This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/xNto_wDKcEk-YNmGlRRkXWGxPRM.roa File: xNto_wDKcEk-YNmGlRRkXWGxPRM.roa (raw, json) Hash identifier: jW1MN92AolEcpmVpIE52dFLs4r+vTz7Amtknh7P4JDY= Subject key identifier: C4:DB:68:FF:00:CA:70:49:3E:60:D9:86:95:14:64:5D:61:B1:3D:13 Certificate issuer: /CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3 Certificate serial: 019B7CED4726605785CF0EFD510E8C0A4556 Authority key identifier: 5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/xNto_wDKcEk-YNmGlRRkXWGxPRM.roa Signing time: Fri 02 Jan 2026 04:18:03 +0000 ROA not before: Fri 02 Jan 2026 04:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6802 IP address blocks: 194.141.0.0/16 maxlen: 16 194.141.0.0/24 maxlen: 24 194.141.1.0/24 maxlen: 24 194.141.2.0/24 maxlen: 24 194.141.3.0/24 maxlen: 24 194.141.4.0/24 maxlen: 24 194.141.5.0/24 maxlen: 24 194.141.6.0/24 maxlen: 24 194.141.8.0/24 maxlen: 24 194.141.9.0/24 maxlen: 24 194.141.12.0/24 maxlen: 24 194.141.15.0/24 maxlen: 24 194.141.16.0/22 maxlen: 22 194.141.22.0/24 maxlen: 24 194.141.24.0/21 maxlen: 21 194.141.32.0/22 maxlen: 22 194.141.37.0/24 maxlen: 24 194.141.38.0/23 maxlen: 23 194.141.40.0/24 maxlen: 24 194.141.41.0/24 maxlen: 24 194.141.43.0/24 maxlen: 24 194.141.44.0/23 maxlen: 23 194.141.47.0/24 maxlen: 24 194.141.51.0/24 maxlen: 24 194.141.52.0/22 maxlen: 22 194.141.56.0/23 maxlen: 23 194.141.64.0/23 maxlen: 23 194.141.66.0/24 maxlen: 24 194.141.67.0/24 maxlen: 24 194.141.68.0/24 maxlen: 24 194.141.69.0/24 maxlen: 24 194.141.72.0/22 maxlen: 22 194.141.78.0/24 maxlen: 24 194.141.79.0/24 maxlen: 24 194.141.84.0/24 maxlen: 24 194.141.86.0/24 maxlen: 24 194.141.88.0/21 maxlen: 21 194.141.104.0/21 maxlen: 21 194.141.112.0/24 maxlen: 24 194.141.113.0/24 maxlen: 24 194.141.116.0/22 maxlen: 22 194.141.116.0/23 maxlen: 23 194.141.118.0/24 maxlen: 24 194.141.119.0/24 maxlen: 24 194.141.221.0/24 maxlen: 24 194.141.222.0/24 maxlen: 24 194.141.225.0/24 maxlen: 24 194.141.226.0/24 maxlen: 24 194.141.227.0/24 maxlen: 24 194.141.228.0/22 maxlen: 22 194.141.232.0/21 maxlen: 21 194.141.240.0/24 maxlen: 24 194.141.241.0/24 maxlen: 24 194.141.242.0/24 maxlen: 24 194.141.243.0/24 maxlen: 24 194.141.245.0/24 maxlen: 24 2001:4b58::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.crl rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:47:26:60:57:85:cf:0e:fd:51:0e:8c:0a:45:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3 Validity Not Before: Jan 2 04:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4db68ff00ca70493e60d9869514645d61b13d13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3c:42:83:78:ac:20:fc:b0:b4:23:ab:f3:f2: fc:22:b9:7d:b4:33:c6:9a:a2:8e:77:02:5e:a0:d8: da:24:83:62:7f:fa:09:9a:e0:d8:1c:05:79:2a:5b: 72:fa:4f:a0:58:2a:0c:80:cf:22:7d:fe:e7:ea:5a: 9a:96:18:d7:70:c0:66:4d:03:7c:23:10:19:af:fe: 0c:49:09:19:f6:34:f3:03:8a:af:ec:e0:02:f0:b3: b3:df:8a:be:75:eb:52:5e:b4:41:dd:2a:cf:35:63: c6:0c:43:a5:2f:71:91:2f:d8:be:1e:67:62:da:d6: 73:82:1c:b2:d8:32:7a:38:68:d0:15:cb:89:3e:e7: ac:ad:84:73:dd:43:55:c2:7d:56:33:9c:63:d6:10: 6d:fa:91:5f:b2:24:dc:a8:16:b5:78:33:bf:55:a9: 8c:f1:55:dd:c9:ab:eb:aa:b3:b8:44:43:83:c0:19: ac:1b:c1:c1:e6:ae:94:9d:b6:65:0f:9d:bf:0d:d1: c5:95:68:db:ed:a5:2a:5d:0c:59:80:fd:77:f7:ac: 33:63:47:6f:3d:24:f5:5a:76:18:7a:89:db:6e:f6: 41:27:a2:e5:3f:45:b8:5c:40:27:a5:a3:af:16:0c: 07:59:5a:76:2d:84:85:4a:1b:27:4a:fc:f2:e9:cd: 7a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DB:68:FF:00:CA:70:49:3E:60:D9:86:95:14:64:5D:61:B1:3D:13 X509v3 Authority Key Identifier: keyid:5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/xNto_wDKcEk-YNmGlRRkXWGxPRM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.141.0.0/16 IPv6: 2001:4b58::/32 Signature Algorithm: sha256WithRSAEncryption 16:f0:e7:12:3d:8b:cd:46:1d:9f:92:26:f4:13:70:2e:d3:6f: b9:a0:d4:6c:de:af:6a:92:ea:20:59:80:ed:0d:b7:ad:9e:5a: 18:1a:3d:f2:35:95:9c:5e:0c:80:a5:8f:09:9c:32:ae:1e:1a: 92:cd:26:a5:3a:b5:69:8c:ad:5d:9f:b5:91:d7:54:96:29:0d: 1a:43:10:59:d8:15:71:b2:d4:f4:d5:5c:77:ca:2e:9a:3b:fe: 2f:b2:f7:fc:c3:7c:76:64:f0:81:3d:7a:32:d7:7a:0a:8d:d9: 7a:52:f7:7a:ba:8f:dc:41:58:1d:d5:9d:fa:79:ff:11:08:cb: 2b:d3:f8:8f:31:c8:2b:d3:84:f6:a6:f5:e1:6c:e2:4c:e2:17: 7a:0b:ae:0f:32:82:03:dc:4b:73:c6:3d:cb:cb:f1:cc:e6:ab: 50:85:74:36:db:8d:bb:74:54:0b:c5:29:26:33:1d:7a:f9:32: 64:96:a9:31:74:15:29:39:ea:43:26:ce:6c:6e:45:d5:63:3e: 3b:59:fd:78:ed:5d:a3:0c:e6:90:c0:a8:67:53:a5:85:69:ad: 9f:9e:b7:04:d8:b6:30:4b:30:94:6f:41:16:5b:87:5f:ba:56: 28:91:c9:4a:80:53:91:4b:cd:c0:c7:18:2e:44:62:27:bf:af: 79:5a:6c:d5 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt87UcmYFeFzw79UQ6MCkVWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZThmZTg4MjdiZGM2MDkzNTU1MDllMGM5ZTgwZWFiMjFm OWNkYzMwHhcNMjYwMTAyMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGRiNjhmZjAwY2E3MDQ5M2U2MGQ5ODY5NTE0NjQ1ZDYxYjEzZDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDxCg3isIPywtCOr8/L8Irl9tDPG mqKOdwJeoNjaJINif/oJmuDYHAV5Klty+k+gWCoMgM8iff7n6lqalhjXcMBmTQN8 IxAZr/4MSQkZ9jTzA4qv7OAC8LOz34q+detSXrRB3SrPNWPGDEOlL3GRL9i+Hmdi 2tZzghyy2DJ6OGjQFcuJPuesrYRz3UNVwn1WM5xj1hBt+pFfsiTcqBa1eDO/VamM 8VXdyavrqrO4REODwBmsG8HB5q6UnbZlD52/DdHFlWjb7aUqXQxZgP1396wzY0dv PST1WnYYeonbbvZBJ6LlP0W4XEAnpaOvFgwHWVp2LYSFShsnSvzy6c16UwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFMTbaP8AynBJPmDZhpUUZF1hsT0TMB8GA1UdIwQY MBaAFFvo/ognvcYJNVUJ4MnoDqsh+c3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVy1qLWlDZTl4Z2sxVlFuZ3llZ09xeUg1emNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9lZmIyZDEtYzVjYi00MTQzLWFhODgt NjEwMDcyZDgwMTE1LzEveE50b193REtjRWstWU5tR2xSUmtYV0d4UFJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9lZmIyZDEtYzVjYi00MTQzLWFhODgtNjEwMDcyZDgwMTE1 LzEvVy1qLWlDZTl4Z2sxVlFuZ3llZ09xeUg1emNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDALBAIAATAFAwMAwo0wDQQC AAIwBwMFACABS1gwDQYJKoZIhvcNAQELBQADggEBABbw5xI9i81GHZ+SJvQTcC7T b7mg1Gzer2qS6iBZgO0Nt62eWhgaPfI1lZxeDICljwmcMq4eGpLNJqU6tWmMrV2f tZHXVJYpDRpDEFnYFXGy1PTVXHfKLpo7/i+y9/zDfHZk8IE9ejLXegqN2XpS93q6 j9xBWB3Vnfp5/xEIyyvT+I8xyCvThPam9eFs4kziF3oLrg8yggPcS3PGPcvL8czm q1CFdDbbjbt0VAvFKSYzHXr5MmSWqTF0FSk56kMmzmxuRdVjPjtZ/XjtXaMM5pDA qGdTpYVprZ+etwTYtjBLMJRvQRZbh1+6ViiRyUqAU5FLzcDHGC5EYie/r3labNU= -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:45 2026 by rpki-client