This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/R5tQPzZZIZkEHxABLHLrU7SFsrM.roa File: R5tQPzZZIZkEHxABLHLrU7SFsrM.roa (raw, json) Hash identifier: lKQiJli3qPxi+zmIfwUnOVyI/PWON56dIb4pJxeLxAM= Subject key identifier: 47:9B:50:3F:36:59:21:99:04:1F:10:01:2C:72:EB:53:B4:85:B2:B3 Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 019B7C803E66009F06D2FFE282A8A65AF9B2 Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/R5tQPzZZIZkEHxABLHLrU7SFsrM.roa Signing time: Fri 02 Jan 2026 02:18:57 +0000 ROA not before: Fri 02 Jan 2026 02:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50606 IP address blocks: 109.232.28.0/22 maxlen: 22 185.56.172.0/22 maxlen: 22 185.215.72.0/23 maxlen: 23 193.42.154.0/24 maxlen: 24 194.126.233.0/24 maxlen: 24 194.126.245.0/24 maxlen: 24 194.126.251.0/24 maxlen: 24 194.127.97.0/24 maxlen: 24 213.92.128.0/19 maxlen: 32 213.156.100.0/22 maxlen: 22 2a02:54e0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 02:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:3e:66:00:9f:06:d2:ff:e2:82:a8:a6:5a:f9:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: Jan 2 02:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=479b503f36592199041f10012c72eb53b485b2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:65:f0:16:39:dd:72:83:9a:c5:22:7e:be:34: 0e:b6:9b:79:10:4f:4a:78:21:8d:fa:a3:52:df:82: 73:0b:c1:0c:f5:71:fc:77:a9:eb:cb:e7:cc:35:36: 4e:83:d5:b9:df:46:7f:e6:f1:44:fc:8f:ca:08:ef: cc:f0:82:9f:79:0a:47:fe:fb:dc:89:e9:b1:45:52: a7:1e:f0:50:a4:d3:65:fb:63:a1:b2:85:e1:45:e8: b4:2b:64:34:8e:95:d6:58:ba:51:07:41:32:d7:6e: 46:a3:9e:5f:51:38:30:46:95:6b:2f:1a:ab:cb:b1: ce:9a:06:cb:0f:2e:c5:4c:00:e1:6f:3e:94:95:d6: 60:34:de:6b:4c:b5:58:3f:5e:4b:f1:3f:82:c5:f3: e1:d8:0c:d3:d7:7e:79:be:be:be:0b:a9:f4:4c:d2: 1d:41:f0:81:9b:f0:02:f1:ed:b0:ce:e2:7c:89:4d: f2:d7:d3:14:93:04:ba:58:eb:9e:2c:f4:7a:f6:0a: 6d:b1:b8:87:4e:63:57:87:a3:9e:f4:de:17:0c:f8: 86:3b:cf:7a:5a:ac:7a:14:fc:40:c1:92:00:78:e4: 74:3c:c1:7e:38:d8:e2:79:94:42:3b:ac:9f:e3:f0: 87:7d:93:73:b7:5c:cb:e7:e0:88:ab:98:24:4c:67: f7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9B:50:3F:36:59:21:99:04:1F:10:01:2C:72:EB:53:B4:85:B2:B3 X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/R5tQPzZZIZkEHxABLHLrU7SFsrM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.232.28.0/22 185.56.172.0/22 185.215.72.0/23 193.42.154.0/24 194.126.233.0/24 