This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/C5Z-09c-UNKANhS9Y8455wChPaI.roa File: C5Z-09c-UNKANhS9Y8455wChPaI.roa (raw, json) Hash identifier: kwkm/1oRmvGWA+6dVE+pHfwpAhyhTdzdAoLVyPCKLrg= Subject key identifier: 0B:96:7E:D3:D7:3E:50:D2:80:36:14:BD:63:CE:39:E7:00:A1:3D:A2 Certificate issuer: /CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562 Certificate serial: 019B79ECE62D12467167AEE133FE58C966C3 Authority key identifier: 4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/C5Z-09c-UNKANhS9Y8455wChPaI.roa Signing time: Thu 01 Jan 2026 14:18:47 +0000 ROA not before: Thu 01 Jan 2026 14:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31510 IP address blocks: 83.175.64.0/18 maxlen: 32 83.175.86.0/24 maxlen: 24 83.175.126.0/24 maxlen: 24 156.67.200.0/21 maxlen: 32 156.67.200.0/24 maxlen: 24 185.72.72.0/22 maxlen: 32 212.56.160.0/19 maxlen: 32 2a02:6180::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:e6:2d:12:46:71:67:ae:e1:33:fe:58:c9:66:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562 Validity Not Before: Jan 1 14:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b967ed3d73e50d2803614bd63ce39e700a13da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ca:be:e9:20:5d:d0:7f:54:42:0d:3a:70:50: ce:a9:de:a4:a7:3b:9f:af:33:d7:83:b7:9f:68:7e: 1e:f5:bf:46:7e:35:4c:68:01:ab:f9:eb:ed:2e:19: 5c:fa:22:0f:66:6c:cd:f7:2b:16:26:52:72:26:cd: 47:00:9e:48:8a:bc:8f:a3:21:e8:98:57:7e:dc:25: 0e:b7:84:85:4b:69:43:16:97:6b:e8:31:ca:1c:ca: e9:79:e9:b5:38:b8:41:97:b2:0a:67:84:d0:47:70: 44:2a:d1:fb:85:4c:ab:43:58:2a:23:60:46:41:45: 50:cc:c3:b8:40:12:c9:d4:13:d0:2c:14:c0:30:1f: 19:b3:c5:9b:09:5c:59:0e:d3:14:b2:63:ed:83:ed: 8b:bd:6f:9d:48:45:5f:8b:1b:c2:4d:7b:44:3a:15: 49:52:a5:7d:88:03:77:83:af:b7:e1:26:f9:9b:62: 57:92:15:96:13:af:2b:44:99:fd:09:0f:f7:b9:7a: 8b:b1:04:98:ee:05:01:eb:f1:a2:a5:8f:ca:f8:10: c9:20:71:c0:28:54:15:c4:9a:0c:00:00:75:ae:ea: 8e:20:1f:7f:fc:de:d7:9c:41:1d:fe:e7:4c:a5:a5: bb:41:c4:e2:0f:f0:10:a8:b9:39:96:5c:0e:ad:c7: a4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:96:7E:D3:D7:3E:50:D2:80:36:14:BD:63:CE:39:E7:00:A1:3D:A2 X509v3 Authority Key Identifier: keyid:4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/C5Z-09c-UNKANhS9Y8455wChPaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.175.64.0/18 156.67.200.0/21 185.72.72.0/22 212.56.160.0/19 IPv6: 2a02:6180::/32 Signature Algorithm: sha256WithRSAEncryption 2a:30:0c:61:00:75:06:9e:d9:58:2f:ac:1b:aa:c8:cc:3b:9e: 