This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/RoLgrjDxF4akRKaq8T1rSF19Kng.roa File: RoLgrjDxF4akRKaq8T1rSF19Kng.roa (raw, json) Hash identifier: +7nyTK/C6dWtP3h0zQHeagqR3OkxYgHMPvGFJRKBnDk= Subject key identifier: 46:82:E0:AE:30:F1:17:86:A4:44:A6:AA:F1:3D:6B:48:5D:7D:2A:78 Certificate issuer: /CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9 Certificate serial: 019B76EB5D4A78A2B9F3A8FFE722B9033193 Authority key identifier: 1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/RoLgrjDxF4akRKaq8T1rSF19Kng.roa Signing time: Thu 01 Jan 2026 00:18:14 +0000 ROA not before: Thu 01 Jan 2026 00:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57910 IP address blocks: 31.214.176.0/20 maxlen: 24 37.10.72.0/21 maxlen: 24 37.152.88.0/21 maxlen: 24 45.149.228.0/22 maxlen: 24 46.18.72.0/21 maxlen: 24 82.198.48.0/20 maxlen: 20 87.117.96.0/20 maxlen: 24 91.132.116.0/22 maxlen: 24 95.214.0.0/22 maxlen: 24 109.69.48.0/21 maxlen: 24 185.11.236.0/22 maxlen: 24 185.161.12.0/22 maxlen: 24 185.226.236.0/22 maxlen: 24 193.57.36.0/22 maxlen: 24 194.56.236.0/22 maxlen: 24 194.127.158.0/23 maxlen: 24 194.127.162.0/23 maxlen: 24 2a00:b5c0::/32 maxlen: 32 2a02:2110::/32 maxlen: 32 2a0c:7a00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:5d:4a:78:a2:b9:f3:a8:ff:e7:22:b9:03:31:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9 Validity Not Before: Jan 1 00:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4682e0ae30f11786a444a6aaf13d6b485d7d2a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:57:2b:8f:ca:f5:6b:81:bb:a8:ca:13:4e:86: 10:9b:19:1e:f7:74:25:c5:8b:75:02:89:a2:b2:e1: 2a:24:48:a3:4c:ba:e9:fe:b9:05:50:4f:6c:46:fc: f5:0c:4f:77:87:b1:87:08:21:04:dc:ee:02:01:0f: 03:96:04:49:88:80:03:56:d5:3c:e7:eb:6b:e4:21: f2:a6:b7:5a:e5:d0:86:45:72:55:1b:f7:a2:e7:2d: 00:01:e3:e6:04:33:31:50:ce:1f:a7:9c:b4:76:8c: 65:40:52:25:58:82:9a:6d:4b:bd:aa:2c:71:58:f1: e2:7e:c4:65:b0:b1:c1:a1:bd:17:89:52:ad:52:f3: f2:db:00:7b:1d:6c:28:2a:4a:65:61:3a:ad:4e:3c: b4:6b:8c:65:1d:ae:da:60:46:13:b5:f9:84:10:8e: 20:65:94:e6:27:4b:77:77:b8:22:5f:66:c8:8e:f3: 52:c1:89:b9:89:b7:94:3f:3f:34:99:f5:f2:da:b7: b4:45:99:87:e9:89:27:85:5e:ac:2b:84:80:cf:d8: ea:01:aa:1d:7e:44:0b:2f:b0:5f:ee:24:c9:08:b4: 07:ae:75:fb:00:25:28:8f:13:49:fc:23:d2:08:d8: 52:5a:3c:3f:88:67:32:79:07:3a:1f:e8:14:fc:8b: 44:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:82:E0:AE:30:F1:17:86:A4:44:A6:AA:F1:3D:6B:48:5D:7D:2A:78 X509v3 Authority Key Identifier: keyid:1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/RoLgrjDxF4akRKaq8T1rSF19Kng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.214.176.0/20 37.10.72.0/21 37.152.88.0/21 45.149.228.0/22 46.18.72.0/21 82.198.48.0/20 87.117.96.0/20 91.132.116.0/22 95.214.0.0/22 109.69.48.0/21 185.11.236.0/22 185.161.12.0/22 185.226.236.0/22 193.57.36.0/22 194.56.236.0/22 