This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/m1yBz4RNqu4HwIJUFHN9eMdiX7Y.roa File: m1yBz4RNqu4HwIJUFHN9eMdiX7Y.roa (raw, json) Hash identifier: BDic+DDp9D84u0MlugmEZf/EDqOwVo1Ck4FCtwm/eIw= Subject key identifier: 9B:5C:81:CF:84:4D:AA:EE:07:C0:82:54:14:73:7D:78:C7:62:5F:B6 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 019B7E392AC67FBD1AC9B20CC9B10CA99AB9 Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/m1yBz4RNqu4HwIJUFHN9eMdiX7Y.roa Signing time: Fri 02 Jan 2026 10:20:34 +0000 ROA not before: Fri 02 Jan 2026 10:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396190 IP address blocks: 152.163.4.0/22 maxlen: 22 152.163.64.0/22 maxlen: 22 152.163.88.0/22 maxlen: 22 152.163.104.0/22 maxlen: 22 152.163.140.0/22 maxlen: 22 152.163.164.0/22 maxlen: 22 152.163.192.0/22 maxlen: 22 152.163.216.0/22 maxlen: 22 152.163.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2a:c6:7f:bd:1a:c9:b2:0c:c9:b1:0c:a9:9a:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Jan 2 10:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b5c81cf844daaee07c0825414737d78c7625fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:df:c0:88:3b:c2:87:12:2f:b2:50:a8:ed:d6: e9:38:25:70:78:4d:65:dd:a1:6d:49:a6:00:e5:15: b2:7c:15:de:da:86:64:da:51:67:09:30:1d:a9:12: 26:56:e1:b5:80:14:8c:cc:fa:f6:d0:05:93:ec:eb: b3:a7:10:1d:c5:4a:6e:46:56:bd:e5:75:fe:9e:f3: ce:01:c3:66:f4:88:10:1b:f3:02:17:66:e1:95:5b: 47:64:f5:18:99:f9:9b:4e:19:41:43:72:d7:d2:de: d6:8d:4f:aa:07:84:9e:be:0e:28:5b:00:f0:41:74: 94:3f:e2:51:22:87:6d:18:db:fd:e4:f9:6e:34:ad: 38:17:d5:79:d1:0a:70:15:9f:fd:49:bc:0b:fb:70: 8e:53:aa:3c:db:d3:dc:e6:b7:ac:45:cc:52:22:19: 35:29:f2:03:39:ae:d8:8e:71:6d:88:5e:ba:0b:d5: df:7f:c5:77:bf:02:1e:e1:94:2a:25:22:50:d9:a4: c3:3a:69:38:2a:c9:f7:64:bc:bc:c7:11:9a:db:d6: 34:75:ce:7d:4e:a8:c2:67:bc:a2:4e:12:14:6f:1d: 5a:3e:d7:e5:27:b0:57:72:a8:73:4c:1f:57:ec:16: 21:a2:f0:a2:26:d7:99:9d:ef:61:ad:a2:fe:f5:99: 53:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5C:81:CF:84:4D:AA:EE:07:C0:82:54:14:73:7D:78:C7:62:5F:B6 X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/m1yBz4RNqu4HwIJUFHN9eMdiX7Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.163.4.0/22 152.163.64.0/22 152.163.88.0/22 152.163.104.0/22 152.163.140.0/22 152.163.164.0/22 152.163.192.0/22 152.163.216.0/22 152.163.240.0/22 Signature Algorithm: sha256WithRSAEncryption 54:e5:60:a1:6a:da:0e:d2:cb:ca:ee:43:06:50:d5:3f:47:e1: 74:a1:01:97:81:9a:6e:80:c4:11:d4:49:a1:8d:f1:33:1d:65: a0:07:4a:45:94:03:b3:0c:27:4d:a6:17:8e:17:26:11:fc:28: c8:95:ea:a1:7c:02:33:9d:dd:36:b8:8d:7f:d2:bd:ae:ee:e4: a4:9a:04:1e:e9:bf:4e:cd:f9:ef:67:6c:1b:12:fe:de:54:f0: 84:7f:00:d2:c6:28:e3:39:fb:ed:20:8a:85:b2:27:6c:d3:c4: 6b:7d:ef:71:9c:37:90:0e:34:6b:50:b4:18:81:c1:9e:7f:f1: e3:64:42:30:ff:82:f0:10:f9:fd:ab:0d:45:f8:c5:f3:bf:e3: 87:02:95:94:b2:e2:f8:96:27:cf:32:c0:0a:eb:53:6b:39:31: 74:ce:0c:f4:55:81:e5:9b:95:8f:e7:6d:c4:ac:b9:fb:4d:d8: 11:cb:63:05:42:ad:ce:70:05:e8:38:38:23:13:78:57:a0:67: bb:9e:ed:cf:0a:89:bb:8d:96:c0:70:a3:2a:ed:f4:d8:96:86: 11:3c:1c:b0:32:f3:52:33:86:c4:94:5c:c6:88:9f:a1:43:73: 13:e5:32:10:f8:f6:8c:d3:4b:7e:5d:ca:d3:25:ad:22:bd:c5: 64:f2:b6:0d -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt+OSrGf70aybIMybEMqZq5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjYwMTAyMTAyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjVjODFjZjg0NGRhYWVlMDdjMDgyNTQxNDczN2Q3OGM3NjI1ZmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N/AiDvChxIvslCo7dbpOCVweE1l 3aFtSaYA5RWyfBXe2oZk2lFnCTAdqRImVuG1gBSMzPr20AWT7OuzpxAdxUpuRla9 5XX+nvPOAcNm9IgQG/MCF2bhlVtHZPUYmfmbThlBQ3LX0t7WjU+qB4Sevg4oWwDw QXSUP+JRIodtGNv95PluNK04F9V50QpwFZ/9SbwL+3COU6o829Pc5resRcxSIhk1 KfIDOa7YjnFtiF66C9Xff8V3vwIe4ZQqJSJQ2aTDOmk4Ksn3ZLy8xxGa29Y0dc59 TqjCZ7yiThIUbx1aPtflJ7BXcqhzTB9X7BYhovCiJteZne9hraL+9ZlTWQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFJtcgc+ETaruB8CCVBRzfXjHYl+2MB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvbTF5Qno0Uk5xdTRId0lKVUZITjllTWRpWDdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCmKMEAwQC mKNAAwQCmKNYAwQCmKNoAwQCmKOMAwQCmKOkAwQCmKPAAwQCmKPYAwQCmKPwMA0G CSqGSIb3DQEBCwUAA4IBAQBU5WChatoO0svK7kMGUNU/R+F0oQGXgZpugMQR1Emh jfEzHWWgB0pFlAOzDCdNpheOFyYR/CjIleqhfAIznd02uI1/0r2u7uSkmgQe6b9O zfnvZ2wbEv7eVPCEfwDSxijjOfvtIIqFsids08Rrfe9xnDeQDjRrULQYgcGef/Hj ZEIw/4LwEPn9qw1F+MXzv+OHApWUsuL4lifPMsAK61NrOTF0zgz0VYHlm5WP523E rLn7TdgRy2MFQq3OcAXoODgjE3hXoGe7nu3PCom7jZbAcKMq7fTYloYRPBywMvNS M4bElFzGiJ+hQ3MT5TIQ+PaM00t+XcrTJa0ivcVk8rYN -----END CERTIFICATE-----Generated at Sun Jan 25 03:17:36 2026 by rpki-client