This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/R-fseu38BXZxWnP0LRUzT06RrV0.roa File: R-fseu38BXZxWnP0LRUzT06RrV0.roa (raw, json) Hash identifier: WBYn5t2LzQwRk5CEk7ZRIj5Al789B5wx6blN8odTtJA= Subject key identifier: 47:E7:EC:7A:ED:FC:05:76:71:5A:73:F4:2D:15:33:4F:4E:91:AD:5D Certificate issuer: /CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125 Certificate serial: 019B7E38F12A08FC8C3794AD4F85EB22B9F1 Authority key identifier: BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/R-fseu38BXZxWnP0LRUzT06RrV0.roa Signing time: Fri 02 Jan 2026 10:20:19 +0000 ROA not before: Fri 02 Jan 2026 10:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57112 IP address blocks: 5.104.112.0/20 maxlen: 20 31.177.32.0/21 maxlen: 21 45.84.40.0/22 maxlen: 24 45.91.56.0/22 maxlen: 22 45.92.224.0/22 maxlen: 22 81.30.64.0/20 maxlen: 20 86.111.208.0/22 maxlen: 22 185.23.140.0/22 maxlen: 22 185.33.152.0/22 maxlen: 22 185.38.152.0/22 maxlen: 22 185.70.236.0/22 maxlen: 22 185.72.160.0/22 maxlen: 22 185.82.192.0/22 maxlen: 22 185.87.104.0/22 maxlen: 22 185.87.116.0/22 maxlen: 22 185.87.156.0/22 maxlen: 22 185.103.236.0/22 maxlen: 22 185.113.172.0/22 maxlen: 22 185.133.108.0/22 maxlen: 22 185.192.144.0/22 maxlen: 24 185.192.147.0/24 maxlen: 24 185.236.16.0/22 maxlen: 24 217.76.16.0/20 maxlen: 20 217.76.16.0/21 maxlen: 21 217.76.24.0/21 maxlen: 21 2a0a:4980::/29 maxlen: 29 2a0e:c40::/29 maxlen: 29 2a0e:9680::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f1:2a:08:fc:8c:37:94:ad:4f:85:eb:22:b9:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125 Validity Not Before: Jan 2 10:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47e7ec7aedfc0576715a73f42d15334f4e91ad5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5c:73:70:ea:36:9c:f3:62:e5:3f:f6:01:dc: 59:15:c1:e3:c8:1e:c7:0c:06:af:e9:ed:db:7b:e4: bc:49:4e:43:98:b3:c2:99:e5:29:85:6a:a4:d4:8b: 50:86:02:58:34:0b:6a:6b:2e:3e:0d:18:cd:90:91: f7:0f:5f:64:be:68:21:38:93:26:59:f1:6e:04:2a: 94:17:bc:91:1c:62:d6:b0:0f:d6:03:38:c4:45:80: de:22:e0:70:fb:4b:88:f8:98:69:d7:85:bb:2f:11: 95:39:4c:53:20:cd:65:58:d9:d1:f5:b5:46:ae:c9: 88:65:18:a3:66:dd:d3:7d:2c:8b:70:ee:e7:81:42: 11:53:a7:8d:00:81:cf:a9:21:53:a9:2d:9e:39:a3: c3:6f:12:86:a5:5a:5b:66:b3:c1:5c:b4:e3:e5:19: 38:a2:49:20:02:1e:06:d6:22:60:5c:3e:97:8d:be: a6:ce:df:ac:d8:ed:ab:32:f5:d3:9c:c4:33:cd:1b: 0a:b4:37:a9:7a:18:5c:29:4c:8c:bd:e2:79:4e:72: 57:63:14:3e:c2:ca:5f:d3:f4:46:8f:33:78:08:f9: ce:ba:65:c4:40:1d:3e:9a:51:f3:bf:2b:86:7f:0b: 84:f1:db:fe:cd:29:86:cb:0e:19:77:d7:3b:25:49: e3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E7:EC:7A:ED:FC:05:76:71:5A:73:F4:2D:15:33:4F:4E:91:AD:5D X509v3 Authority Key Identifier: keyid:BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/R-fseu38BXZxWnP0LRUzT06RrV0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.112.0/20 31.177.32.0/21 45.84.40.0/22 45.91.56.0/22 45.92.224.0/22 81.30.64.0/20 86.111.208.0/22 185.23.140.0/22 