This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/wDBsp0oyWdkjKRu9iS_gOT-BaX4.roa File: wDBsp0oyWdkjKRu9iS_gOT-BaX4.roa (raw, json) Hash identifier: H0RPzwCZ2+V4qfg0rKJ99HJsmkWUJLpB08RH50xwdYk= Subject key identifier: C0:30:6C:A7:4A:32:59:D9:23:29:1B:BD:89:2F:E0:39:3F:81:69:7E Certificate issuer: /CN=b6fe63ee8a23f4916e4053531e6950db6c31e805 Certificate serial: 019B7C80A65E1CD1D92B929F2A1ED1EFDDF9 Authority key identifier: B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/wDBsp0oyWdkjKRu9iS_gOT-BaX4.roa Signing time: Fri 02 Jan 2026 02:19:24 +0000 ROA not before: Fri 02 Jan 2026 02:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199434 IP address blocks: 5.57.24.0/21 maxlen: 21 5.57.24.0/24 maxlen: 24 5.57.25.0/24 maxlen: 24 5.57.26.0/24 maxlen: 24 5.57.27.0/24 maxlen: 24 5.57.28.0/22 maxlen: 22 185.197.48.0/22 maxlen: 22 2a0a:6280::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a6:5e:1c:d1:d9:2b:92:9f:2a:1e:d1:ef:dd:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6fe63ee8a23f4916e4053531e6950db6c31e805 Validity Not Before: Jan 2 02:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0306ca74a3259d923291bbd892fe0393f81697e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d4:6a:48:81:31:85:47:a5:d2:ac:e0:9c:09: 81:16:28:5c:33:b4:40:a9:21:1b:c6:ac:23:76:c9: da:df:30:f7:b6:31:b4:45:45:cb:01:4b:d9:b0:f2: 48:5d:d7:51:ec:ab:46:4e:69:27:e3:d7:b7:24:c3: 79:a5:f9:d5:87:9b:ee:f7:5e:d3:bd:97:d4:5a:50: 9e:e2:b9:e8:3c:87:41:ee:10:f3:6a:4d:a2:6d:9e: e8:5d:b2:45:50:9d:9d:15:2e:64:15:95:36:e4:ec: 15:3d:c3:25:4f:3f:97:21:42:43:f2:fe:bf:36:f0: 5d:ae:56:0f:d7:6e:b9:f0:c5:36:62:ff:b4:eb:40: 5f:44:3e:a7:74:96:58:fa:d4:4d:41:27:ed:63:d7: b3:a3:e0:84:41:fc:6b:9c:37:05:ab:fd:90:58:fd: 9a:f1:61:b0:1d:62:49:0b:cf:86:bf:6a:63:56:dd: e2:94:62:4e:ca:b9:6b:da:b7:c6:35:30:0e:18:7a: 80:56:dd:d2:a9:2c:0f:89:c0:bd:3c:e1:ad:05:da: 25:36:4e:a5:bf:e8:53:31:20:34:4a:24:42:ec:41: 3a:09:b6:44:c2:f4:1f:0e:1e:01:f2:c0:bc:31:d8: e9:f6:e3:02:e3:60:14:d7:82:95:84:54:f1:fd:7e: 79:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:30:6C:A7:4A:32:59:D9:23:29:1B:BD:89:2F:E0:39:3F:81:69:7E X509v3 Authority Key Identifier: keyid:B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/wDBsp0oyWdkjKRu9iS_gOT-BaX4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.57.24.0/21 185.197.48.0/22 IPv6: 2a0a:6280::/29 Signature Algorithm: sha256WithRSAEncryption 9d:77:8b:07:81:1d:6b:f6:47:4f:96:ae:e8:d6:aa:c2:28:fd: 