This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/r7rIkd3JpKTtd7ti5sQWVfcfHRc.roa File: r7rIkd3JpKTtd7ti5sQWVfcfHRc.roa (raw, json) Hash identifier: BZ2IDfhsgXSEeuZ1ehS1OEbZfErOlb6+IBt9JMlf/C4= Subject key identifier: AF:BA:C8:91:DD:C9:A4:A4:ED:77:BB:62:E6:C4:16:55:F7:1F:1D:17 Certificate issuer: /CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571 Certificate serial: 019B7CEE2DBCE990EC914F468C71383AECEE Authority key identifier: 18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/r7rIkd3JpKTtd7ti5sQWVfcfHRc.roa Signing time: Fri 02 Jan 2026 04:19:02 +0000 ROA not before: Fri 02 Jan 2026 04:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14061 IP address blocks: 5.42.203.0/24 maxlen: 24 5.101.96.0/20 maxlen: 24 37.139.0.0/19 maxlen: 22 46.101.0.0/16 maxlen: 22 80.240.128.0/20 maxlen: 22 82.196.0.0/20 maxlen: 22 95.85.0.0/18 maxlen: 22 146.185.128.0/19 maxlen: 22 146.185.160.0/19 maxlen: 22 167.172.0.0/16 maxlen: 22 178.62.0.0/16 maxlen: 22 178.128.0.0/17 maxlen: 22 178.128.128.0/17 maxlen: 22 185.14.184.0/22 maxlen: 22 188.166.0.0/16 maxlen: 22 188.226.128.0/17 maxlen: 22 2a03:b0c0::/32 maxlen: 48 2a12:1840::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 21:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:2d:bc:e9:90:ec:91:4f:46:8c:71:38:3a:ec:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571 Validity Not Before: Jan 2 04:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afbac891ddc9a4a4ed77bb62e6c41655f71f1d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b5:6e:0b:29:32:c7:a9:4d:e6:ce:c1:b7:83: 3d:d4:1f:ea:4c:e0:2c:df:2a:40:fa:ec:ed:68:97: 8b:8f:ef:a8:de:f3:03:d8:0a:94:90:35:53:8f:5f: 39:b2:d3:35:f2:ee:7c:0c:1b:f6:c0:92:d8:db:88: 78:5e:85:38:db:9b:f4:6e:97:15:db:80:e1:2d:f2: 65:9a:81:d0:4e:54:2a:7f:b8:8b:89:ca:c7:f6:bb: 7d:d0:03:83:88:a2:86:37:62:f8:37:09:54:b4:75: 49:7d:0e:f5:a9:ed:fb:e9:5c:47:4c:a9:ca:d5:34: ab:e8:87:a7:09:e7:65:a3:2d:f0:2d:f0:36:ed:11: c1:7e:9d:01:ee:a2:be:cb:b5:df:8b:43:d4:9e:84: 01:05:be:d6:54:94:10:25:6a:5c:5e:8c:38:11:5f: 5b:e3:09:c7:c1:39:45:ba:ee:57:dc:f0:b3:02:92: ed:27:25:37:51:d7:64:49:02:2e:01:af:45:b0:dd: f7:8e:a6:a7:9d:d6:5e:84:16:ec:61:5c:2d:67:a8: dc:4d:ed:7f:e5:42:12:7a:01:5a:24:1c:6f:e9:1c: 5e:40:f9:54:a8:73:8d:03:d2:10:5e:f3:c0:62:13: c8:10:65:72:7c:cc:d5:3c:91:67:15:dc:12:ee:a4: c5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:BA:C8:91:DD:C9:A4:A4:ED:77:BB:62:E6:C4:16:55:F7:1F:1D:17 X509v3 Authority Key Identifier: keyid:18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/r7rIkd3JpKTtd7ti5sQWVfcfHRc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.203.0/24 5.101.96.0/20 37.139.0.0/19 46.101.0.0/16 80.240.128.0/20 82.196.0.0/20 95.85.0.0/18 