This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/q7BZu13ZhKKbmNB_KZmV2uCo5UM.roa File: q7BZu13ZhKKbmNB_KZmV2uCo5UM.roa (raw, json) Hash identifier: DUi8UcN01Z/Vn8d70a2VsZHzXBcEDk/otcqbbplcxv0= Subject key identifier: AB:B0:59:BB:5D:D9:84:A2:9B:98:D0:7F:29:99:95:DA:E0:A8:E5:43 Certificate issuer: /CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b Certificate serial: 019B77C751D1550BFAE18DEA154B55AD19A0 Authority key identifier: E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/q7BZu13ZhKKbmNB_KZmV2uCo5UM.roa Signing time: Thu 01 Jan 2026 04:18:29 +0000 ROA not before: Thu 01 Jan 2026 04:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197075 IP address blocks: 5.152.149.0/24 maxlen: 24 37.77.160.0/21 maxlen: 24 45.156.60.0/23 maxlen: 24 45.156.62.0/23 maxlen: 23 46.31.104.0/21 maxlen: 24 81.29.176.0/22 maxlen: 23 85.208.76.0/22 maxlen: 24 185.25.234.0/23 maxlen: 23 185.37.116.0/22 maxlen: 23 185.47.138.0/24 maxlen: 24 185.59.20.0/22 maxlen: 23 185.186.12.0/22 maxlen: 23 185.246.95.0/24 maxlen: 24 195.177.114.0/24 maxlen: 24 2a02:2420::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:51:d1:55:0b:fa:e1:8d:ea:15:4b:55:ad:19:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b Validity Not Before: Jan 1 04:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abb059bb5dd984a29b98d07f299995dae0a8e543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:31:5d:36:35:36:50:4f:c3:7c:45:8e:45:ef: 3c:2b:1a:ea:26:54:4a:0a:4c:95:07:be:a0:65:1a: c9:5c:6c:44:b7:25:da:0b:da:e2:92:b8:35:cf:73: 24:60:8b:5c:55:6e:73:42:3f:66:13:ca:68:17:72: f9:7b:35:81:9f:a1:a2:f7:61:8e:28:fa:67:d5:db: 9a:e7:48:c0:b7:fd:9a:8a:72:65:c2:37:bf:30:37: 66:b3:73:70:fd:6f:55:f9:8a:a2:61:d9:bd:e8:19: d8:2e:e3:bb:59:d0:c6:11:d6:15:a1:65:fc:ca:da: cd:a7:fc:bc:93:40:8d:b0:2b:79:c1:64:46:f1:23: a3:d6:d7:16:4b:06:f3:d5:c0:2a:22:ad:94:84:a0: 94:ff:06:96:21:bb:14:fe:ab:00:9c:a0:f2:6d:54: f5:0c:81:5a:d3:69:2f:41:a4:07:85:23:f9:c6:45: bf:d5:3d:9f:d5:be:8c:30:0f:6b:4c:9a:fe:90:57: cf:1b:0e:e7:6a:b7:5c:7a:58:7f:7c:4b:9e:35:c2: 41:0c:86:38:3f:58:00:16:54:73:5c:32:83:de:50: 43:33:05:0c:e2:83:11:fc:77:d5:44:e4:15:bc:6f: ab:3a:89:58:1b:bd:0d:87:38:5b:e4:8b:67:b4:40: 28:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B0:59:BB:5D:D9:84:A2:9B:98:D0:7F:29:99:95:DA:E0:A8:E5:43 X509v3 Authority Key Identifier: keyid:E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/q7BZu13ZhKKbmNB_KZmV2uCo5UM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.152.149.0/24 37.77.160.0/21 45.156.60.0/22 46.31.104.0/21 81.29.176.0/22 85.208.76.0/22 185.25.234.0/23 185.37.116.0/22 185.47.138.0/24 185.59.20.0/22 185.186.12.0/22 185.246.95.0/24 195.177.114.0/24 