This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/B_S5icIbEZu3NRi7pO3M0FoxLBY.roa File: B_S5icIbEZu3NRi7pO3M0FoxLBY.roa (raw, json) Hash identifier: NpXzXVIDrJc5PoL2K8nkZP6JJq6luR8bBGM3/nlrQ3I= Subject key identifier: 07:F4:B9:89:C2:1B:11:9B:B7:35:18:BB:A4:ED:CC:D0:5A:31:2C:16 Certificate issuer: /CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a Certificate serial: 019B7B35C2A52DEB5E26A5BC4A43179F6A88 Authority key identifier: CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/B_S5icIbEZu3NRi7pO3M0FoxLBY.roa Signing time: Thu 01 Jan 2026 20:17:59 +0000 ROA not before: Thu 01 Jan 2026 20:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48500 IP address blocks: 37.99.224.0/20 maxlen: 20 94.230.64.0/21 maxlen: 21 109.104.224.0/21 maxlen: 21 134.90.224.0/20 maxlen: 20 185.46.100.0/22 maxlen: 22 217.196.128.0/21 maxlen: 21 217.196.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c2:a5:2d:eb:5e:26:a5:bc:4a:43:17:9f:6a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a Validity Not Before: Jan 1 20:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07f4b989c21b119bb73518bba4edccd05a312c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7d:73:ae:65:e5:99:ab:a5:92:f1:79:7d:a9: b3:64:06:1d:d4:c0:c4:17:63:02:8f:9d:5f:ef:b5: bd:1f:6d:cd:6c:cd:49:a4:11:29:22:88:77:d7:53: c7:96:3b:4e:47:7c:23:dd:b3:d2:2b:64:d6:a8:64: 7f:2b:a6:0b:c9:fe:6b:bf:4e:f5:62:a1:3d:a1:5f: 61:fe:c2:00:6e:31:a7:21:95:0d:7c:aa:5b:77:fd: c8:55:f5:ce:01:2a:11:7b:d2:70:f3:d5:c7:29:33: d2:c9:5a:4a:4e:af:b6:6f:09:9a:69:56:8f:ad:f9: ac:cf:09:c7:81:90:fb:4e:48:a7:51:6c:f5:61:4c: e6:41:bb:a8:4d:ad:2d:2a:a3:f4:4c:c0:76:5c:e1: 92:ac:22:39:74:f6:b0:0e:19:97:5b:bf:21:23:35: 14:b9:c0:b8:33:c7:04:a3:38:74:2c:04:b0:95:ca: 27:c8:07:4c:d9:c2:22:9b:24:ba:4f:82:ef:e6:0b: 28:c9:ed:a1:02:ba:4b:54:d4:04:c0:b8:67:01:79: 1e:a7:b8:c3:8f:06:83:c2:fb:1c:f4:6d:06:6e:0e: 99:92:64:fe:d7:4f:45:63:d7:8e:fa:b5:8c:2e:aa: 14:3c:68:3b:23:2a:34:8b:cc:cc:e1:e4:b9:3f:3d: 03:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F4:B9:89:C2:1B:11:9B:B7:35:18:BB:A4:ED:CC:D0:5A:31:2C:16 X509v3 Authority Key Identifier: keyid:CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/B_S5icIbEZu3NRi7pO3M0FoxLBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.99.224.0/20 94.230.64.0/21 109.104.224.0/21 134.90.224.0/20 185.46.100.0/22 217.196.128.0/21 217.196.140.0/23 Signature Algorithm: sha256WithRSAEncryption 02:64:03:e5:20:8c:dc:8d:28:d3:91:88:39:a8:ab:e3:02:73: