This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/RpMIwwKNDJ2StC4zRLgKJPlvR8w.roa File: RpMIwwKNDJ2StC4zRLgKJPlvR8w.roa (raw, json) Hash identifier: cXPNnS64bUQTjJNvAeCad/jzk4TlUd0umXx2TLacFB0= Subject key identifier: 46:93:08:C3:02:8D:0C:9D:92:B4:2E:33:44:B8:0A:24:F9:6F:47:CC Certificate issuer: /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f Certificate serial: 019B78A2BD1C34AD72A4F8E8BC981893689A Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/RpMIwwKNDJ2StC4zRLgKJPlvR8w.roa Signing time: Thu 01 Jan 2026 08:18:09 +0000 ROA not before: Thu 01 Jan 2026 08:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20670 IP address blocks: 5.63.190.0/24 maxlen: 24 31.131.168.0/21 maxlen: 21 45.93.228.0/22 maxlen: 22 91.210.76.0/22 maxlen: 22 185.37.32.0/22 maxlen: 22 193.56.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:bd:1c:34:ad:72:a4:f8:e8:bc:98:18:93:68:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f Validity Not Before: Jan 1 08:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=469308c3028d0c9d92b42e3344b80a24f96f47cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:25:71:16:7b:45:01:85:96:f4:73:9d:dc:e1: 07:3f:39:1a:08:14:c6:e4:8f:29:7b:6d:f4:41:c0: f3:bd:07:e4:a3:38:0f:0d:a2:bb:22:74:03:6b:f9: 9d:db:a6:7e:f5:f2:b6:83:8a:92:d4:d5:22:3b:a8: c6:95:6e:48:a7:52:d5:4f:8b:27:bf:e0:37:04:93: 53:95:68:ad:b7:e1:af:2c:c6:2e:56:68:0c:b2:d8: a9:0e:09:44:a0:48:3b:76:ea:2e:85:5c:14:1d:64: fe:0c:f5:0e:35:e0:d3:75:cf:88:f7:3f:0a:c4:23: e0:3c:47:f1:0c:3d:d1:7a:6c:f4:32:d1:1e:2e:f0: 40:31:19:55:c2:0d:f6:1d:65:54:1d:9f:37:bd:4c: e1:25:71:d5:ae:a8:3b:b8:d6:48:46:54:68:22:47: 98:04:75:ff:06:ba:d9:b9:f0:80:3f:2e:45:f4:f3: 46:96:5d:b9:6a:b2:bd:69:f8:22:48:39:fd:11:fa: 4d:c8:95:6c:e4:cc:46:12:f4:1b:25:f9:13:ee:5c: f7:fe:c2:09:d3:f2:26:10:69:f0:cb:41:2c:d6:74: a5:f9:8c:01:cb:52:da:ee:9a:d0:2e:85:4c:f8:2e: 38:af:75:7f:ab:23:00:d3:81:c5:ad:b6:60:c6:0c: b2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:93:08:C3:02:8D:0C:9D:92:B4:2E:33:44:B8:0A:24:F9:6F:47:CC X509v3 Authority Key Identifier: keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/RpMIwwKNDJ2StC4zRLgKJPlvR8w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.63.190.0/24 31.131.168.0/21 45.93.228.0/22 91.210.76.0/22 185.37.32.0/22 193.56.104.0/23 Signature Algorithm: sha256WithRSAEncryption 12:e4:41:b7:60:5f:16:7c:95:ae:dd:9c:ae:5a:f3:4f:ec:af: ef:e4:dc:ee:6d:b2:45:97:d5:fc:71:fb:31:f1:38:88:c1:0f: 