This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/RDq50lH1bmkT8vqHJA8F-7f2nmQ.roa File: RDq50lH1bmkT8vqHJA8F-7f2nmQ.roa (raw, json) Hash identifier: IWGFsdcNHT1pJQgqJ040THMUt7oZlhEWCHXEnZys69k= Subject key identifier: 44:3A:B9:D2:51:F5:6E:69:13:F2:FA:87:24:0F:05:FB:B7:F6:9E:64 Certificate issuer: /CN=5a955ca458468c5776b8d9936dfe9b0b2668731c Certificate serial: 019B7DC9FBE4F5E3C4A4D4E6F9676AE6B0D8 Authority key identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/RDq50lH1bmkT8vqHJA8F-7f2nmQ.roa Signing time: Fri 02 Jan 2026 08:19:07 +0000 ROA not before: Fri 02 Jan 2026 08:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57173 IP address blocks: 87.247.224.0/24 maxlen: 24 87.247.226.0/24 maxlen: 24 87.247.230.0/23 maxlen: 23 87.247.230.0/24 maxlen: 24 87.247.231.0/24 maxlen: 24 185.197.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:fb:e4:f5:e3:c4:a4:d4:e6:f9:67:6a:e6:b0:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a955ca458468c5776b8d9936dfe9b0b2668731c Validity Not Before: Jan 2 08:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=443ab9d251f56e6913f2fa87240f05fbb7f69e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dd:5f:6d:77:e9:d1:fd:18:3b:d2:87:d6:b4: 65:33:fc:d0:82:b2:b1:02:5f:e4:bc:95:75:ba:db: dd:9c:6b:86:da:34:1b:7c:c1:94:0a:9b:b7:2c:2e: a9:bc:8a:45:59:d4:9e:24:c2:69:d2:25:11:5f:b6: b7:94:b8:f0:97:6d:f7:29:9f:a1:4d:b1:80:87:10: 61:f5:85:d9:d3:fb:4d:a7:6a:e5:bd:06:40:5a:7b: 05:72:3f:1d:10:a0:28:31:89:63:19:ec:a2:74:50: 84:0f:1f:cf:ad:81:22:f3:7c:0d:f1:ba:bf:6b:32: 52:6d:04:bf:82:74:a1:aa:79:e2:08:1c:e5:eb:37: e7:a8:0f:e2:2b:5c:4a:fd:0a:b2:ea:9f:95:60:6d: 96:d3:e3:21:76:ce:36:be:52:9d:08:e9:9f:0f:1b: c8:77:af:66:1d:87:85:a6:8e:17:fe:a9:8c:bc:ab: e9:cd:d6:c4:af:7c:59:31:bc:65:c9:97:54:6d:a9: 63:44:87:6d:41:c5:b6:3e:a8:f3:4c:c6:05:35:5c: cd:40:9b:df:e3:16:9e:b0:c5:2d:00:29:9b:83:86: ec:da:76:cb:a9:5d:e7:54:29:91:d8:07:7d:43:e9: 7d:58:d0:ef:9d:c6:23:b4:be:a0:83:5a:8f:4e:e5: f4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3A:B9:D2:51:F5:6E:69:13:F2:FA:87:24:0F:05:FB:B7:F6:9E:64 X509v3 Authority Key Identifier: keyid:5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/RDq50lH1bmkT8vqHJA8F-7f2nmQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.247.224.0/24 87.247.226.0/24 87.247.230.0/23 185.197.100.