b1:85:e4:91:aa:ea:99:7a:77:a7:86:4c:ea:17:93:f3:d2:bb: cf:07:e7:79:64:62:56:c5:de:bf:75:09:a9:ee:cc:04:5b:ff: b9:ca:7b:e5:82:54:a2:7c:e0:da:f3:34:92:40:d3:6f:59:87: 52:f6:70:81:19:96:fe:cb:6c:f5:fe:8a:34:5b:ea:3c:17:2d: 3b:7a:13:78:90:5d:f0:ce:ce:96:e8:25:80:d4:f0:64:ce:c4: d4:d9:69:0f:03:fa:13:df:48:a1:65:f0:49:66:93:11:b6:35: c2:80:ee:00:8f:33:87:49:89:09:f8:e1:58:f7:06:a1:be:b8: bd:fa:14:b3:61:e1:58:ea:cc:ac:b0:4f:c1:e3:5d:fe:17:5e: af:20:12:79:15:47:c5:11:c2:2c:52:64:65:7a:e1:54:f9:ec: 4e:d8:2a:57:cf:a2:01:4b:35:24:d6:11:12:95:7c:d9:05:b3: 9b:e8:f2:9d:bb:a0:ce:e7:54:68:54:06:71:28:e7:b8:e7:e1: e8:8b:9c:85:0c:a8:38:09:57:2f:42:a8:18:f1:a6:5c:2c:82: e1:2f:ca:14:ab:35:99:99:a9:79:03:84:65:63:be:fa:23:ee: 51:36:fb:a7 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt7NcKlLeteJqW8SkMXn2qIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNjI2YmJiN2I2OWVlYzlmNjc5MGIwMzcwNTU0NWI4OTJm YTJlOGEwHhcNMjYwMTAxMjAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2Y0Yjk4OWMyMWIxMTliYjczNTE4YmJhNGVkY2NkMDVhMzEyYzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX1zrmXlmaulkvF5famzZAYd1MDE F2MCj51f77W9H23NbM1JpBEpIoh311PHljtOR3wj3bPSK2TWqGR/K6YLyf5rv071 YqE9oV9h/sIAbjGnIZUNfKpbd/3IVfXOASoRe9Jw89XHKTPSyVpKTq+2bwmaaVaP rfmszwnHgZD7TkinUWz1YUzmQbuoTa0tKqP0TMB2XOGSrCI5dPawDhmXW78hIzUU ucC4M8cEozh0LASwlconyAdM2cIimyS6T4Lv5gsoye2hArpLVNQEwLhnAXkep7jD jwaDwvsc9G0Gbg6ZkmT+109FY9eO+rWMLqoUPGg7Iyo0i8zM4eS5Pz0DAQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFAf0uYnCGxGbtzUYu6TtzNBaMSwWMB8GA1UdIwQY MBaAFM1ia7t7ae7J9nkLA3BVRbiS+i6KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveldKcnUzdHA3c24yZVFzRGNGVkZ1Skw2TG9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yYjM3ZGYtOGZmZS00MWU1LWFjMDct YzBmODlhZDM2YmNhLzEvQl9TNWljSWJFWnUzTlJpN3BPM00wRm94TEJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yYjM3ZGYtOGZmZS00MWU1LWFjMDctYzBmODlhZDM2YmNh LzEveldKcnUzdHA3c24yZVFzRGNGVkZ1Skw2TG9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQEJWPgAwQD XuZAAwQDbWjgAwQEhlrgAwQCuS5kAwQD2cSAAwQB2cSMMA0GCSqGSIb3DQEBCwUA A4IBAQACZAPlIIzcjSjTkYg5qKvjAnOxheSRquqZenenhkzqF5Pz0rvPB+d5ZGJW xd6/dQmp7swEW/+5ynvlglSifODa8zSSQNNvWYdS9nCBGZb+y2z1/oo0W+o8Fy07 ehN4kF3wzs6W6CWA1PBkzsTU2WkPA/oT30ihZfBJZpMRtjXCgO4AjzOHSYkJ+OFY 9wahvri9+hSzYeFY6syssE/B413+F16vIBJ5FUfFEcIsUmRleuFU+exO2CpXz6IB SzUk1hESlXzZBbOb6PKdu6DO51RoVAZxKOe45+Hoi5yFDKg4CVcvQqgY8aZcLILh L8oUqzWZmal5A4RlY776I+5RNvun -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:45 2026 by rpki-client