This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/1kAOPGpT_yO1V9aiYjzOs8fosJ4.roa File: 1kAOPGpT_yO1V9aiYjzOs8fosJ4.roa (raw, json) Hash identifier: uKDlJs0NDCjfdYnB+MfIB/jlA65konDisvJIGcTDJUU= Subject key identifier: D6:40:0E:3C:6A:53:FF:23:B5:57:D6:A2:62:3C:CE:B3:C7:E8:B0:9E Certificate issuer: /CN=c57e58c346e7b415550c13aeadd2cf90edd07895 Certificate serial: 019B7C13240F173EDCF40A644EE0E002A8B0 Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/1kAOPGpT_yO1V9aiYjzOs8fosJ4.roa Signing time: Fri 02 Jan 2026 00:19:47 +0000 ROA not before: Fri 02 Jan 2026 00:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39611 IP address blocks: 185.49.24.0/24 maxlen: 24 185.49.25.0/24 maxlen: 24 185.49.26.0/24 maxlen: 24 185.49.27.0/24 maxlen: 24 213.207.32.0/19 maxlen: 19 213.207.32.0/20 maxlen: 20 213.207.32.0/22 maxlen: 22 213.207.32.0/24 maxlen: 24 213.207.33.0/24 maxlen: 24 213.207.34.0/24 maxlen: 24 213.207.35.0/24 maxlen: 24 213.207.36.0/22 maxlen: 22 213.207.36.0/24 maxlen: 24 213.207.37.0/24 maxlen: 24 213.207.38.0/24 maxlen: 24 213.207.39.0/24 maxlen: 24 213.207.40.0/22 maxlen: 22 213.207.40.0/24 maxlen: 24 213.207.41.0/24 maxlen: 24 213.207.42.0/24 maxlen: 24 213.207.43.0/24 maxlen: 24 213.207.44.0/22 maxlen: 22 213.207.44.0/24 maxlen: 24 213.207.45.0/24 maxlen: 24 213.207.46.0/24 maxlen: 24 213.207.47.0/24 maxlen: 24 213.207.48.0/20 maxlen: 20 213.207.48.0/21 maxlen: 21 213.207.48.0/22 maxlen: 22 213.207.48.0/24 maxlen: 24 213.207.49.0/24 maxlen: 24 213.207.50.0/24 maxlen: 24 213.207.51.0/24 maxlen: 24 213.207.52.0/22 maxlen: 22 213.207.52.0/24 maxlen: 24 213.207.53.0/24 maxlen: 24 213.207.54.0/24 maxlen: 24 213.207.55.0/24 maxlen: 24 213.207.56.0/21 maxlen: 21 213.207.56.0/22 maxlen: 22 213.207.56.0/24 maxlen: 24 213.207.57.0/24 maxlen: 24 213.207.58.0/24 maxlen: 24 213.207.59.0/24 maxlen: 24 213.207.60.0/22 maxlen: 22 213.207.60.0/24 maxlen: 24 213.207.61.0/24 maxlen: 24 213.207.62.0/24 maxlen: 24 213.207.63.0/24 maxlen: 24 2a01:9d20::/29 maxlen: 29 2a01:9d20::/31 maxlen: 31 2a01:9d22::/31 maxlen: 31 2a01:9d24::/31 maxlen: 31 2a01:9d26::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:24:0f:17:3e:dc:f4:0a:64:4e:e0:e0:02:a8:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895 Validity Not Before: Jan 2 00:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6400e3c6a53ff23b557d6a2623cceb3c7e8b09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9a:3d:7a:a5:37:bc:39:96:f1:37:15:d2:42: ce:f3:4b:28:cd:db:60:70:8a:1c:26:75:72:e4:ef: c3:44:19:e6:9d:bb:5e:c5:b9:e7:a6:01:28:b9:3f: 58:b1:80:d9:e7:12:0c:6b:e1:ec:64:d4:cd:5e:05: 35:17:89:2f:d0:35:ca:00:29:7e:0b:0f:88:35:a4: d5:34:fc:31:00:22:eb:42:4f:5a:56:7a:9f:84:0c: eb:e5:25:a6:3d:5f:f4:bf:ef:08:40:68:60:12:6b: db:db:62:fb:91:97:18:b8:d3:cd:87:f4:98:4f:c5: 5a:a0:cf:4d:4a:30:10:76:2b:d1:48:78:d6:1f:9d: 36:e8:29:24:66:14:e4:e1:91:4e:d6:b5:88:30:a6: 1a:57:b8:ec:bf:bb:98:86:19:13:de:74:b0:0f:c4: 33:69:e8:55:d2:46:9b:45:dd:d8:ab:45:46:47:7f: fd:45:20:27:fa:77:ac:5f:44:e5:0b:a3:e5:98:93: a1:d7:9c:32:f9:3d:b0:86:a0:ee:6c:0f:80:c0:ac: 