This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/tS7Ekl755jz7sx7rmhOe1p5tzfI.roa File: tS7Ekl755jz7sx7rmhOe1p5tzfI.roa (raw, json) Hash identifier: JxL6ENaZZO0bTihUCNQQ0Sy7sFcJ4MbgWVnIFPKdL6E= Subject key identifier: B5:2E:C4:92:5E:F9:E6:3C:FB:B3:1E:EB:9A:13:9E:D6:9E:6D:CD:F2 Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec Certificate serial: 019B7BA509988332A35F93C1ABD9613A35A1 Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/tS7Ekl755jz7sx7rmhOe1p5tzfI.roa Signing time: Thu 01 Jan 2026 22:19:32 +0000 ROA not before: Thu 01 Jan 2026 22:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 2.96.0.0/13 maxlen: 24 62.24.128.0/17 maxlen: 24 62.241.160.0/19 maxlen: 24 78.144.0.0/13 maxlen: 24 79.77.0.0/16 maxlen: 24 79.78.0.0/15 maxlen: 24 80.40.0.0/13 maxlen: 24 81.1.64.0/18 maxlen: 24 81.86.0.0/16 maxlen: 24 81.178.0.0/15 maxlen: 24 83.67.0.0/16 maxlen: 24 84.43.0.0/17 maxlen: 24 87.242.128.0/17 maxlen: 24 89.168.128.0/17 maxlen: 24 89.240.0.0/14 maxlen: 24 92.16.0.0/12 maxlen: 24 145.255.240.0/21 maxlen: 24 185.24.12.0/22 maxlen: 24 185.173.120.0/22 maxlen: 24 185.175.48.0/22 maxlen: 24 185.175.144.0/22 maxlen: 24 193.218.99.0/24 maxlen: 24 194.106.32.0/19 maxlen: 24 194.247.224.0/19 maxlen: 24 195.112.0.0/18 maxlen: 24 195.137.0.0/17 maxlen: 24 195.149.0.0/18 maxlen: 24 212.1.128.0/19 maxlen: 24 212.67.96.0/19 maxlen: 24 212.74.96.0/19 maxlen: 24 212.139.0.0/16 maxlen: 24 212.159.128.0/18 maxlen: 24 213.78.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:09:98:83:32:a3:5f:93:c1:ab:d9:61:3a:35:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec Validity Not Before: Jan 1 22:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b52ec4925ef9e63cfbb31eeb9a139ed69e6dcdf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a6:2b:43:de:45:31:ac:ec:5e:e2:6d:d4:72: ad:5c:6b:16:df:73:7e:65:a6:cb:be:c9:5f:4c:a5: 21:d5:24:17:24:35:d1:be:7f:1e:49:3b:53:1d:03: eb:54:34:92:17:4e:8b:5d:20:87:37:12:61:97:d8: e6:58:90:b8:01:d6:58:9f:46:3f:ac:aa:56:e0:a1: 21:2a:78:37:4a:06:43:8c:ef:09:a7:f2:30:6d:b5: 7e:e6:76:6b:f3:1f:b5:73:54:55:29:08:ab:75:84: 5f:6a:11:6a:fb:87:b2:de:42:57:ae:8e:56:0f:90: 15:e3:85:bc:6c:49:71:c2:00:a2:73:ea:55:21:15: 04:67:24:71:5c:2a:52:a9:5d:96:c8:9c:9d:b1:aa: cf:89:b7:44:6e:b7:30:a0:d0:45:2b:a3:04:02:6d: 55:9d:7d:48:50:9d:a5:60:d1:c2:05:e2:21:5b:60: c0:86:02:4b:5d:1a:3e:95:23:66:82:4c:a6:39:84: d2:46:86:b7:6f:bb:85:a0:48:6a:aa:1c:f2:ab:77: be:0a:eb:76:5e:53:55:84:b4:20:c0:66:94:10:af: 45:f9:16:1f:02:1c:1d:86:79:06:0f:c8:a0:c7:44: 94:80:b4:a7:f0:bc:8a:b8:d3:e7:e2:1a:a8:43:eb: 99:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:2E:C4:92:5E:F9:E6:3C:FB:B3:1E:EB:9A:13:9E:D6:9E:6D:CD:F2 X509v3 Authority Key Identifier: keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/tS7Ekl755jz7sx7rmhOe1p5tzfI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.96.0.0/13 62.24.128.0/17 62.241.160.0/19 78.144.0.0/13 79.77.0.0-79.79.255.255 80.40.0.0/13 81.1.64.0/18 81.86.0.0/16 81.178.0.0/15 83.67.0.0/16 84.43.0.0/17 87.242.128.0/17 89.168.128.0/17 89.240.0.0/14 92.16.0.0/12 145.255.240.0/21 185.24.12.0/22 185.173.120.0/22 185.175.48.0/22 185.175.144.0/22 193.218.99.0/24 194.106.32.0/19 194.247.224.0/19 195.112.0.0/18 195.137.0.0/17 195.149.0.0/18 212.1.128.0/19 212.67.96.0/19 212.74.96.0/19 212.139.0.0/16 212.159.128.0/18 213.78.