This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/cXWQ-OpF5MSEV9XXbIDzHhHfbiM.roa File: cXWQ-OpF5MSEV9XXbIDzHhHfbiM.roa (raw, json) Hash identifier: Zd/md0ukR3Ww6duMAFycBCzHzVmUmkCQrekRunAgt5g= Subject key identifier: 71:75:90:F8:EA:45:E4:C4:84:57:D5:D7:6C:80:F3:1E:11:DF:6E:23 Certificate issuer: /CN=1034068b5e9f7314277e2be9726c732131b1756c Certificate serial: 019B7758D4C5BAAD835753A989D02F079AF2 Authority key identifier: 10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/cXWQ-OpF5MSEV9XXbIDzHhHfbiM.roa Signing time: Thu 01 Jan 2026 02:17:48 +0000 ROA not before: Thu 01 Jan 2026 02:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 5.32.192.0/18 maxlen: 24 5.36.0.0/16 maxlen: 24 5.37.0.0/16 maxlen: 24 37.40.0.0/15 maxlen: 24 62.61.160.0/19 maxlen: 24 62.231.192.0/18 maxlen: 24 82.178.0.0/19 maxlen: 24 82.178.34.0/23 maxlen: 24 82.178.36.0/22 maxlen: 24 82.178.40.0/21 maxlen: 24 82.178.48.0/20 maxlen: 24 82.178.64.0/20 maxlen: 24 82.178.80.0/20 maxlen: 24 82.178.96.0/20 maxlen: 24 82.178.112.0/20 maxlen: 24 82.178.128.0/20 maxlen: 24 82.178.144.0/21 maxlen: 24 82.178.152.0/22 maxlen: 24 82.178.156.0/23 maxlen: 24 82.178.160.0/20 maxlen: 24 82.178.176.0/20 maxlen: 24 82.178.192.0/20 maxlen: 24 82.178.208.0/20 maxlen: 24 82.178.224.0/20 maxlen: 24 82.178.240.0/20 maxlen: 24 85.154.0.0/16 maxlen: 24 134.0.128.0/18 maxlen: 24 134.0.192.0/20 maxlen: 24 134.0.208.0/21 maxlen: 24 188.140.128.0/17 maxlen: 24 212.72.0.0/19 maxlen: 24 2001:1670::/32 maxlen: 48 2001:1670:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.mft rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d4:c5:ba:ad:83:57:53:a9:89:d0:2f:07:9a:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1034068b5e9f7314277e2be9726c732131b1756c Validity Not Before: Jan 1 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=717590f8ea45e4c48457d5d76c80f31e11df6e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d3:bd:82:53:10:28:71:25:05:45:44:3c:87: f4:8f:0f:0c:c7:ee:f5:20:20:42:55:eb:f8:e0:e7: 0e:a2:12:53:87:ce:01:d5:d8:8a:41:99:b9:fa:0b: 78:68:f7:08:58:66:1f:e4:43:0b:a6:95:dd:55:ea: 4c:79:3e:e8:64:84:60:39:da:42:ef:86:59:b7:21: e2:68:b2:22:e0:37:70:a6:84:10:6d:74:61:ef:0a: da:54:45:02:33:2a:32:39:9d:41:f0:31:1a:86:d2: e2:8e:f0:82:2f:9d:5b:2f:93:70:9e:bc:e7:27:e8: f9:76:0d:90:b9:f3:58:ab:36:9f:c6:b6:46:7b:64: ca:6e:44:15:2f:22:c2:89:da:e0:84:89:55:f0:a1: f5:10:f9:43:44:e2:2f:24:28:80:59:a7:ea:60:ce: 50:21:4d:8b:d1:10:55:6e:90:58:b5:05:f3:ce:27: 13:37:27:4a:24:c8:b9:eb:af:01:72:d2:35:eb:bf: d2:1b:be:81:38:c2:9a:10:32:b5:78:ca:67:85:01: 04:de:7f:a7:73:85:93:d6:5d:28:71:21:50:11:35: 35:49:e5:6f:0e:15:68:e7:77:17:10:35:48:84:29: 54:06:76:b3:a1:8d:b9:9a:d3:77:ac:05:fe:3d:62: 37:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:75:90:F8:EA:45:E4:C4:84:57:D5:D7:6C:80:F3:1E:11:DF:6E:23 X509v3 Authority Key Identifier: keyid:10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/cXWQ-OpF5MSEV9XXbIDzHhHfbiM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.32.192.0/18 