This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/RCc63apjlRxYYVC64jleE_CWsJc.roa File: RCc63apjlRxYYVC64jleE_CWsJc.roa (raw, json) Hash identifier: mjSJEm7ypZz9PgXhGjjzoNx0TMGrQIqwIHaBFwo6puM= Subject key identifier: 44:27:3A:DD:AA:63:95:1C:58:61:50:BA:E2:39:5E:13:F0:96:B0:97 Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Certificate serial: 019B7C8083FB65F2307AB9CBDF7B0E0664BD Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/RCc63apjlRxYYVC64jleE_CWsJc.roa Signing time: Fri 02 Jan 2026 02:19:15 +0000 ROA not before: Fri 02 Jan 2026 02:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212192 IP address blocks: 5.157.164.0/22 maxlen: 24 5.157.240.0/21 maxlen: 21 37.35.32.0/22 maxlen: 22 37.35.38.0/24 maxlen: 24 146.66.211.0/24 maxlen: 24 146.66.218.0/24 maxlen: 24 146.66.219.0/24 maxlen: 24 178.157.125.0/24 maxlen: 24 188.74.153.0/24 maxlen: 24 188.74.154.0/24 maxlen: 24 188.74.156.0/22 maxlen: 22 188.74.191.0/24 maxlen: 24 188.74.244.0/24 maxlen: 24 188.119.144.0/22 maxlen: 22 188.119.164.0/24 maxlen: 24 188.119.167.0/24 maxlen: 24 188.119.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:83:fb:65:f2:30:7a:b9:cb:df:7b:0e:06:64:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Validity Not Before: Jan 2 02:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44273addaa63951c586150bae2395e13f096b097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cd:2f:b5:08:12:2b:14:99:27:5a:a2:6e:32: 6f:bc:4c:1e:b5:7b:9b:12:6d:53:81:ee:92:40:23: c6:97:ed:bf:85:25:de:0d:cb:57:f2:e9:c6:b7:f2: 44:ae:eb:8c:ef:fe:f3:94:94:b8:4b:6b:2f:5c:6d: 6b:70:d6:5c:aa:f5:1c:9a:12:34:34:3d:4a:5c:f7: 8a:bf:d1:52:99:47:3d:a2:59:57:c0:4c:95:9d:e4: 45:8d:e8:4c:40:7d:85:96:63:3e:7b:24:91:d0:05: 07:50:7e:70:97:49:35:25:c8:c0:a8:34:85:9c:02: 89:9c:1c:fa:b1:ed:37:3e:9e:80:7f:b1:3f:bf:46: a2:1b:8a:fc:f2:60:3f:ad:d3:fa:f9:38:fa:a5:ba: 28:6d:b1:a1:b5:4c:e6:29:41:a0:07:0d:ea:e3:e6: ed:96:78:24:94:50:df:fc:c9:5b:af:a1:3b:da:9b: ed:d7:57:3f:d6:fa:c3:5e:29:61:09:cd:24:0a:c1: 03:92:e7:63:d7:97:43:6a:3e:4b:38:7d:08:ee:47: ed:0a:0d:de:4f:63:fa:ae:3c:4a:cd:6d:ba:01:cc: 24:0b:75:71:fe:d4:62:5d:e6:ce:db:9f:e9:b8:49: d7:60:e9:ae:f1:49:88:f0:50:38:62:07:ec:4a:fd: 74:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:27:3A:DD:AA:63:95:1C:58:61:50:BA:E2:39:5E:13:F0:96:B0:97 X509v3 Authority Key Identifier: keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/RCc63apjlRxYYVC64jleE_CWsJc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.157.164.0/22 5.157.240.0/21 37.35.32.0/22 37.35.38.0/24 