This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Em7pM6LssXKO1GMawm5HobIjg0w.roa File: Em7pM6LssXKO1GMawm5HobIjg0w.roa (raw, json) Hash identifier: DbDxVhfNZgsFuUXgnBHHjMTFBOymplRBN3L8VW1JUTQ= Subject key identifier: 12:6E:E9:33:A2:EC:B1:72:8E:D4:63:1A:C2:6E:47:A1:B2:23:83:4C Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Certificate serial: 019B7E379EB09246B7F2873D221C8A9C1B75 Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Em7pM6LssXKO1GMawm5HobIjg0w.roa Signing time: Fri 02 Jan 2026 10:18:52 +0000 ROA not before: Fri 02 Jan 2026 10:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136787 IP address blocks: 37.97.120.0/24 maxlen: 24 64.43.65.0/24 maxlen: 24 64.43.73.0/24 maxlen: 24 64.43.74.0/24 maxlen: 24 64.43.75.0/24 maxlen: 24 64.43.88.0/24 maxlen: 24 64.43.89.0/24 maxlen: 24 64.43.90.0/24 maxlen: 24 64.43.91.0/24 maxlen: 24 64.43.93.0/24 maxlen: 24 64.43.94.0/24 maxlen: 24 64.43.95.0/24 maxlen: 24 64.43.108.0/24 maxlen: 24 64.43.109.0/24 maxlen: 24 64.43.110.0/24 maxlen: 24 64.43.111.0/24 maxlen: 24 64.43.116.0/24 maxlen: 24 64.43.117.0/24 maxlen: 24 64.43.118.0/24 maxlen: 24 64.43.119.0/24 maxlen: 24 64.43.120.0/24 maxlen: 24 64.43.121.0/24 maxlen: 24 64.43.122.0/24 maxlen: 24 64.43.123.0/24 maxlen: 24 77.36.61.0/24 maxlen: 24 77.36.72.0/24 maxlen: 24 77.36.73.0/24 maxlen: 24 77.36.74.0/24 maxlen: 24 77.36.75.0/24 maxlen: 24 77.36.76.0/24 maxlen: 24 77.36.77.0/24 maxlen: 24 77.36.78.0/24 maxlen: 24 77.36.79.0/24 maxlen: 24 81.161.8.0/24 maxlen: 24 81.161.9.0/24 maxlen: 24 81.161.10.0/24 maxlen: 24 81.161.11.0/24 maxlen: 24 91.232.19.0/24 maxlen: 24 91.235.167.0/24 maxlen: 24 91.238.40.0/24 maxlen: 24 91.238.41.0/24 maxlen: 24 91.240.154.0/24 maxlen: 24 91.245.88.0/24 maxlen: 24 91.245.89.0/24 maxlen: 24 91.246.200.0/24 maxlen: 24 93.120.32.0/24 maxlen: 24 93.120.43.0/24 maxlen: 24 93.120.73.0/24 maxlen: 24 109.197.236.0/24 maxlen: 24 109.197.237.0/24 maxlen: 24 109.197.238.0/24 maxlen: 24 109.197.239.0/24 maxlen: 24 176.96.88.0/24 maxlen: 24 176.96.90.0/24 maxlen: 24 176.96.91.0/24 maxlen: 24 176.102.120.0/24 maxlen: 24 176.102.121.0/24 maxlen: 24 176.102.122.0/24 maxlen: 24 176.102.123.0/24 maxlen: 24 176.103.240.0/24 maxlen: 24 176.103.241.0/24 maxlen: 24 176.103.242.0/24 maxlen: 24 176.103.243.0/24 maxlen: 24 176.103.244.0/24 maxlen: 24 176.103.245.0/24 maxlen: 24 176.103.246.0/24 maxlen: 24 176.103.247.0/24 maxlen: 24 193.36.208.0/24 maxlen: 24 193.36.209.0/24 maxlen: 24 193.36.210.0/24 maxlen: 24 193.36.211.0/24 maxlen: 24 193.36.212.0/24 maxlen: 24 193.36.213.0/24 maxlen: 24 193.36.214.0/24 maxlen: 24 193.36.215.0/24 maxlen: 24 193.221.