This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_vX0TB1gBOT0VDwShO3Ov5TJ8C8.roa File: _vX0TB1gBOT0VDwShO3Ov5TJ8C8.roa (raw, json) Hash identifier: egibgABup7AwpAoryfjBaHNJQzeMOPJOtqF9RAjsAlk= Subject key identifier: FE:F5:F4:4C:1D:60:04:E4:F4:54:3C:12:84:ED:CE:BF:94:C9:F0:2F Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAB42AC100DC5A7AAE83DA12D48035 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_vX0TB1gBOT0VDwShO3Ov5TJ8C8.roa Signing time: Thu 01 Jan 2026 00:17:31 +0000 ROA not before: Thu 01 Jan 2026 00:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 18978 IP address blocks: 5.180.25.0/24 maxlen: 24 5.180.26.0/24 maxlen: 24 5.180.28.0/24 maxlen: 24 5.180.41.0/24 maxlen: 24 5.180.44.0/24 maxlen: 24 5.180.53.0/24 maxlen: 24 5.180.144.0/24 maxlen: 24 5.180.146.0/24 maxlen: 24 45.66.156.0/22 maxlen: 24 45.128.61.0/24 maxlen: 24 45.128.62.0/23 maxlen: 23 45.136.112.0/23 maxlen: 23 45.136.118.0/23 maxlen: 24 45.136.130.0/23 maxlen: 23 45.136.148.0/24 maxlen: 24 45.136.150.0/23 maxlen: 24 85.208.111.0/24 maxlen: 24 85.208.116.0/23 maxlen: 24 85.208.118.0/24 maxlen: 24 85.209.152.0/24 maxlen: 24 85.209.192.0/23 maxlen: 23 194.59.220.0/24 maxlen: 24 194.124.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b4:2a:c1:00:dc:5a:7a:ae:83:da:12:d4:80:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fef5f44c1d6004e4f4543c1284edcebf94c9f02f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d2:8b:c9:53:cf:5f:b8:ee:aa:e0:21:04:72: 56:bb:65:f9:ce:d1:de:5a:01:81:e8:79:90:8f:23: b2:86:13:f3:f4:7d:fc:86:b3:6f:53:7a:b9:f7:94: 5f:69:27:70:8c:fc:52:1f:a9:b8:3c:43:06:28:d8: 32:65:87:1c:32:32:12:46:62:4e:c9:e6:22:7a:8b: 5d:65:dc:5d:17:14:47:c4:29:d1:ad:7b:29:8b:6d: 58:3a:c7:5f:e5:af:8d:6d:b0:d6:91:62:5c:28:aa: e1:27:75:44:77:30:13:23:fd:6d:6e:ae:2e:77:f9: af:c5:7b:29:b6:4c:05:c6:0e:35:f3:7d:02:a8:50: fd:63:79:18:8d:33:1f:d7:50:dc:d2:f8:58:7f:06: 73:8a:85:db:85:73:d4:92:da:86:b9:0a:f0:47:a0: 0f:ca:6f:d5:78:90:9e:b1:07:81:30:60:4c:74:ee: 37:26:72:b0:10:72:fd:0a:9d:be:1e:88:df:ca:23: 50:16:79:54:d2:fd:71:1a:bf:2c:d8:43:42:84:be: 10:fd:88:a3:23:d8:b6:af:9f:64:f5:9b:38:24:5f: 25:69:87:34:3f:29:3c:d8:f2:80:2c:3e:9b:41:98: 4b:9c:f8:d6:a5:7b:02:27:37:d9:f2:8a:7e:7d:79: 22:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F5:F4:4C:1D:60:04:E4:F4:54:3C:12:84:ED:CE:BF:94:C9:F0:2F X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_vX0TB1gBOT0VDwShO3Ov5TJ8C8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.25.0-5.180.26.255 5.180.28.0/24 5.180.41.0/24 5.180.44.0/24 5.180.53.0/24 