This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/5nzdgTkkHsT4RLbgZ2GRcxsXvB4.roa File: 5nzdgTkkHsT4RLbgZ2GRcxsXvB4.roa (raw, json) Hash identifier: qdwMngtFVt4ZyT/UodrlBdn1CZ1QUvtY6m9NXbdSStU= Subject key identifier: E6:7C:DD:81:39:24:1E:C4:F8:44:B6:E0:67:61:91:73:1B:17:BC:1E Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e Certificate serial: 019B7F15421882CA373A8D5A384ACFA8B6C1 Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/5nzdgTkkHsT4RLbgZ2GRcxsXvB4.roa Signing time: Fri 02 Jan 2026 14:20:58 +0000 ROA not before: Fri 02 Jan 2026 14:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29300 IP address blocks: 81.88.77.0/24 maxlen: 24 82.148.160.0/21 maxlen: 21 93.184.120.0/21 maxlen: 21 109.169.96.0/20 maxlen: 20 2a02:2828::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:42:18:82:ca:37:3a:8d:5a:38:4a:cf:a8:b6:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e Validity Not Before: Jan 2 14:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e67cdd8139241ec4f844b6e0676191731b17bc1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d9:b9:b8:40:0c:3b:e6:1a:7d:80:c3:24:f4: 8a:1e:f2:55:a0:0a:68:6c:38:08:2b:3b:71:05:49: 29:c2:05:9f:33:40:f7:10:bc:af:6d:97:28:54:e0: 33:72:f0:60:cc:6a:f1:97:0e:80:a1:7e:4b:2d:da: 8e:32:2e:c2:da:9b:d2:90:1b:d4:11:2a:0c:df:d6: 47:d2:1a:b5:f0:60:84:6a:0c:d8:2a:61:63:34:cd: cd:b3:47:4d:95:c7:24:8f:8a:e7:85:a9:83:28:d0: ec:9f:f9:44:8e:5b:b6:2a:b2:41:90:13:47:66:72: 29:27:d1:86:73:c8:c5:d8:72:32:9d:5c:20:a5:9f: 01:ce:fa:30:a8:2e:90:30:2a:73:df:4e:af:bf:1e: f6:9b:81:b3:cb:7b:03:ab:9b:de:81:f7:c1:72:6e: 84:18:79:ec:9c:f0:fc:2b:0d:2a:a7:d3:3a:17:7c: e2:b3:13:26:f7:67:07:96:83:f0:0d:a0:5f:c7:fd: 25:a4:47:48:50:87:75:50:e1:4c:25:ef:8c:e3:a3: 36:64:bd:df:63:14:5b:f7:75:35:fd:e5:44:f2:03: 48:20:2c:6b:90:00:a8:71:20:14:9c:23:10:2c:dc: 1f:8b:d3:4a:a1:52:bf:b0:f2:1e:88:bb:72:ae:61: 9a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:7C:DD:81:39:24:1E:C4:F8:44:B6:E0:67:61:91:73:1B:17:BC:1E X509v3 Authority Key Identifier: keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/5nzdgTkkHsT4RLbgZ2GRcxsXvB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.88.77.0/24 82.148.160.0/21 93.184.120.0/21 109.169.96.0/20 IPv6: 2a02:2828::/32 Signature Algorithm: sha256WithRSAEncryption 54:c1:37:9a:e5:3b:54:ad:34:1c:91:4d:a8:be:22:81:09:c7: 42:94:24:87:88:a6:74:fa:3f:df:12:5b:72:01:a7:05:21:17: 90:b4:3a:57:e0:36:74:d0:8f:ba:a2:67:d4:18:94:53:73:88: d7:fe:c9:9d:23:5a:04:6a:ba:88:41:40:2b:7d:8d:8a:b6:6c: 94:34:ff:15:90:cc:e9:99:cd:65:03:d4:67:94:fd:42:ca:b9: af:b7:18:2a:b7:83:04:0a:27:03:9f:23:38:39:e8:e0:e8:89: 33:88:75:5e:0e:fc:0d:d5:dd:6b:1c:cf:fb:20:af:52:79:3e: 58:4d:7e:cc:de:32:0d:1c:a3:a9:72:44:d3:95:e7:bc:69:cd: 86:2b:94:1f:dc:ca:1a:57:36:ae:83:4d:37:d1:0d:a6:41:e5: 68:92:3d:ca:f0:de:a4:db:64:a9:20:90:04:4f:f2:17:4e:6b: 4b:22:17:33:d8:b6:73:38:52:d2:14:09:f9:20:e6:fb:ca:29: 8f:48:f6:cb:89:97:79:44:5d:51:c5:e2:9a:68:1e:1a:0a:78: f5:33:ce:76:50:55:44:c3:4b:4e:72:88:b6:2b:c5:ec:98:0b: ab:be:35:a4:7e:c9:8a:97:91:7c:ff:44:ef:9e:77:19:8c:56: 98:41:0a:ea -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt/FUIYgso3Oo1aOErPqLbBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1OTI3ODZjZWQ2Y2U1OTc1ODU0NjhiYjRmMzZiMzFjZjZh Y2VjNmUwHhcNMjYwMTAyMTQyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjdjZGQ4MTM5MjQxZWM0Zjg0NGI2ZTA2NzYxOTE3MzFiMTdiYzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydm5uEAMO+YafYDDJPSKHvJVoApo bDgIKztxBUkpwgWfM0D3ELyvbZcoVOAzcvBgzGrxlw6AoX5LLdqOMi7C2pvSkBvU ESoM39ZH0hq18GCEagzYKmFjNM3Ns0dNlcckj4rnhamDKNDsn/lEjlu2KrJBkBNH ZnIpJ9GGc8jF2HIynVwgpZ8BzvowqC6QMCpz306vvx72m4Gzy3sDq5vegffBcm6E GHnsnPD8Kw0qp9M6F3zisxMm92cHloPwDaBfx/0lpEdIUId1UOFMJe+M46M2ZL3f YxRb93U1/eVE8gNIICxrkACocSAUnCMQLNwfi9NKoVK/sPIeiLtyrmGaSwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFOZ83YE5JB7E+ES24GdhkXMbF7weMB8GA1UdIwQY MBaAFMWSeGztbOWXWFRou082sxz2rOxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hOWMwYjctYTIzYS00NThmLThmNjQt YmEzNzUxMTQwNGMyLzEvNW56ZGdUa2tIc1Q0UkxiZ1oyR1JjeHNYdkI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hOWMwYjctYTIzYS00NThmLThmNjQtYmEzNzUxMTQwNGMy LzEveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAUVhNAwQD UpSgAwQDXbh4AwQEbalgMA0EAgACMAcDBQAqAigoMA0GCSqGSIb3DQEBCwUAA4IB AQBUwTea5TtUrTQckU2oviKBCcdClCSHiKZ0+j/fEltyAacFIReQtDpX4DZ00I+6 omfUGJRTc4jX/smdI1oEarqIQUArfY2KtmyUNP8VkMzpmc1lA9RnlP1Cyrmvtxgq t4MECicDnyM4Oejg6IkziHVeDvwN1d1rHM/7IK9SeT5YTX7M3jINHKOpckTTlee8 ac2GK5Qf3MoaVzaug0030Q2mQeVokj3K8N6k22SpIJAET/IXTmtLIhcz2LZzOFLS FAn5IOb7yimPSPbLiZd5RF1RxeKaaB4aCnj1M852UFVEw0tOcoi2K8XsmAurvjWk fsmKl5F8/0TvnncZjFaYQQrq -----END CERTIFICATE-----Generated at Sun Jan 25 22:42:23 2026 by rpki-client