1b:33:01:6d:10:1b:25:f9:6f:83:be:4e:d3:e8:95:49:e8:94: 95:f4:e7:27:1c:37:d6:d9:51:e5:06:ce:bd:8b:94:1e:55:27: 94:70:e4:6c:a1:35:fe:7f:6b:00:3d:61:34:97:75:cd:d0:3c: 3f:3f:44:e1:cd:ee:64:c6:6c:1f:0a:a3:03:f6:6c:d0:e7:0b: 80:3b:01:d0:34:2a:0e:ff:a6:b1:9e:26:28:06:bb:93:a3:29: d8:8b:0e:7b:65:e7:ae:ea:31:6a:0f:03:6f:b6:6b:e5:dc:54: 68:67:d0:3b:7c:8a:58:e1:9a:9c:4d:01:bd:9a:8a:b4:02:28: 21:7e:5c:a9:ce:e8:94:7f:fc:7d:c4:0d:6f:5a:05:27:aa:53: 74:03:81:e4:cd:d1:50:21:6b:e2:7b:a0:4f:b5:44:d1:2a:31: b6:b6:1f:c4:a6:6d:1f:3c:3b:97:c1:df:4e:63:8d:d5:49:d7: 00:99:10:cc:7e:2e:1a:1c:9d:49:fc:66:4e:b1:32:81:51:60: 8f:8e:7e:55:3c:73:09:f5:ae:ab:06:19:10:38:58:e6:1e:ef: a3:82:1f:3f -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt4or0cNK1ypPjovJgYk2iaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYjEzNmU2ODIwZDk0ZjAzYjFjNWQ3MWVlZTNkNGIyMjE5 MTUyOGYwHhcNMjYwMTAxMDgxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjkzMDhjMzAyOGQwYzlkOTJiNDJlMzM0NGI4MGEyNGY5NmY0N2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiVxFntFAYWW9HOd3OEHPzkaCBTG 5I8pe230QcDzvQfkozgPDaK7InQDa/md26Z+9fK2g4qS1NUiO6jGlW5Ip1LVT4sn v+A3BJNTlWitt+GvLMYuVmgMstipDglEoEg7duouhVwUHWT+DPUONeDTdc+I9z8K xCPgPEfxDD3Remz0MtEeLvBAMRlVwg32HWVUHZ83vUzhJXHVrqg7uNZIRlRoIkeY BHX/BrrZufCAPy5F9PNGll25arK9afgiSDn9EfpNyJVs5MxGEvQbJfkT7lz3/sIJ 0/ImEGnwy0Es1nSl+YwBy1La7prQLoVM+C44r3V/qyMA04HFrbZgxgyygwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFEaTCMMCjQydkrQuM0S4CiT5b0fMMB8GA1UdIwQY MBaAFIKxNuaCDZTwOxxdce7j1LIhkVKPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3JFMjVvSU5sUEE3SEYxeDd1UFVzaUdSVW84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yMjExMmUtNGUxMy00M2QwLTllYjEt MGRhM2NhYTkxNDI5LzEvUnBNSXd3S05ESjJTdEM0elJMZ0tKUGx2Ujh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8yMjExMmUtNGUxMy00M2QwLTllYjEtMGRhM2NhYTkxNDI5 LzEvZ3JFMjVvSU5sUEE3SEYxeDd1UFVzaUdSVW84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQABT++AwQD H4OoAwQCLV3kAwQCW9JMAwQCuSUgAwQBwThoMA0GCSqGSIb3DQEBCwUAA4IBAQAS 5EG3YF8WfJWu3ZyuWvNP7K/v5NzubbJFl9X8cfsx8TiIwQ8bMwFtEBsl+W+Dvk7T 6JVJ6JSV9OcnHDfW2VHlBs69i5QeVSeUcORsoTX+f2sAPWE0l3XN0Dw/P0Thze5k xmwfCqMD9mzQ5wuAOwHQNCoO/6axniYoBruToynYiw57Zeeu6jFqDwNvtmvl3FRo Z9A7fIpY4ZqcTQG9moq0AighflypzuiUf/x9xA1vWgUnqlN0A4HkzdFQIWvie6BP tUTRKjG2th/Epm0fPDuXwd9OY43VSdcAmRDMfi4aHJ1J/GZOsTKBUWCPjn5VPHMJ 9a6rBhkQOFjmHu+jgh8/ -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:42 2026 by rpki-client