This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/CGm99LqsU4yHj9zdeUuoOAfSD3Q.roa File: CGm99LqsU4yHj9zdeUuoOAfSD3Q.roa (raw, json) Hash identifier: KIaTLPJigKCQY11fs/oJ/rupeByjTEWXRdR2CVbpucA= Subject key identifier: 08:69:BD:F4:BA:AC:53:8C:87:8F:DC:DD:79:4B:A8:38:07:D2:0F:74 Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b Certificate serial: 019B7CED4D73CEB4ECF8298A6B6138B6CE38 Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/CGm99LqsU4yHj9zdeUuoOAfSD3Q.roa Signing time: Fri 02 Jan 2026 04:18:05 +0000 ROA not before: Fri 02 Jan 2026 04:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211261 IP address blocks: 5.252.92.0/24 maxlen: 24 5.253.156.0/24 maxlen: 24 5.253.157.0/24 maxlen: 24 5.253.158.0/24 maxlen: 24 5.253.159.0/24 maxlen: 24 62.122.230.0/24 maxlen: 24 91.210.126.0/24 maxlen: 24 185.146.67.0/24 maxlen: 24 185.210.192.0/24 maxlen: 24 185.210.193.0/24 maxlen: 24 185.210.195.0/24 maxlen: 24 185.218.160.0/24 maxlen: 24 185.218.161.0/24 maxlen: 24 185.218.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:4d:73:ce:b4:ec:f8:29:8a:6b:61:38:b6:ce:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b Validity Not Before: Jan 2 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0869bdf4baac538c878fdcdd794ba83807d20f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9a:e5:3a:5f:0c:da:0d:d8:07:f1:32:c6:26: 4f:b3:28:04:2f:67:68:a4:d4:8e:6a:05:e5:20:10: 0a:f3:47:3c:62:2e:3c:84:e8:ad:2a:b2:1e:da:f4: de:13:d0:a1:81:49:f2:d5:69:66:ca:94:c1:a8:ab: 70:12:23:48:2a:87:cf:ac:88:a9:7c:1a:8b:84:99: b9:f8:2f:25:ac:5b:be:6d:e6:95:26:b3:dc:d7:7b: 43:91:85:00:c8:0d:c0:26:f2:8a:7f:b9:ed:28:27: 53:d0:b2:91:89:9c:9b:55:6b:e7:97:60:20:47:7f: b9:29:a3:68:8b:01:bd:70:08:fb:c7:dc:99:e3:3b: 66:b4:2c:e1:4b:94:33:05:0b:30:f4:00:c4:6b:a0: ea:19:22:c1:15:7b:5e:3b:7f:b2:fd:01:9b:cf:c0: 89:18:38:6a:30:87:27:26:45:e3:6d:1d:41:36:aa: e2:52:a8:ea:4c:ec:95:f5:89:61:8a:07:bc:ec:fb: b8:2f:c6:86:85:0e:31:27:72:46:df:88:1f:fd:21: 70:a6:40:be:f1:3c:ef:a1:b3:40:61:43:80:11:7c: 0c:d4:fd:33:61:b2:f6:ad:1d:f6:84:02:dd:76:ba: 50:cf:b6:0d:ea:2b:4f:93:81:7b:95:2f:c5:27:40: 6b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:69:BD:F4:BA:AC:53:8C:87:8F:DC:DD:79:4B:A8:38:07:D2:0F:74 X509v3 Authority Key Identifier: keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/CGm99LqsU4yHj9zdeUuoOAfSD3Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.92.0/24 5.253.156.0/22 62.122.230.0/24 91.210.126.0/24 185.146.67.0/24 185.210.192.0/23 