This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/pRRN8tbRzsJit7Z4JhxyO2xZKQw.roa File: pRRN8tbRzsJit7Z4JhxyO2xZKQw.roa (raw, json) Hash identifier: gd2MXZWTWz2lwiaIYT5VQFl1IKYZmodozvCaVrTHn9c= Subject key identifier: A5:14:4D:F2:D6:D1:CE:C2:62:B7:B6:78:26:1C:72:3B:6C:59:29:0C Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0 Certificate serial: 019B992679B59DC4A286F3FB04A4CA28C128 Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/pRRN8tbRzsJit7Z4JhxyO2xZKQw.roa Signing time: Wed 07 Jan 2026 15:49:54 +0000 ROA not before: Wed 07 Jan 2026 15:49:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203020 IP address blocks: 64.38.116.0/24 maxlen: 32 65.38.123.0/24 maxlen: 32 65.79.176.0/24 maxlen: 32 66.45.76.0/24 maxlen: 32 66.45.113.0/24 maxlen: 32 66.179.15.0/24 maxlen: 32 66.179.141.0/24 maxlen: 32 66.179.142.0/24 maxlen: 32 66.179.156.0/24 maxlen: 32 66.179.176.0/24 maxlen: 32 173.252.145.0/24 maxlen: 32 173.252.160.0/24 maxlen: 32 173.252.166.0/24 maxlen: 32 185.5.146.0/24 maxlen: 32 209.46.1.0/24 maxlen: 32 209.46.39.0/24 maxlen: 32 216.183.105.0/24 maxlen: 32 216.183.109.0/24 maxlen: 32 216.183.115.0/24 maxlen: 32 216.183.123.0/24 maxlen: 32 216.203.13.0/24 maxlen: 32 216.203.31.0/24 maxlen: 32 216.203.38.0/24 maxlen: 32 216.203.56.0/24 maxlen: 32 216.245.152.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:99:26:79:b5:9d:c4:a2:86:f3:fb:04:a4:ca:28:c1:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0 Validity Not Before: Jan 7 15:49:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5144df2d6d1cec262b7b678261c723b6c59290c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:80:bd:93:aa:2a:f8:78:b0:d2:fc:0e:75:87: 47:27:6e:79:5f:72:e7:14:19:37:2f:43:b9:2b:8a: 1a:44:01:50:e2:9c:8e:46:1a:9f:bf:a6:ad:44:2b: 3e:1a:1c:bd:0e:7e:68:fe:92:3a:d5:fb:32:35:79: ce:af:6c:13:af:62:a5:c8:64:70:82:b4:03:9b:81: 9a:be:c4:de:1c:7d:0b:6a:67:68:d9:81:48:1f:44: 71:0c:ec:16:3f:3a:ff:8a:bb:b4:dc:b8:85:af:7f: 7e:f1:c6:99:d0:be:91:51:92:7e:03:6e:4d:3f:e4: 63:d8:6e:ed:b2:46:3a:0c:34:5b:c6:50:f8:a9:8c: 17:99:39:a6:af:28:d0:59:79:cb:cb:c3:9e:dd:8c: 13:18:61:1b:92:e5:d3:72:a5:eb:fe:42:5b:0c:c2: 56:e7:55:14:75:7b:92:35:2e:c6:b8:9e:21:22:2c: e2:f5:e1:3a:91:31:ed:cd:f0:81:69:0e:18:fc:0f: 84:e8:9e:c5:2b:00:51:5f:e5:a5:1b:be:dc:0c:87: 1b:41:e9:fb:79:b2:64:e5:a4:f5:e4:35:92:f8:5f: e4:2c:2e:03:06:98:3e:ef:a5:6a:72:16:60:db:b8: 04:2f:52:bd:cc:83:34:11:f3:4c:ea:01:bf:62:6c: df:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:14:4D:F2:D6:D1:CE:C2:62:B7:B6:78:26:1C:72:3B:6C:59:29:0C X509v3 Authority Key Identifier: keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/pRRN8tbRzsJit7Z4JhxyO2xZKQw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.38.116.0/24 65.38.123.0/24 65.79.176.0/24 66.45.76.0/24 66.45.113.0/24 66.179.15.0/24 66.179.141.0-66.179.142.255 66.179.156.0/24 66.179.176.0/24 173.252.145.0/24 173.252.160.0/24 173.252.166.0/24 185.5.146.0/24 209.46.1.0/24 