This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/kCoYCOa0aSPUd5aTKPlExBlfEhw.roa File: kCoYCOa0aSPUd5aTKPlExBlfEhw.roa (raw, json) Hash identifier: zI+RjbSOrq8P/7v/EkD36oGJO3KdfzSf7MtA8j+FrxI= Subject key identifier: 90:2A:18:08:E6:B4:69:23:D4:77:96:93:28:F9:44:C4:19:5F:12:1C Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39 Certificate serial: 019B7B3679CA0BD88E8E6C3BA6F75D52BBAC Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/kCoYCOa0aSPUd5aTKPlExBlfEhw.roa Signing time: Thu 01 Jan 2026 20:18:46 +0000 ROA not before: Thu 01 Jan 2026 20:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22773 IP address blocks: 5.183.88.0/22 maxlen: 22 77.247.116.0/22 maxlen: 22 113.30.192.0/21 maxlen: 21 185.5.144.0/24 maxlen: 24 185.5.147.0/24 maxlen: 24 185.140.173.0/24 maxlen: 24 193.111.40.0/24 maxlen: 24 194.26.202.0/24 maxlen: 24 195.64.115.0/24 maxlen: 24 195.64.119.0/24 maxlen: 24 195.64.122.0/24 maxlen: 24 195.64.124.0/24 maxlen: 24 195.64.125.0/24 maxlen: 24 195.96.134.0/24 maxlen: 24 216.247.232.0/22 maxlen: 22 2a10:d505::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:79:ca:0b:d8:8e:8e:6c:3b:a6:f7:5d:52:bb:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39 Validity Not Before: Jan 1 20:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=902a1808e6b46923d477969328f944c4195f121c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4b:6e:2a:e5:1a:77:27:72:73:71:ce:33:f3: 81:57:0f:8b:1e:91:60:01:d8:2b:73:9b:1e:35:b7: 8b:fb:1c:88:6d:78:66:51:ab:fa:cf:08:93:c9:cd: 5d:ba:e9:eb:b4:9e:13:15:01:71:eb:18:d6:b7:b5: 13:bc:c7:e0:c6:79:27:71:3b:4d:9e:c5:d0:d3:8c: 8a:0b:f3:17:56:d0:e7:7b:fe:8f:6d:5b:cd:72:ab: 65:73:50:5b:22:aa:f7:29:3a:0f:d1:80:60:ee:dc: d2:ed:bd:84:c5:df:9c:94:53:bb:15:28:f1:8c:a7: b1:bf:2b:5d:21:11:57:10:56:44:0b:4c:9c:d7:ac: 32:87:70:3c:4b:ff:0d:58:af:69:0e:77:03:7f:58: cd:66:de:2c:bc:4f:32:53:ce:00:a2:37:aa:51:be: ec:b9:60:82:0f:6d:61:a5:42:29:d7:5d:37:89:2b: b6:a0:61:01:30:7b:8c:c4:52:4f:6b:25:46:2e:97: eb:ad:f4:43:d6:88:80:27:e9:ac:35:6f:06:65:53: 6c:31:70:f5:c2:46:c6:02:2f:41:c9:35:f5:07:63: 45:2f:62:a9:ec:50:f0:5f:c4:50:9a:0f:eb:66:fd: 4a:96:11:79:2c:98:b0:f9:67:eb:ea:6c:24:1e:e6: f1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:2A:18:08:E6:B4:69:23:D4:77:96:93:28:F9:44:C4:19:5F:12:1C X509v3 Authority Key Identifier: keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/kCoYCOa0aSPUd5aTKPlExBlfEhw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.88.0/22 77.247.116.0/22 113.30.192.0/21 185.5.144.0/24 185.5.147.0/24 185.140.173.0/24 