This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/IFrQrnZlcDy6Cg2Rsz5QrR_ViKw.roa File: IFrQrnZlcDy6Cg2Rsz5QrR_ViKw.roa (raw, json) Hash identifier: 5NDZ9fYEk6QjwvvjIgarKP6mtzbMjVq5FS8+N6De1Yk= Subject key identifier: 20:5A:D0:AE:76:65:70:3C:BA:0A:0D:91:B3:3E:50:AD:1F:D5:88:AC Certificate issuer: /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6 Certificate serial: 019B7A5AAF741ECA42CD77F2A26CDF4883BC Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/IFrQrnZlcDy6Cg2Rsz5QrR_ViKw.roa Signing time: Thu 01 Jan 2026 16:18:42 +0000 ROA not before: Thu 01 Jan 2026 16:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49287 IP address blocks: 5.188.174.0/24 maxlen: 24 5.188.175.0/24 maxlen: 24 91.192.82.0/24 maxlen: 24 93.189.59.0/24 maxlen: 24 109.122.206.0/24 maxlen: 24 185.224.251.0/24 maxlen: 24 213.111.134.0/24 maxlen: 24 213.111.135.0/24 maxlen: 24 213.111.140.0/24 maxlen: 24 213.111.141.0/24 maxlen: 24 213.183.34.0/24 maxlen: 24 213.183.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:af:74:1e:ca:42:cd:77:f2:a2:6c:df:48:83:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6 Validity Not Before: Jan 1 16:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=205ad0ae7665703cba0a0d91b33e50ad1fd588ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bc:62:d7:63:2f:82:6f:3d:42:b3:fc:75:dc: eb:de:ec:47:ec:50:46:df:93:d2:a0:74:28:36:69: 9a:01:86:ed:6c:7a:67:06:26:0c:ff:20:89:55:c2: b0:56:68:b7:52:40:8a:af:65:6b:a2:c3:f7:20:4c: ab:59:37:ba:98:f0:27:4e:0a:d2:54:2c:1d:3b:30: 0e:a9:d5:96:a1:59:61:63:15:bc:e9:02:74:10:cf: 1a:a9:0d:f1:c8:21:56:b3:e5:8c:6a:82:50:be:9e: 1d:79:5a:a0:ad:af:72:08:b4:46:43:01:7b:f8:2f: bc:c6:ad:01:dd:db:52:f8:50:8d:6d:5d:1b:65:3c: fd:98:0c:be:e2:3c:b7:0d:cf:4b:e0:50:06:c9:8d: 2d:5e:30:59:ef:37:82:5f:cf:b5:ae:4d:ec:06:3e: ad:45:c4:c1:92:22:a4:cd:b6:60:76:f8:19:bf:7d: 9f:34:37:22:a1:fe:7f:fd:6b:a0:78:b3:2c:ff:ff: 51:b1:5d:c1:f6:06:8c:b7:69:aa:14:71:50:0d:d6: 08:7c:f2:38:3d:70:0a:19:1d:16:cf:8a:95:4e:e2: 48:4b:cc:08:ac:80:6a:19:46:54:57:55:4e:2a:31: 10:76:31:2b:5e:56:51:8d:df:d0:8e:70:a0:ae:e4: 4a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5A:D0:AE:76:65:70:3C:BA:0A:0D:91:B3:3E:50:AD:1F:D5:88:AC X509v3 Authority Key Identifier: keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/IFrQrnZlcDy6Cg2Rsz5QrR_ViKw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.188.174.0/23 91.192.82.0/24 93.189.59.0/24 109.122.206.0/24 185.224.251.0/24 213.111.134.0/23 