5.180.144.0/24 5.180.146.0/24 45.66.156.0/22 45.128.61.0-45.128.63.255 45.136.112.0/23 45.136.118.0/23 45.136.130.0/23 45.136.148.0/24 45.136.150.0/23 85.208.111.0/24 85.208.116.0-85.208.118.255 85.209.152.0/24 85.209.192.0/23 194.59.220.0/24 194.124.244.0/23 Signature Algorithm: sha256WithRSAEncryption cd:2b:9f:82:54:73:05:a2:42:aa:c4:81:9d:44:66:ed:1e:e0: 09:ea:fe:e1:93:2e:e5:42:6d:f3:0b:c0:ce:61:4b:f9:19:29: bd:41:28:2c:e9:d5:87:34:df:fa:60:fb:fd:6c:5f:59:da:ac: 4f:31:2e:6e:b9:e7:47:e2:d4:a9:32:06:36:b8:4e:42:e2:13: 4e:64:fb:3e:8a:dd:ee:54:3d:9a:af:35:f2:5b:46:5e:7a:a9: 03:e7:03:8f:d2:66:0d:30:6e:0f:d1:71:b1:d7:45:61:84:b2: f7:f5:8a:81:33:92:db:5b:96:df:ec:91:bf:a9:65:53:db:79: 53:50:70:89:d1:b3:db:54:e6:ec:c9:52:a9:2e:14:9b:55:f4: 2f:a9:e2:c6:14:43:7d:a2:0e:9f:35:f8:0e:c7:58:a4:7d:56: cd:f6:04:53:ca:51:0e:46:3d:da:7f:5c:44:cc:02:19:52:79: f4:e5:0a:4a:a8:9a:4e:27:b0:c4:ac:cd:39:db:8d:19:60:d1: 6e:67:61:83:6a:20:e0:79:67:87:4b:4e:24:b7:26:f1:06:8f: da:ea:10:93:63:30:72:1a:15:01:67:bd:56:1e:f2:09:87:de: ef:6a:8d:74:a8:2f:ed:2e:3c:74:f3:39:43:2b:57:76:45:23: eb:ae:3f:2b -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgISAZt26rQqwQDcWnqug9oS1IA1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWY1ZjQ0YzFkNjAwNGU0ZjQ1NDNjMTI4NGVkY2ViZjk0YzlmMDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtKLyVPPX7juquAhBHJWu2X5ztHe WgGB6HmQjyOyhhPz9H38hrNvU3q595RfaSdwjPxSH6m4PEMGKNgyZYccMjISRmJO yeYieotdZdxdFxRHxCnRrXspi21YOsdf5a+NbbDWkWJcKKrhJ3VEdzATI/1tbq4u d/mvxXsptkwFxg41830CqFD9Y3kYjTMf11Dc0vhYfwZzioXbhXPUktqGuQrwR6AP ym/VeJCesQeBMGBMdO43JnKwEHL9Cp2+HojfyiNQFnlU0v1xGr8s2ENChL4Q/Yij I9i2r59k9Zs4JF8laYc0Pyk82PKALD6bQZhLnPjWpXsCJzfZ8op+fXkifQIDAQAB o4ICmDCCApQwHQYDVR0OBBYEFP719EwdYATk9FQ8EoTtzr+UyfAvMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvX3ZYMFRCMWdCT1QwVkR3U2hPM092NVRKOEM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZAwDAME AAW0GQMEAAW0GgMEAAW0HAMEAAW0KQMEAAW0LAMEAAW0NQMEAAW0kAMEAAW0kgME Ai1CnDAMAwQALYA9AwQGLYAAAwQBLYhwAwQBLYh2AwQBLYiCAwQALYiUAwQBLYiW AwQAVdBvMAwDBAJV0HQDBABV0HYDBABV0ZgDBAFV0cADBADCO9wDBAHCfPQwDQYJ KoZIhvcNAQELBQADggEBAM0rn4JUcwWiQqrEgZ1EZu0e4Anq/uGTLuVCbfMLwM5h S/kZKb1BKCzp1Yc03/pg+/1sX1narE8xLm6550fi1KkyBja4TkLiE05k+z6K3e5U PZqvNfJbRl56qQPnA4/SZg0wbg/RcbHXRWGEsvf1ioEzkttblt/skb+pZVPbeVNQ cInRs9tU5uzJUqkuFJtV9C+p4sYUQ32iDp81+A7HWKR9Vs32BFPKUQ5GPdp/XETM AhlSefTlCkqomk4nsMSszTnbjRlg0W5nYYNqIOB5Z4dLTiS3JvEGj9rqEJNjMHIa FQFnvVYe8gmH3u9qjXSoL+0uPHTzOUMrV3ZFI+uuPys= -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:23 2026 by rpki-client