This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/A895E3Nb3C65o8ijPlK8Lorwh00.roa File: A895E3Nb3C65o8ijPlK8Lorwh00.roa (raw, json) Hash identifier: tqCw5dUoNXqxDnqcOXcynHp1qTbqM0KgkUMFlaWbuSQ= Subject key identifier: 03:CF:79:13:73:5B:DC:2E:B9:A3:C8:A3:3E:52:BC:2E:8A:F0:87:4D Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e Certificate serial: 019B7EA61AA9797C11ECD2E2160F0F76E845 Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/A895E3Nb3C65o8ijPlK8Lorwh00.roa Signing time: Fri 02 Jan 2026 12:19:33 +0000 ROA not before: Fri 02 Jan 2026 12:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197540 IP address blocks: 152.53.0.0/16 maxlen: 24 152.53.5.0/24 maxlen: 24 152.53.7.0/24 maxlen: 24 152.53.12.0/22 maxlen: 24 152.53.16.0/22 maxlen: 24 152.53.20.0/22 maxlen: 24 152.53.32.0/22 maxlen: 24 152.53.42.0/24 maxlen: 24 152.53.42.0/27 maxlen: 27 152.53.42.64/28 maxlen: 28 152.53.43.0/24 maxlen: 24 152.53.43.64/27 maxlen: 27 152.53.44.0/22 maxlen: 24 152.53.48.0/22 maxlen: 22 152.53.60.0/24 maxlen: 24 152.53.61.0/24 maxlen: 24 152.53.64.0/22 maxlen: 24 152.53.84.0/22 maxlen: 22 152.53.92.0/22 maxlen: 22 152.53.100.0/22 maxlen: 22 152.53.104.0/22 maxlen: 22 152.53.108.0/22 maxlen: 22 152.53.112.0/22 maxlen: 22 152.53.116.0/22 maxlen: 22 152.53.124.0/22 maxlen: 22 152.53.128.0/20 maxlen: 22 152.53.144.0/22 maxlen: 22 152.53.148.0/22 maxlen: 22 152.53.152.0/22 maxlen: 22 152.53.160.0/22 maxlen: 22 152.53.172.0/22 maxlen: 22 152.53.176.0/22 maxlen: 22 152.53.180.0/22 maxlen: 22 152.53.184.0/22 maxlen: 24 152.53.188.0/22 maxlen: 22 152.53.196.0/22 maxlen: 22 152.53.200.0/24 maxlen: 24 152.53.202.0/24 maxlen: 24 152.53.204.0/22 maxlen: 22 152.53.212.0/24 maxlen: 24 152.53.224.0/22 maxlen: 22 152.53.228.0/22 maxlen: 22 152.53.236.0/22 maxlen: 22 152.53.244.0/22 maxlen: 22 152.53.248.0/22 maxlen: 22 152.53.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:1a:a9:79:7c:11:ec:d2:e2:16:0f:0f:76:e8:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e Validity Not Before: Jan 2 12:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03cf7913735bdc2eb9a3c8a33e52bc2e8af0874d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a9:5b:e4:c7:48:e1:bc:87:d7:31:04:25:66: b8:40:e2:25:b8:3b:f2:d7:a5:c5:68:bf:16:85:71: d7:5c:e6:e7:3d:16:66:b1:3e:70:c8:22:9b:4a:c4: c6:8a:91:a0:3f:fa:02:b3:05:5b:43:de:6c:ae:89: 82:93:7d:b9:c2:a1:5a:43:e0:75:a4:12:d5:9f:78: fe:8f:6b:08:13:89:83:f7:89:f2:f9:53:fc:d7:53: 9f:bd:3d:95:be:8a:86:7a:3e:c9:7f:26:b4:e9:e6: 30:0a:28:94:7d:68:36:3b:da:51:c8:8f:ac:80:82: dc:56:04:ea:d0:43:85:24:d7:e4:40:f4:27:a8:e6: 9f:7f:99:5d:51:6e:c1:31:f5:60:7f:a0:11:5a:e4: 8c:5f:69:1f:cc:b2:7e:c9:a6:5c:6a:9b:cb:c0:e4: a4:18:3a:9f:4a:cb:a4:02:14:cc:e8:17:59:ba:7c: 64:30:c7:7c:bb:d2:99:05:72:c0:47:b8:f5:fd:b1: 53:aa:cd:64:2f:7a:5b:19:53:59:30:e3:98:10:9d: 