This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/5ZAuleUfs3xsRQhzkoCahGaJCWo.roa File: 5ZAuleUfs3xsRQhzkoCahGaJCWo.roa (raw, json) Hash identifier: ivILs9BQhVFkirFYVcK8aKDzDGyD3nZV4Eo7Dn0qk6o= Subject key identifier: E5:90:2E:95:E5:1F:B3:7C:6C:45:08:73:92:80:9A:84:66:89:09:6A Certificate issuer: /CN=60a540ce450456345ec8e098ef4f53634d74bf1f Certificate serial: 019B7C13564973AC5D6A656D549BDCB19139 Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/5ZAuleUfs3xsRQhzkoCahGaJCWo.roa Signing time: Fri 02 Jan 2026 00:20:00 +0000 ROA not before: Fri 02 Jan 2026 00:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 931 IP address blocks: 5.252.164.0/24 maxlen: 24 5.252.165.0/24 maxlen: 24 5.252.166.0/24 maxlen: 24 5.252.167.0/24 maxlen: 24 31.216.59.0/24 maxlen: 24 45.87.60.0/24 maxlen: 24 45.87.61.0/24 maxlen: 24 45.87.62.0/24 maxlen: 24 45.87.63.0/24 maxlen: 24 45.130.152.0/24 maxlen: 24 45.130.153.0/24 maxlen: 24 45.130.154.0/24 maxlen: 24 45.130.155.0/24 maxlen: 24 45.143.144.0/24 maxlen: 24 45.143.145.0/24 maxlen: 24 45.143.146.0/24 maxlen: 24 45.143.147.0/24 maxlen: 24 89.36.230.0/24 maxlen: 24 89.37.100.0/24 maxlen: 24 89.46.43.0/24 maxlen: 24 94.154.8.0/24 maxlen: 24 103.104.248.0/24 maxlen: 24 103.104.249.0/24 maxlen: 24 103.104.250.0/24 maxlen: 24 103.104.251.0/24 maxlen: 24 103.202.52.0/24 maxlen: 24 103.202.53.0/24 maxlen: 24 103.202.54.0/24 maxlen: 24 103.202.55.0/24 maxlen: 24 178.211.157.0/24 maxlen: 24 185.162.74.0/24 maxlen: 24 185.162.75.0/24 maxlen: 24 185.234.115.0/24 maxlen: 24 188.210.236.0/24 maxlen: 24 194.49.68.0/24 maxlen: 24 194.49.69.0/24 maxlen: 24 194.49.78.0/24 maxlen: 24 194.49.79.0/24 maxlen: 24 207.189.10.0/24 maxlen: 24 207.189.11.0/24 maxlen: 24 207.189.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:56:49:73:ac:5d:6a:65:6d:54:9b:dc:b1:91:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f Validity Not Before: Jan 2 00:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5902e95e51fb37c6c45087392809a846689096a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:13:94:be:05:4d:91:b1:57:4d:2f:f3:e2:ae: 68:db:dd:ed:6d:e1:6e:0a:27:b9:ba:a2:fd:0c:34: 10:a4:80:40:d4:f4:64:48:ef:95:f6:24:1b:ba:d2: 6e:70:78:72:92:99:63:c1:17:16:4d:80:c5:51:ee: 05:69:45:07:8d:db:7e:b6:ff:51:ef:ae:a8:02:cd: 5d:f3:ac:e2:58:04:54:9c:2d:8b:2d:cb:6e:4f:a6: cd:a1:40:a1:5a:24:0b:e9:20:62:ec:ef:d3:07:95: 2f:49:ba:74:ee:97:47:d5:b9:ef:26:7b:44:01:e9: 14:0e:f1:26:30:b1:11:f7:cc:b4:36:71:5a:c5:5c: d4:a2:f6:d4:3e:69:59:12:18:c7:ea:25:b1:16:73: d4:3a:57:47:ef:e0:2c:15:81:a6:9b:2e:33:56:97: 84:3f:64:02:86:00:23:eb:33:6d:b3:8b:30:d9:68: 89:14:03:3c:07:95:55:50:e2:87:fb:d5:13:e2:79: 37:8c:53:2b:e4:8b:5d:0d:7e:27:00:1e:09:7c:b2: 10:a2:24:cd:04:d0:89:06:0f:13:05:4d:2f:c2:90: 60:da:2c:ec:fd:68:d4:9e:d6:1b:6b:02:a3:e6:9f: 40:10:65:63:bc:06:7f:6a:8a:ee:e8:c2:d7:8f:15: 51:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:90:2E:95:E5:1F:B3:7C:6C:45:08:73:92:80:9A:84:66:89:09:6A X509v3 Authority Key Identifier: keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/5ZAuleUfs3xsRQhzkoCahGaJCWo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.164.0/22 31.216.59.0/24 45.87.60.0/22 45.130.152.0/22 45.143.144.0/22 89.36.230.0/24 89.37.100.0/24 89.46.43.0/24 94.154.8.0/24 103.104.248.0/22 103.202.52.0/22 178.211.157.0/24 185.162.74.0/23 185.234.115.0/24 188.210.236.0/24 194.49.68.0/23 194.49.78.0/23 207.189.10.0-207.189.12.255 Signature Algorithm: sha256WithRSAEncryption b5:b8:9c:6a:4a:9f:a8:28:a2:1c:7f:06:52:a3:f6:75:14:d7: 8d:59:05:07:26:e6:09:69:9d:5d:85:15:e5:33:41:9a:cb:bc: 17:32:5e:79:83:b6:12:73:10:02:18:b9:59:c0:e4:cd:0e:0d: 79:bc:0b:90:cf:51:44:af:cb:ee:35:73:65:72:72:e4:ef:b6: 79:2a:a4:de:58:74:7d:8f:ff:4a:89:26:4b:eb:c9:d4:87:5b: 3c:54:25:5a:eb:db:7a:8e:e8:5e:80:10:1e:50:56:54:a4:c5: e8:e6:0b:57:16:ba:50:6b:16:07:bb:e9:0d:18:ff:30:86:e8: e9:4d:f2:14:22:36:67:76:9c:65:71:4b:13:1c:ad:67:23:ee: e8:23:05:2a:88:2d:f8:c9:2e:ff:47:b9:e0:7e:ba:70:c4:0b: ca:2e:4f:76:4a:bf:d7:8f:12:02:5f:76:26:b8:7a:d7:85:84: 13:a0:20:e9:3a:88:ca:be:ff:35:e0:9a:2c:df:26:59:ca:be: af:20:28:5f:c9:d9:61:9c:ff:0b:05:40:9f:dd:46:28:c2:c7: 19:a0:87:eb:83:28:67:d9:87:40:c7:47:58:20:6c:68:29:81: 5c:ea:64:78:eb:04:95:51:5e:0f:b2:ab:39:06:b4:05:53:eb: 96:50:41:7c -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgISAZt8E1ZJc6xdamVtVJvcsZE5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYTU0MGNlNDUwNDU2MzQ1ZWM4ZTA5OGVmNGY1MzYzNGQ3 NGJmMWYwHhcNMjYwMTAyMDAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTkwMmU5NWU1MWZiMzdjNmM0NTA4NzM5MjgwOWE4NDY2ODkwOTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhOUvgVNkbFXTS/z4q5o293tbeFu Cie5uqL9DDQQpIBA1PRkSO+V9iQbutJucHhykpljwRcWTYDFUe4FaUUHjdt+tv9R 766oAs1d86ziWARUnC2LLctuT6bNoUChWiQL6SBi7O/TB5UvSbp07pdH1bnvJntE AekUDvEmMLER98y0NnFaxVzUovbUPmlZEhjH6iWxFnPUOldH7+AsFYGmmy4zVpeE P2QChgAj6zNts4sw2WiJFAM8B5VVUOKH+9UT4nk3jFMr5ItdDX4nAB4JfLIQoiTN BNCJBg8TBU0vwpBg2izs/WjUntYbawKj5p9AEGVjvAZ/aoru6MLXjxVReQIDAQAB o4ICeDCCAnQwHQYDVR0OBBYEFOWQLpXlH7N8bEUIc5KAmoRmiQlqMB8GA1UdIwQY MBaAFGClQM5FBFY0XsjgmO9PU2NNdL8fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUtWQXprVUVWalJleU9DWTcwOVRZMDEwdng4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xOTVhNDctYTJjYi00ZjAwLTg1MzEt ZTQ3MzUzMWY2ZmU4LzEvNVpBdWxlVWZzM3hzUlFoemtvQ2FoR2FKQ1dvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xOTVhNDctYTJjYi00ZjAwLTg1MzEtZTQ3MzUzMWY2ZmU4 LzEvWUtWQXprVUVWalJleU9DWTcwOVRZMDEwdng4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEAgX8pAME AB/YOwMEAi1XPAMEAi2CmAMEAi2PkAMEAFkk5gMEAFklZAMEAFkuKwMEAF6aCAME Amdo+AMEAmfKNAMEALLTnQMEAbmiSgMEALnqcwMEALzS7AMEAcIxRAMEAcIxTjAM AwQBz70KAwQAz70MMA0GCSqGSIb3DQEBCwUAA4IBAQC1uJxqSp+oKKIcfwZSo/Z1 FNeNWQUHJuYJaZ1dhRXlM0Gay7wXMl55g7YScxACGLlZwOTNDg15vAuQz1FEr8vu NXNlcnLk77Z5KqTeWHR9j/9KiSZL68nUh1s8VCVa69t6juhegBAeUFZUpMXo5gtX FrpQaxYHu+kNGP8whujpTfIUIjZndpxlcUsTHK1nI+7oIwUqiC34yS7/R7ngfrpw xAvKLk92Sr/XjxICX3YmuHrXhYQToCDpOojKvv814Jos3yZZyr6vIChfydlhnP8L BUCf3UYowscZoIfrgyhn2YdAx0dYIGxoKYFc6mR46wSVUV4Psqs5BrQFU+uWUEF8 -----END CERTIFICATE-----Generated at Fri Jan 9 19:43:27 2026 by rpki-client