This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/R5kKLGujwVyN11kdJlzsqOL8oRw.roa File: R5kKLGujwVyN11kdJlzsqOL8oRw.roa (raw, json) Hash identifier: cDKxoErZto4JESswwKsE0Hav5uBoVZS9w/0qja84b7A= Subject key identifier: 47:99:0A:2C:6B:A3:C1:5C:8D:D7:59:1D:26:5C:EC:A8:E2:FC:A1:1C Certificate issuer: /CN=1a3e970ed62771343a096ffb2efc26abb7ed68af Certificate serial: 019B77587FD51CA8F5199DE939799198D178 Authority key identifier: 1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/R5kKLGujwVyN11kdJlzsqOL8oRw.roa Signing time: Thu 01 Jan 2026 02:17:27 +0000 ROA not before: Thu 01 Jan 2026 02:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39771 IP address blocks: 194.4.72.0/21 maxlen: 21 194.4.80.0/20 maxlen: 20 194.4.96.0/22 maxlen: 22 195.42.0.0/19 maxlen: 19 195.42.32.0/20 maxlen: 20 195.42.48.0/21 maxlen: 21 195.42.56.0/22 maxlen: 22 195.42.60.0/23 maxlen: 23 195.42.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:7f:d5:1c:a8:f5:19:9d:e9:39:79:91:98:d1:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a3e970ed62771343a096ffb2efc26abb7ed68af Validity Not Before: Jan 1 02:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47990a2c6ba3c15c8dd7591d265ceca8e2fca11c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ae:f6:94:b7:63:42:14:76:f2:b4:cd:36:81: ee:e8:f4:c4:22:b5:6f:a8:57:5a:fd:f1:21:1b:1d: 00:e5:f5:eb:e6:db:c9:db:70:3f:ef:78:fb:a2:19: 48:3f:88:5c:58:ca:2d:63:f2:0f:3d:67:77:08:2a: 4b:06:fe:f7:5a:9c:60:1f:bd:da:e3:ad:c8:50:09: 48:e2:b0:7a:de:b6:09:fa:cb:65:ee:c9:b8:43:cf: 36:da:b6:16:a8:35:08:61:cc:ac:7b:4f:d1:5e:7e: 27:68:7b:7c:cf:c5:5a:fd:0e:a8:2e:d7:5a:de:b4: 59:68:15:39:af:a9:2a:bb:ba:1d:b5:42:7a:cb:4a: 65:0a:c5:e1:78:1a:de:30:04:2e:38:69:86:8b:01: a3:c6:18:da:67:e3:b8:67:5e:a9:8d:05:8e:df:5d: 08:c8:27:a3:f8:f6:dc:c7:44:fc:36:81:e1:12:0a: 9b:df:12:b5:84:87:68:f3:32:68:97:c1:2c:9f:32: e4:cb:ce:29:63:4e:49:93:64:72:77:14:a5:ec:19: e0:59:f7:39:04:f9:33:45:9a:5e:fc:a9:c7:4b:ea: 08:14:2c:7a:16:1b:af:90:e1:88:74:fc:60:50:92: 6e:2f:8d:51:27:98:bb:bf:19:ae:61:07:16:94:b3: 0e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:99:0A:2C:6B:A3:C1:5C:8D:D7:59:1D:26:5C:EC:A8:E2:FC:A1:1C X509v3 Authority Key Identifier: keyid:1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/R5kKLGujwVyN11kdJlzsqOL8oRw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.4.72.0-194.4.99.255 195.42.0.0/18 Signature Algorithm: sha256WithRSAEncryption 