This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/262i2Y1KhKCTtooZdhoBQCwI3nU.roa File: 262i2Y1KhKCTtooZdhoBQCwI3nU.roa (raw, json) Hash identifier: MJlNHDrhyU7N2xoEvdJDOeiOiIPc07bFFH4yziGsL1I= Subject key identifier: DB:AD:A2:D9:8D:4A:84:A0:93:B6:8A:19:76:1A:01:40:2C:08:DE:75 Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019BDF4249037EEEA01A63E2D49828426649 Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/262i2Y1KhKCTtooZdhoBQCwI3nU.roa Signing time: Wed 21 Jan 2026 06:33:41 +0000 ROA not before: Wed 21 Jan 2026 06:33:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50670 IP address blocks: 62.72.161.0/24 maxlen: 24 62.72.162.0/24 maxlen: 24 62.72.170.0/24 maxlen: 24 62.72.171.0/24 maxlen: 24 81.21.8.0/22 maxlen: 22 81.21.8.0/24 maxlen: 24 81.21.9.0/24 maxlen: 24 81.21.10.0/24 maxlen: 24 81.21.11.0/24 maxlen: 24 81.21.12.0/24 maxlen: 24 81.21.13.0/24 maxlen: 24 81.21.14.0/24 maxlen: 24 81.21.15.0/24 maxlen: 24 109.237.192.0/20 maxlen: 24 109.237.192.0/24 maxlen: 24 109.237.193.0/24 maxlen: 24 109.237.194.0/24 maxlen: 24 109.237.195.0/24 maxlen: 24 109.237.196.0/24 maxlen: 24 109.237.197.0/24 maxlen: 24 109.237.198.0/24 maxlen: 24 109.237.199.0/24 maxlen: 24 109.237.200.0/24 maxlen: 24 109.237.201.0/24 maxlen: 24 109.237.202.0/24 maxlen: 24 109.237.203.0/24 maxlen: 24 109.237.204.0/24 maxlen: 24 109.237.205.0/24 maxlen: 24 109.237.206.0/24 maxlen: 24 109.237.207.0/24 maxlen: 24 176.241.64.0/21 maxlen: 24 176.241.64.0/24 maxlen: 24 176.241.65.0/24 maxlen: 24 176.241.66.0/24 maxlen: 24 176.241.67.0/24 maxlen: 24 176.241.68.0/24 maxlen: 24 176.241.69.0/24 maxlen: 24 176.241.70.0/24 maxlen: 24 176.241.71.0/24 maxlen: 24 178.20.184.0/21 maxlen: 24 178.20.184.0/24 maxlen: 24 178.20.185.0/24 maxlen: 24 178.20.186.0/24 maxlen: 24 178.20.187.0/24 maxlen: 24 178.20.188.0/24 maxlen: 24 178.20.189.0/24 maxlen: 24 178.20.190.0/24 maxlen: 24 178.20.191.0/24 maxlen: 24 185.51.212.0/22 maxlen: 22 185.51.212.0/24 maxlen: 24 185.51.213.0/24 maxlen: 24 185.51.214.0/24 maxlen: 24 185.51.215.0/24 maxlen: 24 185.193.176.0/22 maxlen: 22 185.193.176.0/24 maxlen: 24 185.193.177.0/24 maxlen: 24 185.193.178.0/24 maxlen: 24 185.193.179.0/24 maxlen: 24 2a01:1d0::/29 maxlen: 29 2a01:1d0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 23:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:42:49:03:7e:ee:a0:1a:63:e2:d4:98:28:42:66:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Jan 21 06:33:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbada2d98d4a84a093b68a19761a01402c08de75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0a:c1:a6:35:8e:4d:c5:b0:91:fe:e3:42:46: c5:5b:f5:ee:10:3e:d2:79:25:89:6d:3e:49:5d:0c: d9:95:97:b0:c5:80:4a:5e:39:53:39:7c:62:3c:85: f0:a9:54:8c:5e:51:71:fe:60:26:e9:77:c9:9e:e0: c5:d1:ac:7f:b9:e9:3b:56:c5:1d:32:09:cc:2b:0b: 0a:9b:fe:86:fc:7f:db:60:92:4b:a4:64:bf:c5:67: 5c:62:c0:1b:3c:68:36:4b:38:09:ac:6a:93:17:28: d3:61:aa:03:cc:17:c0:16:25:03:b9:bf:c2:ac:47: df:ab:0f:43:a1:bd:7a:5f:0c:34:4a:46:78:0b:85: 