This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/Arzcfq5b9bOeJ-sDkrtWteqmoB0.roa File: Arzcfq5b9bOeJ-sDkrtWteqmoB0.roa (raw, json) Hash identifier: 0D64FRm+2vpUSJ11ctj2H0QGBlqAOwuUf57RFyWd8mI= Subject key identifier: 02:BC:DC:7E:AE:5B:F5:B3:9E:27:EB:03:92:BB:56:B5:EA:A6:A0:1D Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Certificate serial: 019B79ED3BC377B73C20F7383D3BED6F96FB Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/Arzcfq5b9bOeJ-sDkrtWteqmoB0.roa Signing time: Thu 01 Jan 2026 14:19:09 +0000 ROA not before: Thu 01 Jan 2026 14:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 86.104.215.0/24 maxlen: 24 89.32.200.0/24 maxlen: 24 89.32.204.0/24 maxlen: 24 89.33.83.0/24 maxlen: 24 89.47.34.0/24 maxlen: 24 103.47.52.0/22 maxlen: 22 162.218.158.0/24 maxlen: 24 188.215.5.0/24 maxlen: 24 194.26.149.0/24 maxlen: 24 212.102.116.0/24 maxlen: 24 2a07:4a80::/29 maxlen: 29 2a0a:eb00::/32 maxlen: 32 2a0a:eb01::/32 maxlen: 32 2a0a:eb02::/32 maxlen: 32 2a0a:eb03::/32 maxlen: 32 2a0a:eb04::/32 maxlen: 32 2a0a:eb05::/32 maxlen: 32 2a0a:eb06::/32 maxlen: 32 2a0a:eb07::/32 maxlen: 32 2a0f:c840::/32 maxlen: 32 2a0f:c841::/32 maxlen: 32 2a0f:c842::/32 maxlen: 32 2a0f:c843::/32 maxlen: 32 2a0f:c844::/32 maxlen: 32 2a0f:c845::/32 maxlen: 32 2a0f:c846::/32 maxlen: 32 2a0f:c847::/32 maxlen: 32 2a11:3bc0::/29 maxlen: 29 2a11:3bc0::/32 maxlen: 32 2a11:3bc1::/32 maxlen: 32 2a11:3bc2::/32 maxlen: 32 2a11:3bc3::/32 maxlen: 32 2a11:3bc4::/32 maxlen: 32 2a11:3bc5::/32 maxlen: 32 2a11:3bc6::/32 maxlen: 32 2a11:3bc7::/32 maxlen: 32 2a12:7700::/32 maxlen: 32 2a12:7701::/32 maxlen: 32 2a12:7702::/32 maxlen: 32 2a12:7703::/32 maxlen: 32 2a12:7704::/32 maxlen: 32 2a12:7705::/32 maxlen: 32 2a12:7706::/32 maxlen: 32 2a12:7707::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3b:c3:77:b7:3c:20:f7:38:3d:3b:ed:6f:96:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Validity Not Before: Jan 1 14:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02bcdc7eae5bf5b39e27eb0392bb56b5eaa6a01d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0a:0a:f5:0d:37:0a:0e:4a:ae:a9:83:63:9f: d8:5c:fb:ba:35:07:1a:6d:0d:3e:c9:67:bd:0f:18: 31:2c:19:b9:ad:b7:f2:b1:fc:c2:53:5c:95:b1:c1: 5b:ec:21:43:9b:9a:78:f5:3c:84:a4:e2:57:d9:f9: 77:74:4c:fc:81:80:5b:30:59:dc:c7:f6:52:8b:ef: 13:ee:c2:2a:64:9d:74:62:58:f3:6c:62:b8:40:ed: 7a:52:a3:77:c4:44:d9:d9:fc:a7:f7:d5:1c:83:36: c5:0b:20:6a:23:1e:c0:8c:50:bb:64:07:4c:1f:82: 3a:47:a5:5a:4a:a4:f5:1a:55:6a:58:78:21:2f:ce: 89:09:af:9a:40:74:6a:c1:20:63:02:0c:91:6c:c9: 21:a2:95:f5:ca:fa:a3:fa:1d:c0:cf:da:11:64:24: 86:c0:28:91:98:38:b0:0a:35:9b:e0:ab:07:57:ae: 30:c6:29:66:43:73:26:05:f4:dc:a9:7a:57:fd:e4: a3:f1:95:9a:38:54:94:16:67:af:06:c9:a9:34:44: 14:5a:47:89:5d:0a:d1:fe:e4:0c:7a:98:ba:c2:f2: 2a:27:2e:e5:4b:33:9e:8e:92:16:0c:50:ae:ac:09: 0c:1a:4b:60:3c:4c:18:c8:fe:87:1b:70:73:ef:a8: 68:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BC:DC:7E:AE:5B:F5:B3:9E:27:EB:03:92:BB:56:B5:EA:A6:A0:1D X509v3 Authority Key Identifier: keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/Arzcfq5b9bOeJ-sDkrtWteqmoB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.104.215.0/24 89.32.200.0/24 89.32.204.0/24 89.33.83.0/24 89.47.34.0/24 103.47.52.0/22 162.218.158.0/24 188.215.5.0/24 194.26.149.0/24 212.102.116.0/24 IPv6: 2a07:4a80::/29 2a0a:eb00::/29 2a0f:c840::/29 2a11:3bc0::/29 2a12:7700::/29 Signature Algorithm: sha256WithRSAEncryption 78:6b:7b:af:2e:05:ea:a4:d7:a5:66:57:81:c7:5b:ea:91:b6: 28:8f:c1:33:23:20:6d:a1:db:09:0d:03:b0:47:cf:ba:e9:d5: 0d:7a:5e:e0:c6:01:c7:4d:3e:ff:78:35:69:85:c0:2f:8d:a6: 1c:37:c1:0f:8f:cc:d6:97:48:c7:21:98:96:65:7c:bf:06:9e: db:48:ba:1c:89:c2:16:2c:96:ac:2c:bb:71:21:99:ff:90:85: 69:70:8e:3d:fd:50:2b:f5:d5:27:7a:54:35:ba:46:fe:f6:93: 78:44:fd:2b:21:2a:da:59:bd:fd:b6:cb:42:64:b0:74:99:7c: b0:db:ce:8d:9a:36:ea:ac:d3:41:6f:93:73:5b:1f:db:8f:a6: 13:b0:c1:2d:92:6d:01:9e:d5:29:87:32:bc:36:d5:ff:67:a8: db:99:de:dd:9c:c4:a3:8a:41:67:f1:aa:65:00:81:81:c7:45: e5:de:83:24:a2:10:56:fa:a1:19:f4:25:2d:84:68:88:cc:4b: 2b:c9:6d:5f:df:d8:b0:c8:f3:95:ec:88:91:17:06:34:3d:8d: a8:05:ec:14:5e:72:41:5a:f8:b5:9f:b9:e9:75:3a:11:18:bf: a3:51:4f:3e:71:93:d7:69:58:34:16:e5:c4:66:09:18:ea:f6: d4:74:35:9b -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgISAZt57TvDd7c8IPc4PTvtb5b7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5 MTk3ZjIwHhcNMjYwMTAxMTQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmJjZGM3ZWFlNWJmNWIzOWUyN2ViMDM5MmJiNTZiNWVhYTZhMDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwoK9Q03Cg5KrqmDY5/YXPu6NQca bQ0+yWe9DxgxLBm5rbfysfzCU1yVscFb7CFDm5p49TyEpOJX2fl3dEz8gYBbMFnc x/ZSi+8T7sIqZJ10YljzbGK4QO16UqN3xETZ2fyn99UcgzbFCyBqIx7AjFC7ZAdM H4I6R6VaSqT1GlVqWHghL86JCa+aQHRqwSBjAgyRbMkhopX1yvqj+h3Az9oRZCSG wCiRmDiwCjWb4KsHV64wxilmQ3MmBfTcqXpX/eSj8ZWaOFSUFmevBsmpNEQUWkeJ XQrR/uQMepi6wvIqJy7lSzOejpIWDFCurAkMGktgPEwYyP6HG3Bz76hofQIDAQAB o4ICazCCAmcwHQYDVR0OBBYEFAK83H6uW/WznifrA5K7VrXqpqAdMB8GA1UdIwQY MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt MmQxNDNkN2I4NTNjLzEvQXJ6Y2ZxNWI5Yk9lSi1zRGtydFd0ZXFtb0IwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGABggrBgEFBQcBBwEB/wRxMG8wQgQCAAEwPAMEAFZo1wME AFkgyAMEAFkgzAMEAFkhUwMEAFkvIgMEAmcvNAMEAKLangMEALzXBQMEAMIalQME ANRmdDApBAIAAjAjAwUDKgdKgAMFAyoK6wADBQMqD8hAAwUDKhE7wAMFAyoSdwAw DQYJKoZIhvcNAQELBQADggEBAHhre68uBeqk16VmV4HHW+qRtiiPwTMjIG2h2wkN A7BHz7rp1Q16XuDGAcdNPv94NWmFwC+Nphw3wQ+PzNaXSMchmJZlfL8GnttIuhyJ whYslqwsu3Ehmf+QhWlwjj39UCv11Sd6VDW6Rv72k3hE/SshKtpZvf22y0JksHSZ fLDbzo2aNuqs00Fvk3NbH9uPphOwwS2SbQGe1SmHMrw21f9nqNuZ3t2cxKOKQWfx qmUAgYHHReXegySiEFb6oRn0JS2EaIjMSyvJbV/f2LDI85XsiJEXBjQ9jagF7BRe ckFa+LWfuel1OhEYv6NRTz5xk9dpWDQW5cRmCRjq9tR0NZs= -----END CERTIFICATE-----Generated at Sun Jan 25 13:00:24 2026 by rpki-client