This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/If-bDs5bsfd6ZQiGWil-kWbKDd0.roa File: If-bDs5bsfd6ZQiGWil-kWbKDd0.roa (raw, json) Hash identifier: o29JqRpcAVvASVbfqlx+K9rVrbrObE+wm1Xs0GU9Oc0= Subject key identifier: 21:FF:9B:0E:CE:5B:B1:F7:7A:65:08:86:5A:29:7E:91:66:CA:0D:DD Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094 Certificate serial: 019B7DCA7A85361D5F0A1590DBEC3EC67D13 Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/If-bDs5bsfd6ZQiGWil-kWbKDd0.roa Signing time: Fri 02 Jan 2026 08:19:40 +0000 ROA not before: Fri 02 Jan 2026 08:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211642 IP address blocks: 5.253.60.0/24 maxlen: 24 5.253.61.0/24 maxlen: 24 45.128.206.0/24 maxlen: 24 45.128.207.0/24 maxlen: 24 185.219.40.0/24 maxlen: 24 185.219.41.0/24 maxlen: 24 185.219.42.0/24 maxlen: 24 185.219.43.0/24 maxlen: 24 185.240.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:7a:85:36:1d:5f:0a:15:90:db:ec:3e:c6:7d:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094 Validity Not Before: Jan 2 08:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21ff9b0ece5bb1f77a6508865a297e9166ca0ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:77:6a:b6:b3:61:73:49:68:ca:22:e1:17:64: b8:b3:f8:9a:24:a4:1f:66:f7:11:9b:1f:7b:c5:0b: 53:f2:f0:29:f5:33:19:4a:e4:32:81:97:a1:f4:a5: 3b:62:ea:5f:fd:59:72:1a:5c:be:e0:ea:bc:4a:fd: 66:cd:01:ec:53:f2:55:14:e1:1e:17:04:92:4c:a4: 55:c6:fd:65:2d:6e:7f:3c:c9:af:51:48:2d:27:e6: 69:11:44:7d:97:aa:78:5e:fa:e6:e4:4e:4f:b5:fe: 66:fb:21:3a:b5:ff:c8:40:34:b7:ca:67:d8:6e:ac: b6:07:57:c9:43:6c:55:9b:58:c3:60:bb:37:3d:b3: dd:95:c7:cd:93:eb:c4:09:17:5e:8f:9e:3c:65:ca: 93:d9:6c:b6:f3:e2:d9:d6:30:8d:5d:42:9d:25:79: 78:63:b5:f3:0e:26:fb:b5:b3:d1:14:6f:9d:ee:ea: 20:7c:f6:45:73:53:4b:c7:f9:27:df:65:d1:07:7d: b7:dc:a8:9e:1d:38:37:d0:68:f5:a6:c8:b6:9b:7c: 6a:09:45:4d:88:21:92:65:27:d0:84:a9:d2:f7:21: aa:0f:3e:7c:c3:e0:1c:a5:f2:76:1f:e5:98:f1:dc: 91:85:13:bf:14:a2:8c:fa:7b:a7:92:69:3a:14:23: f1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FF:9B:0E:CE:5B:B1:F7:7A:65:08:86:5A:29:7E:91:66:CA:0D:DD X509v3 Authority Key Identifier: keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/If-bDs5bsfd6ZQiGWil-kWbKDd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.60.0/23 45.128.206.0/23 185.219.40.0/22 185.240.102.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:89:c6:bb:39:0a:b2:91:74:2b:9b:19:89:75:ea:97:9a:92: db:60:46:7c:89:b1:0d:f6:89:d5:d1:a0:e7:7a:f0:da:44:7d: 9e:8c:81:ca:61:1c:da:d7:fd:7b:4e:d8:a4:00:93:24:c0:e1: 36:31:c1:b3:1e:62:dc:5b:6a:cc:b4:1e:ce:d0:90:1f:d1:de: a8:da:2e:9c:5c:5f:08:dc:e5:d1:57:0d:a7:39:8b:4c:e4:49: 4c:df:2b:8b:3d:29:0a:65:93:d9:cc:cb:ec:e4:c4:02:06:91: 93:08:63:42:fa:e9:1f:f7:18:74:1a:04:4d:61:b1:46:e9:87: 87:d5:81:19:34:b7:21:8f:0d:84:35:74:5e:18:1a:1c:a8:86: 90:57:37:c0:fb:aa:01:4c:65:f5:a8:4b:7b:cd:65:02:37:c1: 2a:38:9d:11:63:d9:b2:99:fc:7f:03:e4:0e:c4:10:7e:88:e2: db:d5:ad:04:27:ff:ff:b2:c1:94:41:61:15:64:19:f1:35:e2: 2c:a4:49:0e:bd:87:80:9c:48:35:ca:a9:7b:cc:0d:f1:3e:d9: 2a:ec:e5:a9:da:e0:98:4a:8d:6d:3c:31:50:4c:7c:fb:67:f8: 86:92:74:13:2b:08:d1:ce:e2:0f:6a:cb:d8:2b:aa:83:c9:fb: c7:5e:48:02 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9ynqFNh1fChWQ2+w+xn0TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYmU2NWFlMjNmMjA3ZmE2OTUyNTVmNTVhOTA3YWMxNjA4 YmUwOTQwHhcNMjYwMTAyMDgxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWZmOWIwZWNlNWJiMWY3N2E2NTA4ODY1YTI5N2U5MTY2Y2EwZGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXdqtrNhc0loyiLhF2S4s/iaJKQf ZvcRmx97xQtT8vAp9TMZSuQygZeh9KU7Yupf/VlyGly+4Oq8Sv1mzQHsU/JVFOEe FwSSTKRVxv1lLW5/PMmvUUgtJ+ZpEUR9l6p4Xvrm5E5Ptf5m+yE6tf/IQDS3ymfY bqy2B1fJQ2xVm1jDYLs3PbPdlcfNk+vECRdej548ZcqT2Wy28+LZ1jCNXUKdJXl4 Y7XzDib7tbPRFG+d7uogfPZFc1NLx/kn32XRB3233KieHTg30Gj1psi2m3xqCUVN iCGSZSfQhKnS9yGqDz58w+AcpfJ2H+WY8dyRhRO/FKKM+nunkmk6FCPx1QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCH/mw7OW7H3emUIhlopfpFmyg3dMB8GA1UdIwQY MBaAFF++Za4j8gf6aVJV9VqQesFgi+CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUt NDkyYWIzNzI2ODlkLzEvSWYtYkRzNWJzZmQ2WlFpR1dpbC1rV2JLRGQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUtNDkyYWIzNzI2ODlk LzEvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBBf08AwQB LYDOAwQCudsoAwQAufBmMA0GCSqGSIb3DQEBCwUAA4IBAQAOica7OQqykXQrmxmJ deqXmpLbYEZ8ibEN9onV0aDnevDaRH2ejIHKYRza1/17TtikAJMkwOE2McGzHmLc W2rMtB7O0JAf0d6o2i6cXF8I3OXRVw2nOYtM5ElM3yuLPSkKZZPZzMvs5MQCBpGT CGNC+ukf9xh0GgRNYbFG6YeH1YEZNLchjw2ENXReGBocqIaQVzfA+6oBTGX1qEt7 zWUCN8EqOJ0RY9mymfx/A+QOxBB+iOLb1a0EJ///ssGUQWEVZBnxNeIspEkOvYeA nEg1yql7zA3xPtkq7OWp2uCYSo1tPDFQTHz7Z/iGknQTKwjRzuIPasvYK6qDyfvH XkgC -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:58 2026 by rpki-client