This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/sVAk55K1bjvD6NWoqyy6bpvKPNM.roa File: sVAk55K1bjvD6NWoqyy6bpvKPNM.roa (raw, json) Hash identifier: PMewucLZTeF6kJJLzoads50StAWlilqhYdIQchwQaB0= Subject key identifier: B1:50:24:E7:92:B5:6E:3B:C3:E8:D5:A8:AB:2C:BA:6E:9B:CA:3C:D3 Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Certificate serial: 019B79ED38F3FDF3E6FDBE49A5D9018EB598 Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/sVAk55K1bjvD6NWoqyy6bpvKPNM.roa Signing time: Thu 01 Jan 2026 14:19:08 +0000 ROA not before: Thu 01 Jan 2026 14:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133944 IP address blocks: 43.245.116.0/23 maxlen: 23 45.141.80.0/22 maxlen: 22 193.148.92.0/23 maxlen: 23 207.244.216.0/22 maxlen: 22 209.35.4.0/23 maxlen: 23 209.35.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:38:f3:fd:f3:e6:fd:be:49:a5:d9:01:8e:b5:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Validity Not Before: Jan 1 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b15024e792b56e3bc3e8d5a8ab2cba6e9bca3cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:30:c3:ef:f9:e8:cb:11:4a:29:15:0d:57:8d: e9:be:25:ee:6b:d2:5d:9f:a0:aa:1f:94:56:7b:cc: df:77:ec:a8:a8:99:5e:c5:f7:e6:e9:01:c0:12:2a: 4f:86:14:16:eb:95:5b:0f:bb:1c:1d:5e:ac:bb:21: 1e:34:95:a6:e4:1f:fa:8a:35:82:7c:66:4f:68:45: db:a7:1e:db:b2:ff:d2:92:56:c5:6d:f0:ec:b8:55: de:e3:48:18:6a:ad:3c:c0:4e:28:99:55:80:0a:8c: 63:83:2c:5e:7e:db:87:30:b1:29:47:2b:6e:2b:a5: 9f:77:0b:26:30:32:87:4e:c0:32:19:a9:44:0b:42: 02:34:72:bc:95:ae:a9:39:f9:15:f0:71:45:a5:09: 1f:47:ce:5c:3d:fa:e6:60:73:eb:c2:10:ca:17:8c: 53:f3:48:72:cc:7a:79:75:76:32:86:d3:ea:3d:0b: 98:46:20:05:a6:a1:6a:c5:3e:0a:c1:8f:c1:bf:b7: e9:36:0b:45:8a:13:d9:66:64:6b:1b:6d:4b:85:e2: 6d:c7:7d:c0:d0:a6:31:4c:f6:29:6f:e1:7a:19:9a: bd:08:60:d1:10:91:9e:90:48:dd:6e:8c:d1:00:1b: b6:e5:20:6f:14:60:d1:67:62:4a:d8:a6:07:d9:a5: c0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:50:24:E7:92:B5:6E:3B:C3:E8:D5:A8:AB:2C:BA:6E:9B:CA:3C:D3 X509v3 Authority Key Identifier: keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/sVAk55K1bjvD6NWoqyy6bpvKPNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.245.116.0/23 45.141.80.0/22 193.148.92.0/23 207.244.216.0/22 209.35.4.0/23 209.35.113.0/24 Signature Algorithm: sha256WithRSAEncryption ab:fc:25:da:bb:97:93:6a:78:21:d3:81:18:8a:b1:cb:6e:c5: 18:27:a9:17:79:62:0d:70:38:fe:1a:4a:aa:cc:cc:9c:1f:46: 5d:f4:4b:c2:c3:3f:72:da:50:5e:f5:e8:68:f7:d2:97:f3:fb: 11:a3:58:77:4b:95:5d:93:21:5a:6b:29:8b:e2:15:f4:79:bf: c7:3d:07:5c:51:a3:02:c8:00:0e:c3:1b:1b:cf:a1:88:19:50: 17:c0:c4:e9:d9:b3:b0:02:f4:06:2c:c3:fb:42:b0:a4:12:34: c4:0a:25:b9:26:4f:26:fa:46:e7:98:56:9f:90:68:98:0e:ad: 76:04:e2:1a:25:b6:c2:b7:9c:60:07:f1:cb:89:7c:2d:bb:5b: 2b:3c:37:fb:17:a3:68:70:f5:30:73:c8:12:3f:9b:e2:c2:f3: ee:9d:43:94:75:66:a1:3d:82:17:bd:7c:11:c3:da:5a:f3:f4: fe:0b:f7:78:d3:ea:53:7e:56:ce:97:eb:0f:b2:a0:5f:f4:4a: 4c:45:c8:c1:dd:c7:27:b4:ff:15:84:d7:4f:81:47:81:ee:0a: ca:33:a2:af:9d:9c:d7:2f:fe:b1:5d:0e:b5:5c:38:9b:6f:2c: 6a:c4:4e:67:70:4c:01:46:9d:c9:ff:04:dc:50:f6:7f:b5:8d: 94:cf:41:96 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt57Tjz/fPm/b5JpdkBjrWYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5 MTk3ZjIwHhcNMjYwMTAxMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTUwMjRlNzkyYjU2ZTNiYzNlOGQ1YThhYjJjYmE2ZTliY2EzY2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjDD7/noyxFKKRUNV43pviXua9Jd n6CqH5RWe8zfd+yoqJlexffm6QHAEipPhhQW65VbD7scHV6suyEeNJWm5B/6ijWC fGZPaEXbpx7bsv/SklbFbfDsuFXe40gYaq08wE4omVWACoxjgyxeftuHMLEpRytu K6WfdwsmMDKHTsAyGalEC0ICNHK8la6pOfkV8HFFpQkfR85cPfrmYHPrwhDKF4xT 80hyzHp5dXYyhtPqPQuYRiAFpqFqxT4KwY/Bv7fpNgtFihPZZmRrG21LheJtx33A 0KYxTPYpb+F6GZq9CGDREJGekEjdbozRABu25SBvFGDRZ2JK2KYH2aXAMwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFLFQJOeStW47w+jVqKssum6byjzTMB8GA1UdIwQY MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt MmQxNDNkN2I4NTNjLzEvc1ZBazU1SzFianZENk5Xb3F5eTZicHZLUE5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBK/V0AwQC LY1QAwQBwZRcAwQCz/TYAwQB0SMEAwQA0SNxMA0GCSqGSIb3DQEBCwUAA4IBAQCr /CXau5eTangh04EYirHLbsUYJ6kXeWINcDj+GkqqzMycH0Zd9EvCwz9y2lBe9eho 99KX8/sRo1h3S5VdkyFaaymL4hX0eb/HPQdcUaMCyAAOwxsbz6GIGVAXwMTp2bOw AvQGLMP7QrCkEjTECiW5Jk8m+kbnmFafkGiYDq12BOIaJbbCt5xgB/HLiXwtu1sr PDf7F6NocPUwc8gSP5viwvPunUOUdWahPYIXvXwRw9pa8/T+C/d40+pTflbOl+sP sqBf9EpMRcjB3ccntP8VhNdPgUeB7grKM6KvnZzXL/6xXQ61XDibbyxqxE5ncEwB Rp3J/wTcUPZ/tY2Uz0GW -----END CERTIFICATE-----Generated at Sun Jan 25 17:35:41 2026 by rpki-client