This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/sAQm2lE9Ad3PsbIjmuaB7TumfHE.roa File: sAQm2lE9Ad3PsbIjmuaB7TumfHE.roa (raw, json) Hash identifier: WUrCjUFkUCFmFHITyN1VBP/k3Ivh7j8WV+wL64WBFik= Subject key identifier: B0:04:26:DA:51:3D:01:DD:CF:B1:B2:23:9A:E6:81:ED:3B:A6:7C:71 Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 019B7834F505B320FC2E82A0B0E17BABE8C2 Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/sAQm2lE9Ad3PsbIjmuaB7TumfHE.roa Signing time: Thu 01 Jan 2026 06:18:15 +0000 ROA not before: Thu 01 Jan 2026 06:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6696 IP address blocks: 5.149.136.0/23 maxlen: 23 5.149.138.0/24 maxlen: 24 5.149.140.0/23 maxlen: 23 5.149.142.0/24 maxlen: 24 37.19.8.0/21 maxlen: 24 46.18.33.0/24 maxlen: 24 46.18.34.0/23 maxlen: 24 46.18.36.0/22 maxlen: 24 62.112.29.0/24 maxlen: 24 62.112.31.0/24 maxlen: 24 85.88.34.0/24 maxlen: 24 85.119.216.0/21 maxlen: 24 86.107.120.0/22 maxlen: 22 86.107.124.0/23 maxlen: 23 86.107.126.0/24 maxlen: 24 87.238.225.0/24 maxlen: 24 87.238.228.0/22 maxlen: 24 94.139.39.0/24 maxlen: 24 109.69.216.0/23 maxlen: 24 109.69.217.16/28 maxlen: 28 109.69.219.0/24 maxlen: 24 109.69.220.0/23 maxlen: 23 109.69.220.0/24 maxlen: 24 109.69.221.0/24 maxlen: 24 109.69.221.192/28 maxlen: 28 109.69.222.0/24 maxlen: 24 185.64.64.0/22 maxlen: 24 185.185.228.0/24 maxlen: 24 185.185.229.0/24 maxlen: 24 2a00:1528::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f5:05:b3:20:fc:2e:82:a0:b0:e1:7b:ab:e8:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b00426da513d01ddcfb1b2239ae681ed3ba67c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ad:ee:18:75:33:dc:8e:b2:4a:78:90:1e:1d: b7:e9:17:3d:ac:b5:ad:30:e9:80:ee:cd:97:fb:f9: b9:e7:af:42:36:c6:60:2b:df:a7:9e:28:72:75:7d: 3e:dc:75:d7:b8:a4:d6:76:9c:3f:a8:19:0d:36:d6: 5f:3d:b2:83:2f:93:9c:dc:ff:55:cc:27:1c:b6:3b: b9:75:cf:3c:3a:52:ac:ba:3c:11:d3:d1:3a:dd:fc: 97:6e:5d:97:86:4e:37:b4:c7:df:bb:a8:6d:67:01: b0:40:b7:c3:02:5d:73:d1:d1:04:df:fa:e9:4f:a8: 10:5e:21:58:83:39:ce:76:82:bd:39:89:ff:7c:a9: 74:2d:d6:50:93:3a:ac:f1:c4:90:05:49:c8:31:42: f7:7a:85:93:57:eb:10:50:cc:3b:0d:18:ba:6a:41: 62:4e:27:69:08:c1:97:17:ff:54:91:86:71:91:6e: 59:c1:a1:47:91:3c:20:ba:d6:b8:54:7f:11:82:ef: 5c:1d:43:bc:04:17:e6:22:62:dd:c3:e9:76:c1:19: eb:6a:fb:f4:41:f1:63:e1:d8:c4:30:9b:a4:3d:d9: 1d:53:d0:32:ab:5a:2a:d1:f9:87:83:13:e1:42:22: dc:08:26:cf:a0:b3:f5:60:cc:be:e9:6c:60:f2:2a: e9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:04:26:DA:51:3D:01:DD:CF:B1:B2:23:9A:E6:81:ED:3B:A6:7C:71 X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/sAQm2lE9Ad3PsbIjmuaB7TumfHE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.149.136.0-5.149.138.255 