This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/1-Q0gxmjETZ8-EbAsvBzHxZ3IWYc.roa File: 1-Q0gxmjETZ8-EbAsvBzHxZ3IWYc.roa (raw, json) Hash identifier: 1z/Td/mz4lnv4DMzZS2Hbks9/dVY2grsNq8hablzQfE= Subject key identifier: F9:0D:20:C6:68:C4:4D:9F:3E:11:B0:2C:BC:1C:C7:C5:9D:C8:59:87 Certificate issuer: /CN=5bf81435ed13789895f375dc34d04ce91aca4744 Certificate serial: 019B7D5B37EC71E948B9DC9E694932CCC878 Authority key identifier: 5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/1-Q0gxmjETZ8-EbAsvBzHxZ3IWYc.roa Signing time: Fri 02 Jan 2026 06:18:08 +0000 ROA not before: Fri 02 Jan 2026 06:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201271 IP address blocks: 158.233.224.0/24 maxlen: 24 158.233.227.0/24 maxlen: 24 158.233.228.0/23 maxlen: 23 158.233.228.0/24 maxlen: 24 158.233.229.0/24 maxlen: 24 158.233.242.0/23 maxlen: 23 158.233.242.0/24 maxlen: 24 158.233.243.0/24 maxlen: 24 158.233.244.0/23 maxlen: 23 158.233.244.0/24 maxlen: 24 158.233.245.0/24 maxlen: 24 158.233.246.0/23 maxlen: 23 158.233.246.0/24 maxlen: 24 158.233.247.0/24 maxlen: 24 158.233.248.0/23 maxlen: 23 158.233.248.0/24 maxlen: 24 158.233.249.0/24 maxlen: 24 158.233.250.0/23 maxlen: 23 158.233.250.0/24 maxlen: 24 158.233.251.0/24 maxlen: 24 2001:67c:2af0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:37:ec:71:e9:48:b9:dc:9e:69:49:32:cc:c8:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bf81435ed13789895f375dc34d04ce91aca4744 Validity Not Before: Jan 2 06:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f90d20c668c44d9f3e11b02cbc1cc7c59dc85987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:31:5f:f3:0c:a9:fe:68:54:02:ba:af:e1:84: 4c:3d:5e:f7:6a:01:ba:80:c1:66:11:b5:cb:ef:21: eb:ce:b8:53:00:b8:86:2e:42:25:cb:fa:21:1a:5c: 4e:25:5a:29:f4:a7:21:fa:8b:2a:38:dd:85:49:9c: 9f:bd:a6:17:42:40:d0:2c:ce:da:de:41:38:52:f4: 58:b7:9a:91:66:7c:62:a5:2f:fd:dd:15:bd:90:7b: f0:ef:ed:fe:26:e1:a2:f9:07:69:19:e7:5a:5e:ed: 6c:19:94:4e:da:36:d5:cb:da:f1:9a:75:8f:1a:8d: 8a:1d:d4:cd:0a:99:a8:38:a6:22:b5:ce:16:c6:73: 37:57:72:5e:10:20:f2:23:8a:00:0e:de:57:ab:68: 3e:42:c2:3b:45:54:3d:99:66:dd:9b:5e:da:91:1c: 51:6e:61:74:f4:65:ad:d6:39:10:a0:0d:be:41:b9: ea:c5:e4:b0:06:b2:25:37:22:0e:be:2a:bf:2d:46: 52:3d:22:67:50:1d:fa:09:24:da:39:94:a2:79:6c: 76:13:28:42:70:e1:f5:c9:c0:af:9a:78:0e:70:07: d3:62:61:db:46:4c:ef:c4:f2:5f:58:b6:65:06:32: 64:e4:cc:78:db:93:18:ae:6f:2b:08:dc:10:d4:c9: 54:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0D:20:C6:68:C4:4D:9F:3E:11:B0:2C:BC:1C:C7:C5:9D:C8:59:87 X509v3 Authority Key Identifier: keyid:5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/1-Q0gxmjETZ8-EbAsvBzHxZ3IWYc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.233.224.0/24 