209.46.39.0/24 216.183.105.0/24 216.183.109.0/24 216.183.115.0/24 216.183.123.0/24 216.203.13.0/24 216.203.31.0/24 216.203.38.0/24 216.203.56.0/24 216.245.152.0/24 Signature Algorithm: sha256WithRSAEncryption a0:67:ed:4d:a1:63:1b:44:ea:c5:26:94:da:c9:98:09:0b:b4: 26:69:54:0a:9d:90:56:04:6d:2e:b5:37:56:25:b3:67:fb:d6: 02:79:3c:ea:bd:77:e1:e3:6d:12:11:36:70:39:1e:ef:13:aa: 7e:03:9b:15:e1:75:d3:fa:ef:77:da:62:a3:8e:b6:d8:42:62: 3e:3c:44:ea:50:33:30:82:1b:9d:c6:96:42:c5:ec:e6:0e:98: 7a:81:b3:ca:1b:20:04:fa:b8:30:03:f6:eb:16:19:94:e3:a4: 00:9d:47:f9:4c:ca:08:06:10:95:7c:2e:e2:fe:11:a4:00:12: da:78:9b:50:4b:04:ec:cb:35:0a:7d:25:a5:8b:4d:cc:ae:ec: e1:6f:b3:d1:dd:db:04:8c:e4:26:14:78:a0:44:75:8b:71:bc: b4:d8:f0:fa:b3:fb:f5:41:c1:7f:14:5b:71:ab:15:f9:86:b6: ef:0b:c9:9f:e9:61:14:54:21:0e:99:65:e7:57:87:23:a6:ef: e7:6e:52:37:87:a1:cd:22:40:81:19:49:38:3f:56:6c:f8:17: 2c:18:e1:ec:8b:9d:32:82:c9:bb:4c:45:d1:d3:d4:4b:a2:98: 21:b3:bd:59:71:02:25:82:84:8c:c6:e6:c0:c5:ca:07:18:6b: d4:7b:28:ab -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZuZJnm1ncSihvP7BKTKKMEoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZDQ0OTE5ZmRkMDhhZmI5YTRkMGE4Nzc4OTIzMDExMjUx ZGQ3ZjAwHhcNMjYwMTA3MTU0OTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTE0NGRmMmQ2ZDFjZWMyNjJiN2I2NzgyNjFjNzIzYjZjNTkyOTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YC9k6oq+Hiw0vwOdYdHJ255X3Ln FBk3L0O5K4oaRAFQ4pyORhqfv6atRCs+Ghy9Dn5o/pI61fsyNXnOr2wTr2KlyGRw grQDm4GavsTeHH0Lamdo2YFIH0RxDOwWPzr/iru03LiFr39+8caZ0L6RUZJ+A25N P+Rj2G7tskY6DDRbxlD4qYwXmTmmryjQWXnLy8Oe3YwTGGEbkuXTcqXr/kJbDMJW 51UUdXuSNS7GuJ4hIizi9eE6kTHtzfCBaQ4Y/A+E6J7FKwBRX+WlG77cDIcbQen7 ebJk5aT15DWS+F/kLC4DBpg+76VqchZg27gEL1K9zIM0EfNM6gG/YmzfuwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKUUTfLW0c7CYre2eCYccjtsWSkMMB8GA1UdIwQY MBaAFDLUSRn90Ir7mk0Kh3iSMBElHdfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXRSSkdmM1FpdnVhVFFxSGVKSXdFU1VkMV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9mZDIyOTQtY2YzNy00ZmM5LTllZGQt YTRmN2IwODhiYzFhLzEvcFJSTjh0YlJ6c0ppdDdaNEpoeHlPMnhaS1F3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9mZDIyOTQtY2YzNy00ZmM5LTllZGQtYTRmN2IwODhiYzFh LzEvTXRSSkdmM1FpdnVhVFFxSGVKSXdFU1VkMV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG1BggrBgEFBQcBBwEB/wSBpTCBojCBnwQCAAEwgZgDBABA JnQDBABBJnsDBABBT7ADBABCLUwDBABCLXEDBABCsw8wDAMEAEKzjQMEAEKzjgME AEKznAMEAEKzsAMEAK38kQMEAK38oAMEAK38pgMEALkFkgMEANEuAQMEANEuJwME ANi3aQMEANi3bQMEANi3cwMEANi3ewMEANjLDQMEANjLHwMEANjLJgMEANjLOAME ANj1mDANBgkqhkiG9w0BAQsFAAOCAQEAoGftTaFjG0TqxSaU2smYCQu0JmlUCp2Q VgRtLrU3ViWzZ/vWAnk86r134eNtEhE2cDke7xOqfgObFeF10/rvd9pio4622EJi PjxE6lAzMIIbncaWQsXs5g6YeoGzyhsgBPq4MAP26xYZlOOkAJ1H+UzKCAYQlXwu 4v4RpAAS2nibUEsE7Ms1Cn0lpYtNzK7s4W+z0d3bBIzkJhR4oER1i3G8tNjw+rP7 9UHBfxRbcasV+Ya27wvJn+lhFFQhDpll51eHI6bv525SN4ehzSJAgRlJOD9WbPgX LBjh7IudMoLJu0xF0dPUS6KYIbO9WXECJYKEjMbmwMXKBxhr1Hsoqw== -----END CERTIFICATE-----Generated at Sun Jan 18 10:45:24 2026 by rpki-client