This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/9SzKR2jRUVwOaueZVAhbWUN2hKk.roa File: 9SzKR2jRUVwOaueZVAhbWUN2hKk.roa (raw, json) Hash identifier: FVohvzzEsQ8ZWQ3bVSw2whz2W6Fbc2vk/r+zxXJ8JGo= Subject key identifier: F5:2C:CA:47:68:D1:51:5C:0E:6A:E7:99:54:08:5B:59:43:76:84:A9 Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b Certificate serial: 019B7C115CAD5B99C7A1B0FD0E053EAE5037 Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/9SzKR2jRUVwOaueZVAhbWUN2hKk.roa Signing time: Fri 02 Jan 2026 00:17:51 +0000 ROA not before: Fri 02 Jan 2026 00:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205888 IP address blocks: 5.40.0.0/24 maxlen: 24 5.40.122.0/24 maxlen: 24 5.40.133.0/24 maxlen: 24 5.40.155.0/24 maxlen: 24 5.40.157.0/24 maxlen: 24 5.40.168.0/24 maxlen: 24 5.40.225.0/24 maxlen: 24 62.175.210.0/24 maxlen: 24 89.140.57.0/24 maxlen: 24 95.39.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:5c:ad:5b:99:c7:a1:b0:fd:0e:05:3e:ae:50:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b Validity Not Before: Jan 2 00:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f52cca4768d1515c0e6ae79954085b59437684a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c2:90:91:06:0c:15:49:c1:f4:e6:a0:b7:dd: 75:ca:8c:73:b8:3b:96:5a:74:43:da:67:da:8d:58: ab:84:ae:a0:f4:63:ad:bc:a9:be:fb:7f:cd:cf:d9: 54:8b:da:c0:2e:95:0a:93:95:bb:99:34:e9:72:5a: 56:9a:6b:d9:b2:48:d2:20:7d:41:4a:c7:2a:c8:bf: f8:f2:84:5d:f4:e1:75:c3:46:1c:6d:d7:94:fb:ac: b1:78:2d:63:d1:d9:3e:dd:dd:fe:ea:cc:b0:f5:40: 6c:74:87:24:c0:94:39:5a:ba:48:c2:bb:94:85:1c: ae:84:1e:a3:34:26:0f:8e:07:10:fc:4c:06:f0:11: 7f:a9:f7:12:20:71:d2:be:88:25:14:0f:2c:ec:81: 52:4a:e8:a8:c6:b2:03:aa:85:7f:3e:8e:72:ca:2e: c8:6b:92:e0:cd:f6:ab:2d:8a:75:ac:08:b8:39:a6: e6:be:53:24:e1:94:8d:e7:74:c2:eb:7d:3c:4f:8b: 02:c1:4b:e1:15:40:9b:fc:d1:7e:11:9c:32:99:59: 8a:4d:d2:83:5a:33:ce:59:2d:9c:07:ac:1b:e8:7e: 24:8f:58:28:c7:1d:79:4a:7d:4e:9c:32:62:13:ff: c5:36:5e:4c:0b:ea:e1:2c:b3:24:46:99:c2:57:74: e8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2C:CA:47:68:D1:51:5C:0E:6A:E7:99:54:08:5B:59:43:76:84:A9 X509v3 Authority Key Identifier: keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/9SzKR2jRUVwOaueZVAhbWUN2hKk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.40.0.0/24 5.40.122.0/24 5.40.133.0/24 5.40.155.0/24 5.40.157.0/24 5.40.168.0/24 5.40.225.0/24 62.175.210.0/24 89.140.57.0/24 95.39.64.0/24 Signature