35:ff:38:5e:f1:9d:16:31:c3:8a:35:d1:7f:d1:e6:c6:26:55: b8:5a:83:57:00:3d:d4:07:3b:d4:c7:33:4b:c3:ae:0e:c1:9a: d7:16:f6:50:e8:dc:bd:31:a7:d0:15:f9:ad:23:9d:56:37:68: 51:b7:08:59:7b:b6:ed:85:32:08:54:06:d2:71:5c:6a:2c:09: 89:21:55:d3:c8:90:58:eb:5c:28:25:f7:86:7f:46:42:de:cb: bf:13:55:d9:7a:bf:c2:2b:8e:78:40:65:34:ae:80:a6:88:5e: d1:39:ed:ce:20:ea:cf:9e:a9:18:e9:97:b0:0f:06:a0:d6:d6: 59:d8:71:1e:55:43:b0:ea:49:f9:7e:d1:79:7a:34:d3:8d:c5: 31:05:b6:49:b5:0d:13:ff:ef:a8:e2:05:cd:6b:ff:57:4d:02: 15:5c:b9:2c:53:d2:a8:57:00:13:15:5c:fe:a4:e1:39:de:46: c5:30:dd:9b:cc:e6:92:4b:16:ba:10:fa:37:bf:96:09:10:28: 3c:53:12:a3:42:b3:2a:47:fb:3f:df:51:88:ad:bd:3b:54:d7: 96:97:ec:1c:54:86:c8:3d:6f:b3:31:4d:49:b1:99:3b:6b:05: b6:ee:ab:ff -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8gKZeHNHZK5KfKh7R7935MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZmU2M2VlOGEyM2Y0OTE2ZTQwNTM1MzFlNjk1MGRiNmMz MWU4MDUwHhcNMjYwMTAyMDIxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDMwNmNhNzRhMzI1OWQ5MjMyOTFiYmQ4OTJmZTAzOTNmODE2OTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9RqSIExhUel0qzgnAmBFihcM7RA qSEbxqwjdsna3zD3tjG0RUXLAUvZsPJIXddR7KtGTmkn49e3JMN5pfnVh5vu917T vZfUWlCe4rnoPIdB7hDzak2ibZ7oXbJFUJ2dFS5kFZU25OwVPcMlTz+XIUJD8v6/ NvBdrlYP12658MU2Yv+060BfRD6ndJZY+tRNQSftY9ezo+CEQfxrnDcFq/2QWP2a 8WGwHWJJC8+Gv2pjVt3ilGJOyrlr2rfGNTAOGHqAVt3SqSwPicC9POGtBdolNk6l v+hTMSA0SiRC7EE6CbZEwvQfDh4B8sC8Mdjp9uMC42AU14KVhFTx/X55SQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMAwbKdKMlnZIykbvYkv4Dk/gWl+MB8GA1UdIwQY MBaAFLb+Y+6KI/SRbkBTUx5pUNtsMegFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHY1ajdvb2o5SkZ1UUZOVEhtbFEyMnd4NkFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83ZWRiY2YtYjkwZi00NzA3LWIyODkt YTNkMzc3YzZmZWVmLzEvd0RCc3Awb3lXZGtqS1J1OWlTX2dPVC1CYVg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS83ZWRiY2YtYjkwZi00NzA3LWIyODktYTNkMzc3YzZmZWVm LzEvdHY1ajdvb2o5SkZ1UUZOVEhtbFEyMnd4NkFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDBTkYAwQC ucUwMA0EAgACMAcDBQMqCmKAMA0GCSqGSIb3DQEBCwUAA4IBAQCdd4sHgR1r9kdP lq7o1qrCKP01/zhe8Z0WMcOKNdF/0ebGJlW4WoNXAD3UBzvUxzNLw64OwZrXFvZQ 6Ny9MafQFfmtI51WN2hRtwhZe7bthTIIVAbScVxqLAmJIVXTyJBY61woJfeGf0ZC 3su/E1XZer/CK454QGU0roCmiF7ROe3OIOrPnqkY6ZewDwag1tZZ2HEeVUOw6kn5 ftF5ejTTjcUxBbZJtQ0T/++o4gXNa/9XTQIVXLksU9KoVwATFVz+pOE53kbFMN2b zOaSSxa6EPo3v5YJECg8UxKjQrMqR/s/31GIrb07VNeWl+wcVIbIPW+zMU1JsZk7 awW27qv/ -----END CERTIFICATE-----Generated at Fri Jan 9 16:28:22 2026 by rpki-client