This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/mSpE8WEFmSim1xWE3-vq18YaQIY.roa File: mSpE8WEFmSim1xWE3-vq18YaQIY.roa (raw, json) Hash identifier: OpByS8eGeq0rAFISaOQbP6eTGU1KxTwqcjzlwXmx9Ns= Subject key identifier: 99:2A:44:F1:61:05:99:28:A6:D7:15:84:DF:EB:EA:D7:C6:1A:40:86 Certificate issuer: /CN=5af4de6e73c8e053cb640b74d2b912abd90b0580 Certificate serial: 019B7BA4067338DE6C6AA431F3B1B87B8C26 Authority key identifier: 5A:F4:DE:6E:73:C8:E0:53:CB:64:0B:74:D2:B9:12:AB:D9:0B:05:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvTebnPI4FPLZAt00rkSq9kLBYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/mSpE8WEFmSim1xWE3-vq18YaQIY.roa Signing time: Thu 01 Jan 2026 22:18:25 +0000 ROA not before: Thu 01 Jan 2026 22:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12440 IP address blocks: 62.128.160.0/19 maxlen: 24 62.128.168.0/21 maxlen: 24 62.128.186.0/24 maxlen: 24 62.128.188.0/24 maxlen: 24 62.128.191.0/24 maxlen: 24 82.214.192.0/18 maxlen: 24 82.214.210.0/24 maxlen: 24 82.214.220.0/24 maxlen: 24 82.214.223.0/24 maxlen: 24 82.214.232.0/24 maxlen: 24 82.214.234.0/24 maxlen: 24 82.214.239.0/24 maxlen: 24 82.214.240.0/21 maxlen: 24 128.65.64.0/19 maxlen: 24 185.117.52.0/22 maxlen: 24 195.238.32.0/19 maxlen: 24 195.238.44.0/24 maxlen: 24 195.238.45.0/24 maxlen: 24 2a0a:1240::/32 maxlen: 40 2a0a:1241::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/WvTebnPI4FPLZAt00rkSq9kLBYA.crl rsync://rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/WvTebnPI4FPLZAt00rkSq9kLBYA.mft rsync://rpki.ripe.net/repository/DEFAULT/WvTebnPI4FPLZAt00rkSq9kLBYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:06:73:38:de:6c:6a:a4:31:f3:b1:b8:7b:8c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5af4de6e73c8e053cb640b74d2b912abd90b0580 Validity Not Before: Jan 1 22:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=992a44f161059928a6d71584dfebead7c61a4086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9e:34:e1:5f:8b:f1:d3:a4:f8:cf:f5:52:61: 77:cb:61:8d:14:d2:39:b5:bd:ff:b6:67:50:27:37: c1:b7:16:05:0a:6a:84:0f:ff:9e:98:94:58:4e:f1: 6f:f5:d5:7a:f5:32:c3:b7:b7:fd:fb:27:30:07:3e: fb:5e:f8:c1:5b:62:6b:d9:9b:3d:fa:68:32:3c:31: d0:09:10:86:cf:86:96:38:8b:e3:b0:cf:33:69:4e: 5d:bc:12:5e:7b:fd:84:81:59:52:de:ef:c6:3c:6d: eb:65:62:05:63:a1:72:37:7a:1a:fa:2c:a8:17:e7: 11:b4:4d:a4:7a:27:1d:1c:db:3b:bd:99:bf:fb:b0: 1b:bc:e6:03:ed:ca:68:3b:12:60:43:39:b4:64:a1: 39:f5:74:9e:a3:ea:1d:2c:f7:1b:0f:92:4e:3e:72: 40:14:4c:75:35:ec:ab:bb:a5:4f:d7:e2:7e:e7:c9: 97:0c:7c:c4:db:4b:85:b4:3e:a4:e6:31:7e:67:78: 15:31:8d:d4:d9:45:e7:13:ad:50:cd:c0:16:05:99: 74:a6:61:6a:c3:93:2b:a3:14:d1:05:96:1e:f9:a0: b1:1b:b9:ea:45:c4:85:a3:c7:9e:01:de:c1:be:c6: ce:8d:c3:7b:62:9d:bf:fe:b5:fe:19:0e:14:a6:ff: 0b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2A:44:F1:61:05:99:28:A6:D7:15:84:DF:EB:EA:D7:C6:1A:40:86 X509v3 Authority Key Identifier: