This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/IP5NjwFtLWkr-T6cXqTaAlNK3Mo.roa File: IP5NjwFtLWkr-T6cXqTaAlNK3Mo.roa (raw, json) Hash identifier: jSZDS2EJyCz5Bf4EPrnkXGN+FEAvnmOTf2xL+Wmg3zY= Subject key identifier: 20:FE:4D:8F:01:6D:2D:69:2B:F9:3E:9C:5E:A4:DA:02:53:4A:DC:CA Certificate issuer: /CN=f219383a3e3f116a9bcc4769c8517cdce40765c7 Certificate serial: 019B7F853920887CCD7B207DC870615D1F79 Authority key identifier: F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/IP5NjwFtLWkr-T6cXqTaAlNK3Mo.roa Signing time: Fri 02 Jan 2026 16:23:15 +0000 ROA not before: Fri 02 Jan 2026 16:23:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60567 IP address blocks: 185.29.8.0/24 maxlen: 24 185.29.9.0/24 maxlen: 24 185.29.10.0/24 maxlen: 24 2a02:4840:200::/48 maxlen: 48 2a02:4840:201::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:39:20:88:7c:cd:7b:20:7d:c8:70:61:5d:1f:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f219383a3e3f116a9bcc4769c8517cdce40765c7 Validity Not Before: Jan 2 16:23:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20fe4d8f016d2d692bf93e9c5ea4da02534adcca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:71:30:6f:6e:c2:b4:c6:53:00:0a:cc:3f:79: a6:7a:93:a2:09:2d:f1:f8:eb:0e:a8:10:87:53:88: 78:0e:f6:20:64:ec:b8:5c:8b:d8:89:03:a8:de:94: 6d:61:f7:a5:14:54:81:c5:42:43:c9:42:ff:e6:bc: 62:5c:24:9d:90:53:a2:e6:2c:be:ef:e6:e3:43:55: 69:a7:1f:c2:90:5f:22:39:39:91:2b:4f:0f:6b:f4: 16:99:a8:59:23:81:58:d7:26:37:33:0a:db:fe:7b: e4:4d:d3:9e:03:90:5f:0f:22:49:30:e5:92:31:dd: 5a:a1:92:8d:ee:ac:93:0c:35:ff:53:b6:ee:7d:ff: d4:78:ad:ff:5c:90:13:f7:88:a1:52:2a:c9:3d:2e: 02:31:67:2b:81:3e:98:bd:58:d1:28:69:73:bf:2a: 97:54:fa:b9:c9:0b:7c:6e:c7:ef:1a:09:6a:83:94: 91:4c:1e:b4:cb:21:03:1b:cb:ae:a8:90:e4:58:c8: 25:21:65:de:37:78:f5:85:d4:df:6a:60:05:49:0b: d5:b2:f8:08:5c:b5:aa:f7:3d:07:84:34:23:e5:de: 7e:a4:43:fb:16:e5:b4:fb:64:91:9e:e4:87:32:d6: 49:ce:8b:95:8f:24:16:c8:64:44:d4:90:b3:ad:0e: 94:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FE:4D:8F:01:6D:2D:69:2B:F9:3E:9C:5E:A4:DA:02:53:4A:DC:CA X509v3 Authority Key Identifier: keyid:F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/IP5NjwFtLWkr-T6cXqTaAlNK3Mo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.29.8.0-185.29.10.255 IPv6: 2a02:4840:200::/47 Signature Algorithm: sha256WithRSAEncryption 6d:4a:84:65:f0:08:4a:37:ad:d7:d2:a3:fd:dd:ee:ca:f6:47: ce:86:60:fb:a4:58:ba:9a:e4:ad:78:56:af:f7:83:d8:f7:46: 