This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/dVtzjzM4YSfSrc4WwaY5N5o9pwo.roa File: dVtzjzM4YSfSrc4WwaY5N5o9pwo.roa (raw, json) Hash identifier: k5YYP5FpQZ54/UVc59zI046GfdNFSJmuZYec2D0RBr8= Subject key identifier: 75:5B:73:8F:33:38:61:27:D2:AD:CE:16:C1:A6:39:37:9A:3D:A7:0A Certificate issuer: /CN=fc13f7fa237f89d011233bac7328c2219ba7d62c Certificate serial: 019B7F8265BBD46ADB6DDEE61CFACF63BE39 Authority key identifier: FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/dVtzjzM4YSfSrc4WwaY5N5o9pwo.roa Signing time: Fri 02 Jan 2026 16:20:10 +0000 ROA not before: Fri 02 Jan 2026 16:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8469 IP address blocks: 5.61.80.0/21 maxlen: 24 62.40.0.0/19 maxlen: 24 80.87.160.0/20 maxlen: 24 185.32.32.0/22 maxlen: 24 195.82.64.0/19 maxlen: 24 195.82.80.0/24 maxlen: 24 195.94.64.0/19 maxlen: 24 195.135.128.0/18 maxlen: 24 195.227.0.0/16 maxlen: 24 212.237.160.0/21 maxlen: 24 2001:1440::/32 maxlen: 32 2a00:5f40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:65:bb:d4:6a:db:6d:de:e6:1c:fa:cf:63:be:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc13f7fa237f89d011233bac7328c2219ba7d62c Validity Not Before: Jan 2 16:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=755b738f33386127d2adce16c1a639379a3da70a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:5e:01:e6:9f:23:ba:61:a5:13:14:e3:04: d1:75:6a:62:ac:62:50:22:46:06:1b:be:93:08:91: 03:e3:8f:ff:a1:9b:e0:08:99:e7:69:ae:e3:26:11: e7:07:1d:ee:18:70:c9:30:9c:42:0a:4e:f0:4a:f3: e4:cd:4d:be:55:62:c9:6d:10:bb:1a:83:9b:17:1d: 29:58:80:60:de:03:a4:5e:a3:e3:b9:4e:0c:71:ca: 05:a8:5e:66:f6:9e:c1:49:f7:a5:31:89:48:a8:59: 37:3d:f6:cd:ce:b6:15:aa:c2:94:46:c0:a6:7a:e9: 72:17:da:db:1a:79:3e:41:aa:49:29:1b:e1:c6:1a: ad:c6:ef:55:1c:3f:f2:e8:32:49:27:2c:e2:df:8b: 94:4b:b5:7b:e6:ba:c8:9f:6c:c1:d1:15:d6:b3:0c: 95:52:e9:c5:c7:61:29:89:bd:fa:4d:2b:ec:2b:e1: bc:3e:21:ce:69:fd:62:8c:52:c8:10:4e:94:48:70: 8f:eb:60:8e:68:b5:01:3f:cb:8d:8c:4e:2b:ac:52: 15:ca:dd:7e:65:87:c7:b0:f5:7d:2f:c3:65:f6:eb: f6:de:a8:3d:5a:ba:ef:bb:61:d9:9a:7e:87:22:80: 9a:d5:9d:e9:9e:62:0e:3a:d0:05:60:d4:2e:eb:de: 15:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5B:73:8F:33:38:61:27:D2:AD:CE:16:C1:A6:39:37:9A:3D:A7:0A X509v3 Authority Key Identifier: keyid:FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/dVtzjzM4YSfSrc4WwaY5N5o9pwo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.61.80.0/21 62.40.0.0/19 80.87.160.0/20 185.32.32.0/22 195.82.64.0/19 195.94.64.0/19 195.135.128.0/18 195.227.0.0/16 212.237.160.0/21 IPv6: 2001:1440::/32 2a00:5f40::/29 Signature Algorithm: sha256WithRSAEncryption 