This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/iAwmrYPmQo2d9WkyTIdj-CB9OP0.roa File: iAwmrYPmQo2d9WkyTIdj-CB9OP0.roa (raw, json) Hash identifier: Igxirsw6JjTxDRIc2Eryuocze4souahIl7Q4rVmCOOI= Subject key identifier: 88:0C:26:AD:83:E6:42:8D:9D:F5:69:32:4C:87:63:F8:20:7D:38:FD Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598 Certificate serial: 019B77C6C4EC4F81515385CC25ACD8A852E9 Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/iAwmrYPmQo2d9WkyTIdj-CB9OP0.roa Signing time: Thu 01 Jan 2026 04:17:53 +0000 ROA not before: Thu 01 Jan 2026 04:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199046 IP address blocks: 5.133.24.0/21 maxlen: 24 5.253.68.0/22 maxlen: 22 5.253.68.0/24 maxlen: 24 5.253.69.0/24 maxlen: 24 5.253.70.0/24 maxlen: 24 5.253.71.0/24 maxlen: 24 45.146.12.0/22 maxlen: 22 45.146.12.0/24 maxlen: 24 45.146.13.0/24 maxlen: 24 45.146.14.0/24 maxlen: 24 45.146.15.0/24 maxlen: 24 185.132.248.0/22 maxlen: 22 185.132.248.0/24 maxlen: 24 185.132.249.0/24 maxlen: 24 185.132.250.0/24 maxlen: 24 185.132.251.0/24 maxlen: 24 193.7.220.0/22 maxlen: 22 193.7.220.0/24 maxlen: 24 193.7.221.0/24 maxlen: 24 193.7.222.0/24 maxlen: 24 193.7.223.0/24 maxlen: 24 2a09:9900::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c4:ec:4f:81:51:53:85:cc:25:ac:d8:a8:52:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598 Validity Not Before: Jan 1 04:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=880c26ad83e6428d9df569324c8763f8207d38fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:88:ec:78:f9:54:0a:0b:ec:53:98:c8:f8:49: c9:bf:91:9a:76:e2:04:0e:61:66:52:e8:69:b2:94: 1b:d7:5b:f3:36:14:b9:42:b0:7f:62:b0:83:76:1d: 65:cb:19:f4:82:c4:ba:10:f9:a6:89:72:b0:bf:c7: d7:d7:70:ea:e7:52:d5:b5:e5:55:64:60:f3:68:c6: 03:e1:5d:3e:e5:f6:97:2a:90:2d:f7:18:18:46:10: 0a:07:ce:29:15:23:6d:4b:c6:9c:da:b4:ad:f6:b3: 23:56:19:66:0a:e6:b3:32:52:da:44:76:e1:80:23: 5b:a0:ae:46:f8:a0:52:94:77:f1:d5:a5:70:8a:29: 29:58:c2:ac:87:4b:60:64:e9:e0:f1:4e:7e:49:79: cd:11:cb:14:a8:b4:de:ea:f6:9c:4d:d9:13:ee:07: d7:fa:89:9f:25:95:d2:f3:6d:eb:c4:4b:49:84:5f: d5:3d:72:3e:8a:ce:8b:d0:7b:ad:29:14:21:3a:ce: ac:a4:9d:18:d1:13:4c:e1:5d:e4:e9:04:d3:1d:3d: 5d:53:20:ec:35:35:a6:0c:5b:a4:6f:68:66:10:d7: 55:b7:c7:ba:91:53:9a:b6:49:bd:cd:ee:9a:27:d4: 7a:9a:e3:09:2a:b9:1d:bc:4a:fb:4a:5f:16:b7:a5: e2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0C:26:AD:83:E6:42:8D:9D:F5:69:32:4C:87:63:F8:20:7D:38:FD X509v3 Authority Key Identifier: keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/iAwmrYPmQo2d9WkyTIdj-CB9OP0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.24.0/21 5.253.68.0/22 45.146.12.0/22 