This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/5t0r8fJd2nhioYpGfkI7Yf9otXA.roa File: 5t0r8fJd2nhioYpGfkI7Yf9otXA.roa (raw, json) Hash identifier: k52ZXWE/9hDIrYh0zpZm2nywZwLzZgmA6wQ6L4w58mM= Subject key identifier: E6:DD:2B:F1:F2:5D:DA:78:62:A1:8A:46:7E:42:3B:61:FF:68:B5:70 Certificate issuer: /CN=808c3a6c5cbff0739e438d05744405b16197b15b Certificate serial: 019B7C1364A42976B1EDB79D5DAA30869A4A Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/5t0r8fJd2nhioYpGfkI7Yf9otXA.roa Signing time: Fri 02 Jan 2026 00:20:04 +0000 ROA not before: Fri 02 Jan 2026 00:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41435 IP address blocks: 79.110.128.0/20 maxlen: 20 79.110.128.0/22 maxlen: 22 79.110.128.0/23 maxlen: 23 79.110.130.0/23 maxlen: 23 79.110.132.0/22 maxlen: 22 79.110.132.0/23 maxlen: 23 79.110.134.0/23 maxlen: 23 91.193.32.0/22 maxlen: 22 91.193.32.0/23 maxlen: 23 91.193.34.0/23 maxlen: 23 176.104.0.0/18 maxlen: 18 176.104.0.0/19 maxlen: 19 176.104.32.0/19 maxlen: 19 194.9.36.0/23 maxlen: 23 194.9.36.0/24 maxlen: 24 194.9.37.0/24 maxlen: 24 213.109.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:64:a4:29:76:b1:ed:b7:9d:5d:aa:30:86:9a:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b Validity Not Before: Jan 2 00:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6dd2bf1f25dda7862a18a467e423b61ff68b570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ee:96:62:94:24:d4:29:3d:9e:f4:92:ff:13: de:e0:0f:cd:9b:83:5b:31:14:a2:04:98:f9:9b:45: cb:b7:d1:4d:5b:b5:d9:f1:68:42:68:3a:af:78:2d: 8f:5b:ad:52:e3:15:90:a5:33:60:e0:a2:66:80:35: 03:cb:7c:98:01:15:cc:34:ba:8a:e4:2f:8c:54:ee: 60:2e:f6:fd:04:d0:e2:e1:bd:1a:b1:0c:c7:ea:39: fe:54:d0:10:01:c6:2f:77:c2:d3:a5:1e:f2:c3:81: a9:a9:b6:09:d0:1c:35:dc:47:07:f0:8f:fb:73:f9: 94:ee:ae:da:f6:39:2e:e0:11:c6:c7:77:bf:8f:bc: e1:db:f8:ce:ce:d1:0b:67:4f:3a:03:ca:20:a2:12: 2b:5e:71:65:98:10:e8:e5:4a:de:2b:4c:cd:26:dd: 7f:82:bd:1e:28:30:70:93:40:cd:17:3f:d4:5a:c9: 06:c2:ed:fb:45:23:dd:8a:c7:96:27:32:17:50:3a: e0:dc:56:6c:41:a1:38:7a:44:13:55:2d:2c:bf:ad: 7f:22:7c:39:e0:bd:f6:dc:50:ac:26:c6:88:36:9b: e7:b8:1d:b1:45:e2:cc:ee:6e:0c:9a:69:ec:18:6c: b2:99:4f:9a:41:98:38:e2:d6:da:20:64:c4:26:b3: 65:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DD:2B:F1:F2:5D:DA:78:62:A1:8A:46:7E:42:3B:61:FF:68:B5:70 X509v3 Authority Key Identifier: keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/5t0r8fJd2nhioYpGfkI7Yf9otXA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.110.128.0/20 91.193.32.0/22 176.104.0.0/18 194.9.36.0/23 213.109.80.0/20 Signature