This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/b5B5fVg5JQFI93o_bkGxYqBgTcA.roa File: b5B5fVg5JQFI93o_bkGxYqBgTcA.roa (raw, json) Hash identifier: KxD2Oza9P8EtKAvqi17xlL2B0ma0zo5mB3KiOChLdyg= Subject key identifier: 6F:90:79:7D:58:39:25:01:48:F7:7A:3F:6E:41:B1:62:A0:60:4D:C0 Certificate issuer: /CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af Certificate serial: 019B7834A6A2B5619E673CD4391B158D70EC Authority key identifier: D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/b5B5fVg5JQFI93o_bkGxYqBgTcA.roa Signing time: Thu 01 Jan 2026 06:17:55 +0000 ROA not before: Thu 01 Jan 2026 06:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39370 IP address blocks: 89.147.0.0/23 maxlen: 23 89.147.0.0/24 maxlen: 24 89.147.1.0/24 maxlen: 24 89.147.2.0/24 maxlen: 24 89.147.3.0/24 maxlen: 24 89.147.4.0/24 maxlen: 24 89.147.5.0/24 maxlen: 24 89.147.6.0/23 maxlen: 23 89.147.6.0/24 maxlen: 24 89.147.7.0/24 maxlen: 24 89.147.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a6:a2:b5:61:9e:67:3c:d4:39:1b:15:8d:70:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af Validity Not Before: Jan 1 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f90797d5839250148f77a3f6e41b162a0604dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0c:81:06:47:d9:de:98:35:6f:87:a4:c7:d1: 23:8a:e2:6b:41:70:c1:5e:49:77:6d:76:40:c5:4a: 95:40:49:02:c3:5b:80:6c:fb:c9:6d:00:70:75:a6: 11:de:d2:ea:5e:21:ec:33:94:0e:2e:e6:0b:14:c1: 2f:d3:35:57:e5:65:bd:fe:be:f5:12:58:9f:cb:ab: 6c:3a:2e:a6:b0:36:a3:1c:d7:66:85:17:37:21:31: 41:57:2b:51:21:51:05:18:fc:34:78:d4:40:f4:1c: c2:85:cf:75:47:10:50:39:25:d1:e0:76:9b:16:91: 9d:02:fb:ce:72:8a:84:61:49:90:02:b6:f3:24:0a: d7:e9:07:0d:b9:6b:0a:41:dd:6a:47:ce:81:ba:9b: cd:65:7e:31:cf:48:46:f3:1f:da:e4:b6:35:c1:6c: 4d:01:cd:8b:37:c8:03:c1:23:c2:c3:e8:90:12:0f: a8:a7:25:af:ca:16:09:8c:61:8f:2e:45:f3:81:a7: 62:d1:12:95:b9:b6:22:e6:4e:58:5a:8b:63:41:ed: 8d:56:a2:e1:b1:9c:46:f1:43:c9:c3:b1:02:74:a4: 3d:19:50:7f:d0:1d:28:c2:f3:b4:4e:00:c7:bf:b3: 98:fc:9f:8e:b2:fb:dc:24:d1:93:96:4b:6b:b6:4c: 70:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:90:79:7D:58:39:25:01:48:F7:7A:3F:6E:41:B1:62:A0:60:4D:C0 X509v3 Authority Key Identifier: keyid:D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/b5B5fVg5JQFI93o_bkGxYqBgTcA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.147.0.0/21 89.147.32.