This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/1-r5h5M4z_etRHKub_p7uYkuua2k.roa File: 1-r5h5M4z_etRHKub_p7uYkuua2k.roa (raw, json) Hash identifier: 7956C8JjzEQ12pRs9Y4qeyvvm8jRcbkAr628jmTx/bQ= Subject key identifier: FA:BE:61:E4:CE:33:FD:EB:51:1C:AB:9B:FE:9E:EE:62:4B:AE:6B:69 Certificate issuer: /CN=52056867e4d2885e99b549ed6fb786330adf8f44 Certificate serial: 019B7D5CBB933AC429F7AEB99F19E888CC5D Authority key identifier: 52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/1-r5h5M4z_etRHKub_p7uYkuua2k.roa Signing time: Fri 02 Jan 2026 06:19:47 +0000 ROA not before: Fri 02 Jan 2026 06:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12990 IP address blocks: 37.26.160.0/21 maxlen: 21 141.105.16.0/21 maxlen: 21 185.104.64.0/24 maxlen: 24 195.88.186.0/24 maxlen: 24 195.88.187.0/24 maxlen: 24 213.180.128.0/21 maxlen: 21 213.180.136.0/24 maxlen: 24 213.180.137.0/24 maxlen: 24 213.180.138.0/23 maxlen: 23 213.180.140.0/24 maxlen: 24 213.180.141.0/24 maxlen: 24 213.180.142.0/23 maxlen: 23 213.180.144.0/23 maxlen: 23 213.180.146.0/23 maxlen: 23 213.180.148.0/23 maxlen: 23 213.180.150.0/24 maxlen: 24 213.180.151.0/24 maxlen: 24 213.180.152.0/24 maxlen: 24 213.180.153.0/24 maxlen: 24 213.180.154.0/24 maxlen: 24 2a02:c10::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:bb:93:3a:c4:29:f7:ae:b9:9f:19:e8:88:cc:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52056867e4d2885e99b549ed6fb786330adf8f44 Validity Not Before: Jan 2 06:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fabe61e4ce33fdeb511cab9bfe9eee624bae6b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:19:a9:05:39:67:8b:9d:46:8c:cd:87:64:4c: e1:14:4c:72:df:77:4e:8b:f1:95:59:c3:ef:30:af: 3b:3b:c2:71:4e:6d:2b:f5:69:63:52:a7:43:7c:41: 54:e8:43:5e:bc:d5:fd:c8:6c:2b:2f:8f:1e:0c:dc: 0d:16:46:91:fc:87:9a:c4:20:34:b0:a3:41:f3:4c: 99:46:8b:91:47:c1:85:0f:83:6f:7b:b1:81:6b:ab: 20:5f:db:59:16:bc:9d:4b:72:ab:15:e8:9e:c3:09: 29:d0:df:cc:3e:ef:cc:f8:9a:f1:f4:dd:c8:e5:8d: be:8b:86:9a:79:06:ad:3e:02:ee:1e:0b:ac:ac:c1: e8:6d:4d:62:ce:7e:a7:68:7d:97:a4:ed:7c:53:6d: 72:fc:10:16:e8:92:a0:16:a9:b9:46:ae:0d:d3:35: c1:90:d8:e7:d4:58:fa:54:b3:ad:2f:ef:c5:8e:94: 4a:96:89:a1:e8:15:f1:ff:b5:25:fe:3d:51:34:ae: a7:25:2a:29:a3:ec:9b:1b:d4:24:f9:b1:39:46:4e: 5a:94:c8:b2:27:89:13:e4:46:1d:15:80:dd:10:1c: 24:56:e2:18:10:1c:51:41:b0:14:0b:9a:62:88:f0: 7b:69:ba:7b:0a:86:49:9c:20:08:2a:de:32:eb:33: ff:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BE:61:E4:CE:33:FD:EB:51:1C:AB:9B:FE:9E:EE:62:4B:AE:6B:69 X509v3 Authority Key Identifier: keyid:52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/1-r5h5M4z_etRHKub_p7uYkuua2k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.26.160.0/21 141.105.16.0/21 185.104.64.0/24 