This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/0Lyqz8yeuHKiSV6cZdm-poGCmv4.roa File: 0Lyqz8yeuHKiSV6cZdm-poGCmv4.roa (raw, json) Hash identifier: ihfrAi7s7Y2K9UhMNauXDC1EytsAoBOYF3SMIaVb5Zc= Subject key identifier: D0:BC:AA:CF:CC:9E:B8:72:A2:49:5E:9C:65:D9:BE:A6:81:82:9A:FE Certificate issuer: /CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5 Certificate serial: 019B7C7FF6356C5D621FE84B8CF68B66B354 Authority key identifier: 30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/0Lyqz8yeuHKiSV6cZdm-poGCmv4.roa Signing time: Fri 02 Jan 2026 02:18:39 +0000 ROA not before: Fri 02 Jan 2026 02:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58262 IP address blocks: 5.61.24.0/24 maxlen: 24 5.61.25.0/24 maxlen: 24 5.61.26.0/24 maxlen: 24 5.61.28.0/24 maxlen: 24 5.61.29.0/24 maxlen: 24 5.61.30.0/24 maxlen: 24 5.61.31.0/24 maxlen: 24 92.119.57.0/24 maxlen: 24 92.119.58.0/24 maxlen: 24 185.73.112.0/24 maxlen: 24 185.73.114.0/24 maxlen: 24 2a05:2d80::/48 maxlen: 48 2a05:2d80:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:f6:35:6c:5d:62:1f:e8:4b:8c:f6:8b:66:b3:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5 Validity Not Before: Jan 2 02:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0bcaacfcc9eb872a2495e9c65d9bea681829afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:12:dd:b6:eb:21:e7:58:1b:06:1d:c9:b7:54: de:eb:04:77:4d:ce:b0:70:0a:94:5c:31:eb:82:f9: 14:b6:cd:f0:71:a3:ba:b3:06:2f:13:67:d7:6e:b9: 1f:c8:93:5f:a1:87:82:6c:5d:53:00:82:49:94:2f: e9:91:91:6b:b8:0b:13:85:7f:3b:02:a3:2b:2b:35: 55:42:92:2e:75:d1:39:0a:73:69:fd:64:55:f7:2b: 53:4f:52:28:2b:1c:de:12:fa:70:9e:8f:33:6e:75: b7:28:a3:47:06:2d:ab:a7:76:c9:38:da:01:5f:a3: b1:8a:c9:db:30:53:54:ba:fa:9f:2c:9b:0a:26:55: 27:1e:08:fb:7c:e2:16:3b:26:ef:96:10:90:ed:09: 43:2b:6e:c6:c4:05:f5:6f:84:a5:80:17:c9:d8:15: 38:74:3f:ca:24:61:b2:b2:70:ca:1d:87:d5:b6:db: af:eb:0c:4b:0d:83:7f:fe:c9:11:83:41:da:e9:3a: e0:c0:5c:a9:0a:89:52:26:8a:9e:82:3d:07:56:5b: 6b:06:df:36:b3:5c:2f:17:11:f1:aa:04:46:3d:32: 14:a9:c3:f0:34:3f:88:18:a8:14:7e:0a:28:76:1e: 0d:c9:68:81:4c:26:04:86:dc:51:4c:6f:bb:49:42: 8c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BC:AA:CF:CC:9E:B8:72:A2:49:5E:9C:65:D9:BE:A6:81:82:9A:FE X509v3 Authority Key Identifier: keyid:30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/0Lyqz8yeuHKiSV6cZdm-poGCmv4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.61.24.0-5.61.26.255 5.61.28.0/22 92.119.57.0-92.119.58.255 185.73.112.0/24 185.73.114.0/24 IPv6: 2a05:2d80::/47 Signature Algorithm: sha256WithRSAEncryption 