9d:2a:36:11:0e:20:10:79:ea:0c:33:e8:0c:53:df: ff:7a:64:be:17:fe:5e:ad:cd:79:5b:50:9d:f2:6e: ff:a3:2d:5c:c9:3c:73:8b:67:0b:2c:67:ba:c2:87: d3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:CF:79:13:73:5B:DC:2E:B9:A3:C8:A3:3E:52:BC:2E:8A:F0:87:4D X509v3 Authority Key Identifier: keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/A895E3Nb3C65o8ijPlK8Lorwh00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.53.0.0/16 Signature Algorithm: sha256WithRSAEncryption 88:c6:7c:a5:f4:82:bc:e4:98:67:9d:7e:08:0c:d0:d7:8c:b4: fa:c3:d0:0a:a8:fc:6a:3f:3f:f4:a1:a0:8e:62:0e:08:57:d3: 09:a8:04:12:94:37:82:f3:8e:34:c0:cc:18:af:5e:e5:85:3c: 2f:2a:5a:a0:ad:e0:43:e1:17:86:70:e9:6d:5f:c5:96:fa:0b: 7a:d2:be:b6:3c:0f:93:5d:d4:a2:4c:1d:30:f5:ab:d4:b4:e3: 17:46:3e:dc:02:a1:56:84:9a:50:af:33:8b:83:e3:c3:86:ea: 21:1f:4d:68:f1:f4:36:c0:6b:5c:4e:d8:f3:dc:9b:35:74:d4: 6c:b0:e3:17:38:f0:70:c4:9f:82:d3:79:6b:7d:77:39:37:99: 45:55:9a:6e:33:89:3a:03:87:c1:9f:f2:49:39:a4:f7:fe:11: 12:00:2d:6a:fb:7d:00:e4:03:62:ad:8c:6e:cd:42:15:2c:59: b2:03:0b:9b:4e:bb:c1:e9:68:a6:bd:68:e8:bb:d5:38:24:8b: 4c:a3:d4:74:d2:60:3e:0f:0b:9c:47:82:20:d2:f5:0d:0f:75: 2c:a8:ff:64:16:0f:91:bd:1a:ad:3c:2c:83:44:6e:df:58:2b: 36:7d:fe:5c:06:62:25:ae:a9:4a:35:2f:cf:02:92:7a:11:54: db:1a:37:b5 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt+phqpeXwR7NLiFg8PduhFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMGIzN2I2ZjRiNDQ1NjQ1ZTY5OTNhOWM1ZWM2MDg0OTI0 MjVmMGUwHhcNMjYwMTAyMTIxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2NmNzkxMzczNWJkYzJlYjlhM2M4YTMzZTUyYmMyZThhZjA4NzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1alb5MdI4byH1zEEJWa4QOIluDvy 16XFaL8WhXHXXObnPRZmsT5wyCKbSsTGipGgP/oCswVbQ95sromCk325wqFaQ+B1 pBLVn3j+j2sIE4mD94ny+VP811OfvT2VvoqGej7Jfya06eYwCiiUfWg2O9pRyI+s gILcVgTq0EOFJNfkQPQnqOaff5ldUW7BMfVgf6ARWuSMX2kfzLJ+yaZcapvLwOSk GDqfSsukAhTM6BdZunxkMMd8u9KZBXLAR7j1/bFTqs1kL3pbGVNZMOOYEJ2dKjYR DiAQeeoMM+gMU9//emS+F/5erc15W1Cd8m7/oy1cyTxzi2cLLGe6wofTHQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFAPPeRNzW9wuuaPIoz5SvC6K8IdNMB8GA1UdIwQY MBaAFNALN7b0tEVkXmmTqcXsYISSQl8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEt N2RiNjg2OGQ4NDc0LzEvQTg5NUUzTmIzQzY1bzhpalBsSzhMb3J3aDAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEtN2RiNjg2OGQ4NDc0 LzEvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmDUwDQYJ KoZIhvcNAQELBQADggEBAIjGfKX0grzkmGedfggM0NeMtPrD0Aqo/Go/P/ShoI5i DghX0wmoBBKUN4LzjjTAzBivXuWFPC8qWqCt4EPhF4Zw6W1fxZb6C3rSvrY8D5Nd 1KJMHTD1q9S04xdGPtwCoVaEmlCvM4uD48OG6iEfTWjx9DbAa1xO2PPcmzV01Gyw 4xc48HDEn4LTeWt9dzk3mUVVmm4ziToDh8Gf8kk5pPf+ERIALWr7fQDkA2KtjG7N QhUsWbIDC5tOu8HpaKa9aOi71Tgki0yj1HTSYD4PC5xHgiDS9Q0PdSyo/2QWD5G9 Gq08LINEbt9YKzZ9/lwGYiWuqUo1L88CknoRVNsaN7U= -----END CERTIFICATE-----Generated at Mon Jan 26 01:25:10 2026 by rpki-client