195.88.186.0/23 213.180.128.0-213.180.154.255 IPv6: 2a02:c10::/32 Signature Algorithm: sha256WithRSAEncryption 2e:73:8a:9b:9c:36:73:e5:12:41:06:bb:1c:aa:ae:cb:9a:ac: 3a:fe:64:de:46:49:bb:cc:a1:42:45:53:bd:6f:96:c0:7e:3e: 01:99:b7:7c:0b:f3:f4:a7:58:ba:af:46:f1:11:46:52:b8:5e: 00:c5:ef:13:54:42:b6:cd:ab:b2:60:09:5b:24:d0:05:bd:a4: 9f:e1:c2:8a:70:f7:21:3b:e3:4a:07:0b:1d:99:93:55:60:ee: 76:59:1b:f0:0a:d6:9a:4f:06:21:4b:b8:c8:16:c4:1a:0a:0f: be:96:06:10:d0:9b:5f:88:a5:be:4e:64:b6:62:4c:cc:47:e3: 61:61:83:c0:dd:4c:ea:b7:a6:38:5a:48:e8:f0:9b:86:6b:62: 92:84:70:0c:97:97:8e:58:78:54:b0:ce:0f:9f:99:2f:02:42: c7:44:f5:79:5f:d0:97:d3:1c:f0:9a:81:0b:0c:91:e3:ae:39: 7a:88:0b:db:73:7e:aa:bf:92:26:de:45:fa:05:2f:1b:60:2e: df:a0:79:3a:9c:d5:98:ce:70:ef:4d:42:37:a5:67:89:d5:ab: 9c:6d:96:2a:b7:ff:d3:a8:6e:81:1d:46:92:76:8a:f6:51:ab: 58:0b:df:a2:29:1d:7e:c6:f0:8a:b3:5a:e4:3d:15:c2:9a:c5: d3:a9:27:89 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt9XLuTOsQp9665nxnoiMxdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMDU2ODY3ZTRkMjg4NWU5OWI1NDllZDZmYjc4NjMzMGFk ZjhmNDQwHhcNMjYwMTAyMDYxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWJlNjFlNGNlMzNmZGViNTExY2FiOWJmZTllZWU2MjRiYWU2YjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthmpBTlni51GjM2HZEzhFExy33dO i/GVWcPvMK87O8JxTm0r9WljUqdDfEFU6ENevNX9yGwrL48eDNwNFkaR/IeaxCA0 sKNB80yZRouRR8GFD4Nve7GBa6sgX9tZFrydS3KrFeiewwkp0N/MPu/M+Jrx9N3I 5Y2+i4aaeQatPgLuHgusrMHobU1izn6naH2XpO18U21y/BAW6JKgFqm5Rq4N0zXB kNjn1Fj6VLOtL+/FjpRKlomh6BXx/7Ul/j1RNK6nJSopo+ybG9Qk+bE5Rk5alMiy J4kT5EYdFYDdEBwkVuIYEBxRQbAUC5piiPB7abp7CoZJnCAIKt4y6zP/zwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFPq+YeTOM/3rURyrm/6e7mJLrmtpMB8GA1UdIwQY MBaAFFIFaGfk0ohembVJ7W+3hjMK349EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWdWb1otVFNpRjZadFVudGI3ZUdNd3JmajBRLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9iMjdkNDUtMDhjYy00N2ExLWFjNWEt NWY0ODM2MDgzYTMwLzEvMS1yNWg1TTR6X2V0UkhLdWJfcDd1WWt1dWEyay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjMvYjI3ZDQ1LTA4Y2MtNDdhMS1hYzVhLTVmNDgzNjA4M2Ez MC8xL1VnVm9aLVRTaUY2WnRVbnRiN2VHTXdyZmowUS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBOBggrBgEFBQcBBwEB/wQ/MD0wLAQCAAEwJgMEAyUaoAME A41pEAMEALloQAMEAcNYujAMAwQH1bSAAwQA1bSaMA0EAgACMAcDBQAqAgwQMA0G CSqGSIb3DQEBCwUAA4IBAQAuc4qbnDZz5RJBBrscqq7Lmqw6/mTeRkm7zKFCRVO9 b5bAfj4Bmbd8C/P0p1i6r0bxEUZSuF4Axe8TVEK2zauyYAlbJNAFvaSf4cKKcPch O+NKBwsdmZNVYO52WRvwCtaaTwYhS7jIFsQaCg++lgYQ0JtfiKW+TmS2YkzMR+Nh YYPA3Uzqt6Y4Wkjo8JuGa2KShHAMl5eOWHhUsM4Pn5kvAkLHRPV5X9CX0xzwmoEL DJHjrjl6iAvbc36qv5Im3kX6BS8bYC7foHk6nNWYznDvTUI3pWeJ1aucbZYqt//T qG6BHUaSdor2UatYC9+iKR1+xvCKs1rkPRXCmsXTqSeJ -----END CERTIFICATE-----Generated at Sun Jan 25 11:13:08 2026 by rpki-client