This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/5zwisq6tqBp5Q8UJhKWZ6V2emyU.roa File: 5zwisq6tqBp5Q8UJhKWZ6V2emyU.roa (raw, json) Hash identifier: q2Bm4SlhXLKP3doSfRxzJEsVmQ5w9uuO4LbIvtN/uRU= Subject key identifier: E7:3C:22:B2:AE:AD:A8:1A:79:43:C5:09:84:A5:99:E9:5D:9E:9B:25 Certificate issuer: /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413 Certificate serial: 019B77596600862037FC14F0AFB8456F2B82 Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/5zwisq6tqBp5Q8UJhKWZ6V2emyU.roa Signing time: Thu 01 Jan 2026 02:18:26 +0000 ROA not before: Thu 01 Jan 2026 02:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203759 IP address blocks: 45.142.7.0/24 maxlen: 24 185.86.188.0/22 maxlen: 24 185.124.192.0/22 maxlen: 24 193.19.128.0/22 maxlen: 24 193.148.160.0/19 maxlen: 24 2a05:b540::/29 maxlen: 48 2a06:b500::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:66:00:86:20:37:fc:14:f0:af:b8:45:6f:2b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413 Validity Not Before: Jan 1 02:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e73c22b2aeada81a7943c50984a599e95d9e9b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:76:62:7f:ae:09:ef:fb:dd:c7:80:2a:61:4b: dc:44:30:bc:ab:70:2b:c0:c4:02:11:7c:0d:05:3e: 3e:25:02:00:72:89:08:d6:bc:0a:41:28:e5:28:cd: 8a:68:1e:5b:84:6a:01:d6:c8:b6:56:7d:87:d3:9c: ac:5b:6a:7e:e7:c9:55:f0:fd:3a:e1:37:b1:e2:f7: 53:3b:4a:2f:8d:67:82:2b:61:a1:ea:4a:eb:a0:c1: 88:bd:71:b6:60:8c:42:de:97:d1:62:ae:71:52:e6: fb:ac:17:23:ef:e5:43:38:81:84:7c:e2:7b:78:3c: bc:71:05:70:44:5f:91:cf:ca:2d:af:d5:f6:94:30: bb:14:fc:79:1d:b5:3a:a8:5b:cc:61:6d:d0:ec:e1: 2c:d4:11:9d:6d:17:59:21:7e:c7:73:ba:da:76:16: 7e:a2:56:2b:24:49:ea:d9:e1:5f:ee:2f:4b:da:98: de:ed:ae:b4:eb:a4:58:6b:62:3e:17:10:e4:54:a9: bc:ab:ab:31:2a:ee:10:5d:86:5c:9b:34:37:9c:ba: be:8b:87:c3:90:37:56:d0:52:2a:ba:63:d1:d9:f6: 2b:f6:76:68:12:3a:f0:c5:4d:a4:0b:73:04:6a:8e: c1:fc:6b:c0:21:da:e8:1c:9e:63:82:2a:78:27:8e: ed:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3C:22:B2:AE:AD:A8:1A:79:43:C5:09:84:A5:99:E9:5D:9E:9B:25 X509v3 Authority Key Identifier: keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/5zwisq6tqBp5Q8UJhKWZ6V2emyU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.7.0/24 185.86.188.0/22 185.124.192.0/22 193.19.128.0/22 193.148.160.0/19 IPv6: 2a05:b540::/29 2a06:b500::/29 Signature Algorithm: sha256WithRSAEncryption 8d:67:0e:dd:e2:9b:78:95:6b:77:ad:c6:97:88:c6:cf:b9:f0: 81:72:1c:2b:ff:76:48:72:0b:e0:f9:40:f3:e2:34:00:81:aa: ea:6d:95:2c:86:08:27:83:d9:86:ee:1f:03:e4:1b:ec:a9:1e: 7c:14:f0:c4:67:8a:8f:cb:3f:d0:88:1f:51:14:e4:dc:56:b1: 26:f4:6f:4b:3d:d2:33:cb:da:a1:fc:15:53:d3:23:ec:6b:87: 90:e0:f7:fe:06:13:fe:c4:41:75:44:04:77:2d:58:1f:f7:ef: d9:71:38:03:52:a1:39:56:b5:73:f3:dc:90:aa:a9:ae:58:12: 56:73:0a:43:36:a6:63:f1:67:4e:8f:66:91:9e:d8:25:b7:28: 7c:08:07:e5:6b:01:be:61:db:f3:78:b3:8e:36:fa:92:63:ab: e1:e8:12:c1:9a:c7:7a:d9:20:90:e9:42:08:86:f5:b0:d8:df: e5:2f:ca:93:89:88:65:90:c8:f0:28:1d:3f:65:6f:2a:fc:c5: 95:88:09:d6:4a:32:bb:8f:8b:44:fe:5f:14:af:50:7b:85:c7: 0b:ba:5e:69:1b:41:da:00:0f:9a:83:88:91:d4:c2:56:66:93: e1:c2:c1:bd:ee:d2:40:f4:27:58:3d:53:72:2d:68:f5:4a:54: 58:d4:92:d6 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt3WWYAhiA3/BTwr7hFbyuCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNjYwYjIzZmUzYjg2NDJkNmJmNDc1ZjhlYjdmY2FkOWQx M2M0MTMwHhcNMjYwMTAxMDIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzNjMjJiMmFlYWRhODFhNzk0M2M1MDk4NGE1OTllOTVkOWU5YjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nZif64J7/vdx4AqYUvcRDC8q3Ar wMQCEXwNBT4+JQIAcokI1rwKQSjlKM2KaB5bhGoB1si2Vn2H05ysW2p+58lV8P06 4Tex4vdTO0ovjWeCK2Gh6krroMGIvXG2YIxC3pfRYq5xUub7rBcj7+VDOIGEfOJ7 eDy8cQVwRF+Rz8otr9X2lDC7FPx5HbU6qFvMYW3Q7OEs1BGdbRdZIX7Hc7radhZ+ olYrJEnq2eFf7i9L2pje7a6066RYa2I+FxDkVKm8q6sxKu4QXYZcmzQ3nLq+i4fD kDdW0FIqumPR2fYr9nZoEjrwxU2kC3MEao7B/GvAIdroHJ5jgip4J47tdwIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFOc8IrKuragaeUPFCYSlmeldnpslMB8GA1UdIwQY MBaAFJJmCyP+O4ZC1r9HX463/K2dE8QTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva21ZTElfNDdoa0xXdjBkZmpyZjhyWjBUeEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZTNiYWMtM2RhMi00ZTQ5LWJkYWIt MTNlZjFjNDU1Y2M0LzEvNXp3aXNxNnRxQnA1UThVSmhLV1o2VjJlbXlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hZTNiYWMtM2RhMi00ZTQ5LWJkYWItMTNlZjFjNDU1Y2M0 LzEva21ZTElfNDdoa0xXdjBkZmpyZjhyWjBUeEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAkBAIAATAeAwQALY4HAwQC uVa8AwQCuXzAAwQCwROAAwQFwZSgMBQEAgACMA4DBQMqBbVAAwUDKga1ADANBgkq hkiG9w0BAQsFAAOCAQEAjWcO3eKbeJVrd63Gl4jGz7nwgXIcK/92SHIL4PlA8+I0 AIGq6m2VLIYIJ4PZhu4fA+Qb7KkefBTwxGeKj8s/0IgfURTk3FaxJvRvSz3SM8va ofwVU9Mj7GuHkOD3/gYT/sRBdUQEdy1YH/fv2XE4A1KhOVa1c/PckKqprlgSVnMK QzamY/FnTo9mkZ7YJbcofAgH5WsBvmHb83izjjb6kmOr4egSwZrHetkgkOlCCIb1 sNjf5S/Kk4mIZZDI8CgdP2VvKvzFlYgJ1koyu4+LRP5fFK9Qe4XHC7peaRtB2gAP moOIkdTCVmaT4cLBve7SQPQnWD1Tci1o9UpUWNSS1g== -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:23 2026 by rpki-client