Algorithm: sha256WithRSAEncryption 14:82:5c:93:8d:3f:6a:ac:e0:67:b1:cd:90:bd:a3:1b:5b:7c: 4c:2b:0c:28:db:6a:66:00:b9:34:f3:af:c8:a3:8f:b2:c8:ec: 73:36:17:4d:03:36:d2:f4:9d:fe:80:22:18:73:5b:3c:c9:cc: 8d:8d:d1:68:d3:ca:76:7b:4f:69:2e:a0:cf:4c:09:aa:8f:ad: 4e:81:4e:98:02:8b:06:55:59:ed:bb:2f:fa:7b:bd:ed:2b:58: 8b:b4:71:46:78:01:7b:2b:a6:ef:1a:73:85:f3:44:3f:ae:4c: e7:7d:9a:3c:20:c8:09:69:07:c5:b2:46:ac:14:c1:ec:d7:12: e1:9a:10:69:ad:89:d9:36:83:07:a0:29:39:87:2e:84:a4:f6: ff:af:5d:f8:fc:f5:1f:cb:37:55:32:68:e0:df:6d:75:82:61: e6:bc:b9:2a:ea:73:2b:15:dc:d5:99:a0:f2:16:64:3b:73:1d: 21:a8:18:ad:b8:46:ba:17:65:94:d3:2f:b4:19:8a:63:3d:0c: f6:4d:7d:bb:96:fb:db:93:8f:d4:75:4c:ae:6a:db:76:07:16: ec:27:48:db:0b:63:b0:3e:fc:f8:20:67:37:70:ef:ce:04:b2: 9a:c7:c7:71:95:d1:16:5c:9c:01:c3:04:a8:e4:93:24:80:3b: d8:9d:b3:cd -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt8E2SkKXax7bedXaowhppKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwOGMzYTZjNWNiZmYwNzM5ZTQzOGQwNTc0NDQwNWIxNjE5 N2IxNWIwHhcNMjYwMTAyMDAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmRkMmJmMWYyNWRkYTc4NjJhMThhNDY3ZTQyM2I2MWZmNjhiNTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve6WYpQk1Ck9nvSS/xPe4A/Nm4Nb MRSiBJj5m0XLt9FNW7XZ8WhCaDqveC2PW61S4xWQpTNg4KJmgDUDy3yYARXMNLqK 5C+MVO5gLvb9BNDi4b0asQzH6jn+VNAQAcYvd8LTpR7yw4GpqbYJ0Bw13EcH8I/7 c/mU7q7a9jku4BHGx3e/j7zh2/jOztELZ086A8ogohIrXnFlmBDo5UreK0zNJt1/ gr0eKDBwk0DNFz/UWskGwu37RSPdiseWJzIXUDrg3FZsQaE4ekQTVS0sv61/Inw5 4L323FCsJsaINpvnuB2xReLM7m4MmmnsGGyymU+aQZg44tbaIGTEJrNlfwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFObdK/HyXdp4YqGKRn5CO2H/aLVwMB8GA1UdIwQY MBaAFICMOmxcv/BznkONBXREBbFhl7FbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0l3NmJGeV84SE9lUTQwRmRFUUZzV0dYc1ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82OThlNGUtMGEzOS00MTZiLWFmZmUt NjE4MTljNDgwY2JlLzEvNXQwcjhmSmQybmhpb1lwR2ZrSTdZZjlvdFhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC82OThlNGUtMGEzOS00MTZiLWFmZmUtNjE4MTljNDgwY2Jl LzEvZ0l3NmJGeV84SE9lUTQwRmRFUUZzV0dYc1ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQET26AAwQC W8EgAwQGsGgAAwQBwgkkAwQE1W1QMA0GCSqGSIb3DQEBCwUAA4IBAQAUglyTjT9q rOBnsc2QvaMbW3xMKwwo22pmALk086/Io4+yyOxzNhdNAzbS9J3+gCIYc1s8ycyN jdFo08p2e09pLqDPTAmqj61OgU6YAosGVVntuy/6e73tK1iLtHFGeAF7K6bvGnOF 80Q/rkznfZo8IMgJaQfFskasFMHs1xLhmhBprYnZNoMHoCk5hy6EpPb/r134/PUf yzdVMmjg3211gmHmvLkq6nMrFdzVmaDyFmQ7cx0hqBituEa6F2WU0y+0GYpjPQz2 TX27lvvbk4/UdUyuatt2BxbsJ0jbC2OwPvz4IGc3cO/OBLKax8dxldEWXJwBwwSo 5JMkgDvYnbPN -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:23 2026 by rpki-client