This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/_CVvcGmN0z7gvFHTIonmS69eSuQ.roa File: _CVvcGmN0z7gvFHTIonmS69eSuQ.roa (raw, json) Hash identifier: KM9cMyHHfVvu+RP/HFzcTi6oUrFwDfWfWVUlzb+Do1k= Subject key identifier: FC:25:6F:70:69:8D:D3:3E:E0:BC:51:D3:22:89:E6:4B:AF:5E:4A:E4 Certificate issuer: /CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a Certificate serial: 019B7FF212AFDA636DE8519CF2EA13E99C01 Authority key identifier: 20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/_CVvcGmN0z7gvFHTIonmS69eSuQ.roa Signing time: Fri 02 Jan 2026 18:22:09 +0000 ROA not before: Fri 02 Jan 2026 18:22:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41998 IP address blocks: 5.42.136.0/22 maxlen: 22 5.42.140.0/22 maxlen: 22 31.25.40.0/21 maxlen: 21 37.25.48.0/21 maxlen: 21 46.182.136.0/21 maxlen: 21 62.152.160.0/19 maxlen: 19 83.242.36.0/22 maxlen: 22 83.242.40.0/21 maxlen: 21 83.242.48.0/20 maxlen: 20 91.103.112.0/21 maxlen: 21 93.118.0.0/21 maxlen: 21 93.118.8.0/21 maxlen: 21 93.118.16.0/21 maxlen: 21 93.118.24.0/21 maxlen: 21 94.124.208.0/21 maxlen: 21 94.176.240.0/20 maxlen: 20 145.14.192.0/20 maxlen: 20 149.249.56.0/21 maxlen: 21 153.92.80.0/20 maxlen: 20 171.33.176.0/22 maxlen: 22 171.33.180.0/22 maxlen: 22 185.3.80.0/22 maxlen: 22 185.36.120.0/22 maxlen: 22 185.61.28.0/22 maxlen: 22 185.107.4.0/22 maxlen: 22 185.108.230.0/23 maxlen: 23 188.93.216.0/21 maxlen: 21 188.244.100.0/22 maxlen: 22 193.151.4.0/22 maxlen: 22 194.140.112.0/20 maxlen: 20 212.86.176.0/22 maxlen: 22 212.86.184.0/22 maxlen: 22 213.153.68.0/22 maxlen: 22 213.153.76.0/22 maxlen: 22 213.153.80.0/22 maxlen: 22 213.153.84.0/22 maxlen: 22 213.153.88.0/22 maxlen: 22 213.153.92.0/22 maxlen: 22 217.66.136.0/21 maxlen: 21 217.78.160.0/20 maxlen: 20 2a00:79c0::/32 maxlen: 32 2a02:17b0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:12:af:da:63:6d:e8:51:9c:f2:ea:13:e9:9c:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a Validity Not Before: Jan 2 18:22:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc256f70698dd33ee0bc51d32289e64baf5e4ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:51:72:97:97:b0:8c:50:7c:4c:08:91:62:80: 47:c0:11:09:15:5e:47:47:1f:a7:c4:a0:1d:af:14: 0a:4e:52:ca:04:70:bc:5e:e0:57:8b:5b:cc:49:0e: f6:31:81:59:b4:0d:d9:e8:e0:bd:e0:4f:bd:31:a6: 8e:b2:ba:b4:cb:83:08:e7:33:80:ff:85:55:20:0e: 44:78:f0:58:30:ea:51:d8:32:8b:6f:ea:1d:df:c1: 36:6f:a6:17:d7:16:31:31:3f:73:b8:50:a1:1c:75: a8:5a:b2:02:be:43:58:49:08:c9:a2:0b:db:ff:2f: b2:af:15:b2:9c:58:e7:00:9a:f0:2f:ba:ac:c5:c5: 91:68:f9:27:94:22:e6:3b:5e:21:47:17:1c:28:9a: 01:2e:22:4e:33:7b:f8:e8:0f:c6:fa:63:12:1f:74: 44:9b:d2:30:bd:03:65:89:94:6c:8b:f4:aa:ec:a9: a7:e8:bd:95:68:fb:f3:9f:6c:71:95:77:26:61:87: 89:c8:8c:16:96:01:fe:26:ba:8c:26:36:f6:ba:4c: 54:27:08:bb:b3:bd:86:f8:79:bb:60:51:e4:4d:10: be:93:cb:e0:b3:c0:c1:a6:5a:1d:03:83:e9:d3:ad: 78:a5:2b:a1:d8:0b:69:63:f2:3f:28:67:0b:d1:3d: ca:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:25:6F:70:69:8D:D3:3E:E0:BC:51:D3:22:89:E6:4B:AF:5E:4A:E4 X509v3 Authority Key Identifier: keyid:20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/_CVvcGmN0z7gvFHTIonmS69eSuQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.136.0/21 31.25.40.0/21 37.25.48.0/21 46.182.136.0/21 62.152.160.0/19 83.242.36.0-83.242.63.255 