This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/rZHZ_k5hgir55AATjETSpEWsH80.roa File: rZHZ_k5hgir55AATjETSpEWsH80.roa (raw, json) Hash identifier: 8tYYoFYaWJCj2Pb7rbLdOHuTB+Gfcdd0okrBmCgEOAE= Subject key identifier: AD:91:D9:FE:4E:61:82:2A:F9:E4:00:13:8C:44:D2:A4:45:AC:1F:CD Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f Certificate serial: 019B77C6AB78E05CDCA9D78F50DEC1E222FB Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/rZHZ_k5hgir55AATjETSpEWsH80.roa Signing time: Thu 01 Jan 2026 04:17:47 +0000 ROA not before: Thu 01 Jan 2026 04:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59630 IP address blocks: 156.114.0.0/20 maxlen: 20 156.114.5.0/24 maxlen: 24 156.114.10.0/24 maxlen: 24 156.114.12.0/24 maxlen: 24 156.114.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ab:78:e0:5c:dc:a9:d7:8f:50:de:c1:e2:22:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f Validity Not Before: Jan 1 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad91d9fe4e61822af9e400138c44d2a445ac1fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c7:d3:5e:18:58:42:60:68:99:40:76:bf:d1: 48:27:49:1e:77:de:83:16:97:30:68:96:e5:a3:40: e3:2a:fb:e4:fe:63:9e:f3:ba:66:11:5e:42:a1:4c: 47:83:cd:4f:66:80:1a:bf:e0:b8:c1:c2:88:44:37: c8:d7:6e:ce:b7:ad:d4:2c:f4:f1:72:3e:df:d3:f4: 70:45:65:e5:c8:b4:75:fb:67:af:85:32:08:94:49: cb:da:f5:53:d7:dc:98:6b:39:4d:85:6c:af:be:37: 4d:be:81:b4:d0:e8:62:4c:3c:46:4f:a3:2e:4f:19: cb:a2:c0:a1:fd:58:2a:be:bc:6e:e6:0f:20:85:54: a2:1d:11:92:ed:94:da:30:fe:5c:fb:29:3b:05:be: 9e:3c:8f:93:e5:45:ea:b9:ea:76:6b:2c:f0:48:29: 43:f6:31:5a:89:de:8d:0b:19:0b:0d:22:2b:89:84: c5:f9:a9:fe:12:e3:ba:4f:d3:90:5f:73:21:ae:8b: e9:99:9e:3b:84:ea:37:1d:45:64:a2:b7:7d:fe:18: c1:db:40:b8:d8:14:71:cd:8f:84:19:f9:6c:42:58: 61:39:40:a6:09:1e:73:f6:6c:1c:58:b6:78:d9:f0: ff:91:96:39:45:ba:b5:43:58:49:9c:84:31:1b:73: 75:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:91:D9:FE:4E:61:82:2A:F9:E4:00:13:8C:44:D2:A4:45:AC:1F:CD X509v3 Authority Key Identifier: keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/rZHZ_k5hgir55AATjETSpEWsH80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 156.114.0.0/20 Signature Algorithm: sha256WithRSAEncryption 79:3d:7a:da:fa:cc:48:b8:fa:68:f1:93:03:a5:f1:a6:25:91: d7:c7:80:38:28:6d:d3:b2:8f:72:36:dd:9b:e7:c7:63:12:44: e6:ba:90:22:66:26:34:91:0c:64:6e:ff:7d:5b:3c:95:7f:b6: 73:59:88:f2:c9:f9:e6:69:d3:24:b1:8d:6c:44:0d:ed:a8:02: 9a:c2:94:35:b3:d6:c2:0b:18:bd:66:a8:33:11:be:ee:6a:e3: f6:9c:60:28:c6:86:85:6e:c5:ee:51:3e:f8:cf:f5:48:4d:78: c8:57:94:74:9c:1d:35:d7:e0:bb:fb:8b:a8:84:52:82:4c:0c: ff:43:dd:01:81:a7:75:b0:1e:7b:aa:c8:c9:dc:8e:9b:ae:60: 0f:91:2e:1e:18:dc:44:7b:df:89:e1:13:a3:88:8e:74:f5:e6: 53:41:c7:fc:22:38:23:ef:3d:04:c5:fe:71:e6:78:88:a9:80: 18:28:96:bf:c5:fe:c6:92:20:f8:4c:69:49:a7:77:dd:19:82: 56:01:72:5c:24:e2:15:01:11:b2:37:99:d2:67:d7:46:82:ee: 45:b2:75:3c:ac:1c:8d:46:ac:88:50:0d:6c:9a:4d:cb:97:c3: e9:50:ea:47:b0:2e:0f:b7:04:f8:dc:2a:1d:23:bf:ca:c5:33: a5:57:4f:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xqt44FzcqdePUN7B4iL7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZWNlNDFjYmMyYzMwNjI2ZWYyYTI4ZDE4MzlmMmQ2YzQ3 NTdmM2YwHhcNMjYwMTAxMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDkxZDlmZTRlNjE4MjJhZjllNDAwMTM4YzQ0ZDJhNDQ1YWMxZmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcfTXhhYQmBomUB2v9FIJ0ked96D FpcwaJblo0DjKvvk/mOe87pmEV5CoUxHg81PZoAav+C4wcKIRDfI127Ot63ULPTx cj7f0/RwRWXlyLR1+2evhTIIlEnL2vVT19yYazlNhWyvvjdNvoG00OhiTDxGT6Mu TxnLosCh/Vgqvrxu5g8ghVSiHRGS7ZTaMP5c+yk7Bb6ePI+T5UXquep2ayzwSClD 9jFaid6NCxkLDSIriYTF+an+EuO6T9OQX3MhrovpmZ47hOo3HUVkord9/hjB20C4 2BRxzY+EGflsQlhhOUCmCR5z9mwcWLZ42fD/kZY5Rbq1Q1hJnIQxG3N1rwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK2R2f5OYYIq+eQAE4xE0qRFrB/NMB8GA1UdIwQY MBaAFMrs5By8LDBibvKijRg58tbEdX8/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MzBjYmUtY2UwMS00NjRkLTgyZWIt ZDg1MWU0MGQ1N2JmLzEvclpIWl9rNWhnaXI1NUFBVGpFVFNwRVdzSDgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82MzBjYmUtY2UwMS00NjRkLTgyZWItZDg1MWU0MGQ1N2Jm LzEveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnHIAMA0G CSqGSIb3DQEBCwUAA4IBAQB5PXra+sxIuPpo8ZMDpfGmJZHXx4A4KG3Tso9yNt2b 58djEkTmupAiZiY0kQxkbv99WzyVf7ZzWYjyyfnmadMksY1sRA3tqAKawpQ1s9bC Cxi9ZqgzEb7uauP2nGAoxoaFbsXuUT74z/VITXjIV5R0nB011+C7+4uohFKCTAz/ Q90Bgad1sB57qsjJ3I6brmAPkS4eGNxEe9+J4ROjiI509eZTQcf8Ijgj7z0Exf5x 5niIqYAYKJa/xf7GkiD4TGlJp3fdGYJWAXJcJOIVARGyN5nSZ9dGgu5FsnU8rByN RqyIUA1smk3Ll8PpUOpHsC4PtwT43CodI7/KxTOlV0/1 -----END CERTIFICATE-----Generated at Sun Jan 25 22:28:55 2026 by rpki-client