This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/jP6n1AxBuf7oscVqIM4lrYM4dH8.roa File: jP6n1AxBuf7oscVqIM4lrYM4dH8.roa (raw, json) Hash identifier: 8SmVIj+S7i2WbJypFpCfbr9WJAjup8Lur7iG1vxh4d4= Subject key identifier: 8C:FE:A7:D4:0C:41:B9:FE:E8:B1:C5:6A:20:CE:25:AD:83:38:74:7F Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019C1AAADB9FF2EB12B555E367AF921786B4 Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/jP6n1AxBuf7oscVqIM4lrYM4dH8.roa Signing time: Sun 01 Feb 2026 19:25:30 +0000 ROA not before: Sun 01 Feb 2026 19:25:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 31.41.38.0/24 maxlen: 24 31.41.39.0/24 maxlen: 24 45.11.25.0/24 maxlen: 24 45.133.219.0/24 maxlen: 24 45.137.52.0/24 maxlen: 24 45.137.55.0/24 maxlen: 24 45.137.191.0/24 maxlen: 24 45.139.28.0/24 maxlen: 24 45.139.31.0/24 maxlen: 24 45.140.171.0/24 maxlen: 24 45.145.2.0/24 maxlen: 24 45.145.90.0/24 maxlen: 24 45.145.161.0/24 maxlen: 24 45.149.80.0/24 maxlen: 24 45.149.81.0/24 maxlen: 24 45.149.82.0/24 maxlen: 24 45.149.134.0/24 maxlen: 24 45.150.62.0/24 maxlen: 24 45.150.63.0/24 maxlen: 24 45.152.227.0/24 maxlen: 24 77.83.4.0/24 maxlen: 24 77.83.5.0/24 maxlen: 24 77.83.6.0/24 maxlen: 24 77.83.7.0/24 maxlen: 24 185.179.198.0/24 maxlen: 24 194.35.127.0/24 maxlen: 24 194.156.95.0/24 maxlen: 24 195.245.111.0/24 maxlen: 24 213.139.192.0/24 maxlen: 24 213.139.193.0/24 maxlen: 24 213.139.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 18:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1a:aa:db:9f:f2:eb:12:b5:55:e3:67:af:92:17:86:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Feb 1 19:25:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cfea7d40c41b9fee8b1c56a20ce25ad8338747f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6b:24:f3:44:47:bb:47:8e:4b:e3:95:fe:48: cc:66:cc:51:93:ec:dc:ea:ab:0d:f9:c4:f0:5c:91: fb:fa:c7:29:24:28:ed:d9:be:82:c1:2b:dc:68:da: aa:a0:bf:86:c3:ef:ca:98:be:ec:66:02:7b:f1:92: ff:11:f7:61:4b:f1:11:e2:50:78:b7:5f:07:4c:4c: 1a:10:52:1c:e2:e0:9d:43:79:3d:3a:68:16:3b:b2: 70:5f:cd:10:ac:71:34:94:1f:8b:c0:e0:53:78:b5: be:46:7a:13:1f:ab:1c:8d:06:26:41:be:1b:c1:1d: 61:97:05:72:33:93:a9:d5:ac:12:bd:da:79:73:d7: af:6c:dc:65:d6:2b:bb:c5:55:f6:8b:0f:1e:c6:65: ca:0b:84:7b:4c:a3:54:03:89:ac:45:23:fe:6b:ce: e8:e5:ff:18:a1:8a:84:43:9d:ca:0d:6d:9e:76:a3: 0b:89:cb:c3:5f:ed:75:65:e3:11:4c:7a:52:20:44: a5:fb:a5:b4:ea:55:8c:c5:20:5a:58:0d:10:8d:f3: 68:d2:69:85:db:fe:76:b1:0c:18:d5:f1:52:dc:32: 9e:7f:64:e7:c9:df:3a:72:49:b0:ee:19:e8:63:71: fe:b9:d6:19:3a:72:4f:15:be:31:3d:07:61:f7:9a: 58:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:FE:A7:D4:0C:41:B9:FE:E8:B1:C5:6A:20:CE:25:AD:83:38:74:7F X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/jP6n1AxBuf7oscVqIM4lrYM4dH8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.41.38.0/23 