This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/5L2g6nDW06irIUq83phIZ53C1IA.roa File: 5L2g6nDW06irIUq83phIZ53C1IA.roa (raw, json) Hash identifier: JbdTWcKtL0GeFigj6GMvD4sLu582tKI8ZbvVxkhlvCI= Subject key identifier: E4:BD:A0:EA:70:D6:D3:A8:AB:21:4A:BC:DE:98:48:67:9D:C2:D4:80 Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Certificate serial: 019B7F14E5075CD90F18A2BBCA18F1B62679 Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/5L2g6nDW06irIUq83phIZ53C1IA.roa Signing time: Fri 02 Jan 2026 14:20:34 +0000 ROA not before: Fri 02 Jan 2026 14:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20860 IP address blocks: 31.210.128.0/21 maxlen: 24 37.35.88.0/21 maxlen: 24 45.145.180.0/22 maxlen: 24 87.237.64.0/21 maxlen: 24 93.95.8.0/21 maxlen: 24 94.190.240.0/21 maxlen: 24 94.199.184.0/21 maxlen: 24 109.69.80.0/21 maxlen: 24 151.236.208.0/21 maxlen: 24 185.11.240.0/22 maxlen: 24 185.31.252.0/22 maxlen: 24 185.33.184.0/22 maxlen: 24 185.49.236.0/22 maxlen: 24 185.68.0.0/22 maxlen: 24 185.71.24.0/22 maxlen: 24 185.122.216.0/22 maxlen: 24 195.94.112.0/20 maxlen: 24 195.189.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:e5:07:5c:d9:0f:18:a2:bb:ca:18:f1:b6:26:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Validity Not Before: Jan 2 14:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4bda0ea70d6d3a8ab214abcde9848679dc2d480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:13:2b:f6:d4:8e:6d:2d:e5:21:49:bc:a6:dd: 03:e0:8b:77:af:fc:26:0e:65:86:b1:a7:d1:ba:7d: 39:65:49:7a:d3:92:92:6d:e7:e7:31:30:5e:84:f1: 96:ac:9d:a6:a6:66:ff:e4:8b:74:4b:ae:04:39:7a: 8a:91:2d:e3:f1:ec:b9:d7:6f:34:22:e8:d2:8e:1d: a2:d1:b4:9b:3c:30:cd:dc:3a:bd:71:e4:c9:73:de: 0a:16:4b:a8:7a:db:6a:fd:e7:05:7c:fe:5c:cb:6a: 9e:f5:d5:67:fc:a6:9f:2a:00:68:0b:ce:f9:e1:0e: ff:3f:59:28:e7:19:e1:49:70:26:e4:76:42:dc:87: c4:c8:b2:72:11:4e:ee:3a:42:55:e5:76:15:ed:4e: 53:a7:f4:2c:57:94:0d:fd:8c:72:9d:ad:bc:b3:ba: 05:54:03:20:af:2c:24:02:15:93:8a:26:73:28:b3: 7f:15:5a:5f:0a:fa:43:74:cc:42:54:d4:a1:34:f3: b1:d1:3a:5b:5f:2b:6e:73:e7:b5:f6:b5:86:a5:ee: 88:2b:17:8b:3a:a0:15:bd:bf:ab:c2:c7:05:20:b1: 48:be:49:bb:2c:27:c6:8c:a4:ee:c8:e9:cb:38:a4: ed:cc:a2:b7:e3:01:5d:6f:0c:22:85:98:a0:5f:b4: a7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:BD:A0:EA:70:D6:D3:A8:AB:21:4A:BC:DE:98:48:67:9D:C2:D4:80 X509v3 Authority Key Identifier: keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/5L2g6nDW06irIUq83phIZ53C1IA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.128.0/21 37.35.88.0/21 45.145.180.0/22 87.237.64.0/21 93.95.8.0/21 94.190.240.0/21 94.199.184.0/21 109.69.80.0/21 151.236.208.0/21 