5.36.0.0/15 37.40.0.0/15 62.61.160.0/19 62.231.192.0/18 82.178.0.0/19 82.178.34.0-82.178.157.255 82.178.160.0-82.178.255.255 85.154.0.0/16 134.0.128.0-134.0.215.255 188.140.128.0/17 212.72.0.0/19 IPv6: 2001:1670::/32 Signature Algorithm: sha256WithRSAEncryption a8:b2:ea:01:71:a4:6d:1d:e3:9d:6d:4f:63:0a:c9:2b:d6:5e: 1c:81:13:80:a2:9a:59:5b:5d:5c:dc:c2:87:78:e4:63:1a:ae: 69:80:ce:78:dc:9f:17:22:e1:92:91:d8:e8:cb:a1:26:1a:60: cc:1f:05:91:ed:5c:88:92:2d:36:28:a2:ca:0a:46:67:67:b8: fc:0d:0e:20:f8:08:c5:49:91:d1:d4:bb:f9:92:74:7f:b9:ac: 6a:c9:b6:e6:99:90:b2:ae:b5:56:0d:77:f2:d6:2a:58:87:7c: 45:f6:93:fd:e2:c6:2b:d0:29:d9:ab:e5:27:2c:2c:ed:1d:36: b8:3b:f7:ce:2d:de:2b:7a:3b:f3:40:45:53:10:d4:20:79:97: 78:cb:3d:95:c8:e8:29:7a:3d:50:4c:69:3c:57:00:d0:b9:f9: 66:4f:ef:97:4f:5e:8f:08:0d:ec:72:57:c6:6b:81:25:b8:20: f0:6b:5e:a5:0c:e1:4f:1d:a6:10:1f:5f:f4:e6:0e:53:cb:3a: f7:40:fc:cf:55:ac:d3:95:65:08:7f:4b:ef:94:e7:4a:28:dd: 0f:f7:94:7c:89:a2:9f:6c:cb:3f:cb:50:f9:de:87:2c:a2:9d: 87:c2:de:33:50:81:db:7e:7e:e9:d0:ac:8d:77:50:68:df:43: 18:e5:d8:12 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgISAZt3WNTFuq2DV1OpidAvB5ryMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMzQwNjhiNWU5ZjczMTQyNzdlMmJlOTcyNmM3MzIxMzFi MTc1NmMwHhcNMjYwMTAxMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTc1OTBmOGVhNDVlNGM0ODQ1N2Q1ZDc2YzgwZjMxZTExZGY2ZTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dO9glMQKHElBUVEPIf0jw8Mx+71 ICBCVev44OcOohJTh84B1diKQZm5+gt4aPcIWGYf5EMLppXdVepMeT7oZIRgOdpC 74ZZtyHiaLIi4DdwpoQQbXRh7wraVEUCMyoyOZ1B8DEahtLijvCCL51bL5Nwnrzn J+j5dg2QufNYqzafxrZGe2TKbkQVLyLCidrghIlV8KH1EPlDROIvJCiAWafqYM5Q IU2L0RBVbpBYtQXzzicTNydKJMi5668BctI167/SG76BOMKaEDK1eMpnhQEE3n+n c4WT1l0ocSFQETU1SeVvDhVo53cXEDVIhClUBnazoY25mtN3rAX+PWI3wQIDAQAB o4ICbzCCAmswHQYDVR0OBBYEFHF1kPjqReTEhFfV12yA8x4R324jMB8GA1UdIwQY MBaAFBA0Boten3MUJ34r6XJscyExsXVsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRURRR2kxNmZjeFFuZml2cGNteHpJVEd4ZFd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hMDQ1MGUtNTYzNC00NThkLTkxOGYt MTAzZDkzZDI1MWFiLzEvY1hXUS1PcEY1TVNFVjlYWGJJRHpIaEhmYmlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hMDQ1MGUtNTYzNC00NThkLTkxOGYtMTAzZDkzZDI1MWFi LzEvRURRR2kxNmZjeFFuZml2cGNteHpJVEd4ZFd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwYgQCAAEwXAMEBgUgwAMD AQUkAwMBJSgDBAU+PaADBAY+58ADBAVSsgAwDAMEAVKyIgMEAVKynDALAwQFUrKg AwMAUrIDAwBVmjAMAwQHhgCAAwQDhgDQAwQHvIyAAwQF1EgAMA0EAgACMAcDBQAg ARZwMA0GCSqGSIb3DQEBCwUAA4IBAQCosuoBcaRtHeOdbU9jCskr1l4cgROAoppZ W11c3MKHeORjGq5pgM543J8XIuGSkdjoy6EmGmDMHwWR7VyIki02KKLKCkZnZ7j8 DQ4g+AjFSZHR1Lv5knR/uaxqybbmmZCyrrVWDXfy1ipYh3xF9pP94sYr0CnZq+Un LCztHTa4O/fOLd4rejvzQEVTENQgeZd4yz2VyOgpej1QTGk8VwDQuflmT++XT16P CA3sclfGa4EluCDwa16lDOFPHaYQH1/05g5Tyzr3QPzPVazTlWUIf0vvlOdKKN0P 95R8iaKfbMs/y1D53ocsop2Hwt4zUIHbfn7p0KyNd1Bo30MY5dgS -----END CERTIFICATE-----Generated at Tue Jan 20 01:21:58 2026 by rpki-client