This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/6mVE9UvtAfo4Qyo5mfFiFR5CYCE.roa File: 6mVE9UvtAfo4Qyo5mfFiFR5CYCE.roa (raw, json) Hash identifier: 7jvO+7DiigtIMsr2CKWo896+gSiIAOMeoyBPHjSRSp0= Subject key identifier: EA:65:44:F5:4B:ED:01:FA:38:43:2A:39:99:F1:62:15:1E:42:60:21 Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928 Certificate serial: 019BEB1796B8279E4577618B4B5C6DBFE71E Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/6mVE9UvtAfo4Qyo5mfFiFR5CYCE.roa Signing time: Fri 23 Jan 2026 13:42:30 +0000 ROA not before: Fri 23 Jan 2026 13:42:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5405 IP address blocks: 5.183.211.0/24 maxlen: 24 45.153.81.0/24 maxlen: 24 45.153.82.0/23 maxlen: 23 81.27.68.0/24 maxlen: 24 81.27.69.0/24 maxlen: 24 81.27.70.0/24 maxlen: 24 94.103.180.0/24 maxlen: 24 185.134.66.0/24 maxlen: 24 185.134.67.0/24 maxlen: 24 2a11:4140::/29 maxlen: 29 2a11:4140:1000::/36 maxlen: 36 2a11:4140:2000::/36 maxlen: 36 2a11:4140:3000::/36 maxlen: 36 2a11:4140:4000::/36 maxlen: 36 2a11:4140:5000::/36 maxlen: 36 2a11:4140:6000::/36 maxlen: 36 2a11:4140:7000::/36 maxlen: 36 2a11:4140:8000::/36 maxlen: 36 2a11:4140:9000::/36 maxlen: 36 2a11:4140:a000::/36 maxlen: 36 2a11:4140:b000::/36 maxlen: 36 2a11:4140:c000::/36 maxlen: 36 2a11:4140:d000::/36 maxlen: 36 2a11:4140:e000::/36 maxlen: 36 2a11:4140:f000::/36 maxlen: 36 2a11:4141::/36 maxlen: 36 2a11:4141:1000::/36 maxlen: 36 2a11:4141:3000::/36 maxlen: 36 2a11:4141:4000::/36 maxlen: 36 2a11:4141:5000::/36 maxlen: 36 2a11:4141:6000::/36 maxlen: 36 2a11:4141:7000::/36 maxlen: 36 2a11:4141:8000::/36 maxlen: 36 2a11:4141:9000::/36 maxlen: 36 2a11:4141:b000::/36 maxlen: 36 2a11:4141:c000::/36 maxlen: 36 2a11:4142::/36 maxlen: 36 2a11:4142:1000::/36 maxlen: 36 2a11:4146:8000::/36 maxlen: 36 2a11:4147:d000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:eb:17:96:b8:27:9e:45:77:61:8b:4b:5c:6d:bf:e7:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928 Validity Not Before: Jan 23 13:42:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea6544f54bed01fa38432a3999f162151e426021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:85:77:71:b8:85:01:79:d6:9b:ea:4a:99:8e: 26:49:22:e1:b2:47:93:5c:78:49:39:c6:2f:bc:b7: c8:aa:10:3e:3c:78:6d:ca:3f:43:91:90:c7:89:a5: d2:87:ce:d4:17:a0:54:f4:2d:35:c2:1c:5e:76:af: e6:86:99:73:87:18:54:db:de:0e:a3:ff:66:d2:fb: 9f:b5:3d:ad:96:6f:d7:32:da:9b:8a:99:e2:24:96: 89:fe:a4:d1:7d:81:38:7d:24:03:84:3f:20:81:ee: 09:7c:fb:ca:8c:af:6a:43:92:6a:1a:e5:02:4f:8f: 7b:ef:c8:40:fc:1d:e1:78:99:c6:a5:27:76:d0:53: 06:8e:e2:7e:a1:23:d7:45:fb:9d:5a:7f:da:90:44: 95:fb:4e:1b:d7:92:f9:92:84:9f:9a:6c:bb:d5:10: dc:de:c0:54:95:28:81:9c:22:ed:72:14:ac:c0:db: 64:eb:5a:57:41:5e:68:03:86:af:fa:5d:07:b6:6e: 7b:73:20:65:66:e2:67:f2:46:bd:4f:25:f3:79:ff: 99:f1:c5:85:3e:f1:f2:24:e8:6c:62:d4:65:1a:8b: 5a:6b:25:a6:76:18:98:0a:dc:78:e7:28:5c:30:ec: 