This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/_mrDtR7UUkEZv2J_VBhDtzQIO1I.roa File: _mrDtR7UUkEZv2J_VBhDtzQIO1I.roa (raw, json) Hash identifier: 82z4R+bFU5sQIWEOZT5D+4EYVzoIe1d3vFP95vZNL4M= Subject key identifier: FE:6A:C3:B5:1E:D4:52:41:19:BF:62:7F:54:18:43:B7:34:08:3B:52 Certificate issuer: /CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7 Certificate serial: 019B7BA4D3DFA01CB68450C018E254C4ED77 Authority key identifier: 7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/_mrDtR7UUkEZv2J_VBhDtzQIO1I.roa Signing time: Thu 01 Jan 2026 22:19:18 +0000 ROA not before: Thu 01 Jan 2026 22:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57099 IP address blocks: 5.133.172.0/22 maxlen: 24 46.231.8.0/21 maxlen: 24 85.95.32.0/19 maxlen: 24 91.209.142.0/24 maxlen: 24 91.214.228.0/22 maxlen: 24 151.249.64.0/20 maxlen: 24 185.44.248.0/22 maxlen: 24 185.113.0.0/22 maxlen: 24 185.168.144.0/22 maxlen: 24 209.35.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:d3:df:a0:1c:b6:84:50:c0:18:e2:54:c4:ed:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7 Validity Not Before: Jan 1 22:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe6ac3b51ed4524119bf627f541843b734083b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b4:d1:1d:a9:f0:4b:b8:3e:46:b2:fb:d9:ad: 9b:40:46:f1:6e:46:d1:b1:4d:b7:3b:8a:70:bc:ea: e9:39:c8:7f:04:27:e6:9f:5b:ed:b2:39:ab:e4:02: e8:36:2a:06:cf:fd:5b:d8:fd:b2:28:8a:1b:0e:f1: e0:5e:08:bc:f6:57:22:58:a0:38:df:7d:78:4a:e7: 16:49:21:6a:a7:08:57:00:63:0e:4c:20:b3:f8:c6: 44:93:b3:0a:29:f7:5a:8f:61:e8:05:c1:a3:34:3d: 08:83:88:17:ae:c4:4f:43:d4:90:b1:dd:8a:48:82: dd:36:ee:0c:c3:6f:ba:54:05:87:17:4f:5c:5c:61: 5c:7a:39:b8:a9:29:5f:8f:b0:7c:da:61:bb:62:32: 42:87:d0:0a:55:4b:58:ef:1a:83:ae:69:f8:55:06: 8d:00:46:6b:57:26:5c:cd:c3:a8:48:d2:41:ca:94: 8b:48:cb:d5:fe:93:87:c1:df:62:e1:ac:33:3e:55: 07:cb:a2:31:b1:8b:ea:0b:aa:ca:8a:85:dd:87:03: 7e:de:a4:fc:89:0b:78:b6:cd:dc:7f:80:3d:ac:1a: 4d:0b:71:b0:1a:33:ef:76:01:b5:a1:ac:d4:52:aa: ee:e5:a9:a2:39:f7:07:5d:d8:03:1e:45:11:7d:41: a0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:6A:C3:B5:1E:D4:52:41:19:BF:62:7F:54:18:43:B7:34:08:3B:52 X509v3 Authority Key Identifier: keyid:7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/_mrDtR7UUkEZv2J_VBhDtzQIO1I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.172.0/22 46.231.8.0/21 85.95.32.0/19 91.209.142.0/24 91.214.228.0/22 151.249.64.0/20 185.44.248.0/22 185.113.0.0/22 185.168.144.0/22 209.35.128.0/20 Signature Algorithm: sha256WithRSAEncryption 