185.210.195.0/24 185.218.160.0-185.218.162.255 Signature Algorithm: sha256WithRSAEncryption c0:91:ce:d3:f3:1c:7e:0f:0c:c7:78:c6:fd:e5:86:3f:64:7e: 02:70:f0:b3:5c:16:90:79:e6:81:99:c3:84:eb:0a:01:94:c5: df:d8:75:eb:ad:a1:f1:68:e2:c1:32:4a:0d:73:0d:01:5d:27: a0:7b:49:f9:83:da:57:d2:ca:74:38:a2:73:8b:d8:0f:16:72: c7:f4:90:b1:76:ee:40:32:c8:59:81:c2:34:c4:c9:09:fc:a8: 5d:50:d2:a7:00:f8:8b:10:50:17:8d:f4:89:b3:29:7d:84:58: a7:51:39:a7:9b:73:a4:e4:b9:e9:c1:03:d3:af:43:4f:6f:5c: ab:1a:b1:1f:28:81:b4:05:8c:03:37:d1:69:3c:31:1e:d3:e4: 46:23:eb:8a:6d:15:23:2c:34:06:84:d4:da:7f:b8:94:01:8e: 9a:e7:3a:e2:81:21:69:73:23:f7:fa:0d:d0:ba:c9:0d:d7:2e: fb:f7:99:9e:e4:26:81:27:b9:fa:f5:1a:91:dd:02:d2:f4:aa: c9:77:12:ed:47:2b:b7:e9:b7:aa:fb:00:ad:59:8f:3a:42:24: 30:e5:7f:1b:b0:7c:ce:f0:df:5e:ad:47:ec:42:7e:5f:92:58: 81:44:96:df:2f:67:25:1e:f1:6a:21:d4:4f:a0:35:52:c2:73: 88:12:a3:90 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt87U1zzrTs+CmKa2E4ts44MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NzAyMWRjZGY0NGI2YWZkZDM4MTA1NDdjNTVhNzliZDFh OWZhM2IwHhcNMjYwMTAyMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODY5YmRmNGJhYWM1MzhjODc4ZmRjZGQ3OTRiYTgzODA3ZDIwZjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZrlOl8M2g3YB/EyxiZPsygEL2do pNSOagXlIBAK80c8Yi48hOitKrIe2vTeE9ChgUny1WlmypTBqKtwEiNIKofPrIip fBqLhJm5+C8lrFu+beaVJrPc13tDkYUAyA3AJvKKf7ntKCdT0LKRiZybVWvnl2Ag R3+5KaNoiwG9cAj7x9yZ4ztmtCzhS5QzBQsw9ADEa6DqGSLBFXteO3+y/QGbz8CJ GDhqMIcnJkXjbR1BNqriUqjqTOyV9Ylhige87Pu4L8aGhQ4xJ3JG34gf/SFwpkC+ 8TzvobNAYUOAEXwM1P0zYbL2rR32hALddrpQz7YN6itPk4F7lS/FJ0Br0wIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFAhpvfS6rFOMh4/c3XlLqDgH0g90MB8GA1UdIwQY MBaAFFdwIdzfRLav3TgQVHxVp5vRqfo7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQt YzkwN2FlMWMyMTFlLzEvQ0dtOTlMcXNVNHlIajl6ZGVVdW9PQWZTRDNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQtYzkwN2FlMWMyMTFl LzEvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQABfxcAwQC Bf2cAwQAPnrmAwQAW9J+AwQAuZJDAwQBudLAAwQAudLDMAwDBAW52qADBAC52qIw DQYJKoZIhvcNAQELBQADggEBAMCRztPzHH4PDMd4xv3lhj9kfgJw8LNcFpB55oGZ w4TrCgGUxd/YdeutofFo4sEySg1zDQFdJ6B7SfmD2lfSynQ4onOL2A8Wcsf0kLF2 7kAyyFmBwjTEyQn8qF1Q0qcA+IsQUBeN9ImzKX2EWKdROaebc6TkuenBA9OvQ09v XKsasR8ogbQFjAM30Wk8MR7T5EYj64ptFSMsNAaE1Np/uJQBjprnOuKBIWlzI/f6 DdC6yQ3XLvv3mZ7kJoEnufr1GpHdAtL0qsl3Eu1HK7fpt6r7AK1ZjzpCJDDlfxuw fM7w316tR+xCfl+SWIFElt8vZyUe8Woh1E+gNVLCc4gSo5A= -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:05 2026 by rpki-client