This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/V2Wte8BkaNous7CrZqWcxBIQZdM.roa File: V2Wte8BkaNous7CrZqWcxBIQZdM.roa (raw, json) Hash identifier: Yw62UYpiIknNRj302cRCmgt62IIB168KgDQY4GJXYIo= Subject key identifier: 57:65:AD:7B:C0:64:68:DA:2E:B3:B0:AB:66:A5:9C:C4:12:10:65:D3 Certificate issuer: /CN=08953a5f11a8279cdf8798960de1e22eb1227d95 Certificate serial: 019B77C7575945CAD743996DC5A9B1A9D66C Authority key identifier: 08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/V2Wte8BkaNous7CrZqWcxBIQZdM.roa Signing time: Thu 01 Jan 2026 04:18:31 +0000 ROA not before: Thu 01 Jan 2026 04:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21472 IP address blocks: 5.2.16.0/21 maxlen: 21 5.2.16.0/23 maxlen: 23 5.2.18.0/23 maxlen: 23 5.2.20.0/23 maxlen: 23 5.2.23.0/24 maxlen: 24 91.224.190.0/23 maxlen: 23 162.33.228.0/23 maxlen: 23 185.79.56.0/22 maxlen: 22 185.79.56.0/24 maxlen: 24 185.149.176.0/22 maxlen: 22 185.182.147.0/24 maxlen: 24 185.229.40.0/22 maxlen: 22 185.229.40.0/23 maxlen: 23 195.49.144.0/22 maxlen: 22 2a00:e740::/32 maxlen: 32 2a07:69c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:57:59:45:ca:d7:43:99:6d:c5:a9:b1:a9:d6:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08953a5f11a8279cdf8798960de1e22eb1227d95 Validity Not Before: Jan 1 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5765ad7bc06468da2eb3b0ab66a59cc4121065d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e3:e7:7e:8a:2a:47:50:31:4f:37:dd:6e:07: c1:e7:55:ae:d4:ad:02:21:c6:92:3b:00:59:8b:28: a4:3f:56:41:7f:23:e9:6e:57:e6:99:78:3d:35:e9: bb:de:bd:06:71:41:30:a0:d5:57:64:aa:dd:5a:86: 09:94:90:c5:72:d8:e7:ae:7f:6f:29:43:08:f6:d0: 9a:38:b6:11:42:b3:69:bd:ad:7e:db:1c:ae:9f:e0: a6:8c:c4:71:9c:46:31:39:de:19:a8:2b:04:b5:56: 6d:bc:37:2f:12:db:13:35:0f:68:f4:bc:cc:99:97: c2:8c:80:15:4c:14:72:34:6a:a7:13:f3:1e:8d:b0: f0:13:af:92:c0:46:ce:59:e1:af:bb:ea:1b:c8:54: 39:5e:8b:82:7b:af:e1:d6:2c:29:01:d7:7b:f5:b8: 04:89:7b:72:07:e7:bd:57:8b:7d:d9:a7:46:dc:db: 9f:37:fd:80:9a:08:59:ec:42:b1:61:97:07:a3:30: 66:d9:2d:25:40:66:24:65:aa:c7:26:6c:ab:f5:eb: b5:c1:f9:28:26:0e:34:b4:1a:c7:e8:4f:2f:5f:f4: 7f:4c:db:24:0c:e0:5f:fd:d8:36:bc:f2:d8:9c:1c: 55:31:a9:38:1f:d9:9d:94:af:f2:4c:48:3e:c7:77: c1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:65:AD:7B:C0:64:68:DA:2E:B3:B0:AB:66:A5:9C:C4:12:10:65:D3 X509v3 Authority Key Identifier: keyid:08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/V2Wte8BkaNous7CrZqWcxBIQZdM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.2.16.0/21 91.224.190.0/23 162.33.228.0/23 185.79.56.0/22 185.149.176.0/22 185.182.147.0/24 185.229.40.0/22 195.49.144.0/22 IPv6: 2a00:e740::/32 