This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/X7PjzMppd_dLozdN0D11F0z07vQ.roa File: X7PjzMppd_dLozdN0D11F0z07vQ.roa (raw, json) Hash identifier: psScHcjJlgs5hgoPO3e9N+tN+WLH5h3LFD7hHGpCwcE= Subject key identifier: 5F:B3:E3:CC:CA:69:77:F7:4B:A3:37:4D:D0:3D:75:17:4C:F4:EE:F4 Certificate issuer: /CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7 Certificate serial: 019B7E387DC5FBBA41249388F5EFB58E456A Authority key identifier: 01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/X7PjzMppd_dLozdN0D11F0z07vQ.roa Signing time: Fri 02 Jan 2026 10:19:49 +0000 ROA not before: Fri 02 Jan 2026 10:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42568 IP address blocks: 31.14.222.0/23 maxlen: 23 89.33.10.0/24 maxlen: 24 89.33.11.0/24 maxlen: 24 89.33.202.0/23 maxlen: 23 89.36.152.0/23 maxlen: 23 89.41.174.0/23 maxlen: 23 89.42.176.0/23 maxlen: 23 89.42.234.0/24 maxlen: 24 89.42.235.0/24 maxlen: 24 89.45.64.0/23 maxlen: 23 89.45.160.0/23 maxlen: 23 93.114.140.0/24 maxlen: 24 188.213.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:7d:c5:fb:ba:41:24:93:88:f5:ef:b5:8e:45:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7 Validity Not Before: Jan 2 10:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fb3e3ccca6977f74ba3374dd03d75174cf4eef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3b:e4:a1:27:0b:a5:c2:e8:57:00:c3:db:15: f7:77:2c:fb:e3:a5:7e:b1:96:33:de:4e:65:8b:72: 63:00:da:3c:ea:1e:74:93:4d:2c:ba:bd:42:0e:15: 96:e1:a7:7e:b9:e1:b2:bc:16:0d:df:f3:03:0d:5c: 55:d1:00:49:13:c4:92:ae:50:3e:c9:11:2b:54:45: ec:5b:b4:cc:82:44:bb:10:e8:a8:f4:d4:c3:d8:f8: 38:d2:ba:16:9f:7d:a7:81:90:2c:14:dc:d0:e6:f0: 85:3e:7e:33:a1:3c:95:1d:ea:d2:6e:e1:c8:3c:fc: e6:93:e7:17:f4:d2:52:dd:56:22:d9:29:c1:dc:76: 62:c0:cf:a3:48:37:52:46:56:cb:2e:53:49:74:2b: 2a:7e:44:a0:20:4d:d6:da:4e:4a:90:4a:6c:02:bc: 96:d3:e9:19:ce:66:b1:1b:96:bd:04:0b:57:96:2f: 73:ba:4c:90:f0:9b:74:69:6b:01:42:02:69:b7:d7: dc:df:18:4b:4b:59:31:d3:49:ae:79:17:b4:6b:39: c9:d5:4f:c1:11:4f:2b:77:9f:0c:8b:d8:60:bf:1d: 5e:b4:3e:fa:fa:73:6d:b1:35:3d:48:85:2c:f7:44: 9c:4b:83:cc:d9:0a:e4:7c:58:83:26:9a:a0:d2:4c: 38:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B3:E3:CC:CA:69:77:F7:4B:A3:37:4D:D0:3D:75:17:4C:F4:EE:F4 X509v3 Authority Key Identifier: keyid:01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/X7PjzMppd_dLozdN0D11F0z07vQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.222.0/23 89.33.10.0/23 89.33.202.0/23 89.36.152.0/23 89.41.174.0/23 89.42.176.0/23 89.42.234.0/23 89.45.64.0/23 89.45.160.0/23 93.114.140.0/24 188.213.200.