This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/IseQbjc3SpcyUOPq4Wx4jbeVrwY.roa File: IseQbjc3SpcyUOPq4Wx4jbeVrwY.roa (raw, json) Hash identifier: 1LrasHnqIMCbBJdweDs0ritZuYeZS+3aW/bWYuziBXA= Subject key identifier: 22:C7:90:6E:37:37:4A:97:32:50:E3:EA:E1:6C:78:8D:B7:95:AF:06 Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Certificate serial: 019B7D5C46ECE86C3AFAEDBFF4089BF7A79F Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/IseQbjc3SpcyUOPq4Wx4jbeVrwY.roa Signing time: Fri 02 Jan 2026 06:19:17 +0000 ROA not before: Fri 02 Jan 2026 06:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200736 IP address blocks: 94.131.32.0/20 maxlen: 24 94.131.128.0/19 maxlen: 24 94.131.130.0/24 maxlen: 24 94.131.131.0/24 maxlen: 24 94.131.132.0/24 maxlen: 24 94.131.133.0/24 maxlen: 24 94.131.134.0/24 maxlen: 24 94.131.135.0/24 maxlen: 24 94.131.136.0/24 maxlen: 24 94.131.137.0/24 maxlen: 24 94.131.138.0/24 maxlen: 24 94.131.139.0/24 maxlen: 24 94.131.140.0/24 maxlen: 24 94.131.141.0/24 maxlen: 24 94.131.142.0/24 maxlen: 24 94.131.143.0/24 maxlen: 24 94.131.144.0/23 maxlen: 23 94.131.144.0/24 maxlen: 24 94.131.145.0/24 maxlen: 24 94.131.146.0/24 maxlen: 24 94.131.147.0/24 maxlen: 24 94.131.148.0/24 maxlen: 24 94.131.149.0/24 maxlen: 24 94.131.150.0/24 maxlen: 24 94.131.151.0/24 maxlen: 24 94.131.152.0/24 maxlen: 24 94.131.153.0/24 maxlen: 24 94.131.154.0/24 maxlen: 24 94.131.155.0/24 maxlen: 24 94.131.156.0/24 maxlen: 24 94.131.157.0/24 maxlen: 24 94.131.158.0/24 maxlen: 24 94.131.159.0/24 maxlen: 24 94.131.160.0/20 maxlen: 24 94.131.161.0/24 maxlen: 24 94.131.162.0/24 maxlen: 24 94.131.163.0/24 maxlen: 24 94.131.165.0/24 maxlen: 24 94.131.166.0/24 maxlen: 24 94.131.167.0/24 maxlen: 24 94.131.169.0/24 maxlen: 24 94.131.170.0/24 maxlen: 24 94.131.172.0/24 maxlen: 24 94.131.173.0/24 maxlen: 24 94.131.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:46:ec:e8:6c:3a:fa:ed:bf:f4:08:9b:f7:a7:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Validity Not Before: Jan 2 06:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22c7906e37374a973250e3eae16c788db795af06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d5:b7:c5:a4:d2:39:69:a1:69:ca:ea:36:7f: e5:52:83:9f:f7:cd:a2:83:7f:5d:59:4d:7e:53:5f: 2f:15:29:89:c0:4a:a0:87:c4:4c:04:cb:2a:89:2a: c7:28:fc:fd:2a:d6:eb:33:0e:38:56:14:5f:23:34: aa:8b:cf:2a:74:b0:28:cc:97:dc:cc:46:a4:f3:ac: b8:a2:6c:36:3a:34:9d:30:83:29:14:a3:3a:9a:7a: f8:6a:09:0a:f5:a5:c8:ba:cc:4b:bc:d2:29:d1:2b: 61:f7:2f:3f:85:e6:e7:2c:68:e9:6e:26:b4:92:ca: 82:13:af:1d:3a:bd:14:fb:b0:af:85:1a:cb:1b:17: 86:1f:b8:e0:b9:c5:e5:6a:7d:98:2c:9f:27:2f:ba: 90:7c:42:75:e4:17:4c:0d:1a:cd:f3:de:ed:54:a1: 53:79:97:ef:12:f0:8d:62:94:d3:b1:39:c3:91:ca: 04:70:84:3c:17:d4:d4:ed:65:60:8f:86:91:b8:57: 