This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/r-lSdkFJmIx7S9lbAiwH1l8mV0U.roa File: r-lSdkFJmIx7S9lbAiwH1l8mV0U.roa (raw, json) Hash identifier: ZccLhzPfTQovlv2pD2Hypaasm3jNsKh86uT4/OsCE2s= Subject key identifier: AF:E9:52:76:41:49:98:8C:7B:4B:D9:5B:02:2C:07:D6:5F:26:57:45 Certificate issuer: /CN=738fd9467821d05286f4b33be86176651b6aff3e Certificate serial: 019B7FF244ED3D90176001A856D4CEE6A9FE Authority key identifier: 73:8F:D9:46:78:21:D0:52:86:F4:B3:3B:E8:61:76:65:1B:6A:FF:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/r-lSdkFJmIx7S9lbAiwH1l8mV0U.roa Signing time: Fri 02 Jan 2026 18:22:22 +0000 ROA not before: Fri 02 Jan 2026 18:22:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43633 IP address blocks: 5.180.128.0/22 maxlen: 24 45.128.188.0/22 maxlen: 24 91.195.90.0/23 maxlen: 24 91.195.90.0/24 maxlen: 24 91.195.91.0/24 maxlen: 24 91.213.59.0/24 maxlen: 24 2a06:2b40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:44:ed:3d:90:17:60:01:a8:56:d4:ce:e6:a9:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=738fd9467821d05286f4b33be86176651b6aff3e Validity Not Before: Jan 2 18:22:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afe952764149988c7b4bd95b022c07d65f265745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:62:b0:eb:8a:50:67:58:0d:ae:a4:11:53:a1: 88:99:e4:dd:f4:24:3a:95:bd:d1:8e:14:8e:b4:43: e7:cf:fd:c3:85:b0:73:f5:5c:27:17:29:38:d9:6f: 82:63:fc:6f:a3:8e:e5:a0:cd:2b:0b:ac:87:bc:e8: 42:09:b9:d3:fe:53:19:72:ca:c2:a8:40:c4:e3:5d: 5a:a2:49:af:cb:c9:c6:1d:6f:44:52:86:39:0d:84: 9f:7f:e1:41:a7:83:bb:ad:65:2e:33:1c:e1:49:a3: b6:ee:5d:7b:b4:ed:54:43:2e:8d:d6:26:fb:7e:e0: b8:67:ab:d7:54:89:eb:9d:56:59:4b:1c:2e:3c:a8: ea:6a:2c:1c:48:9d:fc:f7:c1:5b:0a:51:9a:7b:b7: 5d:22:11:77:e7:09:d3:72:fe:5a:51:08:ae:c5:df: 3a:b5:9d:68:36:bb:e9:df:6a:f7:08:f5:2f:70:dd: 12:bf:11:c6:1f:69:5b:27:41:c7:ca:37:ac:79:b3: e1:a2:97:02:ee:3c:67:7f:81:b0:b5:2c:9f:42:61: 52:03:de:ef:77:0d:47:bc:9e:18:2b:e7:9d:00:cd: 40:c3:b7:ed:3e:c2:2e:84:17:9f:4b:27:f3:50:e6: dd:d5:18:36:25:5c:af:a2:1f:f8:19:2f:80:09:eb: 86:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E9:52:76:41:49:98:8C:7B:4B:D9:5B:02:2C:07:D6:5F:26:57:45 X509v3 Authority Key Identifier: keyid:73:8F:D9:46:78:21:D0:52:86:F4:B3:3B:E8:61:76:65:1B:6A:FF:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/r-lSdkFJmIx7S9lbAiwH1l8mV0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.128.0/22 45.128.188.0/22 91.195.90.0/23 91.213.59.0/24 IPv6: 2a06:2b40::/29 Signature Algorithm: sha256WithRSAEncryption 