185.11.240.0/22 185.31.252.0/22 185.33.184.0/22 185.49.236.0/22 185.68.0.0/22 185.71.24.0/22 185.122.216.0/22 195.94.112.0/20 195.189.124.0/22 Signature Algorithm: sha256WithRSAEncryption 65:4e:fb:63:b3:ea:bf:75:57:97:20:f6:ea:6d:b9:d7:8a:8a: dd:53:74:2d:7c:44:9a:64:48:8c:22:95:10:c0:d3:63:e6:7e: db:c7:a5:74:a5:e6:f1:4f:9f:f5:8f:0f:fe:ca:d3:4a:71:ad: 71:ae:14:19:5e:aa:39:58:59:7a:43:0d:26:c0:2f:ed:8e:b6: a6:e7:ff:fc:8d:80:76:26:b4:51:39:32:6b:a4:0b:e0:c8:d2: aa:cd:c8:ab:a5:d2:48:fc:b9:f7:0e:a4:ee:3f:ad:7b:83:b0: 7d:45:f4:58:e3:a4:65:91:b4:23:04:e7:55:09:9d:aa:22:e1: 8e:c0:92:b2:20:c7:a0:4e:af:25:9b:30:e8:24:32:80:16:c0: 4c:a8:cd:ff:bb:aa:7e:3b:1e:bc:da:46:c3:79:90:d1:34:7c: fe:a0:01:43:ad:09:9b:11:d5:49:ee:0b:38:2b:55:54:1d:cf: 18:97:f2:f1:81:52:91:b5:68:69:d5:12:40:39:ae:f2:e3:ec: 1d:c9:83:77:76:b1:92:eb:55:95:64:5e:fb:89:ad:06:db:ac: 64:40:11:51:e9:0b:ac:c6:11:b6:8c:0b:b0:e3:a9:2d:00:ed: 78:b7:bd:aa:c6:06:3b:9e:00:4e:a1:d0:6e:14:0c:2e:60:77: 69:53:b2:46 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgISAZt/FOUHXNkPGKK7yhjxtiZ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NGQ2MWNkMTdlZDkyZTU0YmIzMzk3ZjFlNWE2YjM5MDRh YzZmMDUwHhcNMjYwMTAyMTQyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGJkYTBlYTcwZDZkM2E4YWIyMTRhYmNkZTk4NDg2NzlkYzJkNDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxMr9tSObS3lIUm8pt0D4It3r/wm DmWGsafRun05ZUl605KSbefnMTBehPGWrJ2mpmb/5It0S64EOXqKkS3j8ey51280 IujSjh2i0bSbPDDN3Dq9ceTJc94KFkuoettq/ecFfP5cy2qe9dVn/KafKgBoC875 4Q7/P1ko5xnhSXAm5HZC3IfEyLJyEU7uOkJV5XYV7U5Tp/QsV5QN/Yxyna28s7oF VAMgrywkAhWTiiZzKLN/FVpfCvpDdMxCVNShNPOx0TpbXytuc+e19rWGpe6IKxeL OqAVvb+rwscFILFIvkm7LCfGjKTuyOnLOKTtzKK34wFdbwwihZigX7SnjQIDAQAB o4ICcDCCAmwwHQYDVR0OBBYEFOS9oOpw1tOoqyFKvN6YSGedwtSAMB8GA1UdIwQY MBaAFMhNYc0X7ZLlS7M5fx5aazkErG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGIt YzI1Nzc5MmRhZGM0LzEvNUwyZzZuRFcwNmlySVVxODNwaElaNTNDMUlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGItYzI1Nzc5MmRhZGM0 LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAx/SgAME AyUjWAMEAi2RtAMEA1ftQAMEA11fCAMEA16+8AMEA17HuAMEA21FUAMEA5fs0AME ArkL8AMEArkf/AMEArkhuAMEArkx7AMEArlEAAMEArlHGAMEArl62AMEBMNecAME AsO9fDANBgkqhkiG9w0BAQsFAAOCAQEAZU77Y7Pqv3VXlyD26m2514qK3VN0LXxE mmRIjCKVEMDTY+Z+28eldKXm8U+f9Y8P/srTSnGtca4UGV6qOVhZekMNJsAv7Y62 puf//I2Adia0UTkya6QL4MjSqs3Iq6XSSPy59w6k7j+te4OwfUX0WOOkZZG0IwTn VQmdqiLhjsCSsiDHoE6vJZsw6CQygBbATKjN/7uqfjsevNpGw3mQ0TR8/qABQ60J mxHVSe4LOCtVVB3PGJfy8YFSkbVoadUSQDmu8uPsHcmDd3axkutVlWRe+4mtBtus ZEARUekLrMYRtowLsOOpLQDteLe9qsYGO54ATqHQbhQMLmB3aVOyRg== -----END CERTIFICATE-----Generated at Mon Jan 19 17:31:39 2026 by rpki-client