This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/q5tcHMC53hVldl9vmJfxMoSPLXw.roa File: q5tcHMC53hVldl9vmJfxMoSPLXw.roa (raw, json) Hash identifier: iSEcJDYplK+Xu/KP8Xlxc71CNA1iyM93A92Fn+WGFtA= Subject key identifier: AB:9B:5C:1C:C0:B9:DE:15:65:76:5F:6F:98:97:F1:32:84:8F:2D:7C Certificate issuer: /CN=618cc46d71e7848978488961d7b51aba1541f3c4 Certificate serial: 019B7EA4FFEEEC7F897968323AEFEF126BAB Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/q5tcHMC53hVldl9vmJfxMoSPLXw.roa Signing time: Fri 02 Jan 2026 12:18:21 +0000 ROA not before: Fri 02 Jan 2026 12:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209372 IP address blocks: 89.184.0.0/21 maxlen: 24 89.184.8.0/23 maxlen: 23 89.184.10.0/23 maxlen: 23 89.184.12.0/23 maxlen: 23 89.184.14.0/23 maxlen: 23 89.184.16.0/21 maxlen: 24 89.184.16.0/22 maxlen: 24 89.184.24.0/21 maxlen: 24 89.184.30.0/24 maxlen: 24 89.184.31.0/24 maxlen: 24 193.222.251.0/24 maxlen: 24 193.223.69.0/24 maxlen: 24 193.223.103.0/24 maxlen: 24 193.223.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:ff:ee:ec:7f:89:79:68:32:3a:ef:ef:12:6b:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4 Validity Not Before: Jan 2 12:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab9b5c1cc0b9de1565765f6f9897f132848f2d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d4:33:54:ed:79:43:07:3d:97:d5:2a:4c:a5: 77:53:2f:80:01:b1:1b:0d:4a:d9:a6:77:cf:73:60: 00:91:26:a0:15:62:9e:68:d6:15:d6:75:61:06:03: b7:9b:dd:8b:66:a8:02:e2:1e:be:b0:04:92:f1:27: 9f:d3:ba:ac:c5:2b:ec:47:48:79:56:d1:e6:88:e0: ec:1b:f3:a1:d4:47:c2:e8:bb:be:df:89:a9:a0:49: 73:4b:97:90:ad:b4:7b:8e:b4:3c:8c:ed:1c:bd:a9: 03:3a:82:57:62:c9:3d:49:de:89:29:5f:54:0e:c5: 4c:f9:70:3b:66:ff:96:15:9d:84:6f:74:1a:96:76: 38:a4:54:03:57:03:6a:b9:73:7f:29:d3:eb:44:6c: 45:51:ba:8c:ed:eb:c5:5b:85:1a:57:46:67:51:89: d7:78:4e:36:26:e3:b7:da:96:b7:d7:9b:37:1a:37: ae:4d:b8:41:36:b7:2e:ea:13:ef:08:71:40:3f:c4: 5f:b7:ac:a7:60:dd:88:98:ad:a2:3b:90:b2:8b:49: b4:b2:8c:73:58:09:ca:c3:af:e8:ac:7e:c5:0f:17: f0:8d:e5:c0:67:ab:3e:a4:b0:ea:4d:98:64:69:aa: 6d:d5:a0:f7:6e:05:8c:ed:c7:16:c4:9a:5d:68:17: e4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9B:5C:1C:C0:B9:DE:15:65:76:5F:6F:98:97:F1:32:84:8F:2D:7C X509v3 Authority Key Identifier: keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/q5tcHMC53hVldl9vmJfxMoSPLXw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.184.0.0/19 193.222.251.0/24 193.223.69.0/24 193.223.103.0/24 193.223.108.0/24 Signature Algorithm: sha256WithRSAEncryption 