This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/1Ep2WtrQJTuy24jtUCeqRK7dm5U.roa File: 1Ep2WtrQJTuy24jtUCeqRK7dm5U.roa (raw, json) Hash identifier: yzw+zFpJJXSEbv2muHQZy9oJqBhVB0GP4nPD7Pqd9kI= Subject key identifier: D4:4A:76:5A:DA:D0:25:3B:B2:DB:88:ED:50:27:AA:44:AE:DD:9B:95 Certificate issuer: /CN=bda96d02a822f46253c2aee680441d5ac27c3df5 Certificate serial: 019B7FF08DEBC2F7C8EC29FA307BA12C7162 Authority key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/1Ep2WtrQJTuy24jtUCeqRK7dm5U.roa Signing time: Fri 02 Jan 2026 18:20:29 +0000 ROA not before: Fri 02 Jan 2026 18:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44574 IP address blocks: 5.153.96.0/21 maxlen: 24 5.153.192.0/19 maxlen: 24 31.12.96.0/19 maxlen: 24 31.13.0.0/21 maxlen: 24 37.252.32.0/19 maxlen: 24 91.199.78.0/24 maxlen: 24 93.121.0.0/17 maxlen: 24 95.172.224.0/19 maxlen: 24 151.249.0.0/18 maxlen: 24 159.20.32.0/19 maxlen: 24 185.196.80.0/22 maxlen: 24 212.105.160.0/19 maxlen: 24 2001:67c:2544::/48 maxlen: 48 2a00:10e8::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:8d:eb:c2:f7:c8:ec:29:fa:30:7b:a1:2c:71:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bda96d02a822f46253c2aee680441d5ac27c3df5 Validity Not Before: Jan 2 18:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d44a765adad0253bb2db88ed5027aa44aedd9b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e0:96:0e:62:a0:33:ca:6c:46:67:f4:78:cf: 90:c6:b5:97:93:e6:7b:1b:fb:7e:4c:a2:14:e8:43: 84:e1:18:d5:ce:54:6a:de:49:19:ff:60:c3:ab:f1: 26:68:f8:ed:e5:36:07:99:12:68:1b:b2:c7:68:0e: b1:3a:df:57:9b:dc:67:95:71:6a:78:fd:f4:a2:25: a6:4a:de:69:f4:58:7d:14:71:67:91:0d:c4:2b:3f: ff:33:8a:c1:a4:a7:8e:3b:ba:fb:2a:72:20:e0:c3: 19:50:fa:22:b8:85:ed:f0:e1:21:8b:40:a9:f3:d6: 8f:89:de:33:20:fa:6a:2d:6d:4e:c9:a0:63:3d:a1: cb:d9:c1:5e:9a:c6:58:08:3e:d5:b0:d9:85:9f:ef: ba:15:e2:c2:51:fd:58:3d:15:d3:69:50:8c:19:dd: f0:31:7b:c0:6a:18:17:65:28:da:93:32:c1:d4:0d: b2:18:96:06:aa:d3:39:f9:40:83:ef:4f:1b:50:8e: 4a:57:96:1f:70:2a:13:7d:e4:4d:30:f1:67:6b:30: ef:aa:96:06:c3:55:c4:38:5e:a6:6f:4e:e0:34:c7: d9:70:01:0a:d8:20:ed:47:30:08:8b:bf:6a:82:35: c4:9d:97:fe:3b:09:35:f4:e7:2d:66:64:57:10:49: 23:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4A:76:5A:DA:D0:25:3B:B2:DB:88:ED:50:27:AA:44:AE:DD:9B:95 X509v3 Authority Key Identifier: keyid:BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/1Ep2WtrQJTuy24jtUCeqRK7dm5U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.153.96.0/21 5.153.192.0/19 31.12.96.0/19 31.13.0.0/21 37.252.32.0/19 91.199.78.0/24 93.121.0.0/17 95.172.224.0/19 151.249.0.0/18 159.20.32.0/19 185.196.80.0/22 212.105.160.0/19 IPv6: 2001:67c:2544::/48 