This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/r8HxmQ3g_5jIfQo7ijU7aYs5sZc.roa File: r8HxmQ3g_5jIfQo7ijU7aYs5sZc.roa (raw, json) Hash identifier: Jn0wI2FXl9LeQTrWeznCK4MWTHwyR2VAZ3DGC1w3P+k= Subject key identifier: AF:C1:F1:99:0D:E0:FF:98:C8:7D:0A:3B:8A:35:3B:69:8B:39:B1:97 Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e Certificate serial: 019BFF05E4FD45BB06C884C3C21B5D9AB6E0 Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/r8HxmQ3g_5jIfQo7ijU7aYs5sZc.roa Signing time: Tue 27 Jan 2026 10:35:34 +0000 ROA not before: Tue 27 Jan 2026 10:35:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203020 IP address blocks: 45.142.24.0/24 maxlen: 24 91.217.72.0/23 maxlen: 32 103.93.40.0/24 maxlen: 32 103.93.41.0/24 maxlen: 32 103.93.42.0/24 maxlen: 32 103.93.43.0/24 maxlen: 32 103.111.0.0/22 maxlen: 32 103.124.164.0/24 maxlen: 32 103.124.166.0/24 maxlen: 32 103.204.120.0/24 maxlen: 32 103.204.122.0/24 maxlen: 32 103.204.123.0/24 maxlen: 32 109.104.132.0/24 maxlen: 32 109.104.133.0/24 maxlen: 32 109.104.156.0/24 maxlen: 32 109.104.158.0/24 maxlen: 32 109.104.159.0/24 maxlen: 32 185.153.124.0/22 maxlen: 32 185.233.124.0/22 maxlen: 32 194.113.94.0/23 maxlen: 32 199.168.120.0/24 maxlen: 32 199.168.121.0/24 maxlen: 32 199.168.122.0/24 maxlen: 32 199.168.123.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:05:e4:fd:45:bb:06:c8:84:c3:c2:1b:5d:9a:b6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e Validity Not Before: Jan 27 10:35:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afc1f1990de0ff98c87d0a3b8a353b698b39b197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ec:94:bc:cb:e6:0d:ee:79:4d:43:8a:8e:52: 5e:90:c5:17:c4:8d:c6:8c:03:16:f5:71:8f:78:dd: 7b:5d:6f:61:a9:25:b2:7a:8f:65:4c:a6:33:69:ad: 12:d2:85:f1:76:65:ba:d3:59:a5:af:5b:1c:df:85: 67:1e:e6:4c:a9:bc:6f:20:48:6c:43:45:d3:75:b3: f0:9c:9f:0e:68:0a:75:80:4a:9e:0d:dc:9f:61:be: dd:cd:6d:e4:7d:5c:41:35:50:e3:14:21:97:73:d1: 04:44:01:f4:b7:cd:1a:a2:b2:1b:a9:76:9c:d0:b5: 54:fc:e2:76:a6:c1:ae:66:23:a6:4b:60:47:0f:eb: e7:cf:af:e8:b6:4a:b4:b0:8b:84:7a:05:f6:ec:da: b4:4f:be:7f:41:f0:7c:99:70:7b:82:d6:b0:ef:c3: f3:f1:77:1b:75:8b:a4:c0:3e:f4:f7:ca:a7:4f:48: ad:0f:36:fe:7f:2c:d7:dd:5b:58:ca:ac:aa:18:3d: ce:05:ff:64:4a:1b:69:c8:e2:06:37:14:a9:28:6b: 13:a5:58:bb:60:5d:8a:7a:79:73:72:db:a2:d3:60: f5:08:db:3d:31:3b:e2:d6:3f:b2:cb:be:e5:e5:37: 13:d3:6c:6f:7f:33:1b:51:cc:49:89:26:06:19:80: e8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C1:F1:99:0D:E0:FF:98:C8:7D:0A:3B:8A:35:3B:69:8B:39:B1:97 X509v3 Authority Key Identifier: keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/r8HxmQ3g_5jIfQo7ijU7aYs5sZc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.24.0/24 