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:ec:40:a2:d0:51:d1:b0:56:ff:ba:fb:b0:6d:8a:b4:15:4e: 0e:ba:67:80:5d:a4:7e:0d:6f:87:45:a0:04:df:6f:ba:0f:8a: 40:64:33:24:5d:e0:4a:bc:6e:51:d7:e2:46:df:60:09:5f:81: c8:14:c2:c4:4d:90:b5:b8:b9:d5:a6:e1:c7:53:4c:dc:88:d3: aa:18:9d:d6:32:6e:26:ca:51:08:d7:d4:a6:2e:47:94:54:7b: 82:28:df:2e:8a:36:a8:18:5c:80:93:08:bb:83:f4:63:34:6a: 8f:f8:66:d7:e8:cc:0f:e5:f4:43:43:b4:82:cd:64:6a:5a:2b: 03:91:a2:8b:ef:94:0f:ee:14:ab:88:1a:5d:ed:10:08:03:f0: 43:85:d3:36:f6:3c:93:6f:a4:94:f2:34:9e:c6:1b:97:d2:39: a9:fa:52:60:6c:df:89:02:df:b3:ec:1d:17:e1:9c:9a:f5:bb: 80:f0:61:d5:ee:7a:3c:17:7c:fa:f3:21:09:23:2b:a3:ec:db: be:0c:6b:5f:c8:88:6b:cc:09:e2:c1:8d:c6:8f:31:83:aa:ca: a9:51:20:1c:ac:5b:ef:b8:a0:63:48:01:70:bf:65:56:c1:08: 47:ba:f6:da:fd:56:0b:ee:fb:2e:54:d8:fd:91:c2:58:42:59: ca:7b:87:e4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NKaitWGeZzzUORsVjXDsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZDA2NzRiZDZmMGNjOTE3NTIxOWEzMjhjOGIzOTY4Mjlm NmMwYWYwHhcNMjYwMTAxMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjkwNzk3ZDU4MzkyNTAxNDhmNzdhM2Y2ZTQxYjE2MmEwNjA0ZGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQyBBkfZ3pg1b4ekx9EjiuJrQXDB Xkl3bXZAxUqVQEkCw1uAbPvJbQBwdaYR3tLqXiHsM5QOLuYLFMEv0zVX5WW9/r71 Elify6tsOi6msDajHNdmhRc3ITFBVytRIVEFGPw0eNRA9BzChc91RxBQOSXR4Hab FpGdAvvOcoqEYUmQArbzJArX6QcNuWsKQd1qR86BupvNZX4xz0hG8x/a5LY1wWxN Ac2LN8gDwSPCw+iQEg+opyWvyhYJjGGPLkXzgadi0RKVubYi5k5YWotjQe2NVqLh sZxG8UPJw7ECdKQ9GVB/0B0owvO0TgDHv7OY/J+OsvvcJNGTlktrtkxwQwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG+QeX1YOSUBSPd6P25BsWKgYE3AMB8GA1UdIwQY MBaAFNfQZ0vW8MyRdSGaMoyLOWgp9sCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTlCblM5Ynd6SkYxSVpveWpJczVhQ24yd0s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iMzBlNWQtOGIzYi00Mjg3LTliM2It ODIzMmZhM2U2MjlkLzEvYjVCNWZWZzVKUUZJOTNvX2JrR3hZcUJnVGNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9iMzBlNWQtOGIzYi00Mjg3LTliM2ItODIzMmZhM2U2Mjlk LzEvMTlCblM5Ynd6SkYxSVpveWpJczVhQ24yd0s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDWZMAAwQB WZMgMA0GCSqGSIb3DQEBCwUAA4IBAQCL7ECi0FHRsFb/uvuwbYq0FU4OumeAXaR+ DW+HRaAE32+6D4pAZDMkXeBKvG5R1+JG32AJX4HIFMLETZC1uLnVpuHHU0zciNOq GJ3WMm4mylEI19SmLkeUVHuCKN8uijaoGFyAkwi7g/RjNGqP+GbX6MwP5fRDQ7SC zWRqWisDkaKL75QP7hSriBpd7RAIA/BDhdM29jyTb6SU8jSexhuX0jmp+lJgbN+J At+z7B0X4Zya9buA8GHV7no8F3z68yEJIyuj7Nu+DGtfyIhrzAniwY3GjzGDqsqp USAcrFvvuKBjSAFwv2VWwQhHuvba/VYL7vsuVNj9kcJYQlnKe4fk -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:03 2026 by rpki-client