35:35:80:f5:53:c6:3c:fe:a2:04:91:a0:2d:47:d0:48:fa:26: 92:2b:30:24:72:fa:0c:3c:5c:28:95:9d:16:f4:af:93:c1:68: 63:06:80:29:43:82:c1:bd:76:df:6b:bd:e3:84:05:72:c9:ca: f8:27:14:30:89:83:56:52:46:54:ff:53:fa:88:cd:9b:61:f9: 0b:ec:4e:de:bf:fb:53:ef:28:cf:55:79:b5:c7:fd:43:02:b5: ef:e5:77:96:3f:cf:95:07:a1:59:66:f7:73:5e:e3:33:c3:85: 9c:9d:3d:0d:be:5b:c3:c2:7d:a2:8e:29:d9:3f:c1:a5:19:01: 8f:8b:ab:4c:ac:4f:e5:fe:1e:c4:55:99:16:72:50:78:ee:ce: 7f:19:29:cc:70:bc:46:54:bd:27:f5:1e:f4:7d:36:4b:35:42: 37:0e:d8:b2:82:02:14:b7:a4:52:a6:d1:24:cd:fa:5d:b2:7e: e1:b2:3a:55:2c:1c:44:b8:32:84:6c:ff:32:5b:83:e5:99:08: db:50:0b:af:e9:90:4f:36:4b:55:a9:eb:a3:23:8f:b9:e9:a4: 6e:42:99:c3:96:c8:d4:8c:67:13:6f:dc:67:2f:47:eb:1e:47: 8e:30:52:39:d9:5d:72:3f:b1:08:b6:e7:d3:3a:53:0f:dd:79: 86:5e:f2:53 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt/8kTtPZAXYAGoVtTO5qn+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczOGZkOTQ2NzgyMWQwNTI4NmY0YjMzYmU4NjE3NjY1MWI2 YWZmM2UwHhcNMjYwMTAyMTgyMjIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmU5NTI3NjQxNDk5ODhjN2I0YmQ5NWIwMjJjMDdkNjVmMjY1NzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2Kw64pQZ1gNrqQRU6GImeTd9CQ6 lb3RjhSOtEPnz/3DhbBz9VwnFyk42W+CY/xvo47loM0rC6yHvOhCCbnT/lMZcsrC qEDE411aokmvy8nGHW9EUoY5DYSff+FBp4O7rWUuMxzhSaO27l17tO1UQy6N1ib7 fuC4Z6vXVInrnVZZSxwuPKjqaiwcSJ3898FbClGae7ddIhF35wnTcv5aUQiuxd86 tZ1oNrvp32r3CPUvcN0SvxHGH2lbJ0HHyjesebPhopcC7jxnf4GwtSyfQmFSA97v dw1HvJ4YK+edAM1Aw7ftPsIuhBefSyfzUObd1Rg2JVyvoh/4GS+ACeuGnQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFK/pUnZBSZiMe0vZWwIsB9ZfJldFMB8GA1UdIwQY MBaAFHOP2UZ4IdBShvSzO+hhdmUbav8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzRfWlJuZ2gwRktHOUxNNzZHRjJaUnRxX3o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iN2NkOTEtN2U0YS00NmNmLTk0OTgt MDlmYWMwNjk3NjQ5LzEvci1sU2RrRkptSXg3UzlsYkFpd0gxbDhtVjBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iN2NkOTEtN2U0YS00NmNmLTk0OTgtMDlmYWMwNjk3NjQ5 LzEvYzRfWlJuZ2gwRktHOUxNNzZHRjJaUnRxX3o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCBbSAAwQC LYC8AwQBW8NaAwQAW9U7MA0EAgACMAcDBQMqBitAMA0GCSqGSIb3DQEBCwUAA4IB AQA1NYD1U8Y8/qIEkaAtR9BI+iaSKzAkcvoMPFwolZ0W9K+TwWhjBoApQ4LBvXbf a73jhAVyycr4JxQwiYNWUkZU/1P6iM2bYfkL7E7ev/tT7yjPVXm1x/1DArXv5XeW P8+VB6FZZvdzXuMzw4WcnT0NvlvDwn2ijinZP8GlGQGPi6tMrE/l/h7EVZkWclB4 7s5/GSnMcLxGVL0n9R70fTZLNUI3DtiyggIUt6RSptEkzfpdsn7hsjpVLBxEuDKE bP8yW4PlmQjbUAuv6ZBPNktVqeujI4+56aRuQpnDlsjUjGcTb9xnL0frHkeOMFI5 2V1yP7EItufTOlMP3XmGXvJT -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:42 2026 by rpki-client