This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/i7jxo6_GB1o_OmBl3PrmVS4XnPA.roa File: i7jxo6_GB1o_OmBl3PrmVS4XnPA.roa (raw, json) Hash identifier: 8NhSbKhEfu8jyqD1wovs3TRW3fNcgXTNne21hQm9qN4= Subject key identifier: 8B:B8:F1:A3:AF:C6:07:5A:3F:3A:60:65:DC:FA:E6:55:2E:17:9C:F0 Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Certificate serial: 019B79ED3B2B7AF046628E46C0FA3379C98C Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/i7jxo6_GB1o_OmBl3PrmVS4XnPA.roa Signing time: Thu 01 Jan 2026 14:19:08 +0000 ROA not before: Thu 01 Jan 2026 14:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209709 IP address blocks: 5.182.12.0/22 maxlen: 22 91.247.40.0/21 maxlen: 21 91.247.48.0/22 maxlen: 22 103.243.204.0/22 maxlen: 23 115.124.32.0/22 maxlen: 23 185.99.28.0/22 maxlen: 22 185.170.108.0/22 maxlen: 22 195.69.77.0/24 maxlen: 24 195.69.78.0/24 maxlen: 24 202.170.196.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3b:2b:7a:f0:46:62:8e:46:c0:fa:33:79:c9:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Validity Not Before: Jan 1 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bb8f1a3afc6075a3f3a6065dcfae6552e179cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b7:cf:67:95:21:e6:e2:24:a7:d1:11:eb:7b: f6:4a:52:dd:a5:78:20:c3:3a:96:51:f5:28:f0:1e: d8:c4:e0:e4:b1:e5:2a:a7:5c:5c:2f:d1:2f:f6:c9: 66:0c:76:0f:f3:21:85:06:65:78:1f:36:f0:8a:0a: 7a:4f:c5:14:82:f1:11:eb:55:af:05:48:3b:cc:5c: 19:30:7b:00:cf:a1:6e:21:c8:ae:4d:63:2e:cd:f8: 79:02:d6:58:08:0f:95:5d:78:3d:23:9a:4a:87:64: 25:14:39:19:e0:72:7a:e6:8b:c8:55:95:9c:e2:a8: a5:4e:7b:2a:57:23:8a:23:1b:d3:16:b7:6d:fc:44: cf:5d:f6:be:2f:bb:a3:e3:c0:26:3f:9b:a4:60:cd: 89:28:c3:a8:89:f7:07:fe:b7:73:6c:71:4e:15:2b: 5f:7a:5e:f8:ab:a1:04:e2:7f:40:32:7f:60:e1:e2: e3:50:3e:bd:84:c7:1d:6b:d4:e6:36:9b:41:48:e9: e0:d7:a6:eb:8b:fe:cf:0e:fc:a0:a4:1b:73:ba:92: 34:86:0e:49:39:d5:99:89:38:f7:79:64:4e:2e:21: fb:2a:0a:02:bc:ef:db:b3:f4:9d:16:91:dd:d8:df: 86:d5:82:27:a8:1c:57:78:a4:26:a7:c0:bb:0d:e0: bd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B8:F1:A3:AF:C6:07:5A:3F:3A:60:65:DC:FA:E6:55:2E:17:9C:F0 X509v3 Authority Key Identifier: keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/i7jxo6_GB1o_OmBl3PrmVS4XnPA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.12.0/22 91.247.40.0-91.247.51.255 103.243.204.0/22 115.124.32.0/22 185.99.28.0/22 