This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/u3lR19hKAM5d_t8wpiV3PJkk-cw.roa File: u3lR19hKAM5d_t8wpiV3PJkk-cw.roa (raw, json) Hash identifier: thQW4SgnjYBzd+hCCC/UI6jU949759F9VL501xnOoQA= Subject key identifier: BB:79:51:D7:D8:4A:00:CE:5D:FE:DF:30:A6:25:77:3C:99:24:F9:CC Certificate issuer: /CN=7b48945b9d716cd47fbde2860d8100fcda987496 Certificate serial: 019B7EA68DD6436D14F53AF7D44E5866BE38 Authority key identifier: 7B:48:94:5B:9D:71:6C:D4:7F:BD:E2:86:0D:81:00:FC:DA:98:74:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/u3lR19hKAM5d_t8wpiV3PJkk-cw.roa Signing time: Fri 02 Jan 2026 12:20:02 +0000 ROA not before: Fri 02 Jan 2026 12:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196763 IP address blocks: 5.22.144.0/24 maxlen: 24 5.22.148.0/22 maxlen: 22 78.109.56.0/21 maxlen: 21 109.234.104.0/21 maxlen: 21 185.33.180.0/22 maxlen: 22 2a00:18e0::/48 maxlen: 48 2a00:18e0:6::/48 maxlen: 48 2a00:18e0:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:8d:d6:43:6d:14:f5:3a:f7:d4:4e:58:66:be:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b48945b9d716cd47fbde2860d8100fcda987496 Validity Not Before: Jan 2 12:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb7951d7d84a00ce5dfedf30a625773c9924f9cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:13:d5:79:68:c7:40:f5:94:8b:73:c7:09:3e: 38:04:c1:c1:03:ae:ca:12:cd:21:44:d1:dd:e7:35: 05:04:bf:3f:fb:96:de:33:5c:a8:5c:f0:65:d5:da: 6f:d1:1b:e0:e3:cb:63:f9:4a:0c:d5:81:ab:07:e6: 6d:cc:57:4c:5e:ff:44:44:58:5b:48:94:9b:4f:2c: 75:4f:ca:10:c8:8f:fb:7e:83:7a:8d:de:b9:e2:59: f9:9b:3a:5c:88:e2:16:c7:52:fc:b4:aa:21:42:5d: 1d:9c:52:54:04:03:5d:33:96:49:7e:e4:6f:e8:eb: df:48:0c:d5:7d:f1:88:b0:a9:d1:09:57:34:00:65: c7:64:45:c5:87:0f:01:b0:c2:27:66:6a:c8:04:b3: fb:07:70:fc:10:6b:92:eb:97:bb:85:47:a5:19:d7: a0:da:d0:d7:ba:46:2c:0c:ae:dc:6d:29:fa:25:e4: d2:6e:40:41:ac:7f:0d:33:d6:b6:cf:f2:7d:ef:93: 55:10:b7:7f:ca:f9:4b:51:14:94:b5:ff:51:0c:72: c7:d0:96:21:04:5a:15:b1:30:7b:0a:97:c2:5e:62: 97:ee:ea:70:c4:c4:5c:92:7f:dd:af:bc:6b:14:e0: 7f:fc:94:95:d3:00:9e:cd:83:88:e3:ff:7f:74:ac: f3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:79:51:D7:D8:4A:00:CE:5D:FE:DF:30:A6:25:77:3C:99:24:F9:CC X509v3 Authority Key Identifier: keyid:7B:48:94:5B:9D:71:6C:D4:7F:BD:E2:86:0D:81:00:FC:DA:98:74:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/u3lR19hKAM5d_t8wpiV3PJkk-cw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.22.144.0/24 5.22.148.0/22 78.109.56.0/21 109.234.104.0/21 185.33.180.0/22 IPv6: 2a00:18e0::/48 2a00:18e0:6::/47 Signature Algorithm: sha256WithRSAEncryption 