This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hJxuU1eAxAGyg9EVlVdhwZ106Uo.roa File: hJxuU1eAxAGyg9EVlVdhwZ106Uo.roa (raw, json) Hash identifier: QZLT3Wqk9QoEs7/JESRGZ/Qf95eZvVs2hwWf7BmM8XY= Subject key identifier: 84:9C:6E:53:57:80:C4:01:B2:83:D1:15:95:57:61:C1:9D:74:E9:4A Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F854677454E2A987FF28370DD54B994 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hJxuU1eAxAGyg9EVlVdhwZ106Uo.roa Signing time: Fri 02 Jan 2026 16:23:19 +0000 ROA not before: Fri 02 Jan 2026 16:23:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26383 IP address blocks: 62.76.232.0/24 maxlen: 24 62.76.234.0/24 maxlen: 24 62.76.238.0/24 maxlen: 24 62.76.239.0/24 maxlen: 24 192.124.175.0/24 maxlen: 24 192.124.176.0/24 maxlen: 24 192.124.209.0/24 maxlen: 24 193.108.112.0/24 maxlen: 24 193.124.2.0/24 maxlen: 24 193.124.22.0/24 maxlen: 24 193.124.41.0/24 maxlen: 24 193.124.46.0/24 maxlen: 24 194.58.38.0/24 maxlen: 24 194.58.39.0/24 maxlen: 24 194.58.40.0/24 maxlen: 24 194.58.59.0/24 maxlen: 24 194.58.66.0/24 maxlen: 24 194.58.68.0/24 maxlen: 24 194.87.2.0/24 maxlen: 24 194.87.10.0/24 maxlen: 24 194.87.17.0/24 maxlen: 24 194.87.18.0/24 maxlen: 24 194.87.23.0/24 maxlen: 24 194.87.30.0/24 maxlen: 24 194.87.39.0/24 maxlen: 24 194.87.41.0/24 maxlen: 24 194.87.47.0/24 maxlen: 24 194.87.48.0/24 maxlen: 24 194.87.58.0/24 maxlen: 24 194.87.73.0/24 maxlen: 24 194.87.82.0/24 maxlen: 24 194.87.89.0/24 maxlen: 24 194.87.105.0/24 maxlen: 24 194.87.106.0/24 maxlen: 24 194.87.108.0/24 maxlen: 24 194.87.123.0/24 maxlen: 24 194.87.125.0/24 maxlen: 24 194.87.128.0/24 maxlen: 24 194.87.137.0/24 maxlen: 24 194.87.162.0/24 maxlen: 24 194.87.178.0/24 maxlen: 24 194.87.198.0/24 maxlen: 24 194.87.227.0/24 maxlen: 24 194.87.230.0/24 maxlen: 24 194.87.240.0/24 maxlen: 24 194.87.245.0/24 maxlen: 24 195.58.47.0/24 maxlen: 24 195.133.55.0/24 maxlen: 24 195.133.67.0/24 maxlen: 24 195.133.83.0/24 maxlen: 24 195.133.92.0/24 maxlen: 24 212.192.221.0/24 maxlen: 24 212.192.223.0/24 maxlen: 24 212.193.1.0/24 maxlen: 24 212.193.2.0/24 maxlen: 24 212.193.6.0/24 maxlen: 24 212.193.18.0/24 maxlen: 24 212.193.20.0/24 maxlen: 24 212.193.