This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/D9XgvWWebov0kTHT7gIL8Ih7bHs.roa File: D9XgvWWebov0kTHT7gIL8Ih7bHs.roa (raw, json) Hash identifier: aj3nCPdPkIlGQaAtMeiOa/fgxKRQ1tyiiopMxi8yVr4= Subject key identifier: 0F:D5:E0:BD:65:9E:6E:8B:F4:91:31:D3:EE:02:0B:F0:88:7B:6C:7B Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Certificate serial: 019B7FF28306B6A2D3764E570791A654B2F9 Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/D9XgvWWebov0kTHT7gIL8Ih7bHs.roa Signing time: Fri 02 Jan 2026 18:22:38 +0000 ROA not before: Fri 02 Jan 2026 18:22:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60119 IP address blocks: 5.129.176.0/22 maxlen: 22 5.129.176.0/24 maxlen: 24 5.129.177.0/24 maxlen: 24 5.129.178.0/24 maxlen: 24 5.129.179.0/24 maxlen: 24 5.129.182.0/23 maxlen: 23 5.129.182.0/24 maxlen: 24 5.129.183.0/24 maxlen: 24 5.129.188.0/22 maxlen: 22 5.129.188.0/24 maxlen: 24 5.129.189.0/24 maxlen: 24 5.129.190.0/24 maxlen: 24 5.129.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:83:06:b6:a2:d3:76:4e:57:07:91:a6:54:b2:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Validity Not Before: Jan 2 18:22:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0fd5e0bd659e6e8bf49131d3ee020bf0887b6c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8f:d8:44:b0:92:a2:68:46:f9:82:15:02:9a: 1a:54:b1:c3:83:de:d5:5c:de:fb:90:7c:ef:cf:96: 54:12:80:d8:54:a1:a7:0b:52:26:f9:28:08:98:f9: 29:0c:af:1a:00:8b:87:44:c6:d9:bb:50:c2:6d:89: c3:f0:bd:96:35:75:a9:cb:bc:a6:99:d4:8d:35:e6: 4f:a9:4a:34:af:23:9e:69:67:69:29:a7:4e:a6:4e: c2:ce:29:e9:77:30:2e:1a:48:69:63:2a:2f:38:5f: 08:9b:47:be:de:8c:f8:3e:2d:6a:22:89:b6:84:56: 51:98:cd:89:7d:a5:19:61:38:5d:2f:5a:a2:37:a8: 3c:2c:5a:00:13:97:f7:fe:f5:8d:69:9f:53:72:96: 13:ed:67:1b:1e:da:56:b8:eb:5e:10:0b:f8:20:2b: f0:6c:0f:41:1c:f4:61:ad:44:9d:c1:ea:82:27:2a: e7:91:09:ea:06:93:2f:e8:09:54:4b:27:e5:61:dd: a9:04:1a:c7:a1:2e:29:ae:a0:db:12:c0:0f:c5:c6: 57:24:dc:ba:c7:ff:17:70:34:62:62:ce:93:f1:42: 7f:ab:f5:23:80:2d:93:01:1a:a5:57:d9:a8:ab:e5: 5d:11:d0:df:84:ac:ee:3e:d6:aa:47:43:75:0d:c0: 5c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D5:E0:BD:65:9E:6E:8B:F4:91:31:D3:EE:02:0B:F0:88:7B:6C:7B X509v3 Authority Key Identifier: keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/D9XgvWWebov0kTHT7gIL8Ih7bHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.129.176.0/22 5.129.182.0/23 