This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/lJDrnLvMDgHk_fzThFsf8Cm6mX0.roa File: lJDrnLvMDgHk_fzThFsf8Cm6mX0.roa (raw, json) Hash identifier: w3x9Am6AgVtB0uwWUskomuBF/D7slx352RaRjUM5kz4= Subject key identifier: 94:90:EB:9C:BB:CC:0E:01:E4:FD:FC:D3:84:5B:1F:F0:29:BA:99:7D Certificate issuer: /CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865 Certificate serial: 019B7C800CEDA5B3D65C2091A9FA51DC57B5 Authority key identifier: C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/lJDrnLvMDgHk_fzThFsf8Cm6mX0.roa Signing time: Fri 02 Jan 2026 02:18:45 +0000 ROA not before: Fri 02 Jan 2026 02:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206618 IP address blocks: 143.163.1.0/24 maxlen: 24 143.163.12.0/22 maxlen: 22 143.163.16.0/23 maxlen: 23 143.163.22.0/24 maxlen: 24 143.163.66.0/23 maxlen: 23 143.163.66.0/24 maxlen: 24 143.163.67.0/24 maxlen: 24 193.23.96.0/24 maxlen: 24 194.114.32.0/23 maxlen: 23 194.114.40.0/23 maxlen: 23 194.114.61.0/24 maxlen: 24 194.114.62.0/23 maxlen: 23 194.114.62.0/24 maxlen: 24 194.114.63.0/24 maxlen: 24 194.114.64.0/23 maxlen: 23 194.114.66.0/23 maxlen: 23 194.114.70.0/23 maxlen: 23 194.114.74.0/24 maxlen: 24 194.114.77.0/24 maxlen: 24 194.114.78.0/23 maxlen: 23 194.114.80.0/23 maxlen: 23 194.114.82.0/24 maxlen: 24 194.114.84.0/24 maxlen: 24 194.114.85.0/24 maxlen: 24 194.114.94.0/23 maxlen: 23 194.114.96.0/22 maxlen: 22 194.114.96.0/23 maxlen: 23 194.114.96.0/24 maxlen: 24 194.114.97.0/24 maxlen: 24 194.114.98.0/23 maxlen: 23 194.114.100.0/22 maxlen: 22 194.114.104.0/21 maxlen: 21 194.114.104.0/24 maxlen: 24 194.114.112.0/22 maxlen: 22 194.114.116.0/22 maxlen: 22 194.114.125.0/24 maxlen: 24 194.114.126.0/24 maxlen: 24 2a01:4dc0::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:0c:ed:a5:b3:d6:5c:20:91:a9:fa:51:dc:57:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865 Validity Not Before: Jan 2 02:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9490eb9cbbcc0e01e4fdfcd3845b1ff029ba997d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5d:ba:e2:f8:07:a2:28:af:93:d9:6f:02:80: 56:bd:f3:96:e0:e5:32:9e:c5:73:97:e9:fa:ad:e1: 0c:39:f0:59:f4:2b:d7:70:04:8b:aa:47:d2:46:81: 44:91:27:cb:a6:51:4b:37:df:cd:ac:01:c6:85:7b: ba:51:1b:24:35:a9:ed:58:dc:16:a1:5b:65:cf:c5: 6f:3d:f8:cd:a4:07:20:1e:bf:39:dc:02:12:82:0c: 15:37:65:c2:82:6c:9a:62:ef:3e:2f:9e:d7:9e:3b: a0:12:b0:fa:f2:56:88:3d:df:b0:e6:3b:ec:ba:6d: d8:33:a6:b1:fd:13:95:7d:29:e5:3d:f2:95:1b:ae: 82:62:ed:64:1c:3a:cb:b9:4d:5e:22:d7:ff:30:26: e4:38:30:a5:b4:73:c1:98:4e:26:d2:f4:19:16:eb: 54:2f:3a:32:21:58:00:e2:0a:cc:90:1a:bb:9c:23: c4:e4:88:af:a0:8a:f6:a1:89:58:b4:56:0b:0f:0d: 70:96:0d:3a:44:26:fc:2e:6b:0f:89:e6:91:98:9c: 4d:50:36:20:a5:18:31:f1:67:33:8b:9c:39:b6:40: 3f:7a:57:84:67:a7:49:26:1a:29:19:52:a8:40:b3: 01:78:d7:49:8c:fd:43:08:a3:7d:85:69:b6:86:9e: b0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:90:EB:9C:BB:CC:0E:01:E4:FD:FC:D3:84:5B:1F:F0:29:BA:99:7D X509v3 Authority Key Identifier: keyid:C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/lJDrnLvMDgHk_fzThFsf8Cm6mX0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.163.1.0/24 