This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/ran8AN3AZ4R2r49zo9zOMgljp88.roa File: ran8AN3AZ4R2r49zo9zOMgljp88.roa (raw, json) Hash identifier: VSrPvf3ym2RdveR02NWlYwS27b6vZOatiWbKlgNRz08= Subject key identifier: AD:A9:FC:00:DD:C0:67:84:76:AF:8F:73:A3:DC:CE:32:09:63:A7:CF Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 019B7E38B3397ADCB1CF9C4E71AAFE72BDF4 Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/ran8AN3AZ4R2r49zo9zOMgljp88.roa Signing time: Fri 02 Jan 2026 10:20:03 +0000 ROA not before: Fri 02 Jan 2026 10:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 5.253.184.0/23 maxlen: 23 5.253.187.0/24 maxlen: 24 45.81.161.0/24 maxlen: 24 45.81.162.0/24 maxlen: 24 45.81.163.0/24 maxlen: 24 45.130.33.0/24 maxlen: 24 45.130.34.0/23 maxlen: 23 88.214.0.0/24 maxlen: 24 88.214.1.0/24 maxlen: 24 88.214.2.0/24 maxlen: 24 88.214.3.0/24 maxlen: 24 88.218.196.0/22 maxlen: 22 185.114.204.0/24 maxlen: 24 185.219.160.0/24 maxlen: 24 185.219.161.0/24 maxlen: 24 185.219.163.0/24 maxlen: 24 193.111.184.0/22 maxlen: 22 193.135.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b3:39:7a:dc:b1:cf:9c:4e:71:aa:fe:72:bd:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Jan 2 10:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ada9fc00ddc0678476af8f73a3dcce320963a7cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:91:77:52:a2:17:77:12:39:a2:f2:45:2c:c2: d2:43:df:c8:99:79:6a:4c:0d:32:f9:0c:26:e0:62: 37:1f:80:29:e6:b3:5e:f6:46:0c:d3:db:0a:7b:52: de:44:14:44:5d:a5:33:87:3b:cf:e0:5f:c0:64:c9: 6b:bd:66:f1:ed:00:33:5c:05:8e:ea:59:96:af:b9: 25:52:82:1c:b7:e1:86:bf:9e:1a:2d:b1:b9:98:16: 03:78:82:fd:87:da:61:46:d3:a4:99:b4:1d:1d:6c: 2f:14:44:1b:48:13:10:b9:a0:98:a5:78:5b:e0:5a: 12:be:b6:32:6c:76:89:25:21:2a:76:73:39:0d:61: cd:e3:9f:51:b8:89:2e:6c:b9:87:c1:d6:90:62:84: 7d:23:d0:31:44:c4:13:ec:db:10:0e:8e:1d:6f:70: 67:6e:a1:3f:f7:1c:79:7d:81:5e:e0:90:dc:02:7e: b4:50:b6:67:71:21:92:b6:d4:2c:d1:af:4d:c5:8b: df:2a:c8:f6:07:13:e1:04:6c:e4:3a:12:54:ff:dc: 7f:e3:f2:77:47:54:f9:93:22:0f:bb:1a:dd:bb:92: b6:45:7d:e0:e3:25:3f:8d:6e:ad:01:94:be:54:57: ab:bb:cc:5b:e3:71:75:88:0c:5a:79:e1:e5:58:50: e5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A9:FC:00:DD:C0:67:84:76:AF:8F:73:A3:DC:CE:32:09:63:A7:CF X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/ran8AN3AZ4R2r49zo9zOMgljp88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.184.0/23 5.253.187.0/24 45.81.161.0-45.81.163.255 45.130.33.0-45.130.35.255 88.214.0.0/22 88.218.196.0/22 185.114.204.0/24 185.219.160.0/23 185.219.163.0/24 193.111.184.0/22 193.135.220.