28:a5:fa:ef:1d:fb:11:66:3b:cd:f1:a6:94:66:39:50:a6:4a: a1:42:0e:ff:e1:7d:f1:09:5b:32:2e:c5:ca:0f:35:53:5d:e2: c4:3f:29:4e:fd:b4:a4:df:34:b7:47:fb:9c:94:e9:ca:f6:75: b7:67:14:d5:51:da:2d:8f:39:de:82:6d:5f:89:1c:42:d5:83: 79:7d:80:51:69:5a:bb:b7:32:83:02:28:90:97:40:c6:cc:61: 8c:93:a8:3d:61:88:58:2c:43:46:cc:e3:aa:6c:5d:e2:b9:60: df:b8:e2:75:28:5f:0f:aa:b4:57:df:1a:5d:4b:e2:9b:c8:89: 0e:bf:a2:2b:a4:61:9a:74:ea:ae:0b:fa:78:9a:67:99:87:50: a0:60:9d:69:24:c7:7b:ab:28:45:3e:e2:56:0c:a3:90:6c:b6: ea:1f:c4:49:2e:15:ba:f2:74:cc:96:d9:cc:d7:47:36:3e:98: 60:ee:d6:27:9b:16:ad:7f:b8:50:7a:57:30:e6:fc:6f:70:67: 9d:a0:e4:a7:35:7d:ab:a6:a6:4b:fd:66:2c:d0:bd:02:49:ae: 38:6e:d6:54:c3:7e:38:27:d0:f1:48:83:5b:8d:38:1a:2d:d2: e7:4a:60:ee -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt57OYtEkZxZ67hM/5YyWbDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZTk4NjA2YmM5YTVkNDQwNzRmZjhjYmVkY2JkYmNmYzM1 ZjA1NjIwHhcNMjYwMTAxMTQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjk2N2VkM2Q3M2U1MGQyODAzNjE0YmQ2M2NlMzllNzAwYTEzZGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMq+6SBd0H9UQg06cFDOqd6kpzuf rzPXg7efaH4e9b9GfjVMaAGr+evtLhlc+iIPZmzN9ysWJlJyJs1HAJ5IiryPoyHo mFd+3CUOt4SFS2lDFpdr6DHKHMrpeem1OLhBl7IKZ4TQR3BEKtH7hUyrQ1gqI2BG QUVQzMO4QBLJ1BPQLBTAMB8Zs8WbCVxZDtMUsmPtg+2LvW+dSEVfixvCTXtEOhVJ UqV9iAN3g6+34Sb5m2JXkhWWE68rRJn9CQ/3uXqLsQSY7gUB6/GipY/K+BDJIHHA KFQVxJoMAAB1ruqOIB9//N7XnEEd/udMpaW7QcTiD/AQqLk5llwOrcek8QIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFAuWftPXPlDSgDYUvWPOOecAoT2iMB8GA1UdIwQY MBaAFEzphga8ml1EB0/4y+3L28/DXwViMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE9tR0JyeWFYVVFIVF9qTDdjdmJ6OE5mQldJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNzllZDUtZDI1My00MjU1LTkwMTct ODhkZjEyNWJhNjYzLzEvQzVaLTA5Yy1VTktBTmhTOVk4NDU1d0NoUGFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xNzllZDUtZDI1My00MjU1LTkwMTctODhkZjEyNWJhNjYz LzEvVE9tR0JyeWFYVVFIVF9qTDdjdmJ6OE5mQldJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQGU69AAwQD nEPIAwQCuUhIAwQF1DigMA0EAgACMAcDBQAqAmGAMA0GCSqGSIb3DQEBCwUAA4IB AQAqMAxhAHUGntlYL6wbqsjMO54opfrvHfsRZjvN8aaUZjlQpkqhQg7/4X3xCVsy LsXKDzVTXeLEPylO/bSk3zS3R/uclOnK9nW3ZxTVUdotjznegm1fiRxC1YN5fYBR aVq7tzKDAiiQl0DGzGGMk6g9YYhYLENGzOOqbF3iuWDfuOJ1KF8PqrRX3xpdS+Kb yIkOv6IrpGGadOquC/p4mmeZh1CgYJ1pJMd7qyhFPuJWDKOQbLbqH8RJLhW68nTM ltnM10c2Pphg7tYnmxatf7hQelcw5vxvcGedoOSnNX2rpqZL/WYs0L0CSa44btZU w344J9DxSINbjTgaLdLnSmDu -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:06 2026 by rpki-client