This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/iZOSPrtVr9oSzB_9S2j4xEXS2ss.roa File: iZOSPrtVr9oSzB_9S2j4xEXS2ss.roa (raw, json) Hash identifier: nZdp839a8RxYxDObd4MRvvPLHkIL2KF3YjG1vFoxffQ= Subject key identifier: 89:93:92:3E:BB:55:AF:DA:12:CC:1F:FD:4B:68:F8:C4:45:D2:DA:CB Certificate issuer: /CN=d6e2694652aa298511edafbe18d2b1cdbc792638 Certificate serial: 019B7C1362CC06AF7D3E887EEB0F810021A0 Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/iZOSPrtVr9oSzB_9S2j4xEXS2ss.roa Signing time: Fri 02 Jan 2026 00:20:03 +0000 ROA not before: Fri 02 Jan 2026 00:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60423 IP address blocks: 5.145.112.0/24 maxlen: 24 5.145.113.0/24 maxlen: 24 5.145.114.0/24 maxlen: 24 5.145.115.0/24 maxlen: 24 5.145.117.0/24 maxlen: 24 5.145.118.0/24 maxlen: 24 5.145.119.0/24 maxlen: 24 185.24.252.0/24 maxlen: 24 185.24.253.0/24 maxlen: 24 185.24.254.0/24 maxlen: 24 185.24.255.0/24 maxlen: 24 2a04:2f00::/48 maxlen: 48 2a04:2f00:3::/48 maxlen: 48 2a04:2f00:d::/48 maxlen: 48 2a04:2f00:e::/48 maxlen: 48 2a04:2f00:ff01::/48 maxlen: 48 2a04:2f00:ff02::/48 maxlen: 48 2a04:2f00:ff03::/48 maxlen: 48 2a04:2f00:ff06::/48 maxlen: 48 2a04:2f00:ff08::/48 maxlen: 48 2a04:2f00:ff09::/48 maxlen: 48 2a04:2f01:3::/48 maxlen: 48 2a04:2f01:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:62:cc:06:af:7d:3e:88:7e:eb:0f:81:00:21:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638 Validity Not Before: Jan 2 00:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8993923ebb55afda12cc1ffd4b68f8c445d2dacb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9e:f7:bd:1a:8d:37:a9:f0:b2:46:89:5e:5d: 5c:3d:21:b7:02:a8:bb:ed:6b:01:21:a6:05:44:b9: 40:c5:8e:08:bb:85:17:64:e9:c2:8a:87:98:02:2f: 51:0c:3c:cc:91:59:09:98:1d:01:c2:bf:d0:6f:3b: 9c:19:7c:0b:39:14:d5:85:70:37:b2:e6:46:ed:8c: aa:ca:e3:dc:9b:fe:6c:3c:21:97:68:99:a0:dc:19: d8:3e:a6:d1:07:d5:fe:89:73:ae:ce:d0:4c:9d:c6: e8:05:ba:dc:02:40:60:b5:a6:f2:31:6e:a4:5f:cb: 2b:7e:96:2d:c6:74:48:bf:31:9d:be:2d:76:42:52: 7d:80:19:a5:da:56:fa:a6:86:34:7d:55:cd:7c:54: 14:53:c7:9f:d8:bd:d0:fd:e6:15:1e:a0:e8:2f:52: da:e1:af:29:ab:b3:30:f1:2e:26:42:67:8e:7d:19: b8:c1:fd:88:ef:43:49:8b:9b:35:05:a7:46:0a:ba: e4:60:16:80:77:f0:de:3e:3a:f6:6e:97:67:5c:64: d2:98:18:49:58:40:8a:ee:08:90:8b:b6:d2:b9:69: a4:22:92:a2:71:9e:c4:f8:4c:cc:42:82:f7:33:05: fc:55:7b:ae:30:42:52:f4:a1:7f:37:f9:00:74:0f: fe:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:93:92:3E:BB:55:AF:DA:12:CC:1F:FD:4B:68:F8:C4:45:D2:DA:CB X509v3 Authority Key Identifier: keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/iZOSPrtVr9oSzB_9S2j4xEXS2ss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.145.112.0/22 5.145.117.0-5.145.119.255 185.24.252.0/22 IPv6: 2a04:2f00::/48 2a04:2f00:3::/48 2a04:2f00:d::-2a04:2f00:e:ffff:ffff:ffff:ffff:ffff 