This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/iqeuUkNQ27HggqHR9Kfwudrrq-4.roa File: iqeuUkNQ27HggqHR9Kfwudrrq-4.roa (raw, json) Hash identifier: z4qpjc1yNVxDlgNwlhsLFkqvZCx7NpE2mMydb0nhbZQ= Subject key identifier: 8A:A7:AE:52:43:50:DB:B1:E0:82:A1:D1:F4:A7:F0:B9:DA:EB:AB:EE Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Certificate serial: 019B7F15A0B3631892B2231574EBB3AD4D16 Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/iqeuUkNQ27HggqHR9Kfwudrrq-4.roa Signing time: Fri 02 Jan 2026 14:21:22 +0000 ROA not before: Fri 02 Jan 2026 14:21:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32787 IP address blocks: 2.17.108.0/22 maxlen: 22 2.17.120.0/22 maxlen: 22 2.17.192.0/22 maxlen: 22 2.17.192.0/24 maxlen: 24 2.17.193.0/24 maxlen: 24 2.17.194.0/24 maxlen: 24 2.17.195.0/24 maxlen: 24 2.18.212.0/22 maxlen: 22 2.19.4.0/22 maxlen: 22 2.21.112.0/24 maxlen: 24 2.21.113.0/24 maxlen: 24 2.21.114.0/24 maxlen: 24 2.21.115.0/24 maxlen: 24 2.21.116.0/24 maxlen: 24 2.21.117.0/24 maxlen: 24 2.21.118.0/24 maxlen: 24 2.21.119.0/24 maxlen: 24 2.21.120.0/24 maxlen: 24 2.21.121.0/24 maxlen: 24 2.21.123.0/24 maxlen: 24 2.21.124.0/24 maxlen: 24 2.21.125.0/24 maxlen: 24 2.21.126.0/24 maxlen: 24 2.21.127.0/24 maxlen: 24 2.21.175.0/24 maxlen: 24 2.23.128.0/23 maxlen: 23 2.23.130.0/23 maxlen: 23 2.23.132.0/23 maxlen: 23 2.23.134.0/24 maxlen: 24 2.23.135.0/24 maxlen: 24 92.122.184.0/24 maxlen: 24 92.122.185.0/24 maxlen: 24 92.122.207.0/24 maxlen: 24 93.191.168.0/24 maxlen: 24 93.191.169.0/24 maxlen: 24 93.191.172.0/24 maxlen: 24 95.100.157.0/24 maxlen: 24 95.100.180.0/24 maxlen: 24 95.100.212.0/24 maxlen: 24 95.100.213.0/24 maxlen: 24 95.100.214.0/24 maxlen: 24 95.100.215.0/24 maxlen: 24 95.100.253.0/24 maxlen: 24 95.101.117.0/24 maxlen: 24 95.101.118.0/24 maxlen: 24 95.101.204.0/22 maxlen: 22 2a02:2370:1::/48 maxlen: 48 2a02:2370:2::/48 maxlen: 48 2a02:2370:3::/48 maxlen: 48 2a02:2370:4::/48 maxlen: 48 2a02:2370:5::/48 maxlen: 48 2a02:2370:6::/48 maxlen: 48 2a02:2370:101::/48 maxlen: 48 2a02:2370:102::/48 maxlen: 48 2a02:2370:103::/48 maxlen: 48 2a02:2370:104::/48 maxlen: 48 2a02:2370:105::/48 maxlen: 48 2a02:2370:106::/48 maxlen: 48 2a02:2370:200::/48 maxlen: 48 2a02:2370:201::/48 maxlen: 48 2a02:2370:202::/48 maxlen: 48 2a02:2370:203::/48 maxlen: 48 2a02:2370:204::/48 maxlen: 48 2a02:2370:205::/48 maxlen: 48 2a02:2370:206::/48 maxlen: 48 