158.233.227.0-158.233.229.255 158.233.242.0-158.233.251.255 IPv6: 2001:67c:2af0::/48 Signature Algorithm: sha256WithRSAEncryption 92:65:8a:fc:f9:8f:53:d1:fc:4c:14:54:02:47:49:e4:50:fb: 97:25:57:7a:a5:c6:71:47:56:d1:7f:bc:56:b9:25:e0:98:2a: e4:ae:a5:86:f9:16:d6:ce:5b:92:7f:f2:e6:b1:d0:24:ec:70: 53:cd:6d:1b:1b:22:71:7f:6b:3d:54:9b:fd:19:b9:cd:1f:eb: 4f:f2:e9:53:bf:20:36:c2:e3:97:36:1f:14:b8:22:f5:5d:23: 7f:0a:77:72:2c:87:db:7c:32:e4:ed:cd:36:f4:4d:4f:41:d2: 42:ee:13:da:3f:d5:bb:93:58:05:b0:25:f0:80:99:08:23:ba: cc:8a:cd:d1:7d:71:79:f3:39:5a:d6:cd:41:7f:cf:de:92:60: f5:86:94:7a:8c:46:52:ef:3b:74:98:a3:a7:5f:e7:3e:7a:0b: c5:0c:65:13:f7:01:67:f1:11:3f:3f:be:b7:b0:ae:79:6c:75: 74:03:50:dc:83:a8:45:4d:ca:af:a9:ed:58:3b:35:ac:7a:63: cf:0b:b3:c8:5f:0e:ce:09:1a:66:bb:b0:5a:51:7e:f6:f6:a4: f3:b0:5d:15:6f:d0:e7:fa:b0:73:59:ec:fb:42:0c:e3:17:84: af:56:fa:42:63:db:6b:b7:1d:0c:1d:37:ab:ff:9f:aa:c6:f1: a9:8b:b5:50 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt9WzfscelIudyeaUkyzMh4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZjgxNDM1ZWQxMzc4OTg5NWYzNzVkYzM0ZDA0Y2U5MWFj YTQ3NDQwHhcNMjYwMTAyMDYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTBkMjBjNjY4YzQ0ZDlmM2UxMWIwMmNiYzFjYzdjNTlkYzg1OTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzFf8wyp/mhUArqv4YRMPV73agG6 gMFmEbXL7yHrzrhTALiGLkIly/ohGlxOJVop9Kch+osqON2FSZyfvaYXQkDQLM7a 3kE4UvRYt5qRZnxipS/93RW9kHvw7+3+JuGi+QdpGedaXu1sGZRO2jbVy9rxmnWP Go2KHdTNCpmoOKYitc4WxnM3V3JeECDyI4oADt5Xq2g+QsI7RVQ9mWbdm17akRxR bmF09GWt1jkQoA2+QbnqxeSwBrIlNyIOviq/LUZSPSJnUB36CSTaOZSieWx2EyhC cOH1ycCvmngOcAfTYmHbRkzvxPJfWLZlBjJk5Mx425MYrm8rCNwQ1MlUawIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFPkNIMZoxE2fPhGwLLwcx8WdyFmHMB8GA1UdIwQY MBaAFFv4FDXtE3iYlfN13DTQTOkaykdEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV19nVU5lMFRlSmlWODNYY05OQk02UnJLUjBRLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zZDRiYzUtYzM2My00MTVmLWIzZGEt NDhlNGNjNmIzM2EzLzEvMS1RMGd4bWpFVFo4LUViQXN2QnpIeFozSVdZYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNWMvM2Q0YmM1LWMzNjMtNDE1Zi1iM2RhLTQ4ZTRjYzZiMzNh My8xL1dfZ1VOZTBUZUppVjgzWGNOTkJNNlJyS1IwUS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBMBggrBgEFBQcBBwEB/wQ9MDswKAQCAAEwIgMEAJ7p4DAM AwQAnunjAwQBnunkMAwDBAGe6fIDBAKe6fgwDwQCAAIwCQMHACABBnwq8DANBgkq hkiG9w0BAQsFAAOCAQEAkmWK/PmPU9H8TBRUAkdJ5FD7lyVXeqXGcUdW0X+8Vrkl 4Jgq5K6lhvkW1s5bkn/y5rHQJOxwU81tGxsicX9rPVSb/Rm5zR/rT/LpU78gNsLj lzYfFLgi9V0jfwp3ciyH23wy5O3NNvRNT0HSQu4T2j/Vu5NYBbAl8ICZCCO6zIrN 0X1xefM5WtbNQX/P3pJg9YaUeoxGUu87dJijp1/nPnoLxQxlE/cBZ/ERPz++t7Cu eWx1dANQ3IOoRU3Kr6ntWDs1rHpjzwuzyF8OzgkaZruwWlF+9vak87BdFW/Q5/qw c1ns+0IM4xeEr1b6QmPba7cdDB03q/+fqsbxqYu1UA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:16 2026 by rpki-client