This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/0kbAZrj0KlIr6tTe_BrPv7Ou9Do.roa File: 0kbAZrj0KlIr6tTe_BrPv7Ou9Do.roa (raw, json) Hash identifier: j8FCsH7KdJb2m1l6ogZ9wjzQrPPAwuq0Mi1PAn+gc3E= Subject key identifier: D2:46:C0:66:B8:F4:2A:52:2B:EA:D4:DE:FC:1A:CF:BF:B3:AE:F4:3A Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda Certificate serial: 019BD58B179CFB332FD79CDDCB3FB9820B29 Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/0kbAZrj0KlIr6tTe_BrPv7Ou9Do.roa Signing time: Mon 19 Jan 2026 09:17:01 +0000 ROA not before: Mon 19 Jan 2026 09:17:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31688 IP address blocks: 5.63.24.0/21 maxlen: 21 5.63.24.0/24 maxlen: 24 5.63.25.0/24 maxlen: 24 5.63.26.0/24 maxlen: 24 5.63.27.0/24 maxlen: 24 5.63.28.0/24 maxlen: 24 5.63.29.0/24 maxlen: 24 5.63.30.0/24 maxlen: 24 5.63.31.0/24 maxlen: 24 91.190.168.0/21 maxlen: 21 91.190.168.0/24 maxlen: 24 91.190.169.0/24 maxlen: 24 91.190.170.0/24 maxlen: 24 91.190.171.0/24 maxlen: 24 91.190.172.0/24 maxlen: 24 91.190.173.0/24 maxlen: 24 91.190.174.0/24 maxlen: 24 91.190.175.0/24 maxlen: 24 185.85.76.0/22 maxlen: 22 185.85.76.0/23 maxlen: 23 185.85.76.0/24 maxlen: 24 185.85.77.0/24 maxlen: 24 185.85.78.0/24 maxlen: 24 185.85.79.0/24 maxlen: 24 2a02:798::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:8b:17:9c:fb:33:2f:d7:9c:dd:cb:3f:b9:82:0b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda Validity Not Before: Jan 19 09:17:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d246c066b8f42a522bead4defc1acfbfb3aef43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ab:6a:5a:0e:88:26:cc:cd:3c:91:2f:b4:f1: 2c:cb:a7:55:34:09:4a:4c:61:dd:6f:dd:33:96:80: f1:e9:8d:a7:52:31:42:9a:71:cd:43:6f:9c:83:94: f2:96:0f:4a:2b:d5:8a:77:0a:24:69:8e:a6:ef:8a: f8:8f:8b:48:97:e2:a0:94:03:c9:ce:1f:20:95:c0: 93:26:58:35:f7:32:78:fb:14:15:54:6a:2e:1d:83: ba:1d:d9:d3:a1:f2:7e:5c:50:e7:cd:eb:89:4f:f5: 90:52:67:e2:44:78:12:7a:b1:4b:8a:72:60:59:52: ad:75:bf:e9:4d:c8:96:a9:c7:6c:04:53:da:98:af: bc:4a:73:a6:26:0e:e4:95:3a:0b:7c:7d:71:57:94: 68:66:3d:f5:10:dc:ef:3d:f4:64:a2:ca:40:63:76: 2c:96:59:1d:d4:ab:7a:52:fe:90:e3:00:73:51:10: 27:08:23:63:b1:aa:1c:7d:33:34:08:00:c6:64:38: f4:fb:82:f7:18:a3:b9:8f:9c:d1:59:05:bb:e6:a0: b7:3f:56:26:60:87:dd:48:0b:66:ca:04:bf:b2:d8: 8c:3d:2a:61:a0:1e:b3:da:0f:b8:1c:f5:18:f6:3b: f3:d4:b9:a0:f9:93:41:aa:03:27:2b:30:bf:5d:93: b3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:46:C0:66:B8:F4:2A:52:2B:EA:D4:DE:FC:1A:CF:BF:B3:AE:F4:3A X509v3 Authority Key Identifier: keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/0kbAZrj0KlIr6tTe_BrPv7Ou9Do.