This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/B1Zr1yVrX6nGN-n-2veSg5lY90c.roa File: B1Zr1yVrX6nGN-n-2veSg5lY90c.roa (raw, json) Hash identifier: /ekoG7YdexMqrOET1yFg/w4l6gLiAl2o840WfcRTqPg= Subject key identifier: 07:56:6B:D7:25:6B:5F:A9:C6:37:E9:FE:DA:F7:92:83:99:58:F7:47 Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f Certificate serial: 019B7F831EB4F41E924B3E6D7B7AF723C961 Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/B1Zr1yVrX6nGN-n-2veSg5lY90c.roa Signing time: Fri 02 Jan 2026 16:20:57 +0000 ROA not before: Fri 02 Jan 2026 16:20:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199468 IP address blocks: 5.133.40.0/21 maxlen: 21 5.133.40.0/24 maxlen: 24 5.133.41.0/24 maxlen: 24 5.133.42.0/24 maxlen: 24 5.133.43.0/24 maxlen: 24 144.124.128.0/18 maxlen: 24 185.173.8.0/22 maxlen: 22 194.163.224.0/20 maxlen: 24 2a04:ed00::/29 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:1e:b4:f4:1e:92:4b:3e:6d:7b:7a:f7:23:c9:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f Validity Not Before: Jan 2 16:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07566bd7256b5fa9c637e9fedaf792839958f747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:60:96:6b:63:37:d6:44:d6:64:10:41:d4:83: d6:2b:45:4a:51:08:ab:00:fd:1e:eb:52:32:cd:f0: 9b:fb:ec:0a:ce:63:5f:75:e6:2e:0a:8b:aa:f3:b4: 50:8f:8a:bf:e2:eb:b5:f6:50:65:1b:b6:4a:7f:f9: e5:0c:54:9c:c4:49:2d:3d:01:a9:c4:65:4c:ce:4a: ee:99:bd:a6:c7:34:26:72:9f:a7:07:76:b5:88:62: dd:78:bb:8f:c6:a4:7f:c3:3a:a8:6d:4c:e5:ec:08: 85:6f:7a:89:bb:76:fe:a5:a8:f7:7d:c3:14:74:fb: 90:a3:38:23:71:f3:25:1d:df:01:6a:05:aa:fb:bd: 85:18:46:fe:38:b7:87:ab:6d:e9:df:48:bb:db:c4: 6b:15:cc:31:84:da:ad:5d:79:dc:67:2e:58:bb:dc: 3c:36:4f:8c:0f:b5:63:f5:65:2c:02:bd:47:09:c7: be:f1:78:43:1a:c0:a8:f2:2b:32:26:88:c8:b8:c4: 7c:f9:80:e6:bc:48:b7:b6:90:4d:fe:20:8c:56:7c: 0a:cf:e6:62:6e:7d:5d:b1:89:b1:c1:14:43:a7:67: 5a:a0:c1:8e:d4:83:67:5b:c1:d7:ee:16:df:13:7e: 63:ee:37:5a:d5:59:f6:9f:b8:a3:16:54:2d:62:0b: 56:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:56:6B:D7:25:6B:5F:A9:C6:37:E9:FE:DA:F7:92:83:99:58:F7:47 X509v3 Authority Key Identifier: keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/B1Zr1yVrX6nGN-n-2veSg5lY90c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.40.0/21 144.124.128.0/18 185.173.8.0/22 194.163.224.0/20 IPv6: 2a04:ed00::/29 Signature Algorithm: sha256WithRSAEncryption 8f:13:48:48:f8:9d:5f:b1:a1:58:0f:f5:74:8a:cb:8f:6c:b3: b0:88:4f:03:33:65:84:c7:5f:cf:a6:37:18:2c:07:71:fb:38: a3:39:26:38:f8:68:ce:ab:6b:2c:36:4a:3a:93:cc:57:3f:39: 02:c5:01:5c:dc:53:52:c3:ab:69:67:4a:c9:a7:2a:a4:1e:98: 7f:4e:9a:fd:e4:66:69:e8:b4:fb:57:be:a0:f1:7e:1b:fe:2b: 1d:a9:b9:33:30:51:c1:43:26:a5:5e:a9:5d:9e:78:29:d9:80: c1:e8:8c:69:8f:cd:b5:9e:46:0f:47:66:f4:c8:f8:59:71:53: d8:01:d6:1c:64:a7:02:36:56:4f:72:17:29:2b:1a:ee:e6:a5: ea:50:01:34:d7:2f:73:10:01:2f:f5:ee:45:bd:4f:b1:04:6b: cc:66:1d:c9:96:6a:27:2f:98:6a:2e:f8:b0:d9:42:3c:e2:76: eb:2e:a6:23:01:65:ab:f6:4a:41:3e:da:61:b7:80:74:0e:be: 6b:d7:10:f2:64:3d:f3:ae:97:c3:16:53:0f:b1:5e:c9:7c:90: c3:ce:d1:2f:6f:75:eb:27:75:2e:f4:6a:18:2a:9f:2c:a2:28: 6b:1f:f9:df:39:ed:9a:0c:64:2d:3b:a7:a9:a7:5f:57:97:60: 53:ce:80:74 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt/gx609B6SSz5te3r3I8lhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNTdjOGY4ZDllZTVlMmNlNzA0M2UxZWMyNmJiMTY5M2Y3 ZjEyMWYwHhcNMjYwMTAyMTYyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzU2NmJkNzI1NmI1ZmE5YzYzN2U5ZmVkYWY3OTI4Mzk5NThmNzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGCWa2M31kTWZBBB1IPWK0VKUQir AP0e61IyzfCb++wKzmNfdeYuCouq87RQj4q/4uu19lBlG7ZKf/nlDFScxEktPQGp xGVMzkrumb2mxzQmcp+nB3a1iGLdeLuPxqR/wzqobUzl7AiFb3qJu3b+paj3fcMU dPuQozgjcfMlHd8BagWq+72FGEb+OLeHq23p30i728RrFcwxhNqtXXncZy5Yu9w8 Nk+MD7Vj9WUsAr1HCce+8XhDGsCo8isyJojIuMR8+YDmvEi3tpBN/iCMVnwKz+Zi bn1dsYmxwRRDp2daoMGO1INnW8HX7hbfE35j7jda1Vn2n7ijFlQtYgtWowIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFAdWa9cla1+pxjfp/tr3koOZWPdHMB8GA1UdIwQY MBaAFFxXyPjZ7l4s5wQ+HsJrsWk/fxIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQt MWY2YjJkMTRmNGY5LzEvQjFacjF5VnJYNm5HTi1uLTJ2ZVNnNWxZOTBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQtMWY2YjJkMTRmNGY5 LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDBYUoAwQG kHyAAwQCua0IAwQEwqPgMA0EAgACMAcDBQMqBO0AMA0GCSqGSIb3DQEBCwUAA4IB AQCPE0hI+J1fsaFYD/V0isuPbLOwiE8DM2WEx1/PpjcYLAdx+zijOSY4+GjOq2ss Nko6k8xXPzkCxQFc3FNSw6tpZ0rJpyqkHph/Tpr95GZp6LT7V76g8X4b/isdqbkz MFHBQyalXqldnngp2YDB6Ixpj821nkYPR2b0yPhZcVPYAdYcZKcCNlZPchcpKxru 5qXqUAE01y9zEAEv9e5FvU+xBGvMZh3JlmonL5hqLviw2UI84nbrLqYjAWWr9kpB Ptpht4B0Dr5r1xDyZD3zrpfDFlMPsV7JfJDDztEvb3XrJ3Uu9GoYKp8soihrH/nf Oe2aDGQtO6epp19Xl2BTzoB0 -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:52 2026 by rpki-client