This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/5ApvAMni12n_Tl97hQfErFu1d6c.roa File: 5ApvAMni12n_Tl97hQfErFu1d6c.roa (raw, json) Hash identifier: CMR/4LXkDxQdsem1khNHlRD0gmxgV2kLwB9hrxJKQb0= Subject key identifier: E4:0A:6F:00:C9:E2:D7:69:FF:4E:5F:7B:85:07:C4:AC:5B:B5:77:A7 Certificate issuer: /CN=3cc94ff479778651a605121f1ffe678196328f35 Certificate serial: 019B7D5CEE8C1EE63498DDD15787C5B42C77 Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/5ApvAMni12n_Tl97hQfErFu1d6c.roa Signing time: Fri 02 Jan 2026 06:20:00 +0000 ROA not before: Fri 02 Jan 2026 06:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28929 IP address blocks: 37.77.208.0/20 maxlen: 20 78.26.64.0/18 maxlen: 18 78.26.111.0/24 maxlen: 24 94.73.64.0/18 maxlen: 18 94.73.127.0/24 maxlen: 24 185.29.104.0/22 maxlen: 22 188.228.128.0/17 maxlen: 17 193.25.178.0/23 maxlen: 23 195.47.199.0/24 maxlen: 24 2a02:f8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ee:8c:1e:e6:34:98:dd:d1:57:87:c5:b4:2c:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35 Validity Not Before: Jan 2 06:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e40a6f00c9e2d769ff4e5f7b8507c4ac5bb577a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:83:f7:5b:fc:29:41:e3:6d:76:db:09:42:34: b8:b2:96:bd:be:a9:0d:bf:f3:67:4e:00:85:f0:2f: 7a:46:cc:ae:7d:53:0c:5f:4e:af:60:fc:25:cb:ad: 09:55:8a:33:00:02:a7:c1:76:c6:19:fa:4b:1d:9d: ac:ca:92:78:ce:84:2c:af:ea:c6:09:c6:fc:dd:51: 1c:f1:3b:e5:78:0e:e9:e2:bc:1e:c0:e0:fa:a6:ac: 2a:4f:85:70:33:aa:9b:bb:d2:53:0b:db:0b:4d:fa: f8:88:8a:90:72:99:ff:8c:fd:5c:90:8c:28:1b:68: 83:9f:78:d8:52:5b:14:85:2c:65:fc:bf:4e:60:a9: db:ce:50:31:35:ac:cd:6f:19:e2:08:f8:ec:0c:09: 78:36:8f:8b:8c:46:48:b9:db:4c:2c:61:d8:f1:c7: d0:2f:9f:64:aa:96:bd:a0:d2:29:5b:27:53:53:2e: 42:5a:02:52:48:41:75:5d:55:03:58:0c:68:c6:a3: 82:01:d3:f4:1e:23:5a:b0:14:b8:de:97:d8:ca:62: 56:99:33:e1:7a:0d:8e:53:2f:2e:07:b3:05:41:87: 63:cd:8a:94:98:c8:b7:0e:36:de:14:3b:d4:02:fa: df:a1:8c:26:71:e3:2b:b8:d9:99:64:e7:80:c8:11: b7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0A:6F:00:C9:E2:D7:69:FF:4E:5F:7B:85:07:C4:AC:5B:B5:77:A7 X509v3 Authority Key Identifier: keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/5ApvAMni12n_Tl97hQfErFu1d6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.77.208.0/20 78.26.64.0/18 94.73.64.0/18 185.29.104.0/22 188.228.128.0/17 193.25.178.0/23 195.47.199.0/24 IPv6: 2a02:f8::/32 Signature Algorithm: sha256WithRSAEncryption 23:11:1b:bc:a1:d7:fe:6f:fd:4d:e9:b4:a1:69:33:fb:b2:da: 