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:e4:cc:2a:f8:26:a1:0e:c1:99:c9:ea:44:c5:4d:a9:d9:ac: b4:fc:3e:36:98:ea:57:de:53:bd:72:73:fe:f2:b9:23:d4:b7: 28:de:52:44:fc:56:f7:b9:78:9e:a1:0c:28:f5:44:37:7a:68: 19:76:6c:39:90:42:95:3e:f0:dc:41:73:6b:be:a7:ad:33:63: bf:43:3f:95:0e:68:c7:14:4e:1a:fe:7a:d2:75:46:7f:70:b2: e4:93:5a:c5:f2:79:98:d9:1d:6c:db:62:88:72:69:90:5a:de: bc:4c:31:53:f2:e9:4a:6c:86:e6:ee:90:6d:c6:1a:ab:a7:da: 44:cc:0d:89:82:12:ef:73:2d:ea:98:a8:63:16:d7:21:2b:b6: fc:9d:22:fa:fd:26:f1:17:b2:40:d7:1d:1f:72:6c:d8:1d:4d: b7:70:22:2b:ef:92:9e:04:41:90:f3:56:79:c9:52:d0:d7:2b: a8:ab:9a:da:9f:b7:a8:ed:c6:f0:54:6c:0b:41:ca:58:4e:18: 69:3e:bc:ca:59:00:f4:97:c0:8c:37:b8:ec:04:f2:5c:37:cd: 3a:b7:d7:84:67:aa:69:3d:99:52:cf:82:7c:02:4a:5b:3d:49: 73:91:f4:20:40:2e:cd:7f:24:b7:59:5a:69:5b:f7:73:0f:43: 91:b0:e0:c2 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9yfvk9ePEpNTm+Wdq5rDYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTU1Y2E0NTg0NjhjNTc3NmI4ZDk5MzZkZmU5YjBiMjY2 ODczMWMwHhcNMjYwMTAyMDgxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDNhYjlkMjUxZjU2ZTY5MTNmMmZhODcyNDBmMDVmYmI3ZjY5ZTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv91fbXfp0f0YO9KH1rRlM/zQgrKx Al/kvJV1utvdnGuG2jQbfMGUCpu3LC6pvIpFWdSeJMJp0iURX7a3lLjwl233KZ+h TbGAhxBh9YXZ0/tNp2rlvQZAWnsFcj8dEKAoMYljGeyidFCEDx/PrYEi83wN8bq/ azJSbQS/gnShqnniCBzl6zfnqA/iK1xK/Qqy6p+VYG2W0+Mhds42vlKdCOmfDxvI d69mHYeFpo4X/qmMvKvpzdbEr3xZMbxlyZdUbaljRIdtQcW2PqjzTMYFNVzNQJvf 4xaesMUtACmbg4bs2nbLqV3nVCmR2Ad9Q+l9WNDvncYjtL6gg1qPTuX0XQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFEQ6udJR9W5pE/L6hyQPBfu39p5kMB8GA1UdIwQY MBaAFFqVXKRYRoxXdrjZk23+mwsmaHMcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BWY3BGaEdqRmQydU5tVGJmNmJDeVpvY3h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iZTlhMDAtZTBiMS00NTQxLTljMGYt MTM4NThkYTg1ZjUzLzEvUkRxNTBsSDFibWtUOHZxSEpBOEYtN2Yybm1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9iZTlhMDAtZTBiMS00NTQxLTljMGYtMTM4NThkYTg1ZjUz LzEvV3BWY3BGaEdqRmQydU5tVGJmNmJDeVpvY3h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAV/fgAwQA V/fiAwQBV/fmAwQAucVkMA0GCSqGSIb3DQEBCwUAA4IBAQB65Mwq+CahDsGZyepE xU2p2ay0/D42mOpX3lO9cnP+8rkj1Lco3lJE/Fb3uXieoQwo9UQ3emgZdmw5kEKV PvDcQXNrvqetM2O/Qz+VDmjHFE4a/nrSdUZ/cLLkk1rF8nmY2R1s22KIcmmQWt68 TDFT8ulKbIbm7pBtxhqrp9pEzA2JghLvcy3qmKhjFtchK7b8nSL6/SbxF7JA1x0f cmzYHU23cCIr75KeBEGQ81Z5yVLQ1yuoq5ran7eo7cbwVGwLQcpYThhpPrzKWQD0 l8CMN7jsBPJcN806t9eEZ6ppPZlSz4J8AkpbPUlzkfQgQC7NfyS3WVppW/dzD0OR sODC -----END CERTIFICATE-----Generated at Sun Jan 25 19:38:08 2026 by rpki-client