17:50:ef:3a:7f:b0:46:be:69:d6:a5:08:d4:7c:9a:1c:85:96: b4:1d:59:fe:fb:05:89:dd:1f:db:d5:ea:a8:f4:c9:10:6e:1e: 8b:41:fc:8d:cf:e7:42:eb:68:08:17:c2:2c:ff:7c:ff:a0:e6: 22:63:8e:28:13:33:d9:d6:f8:61:e9:f3:95:46:95:88:76:71: 71:93:f8:cc:08:c8:5d:e2:e4:49:91:9f:cb:dd:e0:48:56:de: 12:82:86:6c:43:62:77:7f:4c:93:ca:63:40:7b:57:cd:bc:4f: 0e:f0:83:e1:22:23:ef:e2:f4:31:b4:29:25:ab:19:de:c1:97: d4:4f:67:fb:74:34:ab:46:fb:10:8c:c4:13:0f:10:25:69:7d: 9e:27:88:df:90:9a:08:90:2f:c3:14:68:5d:fc:8f:4c:7d:d0: fc:9f:a4:06:84:30:77:6e:49:a0:a5:ce:cb:7a:cf:19:a9:0b: f1:cb:b0:8d:b8:0c:c0:6b:51:be:fe:b2:17:bb:8f:a2:a3:51: 91:eb:c3:fa:02:4b:f7:de:c8:f8:52:94:e5:5a:74:cd:c1:63: 13:d9:6f:7b:d9:c0:4b:a2:d4:2f:53:06:32:02:b5:2d:36:95: f6:cd:cc:6e:14:6b:7e:52:8f:32:9e:66:e9:91:81:ce:6f:f8: 21:69:f7:97 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt+po3WQ20U9Tr31E5YZr44MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNDg5NDViOWQ3MTZjZDQ3ZmJkZTI4NjBkODEwMGZjZGE5 ODc0OTYwHhcNMjYwMTAyMTIyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjc5NTFkN2Q4NGEwMGNlNWRmZWRmMzBhNjI1NzczYzk5MjRmOWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxPVeWjHQPWUi3PHCT44BMHBA67K Es0hRNHd5zUFBL8/+5beM1yoXPBl1dpv0Rvg48tj+UoM1YGrB+ZtzFdMXv9ERFhb SJSbTyx1T8oQyI/7foN6jd654ln5mzpciOIWx1L8tKohQl0dnFJUBANdM5ZJfuRv 6OvfSAzVffGIsKnRCVc0AGXHZEXFhw8BsMInZmrIBLP7B3D8EGuS65e7hUelGdeg 2tDXukYsDK7cbSn6JeTSbkBBrH8NM9a2z/J975NVELd/yvlLURSUtf9RDHLH0JYh BFoVsTB7CpfCXmKX7upwxMRckn/dr7xrFOB//JSV0wCezYOI4/9/dKzzRQIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFLt5UdfYSgDOXf7fMKYldzyZJPnMMB8GA1UdIwQY MBaAFHtIlFudcWzUf73ihg2BAPzamHSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTBpVVc1MXhiTlJfdmVLR0RZRUFfTnFZZEpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS81YjZiMDYtOWFmNi00MDI2LWI0N2Mt NGU4NTg5N2YzMDljLzEvdTNsUjE5aEtBTTVkX3Q4d3BpVjNQSmtrLWN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS81YjZiMDYtOWFmNi00MDI2LWI0N2MtNGU4NTg5N2YzMDlj LzEvZTBpVVc1MXhiTlJfdmVLR0RZRUFfTnFZZEpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDAkBAIAATAeAwQABRaQAwQC BRaUAwQDTm04AwQDbepoAwQCuSG0MBgEAgACMBIDBwAqABjgAAADBwEqABjgAAYw DQYJKoZIhvcNAQELBQADggEBABdQ7zp/sEa+adalCNR8mhyFlrQdWf77BYndH9vV 6qj0yRBuHotB/I3P50LraAgXwiz/fP+g5iJjjigTM9nW+GHp85VGlYh2cXGT+MwI yF3i5EmRn8vd4EhW3hKChmxDYnd/TJPKY0B7V828Tw7wg+EiI+/i9DG0KSWrGd7B l9RPZ/t0NKtG+xCMxBMPECVpfZ4niN+QmgiQL8MUaF38j0x90PyfpAaEMHduSaCl zst6zxmpC/HLsI24DMBrUb7+she7j6KjUZHrw/oCS/feyPhSlOVadM3BYxPZb3vZ wEui1C9TBjICtS02lfbNzG4Ua35SjzKeZumRgc5v+CFp95c= -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:17 2026 by rpki-client