This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/dbO5CKnLQTTJh3eDR9I8bGXedlY.roa File: dbO5CKnLQTTJh3eDR9I8bGXedlY.roa (raw, json) Hash identifier: tPxsmGUbFFDCPaVcd/ukZ/6WBXMPRTeyul9lkIVarMA= Subject key identifier: 75:B3:B9:08:A9:CB:41:34:C9:87:77:83:47:D2:3C:6C:65:DE:76:56 Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 019B79ECF75CC0CEE0AFC690DDD80C96E5F4 Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/dbO5CKnLQTTJh3eDR9I8bGXedlY.roa Signing time: Thu 01 Jan 2026 14:18:51 +0000 ROA not before: Thu 01 Jan 2026 14:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12732 IP address blocks: 212.21.71.0/24 maxlen: 24 212.21.92.0/22 maxlen: 24 212.42.230.0/24 maxlen: 24 212.42.236.0/23 maxlen: 24 212.42.242.0/23 maxlen: 24 2001:bf0::/29 maxlen: 32 2001:bf0::/32 maxlen: 32 2001:bf0:40::/48 maxlen: 48 2001:bf0:69::/48 maxlen: 48 2001:bf1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:f7:5c:c0:ce:e0:af:c6:90:dd:d8:0c:96:e5:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: Jan 1 14:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75b3b908a9cb4134c987778347d23c6c65de7656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7d:54:93:2b:b8:cc:a7:00:f3:85:b1:27:90: 1e:c7:c4:f1:98:86:29:1d:44:f9:9f:86:6f:fe:d8: 52:18:36:b9:66:bc:b5:ee:f3:80:2a:1c:2b:30:17: a9:dd:ce:70:25:fa:c3:eb:7c:94:7c:ef:05:f8:83: fd:d4:98:cb:87:33:48:94:23:ec:fb:4a:d4:74:b2: af:a7:6f:51:40:82:76:c2:8f:a9:bb:a9:35:16:33: aa:97:23:2b:47:f7:6f:1f:26:87:30:73:e9:0e:aa: c1:52:0f:60:b4:aa:5c:29:63:80:55:1b:a1:c5:4e: f3:28:09:a5:de:25:a4:c1:d7:e6:d7:2d:38:37:7e: 98:f7:63:4c:e9:e7:51:1e:39:7c:29:7c:56:85:33: 23:27:ad:ff:f8:61:50:e5:50:d2:68:a6:c5:cc:1c: a4:46:7d:ee:9f:a7:90:2d:22:27:b0:cd:44:a4:71: d1:97:4b:8d:00:2c:ab:c4:e5:72:a6:80:79:38:eb: 74:a6:dd:97:b3:c0:19:97:bf:68:d8:e9:ac:54:de: 33:ea:b9:c2:51:78:cf:30:a4:ca:fc:33:ce:a1:d1: b0:ec:55:72:86:de:57:a3:10:39:07:07:38:bc:d1: 38:a4:79:c0:80:93:cd:65:0a:d2:a3:b4:e1:3a:28: cb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B3:B9:08:A9:CB:41:34:C9:87:77:83:47:D2:3C:6C:65:DE:76:56 X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/dbO5CKnLQTTJh3eDR9I8bGXedlY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.21.71.0/24 212.21.92.0/22 212.42.230.0/24 212.42.236.0/23 212.42.242.0/23 IPv6: 2001:bf0::/29 Signature Algorithm: sha256WithRSAEncryption a2:95:8b:0b:ea:85:b7:91:1b:d9:a8:f1:2b:3a:c5:be:73:af: 40:2c:f0:d4:c1:e1:c3:ad:e4:ef:a0:c8:fb:3a:ae:44:92:68: bc:c5:ff:ff:37:eb:5a:44:33:80:d7:77:6e:5d:10:d3:2c:de: 00:1c:dc:51:5a:65:38:8e:3e:6d:04:af:0d:04:94:14:42:c5: 38:28:9a:aa:f4:5b:51:84:13:50:54:d8:c0:fa:8c:78:1c:4e: 0f:63:6b:98:58:50:a5:cc:38:72:46:69:c7:c9:05:7a:7b:fd: 55:e9:f3:0f:2a:5d:c6:3e:53:9b:64:d6:b5:34:b4:0f:95:1c: ac:d8:a4:94:80:4a:fd:6b:6d:9a:ea:13:88:84:50:52:5a:9d: c7:80:d0:4f:71:77:31:f5:47:f6:ae:83:22:bb:fc:fa:e0:98: c7:46:90:b9:5e:6d:4e:71:dd:4f:3f:9c:48:84:8b:ae:77:93: 8a:81:dd:38:db:f4:6a:f2:4c:4f:58:fe:99:56:bf:fe:69:e9: 45:38:71:ea:74:54:1d:c6:3a:4c:09:b3:aa:95:b5:0d:dc:6c: c5:ea:48:7e:bd:a7:1c:7c:65:a1:c9:ae:50:16:86:98:2e:62: 12:1f:61:16:eb:43:40:68:07:ed:99:54:a1:25:ea:8a:b6:8e: bf:24:60:94 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt57PdcwM7gr8aQ3dgMluX0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjYwMTAxMTQxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWIzYjkwOGE5Y2I0MTM0Yzk4Nzc3ODM0N2QyM2M2YzY1ZGU3NjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX1Ukyu4zKcA84WxJ5Aex8TxmIYp HUT5n4Zv/thSGDa5Zry17vOAKhwrMBep3c5wJfrD63yUfO8F+IP91JjLhzNIlCPs +0rUdLKvp29RQIJ2wo+pu6k1FjOqlyMrR/dvHyaHMHPpDqrBUg9gtKpcKWOAVRuh xU7zKAml3iWkwdfm1y04N36Y92NM6edRHjl8KXxWhTMjJ63/+GFQ5VDSaKbFzByk Rn3un6eQLSInsM1EpHHRl0uNACyrxOVypoB5OOt0pt2Xs8AZl79o2OmsVN4z6rnC UXjPMKTK/DPOodGw7FVyht5XoxA5Bwc4vNE4pHnAgJPNZQrSo7ThOijL9wIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFHWzuQipy0E0yYd3g0fSPGxl3nZWMB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvZGJPNUNLbkxRVFRKaDNlRFI5SThiR1hlZGxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQA1BVHAwQC 1BVcAwQA1CrmAwQB1CrsAwQB1CryMA0EAgACMAcDBQMgAQvwMA0GCSqGSIb3DQEB CwUAA4IBAQCilYsL6oW3kRvZqPErOsW+c69ALPDUweHDreTvoMj7Oq5Ekmi8xf// N+taRDOA13duXRDTLN4AHNxRWmU4jj5tBK8NBJQUQsU4KJqq9FtRhBNQVNjA+ox4 HE4PY2uYWFClzDhyRmnHyQV6e/1V6fMPKl3GPlObZNa1NLQPlRys2KSUgEr9a22a 6hOIhFBSWp3HgNBPcXcx9Uf2roMiu/z64JjHRpC5Xm1Ocd1PP5xIhIuud5OKgd04 2/Rq8kxPWP6ZVr/+aelFOHHqdFQdxjpMCbOqlbUN3GzF6kh+vaccfGWhya5QFoaY LmISH2EW60NAaAftmVShJeqKto6/JGCU -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:35 2026 by rpki-client