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.63.24.0/21 91.190.168.0/21 185.85.76.0/22 IPv6: 2a02:798::/32 Signature Algorithm: sha256WithRSAEncryption 9f:7a:79:ac:2b:13:21:57:47:e5:b9:cf:c7:94:a4:60:07:59: fa:20:ba:7e:13:bd:a1:b3:42:cd:e0:22:6a:59:b0:df:03:c3: f4:31:46:d1:58:67:09:a3:5f:17:f5:92:f5:84:63:f3:3f:67: 42:0a:8d:86:79:fa:c1:9f:f3:9f:b6:f5:19:c9:19:55:be:8d: 09:81:bf:44:da:c2:3a:ff:b8:24:63:e9:be:64:d6:40:be:53: 8e:e8:e6:91:de:99:88:59:7d:10:f2:f0:cc:2b:11:6b:90:9c: 69:7f:5c:d0:25:04:d3:35:30:4a:75:7a:16:df:29:b7:03:7b: 21:9c:fd:76:de:94:62:d3:68:4d:7e:14:71:cf:0e:18:e3:ef: 8a:4d:54:a9:23:b1:ea:65:4b:37:69:6c:0f:08:a2:af:f3:93: 78:e5:3f:9b:cc:69:5d:ec:55:ee:34:6d:88:de:3a:fb:a4:42: fb:a5:86:f0:42:b4:00:0d:44:87:01:fb:4f:0b:ca:cb:e7:0d: 7e:d0:12:4c:bf:e0:d2:c5:83:eb:c5:97:ce:be:ce:98:3a:bb: 04:1e:14:9a:f8:c7:35:3c:ea:84:e6:67:45:ee:3f:d9:4a:54: 5b:92:ba:12:e1:d9:32:0b:bf:7e:e1:dd:4f:f8:8a:cc:83:cc: 87:5c:3c:02 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZvVixec+zMv15zdyz+5ggspMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMTQxYzUwOTA4MjRkMGExN2MyOWVjNDA1MGUyMTAwNzEx M2ZiZGEwHhcNMjYwMTE5MDkxNzAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjQ2YzA2NmI4ZjQyYTUyMmJlYWQ0ZGVmYzFhY2ZiZmIzYWVmNDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqtqWg6IJszNPJEvtPEsy6dVNAlK TGHdb90zloDx6Y2nUjFCmnHNQ2+cg5Tylg9KK9WKdwokaY6m74r4j4tIl+KglAPJ zh8glcCTJlg19zJ4+xQVVGouHYO6HdnTofJ+XFDnzeuJT/WQUmfiRHgSerFLinJg WVKtdb/pTciWqcdsBFPamK+8SnOmJg7klToLfH1xV5RoZj31ENzvPfRkospAY3Ys llkd1Kt6Uv6Q4wBzURAnCCNjsaocfTM0CADGZDj0+4L3GKO5j5zRWQW75qC3P1Ym YIfdSAtmygS/stiMPSphoB6z2g+4HPUY9jvz1Lmg+ZNBqgMnKzC/XZOz5wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFNJGwGa49CpSK+rU3vwaz7+zrvQ6MB8GA1UdIwQY MBaAFFoUHFCQgk0KF8KexAUOIQBxE/vaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUt ZWNlZWZmOGU4NGUwLzEvMGtiQVpyajBLbElyNnRUZV9CclB2N091OURvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUtZWNlZWZmOGU4NGUw LzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDBT8YAwQD W76oAwQCuVVMMA0EAgACMAcDBQAqAgeYMA0GCSqGSIb3DQEBCwUAA4IBAQCfenms KxMhV0fluc/HlKRgB1n6ILp+E72hs0LN4CJqWbDfA8P0MUbRWGcJo18X9ZL1hGPz P2dCCo2GefrBn/OftvUZyRlVvo0Jgb9E2sI6/7gkY+m+ZNZAvlOO6OaR3pmIWX0Q 8vDMKxFrkJxpf1zQJQTTNTBKdXoW3ym3A3shnP123pRi02hNfhRxzw4Y4++KTVSp I7HqZUs3aWwPCKKv85N45T+bzGld7FXuNG2I3jr7pEL7pYbwQrQADUSHAftPC8rL 5w1+0BJMv+DSxYPrxZfOvs6YOrsEHhSa+Mc1POqE5mdF7j/ZSlRbkroS4dkyC79+ 4d1P+IrMg8yHXDwC -----END CERTIFICATE-----Generated at Sun Jan 25 11:59:37 2026 by rpki-client