213.111.140.0/23 213.183.34.0/23 Signature Algorithm: sha256WithRSAEncryption 27:e9:88:1f:60:e5:b9:ad:70:29:93:a1:94:db:0d:4b:78:4f: 88:98:be:8a:6f:69:d9:1f:0d:7c:91:5d:32:55:93:e1:79:06: 81:d7:3f:2a:3c:51:95:2a:35:e3:c6:1f:a7:0b:c5:d4:a7:78: ab:2f:64:4f:f2:a6:1b:0f:99:fe:7d:b7:1e:6d:3a:2a:25:3f: 01:f8:fa:e1:60:bf:2d:cc:7b:00:ce:07:ca:18:af:66:2a:71: 53:83:92:82:e0:f0:3c:0c:59:51:85:04:0b:1f:07:45:ac:2c: a5:c5:07:3b:a7:04:d8:11:3f:ca:8d:93:e3:71:60:ab:a8:04: 26:5a:71:57:e8:af:14:74:98:7c:30:83:4b:ea:d6:61:43:52: 3a:ac:b3:4f:c0:c6:14:f8:fa:b0:b7:0e:4c:e0:82:e8:e1:72: 18:05:1d:97:7d:ab:69:94:42:d3:c1:79:e0:fe:ae:f1:18:0b: fb:90:40:9c:69:73:d0:12:06:f4:76:c0:e0:44:88:48:62:cd: 9e:eb:d3:7b:43:01:8a:17:37:df:8a:e8:aa:80:c3:32:7d:e9: 49:9c:b0:2d:e7:d5:82:2b:20:69:03:ea:6c:21:38:95:90:ae: 57:c9:c9:6f:40:6a:58:99:9e:61:c3:84:22:e7:c8:dc:be:18: aa:03:d8:ba -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt6Wq90HspCzXfyomzfSIO8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZWJmYmZkNmY5MzdjNWFlMzllM2UzOGU4YWI4Mzg0MTA3 NDIxYTYwHhcNMjYwMTAxMTYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDVhZDBhZTc2NjU3MDNjYmEwYTBkOTFiMzNlNTBhZDFmZDU4OGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurxi12Mvgm89QrP8ddzr3uxH7FBG 35PSoHQoNmmaAYbtbHpnBiYM/yCJVcKwVmi3UkCKr2VrosP3IEyrWTe6mPAnTgrS VCwdOzAOqdWWoVlhYxW86QJ0EM8aqQ3xyCFWs+WMaoJQvp4deVqgra9yCLRGQwF7 +C+8xq0B3dtS+FCNbV0bZTz9mAy+4jy3Dc9L4FAGyY0tXjBZ7zeCX8+1rk3sBj6t RcTBkiKkzbZgdvgZv32fNDciof5//WugeLMs//9RsV3B9gaMt2mqFHFQDdYIfPI4 PXAKGR0Wz4qVTuJIS8wIrIBqGUZUV1VOKjEQdjErXlZRjd/QjnCgruRKHwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFCBa0K52ZXA8ugoNkbM+UK0f1YisMB8GA1UdIwQY MBaAFA/r+/1vk3xa454+OOirg4QQdCGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGIt N2Q3MDM3NGQ3NmQyLzEvSUZyUXJuWmxjRHk2Q2cyUnN6NVFyUl9WaUt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGItN2Q3MDM3NGQ3NmQy LzEvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQBBbyuAwQA W8BSAwQAXb07AwQAbXrOAwQAueD7AwQB1W+GAwQB1W+MAwQB1bciMA0GCSqGSIb3 DQEBCwUAA4IBAQAn6YgfYOW5rXApk6GU2w1LeE+ImL6Kb2nZHw18kV0yVZPheQaB 1z8qPFGVKjXjxh+nC8XUp3irL2RP8qYbD5n+fbcebToqJT8B+PrhYL8tzHsAzgfK GK9mKnFTg5KC4PA8DFlRhQQLHwdFrCylxQc7pwTYET/KjZPjcWCrqAQmWnFX6K8U dJh8MINL6tZhQ1I6rLNPwMYU+Pqwtw5M4ILo4XIYBR2XfatplELTwXng/q7xGAv7 kECcaXPQEgb0dsDgRIhIYs2e69N7QwGKFzffiuiqgMMyfelJnLAt59WCKyBpA+ps ITiVkK5XyclvQGpYmZ5hw4Qi58jcvhiqA9i6 -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:10 2026 by rpki-client