This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/faOrucFqifHg9ZQWslyFQV3sAg8.roa File: faOrucFqifHg9ZQWslyFQV3sAg8.roa (raw, json) Hash identifier: +17wes5PNs8b98M2LmcNOgvHcF8OBtgbRoMn5hJbWa0= Subject key identifier: 7D:A3:AB:B9:C1:6A:89:F1:E0:F5:94:16:B2:5C:85:41:5D:EC:02:0F Certificate issuer: /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6 Certificate serial: 019B797EC8BBF8BAAC2676C658A55342B752 Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/faOrucFqifHg9ZQWslyFQV3sAg8.roa Signing time: Thu 01 Jan 2026 12:18:30 +0000 ROA not before: Thu 01 Jan 2026 12:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8374 IP address blocks: 5.172.224.0/19 maxlen: 19 31.0.0.0/16 maxlen: 16 37.98.208.0/20 maxlen: 20 37.109.0.0/16 maxlen: 16 37.152.16.0/20 maxlen: 20 37.247.128.0/17 maxlen: 17 37.247.241.0/28 maxlen: 28 37.248.0.0/16 maxlen: 16 46.76.0.0/15 maxlen: 15 78.30.64.0/18 maxlen: 18 87.251.224.0/19 maxlen: 19 92.60.128.0/20 maxlen: 20 185.4.212.0/22 maxlen: 22 188.125.32.0/19 maxlen: 19 193.41.112.0/23 maxlen: 23 212.2.96.0/19 maxlen: 19 2a01:2e0::/28 maxlen: 28 2a01:bb80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c8:bb:f8:ba:ac:26:76:c6:58:a5:53:42:b7:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6 Validity Not Before: Jan 1 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7da3abb9c16a89f1e0f59416b25c85415dec020f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f0:d8:e9:66:d4:b5:34:11:18:3b:46:5b:cc: 72:1b:a9:77:86:e2:c2:1e:b3:40:f5:d0:ee:b9:13: 52:d3:23:88:8e:ac:85:a5:ae:e7:4a:d2:00:81:04: 0a:4f:73:d4:c3:a1:6a:5d:2e:ca:95:d9:84:9d:5d: b5:a1:32:b4:57:c5:26:c9:8a:da:a5:46:04:63:4a: 9b:91:40:fc:86:0b:89:c8:6c:8a:bc:12:c5:fb:64: 5c:91:25:ce:5e:07:e5:a8:fc:96:31:4b:8f:e9:4f: 58:62:94:70:95:c3:6f:d8:42:78:d9:b6:40:c6:8a: e0:cc:7e:04:e6:cc:5e:fe:34:07:9f:28:4c:b4:4e: 1b:29:42:52:f1:11:ff:c9:98:f6:6f:cb:05:81:79: 53:3b:eb:3c:e2:0f:cf:bf:46:fc:e3:f7:90:14:86: bb:0b:18:06:6f:a2:91:cd:9b:64:0c:56:28:20:3f: ad:86:07:f3:3d:7d:c7:0f:d9:f3:81:68:59:db:57: 89:c9:ed:59:c0:2b:46:8b:19:0e:55:62:98:c3:ce: a7:6f:e1:08:dd:d9:07:6b:37:c3:46:ad:d1:e9:16: 85:1f:ee:12:a6:43:76:fb:8f:60:07:cd:b7:22:a7: 05:55:c3:ba:92:82:92:e6:ef:28:bd:74:fc:2a:ff: ab:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A3:AB:B9:C1:6A:89:F1:E0:F5:94:16:B2:5C:85:41:5D:EC:02:0F X509v3 Authority Key Identifier: keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/faOrucFqifHg9ZQWslyFQV3sAg8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.224.0/19 31.0.0.0/16 37.98.208.0/20 37.109.0.0/16 37.152.16.0/20 37.247.128.0-37.248.255.255 46.76.0.0/15 78.30.64.0/18 87.251.224.0/19 92.60.128.0/20 185.4.212.0/22 188.125.32.0/19 193.41.112.0/23 212.2.96.0/19 