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:46:77:45:4e:2a:98:7f:f2:83:70:dd:54:b9:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=849c6e535780c401b283d115955761c19d74e94a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4b:be:42:a5:2d:79:56:da:2b:f9:25:f6:f1: 25:b5:6e:97:a3:a3:68:e9:64:b8:aa:21:fb:66:e1: 09:a4:34:eb:c8:63:ff:68:ef:26:01:94:16:2f:c4: 93:7e:d6:95:23:7c:f4:fb:7c:e4:71:e9:30:77:8c: 3f:1f:81:24:08:df:9d:37:5a:ae:fe:01:6c:2d:e0: a0:3c:69:2e:46:1c:3e:14:c5:1b:c8:b5:b0:ed:16: 08:92:4b:21:10:4a:f7:9c:81:a1:5d:2d:6e:c9:e4: 41:e1:03:e8:7c:28:1a:28:95:bf:0c:77:dd:f3:c6: 3f:25:f4:a8:82:03:68:cd:65:fc:b3:68:89:90:e8: 4a:35:13:d0:8a:9f:90:bb:4e:17:20:7f:48:30:f6: 2f:2f:77:9d:69:64:c9:8a:aa:0f:c2:59:4b:f1:6e: 9d:51:8a:84:0f:22:c9:2e:1f:8b:83:24:d2:49:93: b4:7c:fc:03:c5:2e:e7:a8:76:fd:61:09:0f:49:70: 0d:ce:aa:ef:a0:91:30:49:02:59:bf:10:5a:9d:e7: 7c:88:c5:0e:4b:18:d3:64:eb:41:50:17:3d:4b:e7: 6c:dc:cc:5e:af:c4:df:6c:16:39:d4:4c:27:2b:35: ce:9d:64:f6:f1:da:83:27:08:a4:d1:04:11:a8:82: 9e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9C:6E:53:57:80:C4:01:B2:83:D1:15:95:57:61:C1:9D:74:E9:4A X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hJxuU1eAxAGyg9EVlVdhwZ106Uo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.232.0/24 62.76.234.0/24 62.76.238.0/23 192.124.175.0-192.124.176.255 192.124.209.0/24 193.108.112.0/24 193.124.2.0/24 193.124.22.0/24 193.124.41.0/24 193.124.46.0/24 194.58.38.0-194.58.40.255 194.58.59.0/24 194.58.66.0/24 194.58.68.0/24 194.87.2.0/24 194.87.10.0/24 194.87.17.0-194.87.18.255 194.87.23.0/24 194.87.30.0/24 194.87.39.0/24 194.87.41.0/24 194.87.47.0-194.87.48.255 194.87.58.0/24 194.87.73.0/24 194.87.82.0/24 194.87.89.0/24 194.87.105.0-194.87.106.255 194.87.108.0/24 194.87.123.0/24 194.87.125.0/24 194.87.128.0/24 194.87.137.0/24 194.87.162.0/24 194.87.178.0/24 194.87.198.0/24 194.87.227.0/24 194.87.230.0/24 194.87.240.0/24 194.87.245.0/24 195.58.47.0/24 195.133.55.0/24 195.133.67.0/24 195.133.83.0/24 195.133.92.0/24 212.192.221.0/24 212.192.223.0/24 212.193.1.0-212.193.2.255 212.193.6.0/24 212.193.18.0/24 212.193.20.0/24 212.193.23.0/24 Signature Algorithm: sha256WithRSAEncryption 44:69:91:ce:a5:43:79:eb:f0:b9:8e:be:33:9c:e8:5e:e7:72: 00:b8:f2:e2:69:af:ea:5e:21:b4:e9:04:27:dc:ee:84:f3:70: f4:e7:41:9b:f6:c7:b5:e6:5a:58:40:15:a0:7e:f8:6a:c9:60: 8d:b0:73:5b:b9:26:fa:dc:e9:d5:4b:79:2a:46:55:15:f0:e1: 90:f6:68:1d:f1:32:7c:9d:da:fc:f1:ed:0f:9a:81:39:97:a8: a1:da:12:4b:10:75:5c:a1:76:cf:5a:08:a3:e3:fa:2f:6f:22: 86:1f:ef:a7:5c:f1:be:70:00:ca:32:1f:50:1a:d6:98:e3:f4: 74:93:54:f6:32:80:18:06:6a:5a:18:a5:e2:81:c9:ca:37:30: 68:d3:17:fd:02:b4:e0:4f:21:51:2f:f5:b3:39:cd:22:a2:43: 33:9a:5e:ee:b4:d4:fc:92:15:7b:39:c0:c5:8c:f8:37:10:16: 9b:c4:d7:da:4b:71:03:32:d1:fb:5f:03:2e:32:ba:5f:a0:f2: be:12:9a:84:64:06:26:68:21:47:d2:3b:64:96:fd:a0:32:75: 99:4c:4c:d1:2b:43:5e:72:fd:52:ce:ee:de:59:fa:21:46:a6: e2:26:c7:d3:32:3e:9c:53:c6:a7:c2:ff:83:5e:5c:ca:b7:47: 28:53:03:4e -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgISAZt/hUZ3RU4qmH/yg3DdVLmUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDljNmU1MzU3ODBjNDAxYjI4M2QxMTU5NTU3NjFjMTlkNzRlOTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUu+QqUteVbaK/kl9vEltW6Xo6No 6WS4qiH7ZuEJpDTryGP/aO8mAZQWL8STftaVI3z0+3zkcekwd4w/H4EkCN+dN1qu /gFsLeCgPGkuRhw+FMUbyLWw7RYIkkshEEr3nIGhXS1uyeRB4QPofCgaKJW/DHfd 88Y/JfSoggNozWX8s2iJkOhKNRPQip+Qu04XIH9IMPYvL3edaWTJiqoPwllL8W6d UYqEDyLJLh+LgyTSSZO0fPwDxS7nqHb9YQkPSXANzqrvoJEwSQJZvxBaned8iMUO SxjTZOtBUBc9S+ds3Mxer8TfbBY51EwnKzXOnWT28dqDJwik0QQRqIKeBwIDAQAB o4IDbzCCA2swHQYDVR0OBBYEFIScblNXgMQBsoPRFZVXYcGddOlKMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvaEp4dVUxZUF4QUd5ZzlFVmxWZGh3WjEwNlVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBgwYIKwYBBQUHAQcBAf8EggFyMIIBbjCCAWoEAgABMIIB YgMEAD5M6AMEAD5M6gMEAT5M7jAMAwQAwHyvAwQAwHywAwQAwHzRAwQAwWxwAwQA wXwCAwQAwXwWAwQAwXwpAwQAwXwuMAwDBAHCOiYDBADCOigDBADCOjsDBADCOkID BADCOkQDBADCVwIDBADCVwowDAMEAMJXEQMEAMJXEgMEAMJXFwMEAMJXHgMEAMJX JwMEAMJXKTAMAwQAwlcvAwQAwlcwAwQAwlc6AwQAwldJAwQAwldSAwQAwldZMAwD BADCV2kDBADCV2oDBADCV2wDBADCV3sDBADCV30DBADCV4ADBADCV4kDBADCV6ID BADCV7IDBADCV8YDBADCV+MDBADCV+YDBADCV/ADBADCV/UDBADDOi8DBADDhTcD BADDhUMDBADDhVMDBADDhVwDBADUwN0DBADUwN8wDAMEANTBAQMEANTBAgMEANTB BgMEANTBEgMEANTBFAMEANTBFzANBgkqhkiG9w0BAQsFAAOCAQEARGmRzqVDeevw uY6+M5zoXudyALjy4mmv6l4htOkEJ9zuhPNw9OdBm/bHteZaWEAVoH74aslgjbBz W7km+tzp1Ut5KkZVFfDhkPZoHfEyfJ3a/PHtD5qBOZeoodoSSxB1XKF2z1oIo+P6 L28ihh/vp1zxvnAAyjIfUBrWmOP0dJNU9jKAGAZqWhil4oHJyjcwaNMX/QK04E8h US/1sznNIqJDM5pe7rTU/JIVeznAxYz4NxAWm8TX2ktxAzLR+18DLjK6X6DyvhKa hGQGJmghR9I7ZJb9oDJ1mUxM0StDXnL9Us7u3ln6IUam4ibH0zI+nFPGp8L/g15c yrdHKFMDTg== -----END CERTIFICATE-----Generated at Fri Jan 9 08:22:19 2026 by rpki-client