45.11.25.0/24 45.133.219.0/24 45.137.52.0/24 45.137.55.0/24 45.137.191.0/24 45.139.28.0/24 45.139.31.0/24 45.140.171.0/24 45.145.2.0/24 45.145.90.0/24 45.145.161.0/24 45.149.80.0-45.149.82.255 45.149.134.0/24 45.150.62.0/23 45.152.227.0/24 77.83.4.0/22 185.179.198.0/24 194.35.127.0/24 194.156.95.0/24 195.245.111.0/24 213.139.192.0/23 213.139.195.0/24 Signature Algorithm: sha256WithRSAEncryption 67:19:d8:42:2c:ce:2c:6f:e9:3d:08:4e:a9:66:b6:78:a7:c5: 98:d6:f1:7b:87:6a:b8:1f:a9:54:97:48:49:52:28:ca:ee:f2: bb:e8:9c:84:f4:df:02:5f:5f:92:18:15:31:72:75:35:e7:cf: e5:78:b2:b2:2e:86:f6:00:dc:82:a6:56:6f:88:25:d5:44:1b: 12:00:b6:25:56:f5:d7:72:00:f6:3b:88:19:74:89:4f:2d:6d: 67:9e:9b:ec:4d:6a:37:04:74:f4:5d:9b:00:53:3b:71:e3:00: 15:45:75:43:ad:ee:ee:d2:fc:38:1b:bc:e0:7f:a0:5a:fc:25: a4:20:38:28:d5:3b:4a:33:ab:e0:bf:8a:6b:ee:f2:a9:f3:6c: 0f:ab:0c:c7:27:b0:25:a4:e3:2f:f6:fd:b9:ab:24:91:46:54: cc:ef:77:2e:b3:1a:40:64:19:ae:ca:b9:63:2e:72:8d:ce:92: aa:23:ff:a7:60:85:bd:83:72:23:5f:32:ec:d4:f6:31:2e:6c: ce:8e:bc:46:0f:48:6a:cb:40:a3:2e:a6:75:39:71:6d:07:32: 41:eb:46:b5:a6:31:22:ac:94:6a:90:b6:1d:98:de:8a:18:81: b7:d3:6e:fa:ff:22:b2:e4:6f:d8:bc:28:9b:f9:54:d6:23:50: 8d:fa:4b:cc -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgISAZwaqtuf8usStVXjZ6+SF4a0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMjAxMTkyNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2ZlYTdkNDBjNDFiOWZlZThiMWM1NmEyMGNlMjVhZDgzMzg3NDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2sk80RHu0eOS+OV/kjMZsxRk+zc 6qsN+cTwXJH7+scpJCjt2b6CwSvcaNqqoL+Gw+/KmL7sZgJ78ZL/EfdhS/ER4lB4 t18HTEwaEFIc4uCdQ3k9OmgWO7JwX80QrHE0lB+LwOBTeLW+RnoTH6scjQYmQb4b wR1hlwVyM5Op1awSvdp5c9evbNxl1iu7xVX2iw8exmXKC4R7TKNUA4msRSP+a87o 5f8YoYqEQ53KDW2edqMLicvDX+11ZeMRTHpSIESl+6W06lWMxSBaWA0QjfNo0mmF 2/52sQwY1fFS3DKef2Tnyd86ckmw7hnoY3H+udYZOnJPFb4xPQdh95pYHwIDAQAB o4ICmjCCApYwHQYDVR0OBBYEFIz+p9QMQbn+6LHFaiDOJa2DOHR/MB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvalA2bjFBeEJ1Zjdvc2NWcUlNNGxyWU00ZEg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGvBggrBgEFBQcBBwEB/wSBnzCBnDCBmQQCAAEwgZIDBAEf KSYDBAAtCxkDBAAthdsDBAAtiTQDBAAtiTcDBAAtib8DBAAtixwDBAAtix8DBAAt jKsDBAAtkQIDBAAtkVoDBAAtkaEwDAMEBC2VUAMEAC2VUgMEAC2VhgMEAS2WPgME AC2Y4wMEAk1TBAMEALmzxgMEAMIjfwMEAMKcXwMEAMP1bwMEAdWLwAMEANWLwzAN BgkqhkiG9w0BAQsFAAOCAQEAZxnYQizOLG/pPQhOqWa2eKfFmNbxe4dquB+pVJdI SVIoyu7yu+ichPTfAl9fkhgVMXJ1NefP5Xiysi6G9gDcgqZWb4gl1UQbEgC2JVb1 13IA9juIGXSJTy1tZ56b7E1qNwR09F2bAFM7ceMAFUV1Q63u7tL8OBu84H+gWvwl pCA4KNU7SjOr4L+Ka+7yqfNsD6sMxyewJaTjL/b9uaskkUZUzO93LrMaQGQZrsq5 Yy5yjc6SqiP/p2CFvYNyI18y7NT2MS5szo68Rg9IastAoy6mdTlxbQcyQetGtaYx IqyUapC2HZjeihiBt9Nu+v8isuRv2Lwom/lU1iNQjfpLzA== -----END CERTIFICATE-----Generated at Sat Feb 14 22:33:15 2026 by rpki-client