68:22:b1:00:c8:a1:84:05:12:78:25:39:88:ea:4d:2f:11:e3: 5c:da:12:d4:7a:d0:ce:bb:f7:af:71:be:db:a6:fd:2d:56:ed: 55:7f:3a:4c:68:2d:9b:a4:5c:c6:7d:97:60:9e:33:5c:7c:4c: 27:09:ab:66:94:01:c8:dc:29:a8:6c:00:12:f3:f3:6f:29:87: 13:12:f6:93:98:9c:b7:3e:d7:d3:1a:9f:d5:7d:a2:d6:06:f9: 87:5c:73:c6:2d:35:ad:a2:34:58:92:fc:68:0b:b9:3b:12:0d: cb:59:30:ec:bc:ab:01:f7:4e:f9:c1:b2:b2:69:98:e0:21:c9: 96:5d:6c:f5:25:c1:8d:12:10:0e:cb:3b:83:16:6c:c1:fa:df: 5e:82:a4:db:67:ee:01:3e:5a:38:f3:2c:32:e2:b4:6b:64:fa: 96:b6:c5:b7:21:59:ca:6c:b9:bd:04:49:5d:94:80:4d:c1:02: 5b:ff:7b:78:94:a4:98:3c:12:7a:ee:7a:c7:24:48:1f:26:be: 28:0e:03:db:53:e6:bf:5c:f2:49:4a:48:10:19:55:cb:15:ea: 02:9c:15:b0:72:c0:27:6d:83:b8:24:1d:50:fe:60:65:0f:6f: 53:ad:e5:eb -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt9XO6MHuY0mN3RV4fFtCx3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYzk0ZmY0Nzk3Nzg2NTFhNjA1MTIxZjFmZmU2NzgxOTYz MjhmMzUwHhcNMjYwMTAyMDYyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDBhNmYwMGM5ZTJkNzY5ZmY0ZTVmN2I4NTA3YzRhYzViYjU3N2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroP3W/wpQeNtdtsJQjS4spa9vqkN v/NnTgCF8C96RsyufVMMX06vYPwly60JVYozAAKnwXbGGfpLHZ2sypJ4zoQsr+rG Ccb83VEc8TvleA7p4rwewOD6pqwqT4VwM6qbu9JTC9sLTfr4iIqQcpn/jP1ckIwo G2iDn3jYUlsUhSxl/L9OYKnbzlAxNazNbxniCPjsDAl4No+LjEZIudtMLGHY8cfQ L59kqpa9oNIpWydTUy5CWgJSSEF1XVUDWAxoxqOCAdP0HiNasBS43pfYymJWmTPh eg2OUy8uB7MFQYdjzYqUmMi3DjbeFDvUAvrfoYwmceMruNmZZOeAyBG3GQIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFOQKbwDJ4tdp/05fe4UHxKxbtXenMB8GA1UdIwQY MBaAFDzJT/R5d4ZRpgUSHx/+Z4GWMo81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE1sUDlIbDNobEdtQlJJZkhfNW5nWll5anpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xZTYzYjYtMzk1Ni00ZDEyLWIxOWYt NWJlZjY0MjBhMDI4LzEvNUFwdkFNbmkxMm5fVGw5N2hRZkVyRnUxZDZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8xZTYzYjYtMzk1Ni00ZDEyLWIxOWYtNWJlZjY0MjBhMDI4 LzEvUE1sUDlIbDNobEdtQlJJZkhfNW5nWll5anpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQEJU3QAwQG ThpAAwQGXklAAwQCuR1oAwQHvOSAAwQBwRmyAwQAwy/HMA0EAgACMAcDBQAqAgD4 MA0GCSqGSIb3DQEBCwUAA4IBAQAjERu8odf+b/1N6bShaTP7stpoIrEAyKGEBRJ4 JTmI6k0vEeNc2hLUetDOu/evcb7bpv0tVu1VfzpMaC2bpFzGfZdgnjNcfEwnCatm lAHI3CmobAAS8/NvKYcTEvaTmJy3PtfTGp/VfaLWBvmHXHPGLTWtojRYkvxoC7k7 Eg3LWTDsvKsB9075wbKyaZjgIcmWXWz1JcGNEhAOyzuDFmzB+t9egqTbZ+4BPlo4 8ywy4rRrZPqWtsW3IVnKbLm9BEldlIBNwQJb/3t4lKSYPBJ67nrHJEgfJr4oDgPb U+a/XPJJSkgQGVXLFeoCnBWwcsAnbYO4JB1Q/mBlD29TreXr -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:51 2026 by rpki-client