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:dd:8c:cd:1d:0b:24:32:86:59:cf:1b:37:ea:da:d6:a8:17: 63:e5:a4:87:e9:bf:24:eb:f3:a2:4f:6b:ac:e3:a1:3f:42:00: 60:d1:2c:3e:99:67:85:57:75:ff:40:3a:f5:a8:fa:61:99:9a: 03:d6:64:b2:68:05:f5:45:8d:bc:2c:37:5b:12:09:48:38:e3: ae:8e:99:30:8a:bc:b9:db:d5:e0:34:7c:41:b3:12:b5:71:bf: 7d:43:66:8b:b8:c0:47:97:9c:26:0a:57:14:76:d9:fa:10:18: 08:e5:3e:41:3c:ea:5d:3d:68:eb:d4:cb:f9:fe:b6:67:1c:d2: 59:eb:81:a2:18:4b:2c:9f:cd:c9:5a:55:98:d7:b8:0f:6d:0d: a1:01:18:f3:0d:12:4c:d5:86:f2:19:5b:33:fa:ee:06:a4:8e: dd:6d:13:67:52:ec:c1:53:d1:a8:17:47:5d:fa:bb:1c:c4:64: 7e:21:06:e5:f3:6e:39:46:0b:0e:f6:23:1f:d7:66:bf:3f:05: 84:ce:6a:f6:c0:2b:71:be:8f:0c:ce:29:cd:0f:bb:5f:c6:f5: 1f:9e:7c:ca:eb:72:b5:1c:fb:5b:12:2e:62:44:cf:fa:24:74: fe:4c:84:74:e7:b0:df:b2:24:63:e3:c8:e8:31:49:a8:6b:fb: 74:0a:10:0c -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZt+OLM5etyxz5xOcar+cr30MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjYwMTAyMTAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGE5ZmMwMGRkYzA2Nzg0NzZhZjhmNzNhM2RjY2UzMjA5NjNhN2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZF3UqIXdxI5ovJFLMLSQ9/ImXlq TA0y+Qwm4GI3H4Ap5rNe9kYM09sKe1LeRBREXaUzhzvP4F/AZMlrvWbx7QAzXAWO 6lmWr7klUoIct+GGv54aLbG5mBYDeIL9h9phRtOkmbQdHWwvFEQbSBMQuaCYpXhb 4FoSvrYybHaJJSEqdnM5DWHN459RuIkubLmHwdaQYoR9I9AxRMQT7NsQDo4db3Bn bqE/9xx5fYFe4JDcAn60ULZncSGSttQs0a9NxYvfKsj2BxPhBGzkOhJU/9x/4/J3 R1T5kyIPuxrdu5K2RX3g4yU/jW6tAZS+VFeru8xb43F1iAxaeeHlWFDltQIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFK2p/ADdwGeEdq+Pc6PczjIJY6fPMB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvcmFuOEFOM0FaNFIycjQ5em85ek9NZ2xqcDg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSAwQBBf24AwQA Bf27MAwDBAAtUaEDBAItUaAwDAMEAC2CIQMEAi2CIAMEAljWAAMEAljaxAMEALly zAMEAbnboAMEALnbowMEAsFvuAMEAsGH3DANBgkqhkiG9w0BAQsFAAOCAQEAW92M zR0LJDKGWc8bN+ra1qgXY+Wkh+m/JOvzok9rrOOhP0IAYNEsPplnhVd1/0A69aj6 YZmaA9ZksmgF9UWNvCw3WxIJSDjjro6ZMIq8udvV4DR8QbMStXG/fUNmi7jAR5ec JgpXFHbZ+hAYCOU+QTzqXT1o69TL+f62ZxzSWeuBohhLLJ/NyVpVmNe4D20NoQEY 8w0STNWG8hlbM/ruBqSO3W0TZ1LswVPRqBdHXfq7HMRkfiEG5fNuOUYLDvYjH9dm vz8FhM5q9sArcb6PDM4pzQ+7X8b1H558yutytRz7WxIuYkTP+iR0/kyEdOew37Ik Y+PI6DFJqGv7dAoQDA== -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:53 2026 by rpki-client