This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/1xeimVDY6yCZMZLaCzfJqK6A_5A.roa File: 1xeimVDY6yCZMZLaCzfJqK6A_5A.roa (raw, json) Hash identifier: Ww+EuVjawTMRL2AaKzheoe51CQ46uTuW71gYJQcVSj4= Subject key identifier: D7:17:A2:99:50:D8:EB:20:99:31:92:DA:0B:37:C9:A8:AE:80:FF:90 Certificate issuer: /CN=00642b607b94a143ff41c554c913bd5a651f8c05 Certificate serial: 019B7F80BCEBC7DFA76921403C499FD4767A Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/1xeimVDY6yCZMZLaCzfJqK6A_5A.roa Signing time: Fri 02 Jan 2026 16:18:21 +0000 ROA not before: Fri 02 Jan 2026 16:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50563 IP address blocks: 37.98.204.0/22 maxlen: 22 37.98.204.0/23 maxlen: 23 37.98.204.0/24 maxlen: 24 37.98.205.0/24 maxlen: 24 37.98.206.0/23 maxlen: 23 37.98.206.0/24 maxlen: 24 37.98.207.0/24 maxlen: 24 93.119.16.0/23 maxlen: 23 93.119.16.0/24 maxlen: 24 93.119.17.0/24 maxlen: 24 93.119.19.0/24 maxlen: 24 185.66.44.0/22 maxlen: 22 185.66.44.0/23 maxlen: 23 185.66.44.0/24 maxlen: 24 185.66.45.0/24 maxlen: 24 185.66.46.0/23 maxlen: 23 185.66.46.0/24 maxlen: 24 185.66.47.0/24 maxlen: 24 185.72.112.0/22 maxlen: 22 185.72.112.0/23 maxlen: 23 185.72.112.0/24 maxlen: 24 185.72.113.0/24 maxlen: 24 185.72.114.0/23 maxlen: 23 185.72.114.0/24 maxlen: 24 185.72.115.0/24 maxlen: 24 185.125.28.0/22 maxlen: 22 188.240.192.0/24 maxlen: 24 188.240.193.0/24 maxlen: 24 195.189.208.0/23 maxlen: 23 195.189.208.0/24 maxlen: 24 195.189.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:bc:eb:c7:df:a7:69:21:40:3c:49:9f:d4:76:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05 Validity Not Before: Jan 2 16:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d717a29950d8eb20993192da0b37c9a8ae80ff90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:83:ee:2b:67:32:39:7b:e2:4f:66:2e:60:fb: 41:4d:29:49:4b:b0:e3:11:27:3f:84:11:3b:ce:d7: 28:ce:89:24:41:a2:42:9e:be:e4:d1:fb:7f:c0:0b: 8f:9f:6d:fa:e2:3e:4e:d2:dd:d8:13:ca:a8:1a:e7: a9:f7:67:ab:6b:61:b0:72:64:12:47:51:fb:d0:a9: 14:5e:e4:7b:ad:a5:dc:f4:58:c4:d8:9b:41:fa:df: 36:3a:34:b7:b8:f5:c6:79:5f:02:d9:45:d0:d7:b2: d4:b6:1b:33:ac:fd:87:a8:70:80:08:97:74:e8:0e: d0:5f:06:31:cc:80:eb:43:e5:91:87:c8:fe:41:ce: 40:8e:e6:c2:29:4b:23:d0:dd:50:57:96:9c:83:29: da:5f:74:b6:d7:c1:5b:37:7c:8c:fd:21:86:39:11: 27:e6:7f:a0:78:13:d4:51:18:7e:4b:da:12:ac:e8: 9d:ce:7a:0b:50:23:94:00:61:91:e9:cc:35:f1:a9: e0:5b:ba:22:1e:92:c6:7d:fd:7b:7d:8b:a8:9c:34: de:b4:bf:5a:58:a7:55:c7:45:0e:f1:3b:6d:fe:11: 85:56:99:e6:04:a3:45:fb:47:5f:9e:53:e7:78:82: 4a:d5:50:2b:a1:a0:43:81:f9:52:03:37:ea:72:41: d7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:17:A2:99:50:D8:EB:20:99:31:92:DA:0B:37:C9:A8:AE:80:FF:90 X509v3 Authority Key Identifier: keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/1xeimVDY6yCZMZLaCzfJqK6A_5A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.98.204.0/22 93.119.16.0/23 93.119.19.0/24 185.66.44.0/22 185.72.112.0/22 185.125.28.0/22 188.240.192.0/23 195.189.208.0/23 Signature Algorithm: sha256WithRSAEncryption 59:a5:32:af:08:9c:71:ba:b9:a9:13:a5:2e:36:31:80:f1:b0: f4:65:92:47:b3:a6:ff:eb:ae:fc:33:51:a0:66:29:62:ce:e4: 5f:a7:3b:0d:57:22:30:4b:16:9a:dd:26:bd:3b:5c:c6:0b:36: bc:af:7c:fe:6f:af:8b:46:e4:96:cc:a3:ac:10:e8:99:90:97: 30:f2:2e:e5:b9:91:3d:4e:2a:bc:36:90:2b:f3:78:25:eb:36: 20:f6:b6:2a:a3:c4:6b:5f:7f:bb:8e:7a:cb:12:6b:51:49:3a: 3f:c6:26:54:8a:45:a3:7b:bf:ed:09:33:be:ed:e2:39:03:53: f7:b6:54:9b:92:0e:45:ed:ce:4a:86:4e:42:47:2e:02:72:36: 71:f0:67:03:93:25:68:40:d1:39:16:79:a6:32:58:01:1d:33: 6d:fd:78:c9:2c:ba:2c:ed:b2:e1:63:a1:b5:08:47:5f:86:89: 7f:6f:d3:b3:59:25:d6:e9:d4:39:34:10:d8:fa:aa:29:09:62: 8c:37:dd:28:80:b2:b6:48:fb:bb:31:13:83:af:48:b6:77:05: 01:c5:82:9d:dc:db:05:ca:8c:c7:de:da:20:e5:5d:53:41:51: 46:e7:f0:a2:5c:8f:26:f7:04:ff:52:0a:e5:17:ac:5b:87:31: 0f:2d:db:9f -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt/gLzrx9+naSFAPEmf1HZ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNjQyYjYwN2I5NGExNDNmZjQxYzU1NGM5MTNiZDVhNjUx ZjhjMDUwHhcNMjYwMTAyMTYxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzE3YTI5OTUwZDhlYjIwOTkzMTkyZGEwYjM3YzlhOGFlODBmZjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oPuK2cyOXviT2YuYPtBTSlJS7Dj ESc/hBE7ztcozokkQaJCnr7k0ft/wAuPn2364j5O0t3YE8qoGuep92era2GwcmQS R1H70KkUXuR7raXc9FjE2JtB+t82OjS3uPXGeV8C2UXQ17LUthszrP2HqHCACJd0 6A7QXwYxzIDrQ+WRh8j+Qc5AjubCKUsj0N1QV5acgynaX3S218FbN3yM/SGGOREn 5n+geBPUURh+S9oSrOidznoLUCOUAGGR6cw18angW7oiHpLGff17fYuonDTetL9a WKdVx0UO8Ttt/hGFVpnmBKNF+0dfnlPneIJK1VAroaBDgflSAzfqckHX7wIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFNcXoplQ2OsgmTGS2gs3yaiugP+QMB8GA1UdIwQY MBaAFABkK2B7lKFD/0HFVMkTvVplH4wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hYzlhYmEtOTczNS00YjlkLThlYWUt MTliYzdiZGNjYmMxLzEvMXhlaW1WRFk2eUNaTVpMYUN6ZkpxSzZBXzVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hYzlhYmEtOTczNS00YjlkLThlYWUtMTliYzdiZGNjYmMx LzEvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCJWLMAwQB XXcQAwQAXXcTAwQCuUIsAwQCuUhwAwQCuX0cAwQBvPDAAwQBw73QMA0GCSqGSIb3 DQEBCwUAA4IBAQBZpTKvCJxxurmpE6UuNjGA8bD0ZZJHs6b/6678M1GgZilizuRf pzsNVyIwSxaa3Sa9O1zGCza8r3z+b6+LRuSWzKOsEOiZkJcw8i7luZE9Tiq8NpAr 83gl6zYg9rYqo8RrX3+7jnrLEmtRSTo/xiZUikWje7/tCTO+7eI5A1P3tlSbkg5F 7c5Khk5CRy4CcjZx8GcDkyVoQNE5FnmmMlgBHTNt/XjJLLos7bLhY6G1CEdfhol/ b9OzWSXW6dQ5NBDY+qopCWKMN90ogLK2SPu7MRODr0i2dwUBxYKd3NsFyozH3tog 5V1TQVFG5/CiXI8m9wT/UgrlF6xbhzEPLduf -----END CERTIFICATE-----Generated at Sun Jan 25 11:41:03 2026 by rpki-client