5.149.140.0-5.149.142.255 37.19.8.0/21 46.18.33.0-46.18.39.255 62.112.29.0/24 62.112.31.0/24 85.88.34.0/24 85.119.216.0/21 86.107.120.0-86.107.126.255 87.238.225.0/24 87.238.228.0/22 94.139.39.0/24 109.69.216.0/23 109.69.219.0-109.69.222.255 185.64.64.0/22 185.185.228.0/23 IPv6: 2a00:1528::/32 Signature Algorithm: sha256WithRSAEncryption 52:e3:5a:ae:a1:12:29:78:80:f0:0b:64:47:fd:e0:92:c2:3e: 94:dc:bf:5a:d8:d2:59:de:e0:2f:d8:a4:3b:e2:f9:7f:72:fb: 37:14:05:9a:11:69:99:c9:c2:ac:ad:4c:b0:f9:39:30:58:87: 60:7b:42:47:30:19:1d:95:57:97:57:d0:1e:e9:36:ec:7e:c1: 3f:00:d6:a8:48:b7:a2:07:98:a6:64:9c:05:ce:a0:d3:ed:fb: c8:8a:c6:72:05:5f:bf:83:21:09:75:af:af:d6:6a:b4:fe:c2: f3:20:f5:fe:24:8b:fa:4e:ab:70:b3:3f:d8:e4:c0:83:69:6e: 33:06:33:87:5b:07:17:2f:84:f8:6c:b8:be:3b:76:53:7a:dc: ac:80:5b:85:6c:cc:27:59:b0:5f:98:3c:83:3b:be:0b:98:14: 66:91:c8:81:0f:a1:48:67:c7:a8:e3:3c:fd:60:88:ac:1a:8b: 8b:ed:e1:f6:2f:bc:5b:ba:21:ba:7f:20:63:dd:08:9e:e8:b3: cd:8c:02:1a:71:75:f0:97:33:35:1a:62:b4:f4:0c:e9:85:a4: e2:11:73:41:64:2d:00:68:df:87:47:3d:5c:9c:02:00:f2:d1: bb:43:0d:34:05:f0:0d:4d:17:e4:1b:b3:9f:3f:5b:3f:98:13: 34:5a:86:08 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt4NPUFsyD8LoKgsOF7q+jCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDA0MjZkYTUxM2QwMWRkY2ZiMWIyMjM5YWU2ODFlZDNiYTY3YzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9a3uGHUz3I6ySniQHh236Rc9rLWt MOmA7s2X+/m5569CNsZgK9+nnihydX0+3HXXuKTWdpw/qBkNNtZfPbKDL5Oc3P9V zCcctju5dc88OlKsujwR09E63fyXbl2Xhk43tMffu6htZwGwQLfDAl1z0dEE3/rp T6gQXiFYgznOdoK9OYn/fKl0LdZQkzqs8cSQBUnIMUL3eoWTV+sQUMw7DRi6akFi TidpCMGXF/9UkYZxkW5ZwaFHkTwguta4VH8Rgu9cHUO8BBfmImLdw+l2wRnravv0 QfFj4djEMJukPdkdU9Ayq1oq0fmHgxPhQiLcCCbPoLP1YMy+6Wxg8irp4wIDAQAB o4ICnzCCApswHQYDVR0OBBYEFLAEJtpRPQHdz7GyI5rmge07pnxxMB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvc0FRbTJsRTlBZDNQc2JJam11YUI3VHVtZkhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG0BggrBgEFBQcBBwEB/wSBpDCBoTCBjwQCAAEwgYgwDAME AwWViAMEAAWVijAMAwQCBZWMAwQABZWOAwQDJRMIMAwDBAAuEiEDBAMuEiADBAA+ cB0DBAA+cB8DBABVWCIDBANVd9gwDAMEA1ZreAMEAFZrfgMEAFfu4QMEAlfu5AME AF6LJwMEAW1F2DAMAwQAbUXbAwQAbUXeAwQCuUBAAwQBubnkMA0EAgACMAcDBQAq ABUoMA0GCSqGSIb3DQEBCwUAA4IBAQBS41quoRIpeIDwC2RH/eCSwj6U3L9a2NJZ 3uAv2KQ74vl/cvs3FAWaEWmZycKsrUyw+TkwWIdge0JHMBkdlVeXV9Ae6TbsfsE/ ANaoSLeiB5imZJwFzqDT7fvIisZyBV+/gyEJda+v1mq0/sLzIPX+JIv6Tqtwsz/Y 5MCDaW4zBjOHWwcXL4T4bLi+O3ZTetysgFuFbMwnWbBfmDyDO74LmBRmkciBD6FI Z8eo4zz9YIisGouL7eH2L7xbuiG6fyBj3Qie6LPNjAIacXXwlzM1GmK09AzphaTi EXNBZC0AaN+HRz1cnAIA8tG7Qw00BfANTRfkG7OfP1s/mBM0WoYI -----END CERTIFICATE-----Generated at Mon Feb 9 23:43:07 2026 by rpki-client