This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/bMXs2Uc_SNydl62v5CGCdjcm6tg.roa File: bMXs2Uc_SNydl62v5CGCdjcm6tg.roa (raw, json) Hash identifier: zUUcFFf97uYy+2qHl1qiR6sdmelTLPBlKzCb0fxEBwQ= Subject key identifier: 6C:C5:EC:D9:47:3F:48:DC:9D:97:AD:AF:E4:21:82:76:37:26:EA:D8 Certificate issuer: /CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc Certificate serial: 019B7CEE3A54768A2AA4F6817400AC11FCBE Authority key identifier: C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/bMXs2Uc_SNydl62v5CGCdjcm6tg.roa Signing time: Fri 02 Jan 2026 04:19:05 +0000 ROA not before: Fri 02 Jan 2026 04:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62336 IP address blocks: 5.63.32.0/19 maxlen: 20 37.228.144.0/22 maxlen: 22 91.191.176.0/22 maxlen: 22 91.198.32.0/24 maxlen: 24 91.200.108.0/22 maxlen: 22 91.211.8.0/22 maxlen: 22 185.39.84.0/22 maxlen: 22 195.230.108.0/24 maxlen: 24 2a01:41e0::/32 maxlen: 32 2a01:41e1::/32 maxlen: 32 2a01:41e3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:3a:54:76:8a:2a:a4:f6:81:74:00:ac:11:fc:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc Validity Not Before: Jan 2 04:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cc5ecd9473f48dc9d97adafe42182763726ead8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f1:7d:cd:87:be:4e:0b:6f:c3:15:3b:32:ed: 12:0f:3c:a0:1a:21:80:26:d8:35:2d:10:51:2a:61: 44:93:ea:6f:a8:b5:81:95:7d:58:73:b7:6d:cc:62: d3:54:ba:72:7b:73:8f:d1:ad:d7:6e:b3:4d:59:20: fe:dd:1d:4e:62:c7:3d:bd:8b:22:0d:60:a9:a2:b0: 17:c2:e9:b0:eb:bc:35:1e:11:59:75:d0:c5:39:de: 57:8f:15:6e:04:d8:eb:58:38:f2:70:98:92:8c:c3: 6d:eb:79:d7:94:b1:68:b8:dd:88:eb:cc:d3:f9:87: 19:66:dd:ff:60:a9:b9:52:36:aa:e6:43:8b:04:62: b5:d0:b3:d0:8e:47:8c:fa:37:41:64:95:dc:cc:e5: 62:fc:e0:78:27:1e:e2:df:c9:3e:ef:ff:96:44:8e: fc:2c:84:ed:cc:d7:bd:64:44:46:1f:d3:87:86:e2: 12:5e:ba:04:12:9e:a2:a7:eb:33:2e:83:c2:c5:34: 90:5e:79:ee:90:71:a6:f8:9b:e2:21:e9:76:9b:b9: 0e:73:05:fb:6e:d5:d7:94:2b:bb:39:79:34:7d:95: db:05:13:c6:b0:bd:14:88:bd:ba:9c:dc:3e:1f:bd: 26:ef:77:7d:4c:25:9d:1d:9d:71:42:12:cf:73:c4: e7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C5:EC:D9:47:3F:48:DC:9D:97:AD:AF:E4:21:82:76:37:26:EA:D8 X509v3 Authority Key Identifier: keyid:C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/bMXs2Uc_SNydl62v5CGCdjcm6tg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.63.32.0/19 37.228.144.0/22 91.191.176.0/22 91.198.32.0/24 91.200.108.0/22 91.211.8.0/22 185.39.84.0/22 195.230.108.0/24 IPv6: 2a01:41e0::/31 2a01:41e3::/32 Signature Algorithm: sha256WithRSAEncryption 