This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/bF43U3f2C3oZKi5xCJyfrpb0UyU.roa File: bF43U3f2C3oZKi5xCJyfrpb0UyU.roa (raw, json) Hash identifier: xOZJDiJzdJhpqqUUdV/C2PROWovDWV42fskqATRdmx0= Subject key identifier: 6C:5E:37:53:77:F6:0B:7A:19:2A:2E:71:08:9C:9F:AE:96:F4:53:25 Certificate issuer: /CN=969d46361b6af720fb9836acec965b0f52f4b09c Certificate serial: 019B7F15D8E281617942635943591792EA1A Authority key identifier: 96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/bF43U3f2C3oZKi5xCJyfrpb0UyU.roa Signing time: Fri 02 Jan 2026 14:21:36 +0000 ROA not before: Fri 02 Jan 2026 14:21:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29690 IP address blocks: 83.101.128.0/19 maxlen: 19 83.101.128.0/24 maxlen: 24 83.101.129.0/24 maxlen: 24 83.101.137.0/24 maxlen: 24 83.101.138.0/24 maxlen: 24 83.101.139.0/24 maxlen: 24 83.101.140.0/24 maxlen: 24 83.101.141.0/24 maxlen: 24 83.101.143.0/24 maxlen: 24 83.101.149.0/24 maxlen: 24 83.101.150.0/24 maxlen: 24 83.101.151.0/24 maxlen: 24 83.101.154.0/24 maxlen: 24 83.101.155.0/24 maxlen: 24 83.101.156.0/24 maxlen: 24 212.70.32.0/19 maxlen: 19 212.70.32.0/24 maxlen: 24 212.70.34.0/24 maxlen: 24 212.70.36.0/24 maxlen: 24 212.70.40.0/24 maxlen: 24 212.70.45.0/24 maxlen: 24 212.70.47.0/24 maxlen: 24 212.70.48.0/24 maxlen: 24 212.70.49.0/24 maxlen: 24 212.70.50.0/24 maxlen: 24 212.70.51.0/24 maxlen: 24 212.70.52.0/24 maxlen: 24 212.70.53.0/24 maxlen: 24 212.70.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d8:e2:81:61:79:42:63:59:43:59:17:92:ea:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969d46361b6af720fb9836acec965b0f52f4b09c Validity Not Before: Jan 2 14:21:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c5e375377f60b7a192a2e71089c9fae96f45325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:14:16:d8:da:0e:73:4f:58:94:c7:09:90:f9: 95:de:88:49:1a:98:62:7b:7e:11:71:f3:cf:71:b6: 73:ad:65:4b:92:b9:d4:c1:82:09:52:bd:29:ed:80: 05:a7:d1:f0:02:f8:65:a0:9c:6f:23:7a:75:59:6d: 77:9c:88:d9:0e:99:de:17:9d:25:c0:6e:f4:8f:1f: 8e:86:98:c0:c2:53:f1:7c:e0:7c:ab:12:c4:e5:70: 8c:fa:e3:42:03:c2:7e:6e:26:ea:f2:ec:6c:22:21: 2c:70:ba:a5:a1:82:a2:87:14:fd:09:8a:01:b3:20: dc:6e:7e:e7:69:15:82:0e:79:5f:38:2a:9c:59:d9: 33:03:2e:87:2b:09:a6:c0:14:ed:b2:cf:dd:6a:22: 69:0c:be:15:39:aa:54:3f:e2:82:77:a0:91:6e:3c: dc:48:d1:1b:66:c4:91:34:d9:a7:64:39:b2:9f:97: b5:92:d0:84:50:e4:b4:0d:cd:2b:c0:ae:fe:a9:12: 3b:c6:0d:d4:2b:f8:38:b8:c9:7b:0c:31:3e:c5:36: 04:e3:a5:39:f8:1d:ed:75:9d:ea:1c:d9:66:ff:54: a5:43:bd:c0:58:a2:77:84:34:00:23:87:52:9d:b1: 23:8b:37:29:24:ac:a2:65:6c:98:1e:7e:23:04:86: b2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5E:37:53:77:F6:0B:7A:19:2A:2E:71:08:9C:9F:AE:96:F4:53:25 X509v3 Authority Key