5.129.188.0/22 Signature Algorithm: sha256WithRSAEncryption 12:09:eb:88:6e:b1:8b:66:3c:b0:c5:1b:2f:c9:5d:36:32:50: a4:b3:19:cd:d9:fc:53:a7:c3:33:c0:52:ac:2c:bb:c5:bf:cb: 6b:fd:68:1f:8e:4b:e7:29:cb:04:b1:4a:80:bc:1b:76:7f:f5: 7f:e1:72:02:28:96:a5:86:8e:21:a7:0b:89:27:cc:48:a7:07: d6:a8:14:4f:1a:85:3f:64:3f:0a:38:71:0c:0e:54:23:6e:6a: 86:d9:3d:b8:61:64:9c:5f:7e:45:62:ff:15:51:0b:e3:6a:89: f8:4c:f5:a2:3b:ec:7a:3d:35:ea:83:ed:72:96:1b:68:45:26: 0e:90:dc:05:ac:38:9e:09:55:3a:33:6c:3e:ab:be:93:9a:24: 62:ae:7f:8d:c6:54:64:d3:b5:16:d8:d8:96:cb:51:96:5e:23: 2c:35:1c:e6:be:5f:03:ea:c1:bc:b9:ec:cc:2f:2e:e4:5a:6a: a7:06:65:24:01:01:4e:6e:7a:53:c8:b7:94:3e:10:a6:df:a3: 4a:49:ac:8b:1c:c0:b9:db:62:c5:15:1a:39:a0:4e:ba:b4:fc: 70:e3:cd:5c:e3:79:40:b0:50:b0:7c:96:00:54:07:5a:73:9b: 4d:f3:92:27:8d:6b:28:89:2e:fb:50:ae:6d:19:cf:7c:d4:21: f9:d3:a4:05 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/8oMGtqLTdk5XB5GmVLL5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZGIzZGNkZjVlNmJlZTA5ODI1YzM3YmYzYjhiZGYyOGI2 ZmI1OTMwHhcNMjYwMTAyMTgyMjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmQ1ZTBiZDY1OWU2ZThiZjQ5MTMxZDNlZTAyMGJmMDg4N2I2YzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY/YRLCSomhG+YIVApoaVLHDg97V XN77kHzvz5ZUEoDYVKGnC1Im+SgImPkpDK8aAIuHRMbZu1DCbYnD8L2WNXWpy7ym mdSNNeZPqUo0ryOeaWdpKadOpk7CzinpdzAuGkhpYyovOF8Im0e+3oz4Pi1qIom2 hFZRmM2JfaUZYThdL1qiN6g8LFoAE5f3/vWNaZ9TcpYT7WcbHtpWuOteEAv4ICvw bA9BHPRhrUSdweqCJyrnkQnqBpMv6AlUSyflYd2pBBrHoS4prqDbEsAPxcZXJNy6 x/8XcDRiYs6T8UJ/q/UjgC2TARqlV9moq+VdEdDfhKzuPtaqR0N1DcBcdwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFA/V4L1lnm6L9JEx0+4CC/CIe2x7MB8GA1UdIwQY MBaAFE3bPc315r7gmCXDe/O4vfKLb7WTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEt MjE3MGM1YzFkM2VkLzEvRDlYZ3ZXV2Vib3Ywa1RIVDdnSUw4SWg3YkhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEtMjE3MGM1YzFkM2Vk LzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCBYGwAwQB BYG2AwQCBYG8MA0GCSqGSIb3DQEBCwUAA4IBAQASCeuIbrGLZjywxRsvyV02MlCk sxnN2fxTp8MzwFKsLLvFv8tr/WgfjkvnKcsEsUqAvBt2f/V/4XICKJalho4hpwuJ J8xIpwfWqBRPGoU/ZD8KOHEMDlQjbmqG2T24YWScX35FYv8VUQvjaon4TPWiO+x6 PTXqg+1ylhtoRSYOkNwFrDieCVU6M2w+q76TmiRirn+NxlRk07UW2NiWy1GWXiMs NRzmvl8D6sG8uezMLy7kWmqnBmUkAQFObnpTyLeUPhCm36NKSayLHMC522LFFRo5 oE66tPxw481c43lAsFCwfJYAVAdac5tN85InjWsoiS77UK5tGc981CH506QF -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:09 2026 by rpki-client