IPv6: 2a02:2420::/32 Signature Algorithm: sha256WithRSAEncryption 25:85:d2:b8:94:83:58:ed:fd:11:05:60:cb:59:d8:66:17:20: ba:36:b0:26:68:81:0f:ec:84:2a:d5:8c:51:62:0e:76:c9:2e: ab:38:d7:68:a1:62:15:8d:79:86:d2:40:71:f9:98:82:bb:6e: cb:2a:d3:8c:ff:4e:e6:1c:b4:d6:2e:a6:e4:58:f9:64:6c:fe: 11:9b:1f:d2:02:78:51:25:3f:f9:d9:2c:71:00:f7:a5:f8:c3: 27:97:b9:dd:6f:7e:ee:b5:33:98:37:b7:95:d1:f8:f7:3d:88: 67:6f:4e:2a:49:fe:ee:da:4e:29:66:47:9d:13:8d:33:81:40: 86:3c:bc:61:e1:58:6f:2e:e2:dd:3f:21:19:be:58:75:29:43: 04:d5:9e:a8:d6:18:d5:0b:90:51:04:95:2c:cb:96:1b:f1:e3: 92:ab:25:dd:f0:35:06:63:96:1f:e3:5a:36:4f:73:8c:ee:54: ff:4d:6f:5f:ec:5d:7e:f9:23:dd:fe:e8:d4:1e:a6:4f:41:a8: ce:9b:db:5b:54:ef:2e:ae:33:3c:79:5d:e2:48:34:08:03:d2: fe:e9:bd:42:e3:53:82:4f:d1:72:df:f3:47:ea:8d:28:07:1b: 6f:f3:66:ff:07:3e:d6:1b:d3:ae:57:1a:e4:84:5f:f2:38:c1: 0b:75:1c:56 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgISAZt3x1HRVQv64Y3qFUtVrRmgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ZmFhMGQyZjVkZWMwMjAxZjU1ZTQwOTc5YzE5MDliNmRi NzdjM2IwHhcNMjYwMTAxMDQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmIwNTliYjVkZDk4NGEyOWI5OGQwN2YyOTk5OTVkYWUwYThlNTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojFdNjU2UE/DfEWORe88KxrqJlRK CkyVB76gZRrJXGxEtyXaC9rikrg1z3MkYItcVW5zQj9mE8poF3L5ezWBn6Gi92GO KPpn1dua50jAt/2ainJlwje/MDdms3Nw/W9V+YqiYdm96BnYLuO7WdDGEdYVoWX8 ytrNp/y8k0CNsCt5wWRG8SOj1tcWSwbz1cAqIq2UhKCU/waWIbsU/qsAnKDybVT1 DIFa02kvQaQHhSP5xkW/1T2f1b6MMA9rTJr+kFfPGw7nardcelh/fEueNcJBDIY4 P1gAFlRzXDKD3lBDMwUM4oMR/HfVROQVvG+rOolYG70Nhzhb5ItntEAo+QIDAQAB o4ICYDCCAlwwHQYDVR0OBBYEFKuwWbtd2YSim5jQfymZldrgqOVDMB8GA1UdIwQY MBaAFOb6oNL13sAgH1XkCXnBkJttt3w7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXZxZzB2WGV3Q0FmVmVRSmVjR1FtMjIzZkRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8wOTc3NDgtNWNjOC00NTBmLTlmYmIt OGM4ZDEwZThlYWJjLzEvcTdCWnUxM1poS0tibU5CX0tabVYydUNvNVVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8wOTc3NDgtNWNjOC00NTBmLTlmYmItOGM4ZDEwZThlYWJj LzEvNXZxZzB2WGV3Q0FmVmVRSmVjR1FtMjIzZkRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/BGcwZTBUBAIAATBOAwQABZiVAwQD JU2gAwQCLZw8AwQDLh9oAwQCUR2wAwQCVdBMAwQBuRnqAwQCuSV0AwQAuS+KAwQC uTsUAwQCuboMAwQAufZfAwQAw7FyMA0EAgACMAcDBQAqAiQgMA0GCSqGSIb3DQEB CwUAA4IBAQAlhdK4lINY7f0RBWDLWdhmFyC6NrAmaIEP7IQq1YxRYg52yS6rONdo oWIVjXmG0kBx+ZiCu27LKtOM/07mHLTWLqbkWPlkbP4Rmx/SAnhRJT/52SxxAPel +MMnl7ndb37utTOYN7eV0fj3PYhnb04qSf7u2k4pZkedE40zgUCGPLxh4VhvLuLd PyEZvlh1KUME1Z6o1hjVC5BRBJUsy5Yb8eOSqyXd8DUGY5Yf41o2T3OM7lT/TW9f 7F1++SPd/ujUHqZPQajOm9tbVO8urjM8eV3iSDQIA9L+6b1C41OCT9Fy3/NH6o0o Bxtv82b/Bz7WG9OuVxrkhF/yOMELdRxW -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:52 2026 by rpki-client