This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ilDZlg-EZciGpzXWwha2R4qmdI0.roa File: ilDZlg-EZciGpzXWwha2R4qmdI0.roa (raw, json) Hash identifier: KGYUBeFv5VZ7ADi8aoY1wnHELJQBW819HHHC5MJh4PU= Subject key identifier: 8A:50:D9:96:0F:84:65:C8:86:A7:35:D6:C2:16:B6:47:8A:A6:74:8D Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F8571BF43E4E3754B7F43311977B3CC Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ilDZlg-EZciGpzXWwha2R4qmdI0.roa Signing time: Fri 02 Jan 2026 16:23:30 +0000 ROA not before: Fri 02 Jan 2026 16:23:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214238 IP address blocks: 62.76.226.0/24 maxlen: 24 62.76.231.0/24 maxlen: 24 62.76.235.0/24 maxlen: 24 192.124.181.0/24 maxlen: 24 192.124.183.0/24 maxlen: 24 192.124.188.0/24 maxlen: 24 193.124.3.0/24 maxlen: 24 193.124.6.0/24 maxlen: 24 193.124.91.0/24 maxlen: 24 194.58.60.0/24 maxlen: 24 194.58.67.0/24 maxlen: 24 194.87.3.0/24 maxlen: 24 194.87.7.0/24 maxlen: 24 194.87.16.0/24 maxlen: 24 194.87.24.0/24 maxlen: 24 194.87.36.0/24 maxlen: 24 194.87.90.0/24 maxlen: 24 194.87.165.0/24 maxlen: 24 194.87.166.0/24 maxlen: 24 194.135.23.0/24 maxlen: 24 195.58.55.0/24 maxlen: 24 195.133.12.0/24 maxlen: 24 195.133.56.0/24 maxlen: 24 195.133.60.0/24 maxlen: 24 195.133.61.0/24 maxlen: 24 212.193.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:71:bf:43:e4:e3:75:4b:7f:43:31:19:77:b3:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a50d9960f8465c886a735d6c216b6478aa6748d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1d:ba:82:e6:9e:e9:ae:55:a1:2b:77:7e:eb: 5a:2d:af:45:4b:11:c4:05:62:cc:cb:99:21:ae:66: c7:15:5b:bc:8d:b8:c2:24:17:ea:88:38:17:68:06: 77:87:3a:bb:f0:5e:3b:8a:ff:7b:27:6d:3f:5e:0a: 50:6b:fb:92:49:b4:d1:db:cc:bb:da:2f:83:92:a8: fd:c5:3b:eb:1e:7e:43:51:5f:e5:86:d0:86:35:48: 6f:a1:f9:d2:01:05:e6:ea:3e:68:83:ac:4d:c2:b5: 91:5b:46:d9:22:99:c3:cd:e9:fe:a6:2f:52:5d:56: 1d:e4:08:64:b0:4e:11:1c:c4:2e:86:52:0f:01:33: 96:37:01:6c:6a:aa:a2:24:7f:95:a7:65:59:66:dc: fe:db:8c:fa:c1:78:b3:7e:46:1e:c2:28:90:94:e4: eb:7e:1a:8b:10:ca:28:44:51:62:06:e9:2e:83:d6: d5:d7:4b:9b:ac:09:0d:f2:14:00:eb:f2:81:73:cc: 69:8e:7f:66:ac:ea:53:ca:5e:6b:c3:53:ba:13:3f: bd:43:8e:52:7c:e4:8b:8e:44:69:44:44:37:7d:96: f4:bb:d2:95:86:c3:16:4e:f1:bf:6c:28:63:ec:59: 16:dd:4f:ea:35:2f:d3:c0:83:bd:59:d9:1f:c1:27: 1c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:50:D9:96:0F:84:65:C8:86:A7:35:D6:C2:16:B6:47:8A:A6:74:8D X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ilDZlg-EZciGpzXWwha2R4qmdI0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.226.0/24 62.76.231.0/24 62.76.235.0/24 192.124.181.0/24 192.124.183.0/24 