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2d:f0:fa:e2:c1:d8:fa:9b:0b:29:89:59:65:33:96:b3:78:0f: 0f:f0:5f:a0:79:5f:e5:4f:1a:79:f6:00:4c:e2:37:6c:a7:48: 69:e1:50:43:2b:b9:90:22:60:eb:56:47:9e:6b:1e:f6:81:49: 1c:67:e8:95:04:77:63:49:10:d3:79:ce:65:ba:30:ad:c0:12: 0c:73:a9:49:01:44:76:b0:1e:ea:92:f7:7a:60:57:a8:88:35: 1d:23:ff:b4:61:2e:48:4b:b8:49:e8:2d:0f:f9:f1:6d:e1:a8: 8d:e8:53:1a:3b:c2:36:c7:82:d7:35:6e:00:28:39:21:06:c1: 4c:e3:6a:b0:03:a0:7a:90:b0:64:88:5e:7a:db:c3:e6:81:c5: fa:0b:51:c3:d0:1a:b4:f5:a2:45:c1:c8:45:f2:7b:2c:15:40: 89:05:6b:9d:50:ff:1b:4d:e3:cb:78:c7:da:d6:90:17:09:61: 8f:51:6e:3d:bf:4a:ba:57:de:13:a0:8b:6e:ff:61:d5:09:93: 58:31:73:63:47:06:eb:79:11:09:aa:d2:5b:23:d4:ea:97:f5: ad:e4:1c:af:60:8f:67:6b:b6:2d:b4:e2:ed:9b:fd:02:39:fc: b3:29:6e:e3:ce:5e:6e:a3:54:a6:94:93:42:1e:ec:3f:82:d4: e5:62:68:17 -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgISAZt7pQmYgzKjX5PBq9lhOjWhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ODA3ZjZkNTBkOTdkOTcxZGNmMmUyZTUwNjRlOWI5MDdh ZGIzZWMwHhcNMjYwMTAxMjIxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTJlYzQ5MjVlZjllNjNjZmJiMzFlZWI5YTEzOWVkNjllNmRjZGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKYrQ95FMazsXuJt1HKtXGsW33N+ ZabLvslfTKUh1SQXJDXRvn8eSTtTHQPrVDSSF06LXSCHNxJhl9jmWJC4AdZYn0Y/ rKpW4KEhKng3SgZDjO8Jp/IwbbV+5nZr8x+1c1RVKQirdYRfahFq+4ey3kJXro5W D5AV44W8bElxwgCic+pVIRUEZyRxXCpSqV2WyJydsarPibdEbrcwoNBFK6MEAm1V nX1IUJ2lYNHCBeIhW2DAhgJLXRo+lSNmgkymOYTSRoa3b7uFoEhqqhzyq3e+Cut2 XlNVhLQgwGaUEK9F+RYfAhwdhnkGD8igx0SUgLSn8LyKuNPn4hqoQ+uZJwIDAQAB o4ICxDCCAsAwHQYDVR0OBBYEFLUuxJJe+eY8+7Me65oTntaebc3yMB8GA1UdIwQY MBaAFKmAf21Q2X2XHc8uLlBk6bkHrbPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzIt MGQ4ZjdkZDhjY2U2LzEvdFM3RWtsNzU1ano3c3g3cm1oT2UxcDV0emZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzItMGQ4ZjdkZDhjY2U2 LzEvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHZBggrBgEFBQcBBwEB/wSByTCBxjCBwwQCAAEwgbwDAwMC YAMEBz4YgAMEBT7xoAMDA06QMAoDAwBPTQMDBE9AAwMDUCgDBAZRAUADAwBRVgMD AVGyAwMAU0MDBAdUKwADBAdX8oADBAdZqIADAwJZ8AMDBFwQAwQDkf/wAwQCuRgM AwQCua14AwQCua8wAwQCua+QAwQAwdpjAwQFwmogAwQFwvfgAwQGw3AAAwQHw4kA AwQGw5UAAwQF1AGAAwQF1ENgAwQF1EpgAwMA1IsDBAbUn4ADAwDVTjANBgkqhkiG 9w0BAQsFAAOCAQEALfD64sHY+psLKYlZZTOWs3gPD/BfoHlf5U8aefYATOI3bKdI aeFQQyu5kCJg61ZHnmse9oFJHGfolQR3Y0kQ03nOZbowrcASDHOpSQFEdrAe6pL3 emBXqIg1HSP/tGEuSEu4SegtD/nxbeGojehTGjvCNseC1zVuACg5IQbBTONqsAOg epCwZIheetvD5oHF+gtRw9AatPWiRcHIRfJ7LBVAiQVrnVD/G03jy3jH2taQFwlh j1FuPb9KulfeE6CLbv9h1QmTWDFzY0cG63kRCarSWyPU6pf1reQcr2CPZ2u2LbTi 7Zv9Ajn8sylu485ebqNUppSTQh7sP4LU5WJoFw== -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:09 2026 by rpki-client