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:19:d4:46:72:67:dc:d7:4a:01:04:3f:e3:cf:a5:5f:44:d5: bf:98:57:78:7a:1d:4d:77:22:a5:61:01:27:39:c6:46:4e:bf: 21:9c:3a:6c:9b:ac:ac:5b:66:35:e7:bb:11:fd:52:35:a4:3f: 5e:c8:5a:26:87:f2:34:0e:0e:8a:a5:7a:bb:74:9a:ef:9e:aa: 17:67:0f:de:0a:18:73:65:f4:82:62:ef:4a:a8:7d:19:a3:60: 8f:d8:f9:67:85:57:72:28:54:8a:26:48:55:f1:70:9f:62:c3: 57:9a:e2:57:ba:ac:6f:f5:e0:ff:bb:bb:30:6f:36:c5:45:dd: aa:52:9a:b7:68:aa:49:04:77:00:a3:55:25:a0:3a:5f:5c:c9: 8e:23:33:a4:3c:e6:7c:bf:d1:49:16:b0:25:31:df:9c:a4:f9: 94:00:5a:96:0e:48:d9:c5:42:82:fc:ba:cc:42:a2:31:bb:ea: 7e:bf:26:5d:30:4a:f6:b9:1b:2b:9b:8d:00:28:ad:b2:b5:46: 41:de:9d:21:55:b3:bc:92:03:7f:06:78:cf:43:43:77:9d:b9: ed:8e:98:33:a7:6c:5c:1c:29:37:07:22:53:91:a4:68:04:e8: 6c:13:ce:d1:2d:a6:8f:8b:f9:0d:fe:b7:e1:24:3a:f9:db:aa: 62:68:b6:e2 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt+OH3F+7pBJJOI9e+1jkVqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNDZiNDI5ZjhjNDk2MTFmY2ZlYTFlZmExYTUxYjljMGVk ZGI2ZTcwHhcNMjYwMTAyMTAxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmIzZTNjY2NhNjk3N2Y3NGJhMzM3NGRkMDNkNzUxNzRjZjRlZWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTvkoScLpcLoVwDD2xX3dyz746V+ sZYz3k5li3JjANo86h50k00sur1CDhWW4ad+ueGyvBYN3/MDDVxV0QBJE8SSrlA+ yRErVEXsW7TMgkS7EOio9NTD2Pg40roWn32ngZAsFNzQ5vCFPn4zoTyVHerSbuHI PPzmk+cX9NJS3VYi2SnB3HZiwM+jSDdSRlbLLlNJdCsqfkSgIE3W2k5KkEpsAryW 0+kZzmaxG5a9BAtXli9zukyQ8Jt0aWsBQgJpt9fc3xhLS1kx00mueRe0aznJ1U/B EU8rd58Mi9hgvx1etD76+nNtsTU9SIUs90ScS4PM2QrkfFiDJpqg0kw4yQIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFF+z48zKaXf3S6M3TdA9dRdM9O70MB8GA1UdIwQY MBaAFAFGtCn4xJYR/P6h76GlG5wO3bbnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVVhMEtmakVsaEg4X3FIdm9hVWJuQTdkdHVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9lNWUzNzktNjU2ZC00NjIyLWE3YmMt ZWEyNmU3NDZhMGFkLzEvWDdQanpNcHBkX2RMb3pkTjBEMTFGMHowN3ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9lNWUzNzktNjU2ZC00NjIyLWE3YmMtZWEyNmU3NDZhMGFk LzEvQVVhMEtmakVsaEg4X3FIdm9hVWJuQTdkdHVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQBHw7eAwQB WSEKAwQBWSHKAwQBWSSYAwQBWSmuAwQBWSqwAwQBWSrqAwQBWS1AAwQBWS2gAwQA XXKMAwQBvNXIMA0GCSqGSIb3DQEBCwUAA4IBAQB/GdRGcmfc10oBBD/jz6VfRNW/ mFd4eh1NdyKlYQEnOcZGTr8hnDpsm6ysW2Y157sR/VI1pD9eyFomh/I0Dg6KpXq7 dJrvnqoXZw/eChhzZfSCYu9KqH0Zo2CP2PlnhVdyKFSKJkhV8XCfYsNXmuJXuqxv 9eD/u7swbzbFRd2qUpq3aKpJBHcAo1UloDpfXMmOIzOkPOZ8v9FJFrAlMd+cpPmU AFqWDkjZxUKC/LrMQqIxu+p+vyZdMEr2uRsrm40AKK2ytUZB3p0hVbO8kgN/BnjP Q0N3nbntjpgzp2xcHCk3ByJTkaRoBOhsE87RLaaPi/kN/rfhJDr526piaLbi -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:09 2026 by rpki-client