This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/x33v7rF3QBlSIzExnIekzpn3DrI.roa File: x33v7rF3QBlSIzExnIekzpn3DrI.roa (raw, json) Hash identifier: g/UYMvAE3ypCM+rkZ1W9VYDV5Sdkmxjt7baXQZzeNL8= Subject key identifier: C7:7D:EF:EE:B1:77:40:19:52:23:31:31:9C:87:A4:CE:99:F7:0E:B2 Certificate issuer: /CN=c53f0adaeafb40c772459e939354f6be453f158f Certificate serial: 019B7CEDBD31B3035CE645D7FE87A5C46BFD Authority key identifier: C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/x33v7rF3QBlSIzExnIekzpn3DrI.roa Signing time: Fri 02 Jan 2026 04:18:33 +0000 ROA not before: Fri 02 Jan 2026 04:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213835 IP address blocks: 45.153.182.0/23 maxlen: 24 91.220.176.0/24 maxlen: 24 91.220.184.0/24 maxlen: 24 94.154.134.0/23 maxlen: 24 185.4.237.0/24 maxlen: 24 185.4.238.0/23 maxlen: 24 185.62.252.0/22 maxlen: 24 185.83.72.0/22 maxlen: 24 185.106.36.0/24 maxlen: 24 185.106.38.0/24 maxlen: 24 185.106.39.0/24 maxlen: 24 185.117.35.0/24 maxlen: 24 2a14:9200::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:bd:31:b3:03:5c:e6:45:d7:fe:87:a5:c4:6b:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c53f0adaeafb40c772459e939354f6be453f158f Validity Not Before: Jan 2 04:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c77defeeb1774019522331319c87a4ce99f70eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:63:19:a4:9f:25:9e:b7:a8:71:78:cb:1a:fc: e9:2f:e1:40:d5:1d:28:79:a0:91:c7:7d:59:99:aa: 76:ed:ec:eb:f8:60:ee:61:ac:0d:fc:12:62:42:6e: d0:84:4f:15:b9:66:4b:0c:08:37:2a:dd:38:a9:5b: 33:e8:69:02:6d:29:00:8f:1d:64:28:ae:ea:98:54: a9:c2:40:74:6e:a8:6b:b3:3d:69:f4:b5:3f:ce:31: e9:44:4f:70:9d:6d:33:af:af:e2:70:03:47:9b:ca: d8:d3:2d:d8:8a:01:20:1a:4e:24:5f:d9:f9:e0:64: 66:c2:f5:40:e0:5f:2b:3e:2f:a9:d6:71:d1:36:91: 4c:6b:09:aa:2e:a9:b3:5d:89:5b:6a:57:2f:c3:2b: 59:21:35:a5:ef:4c:c2:4d:b6:18:27:90:6a:4b:e5: 90:1e:48:dc:aa:b9:d0:5d:db:d0:59:ac:00:44:81: 63:d7:43:a5:6e:fb:02:52:44:ed:b4:95:ce:1d:b5: 94:c7:c2:8f:b0:27:99:2a:01:82:89:53:9c:92:0a: 81:7b:ad:76:e6:a9:54:c2:63:32:6c:36:3e:83:7c: 63:31:bd:32:93:02:23:d1:ba:95:24:37:3e:96:f6: 01:c5:bb:c8:37:2f:ee:45:c8:10:ea:06:ff:ed:cf: 9c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:7D:EF:EE:B1:77:40:19:52:23:31:31:9C:87:A4:CE:99:F7:0E:B2 X509v3 Authority Key Identifier: keyid:C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/x33v7rF3QBlSIzExnIekzpn3DrI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.182.0/23 91.220.176.0/24 91.220.184.0/24 94.154.134.0/23 185.4.237.0-185.4.239.255 185.62.252.0/22 185.83.72.0/22 185.106.36.0/24 185.106.38.0/23 185.117.35.0/24 IPv6: 2a14:9200::/29 