This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ARwGUpfYL3gJWeXaBiyfgmx-3qc.roa File: ARwGUpfYL3gJWeXaBiyfgmx-3qc.roa (raw, json) Hash identifier: CprQhlIvEuAXENFFiriR134NX+LW6jlZR8a3rrmzCpo= Subject key identifier: 01:1C:06:52:97:D8:2F:78:09:59:E5:DA:06:2C:9F:82:6C:7E:DE:A7 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F854D8C01FD5FCBF677DA681421C1DB Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ARwGUpfYL3gJWeXaBiyfgmx-3qc.roa Signing time: Fri 02 Jan 2026 16:23:21 +0000 ROA not before: Fri 02 Jan 2026 16:23:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44559 IP address blocks: 62.76.226.0/24 maxlen: 24 62.76.231.0/24 maxlen: 24 62.76.235.0/24 maxlen: 24 192.124.183.0/24 maxlen: 24 192.124.188.0/24 maxlen: 24 193.124.3.0/24 maxlen: 24 193.124.6.0/24 maxlen: 24 193.124.8.0/24 maxlen: 24 193.124.91.0/24 maxlen: 24 193.124.94.0/24 maxlen: 24 194.58.43.0/24 maxlen: 24 194.58.60.0/24 maxlen: 24 194.58.67.0/24 maxlen: 24 194.87.3.0/24 maxlen: 24 194.87.6.0/24 maxlen: 24 194.87.7.0/24 maxlen: 24 194.87.16.0/24 maxlen: 24 194.87.34.0/24 maxlen: 24 194.87.36.0/24 maxlen: 24 194.87.42.0/24 maxlen: 24 194.87.63.0/24 maxlen: 24 194.87.116.0/24 maxlen: 24 194.87.117.0/24 maxlen: 24 194.87.120.0/24 maxlen: 24 194.87.121.0/24 maxlen: 24 194.87.160.0/24 maxlen: 24 194.87.163.0/24 maxlen: 24 194.87.165.0/24 maxlen: 24 194.87.166.0/24 maxlen: 24 194.87.176.0/24 maxlen: 24 194.87.177.0/24 maxlen: 24 194.87.180.0/24 maxlen: 24 194.87.181.0/24 maxlen: 24 194.87.182.0/24 maxlen: 24 194.135.23.0/24 maxlen: 24 195.58.55.0/24 maxlen: 24 195.58.56.0/24 maxlen: 24 195.58.59.0/24 maxlen: 24 195.58.62.0/24 maxlen: 24 195.133.12.0/24 maxlen: 24 195.133.56.0/24 maxlen: 24 195.133.60.0/24 maxlen: 24 195.133.61.0/24 maxlen: 24 195.133.80.0/24 maxlen: 24 195.133.82.0/24 maxlen: 24 212.192.210.0/24 maxlen: 24 212.192.211.0/24 maxlen: 24 212.192.251.0/24 maxlen: 24 212.193.10.0/24 maxlen: 24 212.193.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:4d:8c:01:fd:5f:cb:f6:77:da:68:14:21:c1:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=011c065297d82f780959e5da062c9f826c7edea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e1:3c:f0:9c:c9:c3:7f:71:5a:da:91:b0:78: b2:2b:5b:4f:20:95:34:be:c2:93:1e:94:e8:86:f0: 4d:ea:f6:3b:6d:32:70:ca:80:b8:77:df:39:99:c9: c7:41:22:8e:8e:de:cb:ab:6c:42:cc:72:cb:41:1e: 95:c0:39:22:c4:80:a0:98:cd:9a:02:93:b0:49:7f: 2f:e1:11:7c:47:cb:e5:45:09:64:b1:4c:14:79:d5: 7d:b7:02:8e:52:d1:60:07:f5:e6:4e:ff:fd:d4:5b: 74:b5:48:f9:51:d1:87:d9:02:48:78:c1:f8:ff:6b: 23:1e:f6:84:ac:6a:2c:fa:e3:81:51:ba:7e:65:ee: 53:cb:67:0e:b8:e9:39:40:47:ed:0f:14:d9:37:8e: 61:9b:b3:cf:f5:d2:26:c9:67:9c:aa:1a:33:2e:13: 44:d4:3a:72:4e:79:70:19:54:31:5e:e6:53:6f:73: 96:ec:b6:5f:a7:01:e9:02:fd:52:d1:c4:15:73:f8: 88:76:60:cc:d7:d5:31:61:0d:ce:23:30:7a:d3:ec: 13:d1:f9:f3:92:af:48:c7:22:b7:8f:6c:6a:79:b3: 7e:48:bb:a4:be:33:19:75:d4:56:43:7b:01:01:50: 45:1c:2c:20:e5:2c:a4:c2:04:f4:94:aa:97:d1:5f: 1e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1C:06:52:97:D8:2F:78:09:59:E5:DA:06:2C:9F:82:6C:7E:DE:A7 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ARwGUpfYL3gJWeXaBiyfgmx-3qc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.226.0/24 