This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/cXMAXXw3hT5pEyxfkk8yBzh6-q0.roa File: cXMAXXw3hT5pEyxfkk8yBzh6-q0.roa (raw, json) Hash identifier: kafroNNbYDnc2h6nBm4gxZIlVlKGznDzvdAVuH5RGlI= Subject key identifier: 71:73:00:5D:7C:37:85:3E:69:13:2C:5F:92:4F:32:07:38:7A:FA:AD Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84F1431CC890BD26D4EFB5ED709669 Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/cXMAXXw3hT5pEyxfkk8yBzh6-q0.roa Signing time: Fri 02 Jan 2026 16:22:57 +0000 ROA not before: Fri 02 Jan 2026 16:22:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401838 IP address blocks: 5.182.114.0/24 maxlen: 24 77.242.145.0/24 maxlen: 24 77.242.149.0/24 maxlen: 24 77.242.157.0/24 maxlen: 24 77.242.159.0/24 maxlen: 24 88.151.63.0/24 maxlen: 24 88.209.200.0/24 maxlen: 24 88.209.211.0/24 maxlen: 24 88.209.220.0/24 maxlen: 24 88.209.224.0/24 maxlen: 24 88.209.225.0/24 maxlen: 24 88.209.229.0/24 maxlen: 24 88.209.232.0/24 maxlen: 24 88.209.233.0/24 maxlen: 24 88.209.234.0/24 maxlen: 24 88.209.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:f1:43:1c:c8:90:bd:26:d4:ef:b5:ed:70:96:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7173005d7c37853e69132c5f924f3207387afaad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a1:41:8b:85:a6:44:c2:91:5c:19:df:51:3d: 9b:7f:91:2b:24:f5:f2:e4:8a:c1:2b:06:c1:a3:dc: 25:89:ad:00:17:a7:64:a5:42:bd:a6:25:23:4f:80: 0a:57:75:19:21:7d:50:7f:aa:73:ce:25:a9:c4:3f: 61:f3:94:cb:32:b4:cb:59:c8:fb:d0:ef:62:46:66: d7:a1:23:f8:55:08:b0:18:47:56:42:f8:46:71:2d: b1:d0:6a:33:65:56:ff:36:71:62:c6:8c:fc:c9:b5: ef:31:c7:7b:23:a4:4e:5f:69:1d:d1:38:15:36:2c: b2:4d:d4:75:f5:c9:d9:49:5c:21:77:b0:f3:fc:6a: 2b:b3:c5:64:20:05:37:91:99:b1:fd:26:45:3c:4a: 77:b3:af:2a:5c:be:c0:b2:68:4b:c4:36:6c:14:15: ae:35:2a:a7:71:81:b7:12:77:27:96:06:ba:16:4d: 72:08:f4:b0:28:a3:91:17:77:a0:56:83:e6:9d:34: be:b6:04:c5:7a:8c:4b:a6:07:3f:bd:5d:b2:1e:68: f0:71:3f:5a:1d:3f:ca:b3:67:01:41:cf:bf:45:b4: 97:6f:cc:b5:fa:9b:98:33:57:f0:5f:a1:ea:f0:78: b8:51:e7:87:e9:ec:9b:02:14:ac:b0:c2:8a:1d:e6: 13:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:73:00:5D:7C:37:85:3E:69:13:2C:5F:92:4F:32:07:38:7A:FA:AD X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/cXMAXXw3hT5pEyxfkk8yBzh6-q0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.114.0/24 77.242.145.0/24 77.242.149.0/24 77.242.157.0/24 77.242.159.0/24 88.151.63.0/24 88.209.200.0/24 88.209.211.0/24 88.209.220.0/24 88.209.224.0/23 88.209.229.0/24 88.209.232.