193.111.40.0/24 194.26.202.0/24 195.64.115.0/24 195.64.119.0/24 195.64.122.0/24 195.64.124.0/23 195.96.134.0/24 216.247.232.0/22 IPv6: 2a10:d505::/32 Signature Algorithm: sha256WithRSAEncryption 7b:80:c6:b5:c1:98:2f:35:37:6b:68:17:01:4c:5e:79:2f:56: b6:93:20:3a:49:38:10:0d:ae:5a:22:03:db:90:2c:c4:53:71: 30:0f:ab:ff:bc:1c:85:eb:5e:ce:c1:c4:a3:d7:de:aa:cd:33: bb:d7:3c:19:36:79:91:d2:f4:1e:5c:cf:50:65:85:1a:02:25: 55:28:60:77:95:77:4c:06:b0:b5:fe:f0:19:51:b4:71:26:1f: 4f:65:3e:7a:7c:89:fb:f4:6b:29:e3:14:ff:03:63:28:be:62: 83:21:b4:f8:24:ba:20:d7:e7:83:48:96:ef:ae:af:96:6c:93: 12:d6:8e:43:06:8b:2f:d9:0c:de:d0:34:6a:ee:17:3a:99:05: 7b:cf:8e:aa:fc:16:ac:19:49:1c:f6:74:56:18:a8:3a:35:43: a0:59:74:1b:8e:84:44:e5:58:53:a2:4a:d3:3f:5b:d8:96:2a: 0a:65:67:b9:91:93:9a:ca:07:98:a2:7d:4a:ce:5b:e5:bf:42: 99:62:92:e9:a3:8b:31:80:27:c9:30:ed:5d:39:65:5c:81:0d: a0:1b:4f:02:9f:2c:a1:c6:23:47:eb:a4:3d:7c:a0:23:94:37: c8:6a:40:91:f7:c8:27:32:ad:31:03:b5:72:2f:26:f0:aa:23: 2b:b4:a3:c9 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgISAZt7NnnKC9iOjmw7pvddUrusMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx NGRiMzkwHhcNMjYwMTAxMjAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDJhMTgwOGU2YjQ2OTIzZDQ3Nzk2OTMyOGY5NDRjNDE5NWYxMjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEtuKuUadydyc3HOM/OBVw+LHpFg Adgrc5seNbeL+xyIbXhmUav6zwiTyc1duunrtJ4TFQFx6xjWt7UTvMfgxnkncTtN nsXQ04yKC/MXVtDne/6PbVvNcqtlc1BbIqr3KToP0YBg7tzS7b2Exd+clFO7FSjx jKexvytdIRFXEFZEC0yc16wyh3A8S/8NWK9pDncDf1jNZt4svE8yU84AojeqUb7s uWCCD21hpUIp1103iSu2oGEBMHuMxFJPayVGLpfrrfRD1oiAJ+msNW8GZVNsMXD1 wkbGAi9ByTX1B2NFL2Kp7FDwX8RQmg/rZv1KlhF5LJiw+Wfr6mwkHubxNwIDAQAB o4ICZjCCAmIwHQYDVR0OBBYEFJAqGAjmtGkj1HeWkyj5RMQZXxIcMB8GA1UdIwQY MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt ZWQzMGI5YmIxMmQ1LzEva0NvWUNPYTBhU1BVZDVhVEtQbEV4QmxmRWh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1 LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEHAQH/BG0wazBaBAIAATBUAwQCBbdYAwQC Tfd0AwQDcR7AAwQAuQWQAwQAuQWTAwQAuYytAwQAwW8oAwQAwhrKAwQAw0BzAwQA w0B3AwQAw0B6AwQBw0B8AwQAw2CGAwQC2PfoMA0EAgACMAcDBQAqENUFMA0GCSqG SIb3DQEBCwUAA4IBAQB7gMa1wZgvNTdraBcBTF55L1a2kyA6STgQDa5aIgPbkCzE U3EwD6v/vByF617OwcSj196qzTO71zwZNnmR0vQeXM9QZYUaAiVVKGB3lXdMBrC1 /vAZUbRxJh9PZT56fIn79Gsp4xT/A2MovmKDIbT4JLog1+eDSJbvrq+WbJMS1o5D Bosv2Qze0DRq7hc6mQV7z46q/BasGUkc9nRWGKg6NUOgWXQbjoRE5VhTokrTP1vY lioKZWe5kZOaygeYon1Kzlvlv0KZYpLpo4sxgCfJMO1dOWVcgQ2gG08CnyyhxiNH 66Q9fKAjlDfIakCR98gnMq0xA7VyLybwqiMrtKPJ -----END CERTIFICATE-----Generated at Sun Jan 25 09:18:47 2026 by rpki-client