This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/Rn6gBvYPX3hQXv1hSbp5uIqfLTU.roa File: Rn6gBvYPX3hQXv1hSbp5uIqfLTU.roa (raw, json) Hash identifier: s2MjAbFmZskhe8c8syDINl1Qg2IP1alqQzWM8hgpGaM= Subject key identifier: 46:7E:A0:06:F6:0F:5F:78:50:5E:FD:61:49:BA:79:B8:8A:9F:2D:35 Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725 Certificate serial: 019BF4337075E969B6A674504EDED5E0FAC3 Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/Rn6gBvYPX3hQXv1hSbp5uIqfLTU.roa Signing time: Sun 25 Jan 2026 08:09:30 +0000 ROA not before: Sun 25 Jan 2026 08:09:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51074 IP address blocks: 5.221.0.0/16 maxlen: 16 31.184.128.0/18 maxlen: 24 37.130.200.0/21 maxlen: 24 37.130.202.0/23 maxlen: 23 178.252.128.0/18 maxlen: 24 178.252.138.0/24 maxlen: 24 185.115.148.0/23 maxlen: 24 2a02:2b58::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:33:70:75:e9:69:b6:a6:74:50:4e:de:d5:e0:fa:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725 Validity Not Before: Jan 25 08:09:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=467ea006f60f5f78505efd6149ba79b88a9f2d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bb:07:c5:25:b3:fb:a3:79:7b:4c:df:1b:4f: c8:1c:71:23:1a:29:ac:59:79:d4:cc:68:99:88:7e: d3:ba:42:04:9b:f8:8f:50:a9:71:55:cc:44:fe:75: f2:27:f5:a4:85:b4:fa:f8:b9:aa:4f:f0:64:05:c7: 72:8b:f2:3e:aa:cc:b1:fc:96:3a:61:35:36:20:96: 43:1e:b9:a0:c7:d3:59:a1:5f:db:e5:d5:a6:50:c3: c6:ae:fe:0d:26:ab:92:8a:c9:ce:34:7c:0b:00:d8: 31:07:ea:ff:39:a2:89:65:1e:1d:c4:f7:ea:54:90: 95:f1:1b:61:42:75:cc:94:07:32:0b:bb:a6:d2:d2: a4:63:50:d5:71:a6:d8:c4:3e:45:fa:9a:2a:0c:93: 4e:04:22:56:12:d5:1a:69:a8:2b:59:ea:81:44:a0: 35:50:c1:3a:85:57:c3:4e:2c:fc:86:24:5f:2f:91: 81:9a:0e:72:fe:1a:2f:18:6a:2b:33:ee:56:b0:27: 93:92:74:01:f7:2b:d3:da:19:1a:08:80:95:3b:4e: ca:6f:0e:b4:eb:d9:13:f1:1b:2c:38:e6:bb:f3:5b: 70:15:51:8e:4b:6d:b7:14:cb:bc:c1:b0:1e:46:bd: 3a:fa:1d:c3:ea:ef:b6:93:52:75:d9:6c:f7:60:82: 5a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7E:A0:06:F6:0F:5F:78:50:5E:FD:61:49:BA:79:B8:8A:9F:2D:35 X509v3 Authority Key Identifier: keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/Rn6gBvYPX3hQXv1hSbp5uIqfLTU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.221.0.0/16 31.184.128.0/18 37.130.200.0/21 178.252.128.0/18 185.115.148.0/23 IPv6: 2a02:2b58::/29 Signature Algorithm: sha256WithRSAEncryption 