91.103.112.0/21 93.118.0.0/19 94.124.208.0/21 94.176.240.0/20 145.14.192.0/20 149.249.56.0/21 153.92.80.0/20 171.33.176.0/21 185.3.80.0/22 185.36.120.0/22 185.61.28.0/22 185.107.4.0/22 185.108.230.0/23 188.93.216.0/21 188.244.100.0/22 193.151.4.0/22 194.140.112.0/20 212.86.176.0/22 212.86.184.0/22 213.153.68.0/22 213.153.76.0-213.153.95.255 217.66.136.0/21 217.78.160.0/20 IPv6: 2a00:79c0::/32 2a02:17b0::/32 Signature Algorithm: sha256WithRSAEncryption 5f:f0:60:35:7d:07:f9:35:cc:4b:5f:68:e9:fa:b0:2e:de:85: 59:1e:30:ac:cc:0d:7c:01:d7:55:64:a5:0e:97:e4:24:95:27: 8a:75:6b:62:1a:83:dd:e9:d7:5e:a7:7e:10:c2:c7:b7:6f:2d: 02:31:56:12:33:61:87:41:4c:ba:3c:ea:4b:c2:af:01:62:cd: d5:63:90:39:39:3d:73:d0:ce:09:81:61:5c:7e:50:05:0a:82: 32:5b:64:3d:c4:97:be:da:af:b1:9c:a1:0e:6b:f4:83:ba:ef: 2b:0b:83:e0:ab:01:6e:fe:bc:f3:d4:21:fa:5d:f3:87:1f:1e: 0a:f9:35:1a:7e:e2:02:86:f8:58:b7:a5:f3:29:b0:50:61:a7: 3a:75:e5:5e:be:7d:a7:d4:73:71:fb:01:3f:eb:26:d0:20:d8: e6:41:b4:a8:ff:67:58:96:b0:2b:85:01:00:f0:83:a9:01:a3: 34:85:e6:4e:f2:eb:43:bc:73:9c:1f:d9:2b:66:d9:0b:54:a8: 7a:42:b6:29:44:6c:34:25:9b:62:57:90:41:cb:cc:4d:b6:86: 6c:59:a8:ee:a1:53:a0:24:49:cb:ff:78:54:21:30:92:69:f7: ef:21:e8:e5:f5:fe:7a:a5:f2:2e:88:67:36:4f:b3:12:70:20: 01:78:2c:fe -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgISAZt/8hKv2mNt6FGc8uoT6ZwBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNGEwOTY1MDRjZGJiOWYyZmI3ZmQwZTY2NDA2ZDUyNmZl MTBiNWEwHhcNMjYwMTAyMTgyMjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzI1NmY3MDY5OGRkMzNlZTBiYzUxZDMyMjg5ZTY0YmFmNWU0YWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9VFyl5ewjFB8TAiRYoBHwBEJFV5H Rx+nxKAdrxQKTlLKBHC8XuBXi1vMSQ72MYFZtA3Z6OC94E+9MaaOsrq0y4MI5zOA /4VVIA5EePBYMOpR2DKLb+od38E2b6YX1xYxMT9zuFChHHWoWrICvkNYSQjJogvb /y+yrxWynFjnAJrwL7qsxcWRaPknlCLmO14hRxccKJoBLiJOM3v46A/G+mMSH3RE m9IwvQNliZRsi/Sq7Kmn6L2VaPvzn2xxlXcmYYeJyIwWlgH+JrqMJjb2ukxUJwi7 s72G+Hm7YFHkTRC+k8vgs8DBplodA4Pp0614pSuh2AtpY/I/KGcL0T3KzwIDAQAB o4IC3DCCAtgwHQYDVR0OBBYEFPwlb3BpjdM+4LxR0yKJ5kuvXkrkMB8GA1UdIwQY MBaAFCBKCWUEzbufL7f9DmZAbVJv4QtaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUVvSlpRVE51NTh2dF8wT1prQnRVbV9oQzFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lMjUxZGMtOGIyYi00ZjNkLWI2MzYt MTU0MjI0Nzg4MDBiLzEvX0NWdmNHbU4wejdndkZIVElvbm1TNjllU3VRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9lMjUxZGMtOGIyYi00ZjNkLWI2MzYtMTU0MjI0Nzg4MDBi LzEvSUVvSlpRVE51NTh2dF8wT1prQnRVbV9oQzFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHxBggrBgEFBQcBBwEB/wSB4TCB3jCBxQQCAAEwgb4DBAMF KogDBAMfGSgDBAMlGTADBAMutogDBAU+mKAwDAMEAlPyJAMEBlPyAAMEA1tncAME BV12AAMEA1580AMEBF6w8AMEBJEOwAMEA5X5OAMEBJlcUAMEA6shsAMEArkDUAME ArkkeAMEArk9HAMEArlrBAMEAbls5gMEA7xd2AMEArz0ZAMEAsGXBAMEBMKMcAME AtRWsAMEAtRWuAMEAtWZRDAMAwQC1ZlMAwQF1ZlAAwQD2UKIAwQE2U6gMBQEAgAC MA4DBQAqAHnAAwUAKgIXsDANBgkqhkiG9w0BAQsFAAOCAQEAX/BgNX0H+TXMS19o 6fqwLt6FWR4wrMwNfAHXVWSlDpfkJJUninVrYhqD3enXXqd+EMLHt28tAjFWEjNh h0FMujzqS8KvAWLN1WOQOTk9c9DOCYFhXH5QBQqCMltkPcSXvtqvsZyhDmv0g7rv KwuD4KsBbv6889Qh+l3zhx8eCvk1Gn7iAob4WLel8ymwUGGnOnXlXr59p9RzcfsB P+sm0CDY5kG0qP9nWJawK4UBAPCDqQGjNIXmTvLrQ7xznB/ZK2bZC1SoekK2KURs NCWbYleQQcvMTbaGbFmo7qFToCRJy/94VCEwkmn37yHo5fX+eqXyLohnNk+zEnAg AXgs/g== -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:57 2026 by rpki-client