38:68:a2:23:47:1b:b0:17:08:c5:46:2d:6e:3c:86:7d:60:49: c0:5b:69:ef:b9:ec:dd:9f:a7:95:96:c4:9d:27:f4:01:2c:e3: de:50:72:37:11:65:89:40:f2:54:d5:ee:4c:79:30:8c:fd:04: 7e:ad:2e:7c:2c:ef:11:00:34:79:d0:69:74:ac:4c:e9:81:96: ef:ce:cd:6b:d4:3c:78:99:ba:a1:5b:b6:71:e9:fb:ed:8f:82: 9d:ce:7e:36:3b:37:03:94:c1:1c:47:27:3f:9b:71:b5:d4:ed: 32:37:ec:7e:de:d7:be:bb:97:ff:7d:08:86:55:47:b3:8b:fe: 91:92:89:d7:bb:44:87:c6:55:62:94:28:41:72:c5:75:e8:cf: b7:ac:20:c3:bf:36:9c:3e:c1:f6:f0:f8:bc:ac:2f:e3:93:0c: fe:10:ca:4d:c4:53:6a:9f:74:4e:01:80:95:56:73:00:a6:b5: 15:0c:7b:96:a8:16:70:4f:9c:c7:0f:ad:18:64:c9:17:c1:2d: 36:26:8b:bf:49:ad:16:92:18:46:0e:48:d4:e6:7a:13:f8:7c: 41:96:35:21:39:f3:65:7b:fe:c5:f2:ac:5d:fe:2a:68:1e:52: 0e:63:5f:a9:ce:b7:de:7b:44:05:08:34:4f:d0:d3:46:52:6b: 00:9f:bb:8f -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZt/gmW71Grbbd7mHPrPY745MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMTNmN2ZhMjM3Zjg5ZDAxMTIzM2JhYzczMjhjMjIxOWJh N2Q2MmMwHhcNMjYwMTAyMTYyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTViNzM4ZjMzMzg2MTI3ZDJhZGNlMTZjMWE2MzkzNzlhM2RhNzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvdeAeafI7phpRMU4wTRdWpirGJQ IkYGG76TCJED44//oZvgCJnnaa7jJhHnBx3uGHDJMJxCCk7wSvPkzU2+VWLJbRC7 GoObFx0pWIBg3gOkXqPjuU4MccoFqF5m9p7BSfelMYlIqFk3PfbNzrYVqsKURsCm eulyF9rbGnk+QapJKRvhxhqtxu9VHD/y6DJJJyzi34uUS7V75rrIn2zB0RXWswyV UunFx2Epib36TSvsK+G8PiHOaf1ijFLIEE6USHCP62COaLUBP8uNjE4rrFIVyt1+ ZYfHsPV9L8Nl9uv23qg9Wrrvu2HZmn6HIoCa1Z3pnmIOOtAFYNQu694VqQIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFHVbc48zOGEn0q3OFsGmOTeaPacKMB8GA1UdIwQY MBaAFPwT9/ojf4nQESM7rHMowiGbp9YsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0JQMy1pTl9pZEFSSXp1c2N5akNJWnVuMWl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wOWFmMmItNjRmNy00YzFkLWFiZDQt ZDA3NDY0YjliMzc4LzEvZFZ0emp6TTRZU2ZTcmM0V3dhWTVONW85cHdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wOWFmMmItNjRmNy00YzFkLWFiZDQtZDA3NDY0YjliMzc4 LzEvX0JQMy1pTl9pZEFSSXp1c2N5akNJWnVuMWl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzA7BAIAATA1AwQDBT1QAwQF PigAAwQEUFegAwQCuSAgAwQFw1JAAwQFw15AAwQGw4eAAwMAw+MDBAPU7aAwFAQC AAIwDgMFACABFEADBQMqAF9AMA0GCSqGSIb3DQEBCwUAA4IBAQA4aKIjRxuwFwjF Ri1uPIZ9YEnAW2nvuezdn6eVlsSdJ/QBLOPeUHI3EWWJQPJU1e5MeTCM/QR+rS58 LO8RADR50Gl0rEzpgZbvzs1r1Dx4mbqhW7Zx6fvtj4Kdzn42OzcDlMEcRyc/m3G1 1O0yN+x+3te+u5f/fQiGVUezi/6RkonXu0SHxlVilChBcsV16M+3rCDDvzacPsH2 8Pi8rC/jkwz+EMpNxFNqn3ROAYCVVnMAprUVDHuWqBZwT5zHD60YZMkXwS02Jou/ Sa0WkhhGDkjU5noT+HxBljUhOfNle/7F8qxd/ipoHlIOY1+pzrfee0QFCDRP0NNG UmsAn7uP -----END CERTIFICATE-----Generated at Mon Jan 26 01:49:00 2026 by rpki-client