This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5mzfyOkViSnyz1LiZH10l5nPTNY.roa File: 5mzfyOkViSnyz1LiZH10l5nPTNY.roa (raw, json) Hash identifier: 8XlBYEvbiehFXsGtOKtQseBv6agSKu4LTwBF1voPWSo= Subject key identifier: E6:6C:DF:C8:E9:15:89:29:F2:CF:52:E2:64:7D:74:97:99:CF:4C:D6 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D46377A855228CE46627D06849E91 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5mzfyOkViSnyz1LiZH10l5nPTNY.roa Signing time: Fri 02 Jan 2026 06:20:23 +0000 ROA not before: Fri 02 Jan 2026 06:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60798 IP address blocks: 37.46.151.0/24 maxlen: 24 45.156.156.0/24 maxlen: 24 84.245.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:46:37:7a:85:52:28:ce:46:62:7d:06:84:9e:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e66cdfc8e9158929f2cf52e2647d749799cf4cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:eb:28:70:e8:8a:63:59:7c:6e:00:fc:62:e3: b5:c4:09:e7:9c:cb:35:ba:23:d9:97:98:19:fa:78: 9b:66:be:b8:e5:65:94:b4:fd:30:36:37:90:56:9d: 62:0b:81:94:d9:42:3a:e6:c4:0e:56:bb:ee:c6:01: 41:08:5a:11:32:51:59:31:a1:8d:e7:50:fa:e1:f8: 19:c0:31:d9:f9:f8:13:61:fa:44:4f:99:0f:70:25: a5:3d:8a:66:18:7e:11:15:5a:b9:98:44:f7:c4:9c: eb:93:d9:b8:16:68:be:0c:74:35:4e:e7:ca:42:6b: 58:b8:9d:d3:15:8c:0f:d6:f7:6e:34:27:56:13:55: 59:7e:ca:40:6f:fc:21:a1:d1:55:77:49:d6:ed:a8: 1a:0c:fb:d5:77:54:cc:b5:98:b0:fa:d4:a9:2e:8d: 22:61:eb:8a:f5:50:9a:ad:b6:9d:90:81:53:cf:a3: 8f:be:f8:48:3a:51:1a:8d:07:49:6c:57:ba:7b:1c: f8:24:b6:79:65:27:1d:a8:85:b4:fc:1d:58:5a:1c: 34:2e:04:71:1c:a3:56:f1:73:f6:d1:35:f8:6f:b1: fd:90:e8:6c:45:21:f3:a5:55:82:6b:82:70:51:e1: 4f:08:df:8b:d5:69:73:fe:97:96:09:87:4e:7b:34: 4f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:6C:DF:C8:E9:15:89:29:F2:CF:52:E2:64:7D:74:97:99:CF:4C:D6 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5mzfyOkViSnyz1LiZH10l5nPTNY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.46.151.0/24 45.156.156.0/24 84.245.57.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:5d:5b:21:a9:78:15:17:af:7b:23:44:9f:a9:56:fe:ad:18: 8e:c9:78:59:6c:43:33:ef:fe:87:b2:59:6e:4e:76:58:aa:40: 49:f1:75:80:4b:bf:bd:6c:aa:2c:ee:31:ba:b3:34:ab:70:6e: 01:71:b7:dc:00:ec:84:88:26:fb:49:7e:3e:cc:5a:fb:53:c9: c1:86:f8:f1:ee:41:cd:f8:94:61:dd:fb:cb:3c:7d:65:73:4e: a7:d1:f3:dc:1c:de:8e:73:14:13:28:3a:68:29:34:35:96:40: 27:15:cf:e4:62:c6:5d:5b:90:ce:bb:81:cb:d6:00:b9:ae:78: ef:9f:01:34:56:ab:b1:32:7a:1c:d0:ae:70:3a:3c:e5:32:7e: 81:d4:7e:eb:c9:55:e2:0d:e7:ed:6d:e6:d3:ad:ea:d3:5f:9e: 23:ec:03:6c:e7:83:08:f0:56:2f:06:ab:2d:09:c1:d7:64:a9: e4:d3:ad:eb:34:6f:1f:5a:4e:6b:28:36:44:88:4f:ed:80:07: c4:f7:6e:90:90:5e:40:8e:82:59:22:d7:ec:2f:d4:60:8a:d7: 92:41:fe:8b:a9:fc:0a:e1:cc:1e:b3:da:07:17:37:df:37:34: 26:02:b9:0f:f1:f7:8e:24:ff:0c:a6:a4:31:9c:ff:d2:7c:38: d4:d4:79:df -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XUY3eoVSKM5GYn0GhJ6RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjZjZGZjOGU5MTU4OTI5ZjJjZjUyZTI2NDdkNzQ5Nzk5Y2Y0Y2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxesocOiKY1l8bgD8YuO1xAnnnMs1 uiPZl5gZ+nibZr645WWUtP0wNjeQVp1iC4GU2UI65sQOVrvuxgFBCFoRMlFZMaGN 51D64fgZwDHZ+fgTYfpET5kPcCWlPYpmGH4RFVq5mET3xJzrk9m4Fmi+DHQ1TufK QmtYuJ3TFYwP1vduNCdWE1VZfspAb/whodFVd0nW7agaDPvVd1TMtZiw+tSpLo0i YeuK9VCarbadkIFTz6OPvvhIOlEajQdJbFe6exz4JLZ5ZScdqIW0/B1YWhw0LgRx HKNW8XP20TX4b7H9kOhsRSHzpVWCa4JwUeFPCN+L1Wlz/peWCYdOezRPuQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOZs38jpFYkp8s9S4mR9dJeZz0zWMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvNW16ZnlPa1ZpU255ejFMaVpIMTBsNW5QVE5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJS6XAwQA LZycAwQAVPU5MA0GCSqGSIb3DQEBCwUAA4IBAQBfXVshqXgVF697I0SfqVb+rRiO yXhZbEMz7/6HslluTnZYqkBJ8XWAS7+9bKos7jG6szSrcG4BcbfcAOyEiCb7SX4+ zFr7U8nBhvjx7kHN+JRh3fvLPH1lc06n0fPcHN6OcxQTKDpoKTQ1lkAnFc/kYsZd W5DOu4HL1gC5rnjvnwE0VquxMnoc0K5wOjzlMn6B1H7ryVXiDeftbebTrerTX54j 7ANs54MI8FYvBqstCcHXZKnk063rNG8fWk5rKDZEiE/tgAfE926QkF5AjoJZItfs L9RgiteSQf6LqfwK4cwes9oHFzffNzQmArkP8feOJP8MpqQxnP/SfDjU1Hnf -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:52 2026 by rpki-client