146.66.211.0/24 146.66.218.0/23 178.157.125.0/24 188.74.153.0-188.74.154.255 188.74.156.0/22 188.74.191.0/24 188.74.244.0/24 188.119.144.0/22 188.119.164.0/24 188.119.167.0/24 188.119.189.0/24 Signature Algorithm: sha256WithRSAEncryption 33:84:33:57:f7:4d:0d:11:a2:f5:b0:11:3a:e7:0e:a1:9b:b4: 45:46:e3:f0:e6:62:4e:f2:67:25:b7:9b:77:57:6e:53:5b:be: 86:32:52:16:d2:68:2c:5d:20:cc:44:b7:98:7f:e7:2a:e1:f7: f1:a0:81:f7:2d:cb:05:f9:fe:c8:6e:90:ca:d7:91:f4:d3:0e: 25:6b:e0:3b:a6:17:06:e4:ed:28:ae:74:1e:de:d3:c2:6d:8f: 9f:cb:30:7c:a6:13:2d:e4:2a:81:da:cd:69:60:6d:63:2d:25: a4:5e:e9:dc:82:fa:ee:61:97:37:56:64:02:c5:79:60:30:04: 12:2e:bd:d8:2b:00:99:51:99:e3:65:4e:b8:96:d3:43:77:13: 79:8d:9a:85:5c:42:0f:b8:5f:97:4b:22:9e:5d:48:00:95:52: ba:87:69:cc:6b:e7:20:34:15:00:11:50:e8:fc:ad:b5:1b:fa: 8e:a3:2f:9f:b8:b1:9a:16:27:e1:50:19:51:55:f9:2d:af:80: 88:2a:9e:68:c8:da:bb:eb:24:27:69:cf:fc:27:b0:5a:96:6a: ea:0b:51:f2:10:30:30:f4:42:6d:fc:c7:84:70:16:ed:76:28: 6c:22:eb:25:ea:7d:58:b7:f9:b4:2a:7a:df:1a:8a:e9:ec:99: 56:4a:f2:6e -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgISAZt8gIP7ZfIwernL33sOBmS9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4 ZDFkMjYwHhcNMjYwMTAyMDIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDI3M2FkZGFhNjM5NTFjNTg2MTUwYmFlMjM5NWUxM2YwOTZiMDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc0vtQgSKxSZJ1qibjJvvEwetXub Em1Tge6SQCPGl+2/hSXeDctX8unGt/JEruuM7/7zlJS4S2svXG1rcNZcqvUcmhI0 ND1KXPeKv9FSmUc9ollXwEyVneRFjehMQH2FlmM+eySR0AUHUH5wl0k1JcjAqDSF nAKJnBz6se03Pp6Af7E/v0aiG4r88mA/rdP6+Tj6pboobbGhtUzmKUGgBw3q4+bt lngklFDf/Mlbr6E72pvt11c/1vrDXilhCc0kCsEDkudj15dDaj5LOH0I7kftCg3e T2P6rjxKzW26AcwkC3Vx/tRiXebO25/puEnXYOmu8UmI8FA4YgfsSv10VQIDAQAB o4ICZTCCAmEwHQYDVR0OBBYEFEQnOt2qY5UcWGFQuuI5XhPwlrCXMB8GA1UdIwQY MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt ZmE5Y2I1MWNkMGYxLzEvUkNjNjNhcGpsUnhZWVZDNjRqbGVFX0NXc0pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAATBiAwQCBZ2kAwQD BZ3wAwQCJSMgAwQAJSMmAwQAkkLTAwQBkkLaAwQAsp19MAwDBAC8SpkDBAC8SpoD BAK8SpwDBAC8Sr8DBAC8SvQDBAK8d5ADBAC8d6QDBAC8d6cDBAC8d70wDQYJKoZI hvcNAQELBQADggEBADOEM1f3TQ0RovWwETrnDqGbtEVG4/DmYk7yZyW3m3dXblNb voYyUhbSaCxdIMxEt5h/5yrh9/GggfctywX5/shukMrXkfTTDiVr4DumFwbk7Siu dB7e08Jtj5/LMHymEy3kKoHazWlgbWMtJaRe6dyC+u5hlzdWZALFeWAwBBIuvdgr AJlRmeNlTriW00N3E3mNmoVcQg+4X5dLIp5dSACVUrqHacxr5yA0FQARUOj8rbUb +o6jL5+4sZoWJ+FQGVFV+S2vgIgqnmjI2rvrJCdpz/wnsFqWauoLUfIQMDD0Qm38 x4RwFu12KGwi6yXqfVi3+bQqet8aiunsmVZK8m4= -----END CERTIFICATE-----Generated at Mon Jan 19 20:34:51 2026 by rpki-client