This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa File: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (raw, json) Hash identifier: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U= Subject key identifier: E6:55:72:3D:D3:B2:0F:C3:F5:A7:E1:F7:EE:B2:FB:46:7F:59:F7:07 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019B7AC7AC3EFE77AEF267A10D860C210BAB Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa Signing time: Thu 01 Jan 2026 18:17:44 +0000 ROA not before: Thu 01 Jan 2026 18:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60800 IP address blocks: 91.210.100.0/22 maxlen: 24 103.82.0.0/22 maxlen: 24 125.62.72.0/22 maxlen: 24 185.17.172.0/22 maxlen: 24 185.42.16.0/22 maxlen: 24 185.222.112.0/22 maxlen: 24 2a03:ec40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ac:3e:fe:77:ae:f2:67:a1:0d:86:0c:21:0b:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Jan 1 18:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e655723dd3b20fc3f5a7e1f7eeb2fb467f59f707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e6:23:3d:77:07:93:41:6d:2b:7d:ff:4d:c2: 8a:17:d5:2d:02:6a:25:f0:41:73:7b:eb:5f:0b:6e: 58:33:0d:ee:15:79:5c:9b:17:75:95:ec:e9:29:7c: dd:80:c4:2f:5d:96:c2:a9:84:7c:f3:36:41:e8:c9: db:62:5d:dc:8d:e6:2a:52:fd:e7:db:04:4f:16:31: ac:23:df:2b:90:75:17:67:9d:bf:e9:5b:ed:66:e1: db:6b:47:83:d0:a0:9b:af:52:5a:aa:14:89:cd:54: 2f:25:01:c0:ba:bc:08:1a:f3:be:0b:9b:06:2f:f9: 9c:d8:c4:55:08:25:3c:a6:51:2d:06:25:ac:8a:96: e5:1d:40:d2:aa:91:b3:ff:0f:06:a2:e1:45:26:5b: 36:0b:c1:e7:cc:42:24:a5:c5:1a:9a:fb:11:be:63: ef:c4:41:34:44:eb:36:20:27:43:7c:b5:27:30:fd: ae:9c:a5:29:55:30:12:38:1e:fa:b4:08:67:f5:c8: e0:69:e7:94:34:ef:9d:78:57:49:79:14:27:6e:d1: a9:a2:1a:18:d8:e9:c7:39:b6:13:ad:82:a3:16:88: c0:57:bd:89:53:db:69:35:90:67:46:c8:e1:aa:3a: 90:74:6d:70:21:19:1d:99:a9:bc:ad:20:15:6b:09: 5a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:55:72:3D:D3:B2:0F:C3:F5:A7:E1:F7:EE:B2:FB:46:7F:59:F7:07 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.210.100.0/22 103.82.0.0/22 125.62.72.0/22 185.17.172.0/22 185.42.16.0/22 185.222.112.0/22 IPv6: 2a03:ec40::/29 Signature Algorithm: sha256WithRSAEncryption 1b:94:ee:2a:52:94:76:df:cf:95:f7:d9:89:d7:0f:8e:cb:c4: cd:20:2c:8d:c9:bc:a0:6e:8a:a1:ae:2f:06:16:9c:30:d3:e5: 05:ab:4b:a7:d8:54:9c:91:5f:43:43:85:a2:6f:79:e6:72:a1: c4:e4:67:3e:88:09:e1:13:5e:38:3c:c9:22:2c:d1:a4:57:e7: 4b:b2:f9:2d:d4:cb:d0:3a:04:97:6d:cd:aa:90:aa:ce:f2:20: 5d:f9:f7:89:33:78:b9:5c:29:3b:ff:05:e6:c7:45:2e:88:2a: 6a:cc:67:5b:26:52:01:97:8b:e1:4a:45:77:11:b4:3a:b6:7f: 9f:5a:6d:83:6c:00:66:a3:06:df:5d:dd:d3:69:cb:04:7d:e8: 68:12:cd:79:42:e1:d3:95:52:dc:94:85:f7:1e:6d:bc:1b:cb: d5:a1:7f:d8:17:42:9f:23:39:34:d5:96:b9:0a:e8:98:11:3d: 98:84:7b:dd:3d:61:13:d6:48:8f:fc:3e:67:8e:87:f3:5b:71: d7:ff:00:08:dc:99:5d:49:6a:b1:f9:6f:40:8a:cd:ae:f3:5a: 4c:74:68:de:13:f0:dc:31:e3:c0:0f:a5:00:1b:92:1f:6b:6a: 62:51:62:8b:a2:90:79:81:36:91:ff:25:a6:23:0f:59:0a:f2: 1f:de:52:c6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt6x6w+/neu8mehDYYMIQurMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwMTAxMTgxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjU1NzIzZGQzYjIwZmMzZjVhN2UxZjdlZWIyZmI0NjdmNTlmNzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOYjPXcHk0FtK33/TcKKF9UtAmol 8EFze+tfC25YMw3uFXlcmxd1lezpKXzdgMQvXZbCqYR88zZB6MnbYl3cjeYqUv3n 2wRPFjGsI98rkHUXZ52/6VvtZuHba0eD0KCbr1JaqhSJzVQvJQHAurwIGvO+C5sG L/mc2MRVCCU8plEtBiWsipblHUDSqpGz/w8GouFFJls2C8HnzEIkpcUamvsRvmPv xEE0ROs2ICdDfLUnMP2unKUpVTASOB76tAhn9cjgaeeUNO+deFdJeRQnbtGpohoY 2OnHObYTrYKjFojAV72JU9tpNZBnRsjhqjqQdG1wIRkdmam8rSAVawlaIQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFOZVcj3Tsg/D9afh9+6y+0Z/WfcHMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvNWxWeVBkT3lEOFAxcC1IMzdyTDdSbjlaOXdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCW9JkAwQC Z1IAAwQCfT5IAwQCuRGsAwQCuSoQAwQCud5wMA0EAgACMAcDBQMqA+xAMA0GCSqG SIb3DQEBCwUAA4IBAQAblO4qUpR238+V99mJ1w+Oy8TNICyNybygboqhri8GFpww 0+UFq0un2FSckV9DQ4Wib3nmcqHE5Gc+iAnhE144PMkiLNGkV+dLsvkt1MvQOgSX bc2qkKrO8iBd+feJM3i5XCk7/wXmx0UuiCpqzGdbJlIBl4vhSkV3EbQ6tn+fWm2D bABmowbfXd3TacsEfehoEs15QuHTlVLclIX3Hm28G8vVoX/YF0KfIzk01Za5CuiY ET2YhHvdPWET1kiP/D5njofzW3HX/wAI3JldSWqx+W9Ais2u81pMdGjeE/DcMePA D6UAG5Ifa2piUWKLopB5gTaR/yWmIw9ZCvIf3lLG -----END CERTIFICATE-----Generated at Tue Jan 6 20:33:04 2026 by rpki-client