72:b7:43:32:b7:c1:96:0f:0e:5c:65:61:39:b0:3b:22:9d:bb: 8d:c9:e8:04:6c:bb:58:8c:e0:4f:ca:85:ee:2b:58:73:02:88: da:05:52:43:4c:b8:e2:4f:27:02:48:c2:8d:57:db:89:5b:0f: cd:5c:5d:f3:82:25:42:6a:b3:c8:6f:39:c0:e1:9d:6d:35:f4: 17:bb:6b:52:6c:56:fa:18:da:3e:92:21:5e:47:39:75:e4:78: 4d:d4:5f:a5:de:20:49:fb:22:c0:c4:9c:d8:79:de:45:00:9f: a5:ea:03:96:fd:cf:31:02:79:ab:de:57:55:d8:5e:46:0b:72: 2e:dd:7c:d2:d9:3f:de:d3:d2:b6:5b:eb:fa:95:e9:5c:eb:3f: 2a:c9:3e:19:72:5e:77:f5:a5:64:bf:39:ad:71:18:43:94:c3: 9e:07:16:1d:44:18:68:04:06:27:cc:d9:15:3c:02:96:8e:11: fc:f2:60:6b:d5:49:ce:fa:1d:69:8d:41:3a:dd:46:de:81:b8: c0:dd:5e:f3:6b:f0:f5:6c:15:df:41:49:42:83:7b:1e:a5:a8: 0e:61:17:9f:19:84:df:4e:72:67:af:db:89:73:aa:db:4e:c6: 5b:af:af:7d:ef:48:a0:f3:11:81:4b:12:a9:71:28:91:2a:92: ae:4a:a9:bf -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt+pP/u7H+JeWgyOu/vEmurMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxOGNjNDZkNzFlNzg0ODk3ODQ4ODk2MWQ3YjUxYWJhMTU0 MWYzYzQwHhcNMjYwMTAyMTIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjliNWMxY2MwYjlkZTE1NjU3NjVmNmY5ODk3ZjEzMjg0OGYyZDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9QzVO15Qwc9l9UqTKV3Uy+AAbEb DUrZpnfPc2AAkSagFWKeaNYV1nVhBgO3m92LZqgC4h6+sASS8Sef07qsxSvsR0h5 VtHmiODsG/Oh1EfC6Lu+34mpoElzS5eQrbR7jrQ8jO0cvakDOoJXYsk9Sd6JKV9U DsVM+XA7Zv+WFZ2Eb3QalnY4pFQDVwNquXN/KdPrRGxFUbqM7evFW4UaV0ZnUYnX eE42JuO32pa315s3GjeuTbhBNrcu6hPvCHFAP8Rft6ynYN2ImK2iO5Cyi0m0soxz WAnKw6/orH7FDxfwjeXAZ6s+pLDqTZhkaapt1aD3bgWM7ccWxJpdaBfk4QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFKubXBzAud4VZXZfb5iX8TKEjy18MB8GA1UdIwQY MBaAFGGMxG1x54SJeEiJYde1GroVQfPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVl6RWJYSG5oSWw0U0lsaDE3VWF1aFZCODhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xMjc0MzAtZDRlOC00ZGEzLWJlYTIt NGVmMTljY2M1N2QwLzEvcTV0Y0hNQzUzaFZsZGw5dm1KZnhNb1NQTFh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8xMjc0MzAtZDRlOC00ZGEzLWJlYTItNGVmMTljY2M1N2Qw LzEvWVl6RWJYSG5oSWw0U0lsaDE3VWF1aFZCODhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQFWbgAAwQA wd77AwQAwd9FAwQAwd9nAwQAwd9sMA0GCSqGSIb3DQEBCwUAA4IBAQByt0Myt8GW Dw5cZWE5sDsinbuNyegEbLtYjOBPyoXuK1hzAojaBVJDTLjiTycCSMKNV9uJWw/N XF3zgiVCarPIbznA4Z1tNfQXu2tSbFb6GNo+kiFeRzl15HhN1F+l3iBJ+yLAxJzY ed5FAJ+l6gOW/c8xAnmr3ldV2F5GC3Iu3XzS2T/e09K2W+v6lelc6z8qyT4Zcl53 9aVkvzmtcRhDlMOeBxYdRBhoBAYnzNkVPAKWjhH88mBr1UnO+h1pjUE63UbegbjA 3V7za/D1bBXfQUlCg3sepagOYRefGYTfTnJnr9uJc6rbTsZbr69970ig8xGBSxKp cSiRKpKuSqm/ -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:52 2026 by rpki-client