Identifier: keyid:96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/bF43U3f2C3oZKi5xCJyfrpb0UyU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.101.128.0/19 212.70.32.0/19 Signature Algorithm: sha256WithRSAEncryption 58:71:9f:9f:1f:2e:3f:05:9e:98:99:93:df:9d:0e:12:92:c6: a8:b3:b9:16:1f:ac:30:ee:6f:21:72:32:7b:c2:4f:fa:92:d8: ca:13:84:95:45:ad:2f:57:9a:ba:3c:8d:8f:72:8d:a8:df:3b: f9:37:9b:96:7b:1d:1f:c8:b1:7f:52:f7:8f:cf:2b:09:01:25: b5:c4:5e:52:6f:0a:15:ef:07:4d:c9:99:9a:7b:e4:ea:10:8a: 8d:bf:f0:50:66:b0:12:3e:60:f1:af:b0:f6:06:b7:16:a2:fd: 9b:d4:84:80:1b:50:2c:02:32:20:b4:74:77:8b:72:be:6b:69: 9d:00:73:11:56:55:49:5b:f7:90:86:59:29:d7:44:d6:86:15: 1f:3b:81:a7:7a:92:f7:9d:4f:b9:cd:14:45:14:cc:56:3a:35: 9a:62:09:89:37:b0:45:b4:3d:63:f1:45:4a:18:ee:0c:e1:f4: a2:8a:57:8a:97:f8:0a:dd:ac:fc:fa:1a:ab:89:46:19:54:25: 3c:da:51:40:bc:67:4d:3f:c2:00:2b:45:10:ae:2e:23:bc:65: 1d:f4:ce:10:9f:99:e2:9b:8e:9b:65:21:62:bd:2a:ca:6b:74: ea:15:1d:47:13:53:89:08:53:2e:36:de:32:7f:dd:14:16:59: 3f:15:b3:f8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FdjigWF5QmNZQ1kXkuoaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2OWQ0NjM2MWI2YWY3MjBmYjk4MzZhY2VjOTY1YjBmNTJm NGIwOWMwHhcNMjYwMTAyMTQyMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzVlMzc1Mzc3ZjYwYjdhMTkyYTJlNzEwODljOWZhZTk2ZjQ1MzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghQW2NoOc09YlMcJkPmV3ohJGphi e34RcfPPcbZzrWVLkrnUwYIJUr0p7YAFp9HwAvhloJxvI3p1WW13nIjZDpneF50l wG70jx+OhpjAwlPxfOB8qxLE5XCM+uNCA8J+bibq8uxsIiEscLqloYKihxT9CYoB syDcbn7naRWCDnlfOCqcWdkzAy6HKwmmwBTtss/daiJpDL4VOapUP+KCd6CRbjzc SNEbZsSRNNmnZDmyn5e1ktCEUOS0Dc0rwK7+qRI7xg3UK/g4uMl7DDE+xTYE46U5 +B3tdZ3qHNlm/1SlQ73AWKJ3hDQAI4dSnbEjizcpJKyiZWyYHn4jBIayRwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGxeN1N39gt6GSoucQicn66W9FMlMB8GA1UdIwQY MBaAFJadRjYbavcg+5g2rOyWWw9S9LCcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHAxR05odHE5eUQ3bURhczdKWmJEMUwwc0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi81ZmJjYmItMDBmYS00YWQ3LWE4MDEt NDM2MDAxNzFiOGJkLzEvYkY0M1UzZjJDM29aS2k1eENKeWZycGIwVXlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi81ZmJjYmItMDBmYS00YWQ3LWE4MDEtNDM2MDAxNzFiOGJk LzEvbHAxR05odHE5eUQ3bURhczdKWmJEMUwwc0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFU2WAAwQF 1EYgMA0GCSqGSIb3DQEBCwUAA4IBAQBYcZ+fHy4/BZ6YmZPfnQ4Sksaos7kWH6ww 7m8hcjJ7wk/6ktjKE4SVRa0vV5q6PI2Pco2o3zv5N5uWex0fyLF/UvePzysJASW1 xF5SbwoV7wdNyZmae+TqEIqNv/BQZrASPmDxr7D2BrcWov2b1ISAG1AsAjIgtHR3 i3K+a2mdAHMRVlVJW/eQhlkp10TWhhUfO4GnepL3nU+5zRRFFMxWOjWaYgmJN7BF tD1j8UVKGO4M4fSiileKl/gK3az8+hqriUYZVCU82lFAvGdNP8IAK0UQri4jvGUd 9M4Qn5nim46bZSFivSrKa3TqFR1HE1OJCFMuNt4yf90UFlk/FbP4 -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:50 2026 by rpki-client