keyid:5A:F4:DE:6E:73:C8:E0:53:CB:64:0B:74:D2:B9:12:AB:D9:0B:05:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvTebnPI4FPLZAt00rkSq9kLBYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/mSpE8WEFmSim1xWE3-vq18YaQIY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/WvTebnPI4FPLZAt00rkSq9kLBYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.128.160.0/19 82.214.192.0/18 128.65.64.0/19 185.117.52.0/22 195.238.32.0/19 IPv6: 2a0a:1240::/31 Signature Algorithm: sha256WithRSAEncryption 8d:0e:8f:7c:49:30:b0:f7:06:a3:3b:f1:51:21:a9:93:0a:c6: a1:a2:31:a6:5a:3c:8a:36:82:d4:49:bc:72:8c:ab:ec:ac:ec: 5a:d3:d3:e0:c8:01:f7:ef:66:5d:db:f8:0f:f3:54:39:43:7c: dc:ed:1f:f4:fb:65:93:03:59:fb:07:99:22:2b:7c:6f:12:2e: 62:5d:6e:40:96:6a:6a:3e:c0:2c:c4:45:61:91:9e:f6:6a:28: ed:b0:51:9b:4a:df:07:73:f1:13:76:2f:83:cb:71:04:a6:e9: 56:64:3b:f4:01:df:f5:5c:86:09:f5:37:27:03:fb:ae:21:c7: 15:b3:32:17:b1:d6:72:b6:20:3c:a1:39:86:be:7a:63:ea:c4: 98:a1:66:a5:c7:42:24:bc:d9:11:5b:ea:d3:c6:80:3c:8e:ad: 22:9c:24:a5:24:08:d9:e0:1a:43:72:d2:5d:5b:89:16:3b:c5: 79:bb:e1:08:39:43:ec:ed:34:40:c3:af:49:9b:a1:2c:73:e7: e7:98:1a:f1:bc:14:1d:46:a1:78:97:ea:0b:66:0f:2d:d5:20: c1:8d:25:a4:33:65:da:3f:88:01:67:6f:1d:96:91:0e:1e:17: d1:c5:ee:85:e0:f5:7a:ef:98:d4:53:8e:a0:38:d9:dc:df:31: a1:a0:22:d8 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt7pAZzON5saqQx87G4e4wmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZjRkZTZlNzNjOGUwNTNjYjY0MGI3NGQyYjkxMmFiZDkw YjA1ODAwHhcNMjYwMTAxMjIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTJhNDRmMTYxMDU5OTI4YTZkNzE1ODRkZmViZWFkN2M2MWE0MDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ404V+L8dOk+M/1UmF3y2GNFNI5 tb3/tmdQJzfBtxYFCmqED/+emJRYTvFv9dV69TLDt7f9+ycwBz77XvjBW2Jr2Zs9 +mgyPDHQCRCGz4aWOIvjsM8zaU5dvBJee/2EgVlS3u/GPG3rZWIFY6FyN3oa+iyo F+cRtE2keicdHNs7vZm/+7AbvOYD7cpoOxJgQzm0ZKE59XSeo+odLPcbD5JOPnJA FEx1Neyru6VP1+J+58mXDHzE20uFtD6k5jF+Z3gVMY3U2UXnE61QzcAWBZl0pmFq w5MroxTRBZYe+aCxG7nqRcSFo8eeAd7BvsbOjcN7Yp2//rX+GQ4Upv8LowIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFJkqRPFhBZkoptcVhN/r6tfGGkCGMB8GA1UdIwQY MBaAFFr03m5zyOBTy2QLdNK5EqvZCwWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3ZUZWJuUEk0RlBMWkF0MDBya1NxOWtMQllBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hZDM2OTYtZjM2Zi00ZGYwLWIyZGUt YzFlOTM2MmIxYTUxLzEvbVNwRThXRUZtU2ltMXhXRTMtdnExOFlhUUlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9hZDM2OTYtZjM2Zi00ZGYwLWIyZGUtYzFlOTM2MmIxYTUx LzEvV3ZUZWJuUEk0RlBMWkF0MDBya1NxOWtMQllBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQFPoCgAwQG UtbAAwQFgEFAAwQCuXU0AwQFw+4gMA0EAgACMAcDBQEqChJAMA0GCSqGSIb3DQEB CwUAA4IBAQCNDo98STCw9wajO/FRIamTCsahojGmWjyKNoLUSbxyjKvsrOxa09Pg yAH372Zd2/gP81Q5Q3zc7R/0+2WTA1n7B5kiK3xvEi5iXW5AlmpqPsAsxEVhkZ72 aijtsFGbSt8Hc/ETdi+Dy3EEpulWZDv0Ad/1XIYJ9TcnA/uuIccVszIXsdZytiA8 oTmGvnpj6sSYoWalx0IkvNkRW+rTxoA8jq0inCSlJAjZ4BpDctJdW4kWO8V5u+EI OUPs7TRAw69Jm6Esc+fnmBrxvBQdRqF4l+oLZg8t1SDBjSWkM2XaP4gBZ28dlpEO HhfRxe6F4PV675jUU46gONnc3zGhoCLY -----END CERTIFICATE-----Generated at Tue Feb 10 04:30:54 2026 by rpki-client