This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/pCX_Df1xcNspUxHlFIrg2C-Qt_g.roa File: pCX_Df1xcNspUxHlFIrg2C-Qt_g.roa (raw, json) Hash identifier: kTCwSVUPhhizrIBbzo+G2rorHsKLRW35XnzDp2Z2CKA= Subject key identifier: A4:25:FF:0D:FD:71:70:DB:29:53:11:E5:14:8A:E0:D8:2F:90:B7:F8 Certificate issuer: /CN=03e53d18f5f212ae0802a17ee5994c3331a43524 Certificate serial: 019B79ED656094F3C994FE172615D1D06410 Authority key identifier: 03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/pCX_Df1xcNspUxHlFIrg2C-Qt_g.roa Signing time: Thu 01 Jan 2026 14:19:19 +0000 ROA not before: Thu 01 Jan 2026 14:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50563 IP address blocks: 5.83.54.0/24 maxlen: 24 5.83.64.0/21 maxlen: 21 5.83.64.0/22 maxlen: 22 5.83.64.0/23 maxlen: 23 5.83.64.0/24 maxlen: 24 5.83.65.0/24 maxlen: 24 5.83.66.0/23 maxlen: 23 5.83.68.0/22 maxlen: 22 5.83.68.0/23 maxlen: 23 5.83.70.0/23 maxlen: 23 5.83.88.0/24 maxlen: 24 5.83.95.0/24 maxlen: 24 185.3.116.0/22 maxlen: 22 185.3.116.0/23 maxlen: 23 185.3.116.0/24 maxlen: 24 185.3.117.0/24 maxlen: 24 185.3.118.0/23 maxlen: 23 185.3.118.0/24 maxlen: 24 185.3.119.0/24 maxlen: 24 185.67.106.0/24 maxlen: 24 185.67.107.0/24 maxlen: 24 212.85.240.0/23 maxlen: 23 212.85.240.0/24 maxlen: 24 212.85.241.0/24 maxlen: 24 212.85.242.0/23 maxlen: 23 212.85.244.0/23 maxlen: 23 212.85.244.0/24 maxlen: 24 212.85.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:65:60:94:f3:c9:94:fe:17:26:15:d1:d0:64:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03e53d18f5f212ae0802a17ee5994c3331a43524 Validity Not Before: Jan 1 14:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a425ff0dfd7170db295311e5148ae0d82f90b7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4c:7f:ad:aa:2a:e1:ef:fd:b6:fc:ca:a2:f7: cc:e5:34:1c:b2:95:38:54:1f:88:c4:72:77:9e:06: 32:9b:63:7b:65:65:62:95:a8:a1:fb:71:7d:bf:cf: 0b:99:18:4a:72:09:d0:a4:77:99:e1:01:e1:f3:bc: 0d:79:0d:3f:a5:49:2d:16:aa:7c:ee:f8:c5:bf:ce: f2:51:ef:e5:10:3b:4e:ff:ed:aa:61:3e:76:1a:b0: 7c:d3:a9:ea:a8:9a:1b:f2:db:bc:44:12:21:f3:bc: 19:7b:9b:c1:1e:00:94:f8:f3:33:0d:df:eb:e8:e4: dd:72:9f:d0:d7:d8:e6:05:35:b0:8f:5e:72:57:b7: 40:3a:b5:2f:cc:07:3a:dd:29:8c:57:c4:d5:8f:4e: 1a:e9:82:38:47:de:70:3f:9c:2b:71:89:13:af:48: 71:1a:46:19:52:bc:56:eb:fc:6b:cc:e1:bb:8b:04: cc:64:fe:8c:94:ec:30:fd:ae:b7:5e:f7:dd:a4:ab: d5:e3:9c:cb:cc:2f:8a:15:06:89:34:8d:b7:5d:c3: a6:9d:0f:97:3a:99:99:99:9a:d5:73:3f:65:09:b7: 6c:b1:c4:d2:19:e1:76:1f:96:62:d4:7f:e5:02:d7: c6:28:ea:8b:58:5f:99:c9:e0:8c:18:a7:7a:59:fa: 13:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:25:FF:0D:FD:71:70:DB:29:53:11:E5:14:8A:E0:D8:2F:90:B7:F8 X509v3 Authority Key Identifier: keyid:03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/pCX_Df1xcNspUxHlFIrg2C-Qt_g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.54.0/24 