146.185.128.0/18 167.172.0.0/16 178.62.0.0/16 178.128.0.0/16 185.14.184.0/22 188.166.0.0/16 188.226.128.0/17 IPv6: 2a03:b0c0::/32 2a12:1840::/29 Signature Algorithm: sha256WithRSAEncryption 0f:c1:a3:39:33:cf:0b:cb:12:74:19:61:06:bd:39:3b:86:03: 6d:0a:c5:0e:e2:1d:9c:83:b5:b4:6e:38:a2:cc:48:d9:79:7b: 54:6f:c6:2c:2f:54:f1:23:62:97:9b:5c:6e:f8:9e:0d:cf:99: 38:77:b3:4b:ec:e2:9b:9e:9d:9a:aa:14:c5:69:e7:bf:de:9d: b9:72:e6:47:5b:f4:06:4b:59:91:37:90:4a:89:12:a0:6a:cf: ed:08:48:87:cf:f6:cd:b7:c4:43:28:14:46:f8:41:0c:30:f6: d8:38:84:2f:45:2f:a3:bc:ca:a8:a3:db:bc:f2:75:9e:64:81: 71:b4:0e:0a:90:78:18:fb:d1:59:e9:78:cd:d7:b1:b5:20:67: 01:6c:46:ef:56:c1:bd:46:57:d6:c8:91:c7:87:3d:64:b5:e4: e1:2a:42:58:9b:06:c2:ed:5f:32:9f:46:6a:e3:6c:93:42:d5: 95:b3:0a:6d:43:a6:7b:ef:64:94:46:d4:34:36:5e:e6:b7:56: ab:02:37:a2:13:55:ab:a3:da:27:9f:cc:bc:6b:87:e5:b0:75: 26:f9:c6:f3:23:ed:58:f7:5f:3c:d0:41:67:83:3b:5d:db:98: 72:0f:85:29:64:cb:75:d3:48:07:db:88:3d:14:3e:1f:d0:87: 73:b9:7f:23 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgISAZt87i286ZDskU9GjHE4OuzuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MDhiZjdmZTQ4YjA1N2Y5ZjJmM2Q1ZDFhNjMxMGZkOWUx NGM1NzEwHhcNMjYwMTAyMDQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmJhYzg5MWRkYzlhNGE0ZWQ3N2JiNjJlNmM0MTY1NWY3MWYxZDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7VuCykyx6lN5s7Bt4M91B/qTOAs 3ypA+uztaJeLj++o3vMD2AqUkDVTj185stM18u58DBv2wJLY24h4XoU425v0bpcV 24DhLfJlmoHQTlQqf7iLicrH9rt90AODiKKGN2L4NwlUtHVJfQ71qe376VxHTKnK 1TSr6IenCedloy3wLfA27RHBfp0B7qK+y7Xfi0PUnoQBBb7WVJQQJWpcXow4EV9b 4wnHwTlFuu5X3PCzApLtJyU3UddkSQIuAa9FsN33jqanndZehBbsYVwtZ6jcTe1/ 5UISegFaJBxv6RxeQPlUqHONA9IQXvPAYhPIEGVyfMzVPJFnFdwS7qTFWQIDAQAB o4ICaDCCAmQwHQYDVR0OBBYEFK+6yJHdyaSk7Xe7YubEFlX3Hx0XMB8GA1UdIwQY MBaAFBgIv3/kiwV/ny89XRpjEP2eFMVxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MTBjM2ItZjg3MC00NzZiLWExNjMt OWQzOTJlZWUwZjY2LzEvcjdySWtkM0pwS1R0ZDd0aTVzUVdWZmNmSFJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MTBjM2ItZjg3MC00NzZiLWExNjMtOWQzOTJlZWUwZjY2 LzEvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH4GCCsGAQUFBwEHAQH/BG8wbTBVBAIAATBPAwQABSrLAwQE BWVgAwQFJYsAAwMALmUDBARQ8IADBARSxAADBAZfVQADBAaSuYADAwCnrAMDALI+ AwMAsoADBAK5DrgDAwC8pgMEB7zigDAUBAIAAjAOAwUAKgOwwAMFAyoSGEAwDQYJ KoZIhvcNAQELBQADggEBAA/BozkzzwvLEnQZYQa9OTuGA20KxQ7iHZyDtbRuOKLM SNl5e1RvxiwvVPEjYpebXG74ng3PmTh3s0vs4puenZqqFMVp57/enbly5kdb9AZL WZE3kEqJEqBqz+0ISIfP9s23xEMoFEb4QQww9tg4hC9FL6O8yqij27zydZ5kgXG0 DgqQeBj70VnpeM3XsbUgZwFsRu9Wwb1GV9bIkceHPWS15OEqQlibBsLtXzKfRmrj bJNC1ZWzCm1DpnvvZJRG1DQ2Xua3VqsCN6ITVauj2iefzLxrh+WwdSb5xvMj7Vj3 XzzQQWeDO13bmHIPhSlky3XTSAfbiD0UPh/Qh3O5fyM= -----END CERTIFICATE-----Generated at Tue Jan 6 03:30:41 2026 by rpki-client