This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/rx5FrArsEh1Pd7b0NgJ2Xd6ltaE.roa File: rx5FrArsEh1Pd7b0NgJ2Xd6ltaE.roa (raw, json) Hash identifier: e1BXfn+1OHZJUEKq2u7HgsMulbmjg22+GP7JrrmxT/4= Subject key identifier: AF:1E:45:AC:0A:EC:12:1D:4F:77:B6:F4:36:02:76:5D:DE:A5:B5:A1 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019B76EB1130539469924E343ED145DDD0CB Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/rx5FrArsEh1Pd7b0NgJ2Xd6ltaE.roa Signing time: Thu 01 Jan 2026 00:17:55 +0000 ROA not before: Thu 01 Jan 2026 00:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201337 IP address blocks: 86.105.28.0/22 maxlen: 24 86.105.28.0/24 maxlen: 24 86.105.31.0/24 maxlen: 24 86.106.184.0/22 maxlen: 24 89.47.4.0/22 maxlen: 24 89.47.6.0/23 maxlen: 24 185.75.200.0/22 maxlen: 24 185.77.168.0/22 maxlen: 24 188.240.204.0/24 maxlen: 24 188.240.205.0/24 maxlen: 24 188.240.206.0/23 maxlen: 24 188.240.206.0/24 maxlen: 24 195.82.120.0/22 maxlen: 24 195.82.120.0/24 maxlen: 24 195.82.121.0/24 maxlen: 24 195.82.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:11:30:53:94:69:92:4e:34:3e:d1:45:dd:d0:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jan 1 00:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af1e45ac0aec121d4f77b6f43602765ddea5b5a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b6:25:92:7a:2c:d6:8d:2e:b8:b6:a4:a9:e1: 10:66:4e:2a:7a:1c:db:f4:dc:7f:9e:8d:97:e5:b1: cd:e1:a5:33:b4:45:ef:e8:69:bf:e9:fa:80:a6:d0: ff:d4:56:a8:4c:5b:43:90:2d:6d:bd:b3:3e:78:a0: 9b:64:33:a0:dc:ff:28:f3:33:f3:c6:05:51:0d:8a: 15:04:ca:2e:6a:85:7b:2d:76:86:24:64:61:4c:f2: 2e:80:50:02:af:a2:f6:c1:26:aa:a1:97:11:8c:e8: f7:7c:17:47:3c:05:4e:04:bd:fd:8c:e8:70:3f:c2: fc:55:99:35:f3:82:cd:5c:32:1e:a8:72:bf:34:0f: 09:65:bc:81:b9:83:c4:c6:24:17:c7:d0:91:1e:4c: cc:d3:0b:44:e1:f5:95:62:8c:c5:10:84:74:b4:e7: e8:6a:08:94:60:c4:ac:6c:15:fa:1b:3a:e6:05:be: 5e:97:10:b0:53:16:26:b9:79:78:7a:9c:84:e4:e8: 9e:50:9e:5a:7c:6d:5f:96:48:5a:a8:b1:5a:92:f5: 22:84:5c:a6:3d:8e:04:3e:0e:d6:50:52:62:b5:da: 62:c4:ca:b2:9c:c6:7f:ca:f4:82:03:04:81:ef:69: 29:03:19:27:25:06:1c:1f:b6:99:d4:dc:fd:45:34: c5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1E:45:AC:0A:EC:12:1D:4F:77:B6:F4:36:02:76:5D:DE:A5:B5:A1 X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/rx5FrArsEh1Pd7b0NgJ2Xd6ltaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.105.28.0/22 86.106.184.0/22 89.47.4.0/22 185.75.200.0/22 185.77.168.0/22 188.240.204.0/22 195.82.120.0/22 Signature Algorithm: sha256WithRSAEncryption 06:8d:06:4e:6a:e2:e3:a6:cd:01:f9:44:dc:01:e9:5c:c1:e6: cc:98:44:8f:bb:20:7e:9f:10:31:b5:bc:0f:f9:2e:66:fb:4b: 10:b9:66:3f:fc:0c:4d:8a:f1:ba:d4:91:02:b4:97:8d:2a:c7: b2:cc:b1:0d:a2:40:94:6a:3f:7f:8a:e5:a2:04:e8:9a:58:21: 7d:91:0c:6a:c3:fb:8d:21:7b:1b:e6:80:7f:35:7e:db:b5:6b: 5d:2a:58:ce:9f:f5:3a:16:62:e6:91:3f:ee:5a:5a:d5:69:9d: 39:27:6f:a4:6a:7d:81:65:c2:8b:7a:16:c3:de:b2:2e:54:d3: fa:5e:f8:88:96:35:b3:d8:bf:32:bd:a2:c8:9f:88:4f:d9:7f: 6d:3c:69:4e:78:59:f5:2a:2b:2c:88:0b:82:1e:fa:3b:bd:dc: c4:3c:e5:95:e7:00:38:bf:fa:a5:dd:48:98:a5:db:a2:26:08: 0a:69:a9:5a:68:5c:11:5b:18:18:fc:57:dd:71:d3:d8:f7:56: 4e:de:1f:70:5a:8c:de:5d:33:4e:d5:87:d7:ea:e1:24:e7:99: 34:ce:f4:d2:33:44:6d:0d:92:87:e6:d9:6c:b9:1e:ff:d3:7b: 23:c3:42:b1:30:12:94:94:1a:a7:5d:1d:6b:3e:c3:2f:bc:a2: ba:18:64:91 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt26xEwU5Rpkk40PtFF3dDLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwMTAxMDAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjFlNDVhYzBhZWMxMjFkNGY3N2I2ZjQzNjAyNzY1ZGRlYTViNWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7Ylknos1o0uuLakqeEQZk4qehzb 9Nx/no2X5bHN4aUztEXv6Gm/6fqAptD/1FaoTFtDkC1tvbM+eKCbZDOg3P8o8zPz xgVRDYoVBMouaoV7LXaGJGRhTPIugFACr6L2wSaqoZcRjOj3fBdHPAVOBL39jOhw P8L8VZk184LNXDIeqHK/NA8JZbyBuYPExiQXx9CRHkzM0wtE4fWVYozFEIR0tOfo agiUYMSsbBX6GzrmBb5elxCwUxYmuXl4epyE5OieUJ5afG1flkhaqLFakvUihFym PY4EPg7WUFJitdpixMqynMZ/yvSCAwSB72kpAxknJQYcH7aZ1Nz9RTTFlQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFK8eRawK7BIdT3e29DYCdl3epbWhMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvcng1RnJBcnNFaDFQZDdiME5nSjJYZDZsdGFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCVmkcAwQC Vmq4AwQCWS8EAwQCuUvIAwQCuU2oAwQCvPDMAwQCw1J4MA0GCSqGSIb3DQEBCwUA A4IBAQAGjQZOauLjps0B+UTcAelcwebMmESPuyB+nxAxtbwP+S5m+0sQuWY//AxN ivG61JECtJeNKseyzLENokCUaj9/iuWiBOiaWCF9kQxqw/uNIXsb5oB/NX7btWtd KljOn/U6FmLmkT/uWlrVaZ05J2+kan2BZcKLehbD3rIuVNP6XviIljWz2L8yvaLI n4hP2X9tPGlOeFn1KissiAuCHvo7vdzEPOWV5wA4v/ql3UiYpduiJggKaalaaFwR WxgY/FfdcdPY91ZO3h9wWozeXTNO1YfX6uEk55k0zvTSM0RtDZKH5tlsuR7/03sj w0KxMBKUlBqnXR1rPsMvvKK6GGSR -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:22 2026 by rpki-client