This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/MSGy6sam4fKbXi2YcoFjKDzcLWA.roa File: MSGy6sam4fKbXi2YcoFjKDzcLWA.roa (raw, json) Hash identifier: Y1FZJp1DrHCnyBRybH40WlNGjyTV8QqsDibDvmDTkDE= Subject key identifier: 31:21:B2:EA:C6:A6:E1:F2:9B:5E:2D:98:72:81:63:28:3C:DC:2D:60 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B79114CD2A199A400C3131B58DCA6CCB9 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/MSGy6sam4fKbXi2YcoFjKDzcLWA.roa Signing time: Thu 01 Jan 2026 10:18:55 +0000 ROA not before: Thu 01 Jan 2026 10:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202492 IP address blocks: 64.137.22.0/24 maxlen: 24 64.137.23.0/24 maxlen: 24 64.137.32.0/24 maxlen: 24 64.137.33.0/24 maxlen: 24 64.137.47.0/24 maxlen: 24 64.137.50.0/23 maxlen: 23 64.137.55.0/24 maxlen: 24 64.137.67.0/24 maxlen: 24 64.137.69.0/24 maxlen: 24 64.137.76.0/24 maxlen: 24 64.137.102.0/24 maxlen: 24 64.137.113.0/24 maxlen: 24 64.137.115.0/24 maxlen: 24 64.137.117.0/24 maxlen: 24 64.137.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:4c:d2:a1:99:a4:00:c3:13:1b:58:dc:a6:cc:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3121b2eac6a6e1f29b5e2d98728163283cdc2d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f9:43:8c:87:13:96:ab:20:f9:6f:bd:ee:85: 71:35:04:a2:17:a3:03:1d:3b:a9:d8:ce:7e:d6:4f: fb:21:f7:ef:05:62:3d:04:d4:75:ab:bf:0a:8b:2e: 1f:d7:e2:ec:27:00:1f:bd:1b:65:e4:33:4f:0c:2b: 91:63:57:a5:ab:d8:2d:6c:72:f4:06:65:f1:39:9a: aa:10:3e:ed:43:58:6c:b1:31:1f:47:cb:a5:bf:b4: 14:92:a5:e3:13:b9:76:6f:ed:1b:f2:7d:e9:70:4f: d4:f3:f3:9a:70:2f:c6:22:29:ce:8c:15:1a:62:91: dd:9c:6c:39:52:03:f1:94:80:6b:b2:75:90:42:00: c0:a9:47:9d:61:58:80:73:8b:d8:fe:4f:13:08:ad: 03:a6:b3:51:23:af:3e:26:43:e2:84:12:76:5c:ca: 54:1c:cb:b5:ea:ba:1c:c4:34:c4:77:ff:d2:4a:2b: bf:84:c8:bb:82:b2:85:7c:f0:40:82:77:1d:0d:02: 22:6a:f6:67:ce:94:ff:2b:ee:b7:e6:70:44:02:93: b1:e8:9c:92:1d:f3:b9:ac:01:05:e1:c8:49:b7:ed: b2:6f:ba:65:83:9b:4b:2e:bf:af:8f:86:fc:9c:c7: aa:4d:92:52:eb:44:75:0a:cc:9c:e0:2a:14:d3:68: 97:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:21:B2:EA:C6:A6:E1:F2:9B:5E:2D:98:72:81:63:28:3C:DC:2D:60 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/MSGy6sam4fKbXi2YcoFjKDzcLWA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.137.22.0/23 64.137.32.0/23 64.137.47.0/24 64.137.50.0/23 64.137.55.0/24 64.137.67.0/24 64.137.69.0/24 64.137.76.0/24 64.137.102.0/24 64.137.113.0/24 64.137.115.0/24 64.137.117.0/24 64.137.120.