143.163.12.0-143.163.17.255 143.163.22.0/24 143.163.66.0/23 193.23.96.0/24 194.114.32.0/23 194.114.40.0/23 194.114.61.0-194.114.67.255 194.114.70.0/23 194.114.74.0/24 194.114.77.0-194.114.82.255 194.114.84.0/23 194.114.94.0-194.114.119.255 194.114.125.0-194.114.126.255 IPv6: 2a01:4dc0::/42 Signature Algorithm: sha256WithRSAEncryption a8:32:82:72:bd:8e:60:28:93:42:c7:37:7d:7e:9b:10:4d:dd: d0:31:67:5d:50:d8:63:09:d1:ba:7e:72:1e:cf:31:68:c2:1c: f2:bf:d1:52:1e:ee:f0:db:3e:d6:41:19:8a:4d:87:df:f8:fb: f6:90:66:06:14:0c:82:77:4a:f8:5e:16:bb:47:99:a3:fc:99: 47:f8:78:49:85:77:ee:ec:17:c2:24:77:93:12:69:0e:b8:c2: 43:65:41:88:24:31:16:c2:33:c4:56:d0:1d:87:3c:a1:dc:5e: dc:04:16:6c:33:3a:ee:f4:c4:5c:41:3d:8e:64:fe:30:a0:1f: 90:9e:48:a8:8a:e6:9b:61:78:47:69:1d:67:6c:90:a3:0b:1a: 27:73:35:77:09:6f:53:cf:57:6d:bb:30:3f:1e:32:22:29:62: 3a:4b:fc:75:a3:cc:83:f7:da:26:ee:02:4e:c9:1b:31:6c:ba: 09:78:3e:7c:ce:ac:2e:5c:6c:2c:90:c7:3b:22:05:14:68:c6: 4c:ac:2e:a5:98:52:18:66:8a:e9:28:e5:49:6a:21:a2:99:e4: dd:37:ca:5b:89:46:78:c4:54:31:86:31:34:f5:0c:14:00:2b: 07:ff:29:d4:64:84:b2:57:18:c6:50:8e:2f:ad:36:30:2e:21: 5c:32:00:04 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgISAZt8gAztpbPWXCCRqfpR3Fe1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZjA0Yjc4YjJlZWRmOTk4ZWRkNWNjMWU4ODY3MWM4ZDEw ZjE4NjUwHhcNMjYwMTAyMDIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDkwZWI5Y2JiY2MwZTAxZTRmZGZjZDM4NDViMWZmMDI5YmE5OTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4F264vgHoiivk9lvAoBWvfOW4OUy nsVzl+n6reEMOfBZ9CvXcASLqkfSRoFEkSfLplFLN9/NrAHGhXu6URskNantWNwW oVtlz8VvPfjNpAcgHr853AISggwVN2XCgmyaYu8+L57XnjugErD68laIPd+w5jvs um3YM6ax/ROVfSnlPfKVG66CYu1kHDrLuU1eItf/MCbkODCltHPBmE4m0vQZFutU LzoyIVgA4grMkBq7nCPE5IivoIr2oYlYtFYLDw1wlg06RCb8LmsPieaRmJxNUDYg pRgx8Wczi5w5tkA/eleEZ6dJJhopGVKoQLMBeNdJjP1DCKN9hWm2hp6wuQIDAQAB o4IClDCCApAwHQYDVR0OBBYEFJSQ65y7zA4B5P3804RbH/Apupl9MB8GA1UdIwQY MBaAFMfwS3iy7t+Zjt1cweiGccjRDxhlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveF9CTGVMTHUzNW1PM1Z6QjZJWnh5TkVQR0dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80NzM5MjQtNmY5OS00NzNkLWEwNzct ZjQzNzgzOTA5NWQxLzEvbEpEcm5Mdk1EZ0hrX2Z6VGhGc2Y4Q202bVgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy80NzM5MjQtNmY5OS00NzNkLWEwNzctZjQzNzgzOTA5NWQx LzEveF9CTGVMTHUzNW1PM1Z6QjZJWnh5TkVQR0dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljCBggQCAAEwfAMEAI+j ATAMAwQCj6MMAwQBj6MQAwQAj6MWAwQBj6NCAwQAwRdgAwQBwnIgAwQBwnIoMAwD BADCcj0DBALCckADBAHCckYDBADCckowDAMEAMJyTQMEAMJyUgMEAcJyVDAMAwQB wnJeAwQDwnJwMAwDBADCcn0DBADCcn4wDwQCAAIwCQMHBioBTcAAADANBgkqhkiG 9w0BAQsFAAOCAQEAqDKCcr2OYCiTQsc3fX6bEE3d0DFnXVDYYwnRun5yHs8xaMIc 8r/RUh7u8Ns+1kEZik2H3/j79pBmBhQMgndK+F4Wu0eZo/yZR/h4SYV37uwXwiR3 kxJpDrjCQ2VBiCQxFsIzxFbQHYc8odxe3AQWbDM67vTEXEE9jmT+MKAfkJ5IqIrm m2F4R2kdZ2yQowsaJ3M1dwlvU89XbbswPx4yIiliOkv8daPMg/faJu4CTskbMWy6 CXg+fM6sLlxsLJDHOyIFFGjGTKwupZhSGGaK6SjlSWohopnk3TfKW4lGeMRUMYYx NPUMFAArB/8p1GSEslcYxlCOL602MC4hXDIABA== -----END CERTIFICATE-----Generated at Tue Jan 20 12:47:49 2026 by rpki-client