03:1d:7c:3e:fa:c9:df:45:31:54:10:ba:f0:59:fe:d5:34:28: 89:df:f9:5c:1d:7b:3f:27:f7:4f:f8:41:04:5c:2a:40:9c:53: b4:f2:74:1f:87:bf:61:da:f1:d7:22:6c:bb:65:dd:5a:f7:aa: 32:40:12:77:c8:21:66:5d:9f:f7:57:58:6d:4c:f9:aa:2d:2f: 61:f8:af:22:9a:8a:af:54:8a:55:ec:21:e6:86:1b:5f:b3:4b: b8:a2:20:ea:61:28:77:98:45:8b:d3:eb:ac:57:61:3c:c1:90: 7b:95:9f:11:51:ae:2d:1c:69:a0:ad:67:9c:01:bd:c8:88:88: 60:c2:66:da:5c:02:a9:a3:88:e0:bd:3b:bd:e6:34:9e:ef:8a: dc:27:16:6c:ac:97:f9:77:cd:9e:c9:55:75:db:ea:b7:25:71: 47:3d:65:6e:1a:0e:b4:96:99:ef:25:c8:0f:09:05:5c:7d:f5: 49:0b:d5:6b:e7:e1:5b:84:75:f3:e9:0e:39:49:ad:db:77:13: e3:a3:0b:01:5c:be:84:df:96:e5:1d:cd:51:0e:a6:dd:da:4a: a3:54:e2:d7:2f:1b:fb:27:51:a8:8c:b8:5c:9d:29:95:76:40: d5:64:e5:76:4a:28:52:bc:c3:93:14:9e:d6:6d:62:95:81:14: cd:7e:ba:02 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZv0M3B16Wm2pnRQTt7V4PrDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZmI2NDVmMTM0ZjRmZGFkYTQ1ZTcwYmNmY2Q5M2I4OTdk YmQ3MjUwHhcNMjYwMTI1MDgwOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjdlYTAwNmY2MGY1Zjc4NTA1ZWZkNjE0OWJhNzliODhhOWYyZDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrsHxSWz+6N5e0zfG0/IHHEjGims WXnUzGiZiH7TukIEm/iPUKlxVcxE/nXyJ/WkhbT6+LmqT/BkBcdyi/I+qsyx/JY6 YTU2IJZDHrmgx9NZoV/b5dWmUMPGrv4NJquSisnONHwLANgxB+r/OaKJZR4dxPfq VJCV8RthQnXMlAcyC7um0tKkY1DVcabYxD5F+poqDJNOBCJWEtUaaagrWeqBRKA1 UME6hVfDTiz8hiRfL5GBmg5y/hovGGorM+5WsCeTknQB9yvT2hkaCICVO07Kbw60 69kT8RssOOa781twFVGOS223FMu8wbAeRr06+h3D6u+2k1J12Wz3YIJaPwIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFEZ+oAb2D194UF79YUm6ebiKny01MB8GA1UdIwQY MBaAFNr7ZF8TT0/a2kXnC8/Nk7iX29clMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83YTQ4ZjUtYmQyNC00ZGM0LThjY2Et NmJhMGEwY2UwMWVkLzEvUm42Z0J2WVBYM2hRWHYxaFNicDV1SXFmTFRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi83YTQ4ZjUtYmQyNC00ZGM0LThjY2EtNmJhMGEwY2UwMWVk LzEvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAjBAIAATAdAwMABd0DBAYf uIADBAMlgsgDBAay/IADBAG5c5QwDQQCAAIwBwMFAyoCK1gwDQYJKoZIhvcNAQEL BQADggEBAAMdfD76yd9FMVQQuvBZ/tU0KInf+Vwdez8n90/4QQRcKkCcU7TydB+H v2Ha8dcibLtl3Vr3qjJAEnfIIWZdn/dXWG1M+aotL2H4ryKaiq9UilXsIeaGG1+z S7iiIOphKHeYRYvT66xXYTzBkHuVnxFRri0caaCtZ5wBvciIiGDCZtpcAqmjiOC9 O73mNJ7vitwnFmysl/l3zZ7JVXXb6rclcUc9ZW4aDrSWme8lyA8JBVx99UkL1Wvn 4VuEdfPpDjlJrdt3E+OjCwFcvoTfluUdzVEOpt3aSqNU4tcvG/snUaiMuFydKZV2 QNVk5XZKKFK8w5MUntZtYpWBFM1+ugI= -----END CERTIFICATE-----Generated at Mon Jan 26 05:55:36 2026 by rpki-client