This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/66guKTDTss6EYTkw4zccY7WRZk8.roa File: 66guKTDTss6EYTkw4zccY7WRZk8.roa (raw, json) Hash identifier: KdTmBbtAcuQvls4uo/l+c91NBEA+S2/Wj6SH3gT/NAo= Subject key identifier: EB:A8:2E:29:30:D3:B2:CE:84:61:39:30:E3:37:1C:63:B5:91:66:4F Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5 Certificate serial: 019B7F158263DA9FA161124C0620C3710A32 Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/66guKTDTss6EYTkw4zccY7WRZk8.roa Signing time: Fri 02 Jan 2026 14:21:14 +0000 ROA not before: Fri 02 Jan 2026 14:21:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13213 IP address blocks: 5.63.144.0/21 maxlen: 21 37.130.224.0/21 maxlen: 24 146.185.16.0/20 maxlen: 20 185.2.136.0/22 maxlen: 22 2a01:5a80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:82:63:da:9f:a1:61:12:4c:06:20:c3:71:0a:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5 Validity Not Before: Jan 2 14:21:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eba82e2930d3b2ce84613930e3371c63b591664f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:26:1a:8f:14:e5:0a:b1:a8:bd:f4:f4:c7:6c: 8b:df:38:d4:61:78:63:c0:12:d2:60:fc:c4:7a:7c: 4b:1d:76:76:6e:7b:3d:bb:2b:af:12:05:8b:bf:4e: 57:ba:1b:e6:a3:53:58:1e:fb:5b:b8:ed:66:5f:f3: e5:35:8b:0f:46:fd:78:f2:95:8b:d1:88:cc:c0:7a: f7:10:7c:a2:04:c7:f8:3d:7c:b4:19:26:99:6d:1d: 36:59:20:57:e6:d0:9c:f0:32:bd:82:c9:22:47:47: b7:2e:66:de:b0:7c:e3:29:46:9d:5d:31:dd:26:69: 1b:f1:ea:e8:c3:b3:8f:4a:e9:65:9e:03:96:33:35: 60:b5:38:24:a4:28:6c:7c:fd:60:cb:f4:52:6e:c9: 10:a6:ac:8f:04:1a:f1:d9:cb:4b:bb:c0:43:18:d7: 16:5e:2c:e3:b1:99:8b:7d:be:e3:58:90:1c:c9:5b: 75:0b:c3:93:8f:12:5b:a6:36:09:bc:e1:89:50:18: 84:6f:ab:fb:b4:d3:77:db:5a:fc:4f:86:d7:74:42: 3c:96:58:8a:41:e9:8a:97:ad:d2:f6:dc:aa:28:f9: d3:7f:83:e9:25:3d:48:c6:ec:71:80:36:6d:83:36: eb:cf:ba:96:91:cd:8b:55:f8:3e:96:7f:72:b3:53: 19:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A8:2E:29:30:D3:B2:CE:84:61:39:30:E3:37:1C:63:B5:91:66:4F X509v3 Authority Key Identifier: keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/66guKTDTss6EYTkw4zccY7WRZk8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.63.144.0/21 37.130.224.0/21 146.185.16.0/20 185.2.136.0/22 IPv6: 2a01:5a80::/32 Signature Algorithm: sha256WithRSAEncryption 89:35:be:f0:ce:d3:94:23:7c:86:fd:61:fd:ef:a9:74:6b:2c: 95:c1:b4:d8:e0:5d:90:16:4f:77:b8:93:48:47:35:15:df:dc: 