This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/idAPicjfcAurqzPxNV2Y-GlWZVM.roa File: idAPicjfcAurqzPxNV2Y-GlWZVM.roa (raw, json) Hash identifier: 9WnV/PIHV4CmrkZ1/Csc9lXw9Lt4fmaI0bw+OleKvs0= Subject key identifier: 89:D0:0F:89:C8:DF:70:0B:AB:AB:33:F1:35:5D:98:F8:69:56:65:53 Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c Certificate serial: 019B7C1169200055E81E9AEB17E89D276D60 Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/idAPicjfcAurqzPxNV2Y-GlWZVM.roa Signing time: Fri 02 Jan 2026 00:17:54 +0000 ROA not before: Fri 02 Jan 2026 00:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209723 IP address blocks: 2.59.200.0/23 maxlen: 23 5.183.60.0/23 maxlen: 23 5.183.62.0/23 maxlen: 23 85.209.4.0/23 maxlen: 23 88.218.148.0/23 maxlen: 23 147.78.224.0/23 maxlen: 23 147.78.226.0/23 maxlen: 23 2a09:ac80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:69:20:00:55:e8:1e:9a:eb:17:e8:9d:27:6d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c Validity Not Before: Jan 2 00:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89d00f89c8df700babab33f1355d98f869566553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ff:bd:ad:17:cb:db:4a:e9:f1:81:2f:0e:39: 6a:52:06:d9:f1:18:a7:7e:a3:c1:4e:24:98:e9:9d: 65:0a:9a:90:a9:43:45:10:20:2a:eb:ed:d3:76:04: 9e:82:1d:00:cb:c0:5a:24:99:fb:38:22:23:03:87: 67:6c:f1:de:a8:98:f5:30:e5:b6:17:9f:32:2a:5e: 65:f6:fb:d3:7b:8c:31:70:a3:f4:22:19:d2:d4:67: 9a:56:67:7c:7e:66:4e:b5:c4:3c:5b:84:8d:52:4c: fc:bf:0a:9b:7c:02:22:cc:b0:f4:70:5c:3c:9c:41: f2:f0:72:cd:6f:2b:6c:c5:97:92:11:4f:89:b8:44: e0:0b:10:10:19:e7:0f:fd:35:71:d4:56:97:8b:55: f5:f7:fa:44:4f:42:7b:09:e0:d1:f1:19:ca:eb:81: bd:11:80:8b:63:31:f4:e7:59:ec:66:c6:f4:33:93: 78:1f:17:ba:76:8e:ad:a9:b5:d9:39:97:34:a4:db: 1e:b5:04:c6:de:1f:12:bb:c8:71:0a:ee:9a:78:aa: 76:60:30:27:f5:44:88:d6:ae:a1:09:ae:0e:e0:35: 86:1d:2c:da:20:39:bd:c5:c7:93:99:06:d7:5d:9f: 19:91:91:f6:aa:37:7d:3c:e5:b5:1b:b4:97:c1:69: 06:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D0:0F:89:C8:DF:70:0B:AB:AB:33:F1:35:5D:98:F8:69:56:65:53 X509v3 Authority Key Identifier: keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/idAPicjfcAurqzPxNV2Y-GlWZVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.200.0/23 5.183.60.0/22 85.209.4.0/23 88.218.148.0/23 147.78.224.0/22 IPv6: 2a09:ac80::/29 Signature Algorithm: sha256WithRSAEncryption 