This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/iSbmw6iYTCL_uj0nNJzi3x_l3fc.roa File: iSbmw6iYTCL_uj0nNJzi3x_l3fc.roa (raw, json) Hash identifier: a4Xp6WN8Wr5MTPzks0nbHO1+pUhmrhJ7zphulReBkhI= Subject key identifier: 89:26:E6:C3:A8:98:4C:22:FF:BA:3D:27:34:9C:E2:DF:1F:E5:DD:F7 Certificate issuer: /CN=149d1f67a41ca2e405017cbe48bafff1733e3869 Certificate serial: 019BE0CF72604633CE90A98A6A50BAC417D6 Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/iSbmw6iYTCL_uj0nNJzi3x_l3fc.roa Signing time: Wed 21 Jan 2026 13:47:30 +0000 ROA not before: Wed 21 Jan 2026 13:47:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207728 IP address blocks: 31.10.5.0/24 maxlen: 24 31.210.170.0/23 maxlen: 24 31.210.172.0/24 maxlen: 24 31.210.173.0/24 maxlen: 24 46.28.234.0/24 maxlen: 24 62.171.228.0/24 maxlen: 24 62.171.229.0/24 maxlen: 24 62.171.230.0/24 maxlen: 24 62.171.231.0/24 maxlen: 24 62.204.42.0/24 maxlen: 24 85.136.112.0/24 maxlen: 24 85.136.113.0/24 maxlen: 24 85.136.114.0/24 maxlen: 24 85.136.115.0/24 maxlen: 24 85.136.180.0/24 maxlen: 24 85.136.181.0/24 maxlen: 24 85.136.182.0/24 maxlen: 24 85.136.183.0/24 maxlen: 24 87.236.177.0/24 maxlen: 24 93.88.74.0/24 maxlen: 24 93.88.75.0/24 maxlen: 24 103.65.230.0/24 maxlen: 24 103.65.231.0/24 maxlen: 24 104.192.42.0/24 maxlen: 24 138.226.220.0/24 maxlen: 24 138.226.221.0/24 maxlen: 24 138.226.222.0/24 maxlen: 24 138.226.223.0/24 maxlen: 24 148.227.170.0/24 maxlen: 24 185.162.8.0/24 maxlen: 24 185.162.9.0/24 maxlen: 24 185.162.11.0/24 maxlen: 24 185.204.52.0/24 maxlen: 24 185.204.54.0/24 maxlen: 24 185.204.55.0/24 maxlen: 24 194.146.127.0/24 maxlen: 24 2a12:9cc0::/48 maxlen: 48 2a12:9cc0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:cf:72:60:46:33:ce:90:a9:8a:6a:50:ba:c4:17:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869 Validity Not Before: Jan 21 13:47:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8926e6c3a8984c22ffba3d27349ce2df1fe5ddf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:9b:dd:e4:03:b2:f8:76:03:73:65:a6:89:1a: 9b:24:61:1b:98:76:84:36:25:e7:19:94:aa:ab:11: 77:c2:76:d6:90:22:9c:64:38:27:e9:48:fc:d4:01: 0e:e3:bd:42:9a:49:aa:8c:a6:a7:4d:c5:ff:31:bb: 56:9f:b1:17:10:49:ef:73:2d:60:70:99:5b:1e:0c: 2d:47:88:d1:f0:0c:94:6a:73:fa:a6:1e:ad:be:72: 60:4f:29:f2:86:96:4f:6c:40:0e:11:79:9a:01:83: c6:50:ed:7c:ce:b7:e3:c0:fc:47:60:77:67:ee:ca: dd:e6:77:23:5b:e7:c7:86:c6:5e:e7:25:8d:93:57: fd:43:64:b7:66:b5:84:25:20:28:23:af:98:a7:72: 73:6b:65:90:46:50:f4:f5:d2:f7:64:b9:39:7e:88: a7:a2:7d:61:e4:a3:ec:9d:59:ec:4c:07:a6:85:1e: 5f:69:9b:fd:7b:46:47:f3:f3:58:42:04:57:c8:a9: 7f:1d:79:1a:07:6d:54:66:93:d5:c2:c7:9b:37:87: c6:1d:4b:30:5f:9f:6f:1e:2a:ea:a1:f4:a8:bb:e1: 41:16:73:df:66:bc:13:a2:42:7b:27:4b:f5:79:da: fd:25:71:85:2f:51:6e:96:a4:40:9b:d7:38:1a:35: 6e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:26:E6:C3:A8:98:4C:22:FF:BA:3D:27:34:9C:E2:DF:1F:E5:DD:F7 X509v3 Authority Key Identifier: keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/iSbmw6iYTCL_uj0nNJzi3x_l3fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.10.5.0/24 31.210.170.0-31.210.173.255 46.28.234.0/24 62.171.228.0/22 62.204.42.0/24 85.136.112.0/22 85.136.180.0/22 87.236.177.0/24 93.88.74.0/23 103.65.230.0/23 104.192.42.0/24 138.226.220.0/22 148.227.170.0/24 185.162.8.0/23 185.162.11.0/24 185.204.52.0/24 185.204.54.0/23 194.146.127.0/24 IPv6: 2a12:9cc0::/47 Signature Algorithm: sha256WithRSAEncryption 16:f0:c6:ef:22:97:fb:6f:0c:42:10:bb:a3:1e:22:4d:08:db: 50:94:fe:84:53:da:d7:c0:6e:4e:e0:4b:f3:00:81:b3:89:f6: 18:69:0d:d2:6b:20:1a:31:da:d4:ab:5b:45:b1:f8:61:03:f9: c3:e6:ec:02:2b:79:4d:d1:e0:46:d2:bd:ad:f5:dd:c2:46:a6: 84:33:2d:0c:2f:d5:cd:d7:c5:86:f4:33:53:da:81:ee:50:e4: 29:54:0b:48:0d:1d:de:99:47:44:05:53:02:4c:53:c9:ae:b7: b8:0b:3c:00:38:a3:c3:24:8b:e5:d2:b1:fc:2f:fe:8a:ae:db: 70:60:5d:49:57:c0:84:30:40:e6:f5:eb:8a:ea:40:c0:67:f9: 9a:19:e4:fc:af:a4:ae:47:b4:79:e7:1c:ab:d3:32:60:31:c5: aa:41:48:cc:e8:46:a8:05:aa:a1:94:53:4e:54:bc:3b:eb:f2: 7d:cf:21:f6:62:3a:8d:ee:a9:ed:1b:01:0f:ed:8f:ea:59:48: dc:6f:fc:e8:6a:52:14:a0:52:69:83:c0:49:30:9a:d4:1a:9d: ee:e8:a0:0e:8f:91:da:02:d3:59:31:5e:08:eb:dd:21:92:67: 34:57:75:45:b9:94:f2:55:03:76:c8:4d:53:47:90:5b:7f:ff: 21:b9:0a:49 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgISAZvgz3JgRjPOkKmKalC6xBfWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0OWQxZjY3YTQxY2EyZTQwNTAxN2NiZTQ4YmFmZmYxNzMz ZTM4NjkwHhcNMjYwMTIxMTM0NzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTI2ZTZjM2E4OTg0YzIyZmZiYTNkMjczNDljZTJkZjFmZTVkZGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+5vd5AOy+HYDc2WmiRqbJGEbmHaE NiXnGZSqqxF3wnbWkCKcZDgn6Uj81AEO471CmkmqjKanTcX/MbtWn7EXEEnvcy1g cJlbHgwtR4jR8AyUanP6ph6tvnJgTynyhpZPbEAOEXmaAYPGUO18zrfjwPxHYHdn 7srd5ncjW+fHhsZe5yWNk1f9Q2S3ZrWEJSAoI6+Yp3Jza2WQRlD09dL3ZLk5foin on1h5KPsnVnsTAemhR5faZv9e0ZH8/NYQgRXyKl/HXkaB21UZpPVwsebN4fGHUsw X59vHirqofSou+FBFnPfZrwTokJ7J0v1edr9JXGFL1FulqRAm9c4GjVuKQIDAQAB o4ICizCCAocwHQYDVR0OBBYEFIkm5sOomEwi/7o9JzSc4t8f5d33MB8GA1UdIwQY MBaAFBSdH2ekHKLkBQF8vki6//FzPjhpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9iNTA5MGEtZWM1OC00NmRiLTlkZDkt NTQ4NTY4MmEwNWY1LzEvaVNibXc2aVlUQ0xfdWowbk5KemkzeF9sM2ZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9iNTA5MGEtZWM1OC00NmRiLTlkZDktNTQ4NTY4MmEwNWY1 LzEvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGgBggrBgEFBQcBBwEB/wSBkDCBjTB6BAIAATB0AwQAHwoF MAwDBAEf0qoDBAEf0qwDBAAuHOoDBAI+q+QDBAA+zCoDBAJViHADBAJViLQDBABX 7LEDBAFdWEoDBAFnQeYDBABowCoDBAKK4twDBACU46oDBAG5oggDBAC5ogsDBAC5 zDQDBAG5zDYDBADCkn8wDwQCAAIwCQMHASoSnMAAADANBgkqhkiG9w0BAQsFAAOC AQEAFvDG7yKX+28MQhC7ox4iTQjbUJT+hFPa18BuTuBL8wCBs4n2GGkN0msgGjHa 1KtbRbH4YQP5w+bsAit5TdHgRtK9rfXdwkamhDMtDC/VzdfFhvQzU9qB7lDkKVQL SA0d3plHRAVTAkxTya63uAs8ADijwySL5dKx/C/+iq7bcGBdSVfAhDBA5vXriupA wGf5mhnk/K+krke0eeccq9MyYDHFqkFIzOhGqAWqoZRTTlS8O+vyfc8h9mI6je6p 7RsBD+2P6llI3G/86GpSFKBSaYPASTCa1Bqd7uigDo+R2gLTWTFeCOvdIZJnNFd1 RbmU8lUDdshNU0eQW3//IbkKSQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:09 2026 by rpki-client