This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/eR1kJt3AkvnRh9nnXa_66NaaHYY.roa File: eR1kJt3AkvnRh9nnXa_66NaaHYY.roa (raw, json) Hash identifier: vhKP6Uu//ijg9IWe7RT8txZCBV20sw0GmYZPsJN+rXk= Subject key identifier: 79:1D:64:26:DD:C0:92:F9:D1:87:D9:E7:5D:AF:FA:E8:D6:9A:1D:86 Certificate issuer: /CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa Certificate serial: 019B7F8304399059713D1223712D78E21D33 Authority key identifier: 83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/eR1kJt3AkvnRh9nnXa_66NaaHYY.roa Signing time: Fri 02 Jan 2026 16:20:51 +0000 ROA not before: Fri 02 Jan 2026 16:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24608 IP address blocks: 2.156.0.0/16 maxlen: 16 2.157.0.0/16 maxlen: 16 2.158.0.0/16 maxlen: 16 2.159.0.0/16 maxlen: 16 5.84.0.0/16 maxlen: 16 5.85.0.0/16 maxlen: 16 5.86.0.0/16 maxlen: 16 5.87.0.0/16 maxlen: 16 31.188.0.0/16 maxlen: 16 31.189.0.0/16 maxlen: 16 37.226.0.0/15 maxlen: 16 37.226.0.0/16 maxlen: 16 37.227.0.0/16 maxlen: 16 62.13.160.0/19 maxlen: 19 185.97.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:04:39:90:59:71:3d:12:23:71:2d:78:e2:1d:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa Validity Not Before: Jan 2 16:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=791d6426ddc092f9d187d9e75daffae8d69a1d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:24:b5:e3:4f:f4:a1:d4:0d:c2:52:b7:5b:e0: 3e:05:75:1c:87:e6:c5:84:68:58:a0:58:de:be:f1: 3f:14:08:e0:c2:4c:97:64:6e:36:3b:ce:13:b6:05: 32:4a:23:0e:70:c0:c4:c0:b9:ea:28:c5:c5:c2:79: 38:00:45:55:33:c0:69:9f:6e:8c:7a:06:62:a3:21: f2:d8:5f:52:13:9a:b1:11:63:21:f0:27:8e:3a:ab: 68:24:13:c6:1d:9e:99:ab:43:6f:c3:52:8d:46:68: ff:f8:7d:e7:51:c8:d6:f6:a7:b2:5e:61:81:01:d4: a4:de:ff:23:f5:f8:18:28:46:af:4e:46:7f:1f:bb: d6:5e:86:8f:6d:45:5f:f0:ed:35:2d:e7:41:1d:84: 52:d9:5c:73:e0:3c:c5:83:4e:e2:11:05:06:78:f5: 90:68:7e:12:cb:ad:31:75:05:b6:3a:c2:6a:27:13: 24:27:25:ec:71:dd:13:61:25:45:b1:bb:5e:ce:20: 39:db:87:46:6e:e9:d0:6f:06:26:2c:d2:28:9e:6f: e5:06:cd:a0:e4:9e:bf:78:1e:1b:7a:d4:8a:6c:bd: ec:5b:8f:98:4a:d4:de:97:95:af:ce:1f:e9:db:db: 38:e7:c1:43:1e:b0:f8:70:1a:7f:9a:f6:dd:e3:e6: b0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1D:64:26:DD:C0:92:F9:D1:87:D9:E7:5D:AF:FA:E8:D6:9A:1D:86 X509v3 Authority Key Identifier: keyid:83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/eR1kJt3AkvnRh9nnXa_66NaaHYY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.156.0.0/14 5.84.0.0/14 31.188.0.0/15 37.226.0.0/15 62.13.160.0/19 185.97.108.