Signature Algorithm: sha256WithRSAEncryption 17:82:e8:81:48:08:25:4a:2f:1e:41:77:d5:9b:a6:ee:01:b1: fd:47:ef:d6:d0:25:bb:bf:3e:5c:ec:e8:b7:64:e2:54:d0:4b: a3:0c:93:64:9c:82:2c:30:67:a0:49:21:8f:ec:81:a0:5a:8f: e0:39:bf:12:92:b1:14:cd:7b:71:27:19:d7:d4:de:38:02:98: b8:5c:8b:6d:33:f4:2f:2c:a2:fa:cf:bf:2f:a8:14:f9:f3:33: b6:60:68:16:78:11:7c:e4:29:8d:03:ef:c7:55:6b:31:bf:a2: 0b:57:3f:7c:b9:d3:d6:18:bc:4b:30:4f:f6:74:35:c2:a9:62: 24:3d:76:c7:32:ab:02:64:26:71:8b:fc:09:db:83:a0:e3:0d: 0e:ff:3b:69:10:de:39:f7:b0:d2:24:ba:a8:5c:4a:77:23:e5: b9:5c:2c:2b:54:d1:50:26:66:f1:a9:bc:e4:70:2a:6a:4d:e8: f8:be:0d:35:85:ab:74:38:62:1e:68:7e:af:41:7e:02:0a:ec: 2b:93:4f:bf:d6:c0:b3:40:8f:96:be:23:6c:a1:5e:68:0b:fb: a4:3c:de:81:ee:92:b8:45:41:6d:32:53:8c:e5:d1:c6:46:74: aa:a0:b3:6e:f0:1f:06:23:6f:0a:7c:fd:c4:9f:99:ab:43:34: 8d:62:de:c6 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgISAZt87b0xswNc5kXX/oelxGv9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1M2YwYWRhZWFmYjQwYzc3MjQ1OWU5MzkzNTRmNmJlNDUz ZjE1OGYwHhcNMjYwMTAyMDQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzdkZWZlZWIxNzc0MDE5NTIyMzMxMzE5Yzg3YTRjZTk5ZjcwZWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWMZpJ8lnreocXjLGvzpL+FA1R0o eaCRx31Zmap27ezr+GDuYawN/BJiQm7QhE8VuWZLDAg3Kt04qVsz6GkCbSkAjx1k KK7qmFSpwkB0bqhrsz1p9LU/zjHpRE9wnW0zr6/icANHm8rY0y3YigEgGk4kX9n5 4GRmwvVA4F8rPi+p1nHRNpFMawmqLqmzXYlbalcvwytZITWl70zCTbYYJ5BqS+WQ HkjcqrnQXdvQWawARIFj10OlbvsCUkTttJXOHbWUx8KPsCeZKgGCiVOckgqBe612 5qlUwmMybDY+g3xjMb0ykwIj0bqVJDc+lvYBxbvINy/uRcgQ6gb/7c+ctQIDAQAB o4ICVjCCAlIwHQYDVR0OBBYEFMd97+6xd0AZUiMxMZyHpM6Z9w6yMB8GA1UdIwQY MBaAFMU/Ctrq+0DHckWek5NU9r5FPxWPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFQ4SzJ1cjdRTWR5Ulo2VGsxVDJ2a1VfRlk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zODA0YzItMGU0NC00YmUzLTkwMzct NDYxN2NhMzc2MDgzLzEveDMzdjdyRjNRQmxTSXpFeG5JZWt6cG4zRHJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zODA0YzItMGU0NC00YmUzLTkwMzctNDYxN2NhMzc2MDgz LzEveFQ4SzJ1cjdRTWR5Ulo2VGsxVDJ2a1VfRlk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzBKBAIAATBEAwQBLZm2AwQA W9ywAwQAW9y4AwQBXpqGMAwDBAC5BO0DBAS5BOADBAK5PvwDBAK5U0gDBAC5aiQD BAG5aiYDBAC5dSMwDQQCAAIwBwMFAyoUkgAwDQYJKoZIhvcNAQELBQADggEBABeC 6IFICCVKLx5Bd9Wbpu4Bsf1H79bQJbu/Plzs6Ldk4lTQS6MMk2ScgiwwZ6BJIY/s gaBaj+A5vxKSsRTNe3EnGdfU3jgCmLhci20z9C8sovrPvy+oFPnzM7ZgaBZ4EXzk KY0D78dVazG/ogtXP3y509YYvEswT/Z0NcKpYiQ9dscyqwJkJnGL/Anbg6DjDQ7/ O2kQ3jn3sNIkuqhcSncj5blcLCtU0VAmZvGpvORwKmpN6Pi+DTWFq3Q4Yh5ofq9B fgIK7CuTT7/WwLNAj5a+I2yhXmgL+6Q83oHukrhFQW0yU4zl0cZGdKqgs27wHwYj bwp8/cSfmatDNI1i3sY= -----END CERTIFICATE-----Generated at Mon Jan 26 09:25:46 2026 by rpki-client