30:29:75:d5:24:83:cf:dd:1d:ca:10:73:93:95:77:7d:4f:c9: 2f:f6:86:f0:35:ec:e2:13:2f:fc:c4:0d:02:25:ef:4b:0d:dc: 08:a1:a5:45:d0:c6:42:96:f6:44:c8:ff:88:d8:b2:00:d1:f9: ca:8b:b6:0b:63:d1:c0:66:c9:ee:5b:ae:5e:fe:d1:5a:77:ab: 8f:4e:d5:5f:c6:d1:30:cc:6c:2d:41:8c:82:a2:85:63:63:6a: 4a:3b:b9:00:19:94:e6:79:b1:99:aa:d2:f7:cc:51:8b:40:05: 2d:41:3c:d6:cf:d2:da:0f:73:5d:31:60:f8:55:65:da:08:f5: 98:eb:c0:c4:c0:c1:2f:2d:8e:fb:a6:21:84:1e:55:5a:aa:2e: 56:2b:bc:69:12:95:7b:bc:3c:9a:36:2c:0e:30:69:69:cb:0f: 82:42:e3:97:bd:0c:4d:1e:62:0f:84:61:49:a9:8c:e3:d4:88: 56:90:a8:f5:9f:b8:a1:9e:48:1e:a8:71:a1:26:8a:91:4a:45: 93:cb:68:50:27:05:8a:00:d2:25:e6:e5:4e:1d:4d:86:e8:3d: f7:60:f0:2c:57:f4:82:9e:5b:51:19:66:e6:b9:9c:23:ff:f1: 2d:56:f9:b5:27:4e:7a:4d:62:17:c1:74:a6:4b:7c:55:9e:6d: 11:3b:87:ed -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt8f/Y1bF1iH+hLjPaLZrNUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNzJjZDVkZjczMjM5NTdhYjg3YzA3ZjVjZGQxNWM5MWVm ZmM4ZDUwHhcNMjYwMTAyMDIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGJjYWFjZmNjOWViODcyYTI0OTVlOWM2NWQ5YmVhNjgxODI5YWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRLdtush51gbBh3Jt1Te6wR3Tc6w cAqUXDHrgvkUts3wcaO6swYvE2fXbrkfyJNfoYeCbF1TAIJJlC/pkZFruAsThX87 AqMrKzVVQpIuddE5CnNp/WRV9ytTT1IoKxzeEvpwno8zbnW3KKNHBi2rp3bJONoB X6OxisnbMFNUuvqfLJsKJlUnHgj7fOIWOybvlhCQ7QlDK27GxAX1b4SlgBfJ2BU4 dD/KJGGysnDKHYfVttuv6wxLDYN//skRg0Ha6TrgwFypColSJoqegj0HVltrBt82 s1wvFxHxqgRGPTIUqcPwND+IGKgUfgoodh4NyWiBTCYEhtxRTG+7SUKMLQIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFNC8qs/MnrhyoklenGXZvqaBgpr+MB8GA1UdIwQY MBaAFDByzV33MjlXq4fAf1zdFcke/8jVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUhMTlhmY3lPVmVyaDhCX1hOMFZ5UjdfeU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zM2IxODYtZWY0Mi00NTE3LWIzMmYt NWU5NzQzNzc2MDBjLzEvMEx5cXo4eWV1SEtpU1Y2Y1pkbS1wb0dDbXY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8zM2IxODYtZWY0Mi00NTE3LWIzMmYtNWU5NzQzNzc2MDBj LzEvTUhMTlhmY3lPVmVyaDhCX1hOMFZ5UjdfeU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA0BAIAATAuMAwDBAMFPRgD BAAFPRoDBAIFPRwwDAMEAFx3OQMEAFx3OgMEALlJcAMEALlJcjAPBAIAAjAJAwcB KgUtgAAAMA0GCSqGSIb3DQEBCwUAA4IBAQAwKXXVJIPP3R3KEHOTlXd9T8kv9obw NeziEy/8xA0CJe9LDdwIoaVF0MZClvZEyP+I2LIA0fnKi7YLY9HAZsnuW65e/tFa d6uPTtVfxtEwzGwtQYyCooVjY2pKO7kAGZTmebGZqtL3zFGLQAUtQTzWz9LaD3Nd MWD4VWXaCPWY68DEwMEvLY77piGEHlVaqi5WK7xpEpV7vDyaNiwOMGlpyw+CQuOX vQxNHmIPhGFJqYzj1IhWkKj1n7ihnkgeqHGhJoqRSkWTy2hQJwWKANIl5uVOHU2G 6D33YPAsV/SCnltRGWbmuZwj//EtVvm1J056TWIXwXSmS3xVnm0RO4ft -----END CERTIFICATE-----Generated at Tue Jan 27 09:57:05 2026 by rpki-client