2a02:2370:207::/48 maxlen: 48 2a02:2370:208::/48 maxlen: 48 2a02:2370:209::/48 maxlen: 48 2a02:2370:20a::/48 maxlen: 48 2a02:2370:20b::/48 maxlen: 48 2a02:2370:20c::/48 maxlen: 48 2a02:2370:4000::/48 maxlen: 48 2a02:2370:8000::/48 maxlen: 48 2a02:2370:c000::/48 maxlen: 48 2a02:2370:f000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a0:b3:63:18:92:b2:23:15:74:eb:b3:ad:4d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Validity Not Before: Jan 2 14:21:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8aa7ae524350dbb1e082a1d1f4a7f0b9daebabee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:01:3f:80:6c:6e:a5:ba:e0:18:8a:dd:9e:05: 46:f4:72:c0:39:ba:dc:dd:44:38:24:ea:51:3c:c5: 33:74:96:2b:40:9e:10:ab:b1:27:73:1f:4a:a0:b3: a4:89:7d:7a:26:3f:cb:d5:bb:14:63:12:91:32:bf: cd:64:a5:6c:30:9d:3d:ad:e1:f3:48:d6:b4:44:81: 61:95:77:98:33:ed:85:aa:36:c8:e1:73:df:e6:b7: 82:f6:78:f1:9e:47:ef:b6:df:b4:1b:06:33:49:cb: 8b:3a:ca:cf:03:1e:2d:2a:37:e8:63:f6:f3:ac:8c: b3:05:fa:d1:7c:c4:a8:dc:46:67:fd:cf:89:da:b8: cb:c5:e3:24:57:4f:93:17:14:47:37:ea:31:16:45: f0:57:5f:0a:57:26:18:77:6f:bf:10:32:22:a1:2b: a8:67:31:56:a7:5c:f9:a0:3e:f9:3f:4c:da:34:19: 02:26:d8:c2:69:a0:03:e4:35:aa:a0:02:18:16:72: f3:fb:3a:ac:db:b5:c5:6d:4f:0d:6b:d7:87:af:5a: 04:0d:fd:4b:d7:c6:3b:de:ef:1c:d9:14:63:94:3d: 3a:41:b7:7d:41:e2:49:24:ab:3d:51:11:86:ca:08: 96:2d:1b:8a:1f:30:59:e5:f6:4c:e0:1b:50:4b:fa: bb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A7:AE:52:43:50:DB:B1:E0:82:A1:D1:F4:A7:F0:B9:DA:EB:AB:EE X509v3 Authority Key Identifier: keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/iqeuUkNQ27HggqHR9Kfwudrrq-4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.17.108.0/22 2.17.120.0/22 2.17.192.0/22 2.18.212.0/22 2.19.4.0/22 2.21.112.0-2.21.121.255 2.21.123.0-2.21.127.255 2.21.175.0/24 2.23.128.0/21 92.122.184.0/23 92.122.207.0/24 93.191.168.0/23 93.191.172.0/24 95.100.157.0/24 95.100.180.0/24 95.100.212.0/22 95.100.253.0/24 95.101.117.0-95.101.118.255 95.101.204.0/22 IPv6: 2a02:2370:1::-2a02:2370:6:ffff:ffff:ffff:ffff:ffff 2a02:2370:101::-2a02:2370:106:ffff:ffff:ffff:ffff:ffff 2a02:2370:200::-2a02:2370:20c:ffff:ffff:ffff:ffff:ffff 2a02:2370:4000::/48 2a02:2370:8000::/48 2a02:2370:c000::/48 2a02:2370:f000::/48 Signature Algorithm: sha256WithRSAEncryption 88:46:c7:90:1b:60:35:ac:49:05:ba:12:4b:18:43:8c:a8:c1: 54:f1:f0:2c:1b:76:80:46:55:2c:08:7c:72:fb:9d:32:da:46: 