This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/1-sDtsx1EMme_ngzlHFFVHxn1GbM.roa File: 1-sDtsx1EMme_ngzlHFFVHxn1GbM.roa (raw, json) Hash identifier: YLpNQq2JWNqBFzY5wTwhQbzICZTjW6U3MS8vPk443Mo= Subject key identifier: FA:C0:ED:B3:1D:44:32:67:BF:9E:0C:E5:1C:51:55:1F:19:F5:19:B3 Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Certificate serial: 019B7D5D24D287FE9EBBA3CAABBDE4EA783F Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/1-sDtsx1EMme_ngzlHFFVHxn1GbM.roa Signing time: Fri 02 Jan 2026 06:20:14 +0000 ROA not before: Fri 02 Jan 2026 06:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209847 IP address blocks: 5.182.36.0/24 maxlen: 24 5.182.37.0/24 maxlen: 24 5.182.38.0/24 maxlen: 24 5.182.39.0/24 maxlen: 24 45.8.144.0/24 maxlen: 24 45.8.145.0/24 maxlen: 24 45.8.146.0/24 maxlen: 24 45.67.34.0/24 maxlen: 24 45.67.35.0/24 maxlen: 24 45.84.0.0/24 maxlen: 24 45.87.152.0/24 maxlen: 24 45.87.153.0/24 maxlen: 24 45.87.154.0/24 maxlen: 24 45.87.155.0/24 maxlen: 24 45.89.52.0/24 maxlen: 24 45.89.53.0/24 maxlen: 24 45.89.54.0/24 maxlen: 24 45.89.55.0/24 maxlen: 24 45.93.10.0/24 maxlen: 24 45.93.11.0/24 maxlen: 24 45.159.248.0/24 maxlen: 24 45.159.249.0/24 maxlen: 24 45.159.250.0/24 maxlen: 24 45.159.251.0/24 maxlen: 24 93.185.166.0/24 maxlen: 24 141.98.168.0/24 maxlen: 24 141.98.169.0/24 maxlen: 24 141.98.170.0/24 maxlen: 24 185.231.204.0/24 maxlen: 24 185.231.205.0/24 maxlen: 24 185.231.206.0/24 maxlen: 24 185.231.207.0/24 maxlen: 24 188.119.123.0/24 maxlen: 24 193.43.146.0/24 maxlen: 24 193.43.147.0/24 maxlen: 24 193.46.56.0/24 maxlen: 24 193.46.57.0/24 maxlen: 24 193.57.136.0/24 maxlen: 24 193.57.137.0/24 maxlen: 24 193.57.138.0/24 maxlen: 24 193.57.139.0/24 maxlen: 24 193.178.210.0/24 maxlen: 24 194.4.48.0/24 maxlen: 24 194.4.49.0/24 maxlen: 24 194.4.50.0/24 maxlen: 24 194.4.51.0/24 maxlen: 24 194.31.109.0/24 maxlen: 24 194.116.172.0/24 maxlen: 24 194.116.173.0/24 maxlen: 24 194.116.190.0/24 maxlen: 24 194.116.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:24:d2:87:fe:9e:bb:a3:ca:ab:bd:e4:ea:78:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Validity Not Before: Jan 2 06:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fac0edb31d443267bf9e0ce51c51551f19f519b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:54:13:d5:7e:06:35:67:3c:d7:e1:ec:bb:31: 77:e0:6f:4b:f2:d6:d5:55:e9:d7:85:34:dd:ad:17: 0e:df:c4:24:09:cd:3d:82:74:4c:49:e4:ef:0f:8f: 20:37:33:69:63:c4:66:13:5a:07:a1:44:9b:15:be: 8f:d8:8d:dd:2d:b7:7e:04:a6:b7:e8:90:d7:89:00: 90:55:ac:7c:db:90:8d:49:3a:25:be:2d:c3:70:21: 1e:70:28:77:05:70:a0:42:45:8d:b9:ae:43:0c:fa: 2e:ec:c5:69:78:e9:8e:af:a3:db:7b:22:4f:67:05: 09:d1:e2:c1:8f:a8:11:5f:74:80:74:bf:95:1a:75: 03:94:17:f1:65:59:23:11:3e:2a:a2:84:35:70:95: 96:04:82:62:b0:52:d6:01:b9:0a:be:d5:c9:0d:3f: 43:b2:87:e6:9d:16:39:f8:61:4e:3b:80:14:c2:c4: 69:99:0d:de:d8:f8:00:8f:e8:eb:9f:d2:47:e2:c7: 63:27:0e:61:43:c7:9c:1e:3d:08:42:d4:a9:70:74: 17:41:eb:53:c9:63:50:a3:21:22:46:d2:8b:e7:15: 12:6d:a6:cb:bc:e6:e4:24:a6:a4:13:1d:a4:91:a4: aa:a4:b0:62:21:d4:1c:02:6d:ca:ff:38:8d:94:4d: