This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/gTeAwB0zAhv2XTHYae4PaaRyjoM.roa File: gTeAwB0zAhv2XTHYae4PaaRyjoM.roa (raw, json) Hash identifier: MS9C7UzddXYoFF1xqwLUnRbqGqUbXjC0bbRjfKpJ/ws= Subject key identifier: 81:37:80:C0:1D:33:02:1B:F6:5D:31:D8:69:EE:0F:69:A4:72:8E:83 Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019B797F32F88F44ED9128A4E49BDF2258B5 Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/gTeAwB0zAhv2XTHYae4PaaRyjoM.roa Signing time: Thu 01 Jan 2026 12:18:57 +0000 ROA not before: Thu 01 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47215 IP address blocks: 5.11.48.0/21 maxlen: 24 93.190.64.0/21 maxlen: 24 95.130.248.0/21 maxlen: 24 95.130.253.0/24 maxlen: 24 109.75.176.0/20 maxlen: 24 141.101.32.0/21 maxlen: 24 185.32.116.0/22 maxlen: 24 185.65.88.0/22 maxlen: 24 185.143.164.0/22 maxlen: 24 2a00:12c0::/29 maxlen: 48 2a00:12c0::/32 maxlen: 48 2a04:4cc0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:32:f8:8f:44:ed:91:28:a4:e4:9b:df:22:58:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=813780c01d33021bf65d31d869ee0f69a4728e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0b:84:32:af:8f:64:f6:f4:a9:26:e7:51:31: e7:09:fb:e6:30:3c:81:9d:93:c8:f3:24:a7:6d:22: 41:4c:64:1c:bc:75:46:f9:69:ae:06:07:4d:11:91: ad:2a:0f:1a:94:8e:b3:3f:7d:e4:0f:d9:8f:ef:7e: 22:95:13:42:20:2a:d6:80:58:ed:bc:ed:32:bd:a7: a3:27:a8:e9:b5:a3:a9:d7:e6:b3:77:33:7e:fc:a8: 18:bf:69:70:41:bc:e0:88:af:03:65:ea:07:dd:7b: 77:9c:62:dc:40:d5:12:52:b9:7e:99:41:8b:fc:18: 36:fe:97:55:ee:79:54:f7:69:19:f6:c8:84:ac:d6: e6:c1:e0:9e:a6:45:72:96:75:ee:73:c4:fb:92:4e: e1:1b:fc:b4:67:c4:1a:c0:76:93:3a:54:24:0d:6c: f9:80:cf:bb:36:33:13:d7:d2:9d:00:13:c4:21:a0: d2:d7:89:1c:43:2d:71:82:51:9e:36:0d:07:2b:7a: 25:c2:35:a8:38:22:a0:ca:91:b4:ce:d0:de:63:30: fc:5b:da:17:41:74:e9:96:1d:29:39:22:9e:90:55: b3:8b:16:67:3d:02:61:f1:07:c4:77:1f:2f:3f:17: e3:c8:22:ee:8a:14:1a:b4:13:45:0e:a1:2d:7d:ec: c5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:37:80:C0:1D:33:02:1B:F6:5D:31:D8:69:EE:0F:69:A4:72:8E:83 X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/gTeAwB0zAhv2XTHYae4PaaRyjoM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.11.48.0/21 93.190.64.0/21 95.130.248.0/21 109.75.176.0/20 141.101.32.0/21 185.32.116.0/22 185.65.88.0/22 185.143.164.0/22 IPv6: 2a00:12c0::/29 2a04:4cc0::/29 Signature Algorithm: sha256WithRSAEncryption 5e:9c:20:bb:5c:b9:d6:ec:34:97:87:3e:54:08:fd:c0:2e:89: c9:57:3c:80:ad:d9:44:f9:1c:9b:2d:24:79:fa:ee:5d:bd:58: 8f:b9:6a:3b:42:86:89:04:9b:92:ad:c0:82:6f:1b:21:ac:0b: 10:b4:cf:9d:71:bc:4e:67:88:93:57:cc:35:50:20:de:ba:39: 01:19:0c:86:22:f8:a9:a9:9b:a7:53:18:29:a2:21:49:ab:96: 69:1d:b1:40:25:7b:49:35:0b:89:93:10:af:d1:7b:0c:8d:87: 86:46:33:c3:2f:da:6a:e8:4e:db:98:41:40:9b:34:a6:35:7b: 0c:35:89:bb:02:bb:96:bb:46:dc:10:29:9e:86:79:7b:f5:18: de:72:1b:b1:09:7b:cc:2c:c2:c7:6f:fb:64:7a:62:72:43:09: c1:cf:5f:30:de:45:be:e3:a9:d9:c8:36:f0:fe:a3:91:49:7b: 5f:e9:f3:b2:e8:02:42:24:15:29:d9:d1:6e:52:da:08:0f:bd: ed:8d:32:d5:60:0e:a8:6e:31:44:5b:e4:a3:f9:f7:6d:be:3a: 1f:67:8e:3f:65:ea:30:fe:8c:80:79:4c:fd:a9:30:77:8d:74: 3d:26:d4:d6:f0:4a:6c:10:a7:a8:cf:8a:8e:ee:44:88:80:db: 68:08:2d:81 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt5fzL4j0TtkSik5JvfIli1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTM3ODBjMDFkMzMwMjFiZjY1ZDMxZDg2OWVlMGY2OWE0NzI4ZTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwuEMq+PZPb0qSbnUTHnCfvmMDyB nZPI8ySnbSJBTGQcvHVG+WmuBgdNEZGtKg8alI6zP33kD9mP734ilRNCICrWgFjt vO0yvaejJ6jptaOp1+azdzN+/KgYv2lwQbzgiK8DZeoH3Xt3nGLcQNUSUrl+mUGL /Bg2/pdV7nlU92kZ9siErNbmweCepkVylnXuc8T7kk7hG/y0Z8QawHaTOlQkDWz5 gM+7NjMT19KdABPEIaDS14kcQy1xglGeNg0HK3olwjWoOCKgypG0ztDeYzD8W9oX QXTplh0pOSKekFWzixZnPQJh8QfEdx8vPxfjyCLuihQatBNFDqEtfezFCwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFIE3gMAdMwIb9l0x2GnuD2mkco6DMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEvZ1RlQXdCMHpBaHYyWFRIWWFlNFBhYVJ5am9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA2BAIAATAwAwQDBQswAwQD Xb5AAwQDX4L4AwQEbUuwAwQDjWUgAwQCuSB0AwQCuUFYAwQCuY+kMBQEAgACMA4D BQMqABLAAwUDKgRMwDANBgkqhkiG9w0BAQsFAAOCAQEAXpwgu1y51uw0l4c+VAj9 wC6JyVc8gK3ZRPkcmy0kefruXb1Yj7lqO0KGiQSbkq3Agm8bIawLELTPnXG8TmeI k1fMNVAg3ro5ARkMhiL4qambp1MYKaIhSauWaR2xQCV7STULiZMQr9F7DI2HhkYz wy/aauhO25hBQJs0pjV7DDWJuwK7lrtG3BApnoZ5e/UY3nIbsQl7zCzCx2/7ZHpi ckMJwc9fMN5FvuOp2cg28P6jkUl7X+nzsugCQiQVKdnRblLaCA+97Y0y1WAOqG4x RFvko/n3bb46H2eOP2XqMP6MgHlM/akwd410PSbU1vBKbBCnqM+Kju5EiIDbaAgt gQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:20 2026 by rpki-client