This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/zT9J5b2waWVY1frWgok6rDhDEkA.roa File: zT9J5b2waWVY1frWgok6rDhDEkA.roa (raw, json) Hash identifier: kG62AdWQmKbNQrIhDYZwVRIR364hCu8diTI8HvtbVqM= Subject key identifier: CD:3F:49:E5:BD:B0:69:65:58:D5:FA:D6:82:89:3A:AC:38:43:12:40 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 019B7E392B69D3D166E6952BC8F199FB5B93 Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/zT9J5b2waWVY1frWgok6rDhDEkA.roa Signing time: Fri 02 Jan 2026 10:20:34 +0000 ROA not before: Fri 02 Jan 2026 10:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396356 IP address blocks: 72.63.48.0/22 maxlen: 22 72.63.120.0/22 maxlen: 22 72.63.132.0/22 maxlen: 22 72.63.136.0/22 maxlen: 22 72.63.140.0/22 maxlen: 22 72.63.144.0/22 maxlen: 22 72.63.148.0/22 maxlen: 22 72.63.160.0/22 maxlen: 22 72.63.164.0/22 maxlen: 22 72.63.168.0/22 maxlen: 22 72.63.172.0/22 maxlen: 22 72.63.176.0/22 maxlen: 22 72.63.180.0/22 maxlen: 22 72.63.184.0/22 maxlen: 22 72.63.192.0/22 maxlen: 22 72.63.196.0/22 maxlen: 22 72.63.200.0/22 maxlen: 22 72.63.204.0/22 maxlen: 22 72.63.208.0/22 maxlen: 22 72.63.216.0/22 maxlen: 22 72.63.224.0/22 maxlen: 22 72.63.228.0/22 maxlen: 22 72.63.232.0/22 maxlen: 22 72.63.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2b:69:d3:d1:66:e6:95:2b:c8:f1:99:fb:5b:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Jan 2 10:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd3f49e5bdb0696558d5fad682893aac38431240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:32:0c:12:f8:bb:45:a6:43:e7:11:0b:f0:b2: e9:db:42:a4:f1:54:a4:dd:12:50:0f:9c:ef:96:ad: ba:f1:42:50:fe:ec:bb:c7:c8:dd:41:48:ef:f9:d9: ee:66:26:83:83:20:db:c7:25:a7:39:ff:51:59:99: 29:e7:b8:a5:a4:6d:cd:03:32:e2:da:8a:c0:72:b8: c2:9b:f4:6f:14:e8:0b:78:84:34:a5:80:93:3a:0a: 28:19:88:26:69:3b:b7:86:8d:01:4e:dd:ea:c3:07: c8:69:84:75:03:70:18:20:f0:62:e7:5e:09:d0:ac: ae:e6:87:d8:94:3c:15:df:22:81:7f:19:77:bb:39: 66:02:bc:61:1c:e9:c5:6f:47:cf:10:9f:1d:16:28: df:76:c7:1c:c8:bf:56:10:71:0b:a5:4f:eb:60:16: 0c:2f:a9:52:ba:2f:e4:f0:79:d1:0a:5b:0a:d0:7c: 77:2c:7d:f6:1f:1a:5f:8b:66:19:ae:cf:4f:81:15: cb:80:8d:92:33:67:af:f3:03:eb:5c:70:87:c9:1d: 2b:b1:76:27:4a:2d:5f:88:ee:2f:e9:0b:0a:6c:8e: cc:f4:c0:35:97:bd:2c:af:b8:6a:80:94:02:28:0a: 73:0b:3e:7a:5b:60:9e:6a:31:3e:f3:77:42:0a:a1: c4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:3F:49:E5:BD:B0:69:65:58:D5:FA:D6:82:89:3A:AC:38:43:12:40 