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:8a:f1:12:f3:61:9d:f5:77:7c:52:93:a8:58:8d:1b:5b:9b: 3c:c4:c0:32:f8:b6:0e:f5:88:cb:32:aa:98:31:f7:ac:90:9e: 62:a4:d9:02:95:00:58:17:eb:ef:06:42:3b:05:49:c4:96:7c: 09:7b:0f:e4:b5:3d:ec:54:93:e1:a2:a5:d5:96:b9:cf:01:29: 20:fa:a1:1b:0d:0f:ad:e8:8f:57:ad:a6:68:ab:70:b0:d7:f6: c8:5a:ec:f6:af:71:f5:37:2e:98:9b:11:6e:82:0b:db:0c:fd: 29:27:34:8f:44:4b:0e:bb:c1:e5:e9:12:c9:80:a7:2d:8e:50: fb:50:2b:17:9c:6a:ae:be:fb:19:f0:2f:b3:5d:ae:1c:d3:10: fd:49:98:10:d6:1d:55:34:0d:39:bc:15:40:9e:48:b6:4f:43: 70:af:a0:7f:9b:6b:7d:cd:2d:20:6b:28:c4:ea:e8:f2:7b:52: 22:1b:28:67:ed:17:ab:03:8e:b3:94:41:20:99:bf:5c:e9:2d: e8:85:e2:90:90:fe:84:d2:db:dd:4c:a5:fe:77:7c:e5:8c:a3: ab:11:40:a4:60:fb:c1:b1:46:8f:aa:b8:85:d2:98:94:f5:31: bc:3d:96:ff:75:7e:30:b5:df:80:b2:51:5b:08:8a:31:6a:67: 5f:c5:b9:fb -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt/hPFDHMiQvSbU77XtcJZpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTczMDA1ZDdjMzc4NTNlNjkxMzJjNWY5MjRmMzIwNzM4N2FmYWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqFBi4WmRMKRXBnfUT2bf5ErJPXy 5IrBKwbBo9wlia0AF6dkpUK9piUjT4AKV3UZIX1Qf6pzziWpxD9h85TLMrTLWcj7 0O9iRmbXoSP4VQiwGEdWQvhGcS2x0GozZVb/NnFixoz8ybXvMcd7I6ROX2kd0TgV NiyyTdR19cnZSVwhd7Dz/Gors8VkIAU3kZmx/SZFPEp3s68qXL7AsmhLxDZsFBWu NSqncYG3Encnlga6Fk1yCPSwKKORF3egVoPmnTS+tgTFeoxLpgc/vV2yHmjwcT9a HT/Ks2cBQc+/RbSXb8y1+puYM1fwX6Hq8Hi4UeeH6eybAhSssMKKHeYTVwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHFzAF18N4U+aRMsX5JPMgc4evqtMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvY1hNQVhYdzNoVDVwRXl4ZmtrOHlCemg2LXEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQABbZyAwQA TfKRAwQATfKVAwQATfKdAwQATfKfAwQAWJc/AwQAWNHIAwQAWNHTAwQAWNHcAwQB WNHgAwQAWNHlAwQCWNHoMA0GCSqGSIb3DQEBCwUAA4IBAQCOivES82Gd9Xd8UpOo WI0bW5s8xMAy+LYO9YjLMqqYMfeskJ5ipNkClQBYF+vvBkI7BUnElnwJew/ktT3s VJPhoqXVlrnPASkg+qEbDQ+t6I9XraZoq3Cw1/bIWuz2r3H1Ny6YmxFuggvbDP0p JzSPREsOu8Hl6RLJgKctjlD7UCsXnGquvvsZ8C+zXa4c0xD9SZgQ1h1VNA05vBVA nki2T0Nwr6B/m2t9zS0gayjE6ujye1IiGyhn7RerA46zlEEgmb9c6S3oheKQkP6E 0tvdTKX+d3zljKOrEUCkYPvBsUaPqriF0piU9TG8PZb/dX4wtd+AslFbCIoxamdf xbn7 -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:59 2026 by rpki-client