This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/47t0Ngk2_e4bYrB13_pTDIr5yt4.roa File: 47t0Ngk2_e4bYrB13_pTDIr5yt4.roa (raw, json) Hash identifier: L4dJkrB1IM9J8sjGyTHgakrJCAQbgNA0i6i3/OMj5qg= Subject key identifier: E3:BB:74:36:09:36:FD:EE:1B:62:B0:75:DF:FA:53:0C:8A:F9:CA:DE Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA755F8849BFBC1ABF07C66A55CE666 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/47t0Ngk2_e4bYrB13_pTDIr5yt4.roa Signing time: Fri 02 Jan 2026 12:20:54 +0000 ROA not before: Fri 02 Jan 2026 12:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8439 IP address blocks: 5.28.16.0/20 maxlen: 20 31.28.32.0/19 maxlen: 19 37.9.144.0/20 maxlen: 20 62.106.96.0/20 maxlen: 20 62.106.112.0/21 maxlen: 21 62.106.120.0/21 maxlen: 21 81.28.160.0/19 maxlen: 19 85.114.160.0/19 maxlen: 19 92.240.128.0/20 maxlen: 20 95.128.160.0/21 maxlen: 21 95.128.160.0/22 maxlen: 22 95.128.164.0/22 maxlen: 22 109.226.64.0/18 maxlen: 18 185.10.180.0/22 maxlen: 22 185.50.8.0/22 maxlen: 22 188.122.224.0/19 maxlen: 19 193.106.240.0/22 maxlen: 22 213.178.32.0/21 maxlen: 21 213.178.40.0/21 maxlen: 21 213.178.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:55:f8:84:9b:fb:c1:ab:f0:7c:66:a5:5c:e6:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3bb74360936fdee1b62b075dffa530c8af9cade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:37:bb:db:f0:b4:19:bd:44:68:d9:6e:e7:22: cd:8b:f4:e0:37:b8:2b:ba:ac:8d:1a:ca:51:53:64: 41:1d:30:2d:fc:79:7f:36:b2:ab:d3:86:ce:cf:b2: a7:28:14:9a:4a:44:81:91:ea:d7:86:24:f5:9b:04: 85:b3:eb:1c:e1:17:99:8d:b5:8c:1c:14:54:27:02: 23:ba:b6:3c:12:32:a2:39:7b:93:3c:f1:b0:4b:4b: c6:36:76:3e:9b:b5:a7:bf:64:b4:db:eb:10:9a:ad: d9:cc:6b:29:6e:f4:0f:aa:c7:e5:a7:42:32:03:48: 53:62:f5:4c:2d:72:2c:87:75:f1:a2:94:3b:8e:3a: 9b:e1:4d:44:f9:0b:47:20:ee:4e:fb:66:f7:34:d9: 08:71:8f:0b:84:e0:28:8d:0b:c2:be:3f:6c:a5:0b: 6e:d3:90:11:ad:2a:85:46:d3:a1:ab:3b:38:91:e3: 42:a1:49:fa:67:4a:12:ab:3f:db:9b:56:c1:d6:99: 4d:22:2a:f4:0c:35:6f:de:ed:b9:20:dd:5f:ee:01: 42:60:f9:c9:fa:34:0b:06:c1:2d:41:a6:a7:67:8e: a2:f0:1b:ad:02:97:85:02:1a:ad:a5:50:13:8e:86: 7a:a9:75:04:4d:31:93:6d:a2:17:56:88:c7:14:c2: b6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BB:74:36:09:36:FD:EE:1B:62:B0:75:DF:FA:53:0C:8A:F9:CA:DE X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/47t0Ngk2_e4bYrB13_pTDIr5yt4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.28.16.0/20 