38:42:38:6a:c4:dd:2c:15:82:26:60:0b:f7:c0:9e:89:b1:5f: 01:a1:6d:84:c6:a4:66:3b:3f:41:51:88:ec:3a:a7:32:7f:f4: 3f:66:b0:e3:e1:c5:d2:2b:55:d7:fe:2c:45:c8:48:2d:f6:4f: 4a:54:91:9c:70:16:96:5f:0d:e5:08:18:c0:d2:55:ac:69:3f: 62:81:9d:fb:43:17:81:87:0c:50:9b:f4:91:21:7e:d2:5c:b2: 30:9b:90:7c:5d:74:1f:89:87:1d:59:13:a4:32:c0:b5:be:0c: f7:a3:7b:90:ac:fa:dd:19:e5:07:e5:92:32:6d:cf:99:e1:93: 19:94:57:f3:dd:c8:ad:2f:85:32:1c:b5:8d:bb:9a:17:55:ac: e6:f6:53:00:58:a8:04:df:93:51:6f:dc:61:33:a0:ab:b8:7f: eb:2c:a8:7f:f4:c0:87:7e:cf:9c:29:c5:70:ec:c4:db:a3:4f: 52:da:18:9d:4b:40:91:7d:c3:c2:71:0e:e7:c9:10:95:c0:03: 33:df:1c:59:0d:b8:1d:03:78:44:7b:16:0a:d7:e6:9c:04:fc: ec:db:bb:f3:66:41:0a:32:54:e5:01:00:24:e3:49:fc:42:67: 8d:ce:cd:d7:71:dd:06:1f:9d:3d:7d:2f:74:2b:45:11:04:fd: d0:bc:72:16 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt87jpUdooqpPaBdACsEfy+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YzFmZGJhZjlhYzBlNWFkZWVjNjBhMDkyM2M0ZGQ0YTAx ZTkyZGMwHhcNMjYwMTAyMDQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2M1ZWNkOTQ3M2Y0OGRjOWQ5N2FkYWZlNDIxODI3NjM3MjZlYWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/F9zYe+TgtvwxU7Mu0SDzygGiGA Jtg1LRBRKmFEk+pvqLWBlX1Yc7dtzGLTVLpye3OP0a3XbrNNWSD+3R1OYsc9vYsi DWCporAXwumw67w1HhFZddDFOd5XjxVuBNjrWDjycJiSjMNt63nXlLFouN2I68zT +YcZZt3/YKm5Ujaq5kOLBGK10LPQjkeM+jdBZJXczOVi/OB4Jx7i38k+7/+WRI78 LITtzNe9ZERGH9OHhuISXroEEp6ip+szLoPCxTSQXnnukHGm+JviIel2m7kOcwX7 btXXlCu7OXk0fZXbBRPGsL0UiL26nNw+H70m73d9TCWdHZ1xQhLPc8TnZQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFGzF7NlHP0jcnZetr+QhgnY3JurYMB8GA1UdIwQY MBaAFMfB/br5rA5a3uxgoJI8TdSgHpLcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDhIOXV2bXNEbHJlN0dDZ2tqeE4xS0Fla3R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi82YTI3MmItOGI2Zi00ZmUzLThmMjkt ZjAwMjk4MTYwOTdlLzEvYk1YczJVY19TTnlkbDYydjVDR0NkamNtNnRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi82YTI3MmItOGI2Zi00ZmUzLThmMjktZjAwMjk4MTYwOTdl LzEveDhIOXV2bXNEbHJlN0dDZ2tqeE4xS0Fla3R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA2BAIAATAwAwQFBT8gAwQC JeSQAwQCW7+wAwQAW8YgAwQCW8hsAwQCW9MIAwQCuSdUAwQAw+ZsMBQEAgACMA4D BQEqAUHgAwUAKgFB4zANBgkqhkiG9w0BAQsFAAOCAQEAOEI4asTdLBWCJmAL98Ce ibFfAaFthMakZjs/QVGI7DqnMn/0P2aw4+HF0itV1/4sRchILfZPSlSRnHAWll8N 5QgYwNJVrGk/YoGd+0MXgYcMUJv0kSF+0lyyMJuQfF10H4mHHVkTpDLAtb4M96N7 kKz63RnlB+WSMm3PmeGTGZRX893IrS+FMhy1jbuaF1Ws5vZTAFioBN+TUW/cYTOg q7h/6yyof/TAh37PnCnFcOzE26NPUtoYnUtAkX3DwnEO58kQlcADM98cWQ24HQN4 RHsWCtfmnAT87Nu782ZBCjJU5QEAJONJ/EJnjc7N13HdBh+dPX0vdCtFEQT90Lxy Fg== -----END CERTIFICATE-----Generated at Mon Jan 26 19:34:39 2026 by rpki-client