IPv6: 2a01:2e0::/28 2a01:bb80::/32 Signature Algorithm: sha256WithRSAEncryption 29:9d:d0:23:85:a7:07:d2:9f:74:08:72:c4:9e:70:20:ce:84: 6c:cc:90:25:31:77:d6:6c:e2:5d:d9:72:6c:5c:fc:2e:e5:a7: d3:16:53:38:ec:8b:43:68:2a:8e:0a:88:3b:ad:37:80:8c:75: d8:b0:87:d0:19:1e:cf:86:d6:4f:dd:cc:2e:8c:6f:d0:60:61: 4d:64:e1:31:3c:19:3c:d0:bc:40:19:a0:b5:43:39:f5:5a:ef: 5c:e2:3b:21:22:75:b9:b1:9b:13:ec:65:a4:b4:70:7f:32:40: e5:3d:b5:24:08:fd:4b:ba:43:4a:d1:25:36:5b:67:5c:28:9a: 54:ad:ff:5c:b4:0e:67:de:a0:c9:2d:cb:5f:a5:3f:19:05:f3: a8:27:74:27:85:6f:d1:11:2d:09:50:3e:31:7b:2f:70:8e:40: c9:f9:67:4d:bf:c4:98:d9:45:4f:c3:45:d1:df:19:05:43:88: d3:5e:5a:a0:47:5e:b7:47:a0:d1:e9:ed:a8:af:c1:35:c9:02: 31:78:de:4d:11:54:42:65:00:ad:a7:59:4a:b4:33:8f:b6:43: c9:d9:29:86:63:3a:f9:7f:59:15:62:71:55:ba:48:bb:20:af: 18:8f:6a:2f:46:39:c7:9f:8d:9e:60:73:5d:49:5d:5f:95:b6: d8:b6:52:55 -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgISAZt5fsi7+LqsJnbGWKVTQrdSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOWI5YWMyZWY2MzFiOTJlODJmNTk1ZDczZTQ3OTJjODE2 ZWM2ZTYwHhcNMjYwMTAxMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGEzYWJiOWMxNmE4OWYxZTBmNTk0MTZiMjVjODU0MTVkZWMwMjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PDY6WbUtTQRGDtGW8xyG6l3huLC HrNA9dDuuRNS0yOIjqyFpa7nStIAgQQKT3PUw6FqXS7KldmEnV21oTK0V8UmyYra pUYEY0qbkUD8hguJyGyKvBLF+2RckSXOXgflqPyWMUuP6U9YYpRwlcNv2EJ42bZA xorgzH4E5sxe/jQHnyhMtE4bKUJS8RH/yZj2b8sFgXlTO+s84g/Pv0b84/eQFIa7 CxgGb6KRzZtkDFYoID+thgfzPX3HD9nzgWhZ21eJye1ZwCtGixkOVWKYw86nb+EI 3dkHazfDRq3R6RaFH+4SpkN2+49gB823IqcFVcO6koKS5u8ovXT8Kv+rtQIDAQAB o4ICcjCCAm4wHQYDVR0OBBYEFH2jq7nBaonx4PWUFrJchUFd7AIPMB8GA1UdIwQY MBaAFOKbmsLvYxuS6C9ZXXPkeSyBbsbmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHB1YXd1OWpHNUxvTDFsZGMtUjVMSUZ1eHVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82OTAzNTctZGZiZS00ZDg2LWFmZDYt OTE2NGUzNTJhODNjLzEvZmFPcnVjRnFpZkhnOVpRV3NseUZRVjNzQWc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82OTAzNTctZGZiZS00ZDg2LWFmZDYtOTE2NGUzNTJhODNj LzEvNHB1YXd1OWpHNUxvTDFsZGMtUjVMSUZ1eHVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwXgQCAAEwWAMEBQWs4AMD AB8AAwQEJWLQAwMAJW0DBAQlmBAwCwMEByX3gAMDACX4AwMBLkwDBAZOHkADBAVX ++ADBARcPIADBAK5BNQDBAW8fSADBAHBKXADBAXUAmAwFAQCAAIwDgMFBCoBAuAD BQAqAbuAMA0GCSqGSIb3DQEBCwUAA4IBAQApndAjhacH0p90CHLEnnAgzoRszJAl MXfWbOJd2XJsXPwu5afTFlM47ItDaCqOCog7rTeAjHXYsIfQGR7PhtZP3cwujG/Q YGFNZOExPBk80LxAGaC1Qzn1Wu9c4jshInW5sZsT7GWktHB/MkDlPbUkCP1LukNK 0SU2W2dcKJpUrf9ctA5n3qDJLctfpT8ZBfOoJ3QnhW/RES0JUD4xey9wjkDJ+WdN v8SY2UVPw0XR3xkFQ4jTXlqgR163R6DR6e2or8E1yQIxeN5NEVRCZQCtp1lKtDOP tkPJ2SmGYzr5f1kVYnFVuki7IK8Yj2ovRjnHn42eYHNdSV1flbbYtlJV -----END CERTIFICATE-----Generated at Mon Jan 26 18:42:24 2026 by rpki-client