194.127.158.0/23 194.127.162.0/23 IPv6: 2a00:b5c0::/32 2a02:2110::/32 2a0c:7a00::/29 Signature Algorithm: sha256WithRSAEncryption a2:ab:c5:ce:fb:7d:d7:80:64:21:82:5c:a7:17:44:c9:a0:75: bb:d4:2f:de:40:6c:08:11:36:0a:e3:e6:48:4b:c0:f6:1f:d7: b8:2c:52:fd:2e:bf:5a:a0:c4:bb:3b:44:6f:85:9e:ff:bd:d9: 71:81:40:61:83:9d:dc:45:60:bd:a6:68:ec:98:79:c5:08:35: d5:db:de:5d:5c:46:26:55:36:6f:ab:e5:bc:3e:49:fd:2f:4f: d8:b6:b6:a0:63:e6:9f:cc:55:65:c3:00:a8:a3:0a:1a:18:b0: ff:3b:ca:cd:0a:59:b7:33:8e:a9:8d:94:1f:3d:04:56:e3:e7: 39:9a:61:5c:fe:2a:6d:49:69:b4:2d:37:63:e5:7d:0a:f0:59: a5:49:3c:7d:66:9f:7f:4a:23:b8:0d:10:61:92:4e:ee:79:69: 14:b2:98:bc:9a:f1:9c:8e:f7:f4:c6:ba:0a:b2:38:4f:98:4b: 3d:a2:3e:42:58:ff:a4:d2:37:f6:d4:85:7f:13:28:0b:59:39: 41:21:6f:3b:da:d5:ba:f0:1a:61:40:7f:35:50:ef:22:aa:d9: 22:a7:b7:25:0c:29:56:c3:9d:23:42:72:74:38:55:bc:7d:dd: 26:b0:c9:bf:1e:d2:db:b0:3a:e4:0f:8c:ad:9d:16:66:47:ae: 71:91:9b:5a -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgISAZt2611KeKK586j/5yK5AzGTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWFhZjNkMDY4M2RjOGEwZDU4YzY0MzgyNmUxNjZkM2My OGNjYTkwHhcNMjYwMTAxMDAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjgyZTBhZTMwZjExNzg2YTQ0NGE2YWFmMTNkNmI0ODVkN2QyYTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFcrj8r1a4G7qMoTToYQmxke93Ql xYt1AomisuEqJEijTLrp/rkFUE9sRvz1DE93h7GHCCEE3O4CAQ8DlgRJiIADVtU8 5+tr5CHyprda5dCGRXJVG/ei5y0AAePmBDMxUM4fp5y0doxlQFIlWIKabUu9qixx WPHifsRlsLHBob0XiVKtUvPy2wB7HWwoKkplYTqtTjy0a4xlHa7aYEYTtfmEEI4g ZZTmJ0t3d7giX2bIjvNSwYm5ibeUPz80mfXy2re0RZmH6YknhV6sK4SAz9jqAaod fkQLL7Bf7iTJCLQHrnX7ACUojxNJ/CPSCNhSWjw/iGcyeQc6H+gU/ItEFQIDAQAB o4ICiTCCAoUwHQYDVR0OBBYEFEaC4K4w8ReGpESmqvE9a0hdfSp4MB8GA1UdIwQY MBaAFB5arz0Gg9yKDVjGQ4JuFm08KMypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxxdlBRYUQzSW9OV01aRGdtNFdiVHdvektrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84M2RmNWItZDE1My00Y2I2LWJhZjMt NGNkMzhiNzU4ZDVjLzEvUm9MZ3JqRHhGNGFrUkthcThUMXJTRjE5S25nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi84M2RmNWItZDE1My00Y2I2LWJhZjMtNGNkMzhiNzU4ZDVj LzEvSGxxdlBRYUQzSW9OV01aRGdtNFdiVHdvektrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGeBggrBgEFBQcBBwEB/wSBjjCBizBsBAIAATBmAwQEH9aw AwQDJQpIAwQDJZhYAwQCLZXkAwQDLhJIAwQEUsYwAwQEV3VgAwQCW4R0AwQCX9YA AwQDbUUwAwQCuQvsAwQCuaEMAwQCueLsAwQCwTkkAwQCwjjsAwQBwn+eAwQBwn+i MBsEAgACMBUDBQAqALXAAwUAKgIhEAMFAyoMegAwDQYJKoZIhvcNAQELBQADggEB AKKrxc77fdeAZCGCXKcXRMmgdbvUL95AbAgRNgrj5khLwPYf17gsUv0uv1qgxLs7 RG+Fnv+92XGBQGGDndxFYL2maOyYecUINdXb3l1cRiZVNm+r5bw+Sf0vT9i2tqBj 5p/MVWXDAKijChoYsP87ys0KWbczjqmNlB89BFbj5zmaYVz+Km1JabQtN2PlfQrw WaVJPH1mn39KI7gNEGGSTu55aRSymLya8ZyO9/TGugqyOE+YSz2iPkJY/6TSN/bU hX8TKAtZOUEhbzva1brwGmFAfzVQ7yKq2SKntyUMKVbDnSNCcnQ4Vbx93Sawyb8e 0tuwOuQPjK2dFmZHrnGRm1o= -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:32 2026 by rpki-client