4a:f1:ee:8c:ae:87:51:c6:89:64:85:6e:2b:09:e8: 3a:c6:0d:89:26:db:33:ba:ce:9e:41:0e:e7:88:7b: db:db:53:92:bf:f5:25:4f:4d:52:fb:78:80:2c:62: 9d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:40:0E:3C:6A:53:FF:23:B5:57:D6:A2:62:3C:CE:B3:C7:E8:B0:9E X509v3 Authority Key Identifier: keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/1kAOPGpT_yO1V9aiYjzOs8fosJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.24.0/22 213.207.32.0/19 IPv6: 2a01:9d20::/29 Signature Algorithm: sha256WithRSAEncryption 78:de:c0:d6:ac:cd:d1:7b:57:12:d1:5c:4f:5a:23:3b:63:46: bf:c9:07:f0:2d:95:dd:bf:16:5a:1b:74:2b:86:8e:e0:27:dd: 07:25:f6:be:f8:80:a8:b1:88:41:8b:46:b1:41:d2:a9:5d:25: 9c:f7:5c:4c:86:93:53:f2:41:4b:d5:49:a0:be:82:47:52:a1: 93:21:3c:05:b2:18:2c:5e:3c:a6:5a:86:8d:41:0f:f6:06:b5: 11:2b:27:4d:d0:59:c6:88:9d:3a:26:4a:cc:f6:a4:df:e0:b5: c7:c1:7b:39:a8:1e:cc:67:4e:ec:71:9d:7e:2b:bc:c8:97:eb: d3:a9:ed:16:1b:0f:c5:13:d8:b3:32:98:72:f2:da:90:17:e3: 8f:09:73:42:28:4f:18:35:c4:2c:bf:b8:b9:71:e9:f6:ca:de: 50:4f:ee:b5:9b:e5:19:b8:6a:f7:de:aa:ff:b3:f1:24:46:a7: 68:39:18:c7:c2:3f:a6:bf:16:9e:fc:e7:c7:3e:05:4f:11:6f: d3:da:37:0c:63:54:1a:32:d5:ec:29:02:bb:f1:32:25:1a:0f: 22:db:fe:e7:48:11:d8:37:57:c8:d6:9a:b3:65:95:6b:e7:f3: 06:a9:27:cc:9e:ed:03:b8:d6:58:cc:93:48:7c:4c:a5:d8:30: 68:d7:c8:3c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8EyQPFz7c9ApkTuDgAqiwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1N2U1OGMzNDZlN2I0MTU1NTBjMTNhZWFkZDJjZjkwZWRk MDc4OTUwHhcNMjYwMTAyMDAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjQwMGUzYzZhNTNmZjIzYjU1N2Q2YTI2MjNjY2ViM2M3ZThiMDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJo9eqU3vDmW8TcV0kLO80sozdtg cIocJnVy5O/DRBnmnbtexbnnpgEouT9YsYDZ5xIMa+HsZNTNXgU1F4kv0DXKACl+ Cw+INaTVNPwxACLrQk9aVnqfhAzr5SWmPV/0v+8IQGhgEmvb22L7kZcYuNPNh/SY T8VaoM9NSjAQdivRSHjWH5026CkkZhTk4ZFO1rWIMKYaV7jsv7uYhhkT3nSwD8Qz aehV0kabRd3Yq0VGR3/9RSAn+nesX0TlC6PlmJOh15wy+T2whqDubA+AwKxK8e6M rodRxolkhW4rCeg6xg2JJtszus6eQQ7niHvb21OSv/UlT01S+3iALGKdXQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNZADjxqU/8jtVfWomI8zrPH6LCeMB8GA1UdIwQY MBaAFMV+WMNG57QVVQwTrq3Sz5Dt0HiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFg1WXcwYm50QlZWREJPdXJkTFBrTzNRZUpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jZWU3MGQtOGI1Mi00YzExLWE3N2Mt MDc0MzA1NzM1YWMyLzEvMWtBT1BHcFRfeU8xVjlhaVlqek9zOGZvc0o0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jZWU3MGQtOGI1Mi00YzExLWE3N2MtMDc0MzA1NzM1YWMy LzEveFg1WXcwYm50QlZWREJPdXJkTFBrTzNRZUpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuTEYAwQF 1c8gMA0EAgACMAcDBQMqAZ0gMA0GCSqGSIb3DQEBCwUAA4IBAQB43sDWrM3Re1cS 0VxPWiM7Y0a/yQfwLZXdvxZaG3Qrho7gJ90HJfa++ICosYhBi0axQdKpXSWc91xM hpNT8kFL1UmgvoJHUqGTITwFshgsXjymWoaNQQ/2BrURKydN0FnGiJ06JkrM9qTf 4LXHwXs5qB7MZ07scZ1+K7zIl+vTqe0WGw/FE9izMphy8tqQF+OPCXNCKE8YNcQs v7i5cen2yt5QT+61m+UZuGr33qr/s/EkRqdoORjHwj+mvxae/OfHPgVPEW/T2jcM Y1QaMtXsKQK78TIlGg8i2/7nSBHYN1fI1pqzZZVr5/MGqSfMnu0DuNZYzJNIfEyl 2DBo18g8 -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:17 2026 by rpki-client