Algorithm: sha256WithRSAEncryption 22:5b:f4:7e:68:ad:1c:99:07:15:32:f3:61:da:09:44:90:0a: 5b:d6:98:0e:43:d9:b3:f1:60:0f:a8:bb:e2:6d:5f:e6:46:3f: c7:d4:41:3b:c7:4b:1e:18:0b:01:28:de:eb:95:26:c8:1c:b1: 22:07:36:2f:3a:5d:d3:e7:43:07:0e:84:cb:9b:1d:fb:07:9b: da:8f:82:a3:62:50:ce:e1:3b:c6:28:f5:9f:88:4a:bd:55:c9: 8b:30:6c:8b:6a:d2:aa:bb:38:23:df:7b:d0:0d:d5:02:f9:f8: ac:ff:b6:41:6b:57:fa:3f:1d:4c:44:aa:a6:84:02:70:4a:af: 9d:e0:90:d0:54:a0:98:42:87:4f:2f:fe:cd:a3:24:c6:e4:1e: f2:36:04:a6:82:6f:68:48:5d:84:62:03:bd:6d:2e:86:80:de: cc:9b:75:1c:fd:c6:ab:a3:74:d1:d7:33:e0:b1:69:1f:24:88: fc:23:a8:a6:e1:d7:04:95:6a:8a:35:6f:81:e9:2a:e5:01:bd: 00:b8:4c:bc:5a:99:ea:af:2a:7d:ea:6c:b9:67:7d:1f:88:50: 6b:6e:8e:8e:80:18:f7:6d:b6:12:d4:ba:46:76:82:64:c4:5e: 60:ba:ab:56:d4:0b:08:57:e3:1b:76:54:75:d1:e6:ac:2f:4b: f1:6b:2e:54 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt8EVytW5nHobD9DgU+rlA3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MzRmMTY4NjEwMjg3NmM2MjE2YmNlYTI4YTVlNTAyZWMw ZDdiNmIwHhcNMjYwMTAyMDAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTJjY2E0NzY4ZDE1MTVjMGU2YWU3OTk1NDA4NWI1OTQzNzY4NGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cKQkQYMFUnB9Oagt911yoxzuDuW WnRD2mfajVirhK6g9GOtvKm++3/Nz9lUi9rALpUKk5W7mTTpclpWmmvZskjSIH1B SscqyL/48oRd9OF1w0YcbdeU+6yxeC1j0dk+3d3+6syw9UBsdIckwJQ5WrpIwruU hRyuhB6jNCYPjgcQ/EwG8BF/qfcSIHHSvoglFA8s7IFSSuioxrIDqoV/Po5yyi7I a5LgzfarLYp1rAi4OabmvlMk4ZSN53TC6308T4sCwUvhFUCb/NF+EZwymVmKTdKD WjPOWS2cB6wb6H4kj1goxx15Sn1OnDJiE//FNl5MC+rhLLMkRpnCV3ToAwIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFPUsykdo0VFcDmrnmVQIW1lDdoSpMB8GA1UdIwQY MBaAFNQ08WhhAodsYha86iil5QLsDXtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2Ut NTcxMmQ5NWFlNjM4LzEvOVN6S1IyalJVVndPYXVlWlZBaGJXVU4yaEtrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2UtNTcxMmQ5NWFlNjM4 LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQABSgAAwQA BSh6AwQABSiFAwQABSibAwQABSidAwQABSioAwQABSjhAwQAPq/SAwQAWYw5AwQA XydAMA0GCSqGSIb3DQEBCwUAA4IBAQAiW/R+aK0cmQcVMvNh2glEkApb1pgOQ9mz 8WAPqLvibV/mRj/H1EE7x0seGAsBKN7rlSbIHLEiBzYvOl3T50MHDoTLmx37B5va j4KjYlDO4TvGKPWfiEq9VcmLMGyLatKquzgj33vQDdUC+fis/7ZBa1f6Px1MRKqm hAJwSq+d4JDQVKCYQodPL/7NoyTG5B7yNgSmgm9oSF2EYgO9bS6GgN7Mm3Uc/car o3TR1zPgsWkfJIj8I6im4dcElWqKNW+B6SrlAb0AuEy8Wpnqryp96my5Z30fiFBr bo6OgBj3bbYS1LpGdoJkxF5guqtW1AsIV+MbdlR10easL0vxay5U -----END CERTIFICATE-----Generated at Mon Jan 26 20:42:40 2026 by rpki-client