66:f1:1b:d2:11:e8:d5:b0:9d:35:db:80:ba:0a:93:75:5c:f6: a7:c8:9f:b2:03:0a:33:48:d2:c6:2b:db:0e:e4:9d:d8:19:c1: 1e:8a:0b:fb:2f:81:38:6d:37:c4:78:3d:6b:fc:00:46:68:ac: 4c:7a:da:ac:83:59:77:7d:67:67:76:26:7f:da:80:4a:9c:9c: 21:c5:9e:fe:9a:7d:f8:52:92:a1:da:58:ed:a5:a4:29:88:28: 02:be:d0:74:10:76:dc:c1:e6:1a:17:6b:3f:6e:5c:77:82:04: 9c:c7:99:77:a5:88:75:51:f7:0d:80:0f:11:15:18:99:f3:52: 4a:5a:f1:86:65:61:85:ac:93:65:b6:53:b9:59:43:e4:d3:ee: 6f:cb:17:7f:bf:29:fa:4d:32:95:66:10:1b:d0:45:f2:e7:3f: ec:a8:02:34:42:a7:48:51:c1:d7:1f:d4:86:3e:f4:ce:d1:89: d9:ac:e0:79:86:8a:d7:5d:0e:01:47:28:f4:a9:47:04:9a:79: ba:46:1e:a4:4a:ff:9a:22:f4:e0:73:bf:15:43:1f:8a:90:08: b2:8f:11:a1:f8:4b:24:0e:9a:e6:bf:08:20:b4:fa:e7:e0:6b: 87:ca:c5:0d:7d:0f:7b:e8:d2:59:e9:71:f3:43:12:24:28:cd: 9e:1f:46:0d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt7pNPfoBy2hFDAGOJUxO13MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNDVhOWEwMzUzYTMzYzZhNGY5MzYwOGY5ZDI1ZjI3Yzg1 OTQ4YjcwHhcNMjYwMTAxMjIxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTZhYzNiNTFlZDQ1MjQxMTliZjYyN2Y1NDE4NDNiNzM0MDgzYjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLTRHanwS7g+RrL72a2bQEbxbkbR sU23O4pwvOrpOch/BCfmn1vtsjmr5ALoNioGz/1b2P2yKIobDvHgXgi89lciWKA4 3314SucWSSFqpwhXAGMOTCCz+MZEk7MKKfdaj2HoBcGjND0Ig4gXrsRPQ9SQsd2K SILdNu4Mw2+6VAWHF09cXGFcejm4qSlfj7B82mG7YjJCh9AKVUtY7xqDrmn4VQaN AEZrVyZczcOoSNJBypSLSMvV/pOHwd9i4awzPlUHy6IxsYvqC6rKioXdhwN+3qT8 iQt4ts3cf4A9rBpNC3GwGjPvdgG1oazUUqru5amiOfcHXdgDHkURfUGg5QIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFP5qw7Ue1FJBGb9if1QYQ7c0CDtSMB8GA1UdIwQY MBaAFH5FqaA1OjPGpPk2CPnSXyfIWUi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmtXcG9EVTZNOGFrLVRZSS1kSmZKOGhaU0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kZDdiZWItNmY3OC00MTliLTk1N2Qt MzdhNjBjMzM1YTVkLzEvX21yRHRSN1VVa0VadjJKX1ZCaER0elFJTzFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9kZDdiZWItNmY3OC00MTliLTk1N2QtMzdhNjBjMzM1YTVk LzEvZmtXcG9EVTZNOGFrLVRZSS1kSmZKOGhaU0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQCBYWsAwQD LucIAwQFVV8gAwQAW9GOAwQCW9bkAwQEl/lAAwQCuSz4AwQCuXEAAwQCuaiQAwQE 0SOAMA0GCSqGSIb3DQEBCwUAA4IBAQBm8RvSEejVsJ0124C6CpN1XPanyJ+yAwoz SNLGK9sO5J3YGcEeigv7L4E4bTfEeD1r/ABGaKxMetqsg1l3fWdndiZ/2oBKnJwh xZ7+mn34UpKh2ljtpaQpiCgCvtB0EHbcweYaF2s/blx3ggScx5l3pYh1UfcNgA8R FRiZ81JKWvGGZWGFrJNltlO5WUPk0+5vyxd/vyn6TTKVZhAb0EXy5z/sqAI0QqdI UcHXH9SGPvTO0YnZrOB5horXXQ4BRyj0qUcEmnm6Rh6kSv+aIvTgc78VQx+KkAiy jxGh+EskDprmvwggtPrn4GuHysUNfQ976NJZ6XHzQxIkKM2eH0YN -----END CERTIFICATE-----Generated at Mon Jan 26 05:57:16 2026 by rpki-client