This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/xJL3LbO6FjEYDhx-s72k1kI1pHg.roa File: xJL3LbO6FjEYDhx-s72k1kI1pHg.roa (raw, json) Hash identifier: REmb3R66F69GLpJdvueLEfiFvDg0KDHC5cx7Z3ZyPQo= Subject key identifier: C4:92:F7:2D:B3:BA:16:31:18:0E:1C:7E:B3:BD:A4:D6:42:35:A4:78 Certificate issuer: /CN=48171672d53fdf8b2537764f537e365a5927bdaf Certificate serial: 019B7C80A72489EF3059B3EF3921CA946C84 Authority key identifier: 48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/xJL3LbO6FjEYDhx-s72k1kI1pHg.roa Signing time: Fri 02 Jan 2026 02:19:24 +0000 ROA not before: Fri 02 Jan 2026 02:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21056 IP address blocks: 45.84.140.0/22 maxlen: 32 45.143.36.0/22 maxlen: 32 45.151.12.0/22 maxlen: 32 45.151.64.0/22 maxlen: 32 46.44.192.0/18 maxlen: 32 78.152.96.0/19 maxlen: 32 79.135.32.0/19 maxlen: 32 80.93.128.0/20 maxlen: 32 83.137.56.0/21 maxlen: 24 87.232.160.0/19 maxlen: 24 87.247.232.0/21 maxlen: 32 91.143.192.0/20 maxlen: 32 94.138.160.0/19 maxlen: 32 103.26.124.0/22 maxlen: 22 103.43.232.0/22 maxlen: 22 103.61.184.0/22 maxlen: 22 103.248.184.0/22 maxlen: 24 103.248.186.0/24 maxlen: 24 109.122.208.0/21 maxlen: 21 144.48.192.0/22 maxlen: 32 185.125.64.0/22 maxlen: 22 185.158.116.0/22 maxlen: 32 185.170.36.0/22 maxlen: 32 185.224.60.0/22 maxlen: 32 185.224.104.0/22 maxlen: 32 185.230.92.0/22 maxlen: 32 185.230.192.0/22 maxlen: 32 185.230.232.0/22 maxlen: 32 185.231.160.0/22 maxlen: 32 185.234.164.0/22 maxlen: 32 185.241.20.0/22 maxlen: 32 188.240.32.0/22 maxlen: 22 193.124.240.0/22 maxlen: 22 194.58.216.0/22 maxlen: 22 213.182.64.0/19 maxlen: 32 2a00:14f8::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a7:24:89:ef:30:59:b3:ef:39:21:ca:94:6c:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48171672d53fdf8b2537764f537e365a5927bdaf Validity Not Before: Jan 2 02:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c492f72db3ba1631180e1c7eb3bda4d64235a478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:23:ef:0a:3e:bb:49:f1:f8:b7:e7:d6:22:1d: ef:d6:07:b1:47:3f:99:66:4b:93:3e:dc:75:cc:69: d6:61:84:46:fc:08:4b:59:32:7d:7a:4b:0a:a6:c9: ee:4b:ec:f4:d2:ec:58:dc:56:22:63:82:48:57:37: 29:e0:be:51:ae:06:f1:7b:a3:55:1f:71:56:52:3c: fa:05:e5:d9:86:4d:50:5f:ef:32:16:ae:e7:1b:42: e4:7d:13:da:c7:ed:b5:23:5b:52:fc:2a:11:01:fb: 2b:59:83:53:10:48:fe:5b:9f:ba:ec:94:24:03:c7: c3:a6:7c:56:10:4d:09:a2:e9:d0:29:c8:82:bb:4e: 7f:08:cf:57:ea:0e:9b:2a:ce:0b:e7:af:4f:33:70: 0a:7a:80:74:4c:6b:c3:8d:de:28:32:73:23:5d:68: 00:76:98:27:af:fc:95:17:6b:5a:23:e6:3e:a4:0f: 81:1d:9f:5b:8b:c7:52:3d:1e:d3:17:1e:45:aa:69: 11:c1:52:03:de:9f:08:e6:47:94:92:f9:68:c9:88: 08:8c:13:b6:66:40:ff:6d:ee:87:7e:bf:08:70:31: e5:35:22:86:95:1a:54:f5:e3:03:44:40:c5:50:64: 61:7c:b0:4c:29:73:d6:dc:81:56:05:0f:42:bb:97: 18:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:92:F7:2D:B3:BA:16:31:18:0E:1C:7E:B3:BD:A4:D6:42:35:A4:78 X509v3 Authority Key Identifier: keyid:48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/xJL3LbO6FjEYDhx-s72k1kI1pHg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.140.0/22 45.143.36.0/22 45.151.12.0/22 45.151.64.0/22 46.44.192.0/18 78.152.96.0/19 79.135.32.0/19 80.93.128.0/20 83.137.56.0/21 87.232.160.0/19 87.247.232.0/21 