This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/f5RT_hHMbwUMnFt-JoJl9jk0aq8.roa File: f5RT_hHMbwUMnFt-JoJl9jk0aq8.roa (raw, json) Hash identifier: R7CzcVcdr1m+4aUYrv9u7aRaRpqSiQ4h6Ml1XYdGdCM= Subject key identifier: 7F:94:53:FE:11:CC:6F:05:0C:9C:5B:7E:26:82:65:F6:39:34:6A:AF Certificate issuer: /CN=0bac82804700ad36538bf86f34c073e971430da5 Certificate serial: 019B7AC891F55D6C54AAD00CDE3FF1FC9EBC Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/f5RT_hHMbwUMnFt-JoJl9jk0aq8.roa Signing time: Thu 01 Jan 2026 18:18:43 +0000 ROA not before: Thu 01 Jan 2026 18:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57021 IP address blocks: 194.58.200.0/24 maxlen: 24 194.58.202.0/24 maxlen: 24 194.58.203.0/24 maxlen: 24 194.58.204.0/24 maxlen: 24 194.58.205.0/24 maxlen: 24 194.58.206.0/24 maxlen: 24 194.58.207.0/24 maxlen: 24 2a01:3f7::/32 maxlen: 48 2a01:3f7::/48 maxlen: 48 2a01:3f7:2::/48 maxlen: 48 2a01:3f7:3::/48 maxlen: 48 2a01:3f7:4::/48 maxlen: 48 2a01:3f7:5::/48 maxlen: 48 2a01:3f7:6::/48 maxlen: 48 2a01:3f7:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:91:f5:5d:6c:54:aa:d0:0c:de:3f:f1:fc:9e:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5 Validity Not Before: Jan 1 18:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f9453fe11cc6f050c9c5b7e268265f639346aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:67:43:34:ee:fa:97:5a:e7:79:41:42:1f:d3: 2a:89:e1:1a:c0:c8:58:c0:0f:7a:89:85:7a:ed:5d: e3:3d:0c:43:83:f0:66:7b:72:98:39:f1:b1:00:d9: ff:5d:6a:c4:e1:e1:1b:2c:ee:61:bc:3a:b7:f1:da: f5:7c:83:b6:49:1b:42:e5:53:2c:03:4f:1c:11:3d: ef:68:7d:d6:59:57:b2:66:b0:a5:ec:b8:06:51:a0: e2:ab:9d:3c:8f:b0:49:4a:8c:3f:7a:52:bf:e0:29: 36:6f:3b:4f:97:96:6b:db:30:61:1e:23:05:27:9e: 1f:a5:0e:68:d9:4b:0e:8f:08:f7:47:41:9c:b1:70: f8:54:53:7a:3a:fc:70:8d:2d:3c:36:61:7c:0a:16: 41:d7:64:92:c6:8a:99:a7:4c:1e:b4:2c:e9:f9:a9: ef:66:ef:da:22:74:71:e4:82:34:34:45:8e:62:a0: 3c:d1:82:5e:e8:b2:e8:e9:e9:16:a2:80:04:f0:d0: 54:49:1e:8e:58:1f:84:16:1e:10:56:52:7b:dc:31: 43:18:2c:7e:60:9f:2c:72:68:13:c1:d0:03:1d:73: 09:b7:99:88:ae:1b:c4:a2:9d:c9:31:8c:de:8c:1f: a7:e9:38:ec:55:7e:1f:ae:17:51:c3:e2:69:26:88: 06:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:94:53:FE:11:CC:6F:05:0C:9C:5B:7E:26:82:65:F6:39:34:6A:AF X509v3 Authority Key Identifier: keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/f5RT_hHMbwUMnFt-JoJl9jk0aq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.58.200.0/24 194.58.202.0-194.58.207.255 IPv6: 2a01:3f7::/32 Signature Algorithm: sha256WithRSAEncryption