5b:a9:40:d7:e1:65:bc:cf:d5:dc:fa:7c:28:44:27: 08:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:65:44:F5:4B:ED:01:FA:38:43:2A:39:99:F1:62:15:1E:42:60:21 X509v3 Authority Key Identifier: keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/6mVE9UvtAfo4Qyo5mfFiFR5CYCE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.211.0/24 45.153.81.0-45.153.83.255 81.27.68.0-81.27.70.255 94.103.180.0/24 185.134.66.0/23 IPv6: 2a11:4140::/29 Signature Algorithm: sha256WithRSAEncryption 94:52:25:c4:d5:40:13:a6:5c:86:38:e4:49:d3:78:b7:92:de: 68:0a:76:24:b0:15:d0:aa:41:d8:ba:64:bf:e0:b9:0b:65:28: 2c:5f:76:bb:e9:a7:ee:6f:17:f0:56:a9:88:99:2f:2b:e8:6a: 24:ba:cf:c4:c4:55:52:99:8f:2d:6a:c0:5d:fb:da:43:cb:cd: e8:c1:af:7e:78:22:75:ce:7e:9d:19:67:86:32:e8:49:15:cc: 46:c9:0c:91:c6:30:da:13:0c:48:2c:ff:ab:4e:be:ae:72:52: db:5d:16:44:05:7a:17:4a:3f:b7:3e:1e:cf:58:d8:5a:88:09: ad:66:ca:38:ca:a4:33:f8:9e:8c:7c:17:ca:7d:70:fa:a3:0d: 9d:82:55:7d:e7:15:b1:b7:36:2c:7b:dd:b8:5a:5c:3e:92:a9: f1:0c:9c:f2:13:fd:b8:0f:46:76:2d:50:fd:32:25:13:cd:fe: 0e:da:d9:16:9f:ae:5a:8a:99:a1:4c:ec:a9:10:fa:9d:54:b2: 72:24:e2:6d:6a:bd:a1:c4:4e:49:90:dd:c5:9b:36:d3:68:4e: fa:f1:de:b9:37:cd:ef:f8:d5:8d:07:3c:84:fb:b3:9a:ad:9a: 4b:57:b3:e1:61:3d:fb:19:fa:84:76:c7:33:8a:e7:c9:2c:a5: 45:58:e4:c5 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISAZvrF5a4J55Fd2GLS1xtv+ceMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YjZhNWNhMzdlYWQzMWZkMmEzNTBiMGI0MTJkNzdkOTUz MjA5MjgwHhcNMjYwMTIzMTM0MjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTY1NDRmNTRiZWQwMWZhMzg0MzJhMzk5OWYxNjIxNTFlNDI2MDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIV3cbiFAXnWm+pKmY4mSSLhskeT XHhJOcYvvLfIqhA+PHhtyj9DkZDHiaXSh87UF6BU9C01whxedq/mhplzhxhU294O o/9m0vuftT2tlm/XMtqbipniJJaJ/qTRfYE4fSQDhD8gge4JfPvKjK9qQ5JqGuUC T49778hA/B3heJnGpSd20FMGjuJ+oSPXRfudWn/akESV+04b15L5koSfmmy71RDc 3sBUlSiBnCLtchSswNtk61pXQV5oA4av+l0Htm57cyBlZuJn8ka9TyXzef+Z8cWF PvHyJOhsYtRlGotaayWmdhiYCtx45yhcMOxbqUDX4WW8z9Xc+nwoRCcI6QIDAQAB o4ICQDCCAjwwHQYDVR0OBBYEFOplRPVL7QH6OEMqOZnxYhUeQmAhMB8GA1UdIwQY MBaAFNW2pco36tMf0qNQsLQS132VMgkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUt ZDRlODgyMDgzZTRmLzEvNm1WRTlVdnRBZm80UXlvNW1mRmlGUjVDWUNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUtZDRlODgyMDgzZTRm LzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTA0BAIAATAuAwQABbfTMAwD BAAtmVEDBAItmVAwDAMEAlEbRAMEAFEbRgMEAF5ntAMEAbmGQjANBAIAAjAHAwUD KhFBQDANBgkqhkiG9w0BAQsFAAOCAQEAlFIlxNVAE6ZchjjkSdN4t5LeaAp2JLAV 0KpB2Lpkv+C5C2UoLF92u+mn7m8X8FapiJkvK+hqJLrPxMRVUpmPLWrAXfvaQ8vN 6MGvfngidc5+nRlnhjLoSRXMRskMkcYw2hMMSCz/q06+rnJS210WRAV6F0o/tz4e z1jYWogJrWbKOMqkM/iejHwXyn1w+qMNnYJVfecVsbc2LHvduFpcPpKp8Qyc8hP9 uA9Gdi1Q/TIlE83+DtrZFp+uWoqZoUzsqRD6nVSyciTibWq9ocROSZDdxZs202hO +vHeuTfN7/jVjQc8hPuzmq2aS1ez4WE9+xn6hHbHM4rnySylRVjkxQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:17 2026 by rpki-client