192.124.188.0/24 193.124.3.0/24 193.124.6.0/24 193.124.91.0/24 194.58.60.0/24 194.58.67.0/24 194.87.3.0/24 194.87.7.0/24 194.87.16.0/24 194.87.24.0/24 194.87.36.0/24 194.87.90.0/24 194.87.165.0-194.87.166.255 194.135.23.0/24 195.58.55.0/24 195.133.12.0/24 195.133.56.0/24 195.133.60.0/23 212.193.15.0/24 Signature Algorithm: sha256WithRSAEncryption 16:7f:46:7b:93:2e:43:c4:c2:1c:d9:08:be:7c:d6:a8:7c:b3: 5a:5e:30:a4:d2:e4:b7:eb:9c:f9:f3:dc:e7:0a:73:80:37:29: 40:53:86:50:1a:ee:12:ea:8d:20:95:98:24:aa:29:52:cf:9e: a5:a5:31:ea:dc:74:79:c9:25:95:44:e7:67:6a:dd:c1:69:98: 2e:e8:59:d6:3e:0e:2d:c8:84:55:a9:b3:6f:70:a5:24:d3:59: d1:a0:7e:41:22:08:75:01:18:14:97:f0:62:73:5c:c6:2e:79: fd:d6:62:2c:27:10:f4:bf:26:2a:2b:41:b0:1e:bf:6f:8c:01: 6b:a3:6a:7b:15:53:7b:7f:4b:8c:f3:14:03:f1:8a:33:28:66: 78:3a:0f:9f:7a:4c:23:6c:f8:e8:e5:a2:32:cb:0d:27:ee:4a: 7a:39:00:3c:2e:ce:3d:ad:67:57:8b:80:ab:d3:3f:64:e7:03: fc:16:5d:24:12:20:6c:d5:54:91:92:fc:15:a7:43:d8:25:cb: 19:17:9b:11:5b:77:41:aa:89:ab:46:13:9f:a9:a3:2d:f1:15: a8:8a:43:a9:0c:75:57:c1:b6:3f:ed:f9:12:d3:fe:27:84:99: 67:52:aa:9e:f7:2b:f7:95:9c:ef:14:77:25:a7:77:1e:7e:07: 12:6e:e3:86 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/hXG/Q+TjdUt/QzEZd7PMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTUwZDk5NjBmODQ2NWM4ODZhNzM1ZDZjMjE2YjY0NzhhYTY3NDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2R26guae6a5VoSt3futaLa9FSxHE BWLMy5khrmbHFVu8jbjCJBfqiDgXaAZ3hzq78F47iv97J20/XgpQa/uSSbTR28y7 2i+Dkqj9xTvrHn5DUV/lhtCGNUhvofnSAQXm6j5og6xNwrWRW0bZIpnDzen+pi9S XVYd5AhksE4RHMQuhlIPATOWNwFsaqqiJH+Vp2VZZtz+24z6wXizfkYewiiQlOTr fhqLEMooRFFiBukug9bV10ubrAkN8hQA6/KBc8xpjn9mrOpTyl5rw1O6Ez+9Q45S fOSLjkRpREQ3fZb0u9KVhsMWTvG/bChj7FkW3U/qNS/TwIO9WdkfwScczQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIpQ2ZYPhGXIhqc11sIWtkeKpnSNMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvaWxEWmxnLUVaY2lHcHpYV3doYTJSNHFtZEkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG1BggrBgEFBQcBBwEB/wSBpTCBojCBnwQCAAEwgZgDBAA+ TOIDBAA+TOcDBAA+TOsDBADAfLUDBADAfLcDBADAfLwDBADBfAMDBADBfAYDBADB fFsDBADCOjwDBADCOkMDBADCVwMDBADCVwcDBADCVxADBADCVxgDBADCVyQDBADC V1owDAMEAMJXpQMEAMJXpgMEAMKHFwMEAMM6NwMEAMOFDAMEAMOFOAMEAcOFPAME ANTBDzANBgkqhkiG9w0BAQsFAAOCAQEAFn9Ge5MuQ8TCHNkIvnzWqHyzWl4wpNLk t+uc+fPc5wpzgDcpQFOGUBruEuqNIJWYJKopUs+epaUx6tx0eckllUTnZ2rdwWmY LuhZ1j4OLciEVamzb3ClJNNZ0aB+QSIIdQEYFJfwYnNcxi55/dZiLCcQ9L8mKitB sB6/b4wBa6NqexVTe39LjPMUA/GKMyhmeDoPn3pMI2z46OWiMssNJ+5KejkAPC7O Pa1nV4uAq9M/ZOcD/BZdJBIgbNVUkZL8FadD2CXLGRebEVt3QaqJq0YTn6mjLfEV qIpDqQx1V8G2P+35EtP+J4SZZ1Kqnvcr95Wc7xR3Jad3Hn4HEm7jhg== -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:04 2026 by rpki-client