a3:8d:0d:e6:5c:12:82:aa:15:cb:5e:eb:32:5a:e5:c8:b9:d5: 92:6e:f0:f6:1a:60:00:b8:04:95:da:5b:c2:ec:39:c9:1d:8b: db:eb:e3:c1:89:46:00:fa:ca:3c:c9:d6:da:74:af:8b:1d:a5: ba:38:70:7e:29:2d:ee:25:78:ef:de:a9:8f:be:11:cc:2f:2f: 9e:b8:e3:0d:d2:0b:60:0e:c4:29:49:3b:8b:50:b0:74:b1:f8: c2:5e:2d:dd:01:f5:ea:30:f4:1a:fd:24:3c:b4:45:9d:74:82: 64:43:ad:eb:36:7f:d3:f2:10:63:95:9e:0b:ec:0a:db:95:ef: 72:40:d2:ac:dc:f9:3a:c5:3c:6d:4a:7e:87:3f:51:f6:ed:f6: c7:de:b6:16:69:33:76:d4:15:b0:41:1c:a1:a4:3b:a0:fd:24: 26:d6:7f:a5:78:2a:0e:cf:10:6f:0f:00:8d:10:ab:57:36:f4: 8e:df:80:98:c8:35:42:ad:1a:cf:5b:74:74:d6:be:28:38:78: 50:d1:c9:2b:01:99:97:38:87:4f:98:df:78:31:fa:99:4b:33: cd:22:05:ec:5a:12:5d:c2:18:1c:80:e7:ba:49:f6:b3:b6:48: f3:a4:3f:18:97:ca:83:06:e4:e5:ea:f7:e6:a4:5a:a9:1b:a6: 24:7b:06:b6 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt6yJH1XWxUqtAM3j/x/J68MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYWM4MjgwNDcwMGFkMzY1MzhiZjg2ZjM0YzA3M2U5NzE0 MzBkYTUwHhcNMjYwMTAxMTgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Zjk0NTNmZTExY2M2ZjA1MGM5YzViN2UyNjgyNjVmNjM5MzQ2YWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mdDNO76l1rneUFCH9MqieEawMhY wA96iYV67V3jPQxDg/Bme3KYOfGxANn/XWrE4eEbLO5hvDq38dr1fIO2SRtC5VMs A08cET3vaH3WWVeyZrCl7LgGUaDiq508j7BJSow/elK/4Ck2bztPl5Zr2zBhHiMF J54fpQ5o2UsOjwj3R0GcsXD4VFN6OvxwjS08NmF8ChZB12SSxoqZp0wetCzp+anv Zu/aInRx5II0NEWOYqA80YJe6LLo6ekWooAE8NBUSR6OWB+EFh4QVlJ73DFDGCx+ YJ8scmgTwdADHXMJt5mIrhvEop3JMYzejB+n6TjsVX4frhdRw+JpJogG8QIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFH+UU/4RzG8FDJxbfiaCZfY5NGqvMB8GA1UdIwQY MBaAFAusgoBHAK02U4v4bzTAc+lxQw2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzZ5Q2dFY0FyVFpUaV9odk5NQno2WEZERGFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hNzI4OTEtZGUyZi00MTU2LWEwMTEt NDNmNjRiY2VhOTlkLzEvZjVSVF9oSE1id1VNbkZ0LUpvSmw5amswYXE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9hNzI4OTEtZGUyZi00MTU2LWEwMTEtNDNmNjRiY2VhOTlk LzEvQzZ5Q2dFY0FyVFpUaV9odk5NQno2WEZERGFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQAwjrIMAwD BAHCOsoDBATCOsAwDQQCAAIwBwMFACoBA/cwDQYJKoZIhvcNAQELBQADggEBAKON DeZcEoKqFcte6zJa5ci51ZJu8PYaYAC4BJXaW8LsOckdi9vr48GJRgD6yjzJ1tp0 r4sdpbo4cH4pLe4leO/eqY++EcwvL5644w3SC2AOxClJO4tQsHSx+MJeLd0B9eow 9Br9JDy0RZ10gmRDres2f9PyEGOVngvsCtuV73JA0qzc+TrFPG1Kfoc/Ufbt9sfe thZpM3bUFbBBHKGkO6D9JCbWf6V4Kg7PEG8PAI0Qq1c29I7fgJjINUKtGs9bdHTW vig4eFDRySsBmZc4h0+Y33gx+plLM80iBexaEl3CGByA57pJ9rO2SPOkPxiXyoMG 5OXq9+akWqkbpiR7BrY= -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:42 2026 by rpki-client