8d:df:40:d5:a4:7a:7b:ce:36:20:6a:4a:b4:f1:42:0e:a0:ce: f3:b9:5b:0e:ca:87:8d:4f:99:3d:c1:ee:d3:a4:04:cf:49:e3: e5:6c:35:7a:fe:7c:c2:90:fb:55:f6:9d:74:95:c4:9e:15:d8: 41:6a:40:f5:07:3f:a3:83:ec:93:ab:ec:79:e3:08:f9:a5:60: d1:44:72:a8:3b:e5:55:7d:67:c6:81:df:dd:3b:30:49:03:b0: b7:7b:a0:2c:3d:0c:73:d7:5d:28:0f:af:6c:50:23:fe:8c:7b: ad:02:0f:7f:02:0e:bc:41:b1:2a:19:b4:f4:a0:f9:2a:95:10: 6c:fa:75:59:ef:66:e1:e5:5a:fa:e1:ef:ef:17:0a:a1:7f:f0: 60:b8:ed:9e:7c:89:4f:05:14:5f:10:50:a8:fb:1f:7a:c7:cc: 23:d8:d4:0e:d3:20:0c:0d:46:70:76:e0:b6:fb:35:e3:79:fa: ee:c0:23:03:aa:c4:eb:75:82:a7:f1:90:65:9d:ff:18:35:b1: b6:d9:d6:c6:5c:12:7d:76:d2:b6:af:3a:02:f5:46:2a:12:f7: 8f:9b:21:31:87:0b:b8:99:6d:c4:1f:77:59:b7:f2:cf:f1:1b: 69:43:70:f9:0b:e4:ca:9a:15:65:2b:59:c3:f2:42:b0:7b:85: 90:e7:13:8e -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt3WH/VHKj1GZ3pOXmRmNF4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhM2U5NzBlZDYyNzcxMzQzYTA5NmZmYjJlZmMyNmFiYjdl ZDY4YWYwHhcNMjYwMTAxMDIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Nzk5MGEyYzZiYTNjMTVjOGRkNzU5MWQyNjVjZWNhOGUyZmNhMTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn672lLdjQhR28rTNNoHu6PTEIrVv qFda/fEhGx0A5fXr5tvJ23A/73j7ohlIP4hcWMotY/IPPWd3CCpLBv73WpxgH73a 463IUAlI4rB63rYJ+stl7sm4Q8822rYWqDUIYcyse0/RXn4naHt8z8Va/Q6oLtda 3rRZaBU5r6kqu7odtUJ6y0plCsXheBreMAQuOGmGiwGjxhjaZ+O4Z16pjQWO310I yCej+Pbcx0T8NoHhEgqb3xK1hIdo8zJol8EsnzLky84pY05Jk2RydxSl7BngWfc5 BPkzRZpe/KnHS+oIFCx6FhuvkOGIdPxgUJJuL41RJ5i7vxmuYQcWlLMOvwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFEeZCixro8FcjddZHSZc7Kji/KEcMB8GA1UdIwQY MBaAFBo+lw7WJ3E0Oglv+y78Jqu37WivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZjcwOTItZTNhNC00NzBiLTg1YTUt ZDQ4OTA5NGM2NjA0LzEvUjVrS0xHdWp3VnlOMTFrZEpsenNxT0w4b1J3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8wZjcwOTItZTNhNC00NzBiLTg1YTUtZDQ4OTA5NGM2NjA0 LzEvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAPCBEgD BALCBGADBAbDKgAwDQYJKoZIhvcNAQELBQADggEBAI3fQNWkenvONiBqSrTxQg6g zvO5Ww7Kh41PmT3B7tOkBM9J4+VsNXr+fMKQ+1X2nXSVxJ4V2EFqQPUHP6OD7JOr 7HnjCPmlYNFEcqg75VV9Z8aB3907MEkDsLd7oCw9DHPXXSgPr2xQI/6Me60CD38C DrxBsSoZtPSg+SqVEGz6dVnvZuHlWvrh7+8XCqF/8GC47Z58iU8FFF8QUKj7H3rH zCPY1A7TIAwNRnB24Lb7NeN5+u7AIwOqxOt1gqfxkGWd/xg1sbbZ1sZcEn120rav OgL1RioS94+bITGHC7iZbcQfd1m38s/xG2lDcPkL5MqaFWUrWcPyQrB7hZDnE44= -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:35 2026 by rpki-client