This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/zMhciCUgU6J6shiNhaiwocMfw14.roa File: zMhciCUgU6J6shiNhaiwocMfw14.roa (raw, json) Hash identifier: c8SQXIzHCbyAhdC6MEvd2MwYwyUckczcTmVUE35TvUQ= Subject key identifier: CC:C8:5C:88:25:20:53:A2:7A:B2:18:8D:85:A8:B0:A1:C3:1F:C3:5E Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Certificate serial: 019B7E384D66FD39CA4C659FF91ED61537C8 Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/zMhciCUgU6J6shiNhaiwocMfw14.roa Signing time: Fri 02 Jan 2026 10:19:37 +0000 ROA not before: Fri 02 Jan 2026 10:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57497 IP address blocks: 5.63.8.0/24 maxlen: 24 5.63.9.0/24 maxlen: 24 5.63.10.0/23 maxlen: 23 5.63.10.0/24 maxlen: 24 5.63.11.0/24 maxlen: 24 5.63.12.0/24 maxlen: 24 5.63.13.0/24 maxlen: 24 5.63.14.0/23 maxlen: 23 5.63.14.0/24 maxlen: 24 45.135.240.0/24 maxlen: 24 45.135.241.0/24 maxlen: 24 45.135.242.0/24 maxlen: 24 45.135.243.0/24 maxlen: 24 158.58.184.0/22 maxlen: 22 158.58.184.0/24 maxlen: 24 158.58.185.0/24 maxlen: 24 158.58.186.0/24 maxlen: 24 158.58.187.0/24 maxlen: 24 158.58.188.0/23 maxlen: 23 158.58.188.0/24 maxlen: 24 158.58.189.0/24 maxlen: 24 158.58.190.0/23 maxlen: 23 158.58.190.0/24 maxlen: 24 158.58.191.0/24 maxlen: 24 185.2.12.0/22 maxlen: 22 185.2.12.0/23 maxlen: 24 185.2.14.0/23 maxlen: 24 185.179.90.0/24 maxlen: 24 185.229.204.0/24 maxlen: 24 194.62.17.0/24 maxlen: 24 195.226.223.0/24 maxlen: 24 2a01:4ac0::/48 maxlen: 48 2a01:4ac0:1::/48 maxlen: 48 2a01:4ac0:2::/48 maxlen: 48 2a01:4ac0:3::/48 maxlen: 48 2a01:4ac0:4::/48 maxlen: 48 2a01:4ac0:5::/48 maxlen: 48 2a01:4ac0:6::/48 maxlen: 48 2a01:4ac0:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:4d:66:fd:39:ca:4c:65:9f:f9:1e:d6:15:37:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Validity Not Before: Jan 2 10:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccc85c88252053a27ab2188d85a8b0a1c31fc35e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f8:b6:ad:41:98:42:d9:35:a3:a6:5b:04:2d: 30:66:93:bc:1f:f5:13:ad:16:9e:4d:ce:1f:59:5b: e8:a8:1a:bd:dd:90:70:8a:2b:e4:03:c9:17:0f:c0: d8:e2:5e:62:ac:1c:c9:39:6a:0c:47:3c:c9:ce:a9: 42:1f:07:83:01:54:d9:ce:89:64:38:81:8f:cd:82: d8:a0:03:17:60:58:9b:3c:c3:99:c7:94:c5:4f:c1: 24:f6:8b:12:68:17:01:f7:57:ba:3c:c6:23:e6:77: 52:cf:a3:39:85:91:a0:37:8d:91:4a:84:3d:e9:52: 0a:ee:8b:ad:1c:af:3e:52:50:f2:ca:56:ed:9e:e0: 82:a4:2c:59:02:36:3a:be:89:c4:f6:b7:4f:bc:55: cf:fc:9b:34:60:b0:cb:ba:dd:b6:51:1d:3a:18:ae: 9b:40:a7:8b:d4:71:ac:55:7b:e5:b4:5b:6c:5e:1a: 85:dd:fe:7a:6b:77:6e:b3:67:47:b8:13:2d:c3:3e: c2:dc:43:76:31:f0:6e:93:e8:4e:b2:3b:bb:21:5e: 76:2c:3e:6d:33:53:a1:4f:37:5d:f4:33:47:15:12: e1:66:93:97:4a:1a:de:88:af:85:e4:a9:16:58:cf: 4c:39:83:96:19:a9:dd:0c:9c:23:b4:13:2d:a4:b1: 16:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C8:5C:88:25:20:53:A2:7A:B2:18:8D:85:A8:B0:A1:C3:1F:C3:5E X509v3 Authority Key Identifier: keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/zMhciCUgU6J6shiNhaiwocMfw14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.63.8.0/21 45.135.240.0/22 158.58.184.0/21 185.2.12.0/22 185.179.90.0/24 185.229.204.0/24 194.62.17.0/24 195.226.223.0/24 IPv6: 2a01:4ac0::/45 Signature Algorithm: sha256WithRSAEncryption 56:16:7f:62:8d:db:c1:cb:ca:6e:eb:50:72:ab:e9:8a:9d:d4: 9d:2b:09:ab:53:e1:90:e8:59:34:ca:7c:54:7b:9b:ac:5e:5e: 55:71:79:65:31:cd:2e:ae:8a:aa:f9:78:c5:75:71:75:50:23: a5:a5:ac:30:b2:d5:cc:5c:bc:10:2b:aa:1c:f8:1c:b4:a4:51: 05:03:26:65:a5:bc:fc:a0:3d:3d:ae:fc:1f:49:92:32:38:47: 27:79:e1:2d:9e:c7:06:b9:8e:f8:a8:e7:8d:de:7e:50:5c:de: 90:4b:ee:46:ad:65:0e:6d:90:7a:c5:74:46:7f:53:c4:e3:65: c3:a9:cc:dd:f7:e5:1e:fd:32:a5:d2:4c:98:f8:e5:ee:8e:81: 1d:9e:73:2c:ea:05:35:70:97:01:73:bc:1d:ff:5a:c2:b2:71: 94:52:77:8b:78:dd:2e:02:27:c0:c2:26:6e:40:ab:c8:68:bb: af:0f:e7:b4:8a:37:83:c3:6f:d7:6a:79:ad:d7:4a:ac:c7:10: 89:7f:71:8e:50:aa:01:61:b2:a8:65:f5:7b:f1:ec:e8:69:d0: 66:dd:30:83:e9:21:1e:0a:28:80:1d:a9:d6:c3:44:a4:42:c2: 33:20:20:b2:08:6e:bf:b5:5c:c2:a9:f5:32:56:fa:ac:53:ba: dc:d4:14:8c -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISAZt+OE1m/TnKTGWf+R7WFTfIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj YTQzYzUwHhcNMjYwMTAyMTAxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2M4NWM4ODI1MjA1M2EyN2FiMjE4OGQ4NWE4YjBhMWMzMWZjMzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/i2rUGYQtk1o6ZbBC0wZpO8H/UT rRaeTc4fWVvoqBq93ZBwiivkA8kXD8DY4l5irBzJOWoMRzzJzqlCHweDAVTZzolk OIGPzYLYoAMXYFibPMOZx5TFT8Ek9osSaBcB91e6PMYj5ndSz6M5hZGgN42RSoQ9 6VIK7outHK8+UlDyylbtnuCCpCxZAjY6vonE9rdPvFXP/Js0YLDLut22UR06GK6b QKeL1HGsVXvltFtsXhqF3f56a3dus2dHuBMtwz7C3EN2MfBuk+hOsju7IV52LD5t M1OhTzdd9DNHFRLhZpOXShreiK+F5KkWWM9MOYOWGandDJwjtBMtpLEWvQIDAQAB o4ICRDCCAkAwHQYDVR0OBBYEFMzIXIglIFOierIYjYWosKHDH8NeMB8GA1UdIwQY MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt YWNmYzNkMmMyNTIyLzEvek1oY2lDVWdVNko2c2hpTmhhaXdvY01mdzE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUtYWNmYzNkMmMyNTIy LzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTA2BAIAATAwAwQDBT8IAwQC LYfwAwQDnjq4AwQCuQIMAwQAubNaAwQAueXMAwQAwj4RAwQAw+LfMA8EAgACMAkD BwMqAUrAAAAwDQYJKoZIhvcNAQELBQADggEBAFYWf2KN28HLym7rUHKr6Yqd1J0r CatT4ZDoWTTKfFR7m6xeXlVxeWUxzS6uiqr5eMV1cXVQI6WlrDCy1cxcvBArqhz4 HLSkUQUDJmWlvPygPT2u/B9JkjI4Ryd54S2exwa5jvio543eflBc3pBL7katZQ5t kHrFdEZ/U8TjZcOpzN335R79MqXSTJj45e6OgR2ecyzqBTVwlwFzvB3/WsKycZRS d4t43S4CJ8DCJm5Aq8hou68P57SKN4PDb9dqea3XSqzHEIl/cY5QqgFhsqhl9Xvx 7Ohp0GbdMIPpIR4KKIAdqdbDRKRCwjMgILIIbr+1XMKp9TJW+qxTutzUFIw= -----END CERTIFICATE-----Generated at Mon Jan 26 10:52:56 2026 by rpki-client