2a00:10e8::/29 Signature Algorithm: sha256WithRSAEncryption 0e:a0:41:23:be:e1:b6:55:ed:f8:9d:08:18:3c:b6:27:4e:7a: 4d:e4:ba:8b:47:6c:2b:50:5b:48:7a:92:fe:9e:46:67:2a:5c: cf:1f:00:8c:62:0c:7b:f9:a0:0d:90:21:50:d9:4d:d8:cd:49: 32:ab:ad:55:fb:27:37:8c:53:e8:37:c8:f0:0e:69:f1:1d:e6: b1:5d:c6:fb:05:7f:c1:c1:95:31:a9:49:4f:6b:72:38:53:c7: 1f:ea:3e:e6:f8:54:69:a8:44:e0:64:4c:c9:2b:c5:f4:c7:d5: 86:2e:de:f1:ea:27:18:43:fa:5c:48:b1:5e:e9:50:98:e0:3b: 5c:78:9d:6c:b3:a2:ee:f2:e7:4b:7e:b5:b6:56:8f:f5:32:32: fb:8a:58:88:37:5b:25:bf:7d:e5:5a:57:bd:52:bf:7d:eb:2d: 1e:34:f7:1f:ea:70:51:38:ed:3e:52:45:dc:92:a4:1c:62:44: e9:32:e7:6a:43:b9:18:8c:f5:95:ae:35:75:c2:e6:eb:ac:73: e0:99:98:ad:9c:d7:5c:c4:e3:88:18:7e:3a:9a:73:51:bb:2d: 9c:1d:78:a6:51:15:1f:00:75:71:46:15:70:6c:68:40:d4:b6: 22:f6:ba:f7:69:c4:58:49:3e:90:50:0a:e8:2f:63:0a:af:42: 40:9c:b7:40 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgISAZt/8I3rwvfI7Cn6MHuhLHFiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYTk2ZDAyYTgyMmY0NjI1M2MyYWVlNjgwNDQxZDVhYzI3 YzNkZjUwHhcNMjYwMTAyMTgyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDRhNzY1YWRhZDAyNTNiYjJkYjg4ZWQ1MDI3YWE0NGFlZGQ5Yjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOCWDmKgM8psRmf0eM+QxrWXk+Z7 G/t+TKIU6EOE4RjVzlRq3kkZ/2DDq/EmaPjt5TYHmRJoG7LHaA6xOt9Xm9xnlXFq eP30oiWmSt5p9Fh9FHFnkQ3EKz//M4rBpKeOO7r7KnIg4MMZUPoiuIXt8OEhi0Cp 89aPid4zIPpqLW1OyaBjPaHL2cFemsZYCD7VsNmFn++6FeLCUf1YPRXTaVCMGd3w MXvAahgXZSjakzLB1A2yGJYGqtM5+UCD708bUI5KV5YfcCoTfeRNMPFnazDvqpYG w1XEOF6mb07gNMfZcAEK2CDtRzAIi79qgjXEnZf+Owk19OctZmRXEEkjTQIDAQAB o4ICYzCCAl8wHQYDVR0OBBYEFNRKdlra0CU7stuI7VAnqkSu3ZuVMB8GA1UdIwQY MBaAFL2pbQKoIvRiU8Ku5oBEHVrCfD31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmFsdEFxZ2k5R0pUd3E3bWdFUWRXc0o4UGZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hMjdiMzktODAxMS00MTQyLTg2YzIt Y2Y4M2Q2ZTQwNTU4LzEvMUVwMld0clFKVHV5MjRqdFVDZXFSSzdkbTVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9hMjdiMzktODAxMS00MTQyLTg2YzItY2Y4M2Q2ZTQwNTU4 LzEvdmFsdEFxZ2k5R0pUd3E3bWdFUWRXc0o4UGZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBOBAIAATBIAwQDBZlgAwQF BZnAAwQFHwxgAwQDHw0AAwQFJfwgAwQAW8dOAwQHXXkAAwQFX6zgAwQGl/kAAwQF nxQgAwQCucRQAwQF1GmgMBYEAgACMBADBwAgAQZ8JUQDBQMqABDoMA0GCSqGSIb3 DQEBCwUAA4IBAQAOoEEjvuG2Ve34nQgYPLYnTnpN5LqLR2wrUFtIepL+nkZnKlzP HwCMYgx7+aANkCFQ2U3YzUkyq61V+yc3jFPoN8jwDmnxHeaxXcb7BX/BwZUxqUlP a3I4U8cf6j7m+FRpqETgZEzJK8X0x9WGLt7x6icYQ/pcSLFe6VCY4DtceJ1ss6Lu 8udLfrW2Vo/1MjL7iliIN1slv33lWle9Ur996y0eNPcf6nBROO0+UkXckqQcYkTp MudqQ7kYjPWVrjV1wubrrHPgmZitnNdcxOOIGH46mnNRuy2cHXimURUfAHVxRhVw bGhA1LYi9rr3acRYST6QUAroL2MKr0JAnLdA -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:07 2026 by rpki-client