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:9e:b0:92:46:b7:f2:87:3d:22:1c:8a:9c:1b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Validity Not Before: Jan 2 10:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=126ee933a2ecb1728ed4631ac26e47a1b223834c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a9:6e:29:7b:8a:58:e6:b8:b4:43:e2:89:b0: 46:b7:e1:c3:6f:9e:b7:c2:80:4b:92:23:58:ae:7b: b1:5e:97:d4:28:ca:20:d6:e1:97:69:2a:8b:d8:44: 8b:20:3b:d5:7f:eb:31:c6:9a:4c:80:e9:39:16:c4: a1:33:ad:99:7c:2b:01:cc:fa:23:06:12:e3:eb:76: 13:40:2f:d9:1c:94:46:d2:fc:15:1b:40:b9:48:53: 05:42:46:ac:06:4d:e4:e6:48:6b:f7:4c:f4:ee:ab: 43:8d:ab:e0:d1:a3:54:78:a9:2b:7e:fb:13:09:9a: 7d:45:0d:b0:25:b2:4c:95:e8:fb:60:8a:37:4f:cf: 1a:1c:7a:1c:c2:af:22:b0:41:b5:b8:76:52:32:ad: 62:67:d0:fc:ea:f4:db:ee:88:2e:f3:5f:01:04:0f: 53:97:6d:a2:3e:05:7d:81:b7:93:15:93:86:86:cf: 35:bf:fd:a8:1c:8a:1d:c5:ac:34:4a:8e:ee:c6:95: c4:57:6a:5b:7e:25:ec:a9:ea:5e:14:49:6a:78:ce: 6d:aa:7a:df:5c:1b:c3:49:9c:f0:97:6c:c7:ef:a6: 4d:a8:00:57:1d:0e:ad:8d:60:09:a1:7f:d1:8c:92: 1d:17:ce:1a:f9:69:80:5c:22:79:ee:eb:8d:ef:28: 1d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6E:E9:33:A2:EC:B1:72:8E:D4:63:1A:C2:6E:47:A1:B2:23:83:4C X509v3 Authority Key Identifier: keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Em7pM6LssXKO1GMawm5HobIjg0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.97.120.0/24 64.43.65.0/24 64.43.73.0-64.43.75.255 64.43.88.0/22 64.43.93.0-64.43.95.255 64.43.108.0/22 64.43.116.0-64.43.123.255 77.36.61.0/24 77.36.72.0/21 81.161.8.0/22 91.232.19.0/24 91.235.167.0/24 91.238.40.0/23 91.240.154.0/24 91.245.88.0/23 91.246.200.0/24 93.120.32.0/24 93.120.43.0/24 93.120.73.0/24 109.197.236.0/22 176.96.88.0/24 176.96.90.0/23 176.102.120.0/22 176.103.240.0/21 193.36.208.0/21 193.221.83.0/24 Signature Algorithm: sha256WithRSAEncryption 13:74:1c:b0:60:4b:d3:d2:b3:f2:d8:78:bc:b7:08:55:0a:35: 8e:ab:80:b7:72:88:9f:a8:e9:cb:7a:0e:da:59:48:da:7a:cc: 