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:5f:3e:7e:38:f2:76:fa:c3:ae:81:ea:25:1d:7f:74:c5:50: d7:de:a6:a5:9b:ff:82:d3:c4:59:ec:d2:fe:ee:ab:83:f1:63: 89:43:3a:9e:90:7c:ad:e8:29:83:c8:8a:09:fe:07:8c:85:19: ef:42:90:bb:2c:8f:df:e1:8d:6a:a5:35:38:4c:0c:b7:b7:39: 6c:6a:f2:65:58:64:04:34:e6:22:a6:4e:68:b9:ae:0d:b7:d3: 33:c6:94:00:bf:58:89:86:ed:e2:20:f9:29:b1:0a:df:34:97: ee:2b:f5:a7:66:8a:19:85:f9:fd:51:72:37:ca:dc:3c:34:ff: 93:d1:4a:05:12:6c:98:48:73:9b:17:55:c7:97:3a:82:e3:6f: 4a:b6:68:e1:58:4c:59:2d:92:e0:a9:dc:33:b0:b9:58:02:65: 28:6a:f0:56:21:4d:00:28:1a:37:df:c2:cd:d8:ee:fc:79:6f: 2d:53:b3:4b:21:92:90:1c:1c:39:a0:10:c5:da:8c:80:67:8e: 0f:c1:59:38:fb:88:ad:aa:8d:c1:41:77:4d:ac:4c:b2:51:ff: 2e:9c:77:36:de:c2:79:b6:46:b7:d7:63:01:1f:16:01:58:2f: 2c:f7:04:e2:ea:11:ed:54:4e:af:c4:a8:b5:5e:e8:c3:07:e6: 5b:0f:c0:32 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/gwQ5kFlxPRIjcS144h0zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMjNmNDlkNmNjNjUwY2Q2ZDY1NDgyMzQ4ZTFkNmQwYjhm ZDdlYWEwHhcNMjYwMTAyMTYyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTFkNjQyNmRkYzA5MmY5ZDE4N2Q5ZTc1ZGFmZmFlOGQ2OWExZDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yS140/0odQNwlK3W+A+BXUch+bF hGhYoFjevvE/FAjgwkyXZG42O84TtgUySiMOcMDEwLnqKMXFwnk4AEVVM8Bpn26M egZioyHy2F9SE5qxEWMh8CeOOqtoJBPGHZ6Zq0Nvw1KNRmj/+H3nUcjW9qeyXmGB AdSk3v8j9fgYKEavTkZ/H7vWXoaPbUVf8O01LedBHYRS2Vxz4DzFg07iEQUGePWQ aH4Sy60xdQW2OsJqJxMkJyXscd0TYSVFsbteziA524dGbunQbwYmLNIonm/lBs2g 5J6/eB4betSKbL3sW4+YStTel5Wvzh/p29s458FDHrD4cBp/mvbd4+awqwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFHkdZCbdwJL50YfZ512v+ujWmh2GMB8GA1UdIwQY MBaAFIMj9J1sxlDNbWVII0jh1tC4/X6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3lQMG5XekdVTTF0WlVnalNPSFcwTGo5ZnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lNzNmMTYtNDVkMi00M2MxLWE0YWYt NWNmOTE5NGQxNzAyLzEvZVIxa0p0M0Frdm5SaDlublhhXzY2TmFhSFlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lNzNmMTYtNDVkMi00M2MxLWE0YWYtNWNmOTE5NGQxNzAy LzEvZ3lQMG5XekdVTTF0WlVnalNPSFcwTGo5ZnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwMCApwDAwIF VAMDAR+8AwMBJeIDBAU+DaADBAK5YWwwDQYJKoZIhvcNAQELBQADggEBAIpfPn44 8nb6w66B6iUdf3TFUNfepqWb/4LTxFns0v7uq4PxY4lDOp6QfK3oKYPIign+B4yF Ge9CkLssj9/hjWqlNThMDLe3OWxq8mVYZAQ05iKmTmi5rg230zPGlAC/WImG7eIg +SmxCt80l+4r9admihmF+f1RcjfK3Dw0/5PRSgUSbJhIc5sXVceXOoLjb0q2aOFY TFktkuCp3DOwuVgCZShq8FYhTQAoGjffws3Y7vx5by1Ts0shkpAcHDmgEMXajIBn jg/BWTj7iK2qjcFBd02sTLJR/y6cdzbewnm2RrfXYwEfFgFYLyz3BOLqEe1UTq/E qLVe6MMH5lsPwDI= -----END CERTIFICATE-----Generated at Tue Jan 27 07:11:03 2026 by rpki-client