This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/u5v1NIr7zCznyDKOfZW5zSM1TZI.roa File: u5v1NIr7zCznyDKOfZW5zSM1TZI.roa (raw, json) Hash identifier: 0y7T3YJCDc+2Cz1VFqoKYSn2dXOumotGXs+vkOowx74= Subject key identifier: BB:9B:F5:34:8A:FB:CC:2C:E7:C8:32:8E:7D:95:B9:CD:23:35:4D:92 Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05 Certificate serial: 019B77C683F8286B3BD5CA94F23488AF088B Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/u5v1NIr7zCznyDKOfZW5zSM1TZI.roa Signing time: Thu 01 Jan 2026 04:17:37 +0000 ROA not before: Thu 01 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48434 IP address blocks: 94.232.168.0/21 maxlen: 27 185.37.52.0/22 maxlen: 27 185.78.20.0/22 maxlen: 27 185.232.152.0/22 maxlen: 27 185.232.153.0/24 maxlen: 27 185.232.154.0/23 maxlen: 27 185.232.154.0/24 maxlen: 27 185.232.155.0/24 maxlen: 27 2a04:6e00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:83:f8:28:6b:3b:d5:ca:94:f2:34:88:af:08:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05 Validity Not Before: Jan 1 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb9bf5348afbcc2ce7c8328e7d95b9cd23354d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e7:58:00:c9:65:4d:b5:48:49:87:53:f8:e4: bd:07:62:61:9f:66:ff:be:b8:39:a6:79:a5:e1:6c: 20:8a:ae:96:64:3a:80:8d:23:19:8f:6e:ee:74:ab: 4e:ad:49:19:9e:3d:2f:b0:3c:d7:25:4e:99:0f:40: d9:e6:28:49:90:1b:44:10:49:dc:b9:20:60:09:03: d6:48:da:fb:00:0d:2f:55:7c:7a:bf:15:ae:24:14: 12:12:f5:fe:56:b6:fe:9f:ed:6e:e8:9c:d5:d6:41: 5f:84:0e:aa:07:a2:74:ef:e6:c2:4a:b8:71:00:3a: 21:1c:dc:ab:0c:23:1b:cf:b1:2a:3f:2f:62:bd:16: 64:3b:6c:ed:76:c6:43:f6:7c:04:b8:70:ae:fe:a6: 4a:3d:34:dc:f0:09:e8:a2:bc:34:79:d2:17:69:c0: d0:b0:70:bb:2c:36:72:cc:63:80:ca:38:18:f3:14: 75:34:11:28:63:1f:34:8b:bf:6e:44:37:8a:92:b7: 50:58:cc:64:a1:24:2a:d9:f2:16:8d:e8:89:03:98: b8:7c:af:d9:48:bd:8e:9a:f3:83:67:8e:04:8f:7a: 34:de:62:f8:b2:f3:9b:41:93:83:07:c2:9c:02:bb: 4e:d8:ba:44:a1:b1:12:f0:dd:05:60:5e:65:dd:c1: 01:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9B:F5:34:8A:FB:CC:2C:E7:C8:32:8E:7D:95:B9:CD:23:35:4D:92 X509v3 Authority Key Identifier: keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/u5v1NIr7zCznyDKOfZW5zSM1TZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.232.168.0/21 185.37.52.0/22 185.78.20.0/22 185.232.152.0/22 IPv6: 2a04:6e00::/29 Signature Algorithm: sha256WithRSAEncryption 