3f:8a:68:74:f7:fb:c0:59:34:d4:9d:21:9f:c3:c8:c0:15:fb: ca:96:60:08:e2:de:2f:1e:de:c1:b5:ca:a0:43:e0:4a:44:48: d3:f2:36:60:39:b3:7e:48:b7:12:c7:a9:cc:00:8d:2a:61:13: a1:81:0d:97:8c:d8:9e:20:9f:08:50:fb:98:08:40:36:81:ac: ae:f9:ba:9e:ce:67:c4:cc:9b:35:e2:3c:ce:eb:26:d1:d7:ba: 33:bd:52:da:34:6e:9a:a2:c5:f0:72:00:2a:d6:16:ee:2a:66: 12:05:ee:e5:34:bc:0b:2e:82:1f:97:c9:ed:69:59:c6:f9:92: 52:31:7c:64:b8:ad:29:a4:fa:f0:e3:25:eb:71:94:59:e3:b2: e5:3a:ca:13:8c:44:74:e7:54:d8:55:0d:9d:03:4c:91:86:65: 7c:b7:d6:ae:f3:57:2f:41:2c:fc:91:ba:87:dd:d1:80:ba:a5: 00:28:cf:95:da:fd:6c:28:d7:13:45:ce:07:9c:6f:80:c8:6c: 1d:8c:17:44:ae:c3:fe:ba:40:71:51:a1:0b:8c:d0:d8:96:b4: 1b:e7:54:f0 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt+N56wkka38oc9IhyKnBt1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy MjRkYWEwHhcNMjYwMTAyMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjZlZTkzM2EyZWNiMTcyOGVkNDYzMWFjMjZlNDdhMWIyMjM4MzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6luKXuKWOa4tEPiibBGt+HDb563 woBLkiNYrnuxXpfUKMog1uGXaSqL2ESLIDvVf+sxxppMgOk5FsShM62ZfCsBzPoj BhLj63YTQC/ZHJRG0vwVG0C5SFMFQkasBk3k5khr90z07qtDjavg0aNUeKkrfvsT CZp9RQ2wJbJMlej7YIo3T88aHHocwq8isEG1uHZSMq1iZ9D86vTb7ogu818BBA9T l22iPgV9gbeTFZOGhs81v/2oHIodxaw0So7uxpXEV2pbfiXsqepeFElqeM5tqnrf XBvDSZzwl2zH76ZNqABXHQ6tjWAJoX/RjJIdF84a+WmAXCJ57uuN7ygdJwIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFBJu6TOi7LFyjtRjGsJuR6GyI4NMMB8GA1UdIwQY MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt ZGMwNmRkODA1OTYwLzEvRW03cE02THNzWEtPMUdNYXdtNUhvYklqZzB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHRBggrBgEFBQcBBwEB/wSBwTCBvjCBuwQCAAEwgbQDBAAl YXgDBABAK0EwDAMEAEArSQMEAkArSAMEAkArWDAMAwQAQCtdAwQFQCtAAwQCQCts MAwDBAJAK3QDBAJAK3gDBABNJD0DBANNJEgDBAJRoQgDBABb6BMDBABb66cDBAFb 7igDBABb8JoDBAFb9VgDBABb9sgDBABdeCADBABdeCsDBABdeEkDBAJtxewDBACw YFgDBAGwYFoDBAKwZngDBAOwZ/ADBAPBJNADBADB3VMwDQYJKoZIhvcNAQELBQAD ggEBABN0HLBgS9PSs/LYeLy3CFUKNY6rgLdyiJ+o6ct6DtpZSNp6zD+KaHT3+8BZ NNSdIZ/DyMAV+8qWYAji3i8e3sG1yqBD4EpESNPyNmA5s35ItxLHqcwAjSphE6GB DZeM2J4gnwhQ+5gIQDaBrK75up7OZ8TMmzXiPM7rJtHXujO9Uto0bpqixfByACrW Fu4qZhIF7uU0vAsugh+Xye1pWcb5klIxfGS4rSmk+vDjJetxlFnjsuU6yhOMRHTn VNhVDZ0DTJGGZXy31q7zVy9BLPyRuofd0YC6pQAoz5Xa/Wwo1xNFzgecb4DIbB2M F0Suw/66QHFRoQuM0NiWtBvnVPA= -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:05 2026 by rpki-client