62.76.231.0/24 62.76.235.0/24 192.124.183.0/24 192.124.188.0/24 193.124.3.0/24 193.124.6.0/24 193.124.8.0/24 193.124.91.0/24 193.124.94.0/24 194.58.43.0/24 194.58.60.0/24 194.58.67.0/24 194.87.3.0/24 194.87.6.0/23 194.87.16.0/24 194.87.34.0/24 194.87.36.0/24 194.87.42.0/24 194.87.63.0/24 194.87.116.0/23 194.87.120.0/23 194.87.160.0/24 194.87.163.0/24 194.87.165.0-194.87.166.255 194.87.176.0/23 194.87.180.0-194.87.182.255 194.135.23.0/24 195.58.55.0-195.58.56.255 195.58.59.0/24 195.58.62.0/24 195.133.12.0/24 195.133.56.0/24 195.133.60.0/23 195.133.80.0/24 195.133.82.0/24 212.192.210.0/23 212.192.251.0/24 212.193.10.0/24 212.193.15.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:d2:46:6c:be:0d:10:14:8a:86:4d:25:d8:a9:11:cd:95:e7: 93:0d:8a:a6:78:b4:7c:1a:0a:c0:47:3e:43:3e:3f:c4:d8:1f: 0e:2e:d6:4c:46:e8:01:2c:0b:f4:a1:36:1d:fe:b8:91:f0:f4: a1:a8:cf:d7:86:81:56:b3:b6:2d:05:db:45:cf:b0:dd:be:65: 43:93:c9:ab:61:7e:1e:72:ef:64:3e:08:c6:db:48:ef:9f:fa: 9c:67:90:1b:a5:7a:60:71:ab:b4:70:2c:15:f1:a2:ab:07:c7: f5:df:f6:51:47:c3:a2:58:b5:50:29:ea:9e:76:f9:14:5c:4d: 3f:e3:d2:be:72:a8:d1:3d:e6:87:c0:bd:74:af:15:15:da:42: 19:f6:72:cf:23:14:20:8c:6e:0c:ba:17:b0:d5:5e:e1:a4:a1: d5:30:df:a0:5d:b6:f4:7c:4c:e5:1d:a2:b2:70:9a:2e:91:7f: 49:4d:ad:d2:28:8d:91:8d:da:ad:66:80:3f:e9:19:62:98:3a: 4c:a6:89:3c:97:a3:b2:db:bf:43:7c:c9:f8:f6:07:ed:2d:24: 9e:6a:2e:fc:8d:bc:b4:72:57:91:aa:d7:0e:cb:8a:14:e3:b6: 07:6b:6e:63:06:37:7f:b1:4c:3c:48:bf:0f:88:f8:9c:d2:dc: 1e:dd:b5:7f -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgISAZt/hU2MAf1fy/Z32mgUIcHbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTFjMDY1Mjk3ZDgyZjc4MDk1OWU1ZGEwNjJjOWY4MjZjN2VkZWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OE88JzJw39xWtqRsHiyK1tPIJU0 vsKTHpTohvBN6vY7bTJwyoC4d985mcnHQSKOjt7Lq2xCzHLLQR6VwDkixICgmM2a ApOwSX8v4RF8R8vlRQlksUwUedV9twKOUtFgB/XmTv/91Ft0tUj5UdGH2QJIeMH4 /2sjHvaErGos+uOBUbp+Ze5Ty2cOuOk5QEftDxTZN45hm7PP9dImyWecqhozLhNE 1DpyTnlwGVQxXuZTb3OW7LZfpwHpAv1S0cQVc/iIdmDM19UxYQ3OIzB60+wT0fnz kq9IxyK3j2xqebN+SLukvjMZddRWQ3sBAVBFHCwg5SykwgT0lKqX0V8euwIDAQAB o4IDFTCCAxEwHQYDVR0OBBYEFAEcBlKX2C94CVnl2gYsn4Jsft6nMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvQVJ3R1VwZllMM2dKV2VYYUJpeWZnbXgtM3FjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBKQYIKwYBBQUHAQcBAf8EggEYMIIBFDCCARAEAgABMIIB CAMEAD5M4gMEAD5M5wMEAD5M6wMEAMB8twMEAMB8vAMEAMF8AwMEAMF8BgMEAMF8 CAMEAMF8WwMEAMF8XgMEAMI6KwMEAMI6PAMEAMI6QwMEAMJXAwMEAcJXBgMEAMJX EAMEAMJXIgMEAMJXJAMEAMJXKgMEAMJXPwMEAcJXdAMEAcJXeAMEAMJXoAMEAMJX ozAMAwQAwlelAwQAwlemAwQBwlewMAwDBALCV7QDBADCV7YDBADChxcwDAMEAMM6 NwMEAMM6OAMEAMM6OwMEAMM6PgMEAMOFDAMEAMOFOAMEAcOFPAMEAMOFUAMEAMOF UgMEAdTA0gMEANTA+wMEANTBCgMEANTBDzANBgkqhkiG9w0BAQsFAAOCAQEAHNJG bL4NEBSKhk0l2KkRzZXnkw2Kpni0fBoKwEc+Qz4/xNgfDi7WTEboASwL9KE2Hf64 kfD0oajP14aBVrO2LQXbRc+w3b5lQ5PJq2F+HnLvZD4IxttI75/6nGeQG6V6YHGr tHAsFfGiqwfH9d/2UUfDoli1UCnqnnb5FFxNP+PSvnKo0T3mh8C9dK8VFdpCGfZy zyMUIIxuDLoXsNVe4aSh1TDfoF229HxM5R2isnCaLpF/SU2t0iiNkY3arWaAP+kZ Ypg6TKaJPJejstu/Q3zJ+PYH7S0knmou/I28tHJXkarXDsuKFOO2B2tuYwY3f7FM PEi/D4j4nNLcHt21fw== -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:40 2026 by rpki-client