185.33.152.0/22 185.38.152.0/22 185.70.236.0/22 185.72.160.0/22 185.82.192.0/22 185.87.104.0/22 185.87.116.0/22 185.87.156.0/22 185.103.236.0/22 185.113.172.0/22 185.133.108.0/22 185.192.144.0/22 185.236.16.0/22 217.76.16.0/20 IPv6: 2a0a:4980::/29 2a0e:c40::/29 2a0e:9680::/29 Signature Algorithm: sha256WithRSAEncryption 3e:24:41:23:e5:c1:d0:71:db:c1:53:ee:f9:8b:1c:95:c9:98: 77:5f:7e:8d:e7:6f:4a:f1:5b:ad:54:94:3b:6d:41:66:8a:99: e6:a0:fd:fa:be:3d:b6:55:1d:2f:36:15:0c:50:59:51:3c:10: 39:a6:c4:5e:bd:93:6c:f5:7e:31:1c:22:24:69:15:d3:c5:99: fc:b6:b0:d9:09:c1:7e:ab:c7:68:53:14:44:6e:9e:37:ed:e9: 68:c2:60:0c:0d:41:7a:35:0a:36:1e:5c:92:65:4a:10:94:ce: 8c:ba:3c:ee:e1:80:d2:a7:9d:77:8f:8c:a6:fb:a7:45:87:ad: 4a:ef:55:b6:cf:ff:f7:f5:4b:8e:14:13:78:43:bb:05:86:93: 72:de:08:ec:99:f4:b9:21:54:7b:45:5b:ac:92:76:f7:50:48: a0:e7:0a:22:cc:2a:2e:47:3e:c3:88:5a:95:dc:53:85:9d:81: fb:45:d0:88:e8:f4:e9:79:f2:23:63:66:ae:06:2a:47:02:2a: 02:3b:bd:c6:b2:d0:4c:ae:9a:a0:0c:1e:f5:cd:e9:2b:bd:4b: 09:e3:fc:fd:b5:df:54:3f:2d:df:54:a8:62:a4:23:e0:6e:07: 25:7d:29:d9:51:df:c6:a6:39:a3:ec:e8:29:69:9c:9a:38:f4: d4:80:a6:82 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgISAZt+OPEqCPyMN5StT4XrIrnxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYzQ3MGU5YjU4ZTU1N2VhOGMxZGJlZGFlYjljNmE1ZmM0 NTUxMjUwHhcNMjYwMTAyMTAyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2U3ZWM3YWVkZmMwNTc2NzE1YTczZjQyZDE1MzM0ZjRlOTFhZDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplxzcOo2nPNi5T/2AdxZFcHjyB7H DAav6e3be+S8SU5DmLPCmeUphWqk1ItQhgJYNAtqay4+DRjNkJH3D19kvmghOJMm WfFuBCqUF7yRHGLWsA/WAzjERYDeIuBw+0uI+Jhp14W7LxGVOUxTIM1lWNnR9bVG rsmIZRijZt3TfSyLcO7ngUIRU6eNAIHPqSFTqS2eOaPDbxKGpVpbZrPBXLTj5Rk4 okkgAh4G1iJgXD6Xjb6mzt+s2O2rMvXTnMQzzRsKtDepehhcKUyMveJ5TnJXYxQ+ wspf0/RGjzN4CPnOumXEQB0+mlHzvyuGfwuE8dv+zSmGyw4Zd9c7JUnjYQIDAQAB o4ICqTCCAqUwHQYDVR0OBBYEFEfn7Hrt/AV2cVpz9C0VM09Oka1dMB8GA1UdIwQY MBaAFL/EcOm1jlV+qMHb7a65xqX8RVElMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yN2IzOWItMDQ0OS00YzY0LWJhNzkt YTJhYTY1NDBmODc1LzEvUi1mc2V1MzhCWFp4V25QMExSVXpUMDZSclYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8yN2IzOWItMDQ0OS00YzY0LWJhNzktYTJhYTY1NDBmODc1 LzEvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG+BggrBgEFBQcBBwEB/wSBrjCBqzCBiwQCAAEwgYQDBAQF aHADBAMfsSADBAItVCgDBAItWzgDBAItXOADBARRHkADBAJWb9ADBAK5F4wDBAK5 IZgDBAK5JpgDBAK5RuwDBAK5SKADBAK5UsADBAK5V2gDBAK5V3QDBAK5V5wDBAK5 Z+wDBAK5cawDBAK5hWwDBAK5wJADBAK57BADBATZTBAwGwQCAAIwFQMFAyoKSYAD BQMqDgxAAwUDKg6WgDANBgkqhkiG9w0BAQsFAAOCAQEAPiRBI+XB0HHbwVPu+Ysc lcmYd19+jedvSvFbrVSUO21BZoqZ5qD9+r49tlUdLzYVDFBZUTwQOabEXr2TbPV+ MRwiJGkV08WZ/Law2QnBfqvHaFMURG6eN+3paMJgDA1BejUKNh5ckmVKEJTOjLo8 7uGA0qedd4+MpvunRYetSu9Vts//9/VLjhQTeEO7BYaTct4I7Jn0uSFUe0VbrJJ2 91BIoOcKIswqLkc+w4haldxThZ2B+0XQiOj06XnyI2NmrgYqRwIqAju9xrLQTK6a oAwe9c3pK71LCeP8/bXfVD8t31SoYqQj4G4HJX0p2VHfxqY5o+zoKWmcmjj01ICm gg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:28:02 2026 by rpki-client