This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/j60o4dW09KsfcomsLl91WfS5uIs.roa File: j60o4dW09KsfcomsLl91WfS5uIs.roa (raw, json) Hash identifier: orsN4oeQS9rxzvmJ709FrlKbBIl59zacw9FKE6EQoA8= Subject key identifier: 8F:AD:28:E1:D5:B4:F4:AB:1F:72:89:AC:2E:5F:75:59:F4:B9:B8:8B Certificate issuer: /CN=d513872512f1f2d037b401c2603ca8994e721e55 Certificate serial: 019B7EA74E02BACEFC11C8B810AB536C0109 Authority key identifier: D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/j60o4dW09KsfcomsLl91WfS5uIs.roa Signing time: Fri 02 Jan 2026 12:20:52 +0000 ROA not before: Fri 02 Jan 2026 12:20:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31034 IP address blocks: 83.136.104.0/21 maxlen: 24 94.198.96.0/21 maxlen: 24 94.198.101.0/24 maxlen: 24 95.141.32.0/20 maxlen: 24 158.58.168.0/21 maxlen: 24 158.58.172.0/23 maxlen: 24 185.8.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:4e:02:ba:ce:fc:11:c8:b8:10:ab:53:6c:01:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d513872512f1f2d037b401c2603ca8994e721e55 Validity Not Before: Jan 2 12:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fad28e1d5b4f4ab1f7289ac2e5f7559f4b9b88b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:83:ed:9a:8c:fd:98:3d:47:fb:cb:3d:92:08: 44:70:88:f9:51:05:2c:5a:35:f8:82:29:b5:ba:de: a9:fe:9f:d9:6e:41:f3:60:e2:26:cb:e4:9c:14:91: 2b:aa:1e:b2:c9:df:b5:c3:1f:6e:37:7a:4d:c7:b1: e5:ed:95:e3:1d:e7:be:0c:9d:7b:86:86:9b:4f:1d: 70:e4:8f:76:4d:7f:69:ba:04:f5:30:b3:36:03:54: ab:14:7b:4d:5f:46:22:a6:f8:18:a1:a2:89:99:36: 31:2b:6a:38:1b:d3:01:ff:8f:1a:56:39:24:ae:87: 31:7d:35:b4:2c:16:9b:c2:5f:a5:5d:da:00:1f:94: 81:dd:03:04:0f:9c:eb:88:3a:50:f4:15:e6:b4:cc: 8e:1e:68:51:5c:8e:f2:be:80:1f:a9:92:90:81:b9: fb:24:f6:87:02:6e:30:ff:ee:6f:cf:bf:59:bd:c1: cd:8d:f0:60:64:15:04:74:21:a6:65:7c:63:72:8f: d6:47:d9:72:1b:37:17:c1:01:75:b0:2e:ab:64:37: 4d:f2:25:91:eb:30:4e:8b:1d:1e:73:18:2c:6a:a1: 5c:80:30:73:68:24:86:68:64:f3:11:df:56:d5:3c: 12:af:ac:3f:c9:e4:5a:30:c0:6a:d4:0d:8a:73:95: 98:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AD:28:E1:D5:B4:F4:AB:1F:72:89:AC:2E:5F:75:59:F4:B9:B8:8B X509v3 Authority Key Identifier: keyid:D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/j60o4dW09KsfcomsLl91WfS5uIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.136.104.0/21 94.198.96.0/21 95.141.32.0/20 158.58.168.0/21 185.8.196.0/22 Signature Algorithm: sha256WithRSAEncryption a2:4b:d6:ca:73:26:96:0d:68:66:69:18:99:86:6f:62:95:19: d3:1e:6e:83:82:c2:04:34:12:92:57:61:64:7d:06:d4:9e:76: f4:90:9b:5f:a6:9c:99:ee:77:c1:e3:d1:37:4a:50:51:89:29: 3c:e7:0e:ef:02:90:44:b3:53:37:ba:8a:d0:ba:84:fe:f3:b7: 4d:75:cc:d0:c9:6d:94:83:36:21:92:ab:d0:74:30:bf:c6:e8: 6a:b1:82:7a:93:e4:59:b7:22:7e:36:ea:46:f0:21:f6:42:f3: 05:27:b5:86:59:87:b1:c8:5b:19:10:47:b5:29:df:cf:74:b9: cc:f5:b8:45:c9:d0:59:88:0b:58:49:a1:76:ef:ca:fd:c7:2f: 1d:0a:2f:64:04:1a:8a:15:df:a9:ac:07:f5:6d:6c:c5:b7:64: e3:eb:e5:23:d0:6f:ff:e0:b9:52:a5:1c:b5:88:f0:26:89:03: dc:51:45:d1:aa:df:eb:10:f0:d8:3b:36:7e:f1:72:8b:c9:5e: eb:4e:50:c5:85:9d:6a:03:07:0c:47:ec:f7:51:6f:5e:99:bb: 47:61:de:bc:bd:80:5e:40:74:51:a2:bf:f9:a5:8a:a8:af:33: 96:6f:11:1b:fa:c0:ff:ee:f3:fe:e5:e7:23:26:cc:20:18:7a: a1:1a:63:46 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt+p04Cus78Eci4EKtTbAEJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MTM4NzI1MTJmMWYyZDAzN2I0MDFjMjYwM2NhODk5NGU3 MjFlNTUwHhcNMjYwMTAyMTIyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmFkMjhlMWQ1YjRmNGFiMWY3Mjg5YWMyZTVmNzU1OWY0YjliODhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYPtmoz9mD1H+8s9kghEcIj5UQUs WjX4gim1ut6p/p/ZbkHzYOImy+ScFJErqh6yyd+1wx9uN3pNx7Hl7ZXjHee+DJ17 hoabTx1w5I92TX9pugT1MLM2A1SrFHtNX0YipvgYoaKJmTYxK2o4G9MB/48aVjkk rocxfTW0LBabwl+lXdoAH5SB3QMED5zriDpQ9BXmtMyOHmhRXI7yvoAfqZKQgbn7 JPaHAm4w/+5vz79ZvcHNjfBgZBUEdCGmZXxjco/WR9lyGzcXwQF1sC6rZDdN8iWR 6zBOix0ecxgsaqFcgDBzaCSGaGTzEd9W1TwSr6w/yeRaMMBq1A2Kc5WYDwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFI+tKOHVtPSrH3KJrC5fdVn0ubiLMB8GA1UdIwQY MBaAFNUThyUS8fLQN7QBwmA8qJlOch5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVJPSEpSTHg4dEEzdEFIQ1lEeW9tVTV5SGxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9hN2RkZjYtMjM5NC00OGQzLWJmYTEt NmQ2NTVjZDk0NDY4LzEvajYwbzRkVzA5S3NmY29tc0xsOTFXZlM1dUlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9hN2RkZjYtMjM5NC00OGQzLWJmYTEtNmQ2NTVjZDk0NDY4 LzEvMVJPSEpSTHg4dEEzdEFIQ1lEeW9tVTV5SGxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDU4hoAwQD XsZgAwQEX40gAwQDnjqoAwQCuQjEMA0GCSqGSIb3DQEBCwUAA4IBAQCiS9bKcyaW DWhmaRiZhm9ilRnTHm6DgsIENBKSV2FkfQbUnnb0kJtfppyZ7nfB49E3SlBRiSk8 5w7vApBEs1M3uorQuoT+87dNdczQyW2UgzYhkqvQdDC/xuhqsYJ6k+RZtyJ+NupG 8CH2QvMFJ7WGWYexyFsZEEe1Kd/PdLnM9bhFydBZiAtYSaF278r9xy8dCi9kBBqK Fd+prAf1bWzFt2Tj6+Uj0G//4LlSpRy1iPAmiQPcUUXRqt/rEPDYOzZ+8XKLyV7r TlDFhZ1qAwcMR+z3UW9embtHYd68vYBeQHRRor/5pYqorzOWbxEb+sD/7vP+5ecj JswgGHqhGmNG -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:53 2026 by rpki-client