194.126.245.0/24 194.126.251.0/24 194.127.97.0/24 213.92.128.0/19 213.156.100.0/22 IPv6: 2a02:54e0::/29 Signature Algorithm: sha256WithRSAEncryption 6c:74:0f:11:99:23:45:7a:20:81:ac:09:83:ed:54:76:a5:f1: ca:24:df:83:3f:f1:e0:89:ff:6a:c1:9a:df:1d:fd:15:9e:59: 7d:37:d1:df:2f:0d:36:b9:c5:3f:38:e8:a4:e3:66:44:cf:6a: fd:61:bd:2d:53:6a:65:f5:14:e5:1d:48:bb:a2:10:07:08:4c: 95:83:5e:7f:08:a2:f2:7b:f2:85:d6:e0:b6:6a:5d:46:35:02: 5a:c9:69:71:3d:56:6d:c2:87:bd:59:d9:93:d4:aa:08:ee:8b: 0f:ee:81:43:2a:a3:f2:19:4f:84:a7:33:3c:e7:5c:ae:8f:1a: 17:bf:17:8a:08:6c:d4:b6:dc:42:2c:87:28:77:b5:5e:37:ec: 58:98:86:95:0e:f4:8e:be:4b:f6:4d:40:70:25:46:3b:90:e5: 5d:fd:6f:02:97:73:e1:24:6a:44:51:f3:ce:0a:a4:93:38:58: d8:66:c6:d3:43:79:d4:84:e9:f3:7b:f9:87:18:61:81:62:23: 70:8a:16:c7:ca:c8:5f:32:90:37:a9:eb:1b:31:57:0c:e4:b1: ae:60:6b:8d:80:9c:6e:a0:ee:a5:60:b7:e7:03:c9:ad:ca:44: 9f:7a:09:92:9f:a3:6c:6f:5b:2b:0c:8e:4e:ff:4a:f7:ce:d9: 05:a9:30:bf -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZt8gD5mAJ8G0v/igqimWvmyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjYwMTAyMDIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzliNTAzZjM2NTkyMTk5MDQxZjEwMDEyYzcyZWI1M2I0ODViMmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGXwFjndcoOaxSJ+vjQOtpt5EE9K eCGN+qNS34JzC8EM9XH8d6nry+fMNTZOg9W530Z/5vFE/I/KCO/M8IKfeQpH/vvc iemxRVKnHvBQpNNl+2OhsoXhRei0K2Q0jpXWWLpRB0Ey125Go55fUTgwRpVrLxqr y7HOmgbLDy7FTADhbz6UldZgNN5rTLVYP15L8T+CxfPh2AzT1355vr6+C6n0TNId QfCBm/AC8e2wzuJ8iU3y19MUkwS6WOueLPR69gptsbiHTmNXh6Oe9N4XDPiGO896 Wqx6FPxAwZIAeOR0PMF+ONjieZRCO6yf4/CHfZNzt1zL5+CIq5gkTGf3zwIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFEebUD82WSGZBB8QASxy61O0hbKzMB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEvUjV0UVB6WlpJWmtFSHhBQkxITHJVN1NGc3JNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQCbegcAwQC uTisAwQBuddIAwQAwSqaAwQAwn7pAwQAwn71AwQAwn77AwQAwn9hAwQF1VyAAwQC 1ZxkMA0EAgACMAcDBQMqAlTgMA0GCSqGSIb3DQEBCwUAA4IBAQBsdA8RmSNFeiCB rAmD7VR2pfHKJN+DP/Hgif9qwZrfHf0Vnll9N9HfLw02ucU/OOik42ZEz2r9Yb0t U2pl9RTlHUi7ohAHCEyVg15/CKLye/KF1uC2al1GNQJayWlxPVZtwoe9WdmT1KoI 7osP7oFDKqPyGU+EpzM851yujxoXvxeKCGzUttxCLIcod7VeN+xYmIaVDvSOvkv2 TUBwJUY7kOVd/W8Cl3PhJGpEUfPOCqSTOFjYZsbTQ3nUhOnze/mHGGGBYiNwihbH yshfMpA3qesbMVcM5LGuYGuNgJxuoO6lYLfnA8mtykSfegmSn6Nsb1srDI5O/0r3 ztkFqTC/ -----END CERTIFICATE-----Generated at Mon Jan 26 11:43:11 2026 by rpki-client