This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/rEBBUWAlr9tsr52iDgClqZjjIXk.roa File: rEBBUWAlr9tsr52iDgClqZjjIXk.roa (raw, json) Hash identifier: XInjlFxm59Zb2d2Y2unXrGq3qEWmu0yA4TNHjtkHyTo= Subject key identifier: AC:40:41:51:60:25:AF:DB:6C:AF:9D:A2:0E:00:A5:A9:98:E3:21:79 Certificate issuer: /CN=d476b006351a2f9cf2a91386de50ce27f1550595 Certificate serial: 019B79100E9D16ADDEDA758A7E1889F401EC Authority key identifier: D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/rEBBUWAlr9tsr52iDgClqZjjIXk.roa Signing time: Thu 01 Jan 2026 10:17:33 +0000 ROA not before: Thu 01 Jan 2026 10:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8586 IP address blocks: 5.102.80.0/20 maxlen: 24 37.152.32.0/20 maxlen: 24 62.8.96.0/19 maxlen: 24 84.252.192.0/18 maxlen: 24 94.250.224.0/20 maxlen: 24 146.255.0.0/20 maxlen: 24 164.40.208.0/20 maxlen: 24 178.239.96.0/20 maxlen: 24 185.13.140.0/22 maxlen: 24 195.12.0.0/19 maxlen: 24 195.74.128.0/19 maxlen: 24 212.58.32.0/19 maxlen: 24 213.83.64.0/18 maxlen: 24 213.246.128.0/18 maxlen: 24 2001:4160::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:0e:9d:16:ad:de:da:75:8a:7e:18:89:f4:01:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d476b006351a2f9cf2a91386de50ce27f1550595 Validity Not Before: Jan 1 10:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac4041516025afdb6caf9da20e00a5a998e32179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ca:a2:c4:30:6f:dc:cc:16:9d:93:bc:3e:c0: a5:eb:e6:c1:7d:7f:16:5a:6d:a7:76:2b:67:f5:14: 2a:28:45:5a:3e:2c:70:f5:e4:19:0f:dd:46:7a:33: fb:a6:bd:8a:2b:8c:4b:e9:fe:ca:40:cd:c3:14:89: 83:02:a0:3f:bd:50:94:b8:20:21:c3:b8:17:b1:93: d7:73:e5:8f:ff:bd:b4:2c:d6:1c:fd:04:65:0e:80: 07:fe:34:f1:0f:57:45:6d:a2:ee:b2:47:64:33:28: e4:83:dc:13:55:05:4b:7f:00:6c:f7:7e:89:b2:e8: 43:a8:d2:ef:ce:b9:96:61:a9:6e:aa:b8:8e:ed:dd: e2:30:b2:06:a3:16:2b:39:15:10:be:77:c4:52:88: 2c:7d:19:c8:65:2c:6d:90:67:8f:ca:85:42:72:1d: 8d:c3:e1:9a:a2:c5:c3:be:c7:ba:1a:db:8e:87:ce: 18:ca:bb:1e:94:09:fc:be:61:a5:18:87:b1:e1:65: da:11:7c:f2:70:7d:bf:16:9e:93:d6:6d:40:0d:0d: 08:53:e3:47:69:08:7b:35:19:f8:31:78:c9:1b:c2: 14:e1:c5:47:39:1d:dc:3c:4a:0f:e8:89:cd:90:69: 4b:40:bb:e9:2a:c9:0b:c8:5a:f7:13:7c:f4:2d:61: 9f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:40:41:51:60:25:AF:DB:6C:AF:9D:A2:0E:00:A5:A9:98:E3:21:79 X509v3 Authority Key Identifier: keyid:D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/rEBBUWAlr9tsr52iDgClqZjjIXk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.80.0/20 37.152.32.0/20 62.8.96.0/19 84.252.192.0/18 94.250.224.0/20 146.255.0.0/20 164.40.208.0/20 178.239.96.0/20 185.13.140.0/22 195.12.0.0/19 195.74.128.0/19 212.58.32.0/19 213.83.64.0/18 213.246.128.0/18 