This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/lZYjAlieaWalZ0KSroGQzHPZAaI.roa File: lZYjAlieaWalZ0KSroGQzHPZAaI.roa (raw, json) Hash identifier: 0dG1ycXZz4Qf/zwx+gjvfmGbbEvQRsWOdYOPitUdJTA= Subject key identifier: 95:96:23:02:58:9E:69:66:A5:67:42:92:AE:81:90:CC:73:D9:01:A2 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019B9C9477D25F6797779695C954C4B49D51 Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/lZYjAlieaWalZ0KSroGQzHPZAaI.roa Signing time: Thu 08 Jan 2026 07:48:54 +0000 ROA not before: Thu 08 Jan 2026 07:48:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44208 IP address blocks: 31.170.48.0/23 maxlen: 23 31.170.50.0/23 maxlen: 23 31.170.52.0/24 maxlen: 24 31.170.53.0/24 maxlen: 24 31.170.54.0/24 maxlen: 24 31.170.56.0/23 maxlen: 23 31.170.58.0/23 maxlen: 23 31.170.60.0/22 maxlen: 22 37.49.148.0/24 maxlen: 24 94.74.128.0/23 maxlen: 23 94.74.130.0/23 maxlen: 23 94.74.132.0/22 maxlen: 22 94.74.136.0/24 maxlen: 24 94.74.138.0/23 maxlen: 23 94.74.141.0/24 maxlen: 24 94.74.142.0/23 maxlen: 23 94.74.144.0/24 maxlen: 24 94.74.146.0/24 maxlen: 24 94.74.148.0/23 maxlen: 23 94.74.150.0/23 maxlen: 23 94.74.160.0/22 maxlen: 22 94.74.165.0/24 maxlen: 24 94.74.166.0/23 maxlen: 23 94.74.168.0/23 maxlen: 24 94.74.170.0/24 maxlen: 24 94.74.172.0/24 maxlen: 24 94.74.174.0/23 maxlen: 23 94.74.176.0/22 maxlen: 22 94.74.180.0/23 maxlen: 23 94.74.182.0/23 maxlen: 23 94.74.186.0/23 maxlen: 23 94.74.188.0/23 maxlen: 23 94.74.190.0/24 maxlen: 24 94.74.191.0/24 maxlen: 24 176.46.134.0/24 maxlen: 24 176.46.139.0/24 maxlen: 24 176.46.141.0/24 maxlen: 24 176.46.144.0/24 maxlen: 24 176.46.147.0/24 maxlen: 24 176.46.148.0/24 maxlen: 24 176.46.149.0/24 maxlen: 24 176.46.152.0/24 maxlen: 24 176.46.153.0/24 maxlen: 24 176.46.154.0/24 maxlen: 24 176.46.155.0/24 maxlen: 24 176.46.156.0/24 maxlen: 24 176.46.157.0/24 maxlen: 24 176.46.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9c:94:77:d2:5f:67:97:77:96:95:c9:54:c4:b4:9d:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Jan 8 07:48:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95962302589e6966a5674292ae8190cc73d901a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:27:d8:e0:f4:b1:59:c0:7c:a3:a9:ac:b4:7f: a6:ed:30:1a:8f:cf:98:9b:de:c1:8d:8c:a6:7c:42: 1e:8b:6a:74:e5:a5:75:bd:49:21:f5:35:6a:07:c1: 5e:b7:b5:88:e3:17:76:43:4e:1e:69:c2:8b:9e:71: a9:0b:39:44:d3:92:ec:74:5e:ae:d8:3a:5a:f4:56: 20:44:f4:b5:f9:a0:2d:fb:5e:cb:69:17:b3:53:1c: c4:6b:52:e6:5b:9e:1a:cb:c4:f6:8c:37:cc:ad:17: 89:48:88:fe:04:66:7d:cb:18:4f:79:04:7a:65:bb: ff:d2:4f:96:dc:42:2c:d0:ab:a1:bb:e3:16:fe:3e: 3f:54:11:d0:c5:d2:fc:e6:f5:89:ca:dd:70:d9:8d: 3b:c9:92:17:1d:6b:db:20:6e:47:fd:bf:f7:67:1d: cd:ad:7c:cc:e6:01:39:6a:78:79:fe:7f:0e:c9:3b: d1:99:d7:b2:20:7f:00:cc:d6:76:a8:79:e0:ae:29: 44:aa:03:0b:b4:4c:a3:6c:62:77:7a:20:3d:61:2b: 00:de:19:b9:d1:70:79:b2:8f:14:1c:3a:67:fd:d2: 26:22:5f:5b:bd:46:cf:dd:c9:32:a3:5f:77:e4:76: b1:f9:15:d0:4a:fb:dd:8a:71:05:0b:b4:cf:27:e1: d9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:96:23:02:58:9E:69:66:A5:67:42:92:AE:81:90:CC:73:D9:01:A2 X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/lZYjAlieaWalZ0KSroGQzHPZAaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.170.48.0-31.170.54.255 31.170.56.0/21 37.49.148.0/24 94.74.128.0-94.74.136.255 94.74.138.0/23 94.74.141.0-94.74.144.255 94.74.146.0/24 94.74.148.0/22 94.74.160.0/22 94.74.165.0-94.74.170.255 94.74.172.0/24 94.74.174.0-94.74.183.255 94.74.186.0-94.74.191.255 176.46.134.0/24 176.46.139.0/24 176.46.141.0/24 176.46.144.0/24 176.46.147.0-176.46.149.255 176.46.152.0-176.46.158.255 Signature Algorithm: sha256WithRSAEncryption 82:91:a9:42:1b:4c:2b:19:6c:9b:b9:41:5c:a0:20:79:b4:76: 97:d0:ee:c4:eb:aa:73:58:08:cf:be:78:3e:9b:2a:dd:57:ab: 8b:e6:f6:d4:4f:76:4b:00:e7:6a:3c:11:07:d8:dd:fa:b7:1f: 26:8f:6a:f9:ad:5d:b1:69:1b:c8:e5:40:29:45:5b:47:03:94: 95:5d:ca:65:b9:bb:d3:e7:43:dc:52:cd:9c:6e:48:7c:cb:8d: 03:ef:a1:7c:df:8d:d4:c6:d0:f4:4f:40:51:da:4a:16:3a:63: 89:52:07:bb:26:9e:94:34:c9:e5:37:a6:a8:91:67:a3:e3:fb: 7b:d0:69:c2:6a:62:7d:8b:14:cf:c3:1b:6d:55:a1:b5:65:38: 36:5e:b9:56:6b:8b:3f:a4:6f:fb:6d:b3:66:8f:09:7f:7d:e5: 89:44:b6:8c:be:90:2b:dd:3f:ba:95:ee:0c:69:e3:65:d5:e4: 6a:8f:8f:83:fa:16:9c:14:a1:31:68:91:05:1c:ab:0f:55:54: f8:f2:18:a5:8a:d9:76:04:9d:ec:20:07:e4:31:f7:3b:82:73: 5c:54:fb:f4:fa:66:07:96:0f:82:28:af:c1:44:9f:7f:8e:80: 2c:cb:6e:58:13:aa:09:4a:3c:12:97:34:db:ff:91:71:97:c9: 1e:05:00:44 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZuclHfSX2eXd5aVyVTEtJ1RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjYwMTA4MDc0ODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTk2MjMwMjU4OWU2OTY2YTU2NzQyOTJhZTgxOTBjYzczZDkwMWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CfY4PSxWcB8o6mstH+m7TAaj8+Y m97BjYymfEIei2p05aV1vUkh9TVqB8Fet7WI4xd2Q04eacKLnnGpCzlE05LsdF6u 2Dpa9FYgRPS1+aAt+17LaRezUxzEa1LmW54ay8T2jDfMrReJSIj+BGZ9yxhPeQR6 Zbv/0k+W3EIs0Kuhu+MW/j4/VBHQxdL85vWJyt1w2Y07yZIXHWvbIG5H/b/3Zx3N rXzM5gE5anh5/n8OyTvRmdeyIH8AzNZ2qHngrilEqgMLtEyjbGJ3eiA9YSsA3hm5 0XB5so8UHDpn/dImIl9bvUbP3ckyo1935Hax+RXQSvvdinEFC7TPJ+HZ6QIDAQAB o4ICujCCArYwHQYDVR0OBBYEFJWWIwJYnmlmpWdCkq6BkMxz2QGiMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvbFpZakFsaWVhV2FsWjBLU3JvR1F6SFBaQWFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHPBggrBgEFBQcBBwEB/wSBvzCBvDCBuQQCAAEwgbIwDAME BB+qMAMEAB+qNgMEAx+qOAMEACUxlDAMAwQHXkqAAwQAXkqIAwQBXkqKMAwDBABe So0DBABeSpADBABeSpIDBAJeSpQDBAJeSqAwDAMEAF5KpQMEAF5KqgMEAF5KrDAM AwQBXkquAwQDXkqwMAwDBAFeSroDBAZeSoADBACwLoYDBACwLosDBACwLo0DBACw LpAwDAMEALAukwMEAbAulDAMAwQDsC6YAwQAsC6eMA0GCSqGSIb3DQEBCwUAA4IB AQCCkalCG0wrGWybuUFcoCB5tHaX0O7E66pzWAjPvng+myrdV6uL5vbUT3ZLAOdq PBEH2N36tx8mj2r5rV2xaRvI5UApRVtHA5SVXcplubvT50PcUs2cbkh8y40D76F8 343UxtD0T0BR2koWOmOJUge7Jp6UNMnlN6aokWej4/t70GnCamJ9ixTPwxttVaG1 ZTg2XrlWa4s/pG/7bbNmjwl/feWJRLaMvpAr3T+6le4MaeNl1eRqj4+D+hacFKEx aJEFHKsPVVT48hilitl2BJ3sIAfkMfc7gnNcVPv0+mYHlg+CKK/BRJ9/joAsy25Y E6oJSjwSlzTb/5Fxl8keBQBE -----END CERTIFICATE-----Generated at Wed Jan 21 22:55:12 2026 by rpki-client