185.132.248.0/22 193.7.220.0/22 IPv6: 2a09:9900::/32 Signature Algorithm: sha256WithRSAEncryption 4f:9b:60:b5:30:15:f2:48:73:2b:2b:bb:d7:db:81:c9:ee:71: 8b:23:b9:14:b1:1f:c9:9b:a0:98:59:44:e6:a1:a8:fe:0b:48: 62:d7:7a:46:1c:25:a5:cc:10:4b:18:67:b5:4f:a2:74:40:3b: 42:95:61:e4:5a:b0:d0:98:84:ee:75:1a:33:05:8d:c5:8c:71: ec:0b:42:c9:b5:64:95:af:ea:40:95:1c:32:f7:a0:a9:f0:59: ae:88:53:44:ec:67:18:a3:3f:6f:b6:61:f8:f4:af:37:09:47: ba:3d:01:c4:12:6f:b1:59:fa:59:c1:fa:c6:36:e8:97:32:8f: a4:fd:56:16:00:7c:b7:a3:d3:c8:72:c7:c0:3e:07:0e:c9:8d: 95:d6:e6:5b:0e:41:b8:7a:a5:62:50:d5:cb:31:7e:05:fd:fb: a7:56:a8:3e:58:c2:d9:18:dc:d5:1c:47:81:09:2e:28:aa:a0: fc:26:bf:74:a8:4b:57:a3:15:f6:d9:45:76:52:34:76:52:9d: c7:56:a3:74:8d:c1:7b:ba:c1:eb:a2:95:a5:6a:4b:76:9f:df: 30:7e:b6:40:4f:14:bc:44:43:d1:7d:49:7d:03:90:40:c2:ef: a8:b3:36:ed:4e:21:7b:71:42:57:d6:0f:29:7c:ee:e1:8b:cf: 07:44:79:a7 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt3xsTsT4FRU4XMJazYqFLpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYWFjYzQ0OGM0YTIzYWZjOTRhNDVhNzliNzZkZmJlODMw YjI1OTgwHhcNMjYwMTAxMDQxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODBjMjZhZDgzZTY0MjhkOWRmNTY5MzI0Yzg3NjNmODIwN2QzOGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIjsePlUCgvsU5jI+EnJv5GaduIE DmFmUuhpspQb11vzNhS5QrB/YrCDdh1lyxn0gsS6EPmmiXKwv8fX13Dq51LVteVV ZGDzaMYD4V0+5faXKpAt9xgYRhAKB84pFSNtS8ac2rSt9rMjVhlmCuazMlLaRHbh gCNboK5G+KBSlHfx1aVwiikpWMKsh0tgZOng8U5+SXnNEcsUqLTe6vacTdkT7gfX +omfJZXS823rxEtJhF/VPXI+is6L0HutKRQhOs6spJ0Y0RNM4V3k6QTTHT1dUyDs NTWmDFukb2hmENdVt8e6kVOatkm9ze6aJ9R6muMJKrkdvEr7Sl8Wt6XisQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFIgMJq2D5kKNnfVpMkyHY/ggfTj9MB8GA1UdIwQY MBaAFG2qzESMSiOvyUpFp5t2376DCyWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmFyTVJJeEtJNl9KU2tXbm0zYmZ2b01MSlpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zNDY0OWUtOWJjNC00MDE4LWIzYTAt NzU2ZjNjYzNlYzMzLzEvaUF3bXJZUG1RbzJkOVdreVRJZGotQ0I5T1AwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8zNDY0OWUtOWJjNC00MDE4LWIzYTAtNzU2ZjNjYzNlYzMz LzEvYmFyTVJJeEtJNl9KU2tXbm0zYmZ2b01MSlpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDBYUYAwQC Bf1EAwQCLZIMAwQCuYT4AwQCwQfcMA0EAgACMAcDBQAqCZkAMA0GCSqGSIb3DQEB CwUAA4IBAQBPm2C1MBXySHMrK7vX24HJ7nGLI7kUsR/Jm6CYWUTmoaj+C0hi13pG HCWlzBBLGGe1T6J0QDtClWHkWrDQmITudRozBY3FjHHsC0LJtWSVr+pAlRwy96Cp 8FmuiFNE7GcYoz9vtmH49K83CUe6PQHEEm+xWfpZwfrGNuiXMo+k/VYWAHy3o9PI csfAPgcOyY2V1uZbDkG4eqViUNXLMX4F/funVqg+WMLZGNzVHEeBCS4oqqD8Jr90 qEtXoxX22UV2UjR2Up3HVqN0jcF7usHropWlakt2n98wfrZATxS8REPRfUl9A5BA wu+oszbtTiF7cUJX1g8pfO7hi88HRHmn -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:11 2026 by rpki-client