IPv6: 2001:4160::/32 Signature Algorithm: sha256WithRSAEncryption 01:5b:1f:c8:1a:15:40:de:1b:f9:7c:50:7f:2c:9d:b0:f5:f7: 8c:5d:9f:0d:12:ee:11:04:48:f2:fd:1e:f7:ba:5c:6e:43:40: 27:56:b0:f8:6a:d5:d3:d8:cc:90:4d:d2:3e:d0:46:4b:3b:97: 83:d6:ae:12:e1:8e:f4:94:a4:76:b4:2e:92:43:98:2a:e9:aa: 70:93:9c:15:c7:dd:c8:08:9e:85:45:28:2c:66:fd:5e:16:17: 8c:58:88:41:91:fa:3d:f9:cc:61:81:80:cc:45:80:d6:5e:b7: 46:e7:ee:6f:ba:15:29:a7:35:ce:b3:bf:4b:ce:2a:cd:f1:1f: 90:8c:8b:d2:45:33:f6:a0:39:74:9f:d5:1f:f0:ff:d7:ba:17: 17:2b:da:80:86:a3:54:78:97:0c:f0:89:e5:21:d3:d7:a2:88: 58:2d:c9:a8:8e:32:b1:99:1a:cf:9d:49:c6:d4:74:a6:af:d4: 40:84:4a:ae:91:a4:05:33:8b:6f:9c:6a:4f:4c:99:07:5f:2f: 4a:56:68:1c:51:0a:7d:ff:83:35:54:e1:0a:29:94:f8:85:9d: 3f:d1:ca:75:9d:15:cb:c9:27:06:d1:07:80:86:07:ff:32:7f: be:38:3d:82:74:9a:a3:f4:65:8f:20:60:dd:c9:76:5a:de:d6: b9:21:4e:b3 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgISAZt5EA6dFq3e2nWKfhiJ9AHsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzZiMDA2MzUxYTJmOWNmMmE5MTM4NmRlNTBjZTI3ZjE1 NTA1OTUwHhcNMjYwMTAxMTAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzQwNDE1MTYwMjVhZmRiNmNhZjlkYTIwZTAwYTVhOTk4ZTMyMTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscqixDBv3MwWnZO8PsCl6+bBfX8W Wm2nditn9RQqKEVaPixw9eQZD91GejP7pr2KK4xL6f7KQM3DFImDAqA/vVCUuCAh w7gXsZPXc+WP/720LNYc/QRlDoAH/jTxD1dFbaLuskdkMyjkg9wTVQVLfwBs936J suhDqNLvzrmWYaluqriO7d3iMLIGoxYrORUQvnfEUogsfRnIZSxtkGePyoVCch2N w+GaosXDvse6GtuOh84YyrselAn8vmGlGIex4WXaEXzycH2/Fp6T1m1ADQ0IU+NH aQh7NRn4MXjJG8IU4cVHOR3cPEoP6InNkGlLQLvpKskLyFr3E3z0LWGfjwIDAQAB o4ICZjCCAmIwHQYDVR0OBBYEFKxAQVFgJa/bbK+dog4ApamY4yF5MB8GA1UdIwQY MBaAFNR2sAY1Gi+c8qkTht5QzifxVQWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhhd0JqVWFMNXp5cVJPRzNsRE9KX0ZWQlpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80NjIwN2YtN2UzNC00MjkyLWIxNGEt NDRjMDdmMzE0OTA0LzEvckVCQlVXQWxyOXRzcjUyaURnQ2xxWmpqSVhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi80NjIwN2YtN2UzNC00MjkyLWIxNGEtNDRjMDdmMzE0OTA0 LzEvMUhhd0JqVWFMNXp5cVJPRzNsRE9KX0ZWQlpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEHAQH/BG0wazBaBAIAATBUAwQEBWZQAwQE JZggAwQFPghgAwQGVPzAAwQEXvrgAwQEkv8AAwQEpCjQAwQEsu9gAwQCuQ2MAwQF wwwAAwQFw0qAAwQF1DogAwQG1VNAAwQG1faAMA0EAgACMAcDBQAgAUFgMA0GCSqG SIb3DQEBCwUAA4IBAQABWx/IGhVA3hv5fFB/LJ2w9feMXZ8NEu4RBEjy/R73ulxu Q0AnVrD4atXT2MyQTdI+0EZLO5eD1q4S4Y70lKR2tC6SQ5gq6apwk5wVx93ICJ6F RSgsZv1eFheMWIhBkfo9+cxhgYDMRYDWXrdG5+5vuhUppzXOs79LzirN8R+QjIvS RTP2oDl0n9Uf8P/XuhcXK9qAhqNUeJcM8InlIdPXoohYLcmojjKxmRrPnUnG1HSm r9RAhEqukaQFM4tvnGpPTJkHXy9KVmgcUQp9/4M1VOEKKZT4hZ0/0cp1nRXLyScG 0QeAhgf/Mn++OD2CdJqj9GWPIGDdyXZa3ta5IU6z -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:15 2026 by rpki-client