31.28.32.0/19 37.9.144.0/20 62.106.96.0/19 81.28.160.0/19 85.114.160.0/19 92.240.128.0/20 95.128.160.0/21 109.226.64.0/18 185.10.180.0/22 185.50.8.0/22 188.122.224.0/19 193.106.240.0/22 213.178.32.0/19 Signature Algorithm: sha256WithRSAEncryption 15:1f:8c:5d:06:a1:a9:d0:03:7b:3e:1d:c9:c8:93:4c:d7:3a: fa:99:7f:ed:ce:09:22:d8:8b:cb:07:01:d6:f4:8f:3a:d7:d4: 7f:19:6f:b7:2c:6a:36:42:6e:d5:34:f0:df:39:15:34:8f:11: 82:0b:4f:66:25:23:b3:ad:f4:c8:73:05:5e:b0:e0:6e:63:3f: 3d:1c:f2:e4:5e:f6:29:fa:f8:a2:5b:78:1a:9e:f3:65:79:db: ab:f5:80:9a:b7:c5:fd:ac:fa:7c:bd:92:5f:bf:d1:85:7c:b9: c5:06:1c:f2:47:03:93:29:96:7f:bd:3a:ca:f1:7c:2c:17:c5: 9b:5e:6c:5a:c0:90:9c:44:47:13:91:54:91:5e:81:58:16:56: db:78:68:39:1b:5e:1c:4a:8d:c8:7d:80:a2:93:a3:5e:04:85: 10:88:dc:4a:9a:ac:12:5e:a0:64:06:f1:60:91:67:d4:3b:de: 13:8c:7e:fe:33:b4:1e:f2:87:67:d8:e7:95:74:88:4f:12:60: ed:79:f1:40:65:3b:21:9d:d9:8e:ce:1f:ca:92:e7:b5:b9:71: 7b:fd:3f:10:19:90:e3:f5:16:d6:92:19:78:65:b9:fe:63:8d: aa:59:a5:a2:00:78:e8:46:1e:a2:dc:28:d9:6e:2d:ce:a3:c2: aa:3d:60:04 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZt+p1X4hJv7wavwfGalXOZmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2JiNzQzNjA5MzZmZGVlMWI2MmIwNzVkZmZhNTMwYzhhZjljYWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzje72/C0Gb1EaNlu5yLNi/TgN7gr uqyNGspRU2RBHTAt/Hl/NrKr04bOz7KnKBSaSkSBkerXhiT1mwSFs+sc4ReZjbWM HBRUJwIjurY8EjKiOXuTPPGwS0vGNnY+m7Wnv2S02+sQmq3ZzGspbvQPqsflp0Iy A0hTYvVMLXIsh3XxopQ7jjqb4U1E+QtHIO5O+2b3NNkIcY8LhOAojQvCvj9spQtu 05ARrSqFRtOhqzs4keNCoUn6Z0oSqz/bm1bB1plNIir0DDVv3u25IN1f7gFCYPnJ +jQLBsEtQaanZ46i8ButApeFAhqtpVATjoZ6qXUETTGTbaIXVojHFMK2pwIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFOO7dDYJNv3uG2Kwdd/6UwyK+creMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvNDd0ME5nazJfZTRiWXJCMTNfcFRESXI1eXQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQEBRwQAwQF HxwgAwQEJQmQAwQFPmpgAwQFURygAwQFVXKgAwQEXPCAAwQDX4CgAwQGbeJAAwQC uQq0AwQCuTIIAwQFvHrgAwQCwWrwAwQF1bIgMA0GCSqGSIb3DQEBCwUAA4IBAQAV H4xdBqGp0AN7Ph3JyJNM1zr6mX/tzgki2IvLBwHW9I8619R/GW+3LGo2Qm7VNPDf ORU0jxGCC09mJSOzrfTIcwVesOBuYz89HPLkXvYp+viiW3ganvNledur9YCat8X9 rPp8vZJfv9GFfLnFBhzyRwOTKZZ/vTrK8XwsF8WbXmxawJCcREcTkVSRXoFYFlbb eGg5G14cSo3IfYCik6NeBIUQiNxKmqwSXqBkBvFgkWfUO94TjH7+M7Qe8odn2OeV dIhPEmDtefFAZTshndmOzh/Kkue1uXF7/T8QGZDj9RbWkhl4Zbn+Y42qWaWiAHjo Rh6i3CjZbi3Oo8KqPWAE -----END CERTIFICATE-----Generated at Mon Jan 26 01:41:11 2026 by rpki-client