This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Ezt0FRQhgMB0E-9UJr97REAQ55w.roa File: Ezt0FRQhgMB0E-9UJr97REAQ55w.roa (raw, json) Hash identifier: Oa9Kwz+GiNskimggPADsaHBSugnVAK5DsSEzBCQ0f0w= Subject key identifier: 13:3B:74:15:14:21:80:C0:74:13:EF:54:26:BF:7B:44:40:10:E7:9C Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Certificate serial: 019B7EA637866B90F4158155F3B6A69963BD Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Ezt0FRQhgMB0E-9UJr97REAQ55w.roa Signing time: Fri 02 Jan 2026 12:19:40 +0000 ROA not before: Fri 02 Jan 2026 12:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36454 IP address blocks: 65.181.112.0/24 maxlen: 24 65.181.116.0/24 maxlen: 24 65.181.123.0/24 maxlen: 24 65.181.124.0/24 maxlen: 24 65.181.125.0/24 maxlen: 24 162.208.8.0/24 maxlen: 24 162.208.9.0/24 maxlen: 24 162.208.10.0/24 maxlen: 24 162.208.11.0/24 maxlen: 24 185.181.253.0/24 maxlen: 24 185.181.254.0/24 maxlen: 24 185.181.255.0/24 maxlen: 24 192.243.96.0/24 maxlen: 24 192.243.97.0/24 maxlen: 24 192.243.98.0/24 maxlen: 24 192.243.99.0/24 maxlen: 24 192.243.100.0/24 maxlen: 24 192.243.101.0/24 maxlen: 24 192.243.102.0/24 maxlen: 24 192.243.103.0/24 maxlen: 24 192.243.104.0/24 maxlen: 24 192.243.105.0/24 maxlen: 24 192.243.106.0/24 maxlen: 24 192.243.107.0/24 maxlen: 24 192.243.108.0/24 maxlen: 24 192.243.109.0/24 maxlen: 24 192.243.111.0/24 maxlen: 24 192.250.224.0/20 maxlen: 20 192.250.226.0/24 maxlen: 24 192.250.227.0/24 maxlen: 24 192.250.236.0/24 maxlen: 24 195.250.25.0/24 maxlen: 24 198.38.90.0/24 maxlen: 24 199.175.48.0/24 maxlen: 24 199.175.49.0/24 maxlen: 24 199.175.50.0/24 maxlen: 24 199.175.51.0/24 maxlen: 24 199.175.52.0/24 maxlen: 24 199.175.53.0/24 maxlen: 24 199.175.54.0/24 maxlen: 24 199.175.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:37:86:6b:90:f4:15:81:55:f3:b6:a6:99:63:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Validity Not Before: Jan 2 12:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=133b7415142180c07413ef5426bf7b444010e79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6b:56:22:4b:06:b9:d5:1d:c2:46:fc:3a:15: 1d:84:c7:26:89:a8:06:3b:9f:c9:f9:21:13:9b:8d: a0:36:10:c5:e7:5b:ab:0c:49:5e:87:0f:99:ea:01: ce:29:c0:59:c1:78:d3:71:b5:56:35:08:94:d6:65: b0:fc:66:de:8b:bf:65:ac:40:65:37:b3:84:3c:04: e3:2c:fe:e5:6a:39:c9:83:bf:06:1c:f1:59:82:37: d4:46:4b:36:fb:7c:4c:54:94:74:b5:58:e5:34:ea: da:a9:3b:85:53:80:bb:c1:db:51:9d:9e:23:6b:bc: 23:32:6d:5e:d9:a6:03:90:c0:d1:87:d0:d7:de:96: 6f:bd:90:a5:74:f5:ef:c5:64:06:7f:7d:da:68:03: b7:71:b3:81:fd:cf:f1:c6:5c:15:b4:d0:8b:45:7a: ee:d7:04:bf:06:98:db:61:e0:b2:df:20:90:09:2c: f9:49:38:dc:a7:ee:e7:59:24:ae:73:02:34:4c:7a: 72:e1:c3:0c:b9:a0:4c:fb:bb:a6:5f:fa:16:4c:4b: 2b:9c:d6:8d:49:cb:60:92:18:e6:93:ef:05:d1:c4: 60:05:2d:a0:af:cb:7e:f1:f5:c6:0e:db:63:6b:b8: 8c:4b:14:8c:4b:07:e7:a7:26:72:d5:49:bb:77:9f: d9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3B:74:15:14:21:80:C0:74:13:EF:54:26:BF:7B:44:40:10:E7:9C X509v3 Authority Key Identifier: keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Ezt0FRQhgMB0E-9UJr97REAQ55w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 65.181.112.0/24 65.181.116.0/24 65.181.123.0-65.181.125.255 162.208.8.0/22 185.181.253.0-185.181.255.255 192.243.96.0-192.243.109.255 192.243.111.0/24 192.250.224.0/20 195.250.25.0/24 198.38.90.0/24 199.175.48.0/21 Signature Algorithm: sha256WithRSAEncryption 6b:31:f9:7a:70:44:dc:33:f0:17:14:95:09:3e:a6:68:6c:01: 9d:fb:de:74:89:e4:0e:88:33:eb:1a:ff:2b:dc:19:c5:f0:71: 1f:23:f8:b9:29:c4:bf:97:83:12:8c:39:16:82:f8:6c:dd:8e: de:48:10:c7:ba:2f:54:f9:8e:16:4f:51:18:b2:9a:2a:86:97: 99:59:96:03:f1:95:0b:1b:f6:d0:de:33:19:34:96:37:3c:4b: 8c:77:ca:88:57:1b:6a:88:ca:76:46:89:61:ec:2d:cf:d5:0a: 5f:27:92:30:c1:5d:de:ff:66:1d:93:c5:b3:ad:4e:65:cc:d8: 0d:fa:1b:1a:aa:96:16:de:b3:e4:ce:67:47:21:d2:65:7a:66: 35:df:2a:25:c1:05:ed:29:b0:d6:44:4f:93:9b:68:5c:35:c1: 53:da:52:6f:9c:fe:9d:47:c5:b0:19:3c:73:cd:a8:7b:8a:eb: 81:0f:5a:2c:72:0e:08:65:8a:03:1e:2d:12:0a:56:c0:6a:f9: 28:bc:92:ee:39:8e:c6:00:0c:13:c6:89:72:45:ec:71:b0:cc: 3f:88:d8:fb:c5:59:4c:8b:8b:cc:f9:ee:87:f2:ba:2e:9a:cd: 96:7b:cf:2e:c7:f3:15:2c:1e:43:de:3b:fe:59:f7:6f:82:a7: 7f:12:5b:8b -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgISAZt+pjeGa5D0FYFV87ammWO9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy ZWU4ZGQwHhcNMjYwMTAyMTIxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzNiNzQxNTE0MjE4MGMwNzQxM2VmNTQyNmJmN2I0NDQwMTBlNzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2tWIksGudUdwkb8OhUdhMcmiagG O5/J+SETm42gNhDF51urDElehw+Z6gHOKcBZwXjTcbVWNQiU1mWw/Gbei79lrEBl N7OEPATjLP7lajnJg78GHPFZgjfURks2+3xMVJR0tVjlNOraqTuFU4C7wdtRnZ4j a7wjMm1e2aYDkMDRh9DX3pZvvZCldPXvxWQGf33aaAO3cbOB/c/xxlwVtNCLRXru 1wS/BpjbYeCy3yCQCSz5STjcp+7nWSSucwI0THpy4cMMuaBM+7umX/oWTEsrnNaN Sctgkhjmk+8F0cRgBS2gr8t+8fXGDttja7iMSxSMSwfnpyZy1Um7d5/ZzwIDAQAB o4ICXDCCAlgwHQYDVR0OBBYEFBM7dBUUIYDAdBPvVCa/e0RAEOecMB8GA1UdIwQY MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt Y2NhMzc2MDZiZjE4LzEvRXp0MEZSUWhnTUIwRS05VUpyOTdSRUFRNTV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4 LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTBfBAIAATBZAwQAQbVwAwQA QbV0MAwDBABBtXsDBAFBtXwDBAKi0AgwCwMEALm1/QMDAbm0MAwDBAXA82ADBAHA 82wDBADA828DBATA+uADBADD+hkDBADGJloDBAPHrzAwDQYJKoZIhvcNAQELBQAD ggEBAGsx+XpwRNwz8BcUlQk+pmhsAZ373nSJ5A6IM+sa/yvcGcXwcR8j+LkpxL+X gxKMORaC+Gzdjt5IEMe6L1T5jhZPURiymiqGl5lZlgPxlQsb9tDeMxk0ljc8S4x3 yohXG2qIynZGiWHsLc/VCl8nkjDBXd7/Zh2TxbOtTmXM2A36Gxqqlhbes+TOZ0ch 0mV6ZjXfKiXBBe0psNZET5ObaFw1wVPaUm+c/p1HxbAZPHPNqHuK64EPWixyDghl igMeLRIKVsBq+Si8ku45jsYADBPGiXJF7HGwzD+I2PvFWUyLi8z57ofyui6azZZ7 zy7H8xUsHkPeO/5Z92+Cp38SW4s= -----END CERTIFICATE-----Generated at Sun Jan 25 19:01:38 2026 by rpki-client