This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/5tzdHJZflY-1x9Dve2csyqwdZbQ.roa File: 5tzdHJZflY-1x9Dve2csyqwdZbQ.roa (raw, json) Hash identifier: XDL92AsqSxDOcmZ/1ldjanW7KPhyM7Tkp+WIIFretRk= Subject key identifier: E6:DC:DD:1C:96:5F:95:8F:B5:C7:D0:EF:7B:67:2C:CA:AC:1D:65:B4 Certificate issuer: /CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e Certificate serial: 019B77C6671F280F06BF3B3EAAFFCCB60D8B Authority key identifier: 98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/5tzdHJZflY-1x9Dve2csyqwdZbQ.roa Signing time: Thu 01 Jan 2026 04:17:29 +0000 ROA not before: Thu 01 Jan 2026 04:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56655 IP address blocks: 45.88.200.0/24 maxlen: 24 45.88.201.0/24 maxlen: 24 45.88.202.0/24 maxlen: 24 185.14.97.0/24 maxlen: 24 185.125.168.0/22 maxlen: 22 185.181.60.0/22 maxlen: 22 185.243.216.0/24 maxlen: 24 185.243.217.0/24 maxlen: 24 185.243.218.0/24 maxlen: 24 193.200.221.0/24 maxlen: 24 193.200.229.0/24 maxlen: 24 193.200.238.0/24 maxlen: 24 193.243.189.0/24 maxlen: 24 194.32.107.0/24 maxlen: 24 194.110.207.0/24 maxlen: 24 195.16.73.0/24 maxlen: 24 198.140.141.0/24 maxlen: 24 2a03:94e0::/32 maxlen: 32 2a03:94e1::/32 maxlen: 32 2a03:94e2::/32 maxlen: 32 2a03:94e3::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:67:1f:28:0f:06:bf:3b:3e:aa:ff:cc:b6:0d:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e Validity Not Before: Jan 1 04:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6dcdd1c965f958fb5c7d0ef7b672ccaac1d65b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c2:00:8b:eb:0b:2c:b6:e0:11:50:24:e3:c7: 22:6b:8f:16:32:aa:ea:62:66:2f:57:2a:1a:07:83: d3:8f:20:82:a4:95:67:e2:bb:39:29:08:38:b6:a8: bf:57:3f:29:96:87:b0:98:69:0a:f5:01:40:c1:08: 60:57:79:58:3d:2a:b5:b0:01:af:de:64:ca:23:e3: 5a:de:3d:9e:a6:c8:91:10:cd:d6:ef:c8:a5:97:05: e3:50:58:6a:76:02:30:02:0e:f2:81:db:c6:ae:25: 1d:d1:02:59:3e:22:87:0a:a0:91:e5:cb:59:94:b0: 5f:f5:0a:21:b5:49:44:05:f9:90:78:9c:37:bd:6f: a9:8c:63:83:49:33:f0:ed:77:ee:fc:0d:66:cd:2b: b8:b6:2a:51:9b:39:1a:d5:31:47:1f:4a:ae:0d:af: 55:59:82:4c:03:3b:54:41:c6:4d:62:aa:14:08:c2: 7e:8d:44:a6:16:35:27:5e:b6:86:6c:20:95:4e:60: 05:14:cf:f4:48:f3:b6:cd:c0:e6:45:dc:e9:bb:55: 18:70:89:7a:0a:d0:7f:10:2b:c4:68:21:21:1a:cc: 2d:ac:c4:7f:2a:a9:7e:08:78:61:82:3e:4f:07:15: 30:a9:07:a2:e5:f5:d5:42:71:e0:33:50:e5:f0:16: 1b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DC:DD:1C:96:5F:95:8F:B5:C7:D0:EF:7B:67:2C:CA:AC:1D:65:B4 X509v3 Authority Key Identifier: keyid:98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/5tzdHJZflY-1x9Dve2csyqwdZbQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.200.0-45.88.202.255 185.14.97.0/24 185.125.168.0/22 185.181.60.0/22 185.243.216.0-185.243.218.255 193.200.221.0/24 193.200.229.0/24 193.200.238.0/24 