fe:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C0:ED:B3:1D:44:32:67:BF:9E:0C:E5:1C:51:55:1F:19:F5:19:B3 X509v3 Authority Key Identifier: keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/1-sDtsx1EMme_ngzlHFFVHxn1GbM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.36.0/22 45.8.144.0-45.8.146.255 45.67.34.0/23 45.84.0.0/24 45.87.152.0/22 45.89.52.0/22 45.93.10.0/23 45.159.248.0/22 93.185.166.0/24 141.98.168.0-141.98.170.255 185.231.204.0/22 188.119.123.0/24 193.43.146.0/23 193.46.56.0/23 193.57.136.0/22 193.178.210.0/24 194.4.48.0/22 194.31.109.0/24 194.116.172.0/23 194.116.190.0/23 Signature Algorithm: sha256WithRSAEncryption 99:c4:9b:f3:91:94:63:39:c4:df:59:b8:0d:63:ec:80:04:e1: d0:d4:97:72:f3:ec:75:cf:18:36:d5:1d:b3:73:4e:33:55:a4: b8:e1:79:95:07:46:db:15:6f:90:62:e2:a7:11:28:75:47:88: 8e:b8:18:77:ae:7c:13:12:27:a8:69:98:12:c2:47:55:df:c7: 93:b1:fd:b8:af:03:78:14:8f:0e:e1:9d:79:14:41:14:8a:e3: 5e:b7:0b:78:b9:64:74:04:74:4f:37:f7:d8:ae:56:1f:9b:c9: 71:3e:f5:c2:13:f8:67:64:d4:4a:c8:5f:b9:15:20:57:bc:a7: 8e:92:3c:a1:d1:dc:4a:b5:25:ac:30:05:b1:32:a6:49:e8:a9: 86:47:41:88:83:cf:7d:db:a8:62:2d:ca:84:9f:16:d2:0b:9d: b1:06:d6:87:38:3d:c8:54:c0:34:63:66:85:41:8d:df:28:08: 3a:20:2d:c3:1f:e6:8d:15:65:14:fd:e0:8c:f2:de:c7:a9:03: 54:ec:3d:7f:d5:0f:b9:0d:fb:b8:00:87:63:aa:55:c8:b9:35: 61:89:5c:8a:ac:02:b5:53:b9:97:2c:5d:2b:d4:ca:42:e9:5e: 50:9a:97:5f:e2:d9:0b:51:f4:78:c7:c8:51:1d:c2:e1:76:83: f0:9c:1b:fd -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgISAZt9XSTSh/6eu6PKq73k6ng/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm MWM3ZTgwHhcNMjYwMTAyMDYyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWMwZWRiMzFkNDQzMjY3YmY5ZTBjZTUxYzUxNTUxZjE5ZjUxOWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVQT1X4GNWc81+HsuzF34G9L8tbV VenXhTTdrRcO38QkCc09gnRMSeTvD48gNzNpY8RmE1oHoUSbFb6P2I3dLbd+BKa3 6JDXiQCQVax825CNSTolvi3DcCEecCh3BXCgQkWNua5DDPou7MVpeOmOr6PbeyJP ZwUJ0eLBj6gRX3SAdL+VGnUDlBfxZVkjET4qooQ1cJWWBIJisFLWAbkKvtXJDT9D sofmnRY5+GFOO4AUwsRpmQ3e2PgAj+jrn9JH4sdjJw5hQ8ecHj0IQtSpcHQXQetT yWNQoyEiRtKL5xUSbabLvObkJKakEx2kkaSqpLBiIdQcAm3K/ziNlE3+SQIDAQAB o4ICkTCCAo0wHQYDVR0OBBYEFPrA7bMdRDJnv54M5RxRVR8Z9RmzMB8GA1UdIwQY MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt ZWU3NDY1NzU0ZmY2LzEvMS1zRHRzeDFFTW1lX25nemxIRkZWSHhuMUdiTS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGIvZjI1ZDdjLTY2NzctNGZkYi04OThlLWVlNzQ2NTc1NGZm Ni8xL0VhQVEtSG9FbTI0aHEtMmJRSmc3QlBQeHgtZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCBpQYIKwYBBQUHAQcBAf8EgZUwgZIwgY8EAgABMIGIAwQC BbYkMAwDBAQtCJADBAAtCJIDBAEtQyIDBAAtVAADBAItV5gDBAItWTQDBAEtXQoD BAItn/gDBABduaYwDAMEA41iqAMEAI1iqgMEArnnzAMEALx3ewMEAcErkgMEAcEu OAMEAsE5iAMEAMGy0gMEAsIEMAMEAMIfbQMEAcJ0rAMEAcJ0vjANBgkqhkiG9w0B AQsFAAOCAQEAmcSb85GUYznE31m4DWPsgATh0NSXcvPsdc8YNtUds3NOM1WkuOF5 lQdG2xVvkGLipxEodUeIjrgYd658ExInqGmYEsJHVd/Hk7H9uK8DeBSPDuGdeRRB FIrjXrcLeLlkdAR0Tzf32K5WH5vJcT71whP4Z2TUSshfuRUgV7ynjpI8odHcSrUl rDAFsTKmSeiphkdBiIPPfduoYi3KhJ8W0gudsQbWhzg9yFTANGNmhUGN3ygIOiAt wx/mjRVlFP3gjPLex6kDVOw9f9UPuQ37uACHY6pVyLk1YYlciqwCtVO5lyxdK9TK QuleUJqXX+LZC1H0eMfIUR3C4XaD8Jwb/Q== -----END CERTIFICATE-----Generated at Wed Jan 21 09:55:19 2026 by rpki-client