2a04:2f00:ff01::-2a04:2f00:ff03:ffff:ffff:ffff:ffff:ffff 2a04:2f00:ff06::/48 2a04:2f00:ff08::/47 2a04:2f01:3::-2a04:2f01:4:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 5c:f2:a2:e9:5f:14:b4:fd:0f:f6:4b:71:ab:a1:13:b6:5d:ba: e2:be:5b:cf:a8:5f:bd:a1:c0:bb:b9:19:e7:d0:8f:3f:8a:e5: f8:79:f6:a0:4a:3a:bb:9b:a8:72:6b:0e:06:40:b8:02:b7:a6: 94:a6:c3:40:2b:f1:90:f6:ac:ed:e1:d9:42:81:fb:27:09:64: b6:a2:b6:42:5a:00:3d:08:3c:c4:62:6a:a8:25:fb:11:fe:7f: 17:76:28:c1:4e:1e:3a:21:e1:90:f5:95:c9:e4:8e:8a:45:89: 9f:a1:73:01:83:b3:e8:4a:69:f2:29:25:2a:41:68:25:e9:99: 07:7e:ab:7e:bf:86:61:47:b7:a3:ca:27:79:5e:ad:3e:4d:74: a6:14:26:fc:b5:09:fc:c0:65:e7:ad:64:38:55:f6:dc:04:5d: 30:89:7b:a0:34:ce:bc:10:66:fb:26:ed:ca:79:3f:be:6c:b5: 20:65:0a:4f:7f:0f:31:63:01:0c:42:8e:73:4b:0a:5d:17:97: 0b:f1:e6:53:83:51:52:6b:e0:f2:a7:e6:49:de:48:cf:79:07: 8f:9c:d8:f6:21:dd:1e:3b:54:a5:1f:68:24:7e:bc:02:d0:5a: 03:81:a8:a6:14:6e:7e:8d:3e:60:71:45:55:ae:a6:d3:1b:02: ef:a9:f2:8c -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgISAZt8E2LMBq99Poh+6w+BACGgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZTI2OTQ2NTJhYTI5ODUxMWVkYWZiZTE4ZDJiMWNkYmM3 OTI2MzgwHhcNMjYwMTAyMDAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTkzOTIzZWJiNTVhZmRhMTJjYzFmZmQ0YjY4ZjhjNDQ1ZDJkYWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlp73vRqNN6nwskaJXl1cPSG3Aqi7 7WsBIaYFRLlAxY4Iu4UXZOnCioeYAi9RDDzMkVkJmB0Bwr/QbzucGXwLORTVhXA3 suZG7YyqyuPcm/5sPCGXaJmg3BnYPqbRB9X+iXOuztBMncboBbrcAkBgtabyMW6k X8srfpYtxnRIvzGdvi12QlJ9gBml2lb6poY0fVXNfFQUU8ef2L3Q/eYVHqDoL1La 4a8pq7Mw8S4mQmeOfRm4wf2I70NJi5s1BadGCrrkYBaAd/DePjr2bpdnXGTSmBhJ WECK7giQi7bSuWmkIpKicZ7E+EzMQoL3MwX8VXuuMEJS9KF/N/kAdA/+nQIDAQAB o4ICiDCCAoQwHQYDVR0OBBYEFImTkj67Va/aEswf/Uto+MRF0trLMB8GA1UdIwQY MBaAFNbiaUZSqimFEe2vvhjSsc28eSY4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXVKcFJsS3FLWVVSN2EtLUdOS3h6Yng1SmpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC84Y2M1MDYtN2U3MS00NzA1LWEyODkt YjQyMzY0ODk1MDgzLzEvaVpPU1BydFZyOW9TekJfOVMyajR4RVhTMnNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC84Y2M1MDYtN2U3MS00NzA1LWEyODktYjQyMzY0ODk1MDgz LzEvMXVKcFJsS3FLWVVSN2EtLUdOS3h6Yng1SmpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijAgBAIAATAaAwQCBZFw MAwDBAAFkXUDBAMFkXADBAK5GPwwZgQCAAIwYAMHACoELwAAAAMHACoELwAAAzAS AwcAKgQvAAANAwcAKgQvAAAOMBIDBwAqBC8A/wEDBwIqBC8A/wADBwAqBC8A/wYD BwEqBC8A/wgwEgMHACoELwEAAwMHACoELwEABDANBgkqhkiG9w0BAQsFAAOCAQEA XPKi6V8UtP0P9ktxq6ETtl264r5bz6hfvaHAu7kZ59CPP4rl+Hn2oEo6u5uocmsO BkC4AremlKbDQCvxkPas7eHZQoH7JwlktqK2QloAPQg8xGJqqCX7Ef5/F3YowU4e OiHhkPWVyeSOikWJn6FzAYOz6Epp8iklKkFoJemZB36rfr+GYUe3o8oneV6tPk10 phQm/LUJ/MBl561kOFX23ARdMIl7oDTOvBBm+ybtynk/vmy1IGUKT38PMWMBDEKO c0sKXReXC/HmU4NRUmvg8qfmSd5Iz3kHj5zY9iHdHjtUpR9oJH68AtBaA4GophRu fo0+YHFFVa6m0xsC76nyjA== -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:48 2026 by rpki-client