This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/BqAUWEEEynRAHsyw8vXlJOPtoko.roa File: BqAUWEEEynRAHsyw8vXlJOPtoko.roa (raw, json) Hash identifier: fRUb8UeVdZCw52nD6tz43yTIJk+lOvp55J1+ztgjww8= Subject key identifier: 06:A0:14:58:41:04:CA:74:40:1E:CC:B0:F2:F5:E5:24:E3:ED:A2:4A Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Certificate serial: 019B7A5AB3F7C97B7C9B04A06C6F4E70AEC2 Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/BqAUWEEEynRAHsyw8vXlJOPtoko.roa Signing time: Thu 01 Jan 2026 16:18:43 +0000 ROA not before: Thu 01 Jan 2026 16:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59592 IP address blocks: 37.114.32.0/19 maxlen: 32 37.114.33.0/24 maxlen: 32 37.114.35.0/24 maxlen: 24 37.114.36.0/24 maxlen: 24 37.114.38.0/24 maxlen: 24 37.114.39.0/24 maxlen: 24 37.114.58.0/24 maxlen: 24 43.251.160.0/24 maxlen: 24 43.251.161.0/24 maxlen: 24 94.154.48.0/21 maxlen: 24 94.154.49.0/24 maxlen: 24 94.154.51.0/24 maxlen: 24 94.154.52.0/24 maxlen: 24 94.154.53.0/24 maxlen: 24 94.154.54.0/24 maxlen: 24 176.100.32.0/21 maxlen: 32 176.100.32.0/24 maxlen: 24 176.100.33.0/24 maxlen: 24 176.100.34.0/24 maxlen: 24 176.100.35.0/24 maxlen: 24 176.100.36.0/24 maxlen: 24 176.100.37.0/24 maxlen: 24 185.14.92.0/22 maxlen: 22 2a00:ccc0::/29 maxlen: 128 2a00:ccc2::/32 maxlen: 32 2a00:ccc4::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 19:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b3:f7:c9:7b:7c:9b:04:a0:6c:6f:4e:70:ae:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Validity Not Before: Jan 1 16:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06a014584104ca74401eccb0f2f5e524e3eda24a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:dc:3b:d3:1c:93:e5:c6:e9:47:76:40:52:9b: b8:b2:36:b4:3d:44:79:89:fa:3e:9d:47:d7:d0:ea: 1e:99:4d:9d:3e:f1:9b:78:7e:61:d3:da:47:3c:17: 67:2f:3f:d8:d0:81:fa:ac:14:05:25:87:75:cf:12: 32:1b:2e:52:3e:b2:d0:b4:f6:37:04:a3:13:eb:eb: 85:ea:fb:cd:6b:ab:56:66:38:f5:e9:c0:af:49:32: 87:ec:8f:1f:bb:b7:47:bb:f9:91:23:36:81:7d:d6: 7c:fa:81:c7:44:af:b9:f2:e6:02:3e:1c:d6:76:d8: 49:17:15:ab:b5:a6:8c:f2:a4:c4:e7:79:95:9d:9a: 18:be:04:56:d2:3c:18:0a:ad:3f:1f:43:f9:4b:8f: ba:3e:ae:09:5c:cb:99:4b:e3:1f:7b:a9:f8:26:b3: 61:db:64:db:f2:6a:4d:c4:9f:c9:dd:74:4b:83:8b: 6a:07:48:91:84:6e:e3:d6:52:f3:36:1a:b5:2a:ef: f2:f3:e5:ff:d1:36:f1:a2:11:3d:94:c7:ac:fe:67: 9c:65:0e:1f:37:a4:94:a2:c8:89:23:ec:f8:8e:09: 7b:8f:58:e8:ff:5e:cc:fa:cd:b2:aa:ad:5f:75:0d: e0:36:a5:24:38:26:d0:26:82:75:c0:fe:c3:29:e0: b0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A0:14:58:41:04:CA:74:40:1E:CC:B0:F2:F5:E5:24:E3:ED:A2:4A X509v3 Authority Key Identifier: keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/BqAUWEEEynRAHsyw8vXlJOPtoko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.114.32.0/19 43.251.160.0/23 94.154.48.0/21 176.100.32.0/21 185.14.92.0/22 IPv6: 2a00:ccc0::/29 Signature Algorithm: sha256WithRSAEncryption 5d:7d:bf:df:c3:9d:4e:0b:bb:6e:cc:8b:28:fd:03:5d:53:b8: 73:34:75:13:cc:71:5d:ea:78:54:e1:be:fb:e5:c2:9d:93:df: 92:19:f2:e8:a3:bb:f7:8c:bc:d7:3e:09:ab:1d:8d:e7:cc:d8: af:0d:3d:96:8b:d1:8b:2f:60:75:78:33:14:1f:e2:d4:07:30: c2:45:af:7c:78:19:69:d9:32:70:8b:12:6e:92:6d:b8:45:36: 83:71:5d:1a:33:21:ed:b2:8e:97:db:b8:f4:eb:88:40:c4:13: b8:d7:78:76:66:e0:cc:56:1c:8e:d1:48:e5:d3:f6:46:46:e4: 0a:b0:51:42:60:0c:31:ec:b2:9d:6a:cf:fd:30:4e:54:8e:4d: 98:29:26:5d:b3:f5:7e:55:6b:df:df:d1:18:1e:a7:1b:e5:c2: 6c:44:e9:4f:03:f7:c7:c0:d2:0b:47:4a:99:d8:7f:11:80:8e: 10:83:de:99:9e:56:d4:8c:14:0e:61:d8:8b:b2:84:d6:9f:1f: 17:9f:7a:bd:0f:2c:ce:a2:8b:f2:e7:f1:db:7a:2e:d4:86:e6: d2:62:51:37:2a:6e:00:44:25:d0:23:55:cb:b5:17:c7:ef:4c: 38:65:8f:a3:5a:a8:4a:9f:4a:b3:0e:d8:9a:f4:6b:b8:b3:19: 3f:cf:be:37 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt6WrP3yXt8mwSgbG9OcK7CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjU5M2I3NDdlNzZhNTY0OTI1MTFiYjM2MTJlNGQ1ZTRj YmU3ZWMwHhcNMjYwMTAxMTYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmEwMTQ1ODQxMDRjYTc0NDAxZWNjYjBmMmY1ZTUyNGUzZWRhMjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNw70xyT5cbpR3ZAUpu4sja0PUR5 ifo+nUfX0OoemU2dPvGbeH5h09pHPBdnLz/Y0IH6rBQFJYd1zxIyGy5SPrLQtPY3 BKMT6+uF6vvNa6tWZjj16cCvSTKH7I8fu7dHu/mRIzaBfdZ8+oHHRK+58uYCPhzW dthJFxWrtaaM8qTE53mVnZoYvgRW0jwYCq0/H0P5S4+6Pq4JXMuZS+Mfe6n4JrNh 22Tb8mpNxJ/J3XRLg4tqB0iRhG7j1lLzNhq1Ku/y8+X/0TbxohE9lMes/mecZQ4f N6SUosiJI+z4jgl7j1jo/17M+s2yqq1fdQ3gNqUkOCbQJoJ1wP7DKeCwNQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFAagFFhBBMp0QB7MsPL15STj7aJKMB8GA1UdIwQY MBaAFCllk7dH52pWSSURuzYS5NXky+fsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMt MWI3Y2JiMDhkNzNmLzEvQnFBVVdFRUV5blJBSHN5dzh2WGxKT1B0b2tvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMtMWI3Y2JiMDhkNzNm LzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQFJXIgAwQB K/ugAwQDXpowAwQDsGQgAwQCuQ5cMA0EAgACMAcDBQMqAMzAMA0GCSqGSIb3DQEB CwUAA4IBAQBdfb/fw51OC7tuzIso/QNdU7hzNHUTzHFd6nhU4b775cKdk9+SGfLo o7v3jLzXPgmrHY3nzNivDT2Wi9GLL2B1eDMUH+LUBzDCRa98eBlp2TJwixJukm24 RTaDcV0aMyHtso6X27j064hAxBO413h2ZuDMVhyO0Ujl0/ZGRuQKsFFCYAwx7LKd as/9ME5Ujk2YKSZds/V+VWvf39EYHqcb5cJsROlPA/fHwNILR0qZ2H8RgI4Qg96Z nlbUjBQOYdiLsoTWnx8Xn3q9DyzOoovy5/Hbei7UhubSYlE3Km4ARCXQI1XLtRfH 70w4ZY+jWqhKn0qzDtia9Gu4sxk/z743 -----END CERTIFICATE-----Generated at Wed Jan 21 06:07:26 2026 by rpki-client