00:2a:54:ca:0c:89:04:be:1d:64:72:8d:55:0d:7d:ab:f6:13: d5:e9:48:32:d6:01:33:b6:df:c2:41:f0:f0:cd:55:5a:94:09: 7f:63:22:7f:92:e6:61:6c:31:9b:b9:05:e9:32:de:92:f2:9a: 65:5a:f7:e0:d4:d3:a2:cf:4f:cc:be:5a:b1:55:be:ef:51:94: 6c:c9:f3:01:4c:be:59:e2:b8:ce:e8:59:f1:5b:a5:d2:1d:87: 9d:eb:5a:73:fb:a3:ef:db:c6:2c:1a:ca:88:b1:f3:66:1d:03: d3:73:e8:74:59:a7:3a:fc:30:88:22:e8:48:8d:ea:ab:cc:ed: 3d:ad:44:34:fa:4b:6b:a3:99:46:d6:07:84:89:69:83:09:ae: 43:ca:9f:68:ef:02:cf:07:67:d8:d9:41:df:ab:ee:87:89:4e: a2:d7:1e:ba:f8:db:a7:01:fa:94:9a:82:b7:b1:1b:d3:a6:11: 6e:82:cd:47:af:34:16:62:98:ff:7f:ea:df:ba:b1:9c:34:45: 88:9b:83:87:a1:bd:34:2d:f5:30:89:37:86:51:3c:3e:aa:67: 51:62:bb:03:2d:27:9a:d4:a0:58:7e:24:72:d8:ce:e6:a4:cd: c0:28:3b:7e:7a:2c:02:cb:58:03:37:f9:2e:62:e2:65:88:d4: e9:07:46:2c -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt8EWkgAFXoHprrF+idJ21gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3M2JlYzMzYWU3MzhjOTg5NTg4MTljNmMxM2JiMzM1ZWUz NGFiNGMwHhcNMjYwMTAyMDAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWQwMGY4OWM4ZGY3MDBiYWJhYjMzZjEzNTVkOThmODY5NTY2NTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6P+9rRfL20rp8YEvDjlqUgbZ8Rin fqPBTiSY6Z1lCpqQqUNFECAq6+3TdgSegh0Ay8BaJJn7OCIjA4dnbPHeqJj1MOW2 F58yKl5l9vvTe4wxcKP0IhnS1GeaVmd8fmZOtcQ8W4SNUkz8vwqbfAIizLD0cFw8 nEHy8HLNbytsxZeSEU+JuETgCxAQGecP/TVx1FaXi1X19/pET0J7CeDR8RnK64G9 EYCLYzH051nsZsb0M5N4Hxe6do6tqbXZOZc0pNsetQTG3h8Su8hxCu6aeKp2YDAn 9USI1q6hCa4O4DWGHSzaIDm9xceTmQbXXZ8ZkZH2qjd9POW1G7SXwWkGgwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFInQD4nI33ALq6sz8TVdmPhpVmVTMB8GA1UdIwQY MBaAFJc77DOuc4yYlYgZxsE7szXuNKtMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQt YzQyZjlhYmYxNDc3LzEvaWRBUGljamZjQXVycXpQeE5WMlktR2xXWlZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQtYzQyZjlhYmYxNDc3 LzEvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQBAjvIAwQC Bbc8AwQBVdEEAwQBWNqUAwQCk07gMA0EAgACMAcDBQMqCayAMA0GCSqGSIb3DQEB CwUAA4IBAQAAKlTKDIkEvh1kco1VDX2r9hPV6Ugy1gEztt/CQfDwzVValAl/YyJ/ kuZhbDGbuQXpMt6S8pplWvfg1NOiz0/MvlqxVb7vUZRsyfMBTL5Z4rjO6FnxW6XS HYed61pz+6Pv28YsGsqIsfNmHQPTc+h0Wac6/DCIIuhIjeqrzO09rUQ0+ktro5lG 1geEiWmDCa5Dyp9o7wLPB2fY2UHfq+6HiU6i1x66+NunAfqUmoK3sRvTphFugs1H rzQWYpj/f+rfurGcNEWIm4OHob00LfUwiTeGUTw+qmdRYrsDLSea1KBYfiRy2M7m pM3AKDt+eiwCy1gDN/kuYuJliNTpB0Ys -----END CERTIFICATE-----Generated at Mon Jan 19 20:57:05 2026 by rpki-client