49:87:a7:00:69:65:a4:5c:0b:01:d5:c3:e1:b8:d9:34:ff:fe: d6:ad:80:04:5d:8f:47:fa:8a:db:e7:cc:5f:b9:d3:d3:82:91: 91:49:67:bf:ce:db:cd:b2:69:13:9a:28:b8:21:92:8d:95:56: 1e:c7:d6:6e:04:3b:9c:0c:1a:83:c9:47:71:6e:a6:71:96:1d: 52:e4:7a:21:24:7f:5f:83:ca:91:76:e4:12:5d:53:67:43:7d: 48:7f:6f:70:3a:97:0e:73:8e:d7:58:f0:e5:8f:cc:2f:30:34: be:a4:f9:5a:a9:bd:7c:86:bc:0d:d2:c3:9f:77:e7:9f:8e:87: 7b:24:bc:f0:1a:fd:20:03:45:aa:6d:cd:c2:d6:d7:11:30:e4: 1a:25:00:91:52:d5:84:d7:6b:84:33:1a:c2:fb:47:3f:a8:02: 6e:5e:f2:47:76:85:de:91:50:4a:dc:39:18:39:f2:2e:ca:dc: 5f:51:51:da:a9:8a:ed:4e:44:f5:df:97:29:4a:2b:03:4f:2c: 84:53:c8:4d:9e:55:e1:fb:38:2b:ff:b5:3b:0e:b7:17:89:2a: 2a:d5:b8:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/hTkgiHzNeyB9yHBhXR95MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMTkzODNhM2UzZjExNmE5YmNjNDc2OWM4NTE3Y2RjZTQw NzY1YzcwHhcNMjYwMTAyMTYyMzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGZlNGQ4ZjAxNmQyZDY5MmJmOTNlOWM1ZWE0ZGEwMjUzNGFkY2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnEwb27CtMZTAArMP3mmepOiCS3x +OsOqBCHU4h4DvYgZOy4XIvYiQOo3pRtYfelFFSBxUJDyUL/5rxiXCSdkFOi5iy+ 7+bjQ1Vppx/CkF8iOTmRK08Pa/QWmahZI4FY1yY3Mwrb/nvkTdOeA5BfDyJJMOWS Md1aoZKN7qyTDDX/U7buff/UeK3/XJAT94ihUirJPS4CMWcrgT6YvVjRKGlzvyqX VPq5yQt8bsfvGglqg5SRTB60yyEDG8uuqJDkWMglIWXeN3j1hdTfamAFSQvVsvgI XLWq9z0HhDQj5d5+pEP7FuW0+2SRnuSHMtZJzouVjyQWyGRE1JCzrQ6UKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCD+TY8BbS1pK/k+nF6k2gJTStzKMB8GA1UdIwQY MBaAFPIZODo+PxFqm8xHachRfNzkB2XHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGhrNE9qNF9FV3FiekVkcHlGRjgzT1FIWmNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS83Y2YwYjEtMjI5OC00NDg0LWJkODAt NmNjOWY2Y2JhYWM0LzEvSVA1Tmp3RnRMV2tyLVQ2Y1hxVGFBbE5LM01vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS83Y2YwYjEtMjI5OC00NDg0LWJkODAtNmNjOWY2Y2JhYWM0 LzEvOGhrNE9qNF9FV3FiekVkcHlGRjgzT1FIWmNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAO5HQgD BAC5HQowDwQCAAIwCQMHASoCSEACADANBgkqhkiG9w0BAQsFAAOCAQEAbUqEZfAI Sjet19Kj/d3uyvZHzoZg+6RYuprkrXhWr/eD2PdGSYenAGllpFwLAdXD4bjZNP/+ 1q2ABF2PR/qK2+fMX7nT04KRkUlnv87bzbJpE5oouCGSjZVWHsfWbgQ7nAwag8lH cW6mcZYdUuR6ISR/X4PKkXbkEl1TZ0N9SH9vcDqXDnOO11jw5Y/MLzA0vqT5Wqm9 fIa8DdLDn3fnn46HeyS88Br9IANFqm3NwtbXETDkGiUAkVLVhNdrhDMawvtHP6gC bl7yR3aF3pFQStw5GDnyLsrcX1FR2qmK7U5E9d+XKUorA08shFPITZ5V4fs4K/+1 Ow63F4kqKtW4kA== -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:45 2026 by rpki-client