185.170.108.0/22 195.69.77.0-195.69.78.255 202.170.196.0/22 Signature Algorithm: sha256WithRSAEncryption 30:1f:e1:8d:7a:98:77:71:68:ba:8d:f1:89:9d:8f:89:43:ed: 4c:de:ba:ef:90:72:70:82:b6:c0:3d:12:00:0d:01:1e:08:e1: 87:4a:6a:dd:e8:90:42:ec:85:a6:e3:fc:42:29:7d:19:66:93: d5:c5:7b:a4:2f:bd:06:ed:5e:bb:c6:bb:b1:83:3a:62:75:b1: 4c:cf:56:28:8e:67:0a:0c:9d:45:2f:38:4a:b9:98:d3:1d:e9: cd:86:65:62:a5:9e:44:dc:d7:6a:f7:3d:08:46:fc:bb:5c:ee: 40:65:4c:3d:0d:fe:3d:7c:82:e8:96:83:ba:b6:7c:12:91:80: d4:b4:43:3f:d0:46:ba:b5:bd:7c:f4:ba:00:e0:a9:04:4f:07: 9e:68:b0:07:09:7c:33:7c:f9:75:aa:f9:4e:4b:39:cd:9a:a9: 59:b1:00:e8:64:4b:9f:71:02:37:ed:b5:95:03:f8:78:d1:76: 2c:c4:a7:8c:bc:24:98:8c:f7:51:95:f3:37:71:db:14:b0:05: 39:35:ad:3f:1a:13:e7:a3:41:e9:ad:0d:d5:39:e1:8c:f4:28: 0a:df:58:0a:2c:16:21:f1:24:14:53:e9:a1:29:d8:f8:ee:bc: 7d:5c:83:2e:37:13:4f:83:bd:23:b0:00:73:31:2a:a3:44:a4: b1:df:ae:84 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt57TsrevBGYo5GwPozecmMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5 MTk3ZjIwHhcNMjYwMTAxMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmI4ZjFhM2FmYzYwNzVhM2YzYTYwNjVkY2ZhZTY1NTJlMTc5Y2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLfPZ5Uh5uIkp9ER63v2SlLdpXgg wzqWUfUo8B7YxODkseUqp1xcL9Ev9slmDHYP8yGFBmV4Hzbwigp6T8UUgvER61Wv BUg7zFwZMHsAz6FuIciuTWMuzfh5AtZYCA+VXXg9I5pKh2QlFDkZ4HJ65ovIVZWc 4qilTnsqVyOKIxvTFrdt/ETPXfa+L7uj48AmP5ukYM2JKMOoifcH/rdzbHFOFStf el74q6EE4n9AMn9g4eLjUD69hMcda9TmNptBSOng16bri/7PDvygpBtzupI0hg5J OdWZiTj3eWROLiH7KgoCvO/bs/SdFpHd2N+G1YInqBxXeKQmp8C7DeC9GQIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFIu48aOvxgdaPzpgZdz65lUuF5zwMB8GA1UdIwQY MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt MmQxNDNkN2I4NTNjLzEvaTdqeG82X0dCMW9fT21CbDNQcm1WUzRYblBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQCBbYMMAwD BANb9ygDBAJb9zADBAJn88wDBAJzfCADBAK5YxwDBAK5qmwwDAMEAMNFTQMEAMNF TgMEAsqqxDANBgkqhkiG9w0BAQsFAAOCAQEAMB/hjXqYd3Fouo3xiZ2PiUPtTN66 75BycIK2wD0SAA0BHgjhh0pq3eiQQuyFpuP8Qil9GWaT1cV7pC+9Bu1eu8a7sYM6 YnWxTM9WKI5nCgydRS84SrmY0x3pzYZlYqWeRNzXavc9CEb8u1zuQGVMPQ3+PXyC 6JaDurZ8EpGA1LRDP9BGurW9fPS6AOCpBE8HnmiwBwl8M3z5dar5Tks5zZqpWbEA 6GRLn3ECN+21lQP4eNF2LMSnjLwkmIz3UZXzN3HbFLAFOTWtPxoT56NB6a0N1Tnh jPQoCt9YCiwWIfEkFFPpoSnY+O68fVyDLjcTT4O9I7AAczEqo0Sksd+uhA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:38:05 2026 by rpki-client