2a07:69c0::/29 Signature Algorithm: sha256WithRSAEncryption 7a:23:d8:b0:70:f4:40:a7:eb:97:6f:80:ca:a7:70:52:ed:37: 2a:59:a7:e1:5b:31:6b:f6:2b:9e:3b:43:5d:26:21:3b:83:50: f6:94:44:8f:f8:22:ed:cd:63:68:ca:b3:b9:dd:96:cf:57:81: 6a:b5:98:da:13:f3:1f:8e:1b:c8:be:4b:03:08:88:c4:e5:6f: 24:8e:ba:13:16:6d:65:76:5f:bd:84:71:59:b9:51:6d:d1:66: 9a:ae:83:68:08:00:e3:73:07:82:c2:09:8c:17:8c:07:32:57: 7d:89:1d:6c:b1:dd:80:74:fd:f4:37:6f:8d:e8:98:68:7c:33: 65:7f:b6:5e:18:ab:1a:88:2b:07:bf:12:74:88:87:38:33:01: 12:5c:52:42:ea:a6:b4:e9:1d:8d:7c:69:7f:cb:8b:c6:d8:84: 5b:12:21:c9:66:13:5b:d1:4d:1d:76:a5:ac:ee:0b:78:7e:a2: c6:10:02:c8:f5:91:42:67:55:8a:d9:a5:73:39:72:07:90:42: 01:7d:a2:ec:90:a6:59:1c:19:21:a5:0c:03:13:89:e6:4a:01: ac:8c:9d:b5:03:f5:82:07:50:30:61:27:e5:d8:de:9a:77:0d: 46:41:0c:93:be:6e:5c:1f:2e:e6:dd:af:52:21:66:6e:e6:95: 3f:a5:0d:dd -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt3x1dZRcrXQ5ltxamxqdZsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4OTUzYTVmMTFhODI3OWNkZjg3OTg5NjBkZTFlMjJlYjEy MjdkOTUwHhcNMjYwMTAxMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzY1YWQ3YmMwNjQ2OGRhMmViM2IwYWI2NmE1OWNjNDEyMTA2NWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOPnfooqR1AxTzfdbgfB51Wu1K0C IcaSOwBZiyikP1ZBfyPpblfmmXg9Nem73r0GcUEwoNVXZKrdWoYJlJDFctjnrn9v KUMI9tCaOLYRQrNpva1+2xyun+CmjMRxnEYxOd4ZqCsEtVZtvDcvEtsTNQ9o9LzM mZfCjIAVTBRyNGqnE/MejbDwE6+SwEbOWeGvu+obyFQ5XouCe6/h1iwpAdd79bgE iXtyB+e9V4t92adG3NufN/2AmghZ7EKxYZcHozBm2S0lQGYkZarHJmyr9eu1wfko Jg40tBrH6E8vX/R/TNskDOBf/dg2vPLYnBxVMak4H9mdlK/yTEg+x3fBuQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFFdlrXvAZGjaLrOwq2alnMQSEGXTMB8GA1UdIwQY MBaAFAiVOl8RqCec34eYlg3h4i6xIn2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0pVNlh4R29KNXpmaDVpV0RlSGlMckVpZlpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jYzk0YzgtNzJlNC00Mzk4LWIzN2It NzExNjk1NjdlMzljLzEvVjJXdGU4QmthTm91czdDclpxV2N4QklRWmRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9jYzk0YzgtNzJlNC00Mzk4LWIzN2ItNzExNjk1NjdlMzlj LzEvQ0pVNlh4R29KNXpmaDVpV0RlSGlMckVpZlpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA2BAIAATAwAwQDBQIQAwQB W+C+AwQBoiHkAwQCuU84AwQCuZWwAwQAubaTAwQCueUoAwQCwzGQMBQEAgACMA4D BQAqAOdAAwUDKgdpwDANBgkqhkiG9w0BAQsFAAOCAQEAeiPYsHD0QKfrl2+Ayqdw Uu03Klmn4Vsxa/YrnjtDXSYhO4NQ9pREj/gi7c1jaMqzud2Wz1eBarWY2hPzH44b yL5LAwiIxOVvJI66ExZtZXZfvYRxWblRbdFmmq6DaAgA43MHgsIJjBeMBzJXfYkd bLHdgHT99DdvjeiYaHwzZX+2XhirGogrB78SdIiHODMBElxSQuqmtOkdjXxpf8uL xtiEWxIhyWYTW9FNHXalrO4LeH6ixhACyPWRQmdVitmlczlyB5BCAX2i7JCmWRwZ IaUMAxOJ5koBrIydtQP1ggdQMGEn5djemncNRkEMk75uXB8u5t2vUiFmbuaVP6UN 3Q== -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:36 2026 by rpki-client