This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/EXoshLHlQDsApmd1V01L7rMBQ7A.roa File: EXoshLHlQDsApmd1V01L7rMBQ7A.roa (raw, json) Hash identifier: CqEH7hqvO2kXVEWBRyC0k4ixmEgnsnbOiK5wB+Ko5SU= Subject key identifier: 11:7A:2C:84:B1:E5:40:3B:00:A6:67:75:57:4D:4B:EE:B3:01:43:B0 Certificate issuer: /CN=ba267b8e2153fbfc9903847b4502a2bef44b56e6 Certificate serial: 019BDC07A43898B62199ECA5FADFA21BE09C Authority key identifier: BA:26:7B:8E:21:53:FB:FC:99:03:84:7B:45:02:A2:BE:F4:4B:56:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uiZ7jiFT-_yZA4R7RQKivvRLVuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/EXoshLHlQDsApmd1V01L7rMBQ7A.roa Signing time: Tue 20 Jan 2026 15:30:46 +0000 ROA not before: Tue 20 Jan 2026 15:30:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30866 IP address blocks: 147.234.136.0/24 maxlen: 24 147.234.137.0/24 maxlen: 24 147.234.138.0/24 maxlen: 24 147.234.139.0/24 maxlen: 24 147.234.140.0/24 maxlen: 24 147.234.161.0/24 maxlen: 24 147.234.162.0/24 maxlen: 24 147.234.163.0/24 maxlen: 24 147.234.164.0/24 maxlen: 24 147.234.165.0/24 maxlen: 24 147.234.166.0/24 maxlen: 24 147.234.167.0/24 maxlen: 24 147.234.171.0/24 maxlen: 24 147.234.172.0/24 maxlen: 24 147.234.173.0/24 maxlen: 24 147.234.192.0/24 maxlen: 24 147.234.193.0/24 maxlen: 24 147.234.194.0/24 maxlen: 24 147.234.195.0/24 maxlen: 24 147.234.196.0/24 maxlen: 24 147.234.238.0/24 maxlen: 24 147.234.241.0/24 maxlen: 24 147.234.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.crl rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.mft rsync://rpki.ripe.net/repository/DEFAULT/uiZ7jiFT-_yZA4R7RQKivvRLVuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dc:07:a4:38:98:b6:21:99:ec:a5:fa:df:a2:1b:e0:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba267b8e2153fbfc9903847b4502a2bef44b56e6 Validity Not Before: Jan 20 15:30:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=117a2c84b1e5403b00a66775574d4beeb30143b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4d:7c:b4:02:9e:b7:95:a6:b9:4d:33:3f:f5: d0:7e:e2:5e:ca:df:01:1b:27:be:2e:dc:0f:c0:f8: 32:9d:dc:0d:e6:e8:09:80:08:d3:35:fa:63:a5:71: 5f:fa:26:5b:cb:2b:a3:44:0e:ff:dc:cd:9e:a6:9c: 53:e9:02:59:d7:23:d1:02:04:39:10:9c:4e:6b:2e: e9:da:ad:66:b5:87:70:8e:d6:47:3e:48:d9:20:16: 6c:12:90:66:22:82:54:4e:5c:2b:0e:79:d6:bc:4f: c4:a7:df:ce:ba:cb:cd:51:98:40:d2:0f:bc:29:81: f5:6f:36:c3:11:fe:69:20:e5:ea:01:fa:6a:b8:81: 19:0f:55:80:a4:84:7b:bd:5c:6f:db:3d:5c:c5:30: 23:a1:5e:27:c2:be:1c:b5:7f:ad:ae:21:5a:f6:52: e8:10:82:10:dc:e2:a8:27:57:a5:08:44:30:88:f9: 94:e8:b1:0e:d1:db:9b:90:64:ea:c9:1b:f2:0d:49: c8:4b:0d:b7:38:11:7f:dc:f9:26:0a:e6:33:54:a6: 32:57:93:c9:a3:60:1d:b3:59:da:c7:ed:56:33:52: ea:e1:72:a6:3f:ce:51:d0:34:a3:33:3c:d4:e4:09: fa:37:3b:ae:b8:00:6e:26:3c:ca:b7:51:3f:71:25: fd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7A:2C:84:B1:E5:40:3B:00:A6:67:75:57:4D:4B:EE:B3:01:43:B0 X509v3 Authority Key Identifier: keyid:BA:26:7B:8E:21:53:FB:FC:99:03:84:7B:45:02:A2:BE:F4:4B:56:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiZ7jiFT-_yZA4R7RQKivvRLVuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/EXoshLHlQDsApmd1V01L7rMBQ7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.234.136.0-147.234.140.255 147.234.161.0-147.234.167.255 147.234.171.0-147.234.173.255 147.234.192.0-147.234.196.255 147.234.238.0/24 147.234.241.0-147.234.242.255 Signature Algorithm: sha256WithRSAEncryption 3a:84:50:79:c4:9c:5a:b0:9a:05:71:4d:2f:e7:b1:1b:7d:9a: a7:21:9a:c7:4e:dd:82:d4:b5:e4:24:12:2b:2c:aa:3d:88:46: f1:e3:35:af:aa:50:d4:76:01:14:9d:0e:da:63:0b:79:7a:9a: 9a:4e:92:b0:d3:2e:4e:ec:67:76:db:2f:03:ee:31:81:87:90: 00:00:a2:07:d7:df:5a:cb:42:4e:1b:8f:e8:8a:f2:df:2d:67: 4d:c8:a2:7b:66:bf:04:ed:d3:86:3d:0f:9f:9a:2d:1d:40:a6: 12:f7:be:d4:f2:d9:a3:93:8b:66:43:74:e0:8d:e6:2f:02:86: b4:6b:8b:36:1e:27:ca:df:9b:39:e3:9e:01:f4:39:63:3c:be: 17:31:03:d2:45:8d:19:68:19:c9:14:2c:7c:55:57:69:46:c9: 13:99:55:a6:c9:d8:cc:7f:6c:34:ca:a5:55:f0:cf:ee:b9:1e: 88:2a:2d:c9:2a:44:0c:b5:16:f0:64:6c:e3:9c:26:d9:84:a8: c1:e7:29:ec:bd:05:70:4e:a3:0c:99:57:b5:f9:c3:d2:20:47: 94:9d:e6:54:75:52:b2:0b:21:3f:0f:5c:4d:39:5e:13:22:18: 98:3c:94:28:fe:ab:e0:de:bc:34:8d:a8:b2:ed:82:56:ec:a4: ae:66:64:52 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZvcB6Q4mLYhmeyl+t+iG+CcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMjY3YjhlMjE1M2ZiZmM5OTAzODQ3YjQ1MDJhMmJlZjQ0 YjU2ZTYwHhcNMjYwMTIwMTUzMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTdhMmM4NGIxZTU0MDNiMDBhNjY3NzU1NzRkNGJlZWIzMDE0M2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU18tAKet5WmuU0zP/XQfuJeyt8B Gye+LtwPwPgyndwN5ugJgAjTNfpjpXFf+iZbyyujRA7/3M2eppxT6QJZ1yPRAgQ5 EJxOay7p2q1mtYdwjtZHPkjZIBZsEpBmIoJUTlwrDnnWvE/Ep9/OusvNUZhA0g+8 KYH1bzbDEf5pIOXqAfpquIEZD1WApIR7vVxv2z1cxTAjoV4nwr4ctX+triFa9lLo EIIQ3OKoJ1elCEQwiPmU6LEO0dubkGTqyRvyDUnISw23OBF/3PkmCuYzVKYyV5PJ o2Ads1nax+1WM1Lq4XKmP85R0DSjMzzU5An6NzuuuABuJjzKt1E/cSX9YQIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFBF6LISx5UA7AKZndVdNS+6zAUOwMB8GA1UdIwQY MBaAFLome44hU/v8mQOEe0UCor70S1bmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWlaN2ppRlQtX3laQTRSN1JRS2l2dlJMVnVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85ODVkYTUtNzg4Yy00N2EwLWFiOGUt ODg1NGIwMTlkYjlhLzEvRVhvc2hMSGxRRHNBcG1kMVYwMUw3ck1CUTdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC85ODVkYTUtNzg4Yy00N2EwLWFiOGUtODg1NGIwMTlkYjlh LzEvdWlaN2ppRlQtX3laQTRSN1JRS2l2dlJMVnVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMMAwDBAOT6ogD BACT6owwDAMEAJPqoQMEA5PqoDAMAwQAk+qrAwQBk+qsMAwDBAaT6sADBACT6sQD BACT6u4wDAMEAJPq8QMEAJPq8jANBgkqhkiG9w0BAQsFAAOCAQEAOoRQecScWrCa BXFNL+exG32apyGax07dgtS15CQSKyyqPYhG8eM1r6pQ1HYBFJ0O2mMLeXqamk6S sNMuTuxndtsvA+4xgYeQAACiB9ffWstCThuP6Iry3y1nTciie2a/BO3Thj0Pn5ot HUCmEve+1PLZo5OLZkN04I3mLwKGtGuLNh4nyt+bOeOeAfQ5Yzy+FzED0kWNGWgZ yRQsfFVXaUbJE5lVpsnYzH9sNMqlVfDP7rkeiCotySpEDLUW8GRs45wm2YSowecp 7L0FcE6jDJlXtfnD0iBHlJ3mVHVSsgshPw9cTTleEyIYmDyUKP6r4N68NI2osu2C VuykrmZkUg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:59 2026 by rpki-client