91.143.192.0/20 94.138.160.0/19 103.26.124.0/22 103.43.232.0/22 103.61.184.0/22 103.248.184.0/22 109.122.208.0/21 144.48.192.0/22 185.125.64.0/22 185.158.116.0/22 185.170.36.0/22 185.224.60.0/22 185.224.104.0/22 185.230.92.0/22 185.230.192.0/22 185.230.232.0/22 185.231.160.0/22 185.234.164.0/22 185.241.20.0/22 188.240.32.0/22 193.124.240.0/22 194.58.216.0/22 213.182.64.0/19 IPv6: 2a00:14f8::/32 Signature Algorithm: sha256WithRSAEncryption b4:ee:82:d4:4a:e8:2b:b3:bf:84:26:de:37:82:ce:b4:5d:c9: 36:73:a5:6b:2f:3d:1d:90:94:3a:25:35:68:ab:7a:95:99:a1: a7:ce:07:22:ae:96:f8:66:e5:2f:ee:44:78:7b:c9:74:10:ea: 67:53:9c:f3:f1:28:e7:fb:58:3b:79:05:e6:74:bf:b7:0f:53: e9:0d:06:6c:c6:17:24:85:1a:d8:82:95:9c:8b:4b:f0:b3:1e: 3e:9a:8e:3b:fd:99:33:06:d0:a2:9f:75:c8:55:47:f2:bb:a8: f1:65:3b:6e:5c:f1:c6:0d:62:19:f7:4f:1f:3d:97:35:83:11: d6:70:3b:60:7f:4e:6a:89:20:3f:9f:2c:c6:03:2a:cb:8f:d9: f4:d2:ab:cc:fd:80:4f:9a:cd:29:1a:3e:59:f4:33:bb:e1:cf: 8e:67:79:60:64:6a:1b:55:3f:e0:7c:0b:27:21:6d:8a:15:03: c3:af:0a:34:16:e4:7a:2d:90:23:d9:2f:aa:d0:07:a5:77:b6: 8d:89:73:31:52:67:13:69:a0:c1:94:a4:0b:d0:2c:41:7a:1b: 4b:a3:b8:e2:e0:85:bc:5c:38:8d:7c:61:92:ea:25:3d:e2:db: 26:66:1f:69:5e:de:3a:53:87:b6:d4:5e:42:f2:6f:9a:57:6a: 9e:0c:f9:08 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgISAZt8gKckie8wWbPvOSHKlGyEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MTcxNjcyZDUzZmRmOGIyNTM3NzY0ZjUzN2UzNjVhNTky N2JkYWYwHhcNMjYwMTAyMDIxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDkyZjcyZGIzYmExNjMxMTgwZTFjN2ViM2JkYTRkNjQyMzVhNDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSPvCj67SfH4t+fWIh3v1gexRz+Z ZkuTPtx1zGnWYYRG/AhLWTJ9eksKpsnuS+z00uxY3FYiY4JIVzcp4L5Rrgbxe6NV H3FWUjz6BeXZhk1QX+8yFq7nG0LkfRPax+21I1tS/CoRAfsrWYNTEEj+W5+67JQk A8fDpnxWEE0JounQKciCu05/CM9X6g6bKs4L569PM3AKeoB0TGvDjd4oMnMjXWgA dpgnr/yVF2taI+Y+pA+BHZ9bi8dSPR7TFx5FqmkRwVID3p8I5keUkvloyYgIjBO2 ZkD/be6Hfr8IcDHlNSKGlRpU9eMDREDFUGRhfLBMKXPW3IFWBQ9Cu5cYgQIDAQAB o4IC4zCCAt8wHQYDVR0OBBYEFMSS9y2zuhYxGA4cfrO9pNZCNaR4MB8GA1UdIwQY MBaAFEgXFnLVP9+LJTd2T1N+NlpZJ72vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0JjV2N0VV8zNHNsTjNaUFUzNDJXbGtudmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81NWUxMzgtNTZkYS00NDkyLWExZjIt ZGIwNGYyMTM5MGEwLzEveEpMM0xiTzZGakVZRGh4LXM3Mmsxa0kxcEhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS81NWUxMzgtNTZkYS00NDkyLWExZjItZGIwNGYyMTM5MGEw LzEvU0JjV2N0VV8zNHNsTjNaUFUzNDJXbGtudmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH4BggrBgEFBQcBBwEB/wSB6DCB5TCB0wQCAAEwgcwDBAIt VIwDBAItjyQDBAItlwwDBAItl0ADBAYuLMADBAVOmGADBAVPhyADBARQXYADBANT iTgDBAVX6KADBANX9+gDBARbj8ADBAVeiqADBAJnGnwDBAJnK+gDBAJnPbgDBAJn +LgDBANtetADBAKQMMADBAK5fUADBAK5nnQDBAK5qiQDBAK54DwDBAK54GgDBAK5 5lwDBAK55sADBAK55ugDBAK556ADBAK56qQDBAK58RQDBAK88CADBALBfPADBALC OtgDBAXVtkAwDQQCAAIwBwMFACoAFPgwDQYJKoZIhvcNAQELBQADggEBALTugtRK 6Cuzv4Qm3jeCzrRdyTZzpWsvPR2QlDolNWirepWZoafOByKulvhm5S/uRHh7yXQQ 6mdTnPPxKOf7WDt5BeZ0v7cPU+kNBmzGFySFGtiClZyLS/CzHj6ajjv9mTMG0KKf dchVR/K7qPFlO25c8cYNYhn3Tx89lzWDEdZwO2B/TmqJID+fLMYDKsuP2fTSq8z9 gE+azSkaPln0M7vhz45neWBkahtVP+B8CychbYoVA8OvCjQW5HotkCPZL6rQB6V3 to2JczFSZxNpoMGUpAvQLEF6G0ujuOLghbxcOI18YZLqJT3i2yZmH2le3jpTh7bU XkLyb5pXap4M+Qg= -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:04 2026 by rpki-client