0a:da:55:3c:52:fe:55:08:44:2d:0e:fa:0a:c9:a8: 42:26:54:f0:14:a4:ae:0b:aa:08:cd:0b:7d:60:25: bd:52:2d:c3:7b:07:2f:8e:25:d9:f9:98:14:93:db: 68:79:50:0b:7b:9e:28:f2:93:57:ab:ff:0b:43:7a: 64:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C7:90:6E:37:37:4A:97:32:50:E3:EA:E1:6C:78:8D:B7:95:AF:06 X509v3 Authority Key Identifier: keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/IseQbjc3SpcyUOPq4Wx4jbeVrwY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.131.32.0/20 94.131.128.0-94.131.175.255 Signature Algorithm: sha256WithRSAEncryption 46:7f:46:59:ea:b6:88:25:b0:f8:76:9b:4c:60:ff:35:9d:67: ea:eb:f4:d4:c2:66:ca:4c:3f:cf:ef:00:34:76:db:48:d0:3d: 85:d9:c4:cb:5a:8e:3b:f3:07:ef:d3:0e:7e:cf:5e:18:b5:2c: 1a:e7:40:be:12:6f:92:2b:20:3a:61:5d:b8:bf:93:ba:23:af: 78:bd:5c:11:68:47:7f:a7:56:aa:ce:4c:b5:66:b0:46:5b:d9: fc:3d:2b:b5:47:8d:81:45:87:6e:01:17:aa:eb:14:72:4d:0f: f1:58:95:de:0c:d5:2b:94:7c:f7:5a:d6:ce:ef:20:de:5c:e7: d9:75:ab:b1:cc:93:ed:02:29:7b:70:4c:4c:6d:9c:f0:e9:1e: ac:4d:0a:5d:65:f4:24:c4:19:5e:16:d6:f9:60:19:bb:bc:58: a2:b1:94:5d:6d:8d:c1:bd:7e:39:26:91:e1:3f:a7:69:4c:18: 0f:48:19:cf:73:6d:5d:0f:0a:ab:c1:37:6a:70:be:5e:81:d3: 45:e5:e4:c5:73:78:7e:47:ec:21:06:a6:5d:23:ed:d0:14:56: c8:d0:ef:c0:48:4c:b9:99:25:6c:49:63:3c:83:72:55:21:13: 18:1c:e1:10:9a:d8:44:ae:93:41:b4:d5:6b:92:a3:70:05:0a: 16:58:f4:ef -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9XEbs6Gw6+u2/9Aib96efMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj NjJhMDMwHhcNMjYwMTAyMDYxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmM3OTA2ZTM3Mzc0YTk3MzI1MGUzZWFlMTZjNzg4ZGI3OTVhZjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNW3xaTSOWmhacrqNn/lUoOf982i g39dWU1+U18vFSmJwEqgh8RMBMsqiSrHKPz9KtbrMw44VhRfIzSqi88qdLAozJfc zEak86y4omw2OjSdMIMpFKM6mnr4agkK9aXIusxLvNIp0Sth9y8/hebnLGjpbia0 ksqCE68dOr0U+7CvhRrLGxeGH7jgucXlan2YLJ8nL7qQfEJ15BdMDRrN897tVKFT eZfvEvCNYpTTsTnDkcoEcIQ8F9TU7WVgj4aRuFcK2lU8Uv5VCEQtDvoKyahCJlTw FKSuC6oIzQt9YCW9Ui3DewcvjiXZ+ZgUk9toeVALe54o8pNXq/8LQ3pkiQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFCLHkG43N0qXMlDj6uFseI23la8GMB8GA1UdIwQY MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt ZTk3MjRhN2E2YmM4LzEvSXNlUWJqYzNTcGN5VU9QcTRXeDRqYmVWcndZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4 LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQEXoMgMAwD BAdeg4ADBAReg6AwDQYJKoZIhvcNAQELBQADggEBAEZ/RlnqtoglsPh2m0xg/zWd Z+rr9NTCZspMP8/vADR220jQPYXZxMtajjvzB+/TDn7PXhi1LBrnQL4Sb5IrIDph Xbi/k7ojr3i9XBFoR3+nVqrOTLVmsEZb2fw9K7VHjYFFh24BF6rrFHJND/FYld4M 1SuUfPda1s7vIN5c59l1q7HMk+0CKXtwTExtnPDpHqxNCl1l9CTEGV4W1vlgGbu8 WKKxlF1tjcG9fjkmkeE/p2lMGA9IGc9zbV0PCqvBN2pwvl6B00Xl5MVzeH5H7CEG pl0j7dAUVsjQ78BITLmZJWxJYzyDclUhExgc4RCa2ESuk0G01WuSo3AFChZY9O8= -----END CERTIFICATE-----Generated at Wed Jan 21 15:23:28 2026 by rpki-client