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:3d:c3:38:d5:99:ff:d4:37:06:e9:45:ad:b7:72:38:41:61: b0:7f:35:df:9d:c2:eb:3e:95:9f:a7:d3:7a:d5:68:a3:df:35: d2:ca:8d:25:1c:74:04:63:ae:7b:fc:1e:87:11:91:26:89:2b: a1:d5:20:7a:3d:04:d0:5f:a1:bc:c5:d7:a5:f4:cd:d6:62:fc: eb:d2:66:e9:a3:29:9f:29:9d:8a:2e:3f:10:4e:95:0f:7c:04: aa:1b:82:8e:80:e1:39:a3:c4:1a:82:35:cb:a4:27:52:fe:ce: 91:9c:ee:9f:8b:16:d0:90:93:43:09:43:e5:8a:39:60:28:86: 1a:ff:ae:35:38:cf:be:d1:a7:9b:c6:b3:50:35:c7:56:67:57: 2d:11:0b:6b:1e:5f:24:c4:3c:f2:0b:a3:c9:ec:d7:f7:2c:a9: d4:88:7e:5b:66:aa:6f:ae:fe:8c:c6:45:5f:81:b1:b2:cf:96: 3d:90:8d:b9:ea:52:83:38:af:2b:91:f5:61:03:0b:bf:68:77: bf:ea:8f:9b:b8:96:cc:4a:fe:4b:0f:42:84:02:70:dc:d8:89: 02:73:95:12:1e:48:be:8a:fb:f5:7c:b6:99:a2:54:57:0d:d2: ae:af:8e:2a:8e:41:cd:54:38:1a:1a:bc:60:9c:7c:ef:a1:c5: ba:49:d9:9c -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZt5EUzSoZmkAMMTG1jcpsy5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTIxYjJlYWM2YTZlMWYyOWI1ZTJkOTg3MjgxNjMyODNjZGMyZDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvlDjIcTlqsg+W+97oVxNQSiF6MD HTup2M5+1k/7IffvBWI9BNR1q78Kiy4f1+LsJwAfvRtl5DNPDCuRY1elq9gtbHL0 BmXxOZqqED7tQ1hssTEfR8ulv7QUkqXjE7l2b+0b8n3pcE/U8/OacC/GIinOjBUa YpHdnGw5UgPxlIBrsnWQQgDAqUedYViAc4vY/k8TCK0DprNRI68+JkPihBJ2XMpU HMu16rocxDTEd//SSiu/hMi7grKFfPBAgncdDQIiavZnzpT/K+635nBEApOx6JyS HfO5rAEF4chJt+2yb7plg5tLLr+vj4b8nMeqTZJS60R1Csyc4CoU02iXfQIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFDEhsurGpuHym14tmHKBYyg83C1gMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvTVNHeTZzYW00ZktiWGkyWWNvRmpLRHpjTFdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQBQIkWAwQB QIkgAwQAQIkvAwQBQIkyAwQAQIk3AwQAQIlDAwQAQIlFAwQAQIlMAwQAQIlmAwQA QIlxAwQAQIlzAwQAQIl1AwQAQIl4MA0GCSqGSIb3DQEBCwUAA4IBAQBdPcM41Zn/ 1DcG6UWtt3I4QWGwfzXfncLrPpWfp9N61Wij3zXSyo0lHHQEY657/B6HEZEmiSuh 1SB6PQTQX6G8xdel9M3WYvzr0mbpoymfKZ2KLj8QTpUPfASqG4KOgOE5o8QagjXL pCdS/s6RnO6fixbQkJNDCUPlijlgKIYa/641OM++0aebxrNQNcdWZ1ctEQtrHl8k xDzyC6PJ7Nf3LKnUiH5bZqpvrv6MxkVfgbGyz5Y9kI256lKDOK8rkfVhAwu/aHe/ 6o+buJbMSv5LD0KEAnDc2IkCc5USHki+ivv1fLaZolRXDdKur44qjkHNVDgaGrxg nHzvocW6Sdmc -----END CERTIFICATE-----Generated at Fri Jan 2 02:36:38 2026 by rpki-client