77:7c:a1:c7:fc:d5:e5:3b:3c:34:b9:16:8c:4c:54:f2:f2:30: 0d:8f:1f:ac:fd:60:57:26:f1:e5:f8:c2:a0:15:58:b6:c6:f4: a0:31:e1:03:ff:a5:49:e0:2b:48:09:ea:29:59:d0:c3:a4:ff: aa:0d:04:aa:fc:56:f5:e2:48:50:d7:97:db:2a:93:e9:79:ed: a0:45:94:65:6a:32:9a:fc:f0:f5:27:83:69:90:20:82:b6:a3: 22:1c:88:1c:20:c9:16:23:87:10:5e:f6:9b:17:56:b0:70:7a: 48:3b:4b:9c:a2:64:ad:c0:8b:f5:03:ba:a3:7d:db:f0:10:e6: fa:2d:a4:92:36:1f:f0:33:cd:42:b0:61:0b:f1:b5:6d:81:3d: 03:78:28:51:27:f3:31:6d:31:b5:cf:fc:31:9b:6c:ea:55:60: dd:70:79:3c:d6:e8:63:f4:ab:45:a4:18:cf:b3:f5:9d:d4:65: 99:2b:80:6a:c3:45:49:70:d2:5d:fb:bf:03:20:83:9f:03:1f: 1d:c6:b4:c8:5f:42:89:d1:24:84:82:22:b1:af:d4:e9:8e:71: d0:7d:7a:4a:df:d3:6a:a2:37:6f:f4:9c:54:cd:db:47:d5:6c: 23:f6:0f:c1:1f:2f:97:20:5a:3f:d7:26:da:6f:41:3f:d8:05: d2:0f:fc:37 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt3xoP4KGs71cqU8jSIrwiLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZGE1Yzg3NDM1NGQ4MzgyNmU0M2MyNTM1Yjc2ZTIwZDVi NjFiMDUwHhcNMjYwMTAxMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjliZjUzNDhhZmJjYzJjZTdjODMyOGU3ZDk1YjljZDIzMzU0ZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOdYAMllTbVISYdT+OS9B2Jhn2b/ vrg5pnml4Wwgiq6WZDqAjSMZj27udKtOrUkZnj0vsDzXJU6ZD0DZ5ihJkBtEEEnc uSBgCQPWSNr7AA0vVXx6vxWuJBQSEvX+Vrb+n+1u6JzV1kFfhA6qB6J07+bCSrhx ADohHNyrDCMbz7EqPy9ivRZkO2ztdsZD9nwEuHCu/qZKPTTc8Anoorw0edIXacDQ sHC7LDZyzGOAyjgY8xR1NBEoYx80i79uRDeKkrdQWMxkoSQq2fIWjeiJA5i4fK/Z SL2OmvODZ44Ej3o03mL4svObQZODB8KcArtO2LpEobES8N0FYF5l3cEBrQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFLub9TSK+8ws58gyjn2Vuc0jNU2SMB8GA1UdIwQY MBaAFAzaXIdDVNg4JuQ8JTW3biDVthsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85MjMzMmYtMDNlMC00MTE2LWI2ZjMt YzgyZjQyNGI2ZDBkLzEvdTV2MU5Jcjd6Q3pueURLT2ZaVzV6U00xVFpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi85MjMzMmYtMDNlMC00MTE2LWI2ZjMtYzgyZjQyNGI2ZDBk LzEvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDXuioAwQC uSU0AwQCuU4UAwQCueiYMA0EAgACMAcDBQMqBG4AMA0GCSqGSIb3DQEBCwUAA4IB AQB3fKHH/NXlOzw0uRaMTFTy8jANjx+s/WBXJvHl+MKgFVi2xvSgMeED/6VJ4CtI CeopWdDDpP+qDQSq/Fb14khQ15fbKpPpee2gRZRlajKa/PD1J4NpkCCCtqMiHIgc IMkWI4cQXvabF1awcHpIO0ucomStwIv1A7qjfdvwEOb6LaSSNh/wM81CsGEL8bVt gT0DeChRJ/MxbTG1z/wxm2zqVWDdcHk81uhj9KtFpBjPs/Wd1GWZK4Bqw0VJcNJd +78DIIOfAx8dxrTIX0KJ0SSEgiKxr9TpjnHQfXpK39Nqojdv9JxUzdtH1Wwj9g/B Hy+XIFo/1ybab0E/2AXSD/w3 -----END CERTIFICATE-----Generated at Mon Jan 26 04:56:20 2026 by rpki-client