This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vP_qivr17GXs49QRgJELwyBNxrs.roa File: vP_qivr17GXs49QRgJELwyBNxrs.roa (raw, json) Hash identifier: FlEuB59/Ek+z+dK2zV8FnnCi1DiAhqf8p5wI1XcyERM= Subject key identifier: BC:FF:EA:8A:FA:F5:EC:65:EC:E3:D4:11:80:91:0B:C3:20:4D:C6:BB Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019BF106ACFDFB9C0DF5F9D0223A9608D62C Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vP_qivr17GXs49QRgJELwyBNxrs.roa Signing time: Sat 24 Jan 2026 17:21:45 +0000 ROA not before: Sat 24 Jan 2026 17:21:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207252 IP address blocks: 5.83.152.0/24 maxlen: 24 5.230.125.0/24 maxlen: 24 5.231.29.0/24 maxlen: 24 5.231.44.0/24 maxlen: 24 77.90.12.0/24 maxlen: 24 77.90.42.0/24 maxlen: 24 85.93.8.0/24 maxlen: 24 89.144.15.0/24 maxlen: 24 185.119.16.0/22 maxlen: 24 185.119.16.0/24 maxlen: 24 185.119.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f1:06:ac:fd:fb:9c:0d:f5:f9:d0:22:3a:96:08:d6:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 24 17:21:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bcffea8afaf5ec65ece3d41180910bc3204dc6bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f2:64:a2:dc:fb:24:de:d5:b6:dc:75:7e:1f: f0:e7:28:03:e2:45:60:c2:ce:2b:81:e8:51:91:bd: ff:1c:28:e3:51:8e:de:d7:1d:f5:49:5e:df:37:92: db:f0:b4:28:4c:65:0c:31:d9:d0:c3:57:cb:db:a1: 65:07:4d:cc:21:bd:84:54:f5:e7:32:a8:5e:7e:d6: d7:1b:b6:eb:49:ca:db:5a:64:ec:a2:1d:00:67:2b: 7b:e1:77:94:47:20:52:e1:e5:01:cc:f6:f6:6b:48: 59:d4:d6:73:d2:91:7a:da:f2:75:99:93:f5:e0:cf: c7:6a:27:3a:8f:74:a3:60:84:63:f4:41:36:01:7a: 06:ee:db:3f:10:25:68:c8:62:da:76:40:8c:b7:a2: 9f:e9:b2:1b:c4:6f:67:9e:cd:fc:f7:0e:01:f5:1e: a2:24:f5:d7:06:f6:52:c3:16:d8:b3:22:35:ea:7e: b4:5d:98:02:85:dd:32:f4:9a:77:31:67:37:2c:e4: 10:7c:2f:8c:be:f5:98:98:d0:4c:a8:17:19:3c:fa: ac:7d:5f:03:79:e8:a4:e4:7c:b3:ab:c5:90:b7:c2: 1c:11:b3:e7:eb:23:f7:c6:55:2d:13:37:fa:2a:d6: b8:28:2f:03:e6:93:31:86:b6:f3:b2:13:c6:7c:95: da:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FF:EA:8A:FA:F5:EC:65:EC:E3:D4:11:80:91:0B:C3:20:4D:C6:BB X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vP_qivr17GXs49QRgJELwyBNxrs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.152.0/24 5.230.125.0/24 5.231.29.0/24 5.231.44.0/24 77.90.12.0/24 77.90.42.0/24 85.93.8.0/24 89.144.15.0/24 185.119.16.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:f3:9f:94:a2:3e:8e:89:dd:c4:b8:92:52:11:fd:9b:ef:3e: f0:61:c5:37:5e:87:1b:3e:f5:b8:6e:a5:e9:e2:e8:a6:7e:d9: 84:84:68:04:b3:b0:2f:68:0a:08:eb:90:ba:97:8d:f6:b3:5e: 86:10:16:4a:cd:d2:39:72:f9:b8:97:3a:e2:c7:d1:fd:d2:1f: 5a:06:8a:4a:43:d8:78:cb:1d:89:c3:36:3d:8c:97:f4:6f:7a: 16:38:00:08:d7:25:db:dc:a9:96:55:e3:2f:89:2c:03:4f:46: e4:ef:f5:c5:13:e3:30:f4:b0:70:f3:b9:92:cc:0a:c1:3f:10: 89:08:09:e4:d5:80:82:aa:b6:0f:74:74:db:64:b3:49:68:74: f2:02:19:31:d2:6c:d5:05:48:89:98:e8:15:8a:a6:1f:86:8e: c4:8d:7b:b2:91:3c:a7:18:ed:14:85:7c:09:1e:68:bb:db:6c: 06:5c:7a:66:c8:40:d7:a2:9d:c8:d3:df:08:70:02:b3:83:9d: d6:95:8c:c6:ff:d3:fb:a5:92:27:59:7f:4e:43:ec:51:a8:4b: f2:07:eb:8d:2a:c1:6d:0e:06:a9:98:d1:fa:64:9c:3c:62:61: 82:79:51:1d:8b:97:bf:6c:52:21:45:28:5c:4b:85:c0:ad:6c: fc:e4:ba:9d -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZvxBqz9+5wN9fnQIjqWCNYsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTI0MTcyMTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2ZmZWE4YWZhZjVlYzY1ZWNlM2Q0MTE4MDkxMGJjMzIwNGRjNmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fJkotz7JN7Vttx1fh/w5ygD4kVg ws4rgehRkb3/HCjjUY7e1x31SV7fN5Lb8LQoTGUMMdnQw1fL26FlB03MIb2EVPXn MqheftbXG7brScrbWmTsoh0AZyt74XeURyBS4eUBzPb2a0hZ1NZz0pF62vJ1mZP1 4M/Haic6j3SjYIRj9EE2AXoG7ts/ECVoyGLadkCMt6Kf6bIbxG9nns389w4B9R6i JPXXBvZSwxbYsyI16n60XZgChd0y9Jp3MWc3LOQQfC+MvvWYmNBMqBcZPPqsfV8D eeik5Hyzq8WQt8IcEbPn6yP3xlUtEzf6Kta4KC8D5pMxhrbzshPGfJXa1QIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFLz/6or69exl7OPUEYCRC8MgTca7MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvdlBfcWl2cjE3R1hzNDlRUmdKRUx3eUJOeHJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQABVOYAwQA BeZ9AwQABecdAwQABecsAwQATVoMAwQATVoqAwQAVV0IAwQAWZAPAwQCuXcQMA0G CSqGSIb3DQEBCwUAA4IBAQAt85+Uoj6Oid3EuJJSEf2b7z7wYcU3XocbPvW4bqXp 4uimftmEhGgEs7AvaAoI65C6l432s16GEBZKzdI5cvm4lzrix9H90h9aBopKQ9h4 yx2JwzY9jJf0b3oWOAAI1yXb3KmWVeMviSwDT0bk7/XFE+Mw9LBw87mSzArBPxCJ CAnk1YCCqrYPdHTbZLNJaHTyAhkx0mzVBUiJmOgViqYfho7EjXuykTynGO0UhXwJ Hmi722wGXHpmyEDXop3I098IcAKzg53WlYzG/9P7pZInWX9OQ+xRqEvyB+uNKsFt DgapmNH6ZJw8YmGCeVEdi5e/bFIhRShcS4XArWz85Lqd -----END CERTIFICATE-----Generated at Sun Jan 25 07:09:22 2026 by rpki-client