3e:e7:90:3e:b7:8c:1e:7c:15:ba:b6:d4:9c:c0:a7:6a:da:30: 2a:bf:1a:e4:0a:61:33:47:79:f2:21:14:f2:d5:e1:84:ab:ee: 63:91:09:dc:79:38:ec:18:4f:c3:8b:41:64:1d:75:55:f2:f6: 70:1c:91:d3:37:22:88:ab:cb:0d:9b:af:94:5d:06:74:8a:4f: 1b:e8:90:7e:2b:e1:dd:37:6b:e3:91:33:e3:ad:75:a9:2b:21: 29:cd:a5:dd:82:12:6f:b1:96:e5:28:74:6c:d6:e5:d4:86:b1: bf:93:a0:ae:28:cf:63:3f:8d:53:81:8a:42:a5:ce:ce:33:75: 6e:04:c4:99:fc:d3:e4:69:d3:3d:44:c8:16:f3:7f:f7:83:82: cd:0b:2c:5b:46:b3:22:6b:48:08:3c:ab:d1:01:93:a6:40:7f: 36:97:6a:5f:70:4b:17:47:70:dd:09:95:c8:36:3d:75:8f:fe: 61:4f:7d:ab:75:48:b3:aa:e8:4f:85:60:62:7d:52:23:cc:00: 2a:34:b7:87:71:02:b7:7f:8c:20:5a:c3:80:55:f4:88:20:bb: 0e:14:ff:17 -----BEGIN CERTIFICATE----- MIIF7jCCBNagAwIBAgISAZt/FaCzYxiSsiMVdOuzrU0WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5 YmQ2YWEwHhcNMjYwMTAyMTQyMTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWE3YWU1MjQzNTBkYmIxZTA4MmExZDFmNGE3ZjBiOWRhZWJhYmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQE/gGxupbrgGIrdngVG9HLAObrc 3UQ4JOpRPMUzdJYrQJ4Qq7Encx9KoLOkiX16Jj/L1bsUYxKRMr/NZKVsMJ09reHz SNa0RIFhlXeYM+2FqjbI4XPf5reC9njxnkfvtt+0GwYzScuLOsrPAx4tKjfoY/bz rIyzBfrRfMSo3EZn/c+J2rjLxeMkV0+TFxRHN+oxFkXwV18KVyYYd2+/EDIioSuo ZzFWp1z5oD75P0zaNBkCJtjCaaAD5DWqoAIYFnLz+zqs27XFbU8Na9eHr1oEDf1L 18Y73u8c2RRjlD06Qbd9QeJJJKs9URGGygiWLRuKHzBZ5fZM4BtQS/q7lwIDAQAB o4IC+jCCAvYwHQYDVR0OBBYEFIqnrlJDUNux4IKh0fSn8Lna66vuMB8GA1UdIwQY MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt ODhkMWNhYzllNGYxLzEvaXFldVVrTlEyN0hnZ3FIUjlLZnd1ZHJycS00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBDgYIKwYBBQUHAQcBAf8Egf4wgfswgZEEAgABMIGKAwQC AhFsAwQCAhF4AwQCAhHAAwQCAhLUAwQCAhMEMAwDBAQCFXADBAECFXgwDAMEAAIV ewMEBwIVAAMEAAIVrwMEAwIXgAMEAVx6uAMEAFx6zwMEAV2/qAMEAF2/rAMEAF9k nQMEAF9ktAMEAl9k1AMEAF9k/TAMAwQAX2V1AwQAX2V2AwQCX2XMMGUEAgACMF8w EgMHACoCI3AAAQMHACoCI3AABjASAwcAKgIjcAEBAwcAKgIjcAEGMBEDBgEqAiNw AgMHACoCI3ACDAMHACoCI3BAAAMHACoCI3CAAAMHACoCI3DAAAMHACoCI3DwADAN BgkqhkiG9w0BAQsFAAOCAQEAiEbHkBtgNaxJBboSSxhDjKjBVPHwLBt2gEZVLAh8 cvudMtpGPueQPreMHnwVurbUnMCnatowKr8a5AphM0d58iEU8tXhhKvuY5EJ3Hk4 7BhPw4tBZB11VfL2cByR0zciiKvLDZuvlF0GdIpPG+iQfivh3Tdr45Ez4611qSsh Kc2l3YISb7GW5Sh0bNbl1Iaxv5OgrijPYz+NU4GKQqXOzjN1bgTEmfzT5GnTPUTI FvN/94OCzQssW0azImtICDyr0QGTpkB/NpdqX3BLF0dw3QmVyDY9dY/+YU99q3VI s6roT4VgYn1SI8wAKjS3h3ECt3+MIFrDgFX0iCC7DhT/Fw== -----END CERTIFICATE-----Generated at Tue Jan 20 07:58:21 2026 by rpki-client