6b:2e:d1:6c:0a:97:eb:14:5a:16:f4:a6:25:58:8e:94:a2:9e: 5f:78:c5:d3:b4:73:fe:18:3f:c3:94:8e:46:7f:6f:0f:25:2c: b1:0b:11:c6:99:3d:d5:be:39:66:25:5a:3c:24:ab:fe:69:c9: 59:7f:e7:93:81:a4:b9:5a:2d:d1:1d:98:ac:81:0c:63:e9:48: 4d:12:98:03:3e:e5:3c:75:2c:14:69:39:cc:a0:88:97:04:45: 9f:84:f3:a2:29:f5:5c:87:7c:c0:c3:4e:27:b7:eb:df:01:17: f5:c9:21:42:07:65:14:a1:e9:9a:78:25:bf:eb:63:91:64:c8: 48:b2:9f:4f:45:1e:a9:d3:9c:77:93:20:a2:a3:40:d8:fb:8b: 6e:ab:7d:e1:7d:2b:f0:d0:9b:e5:d8:cb:b7:c7:fa:3b:9c:dd: 9f:e3:2f:34:5d:6f:00:21:98:b9:71:58:f4:52:d7:65:34:38: 36:15:82:cb:24:79:20:df:d9:55:52:10:c1:28:8a:de:db:34: 98:f5:b3:1c:e7:10:03:9c:e2:24:c9:1e:d2:bc:a5:76:fd:a9: 84:46:5e:43 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt/FYJj2p+hYRJMBiDDcQoyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNDEwNzJlZTFhMWIxYzA2ODQxMmRmYjAzNTVkMjc1OTkz MmM1ZjUwHhcNMjYwMTAyMTQyMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmE4MmUyOTMwZDNiMmNlODQ2MTM5MzBlMzM3MWM2M2I1OTE2NjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CYajxTlCrGovfT0x2yL3zjUYXhj wBLSYPzEenxLHXZ2bns9uyuvEgWLv05Xuhvmo1NYHvtbuO1mX/PlNYsPRv148pWL 0YjMwHr3EHyiBMf4PXy0GSaZbR02WSBX5tCc8DK9gskiR0e3LmbesHzjKUadXTHd Jmkb8erow7OPSullngOWMzVgtTgkpChsfP1gy/RSbskQpqyPBBrx2ctLu8BDGNcW XizjsZmLfb7jWJAcyVt1C8OTjxJbpjYJvOGJUBiEb6v7tNN321r8T4bXdEI8lliK QemKl63S9tyqKPnTf4PpJT1IxuxxgDZtgzbrz7qWkc2LVfg+ln9ys1MZOwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFOuoLikw07LOhGE5MOM3HGO1kWZPMB8GA1UdIwQY MBaAFGBBBy7hobHAaEEt+wNV0nWZMsX1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUVFSEx1R2hzY0JvUVMzN0ExWFNkWmt5eGZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84ZGZhMzAtMmE4NS00YjQ2LTk1MzMt NGQ1Zjc2MzdlZmNlLzEvNjZndUtURFRzczZFWVRrdzR6Y2NZN1dSWms4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84ZGZhMzAtMmE4NS00YjQ2LTk1MzMtNGQ1Zjc2MzdlZmNl LzEvWUVFSEx1R2hzY0JvUVMzN0ExWFNkWmt5eGZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDBT+QAwQD JYLgAwQEkrkQAwQCuQKIMA0EAgACMAcDBQAqAVqAMA0GCSqGSIb3DQEBCwUAA4IB AQCJNb7wztOUI3yG/WH976l0ayyVwbTY4F2QFk93uJNIRzUV39xrLtFsCpfrFFoW 9KYlWI6Uop5feMXTtHP+GD/DlI5Gf28PJSyxCxHGmT3VvjlmJVo8JKv+aclZf+eT gaS5Wi3RHZisgQxj6UhNEpgDPuU8dSwUaTnMoIiXBEWfhPOiKfVch3zAw04nt+vf ARf1ySFCB2UUoemaeCW/62ORZMhIsp9PRR6p05x3kyCio0DY+4tuq33hfSvw0Jvl 2Mu3x/o7nN2f4y80XW8AIZi5cVj0UtdlNDg2FYLLJHkg39lVUhDBKIre2zSY9bMc 5xADnOIkyR7SvKV2/amERl5D -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:40 2026 by rpki-client