193.243.189.0/24 194.32.107.0/24 194.110.207.0/24 195.16.73.0/24 198.140.141.0/24 IPv6: 2a03:94e0::/30 Signature Algorithm: sha256WithRSAEncryption c2:42:17:dd:fd:a3:3a:9c:ec:07:e4:21:2c:26:5f:c1:4e:90: b0:4d:d7:78:26:81:73:2c:1a:ca:c3:39:e6:9f:f2:6b:f0:81: bf:db:fc:7a:67:51:bb:d3:23:1b:80:a3:e5:78:62:0e:a1:94: b4:d0:f0:61:e9:21:98:9b:a5:ae:00:74:fc:20:0d:57:1f:29: 58:14:ee:1c:7d:1c:b7:24:54:b2:c4:3d:ba:c9:e1:dd:1a:74: 4e:f1:b4:a2:a6:e8:3c:5e:bf:ca:58:74:1f:91:e5:d6:0b:b8: 8c:ed:7c:51:2c:a9:d5:b3:20:a4:a7:ee:0c:29:78:c0:62:8a: 15:a1:25:b4:03:90:a8:d1:3f:66:f6:69:1b:58:3f:12:21:be: 3b:52:1e:72:f7:52:56:87:e8:21:e3:5d:40:3a:b6:74:86:af: b6:0c:2f:ff:36:8c:fa:fe:8c:d3:0d:14:45:e3:e0:ab:2f:a2: 33:9a:2f:52:3d:35:cf:cd:fb:03:4f:9c:cf:ca:6b:13:60:f0: 4f:d2:18:5f:59:1e:da:69:d7:49:f0:f8:ec:ff:c1:76:67:ac: 24:4c:c9:d1:7f:e8:de:21:ce:83:c6:11:22:68:25:99:e8:02: 69:07:64:c6:61:dc:15:15:d0:70:60:af:32:a0:49:e1:ef:d2: 54:11:a8:2e -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgISAZt3xmcfKA8Gvzs+qv/Mtg2LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4YzFkMDNiNDk1MDRkMzQ0NjVkYzQwYTNkMGY5MDg2Y2Fj ZmRiOGUwHhcNMjYwMTAxMDQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmRjZGQxYzk2NWY5NThmYjVjN2QwZWY3YjY3MmNjYWFjMWQ2NWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8IAi+sLLLbgEVAk48cia48WMqrq YmYvVyoaB4PTjyCCpJVn4rs5KQg4tqi/Vz8ploewmGkK9QFAwQhgV3lYPSq1sAGv 3mTKI+Na3j2epsiREM3W78illwXjUFhqdgIwAg7ygdvGriUd0QJZPiKHCqCR5ctZ lLBf9QohtUlEBfmQeJw3vW+pjGODSTPw7Xfu/A1mzSu4tipRmzka1TFHH0quDa9V WYJMAztUQcZNYqoUCMJ+jUSmFjUnXraGbCCVTmAFFM/0SPO2zcDmRdzpu1UYcIl6 CtB/ECvEaCEhGswtrMR/Kql+CHhhgj5PBxUwqQei5fXVQnHgM1Dl8BYbYQIDAQAB o4ICcTCCAm0wHQYDVR0OBBYEFObc3RyWX5WPtcfQ73tnLMqsHWW0MB8GA1UdIwQY MBaAFJjB0DtJUE00Rl3ECj0PkIbKz9uOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU1IUU8wbFFUVFJHWGNRS1BRLVFoc3JQMjQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kNmMyNTctZjUwMS00Nzk2LWFhNjEt YzMxYmRlNTEwMDg1LzEvNXR6ZEhKWmZsWS0xeDlEdmUyY3N5cXdkWmJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9kNmMyNTctZjUwMS00Nzk2LWFhNjEtYzMxYmRlNTEwMDg1 LzEvbU1IUU8wbFFUVFJHWGNRS1BRLVFoc3JQMjQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGGBggrBgEFBQcBBwEB/wR3MHUwZAQCAAEwXjAMAwQDLVjI AwQALVjKAwQAuQ5hAwQCuX2oAwQCubU8MAwDBAO589gDBAC589oDBADByN0DBADB yOUDBADByO4DBADB870DBADCIGsDBADCbs8DBADDEEkDBADGjI0wDQQCAAIwBwMF AioDlOAwDQYJKoZIhvcNAQELBQADggEBAMJCF939ozqc7AfkISwmX8FOkLBN13gm gXMsGsrDOeaf8mvwgb/b/HpnUbvTIxuAo+V4Yg6hlLTQ8GHpIZibpa4AdPwgDVcf KVgU7hx9HLckVLLEPbrJ4d0adE7xtKKm6Dxev8pYdB+R5dYLuIztfFEsqdWzIKSn 7gwpeMBiihWhJbQDkKjRP2b2aRtYPxIhvjtSHnL3UlaH6CHjXUA6tnSGr7YML/82 jPr+jNMNFEXj4KsvojOaL1I9Nc/N+wNPnM/KaxNg8E/SGF9ZHtpp10nw+Oz/wXZn rCRMydF/6N4hzoPGESJoJZnoAmkHZMZh3BUV0HBgrzKgSeHv0lQRqC4= -----END CERTIFICATE-----Generated at Tue Jan 20 00:44:07 2026 by rpki-client