X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/zT9J5b2waWVY1frWgok6rDhDEkA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.63.48.0/22 72.63.120.0/22 72.63.132.0-72.63.151.255 72.63.160.0-72.63.187.255 72.63.192.0-72.63.211.255 72.63.216.0/22 72.63.224.0/20 Signature Algorithm: sha256WithRSAEncryption 44:56:c8:19:61:1c:3c:44:37:ab:9b:43:49:d7:f2:3a:f8:78: a8:c2:5c:e6:db:22:e5:a8:1b:d5:e9:81:54:12:ab:dc:cd:9c: cd:d1:1d:37:c7:cb:35:a7:cd:8b:1b:ae:13:12:55:d7:5b:df: c7:92:83:90:06:e9:d1:74:66:3f:ce:19:19:55:c6:4a:5c:22: 76:ef:98:82:d5:73:25:9b:b9:ec:c7:2d:74:e8:1f:d9:2e:42: b9:9e:f0:ef:de:f5:a4:1a:6d:62:a2:71:94:68:72:75:a5:a3: f7:3e:da:09:a6:84:83:02:da:be:12:35:27:a9:b6:cd:bb:fb: 99:2e:8b:43:72:69:bc:b3:e5:00:82:10:0e:3a:af:dc:2e:cf: 74:ee:d9:64:6c:17:88:42:94:35:5a:7c:2d:8f:42:1a:fa:68: 41:b3:2b:a5:f1:03:ef:64:de:f5:c6:2a:40:d0:f4:1d:92:11: ed:8a:4b:87:dc:f3:ac:10:7b:34:db:ac:3e:cc:c9:20:68:1a: 0c:57:61:dd:93:e4:c1:b5:e9:d8:9e:b2:40:70:4d:60:cd:e3: 6e:7c:06:08:7b:04:87:07:d2:83:65:c9:10:67:6e:12:f4:ba: 0b:71:ea:89:e8:50:88:8c:bb:78:c5:77:f4:e5:f6:b5:26:e8: 57:de:68:f1 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt+OStp09Fm5pUryPGZ+1uTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjYwMTAyMTAyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDNmNDllNWJkYjA2OTY1NThkNWZhZDY4Mjg5M2FhYzM4NDMxMjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DIMEvi7RaZD5xEL8LLp20Kk8VSk 3RJQD5zvlq268UJQ/uy7x8jdQUjv+dnuZiaDgyDbxyWnOf9RWZkp57ilpG3NAzLi 2orAcrjCm/RvFOgLeIQ0pYCTOgooGYgmaTu3ho0BTt3qwwfIaYR1A3AYIPBi514J 0Kyu5ofYlDwV3yKBfxl3uzlmArxhHOnFb0fPEJ8dFijfdsccyL9WEHELpU/rYBYM L6lSui/k8HnRClsK0Hx3LH32Hxpfi2YZrs9PgRXLgI2SM2ev8wPrXHCHyR0rsXYn Si1fiO4v6QsKbI7M9MA1l70sr7hqgJQCKApzCz56W2CeajE+83dCCqHEzwIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFM0/SeW9sGllWNX61oKJOqw4QxJAMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvelQ5SjViMndhV1ZZMWZyV2dvazZyRGhERWtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQCSD8wAwQC SD94MAwDBAJIP4QDBANIP5AwDAMEBUg/oAMEAkg/uDAMAwQGSD/AAwQCSD/QAwQC SD/YAwQESD/gMA0GCSqGSIb3DQEBCwUAA4IBAQBEVsgZYRw8RDerm0NJ1/I6+Hio wlzm2yLlqBvV6YFUEqvczZzN0R03x8s1p82LG64TElXXW9/HkoOQBunRdGY/zhkZ VcZKXCJ275iC1XMlm7nsxy106B/ZLkK5nvDv3vWkGm1ionGUaHJ1paP3PtoJpoSD Atq+EjUnqbbNu/uZLotDcmm8s+UAghAOOq/cLs907tlkbBeIQpQ1Wnwtj0Ia+mhB syul8QPvZN71xipA0PQdkhHtikuH3POsEHs026w+zMkgaBoMV2Hdk+TBtenYnrJA cE1gzeNufAYIewSHB9KDZckQZ24S9LoLceqJ6FCIjLt4xXf05fa1JuhX3mjx -----END CERTIFICATE-----Generated at Sun Jan 25 03:19:45 2026 by rpki-client