This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/IvZ6Um5m60G1rmPcT0KgjCCstR0.roa File: IvZ6Um5m60G1rmPcT0KgjCCstR0.roa (raw, json) Hash identifier: P9MHZuhBNWgKoyXnEBUJRS1TnSoDtxisa290juUJbfE= Subject key identifier: 22:F6:7A:52:6E:66:EB:41:B5:AE:63:DC:4F:42:A0:8C:20:AC:B5:1D Certificate issuer: /CN=fc13f7fa237f89d011233bac7328c2219ba7d62c Certificate serial: 019B7F82668EC9A62678B15025AF619942CF Authority key identifier: FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/IvZ6Um5m60G1rmPcT0KgjCCstR0.roa Signing time: Fri 02 Jan 2026 16:20:10 +0000 ROA not before: Fri 02 Jan 2026 16:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20546 IP address blocks: 5.61.80.0/21 maxlen: 24 62.40.0.0/19 maxlen: 24 80.87.160.0/20 maxlen: 24 185.32.32.0/22 maxlen: 24 195.82.64.0/19 maxlen: 24 195.94.64.0/19 maxlen: 24 195.135.128.0/18 maxlen: 24 195.227.0.0/16 maxlen: 24 212.237.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:66:8e:c9:a6:26:78:b1:50:25:af:61:99:42:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc13f7fa237f89d011233bac7328c2219ba7d62c Validity Not Before: Jan 2 16:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22f67a526e66eb41b5ae63dc4f42a08c20acb51d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a3:6e:25:09:c4:43:4a:26:6e:09:dc:01:d3: ed:71:93:a5:5f:40:df:8c:79:eb:3a:a2:30:8f:ad: ea:28:05:ef:3e:d7:98:f2:63:c6:f5:dc:8b:78:f2: 94:03:1f:92:be:b2:b4:ab:82:6d:54:fb:56:b6:43: 2d:56:91:a7:d7:5a:63:c8:9c:01:83:15:72:81:14: 63:d8:6a:9c:1f:5c:b8:dc:f4:19:2f:a4:84:cb:9f: 2a:8c:17:27:13:34:6f:f3:f7:57:8f:c3:ea:03:d8: b2:25:00:61:09:1a:3b:b2:2f:f4:c4:be:13:e5:74: 22:72:27:28:6e:8e:ef:88:7f:44:e3:d7:34:86:06: 47:0d:15:de:d1:a4:7d:80:0f:a2:03:a7:2d:b6:08: 53:ad:66:4c:3d:d6:41:3a:40:0c:6d:86:0e:2b:e6: 26:00:3d:ec:c1:cb:c6:83:95:b5:b8:3c:ec:4b:9d: 12:09:f2:e1:25:00:45:e4:a3:11:7b:b9:3e:50:07: 8c:c7:ab:27:35:9d:57:40:1f:0e:c2:33:f1:0a:a6: ec:67:d1:5f:9f:ff:d8:7b:28:4c:16:43:b8:99:02: 43:4b:08:73:1b:5c:59:07:2c:8c:3d:65:d2:a9:9d: 85:b2:b0:a3:4a:5e:00:82:d8:1a:a1:9e:a1:d7:cc: d6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F6:7A:52:6E:66:EB:41:B5:AE:63:DC:4F:42:A0:8C:20:AC:B5:1D X509v3 Authority Key Identifier: keyid:FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/IvZ6Um5m60G1rmPcT0KgjCCstR0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.61.80.0/21 62.40.0.0/19 80.87.160.0/20 185.32.32.0/22 195.82.64.0/19 195.94.64.0/19 195.135.128.0/18 195.227.0.0/16 212.237.160.0/21 Signature Algorithm: sha256WithRSAEncryption 7f:9c:ea:14:d3:c7:88:15:a7:90:49:90:53:8a:bd:b2:16:ad: c8:ad:15:31:3a:1f:39:a7:4b:83:aa:e1:b5:40:54:09:df:3d: 33:9c:4d:a8:77:2c:69:6c:9e:c2:58:67:97:8c:6a:58:bc:26: a1:54:ca:7f:6b:14:91:2c:bf:cd:c6:ce:40:c6:32:28:92:f1: 49:44:f0:bc:db:c4:1f:89:f2:c0:69:15:97:50:b5:11:9a:42: 8a:da:7c:dd:79:5f:d8:66:51:9d:36:26:03:c3:61:ab:f3:e5: de:f6:c5:f7:c1:93:7d:d9:c7:0f:35:90:8c:4f:c1:ee:c8:31: a5:cb:03:d8:21:13:55:3f:08:76:fa:4b:0f:f8:ac:2a:f2:cc: 95:3c:ba:7e:3a:5c:53:81:c2:ad:95:4a:b8:3a:07:ec:39:0b: 2f:e8:92:cb:f2:2b:23:2d:95:45:59:14:8d:8f:63:80:e9:be: 02:8b:8c:dc:d1:92:b4:8b:39:dc:ba:40:2b:2a:ee:3d:eb:78: 91:39:d8:82:e5:3a:8b:99:29:55:77:85:c0:3e:da:da:29:f6: 68:48:3b:ee:75:8e:39:1d:cb:11:55:9f:af:d2:7d:d3:b7:8a: 03:0d:f8:46:8f:58:20:e6:5e:2c:33:82:c0:56:77:2b:99:77: 01:66:6b:3b -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt/gmaOyaYmeLFQJa9hmULPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMTNmN2ZhMjM3Zjg5ZDAxMTIzM2JhYzczMjhjMjIxOWJh N2Q2MmMwHhcNMjYwMTAyMTYyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmY2N2E1MjZlNjZlYjQxYjVhZTYzZGM0ZjQyYTA4YzIwYWNiNTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqNuJQnEQ0ombgncAdPtcZOlX0Df jHnrOqIwj63qKAXvPteY8mPG9dyLePKUAx+SvrK0q4JtVPtWtkMtVpGn11pjyJwB gxVygRRj2GqcH1y43PQZL6SEy58qjBcnEzRv8/dXj8PqA9iyJQBhCRo7si/0xL4T 5XQicicobo7viH9E49c0hgZHDRXe0aR9gA+iA6cttghTrWZMPdZBOkAMbYYOK+Ym AD3swcvGg5W1uDzsS50SCfLhJQBF5KMRe7k+UAeMx6snNZ1XQB8OwjPxCqbsZ9Ff n//YeyhMFkO4mQJDSwhzG1xZByyMPWXSqZ2FsrCjSl4AgtgaoZ6h18zW9wIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFCL2elJuZutBta5j3E9CoIwgrLUdMB8GA1UdIwQY MBaAFPwT9/ojf4nQESM7rHMowiGbp9YsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0JQMy1pTl9pZEFSSXp1c2N5akNJWnVuMWl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wOWFmMmItNjRmNy00YzFkLWFiZDQt ZDA3NDY0YjliMzc4LzEvSXZaNlVtNW02MEcxcm1QY1QwS2dqQ0NzdFIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wOWFmMmItNjRmNy00YzFkLWFiZDQtZDA3NDY0YjliMzc4 LzEvX0JQMy1pTl9pZEFSSXp1c2N5akNJWnVuMWl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTA7BAIAATA1AwQDBT1QAwQF PigAAwQEUFegAwQCuSAgAwQFw1JAAwQFw15AAwQGw4eAAwMAw+MDBAPU7aAwDQYJ KoZIhvcNAQELBQADggEBAH+c6hTTx4gVp5BJkFOKvbIWrcitFTE6HzmnS4Oq4bVA VAnfPTOcTah3LGlsnsJYZ5eMali8JqFUyn9rFJEsv83GzkDGMiiS8UlE8LzbxB+J 8sBpFZdQtRGaQorafN15X9hmUZ02JgPDYavz5d72xffBk33Zxw81kIxPwe7IMaXL A9ghE1U/CHb6Sw/4rCryzJU8un46XFOBwq2VSrg6B+w5Cy/oksvyKyMtlUVZFI2P Y4DpvgKLjNzRkrSLOdy6QCsq7j3reJE52ILlOouZKVV3hcA+2top9mhIO+51jjkd yxFVn6/SfdO3igMN+EaPWCDmXiwzgsBWdyuZdwFmazs= -----END CERTIFICATE-----Generated at Sun Jan 25 10:27:36 2026 by rpki-client