95:88:23:e2:7e:c2:df:df:65:ab:4e:cd:c1:47:fa: 9b:91:c9:33:65:e6:d9:48:9e:28:1d:a7:09:8d:4a: e4:fb:24:a6:3b:fb:ef:fc:7f:0e:71:01:41:ed:5b: ac:11:33:63:36:96:ff:ec:17:75:c1:79:3a:73:3d: 32:60:4f:79:ed:ae:35:be:cb:ef:be:de:af:00:17: 97:17:10:de:94:63:8b:31:7f:d2:64:24:87:62:98: ce:01:ed:16:2c:88:5d:9f:3e:73:60:90:24:86:1b: 4c:64:fc:2c:15:20:60:37:b9:40:a0:98:d9:f1:10: bc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AD:A2:D9:8D:4A:84:A0:93:B6:8A:19:76:1A:01:40:2C:08:DE:75 X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/262i2Y1KhKCTtooZdhoBQCwI3nU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.72.161.0-62.72.162.255 62.72.170.0/23 81.21.8.0/21 109.237.192.0/20 176.241.64.0/21 178.20.184.0/21 185.51.212.0/22 185.193.176.0/22 IPv6: 2a01:1d0::/29 Signature Algorithm: sha256WithRSAEncryption 43:b0:07:eb:d9:ad:2a:12:58:dd:4c:93:25:bb:f3:4b:82:93: 6e:58:1d:aa:70:ca:0b:b4:00:32:16:85:26:83:63:90:f3:67: 9f:e4:2e:31:d4:02:ca:89:1b:48:49:c1:05:fb:ce:93:ae:c0: 36:27:47:7d:c6:ba:e4:7e:be:1d:2e:4f:51:f9:e6:3f:a0:e3: 2e:69:e2:c8:b9:44:ca:f0:98:1e:d9:07:76:8c:54:5a:56:70: 7f:b5:34:1c:ac:df:6b:df:ba:1c:49:35:cd:b9:0c:06:44:a8: 64:9f:54:db:6a:df:b4:1d:4f:58:db:87:df:ea:e4:d0:5d:d6: 61:26:d8:16:b6:60:d6:e3:9a:a7:23:9c:62:6f:5c:cd:42:0c: a9:10:33:61:81:e7:6b:61:2e:55:06:76:40:61:5b:47:61:07: 6a:83:03:b3:a2:8a:9f:e4:8a:e8:04:7d:d6:ca:5c:13:85:54: b1:d8:ef:7f:b3:7d:0f:8d:14:2c:4e:12:e9:fa:f2:e3:fb:34: 78:af:15:0f:69:16:ae:8d:13:5a:0b:a1:41:07:b4:70:01:70: 41:4d:1a:6d:4b:31:f0:a0:8e:1e:af:87:1e:48:22:75:f9:97: 23:1e:63:b7:bf:ac:cf:32:91:95:18:79:94:3c:9c:69:4f:7a: a5:94:86:96 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgISAZvfQkkDfu6gGmPi1JgoQmZJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjYwMTIxMDYzMzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmFkYTJkOThkNGE4NGEwOTNiNjhhMTk3NjFhMDE0MDJjMDhkZTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzArBpjWOTcWwkf7jQkbFW/XuED7S eSWJbT5JXQzZlZewxYBKXjlTOXxiPIXwqVSMXlFx/mAm6XfJnuDF0ax/uek7VsUd MgnMKwsKm/6G/H/bYJJLpGS/xWdcYsAbPGg2SzgJrGqTFyjTYaoDzBfAFiUDub/C rEffqw9Dob16Xww0SkZ4C4WViCPifsLf32WrTs3BR/qbkckzZebZSJ4oHacJjUrk +ySmO/vv/H8OcQFB7VusETNjNpb/7Bd1wXk6cz0yYE957a41vsvvvt6vABeXFxDe lGOLMX/SZCSHYpjOAe0WLIhdnz5zYJAkhhtMZPwsFSBgN7lAoJjZ8RC89wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNutotmNSoSgk7aKGXYaAUAsCN51MB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvMjYyaTJZMUtoS0NUdG9vWmRob0JRQ3dJM25VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzA+BAIAATA4MAwDBAA+SKED BAA+SKIDBAE+SKoDBANRFQgDBARt7cADBAOw8UADBAOyFLgDBAK5M9QDBAK5wbAw DQQCAAIwBwMFAyoBAdAwDQYJKoZIhvcNAQELBQADggEBAEOwB+vZrSoSWN1MkyW7 80uCk25YHapwygu0ADIWhSaDY5DzZ5/kLjHUAsqJG0hJwQX7zpOuwDYnR33GuuR+ vh0uT1H55j+g4y5p4si5RMrwmB7ZB3aMVFpWcH+1NBys32vfuhxJNc25DAZEqGSf VNtq37QdT1jbh9/q5NBd1mEm2Ba2YNbjmqcjnGJvXM1CDKkQM2GB52thLlUGdkBh W0dhB2qDA7Oiip/kiugEfdbKXBOFVLHY73+zfQ+NFCxOEun68uP7NHivFQ9pFq6N E1oLoUEHtHABcEFNGm1LMfCgjh6vhx5IInX5lyMeY7e/rM8ykZUYeZQ8nGlPeqWU hpY= -----END CERTIFICATE-----Generated at Thu Jan 22 05:01:57 2026 by rpki-client