This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/rfBCbJ5UqyxJrmjFjOyG2IH9R30.roa File: rfBCbJ5UqyxJrmjFjOyG2IH9R30.roa (raw, json) Hash identifier: Hq6QRnbtYlfThxdla/oR5Z86FNJ4rl+SznGomi6Y9bQ= Subject key identifier: AD:F0:42:6C:9E:54:AB:2C:49:AE:68:C5:8C:EC:86:D8:81:FD:47:7D Certificate issuer: /CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8 Certificate serial: 019B7C80408C3AC1E7ED5CAE9CEDF161F3D4 Authority key identifier: 59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/rfBCbJ5UqyxJrmjFjOyG2IH9R30.roa Signing time: Fri 02 Jan 2026 02:18:58 +0000 ROA not before: Fri 02 Jan 2026 02:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49985 IP address blocks: 176.62.224.0/20 maxlen: 20 185.172.252.0/22 maxlen: 22 188.120.192.0/19 maxlen: 19 2a02:c60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:40:8c:3a:c1:e7:ed:5c:ae:9c:ed:f1:61:f3:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8 Validity Not Before: Jan 2 02:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=adf0426c9e54ab2c49ae68c58cec86d881fd477d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:32:4b:c1:f1:79:fe:61:54:17:14:24:be:f1: 13:94:c5:4e:00:1f:f8:e0:23:18:1a:26:c5:f3:ea: d9:2a:58:99:fa:ac:9e:ba:16:18:70:e7:01:85:9f: a1:dc:e3:1f:e5:aa:da:dd:c7:65:76:75:19:98:7b: 21:0f:0c:b8:d6:e6:22:a6:d2:d4:7d:18:9c:bb:fc: 7f:c4:bc:c1:d0:2a:70:2f:b9:79:30:80:19:dd:6d: df:b6:e8:0d:ee:21:1b:0f:02:09:7f:43:51:b0:17: a1:6f:e6:df:1f:0e:91:c4:25:a7:a7:63:4d:38:af: c1:7c:ab:bc:9d:7b:c9:40:8f:83:fc:12:97:de:ee: 78:49:45:58:c5:72:dd:38:3b:93:46:cc:28:83:d2: ac:5f:b5:6b:22:d2:d8:05:37:c7:c6:92:80:fc:6d: 36:2a:d9:fd:f1:f2:f3:dc:28:ca:f9:c5:81:6e:e5: aa:5b:a8:ed:ab:7f:65:26:8f:a9:80:49:91:0d:55: 6f:42:86:ed:6e:80:e0:cf:27:f3:18:11:c3:6e:d2: 49:99:9a:ec:ea:2b:99:90:6f:f7:50:f1:92:da:c1: 56:9f:5c:13:4d:b3:9b:ed:43:3a:3c:64:63:e3:04: 45:9f:69:45:74:1d:84:99:19:19:77:9a:38:3c:14: 19:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F0:42:6C:9E:54:AB:2C:49:AE:68:C5:8C:EC:86:D8:81:FD:47:7D X509v3 Authority Key Identifier: keyid:59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/rfBCbJ5UqyxJrmjFjOyG2IH9R30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.62.224.0/20 185.172.252.0/22 188.120.192.0/19 IPv6: 2a02:c60::/32 Signature Algorithm: sha256WithRSAEncryption 3d:58:dc:4b:07:0b:f8:40:4e:4b:1b:f8:27:94:a1:3a:37:9c: eb:fd:0b:4a:ad:e0:68:f6:98:b4:f0:ec:bf:68:b8:09:05:2b: ac:f4:c2:e2:db:68:17:cd:c8:a6:fc:14:de:95:11:49:f8:50: 35:d1:d5:1e:a0:b1:de:de:50:24:60:e8:c8:c3:1c:9e:40:cf: 23:88:94:a6:09:95:7f:d8:86:4b:13:de:3a:44:96:a8:0f:34: 2f:aa:af:34:bf:97:dd:55:99:d4:32:8f:77:cd:b0:1e:42:a0: c8:fd:6c:8f:04:f8:0d:eb:0e:76:41:7b:29:f3:6b:b6:46:ab: ff:17:0b:f0:fe:36:bb:ef:cb:7b:df:8e:c5:ea:c8:fa:d9:da: 1b:09:49:a3:6c:89:ac:ab:08:f0:27:40:1c:46:64:5a:f7:9c: ac:6d:06:eb:f7:df:8d:85:ed:c5:42:ed:a1:93:ff:9a:dc:a4: 80:65:59:88:9b:2f:d8:98:88:d9:00:02:a8:65:0e:37:1f:43: fb:0a:36:aa:f9:b5:dc:e4:c8:60:c0:03:7d:09:15:cf:13:ba: 66:82:f3:26:15:24:4c:c9:10:28:12:4c:59:cf:c5:f7:28:3a: 2c:a5:58:d8:05:5a:d1:79:2c:ae:25:be:fd:f4:70:8d:42:9a: d2:28:45:e8 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt8gECMOsHn7VyunO3xYfPUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NDk2OThiYmNkMjRmYzllMWE5ZjVmNDE0ODZjMzFhZjE5 YTRiYzgwHhcNMjYwMTAyMDIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGYwNDI2YzllNTRhYjJjNDlhZTY4YzU4Y2VjODZkODgxZmQ0NzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TJLwfF5/mFUFxQkvvETlMVOAB/4 4CMYGibF8+rZKliZ+qyeuhYYcOcBhZ+h3OMf5ara3cdldnUZmHshDwy41uYiptLU fRicu/x/xLzB0CpwL7l5MIAZ3W3ftugN7iEbDwIJf0NRsBehb+bfHw6RxCWnp2NN OK/BfKu8nXvJQI+D/BKX3u54SUVYxXLdODuTRswog9KsX7VrItLYBTfHxpKA/G02 Ktn98fLz3CjK+cWBbuWqW6jtq39lJo+pgEmRDVVvQobtboDgzyfzGBHDbtJJmZrs 6iuZkG/3UPGS2sFWn1wTTbOb7UM6PGRj4wRFn2lFdB2EmRkZd5o4PBQZVQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFK3wQmyeVKssSa5oxYzshtiB/Ud9MB8GA1UdIwQY MBaAFFlJaYu80k/J4an19BSGwxrxmkvIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zMWMwNTYtNmE4YS00MjI2LTgwM2Mt NTgzZmJlNjRhOTU1LzEvcmZCQ2JKNVVxeXhKcm1qRmpPeUcySUg5UjMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8zMWMwNTYtNmE4YS00MjI2LTgwM2MtNTgzZmJlNjRhOTU1 LzEvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEsD7gAwQC uaz8AwQFvHjAMA0EAgACMAcDBQAqAgxgMA0GCSqGSIb3DQEBCwUAA4IBAQA9WNxL Bwv4QE5LG/gnlKE6N5zr/QtKreBo9pi08Oy/aLgJBSus9MLi22gXzcim/BTelRFJ +FA10dUeoLHe3lAkYOjIwxyeQM8jiJSmCZV/2IZLE946RJaoDzQvqq80v5fdVZnU Mo93zbAeQqDI/WyPBPgN6w52QXsp82u2Rqv/Fwvw/ja778t7347F6sj62dobCUmj bImsqwjwJ0AcRmRa95ysbQbr99+Nhe3FQu2hk/+a3KSAZVmImy/YmIjZAAKoZQ43 H0P7Cjaq+bXc5MhgwAN9CRXPE7pmgvMmFSRMyRAoEkxZz8X3KDospVjYBVrReSyu Jb799HCNQprSKEXo -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:07 2026 by rpki-client