91.217.72.0/23 103.93.40.0/22 103.111.0.0/22 103.124.164.0/24 103.124.166.0/24 103.204.120.0/24 103.204.122.0/23 109.104.132.0/23 109.104.156.0/24 109.104.158.0/23 185.153.124.0/22 185.233.124.0/22 194.113.94.0/23 199.168.120.0/22 Signature Algorithm: sha256WithRSAEncryption 35:e3:1e:32:cc:22:d7:d1:88:f7:a4:4b:84:6b:bd:a6:be:75: cd:1b:f4:fb:8a:d4:e8:f3:c4:1f:ef:82:54:03:7e:47:62:7b: 35:0c:9e:db:28:c2:52:f7:61:6c:6d:80:4b:ab:6e:40:a9:7e: 74:b1:63:fa:85:1b:74:94:d6:2e:8b:2e:3e:da:4b:dc:35:66: b9:ce:23:15:06:b5:bf:0d:87:af:f8:ad:6d:4b:ee:04:a3:c0: 1a:a8:f0:91:d3:34:80:b1:50:8f:b1:b9:97:2e:8b:a9:4f:28: e4:b9:07:d6:6b:16:5c:6a:72:08:45:86:dc:1d:63:2f:64:a2: f7:7a:a1:51:27:6b:82:26:8e:78:02:d0:d1:18:b3:d5:4a:29: 7d:82:3b:7b:85:c1:4f:d0:9d:3f:c0:b5:7e:51:eb:72:69:48: 7a:b7:21:62:b9:30:a0:1f:9d:4b:dd:4b:cd:91:56:f7:dc:e6: 47:8c:03:d1:05:4d:56:8f:fe:5a:3b:94:36:69:18:c0:bd:f8: cc:c3:73:c3:4d:80:a8:48:d7:91:f4:30:ff:2e:54:bc:26:59: 93:a8:ef:13:04:74:46:20:45:8d:b9:62:2f:3e:51:e4:0a:06: c9:53:0a:6e:30:08:dc:95:e9:d1:62:6c:ee:17:50:dc:d7:21: 45:35:e9:40 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZv/BeT9RbsGyITDwhtdmrbgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNGFkNDUzNWFjODhkZDUzNDE5OWYyYTcyNjA5NWFmNzFh ZmU0NGUwHhcNMjYwMTI3MTAzNTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmMxZjE5OTBkZTBmZjk4Yzg3ZDBhM2I4YTM1M2I2OThiMzliMTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOyUvMvmDe55TUOKjlJekMUXxI3G jAMW9XGPeN17XW9hqSWyeo9lTKYzaa0S0oXxdmW601mlr1sc34VnHuZMqbxvIEhs Q0XTdbPwnJ8OaAp1gEqeDdyfYb7dzW3kfVxBNVDjFCGXc9EERAH0t80aorIbqXac 0LVU/OJ2psGuZiOmS2BHD+vnz6/otkq0sIuEegX27Nq0T75/QfB8mXB7gtaw78Pz 8XcbdYukwD7098qnT0itDzb+fyzX3VtYyqyqGD3OBf9kShtpyOIGNxSpKGsTpVi7 YF2Kenlzctui02D1CNs9MTvi1j+yy77l5TcT02xvfzMbUcxJiSYGGYDo5QIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFK/B8ZkN4P+YyH0KO4o1O2mLObGXMB8GA1UdIwQY MBaAFGJK1FNayI3VNBmfKnJgla9xr+ROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTct ZmI1OTQ5ODA4ZGRjLzEvcjhIeG1RM2dfNWpJZlFvN2lqVTdhWXM1c1pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTctZmI1OTQ5ODA4ZGRj LzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQALY4YAwQB W9lIAwQCZ10oAwQCZ28AAwQAZ3ykAwQAZ3ymAwQAZ8x4AwQBZ8x6AwQBbWiEAwQA bWicAwQBbWieAwQCuZl8AwQCuel8AwQBwnFeAwQCx6h4MA0GCSqGSIb3DQEBCwUA A4IBAQA14x4yzCLX0Yj3pEuEa72mvnXNG/T7itTo88Qf74JUA35HYns1DJ7bKMJS 92FsbYBLq25AqX50sWP6hRt0lNYuiy4+2kvcNWa5ziMVBrW/DYev+K1tS+4Eo8Aa qPCR0zSAsVCPsbmXLoupTyjkuQfWaxZcanIIRYbcHWMvZKL3eqFRJ2uCJo54AtDR GLPVSil9gjt7hcFP0J0/wLV+UetyaUh6tyFiuTCgH51L3UvNkVb33OZHjAPRBU1W j/5aO5Q2aRjAvfjMw3PDTYCoSNeR9DD/LlS8JlmTqO8TBHRGIEWNuWIvPlHkCgbJ UwpuMAjclenRYmzuF1Dc1yFFNelA -----END CERTIFICATE-----Generated at Tue Feb 10 05:29:55 2026 by rpki-client