This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/B1oGCbp_lCKqrih8ynGfv6BUSjw.roa File: B1oGCbp_lCKqrih8ynGfv6BUSjw.roa (raw, json) Hash identifier: ZEKfqtdqNld+YDkZ9QlGUoE8oCQ7PZGkrXbAphwgc1E= Subject key identifier: 07:5A:06:09:BA:7F:94:22:AA:AE:28:7C:CA:71:9F:BF:A0:54:4A:3C Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb Certificate serial: 019B7A5A907A5DB9910B0CBB5E3D975B4886 Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/B1oGCbp_lCKqrih8ynGfv6BUSjw.roa Signing time: Thu 01 Jan 2026 16:18:34 +0000 ROA not before: Thu 01 Jan 2026 16:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50973 IP address blocks: 79.171.48.0/21 maxlen: 21 79.171.48.0/24 maxlen: 24 79.171.49.0/24 maxlen: 24 79.171.50.0/24 maxlen: 24 79.171.52.0/24 maxlen: 24 79.171.55.0/24 maxlen: 24 188.172.96.0/24 maxlen: 24 188.172.97.0/24 maxlen: 24 188.172.98.0/24 maxlen: 24 188.172.99.0/24 maxlen: 24 188.172.100.0/24 maxlen: 24 188.172.101.0/24 maxlen: 24 188.172.102.0/24 maxlen: 24 188.172.103.0/24 maxlen: 24 188.172.104.0/22 maxlen: 22 188.172.104.0/24 maxlen: 24 188.172.108.0/24 maxlen: 24 188.172.109.0/24 maxlen: 24 188.172.110.0/24 maxlen: 24 188.172.111.0/24 maxlen: 24 2a0a:a0c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:90:7a:5d:b9:91:0b:0c:bb:5e:3d:97:5b:48:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb Validity Not Before: Jan 1 16:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=075a0609ba7f9422aaae287cca719fbfa0544a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8a:bd:44:bd:83:4c:49:90:06:40:c5:91:db: b8:b2:d7:b8:ea:5e:2d:7f:06:f3:a5:30:b8:ad:d0: 36:7e:ec:bf:c7:ca:65:b8:59:d7:bd:30:67:fd:d7: de:d9:6b:cb:03:40:bc:24:82:ec:ea:ee:94:94:8e: 8f:13:c0:bd:ca:73:1c:3d:aa:89:8a:0f:12:17:ee: af:a6:02:a0:b2:fe:78:86:13:02:01:b7:7b:d8:96: 7c:b2:54:aa:af:78:8f:dd:d5:d5:32:26:15:4b:a0: bd:34:da:dc:7a:10:64:ef:f3:ac:50:61:8c:0b:87: 86:0a:f3:5a:0d:31:8b:57:15:90:54:98:ec:14:45: 2a:67:60:7a:95:35:3d:dd:20:ed:c6:3b:e0:61:a7: 60:ad:6b:74:22:47:6e:2e:04:1f:fb:46:d5:7c:0b: 33:03:3b:17:49:9c:da:a4:9e:37:a8:b2:88:95:58: 3c:4a:fb:b2:21:c1:e5:8a:3c:58:f2:3d:ff:d0:3c: 37:f3:2e:c2:53:81:f4:94:78:f0:42:ad:1f:2e:f0: 25:59:f7:f9:d9:97:b0:eb:58:3c:66:65:21:1c:fe: b4:41:90:ad:bf:9b:d1:eb:ac:30:98:81:72:21:15: 06:a8:78:ae:8d:d6:f3:19:1c:22:20:b8:31:99:ad: 3a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5A:06:09:BA:7F:94:22:AA:AE:28:7C:CA:71:9F:BF:A0:54:4A:3C X509v3 Authority Key Identifier: keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/B1oGCbp_lCKqrih8ynGfv6BUSjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.171.48.0/21 188.172.96.0/20 IPv6: 2a0a:a0c0::/29 Signature Algorithm: sha256WithRSAEncryption 2a:67:87:a6:67:bf:b4:95:cf:05:64:82:2b:e0:84:24:df:2f: ec:c8:23:97:76:8d:ee:54:76:46:07:cf:63:58:ee:fe:8d:bd: 15:ce:a1:df:d2:81:b0:61:72:fa:52:9f:ca:fa:47:74:37:30: 3c:bb:97:82:83:94:d5:9b:c6:75:fc:e0:32:b3:67:ec:6e:62: ad:87:16:96:ff:72:44:b4:45:90:0a:49:ef:37:f5:ea:cc:cd: a6:3d:4d:96:9e:5c:f6:cb:87:c6:3e:9d:6b:22:08:ce:d5:ed: 1f:ac:7e:36:f2:a9:e8:d9:63:25:31:43:51:8a:b5:ee:96:f5: ea:e1:9c:83:09:a6:22:16:47:ae:9f:e6:d3:bc:e9:f1:d3:ae: e4:b2:b2:0a:75:82:aa:f8:78:a5:8f:80:10:a9:a0:8b:d8:21: 18:62:12:65:69:7e:1b:48:ff:29:d5:26:df:e8:3f:28:45:71: 48:8d:a0:11:29:fe:11:35:3b:66:c4:aa:c9:05:ee:57:61:1d: 89:fd:f5:63:2f:96:00:0e:a8:67:da:bb:69:73:22:f1:99:a9: fe:10:e8:ca:3e:83:89:96:74:71:19:91:2f:eb:3f:7d:bc:50: 50:f7:45:bd:1a:70:01:bd:07:43:ae:33:c8:95:fc:be:fa:93: c6:a9:83:48 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6WpB6XbmRCwy7Xj2XW0iGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODg3N2YzYzU1YjUyOGUxYTI5ZGIzZDc5OTIwNjU2ZjBj NjZhZWIwHhcNMjYwMTAxMTYxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzVhMDYwOWJhN2Y5NDIyYWFhZTI4N2NjYTcxOWZiZmEwNTQ0YTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYq9RL2DTEmQBkDFkdu4ste46l4t fwbzpTC4rdA2fuy/x8pluFnXvTBn/dfe2WvLA0C8JILs6u6UlI6PE8C9ynMcPaqJ ig8SF+6vpgKgsv54hhMCAbd72JZ8slSqr3iP3dXVMiYVS6C9NNrcehBk7/OsUGGM C4eGCvNaDTGLVxWQVJjsFEUqZ2B6lTU93SDtxjvgYadgrWt0IkduLgQf+0bVfAsz AzsXSZzapJ43qLKIlVg8SvuyIcHlijxY8j3/0Dw38y7CU4H0lHjwQq0fLvAlWff5 2Zew61g8ZmUhHP60QZCtv5vR66wwmIFyIRUGqHiujdbzGRwiILgxma06OQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAdaBgm6f5Qiqq4ofMpxn7+gVEo8MB8GA1UdIwQY MBaAFN+Id/PFW1KOGinbPXmSBlbwxmrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODkt MjU0NTVhOGRkZDQ1LzEvQjFvR0NicF9sQ0txcmloOHluR2Z2NkJVU2p3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODktMjU0NTVhOGRkZDQ1 LzEvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDT6swAwQE vKxgMA0EAgACMAcDBQMqCqDAMA0GCSqGSIb3DQEBCwUAA4IBAQAqZ4emZ7+0lc8F ZIIr4IQk3y/syCOXdo3uVHZGB89jWO7+jb0VzqHf0oGwYXL6Up/K+kd0NzA8u5eC g5TVm8Z1/OAys2fsbmKthxaW/3JEtEWQCknvN/XqzM2mPU2Wnlz2y4fGPp1rIgjO 1e0frH428qno2WMlMUNRirXulvXq4ZyDCaYiFkeun+bTvOnx067ksrIKdYKq+Hil j4AQqaCL2CEYYhJlaX4bSP8p1Sbf6D8oRXFIjaARKf4RNTtmxKrJBe5XYR2J/fVj L5YADqhn2rtpcyLxman+EOjKPoOJlnRxGZEv6z99vFBQ90W9GnABvQdDrjPIlfy+ +pPGqYNI -----END CERTIFICATE-----Generated at Mon Jan 26 07:42:56 2026 by rpki-client