b1:eb: 4e:7a:9f:fd:e0:8b:3e:9a:c9:e1:f4:13:34:a8:43:30:29:d8: b3:a6:8f:0d:86:5b:5b:23:5c:15:ae:02:f6:d5:1a:95:ab:2b: 2a:cc:8b:78:c1:f0:36:18:c9:11:43:38:dc:d4:37:5c:84:d2: fe:bc:43:9b:12:84:d4:30:d4:9b:34:0d:e9:f3:8d:0e:0a:99: 3b:92:52:18:9e:11:8e:a9:93:2a:d0:67:e9:ac:e0:81:6c:4e: cf:68:76:17:17:61:f6:87:20:8c:d3:3b:28:7b:90:92:1e:0f: a6:3b:34:34:d5:53:2a:e8:72:f1:9e:8b:94:5a:c7:28:f6:a7: 6d:1c:ad:23:5a:c2:e7:3a:28:0b:22:08:aa:84:3c:39:82:a7: 16:c9:b7:66:cb:5b:bf:e4:ac:cf:70:4a:cf:18:e0:ae:92:ee: 37:db:7f:02:bd:02:43:5d:9d:8e:77:1f:ba:c8:39:3c:57:ee: f4:12:b8:64:da:df:ae:75:8d:ad:1a:25:f6:a4:87:d5:d0:c5: a1:9b:44:91:7a:2b:16:49:bb:b7:05:9e:2d:3c:f8:54:7f:66: 58:55:5b:24:d6:3a:82:a5:c5:88:ba:61:21:1c:d0:db:e0:38: 2e:aa:10:8c -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt3WL8efxUS6URnsf0EHGNtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjYwMTAxMDIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGMwZTRkYmEwM2ExYzFmMDQ0ODA3YTY0MTU0YmFkZjkzZjc3NjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArklRy/JfS67845PBA8171h1iVqqi YK89476x76MD2bTdIRj5XzQV8kxnKyqk3sP6tKVh7ubNQF/h3cW+ktG89ifv7kT6 UMULg2xYbcbKweQJ4g+62OEgjitEjGxfRkk90mr/Kr2kU9tB7HaXOsvi9BIdF4cS MNPq8suilii1qrPx0DomQIwnEb4cndM+DNzSv0SgpZwVmPCYB+F4rEGm7uArUH3p OcRQ+NSMxyLGh7PnvLhPR0cbhPavbjmB8Ih3nnkyIIrNRV0PZBwp6dkW6YG3Av+1 2khwy8ns9ipEXzZhH818g5zV1Uej85fYX51mZEnNsfTyAZLPo0gT2BGYHwIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFPDA5NugOhwfBEgHpkFUut+T93ZTMB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvOE1EazI2QTZIQjhFU0FlbVFWUzYzNVAzZGxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAeBAIAATAYAwQABeKKAwQA uRDMAwQA2ZJRAwQA2ZJYMBoEAgACMBQwEgMHACoBQCAAFQMHACoBQCAAFjANBgkq hkiG9w0BAQsFAAOCAQEAW0lBGFih5K3JMAvNeXIM7LHrTnqf/eCLPprJ4fQTNKhD MCnYs6aPDYZbWyNcFa4C9tUalasrKsyLeMHwNhjJEUM43NQ3XITS/rxDmxKE1DDU mzQN6fONDgqZO5JSGJ4RjqmTKtBn6azggWxOz2h2Fxdh9ocgjNM7KHuQkh4Ppjs0 NNVTKuhy8Z6LlFrHKPanbRytI1rC5zooCyIIqoQ8OYKnFsm3Zstbv+Ssz3BKzxjg rpLuN9t/Ar0CQ12djncfusg5PFfu9BK4ZNrfrnWNrRol9qSH1dDFoZtEkXorFkm7 twWeLTz4VH9mWFVbJNY6gqXFiLphIRzQ2+A4LqoQjA== -----END CERTIFICATE-----Generated at Mon Jan 19 17:46:27 2026 by rpki-client