5.83.64.0/21 5.83.88.0/24 5.83.95.0/24 185.3.116.0/22 185.67.106.0/23 212.85.240.0-212.85.245.255 Signature Algorithm: sha256WithRSAEncryption 46:65:7f:bc:b5:de:42:09:d0:e9:80:f7:bf:f5:13:ad:4a:98: 68:50:5c:9e:8c:c7:e2:3d:29:87:49:1f:bc:33:6f:ac:d5:a8: 1a:be:c5:a2:f8:55:86:48:13:8b:e6:29:7c:56:93:e3:ba:e2: 47:75:4d:39:73:2b:8d:6c:e0:93:f0:2d:f8:8d:84:88:ff:4e: 15:7c:94:49:c0:a1:1d:a4:51:d9:ab:a9:d3:4d:f8:55:ba:72: dd:98:68:d9:ac:cd:98:26:1c:d3:20:0a:fa:7f:9e:19:0a:3d: 83:60:9a:50:b1:fa:d8:1c:04:e5:ea:54:4e:c0:48:9e:b4:3d: a1:c8:b1:94:81:01:48:0d:d7:b1:07:1b:2a:98:31:52:50:2a: 36:47:14:43:e3:4f:ba:22:a2:ce:9b:91:4b:9d:8c:bb:20:c6: 68:7f:cf:6a:6f:6c:aa:38:9f:3e:5d:a4:f4:25:06:87:3b:a8: 05:75:db:95:4c:bc:d8:f3:95:d7:1e:76:12:41:9d:e1:16:3f: 81:13:86:40:c6:de:f3:26:e8:0b:a0:f0:77:d2:75:00:96:19: d7:e3:b1:c6:a8:a0:59:35:15:75:ac:02:2c:ac:0b:d9:8a:1e: f5:8b:39:65:d3:04:dd:10:f4:f4:6e:a7:3f:f1:9d:d1:f4:b3: 5e:48:6c:3f -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt57WVglPPJlP4XJhXR0GQQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZTUzZDE4ZjVmMjEyYWUwODAyYTE3ZWU1OTk0YzMzMzFh NDM1MjQwHhcNMjYwMTAxMTQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDI1ZmYwZGZkNzE3MGRiMjk1MzExZTUxNDhhZTBkODJmOTBiN2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ex/raoq4e/9tvzKovfM5TQcspU4 VB+IxHJ3ngYym2N7ZWVilaih+3F9v88LmRhKcgnQpHeZ4QHh87wNeQ0/pUktFqp8 7vjFv87yUe/lEDtO/+2qYT52GrB806nqqJob8tu8RBIh87wZe5vBHgCU+PMzDd/r 6OTdcp/Q19jmBTWwj15yV7dAOrUvzAc63SmMV8TVj04a6YI4R95wP5wrcYkTr0hx GkYZUrxW6/xrzOG7iwTMZP6MlOww/a63XvfdpKvV45zLzC+KFQaJNI23XcOmnQ+X OpmZmZrVcz9lCbdsscTSGeF2H5Zi1H/lAtfGKOqLWF+ZyeCMGKd6WfoTawIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFKQl/w39cXDbKVMR5RSK4NgvkLf4MB8GA1UdIwQY MBaAFAPlPRj18hKuCAKhfuWZTDMxpDUkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQS1VOUdQWHlFcTRJQXFGLTVabE1NekdrTlNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9kZGQ5ZjEtMGYyZS00ZDVmLTg1N2Qt MDJiYWI5ZjZmOTU1LzEvcENYX0RmMXhjTnNwVXhIbEZJcmcyQy1RdF9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9kZGQ5ZjEtMGYyZS00ZDVmLTg1N2QtMDJiYWI5ZjZmOTU1 LzEvQS1VOUdQWHlFcTRJQXFGLTVabE1NekdrTlNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQABVM2AwQD BVNAAwQABVNYAwQABVNfAwQCuQN0AwQBuUNqMAwDBATUVfADBAHUVfQwDQYJKoZI hvcNAQELBQADggEBAEZlf7y13kIJ0OmA97/1E61KmGhQXJ6Mx+I9KYdJH7wzb6zV qBq+xaL4VYZIE4vmKXxWk+O64kd1TTlzK41s4JPwLfiNhIj/ThV8lEnAoR2kUdmr qdNN+FW6ct2YaNmszZgmHNMgCvp/nhkKPYNgmlCx+tgcBOXqVE7ASJ60PaHIsZSB AUgN17EHGyqYMVJQKjZHFEPjT7oios6bkUudjLsgxmh/z2pvbKo4nz5dpPQlBoc7 qAV125VMvNjzldcedhJBneEWP4EThkDG3vMm6Aug8HfSdQCWGdfjscaooFk1FXWs AiysC9mKHvWLOWXTBN0Q9PRupz/xndH0s15IbD8= -----END CERTIFICATE-----Generated at Sun Jan 25 11:45:14 2026 by rpki-client