This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/ZcGYcKVXXeGiVyW6QryfRkeaRJ4.roa File: ZcGYcKVXXeGiVyW6QryfRkeaRJ4.roa (raw, json) Hash identifier: C3BhkrCJHBXL5w9ujnG5EyYJwKSXCAqKdIZcqBfXito= Subject key identifier: 65:C1:98:70:A5:57:5D:E1:A2:57:25:BA:42:BC:9F:46:47:9A:44:9E Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 019B7AC833EB7272FA900D637C66C984D15F Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/ZcGYcKVXXeGiVyW6QryfRkeaRJ4.roa Signing time: Thu 01 Jan 2026 18:18:19 +0000 ROA not before: Thu 01 Jan 2026 18:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215540 IP address blocks: 5.181.2.0/24 maxlen: 24 5.181.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:33:eb:72:72:fa:90:0d:63:7c:66:c9:84:d1:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Jan 1 18:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65c19870a5575de1a25725ba42bc9f46479a449e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:49:50:1c:9a:c2:7c:59:2d:46:cd:85:42:b6: da:a5:ad:0b:5e:4f:b0:3b:f0:d3:29:e2:fe:4e:d8: 30:8d:a4:26:70:05:6f:d3:e2:e6:c0:e7:81:f7:56: 7e:ba:5d:9f:b0:45:db:1e:19:79:7f:77:13:70:96: 1e:ac:55:55:c0:b5:1a:a1:7e:17:d6:12:e3:1a:61: 6c:e5:22:97:04:24:52:68:52:dd:72:5d:bd:06:1c: 78:9f:45:db:01:33:84:13:58:fe:21:20:db:c7:a0: 4b:f2:44:cb:5e:67:0f:3f:e3:8e:70:f9:92:c8:16: 8b:f2:2f:ef:fd:ae:8f:77:15:84:6a:0b:b6:1d:1f: 2e:a3:9e:75:c1:27:ce:50:b2:3b:ad:b6:98:d1:74: e0:cf:19:1d:b3:5f:45:ac:e8:da:3d:d1:34:9d:4e: fe:77:1b:19:64:83:90:85:5b:ce:d2:20:c5:63:9d: b3:34:63:09:ed:ee:01:60:af:7e:47:c4:bf:4f:69: 5b:e0:57:ee:c2:8e:ee:00:44:51:ff:4b:c7:d2:59: 8e:ff:6d:7a:94:4c:62:81:05:a0:45:e6:a5:b6:51: 2b:96:31:ba:b0:c8:64:a1:d5:a0:b4:94:dc:e1:30: 2a:34:06:dd:3a:c5:c4:1f:c6:e5:e1:8a:f5:47:ab: 52:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C1:98:70:A5:57:5D:E1:A2:57:25:BA:42:BC:9F:46:47:9A:44:9E X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/ZcGYcKVXXeGiVyW6QryfRkeaRJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.2.0/23 Signature Algorithm: sha256WithRSAEncryption 44:16:eb:e3:86:51:71:c5:bf:68:62:26:76:14:d7:98:92:15: c1:ce:f9:99:f5:cb:2c:c2:47:c1:da:19:4b:4b:55:16:46:3f: b9:aa:15:48:d0:29:9a:04:b4:26:85:3b:7d:10:1a:4b:f6:b6: 25:4e:96:24:7f:95:e8:19:5b:ad:b8:0c:7c:da:3d:b5:77:40: bc:2a:5f:34:ee:47:7f:49:21:90:ba:59:68:6b:80:ce:f0:50: 73:90:01:02:27:e8:69:a6:7f:d0:0b:e5:56:8f:41:d5:2b:aa: 72:7e:52:5f:76:de:22:27:ca:28:67:80:d4:e3:70:e8:7b:93: 49:c4:9a:9e:f2:d3:36:7c:c1:dc:12:29:6b:f2:a2:ee:56:52: c4:30:b7:fd:a4:76:bc:5c:16:04:e3:a1:7b:9d:e0:42:1f:1b: fe:36:75:a3:f9:d5:04:f5:49:57:f3:8a:d9:eb:e3:a4:70:aa: 10:69:72:7b:b3:af:16:61:1e:a3:e7:65:cd:24:f2:72:75:24: 49:3a:ec:88:58:3a:99:bb:bb:e9:ab:a9:ea:ad:1b:93:96:6b: c8:8e:fd:4c:ca:48:64:fe:c5:de:c6:33:e6:b6:dd:17:54:20: 14:4c:e6:51:d0:ad:f7:2a:bc:7c:70:ee:23:8a:94:69:a7:e4: 74:01:5e:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yDPrcnL6kA1jfGbJhNFfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYwMTAxMTgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWMxOTg3MGE1NTc1ZGUxYTI1NzI1YmE0MmJjOWY0NjQ3OWE0NDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2klQHJrCfFktRs2FQrbapa0LXk+w O/DTKeL+TtgwjaQmcAVv0+LmwOeB91Z+ul2fsEXbHhl5f3cTcJYerFVVwLUaoX4X 1hLjGmFs5SKXBCRSaFLdcl29Bhx4n0XbATOEE1j+ISDbx6BL8kTLXmcPP+OOcPmS yBaL8i/v/a6PdxWEagu2HR8uo551wSfOULI7rbaY0XTgzxkds19FrOjaPdE0nU7+ dxsZZIOQhVvO0iDFY52zNGMJ7e4BYK9+R8S/T2lb4Ffuwo7uAERR/0vH0lmO/216 lExigQWgRealtlErljG6sMhkodWgtJTc4TAqNAbdOsXEH8bl4Yr1R6tS3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGXBmHClV13holclukK8n0ZHmkSeMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvWmNHWWNLVlhYZUdpVnlXNlFyeWZSa2VhUko0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBbUCMA0G CSqGSIb3DQEBCwUAA4IBAQBEFuvjhlFxxb9oYiZ2FNeYkhXBzvmZ9csswkfB2hlL S1UWRj+5qhVI0CmaBLQmhTt9EBpL9rYlTpYkf5XoGVutuAx82j21d0C8Kl807kd/ SSGQulloa4DO8FBzkAECJ+hppn/QC+VWj0HVK6pyflJfdt4iJ8ooZ4DU43Doe5NJ xJqe8tM2fMHcEilr8qLuVlLEMLf9pHa8XBYE46F7neBCHxv+NnWj+dUE9UlX84rZ 6+OkcKoQaXJ7s68WYR6j52XNJPJydSRJOuyIWDqZu7vpq6nqrRuTlmvIjv1Mykhk /sXexjPmtt0XVCAUTOZR0K33Krx8cO4jipRpp+R0AV62 -----END CERTIFICATE-----Generated at Wed Jan 21 12:44:15 2026 by rpki-client