This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/85GXdqiPxOu3SO_HJDP_V1gcchY.roa File: 85GXdqiPxOu3SO_HJDP_V1gcchY.roa (raw, json) Hash identifier: mm68EcmX/avq56O58oXCqNYd3kG9M9saoSwzNhHThBE= Subject key identifier: F3:91:97:76:A8:8F:C4:EB:B7:48:EF:C7:24:33:FF:57:58:1C:72:16 Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 019C369530629A537E82994F02700FD9EF25 Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/85GXdqiPxOu3SO_HJDP_V1gcchY.roa Signing time: Sat 07 Feb 2026 05:31:12 +0000 ROA not before: Sat 07 Feb 2026 05:31:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213807 IP address blocks: 37.202.224.0/22 maxlen: 24 37.202.228.0/22 maxlen: 24 37.202.232.0/22 maxlen: 24 37.202.235.0/24 maxlen: 24 37.202.236.0/22 maxlen: 24 37.202.240.0/23 maxlen: 24 37.202.242.0/24 maxlen: 24 37.202.244.0/22 maxlen: 24 37.202.248.0/24 maxlen: 24 37.202.251.0/24 maxlen: 24 94.182.81.0/24 maxlen: 24 94.182.101.0/24 maxlen: 24 94.182.103.0/24 maxlen: 24 94.182.104.0/22 maxlen: 24 94.182.108.0/24 maxlen: 24 94.182.109.0/24 maxlen: 24 94.182.114.0/24 maxlen: 24 94.182.116.0/24 maxlen: 24 94.182.128.0/23 maxlen: 24 94.182.131.0/24 maxlen: 24 94.182.132.0/24 maxlen: 24 94.182.134.0/24 maxlen: 24 94.182.135.0/24 maxlen: 24 94.182.136.0/23 maxlen: 24 94.182.144.0/24 maxlen: 24 94.182.145.0/24 maxlen: 24 94.182.147.0/24 maxlen: 24 94.182.149.0/24 maxlen: 24 94.182.150.0/24 maxlen: 24 94.182.151.0/24 maxlen: 24 94.182.152.0/24 maxlen: 24 94.182.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:36:95:30:62:9a:53:7e:82:99:4f:02:70:0f:d9:ef:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: Feb 7 05:31:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3919776a88fc4ebb748efc72433ff57581c7216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f0:49:56:3a:fa:5a:87:e8:6f:e4:3a:95:1b: e2:fd:71:36:2b:b3:e6:4b:df:a4:f5:82:06:bf:4b: d6:90:73:1e:91:43:77:b4:21:c2:f0:5f:4f:6c:26: 12:ed:35:62:05:b2:08:d9:b0:3b:15:50:1a:9c:c9: 13:17:8e:bf:df:6a:52:59:f8:b7:0d:89:9a:1e:ab: b7:42:80:ea:2a:b8:48:49:1a:c9:43:9c:12:4e:ec: 8a:a8:b6:4a:dd:e4:12:d7:c2:c8:a7:60:46:d7:5b: 51:d4:78:98:5c:b6:0e:3f:9b:f1:c9:ed:17:eb:2e: 8e:a5:19:7d:c0:6e:d2:7e:9e:fd:66:f2:59:0f:6f: df:7c:e2:ee:ea:1c:a0:21:60:8e:99:dc:b6:b0:0e: c3:a2:22:11:05:8a:3b:d5:a8:7e:25:4c:bb:48:24: d1:e3:e3:59:09:df:76:49:2e:c2:86:c2:a4:cb:77: f3:1d:d9:eb:1a:a3:f9:94:5c:8b:66:02:70:2b:b1: 92:bc:6d:94:96:7c:3d:24:0f:c6:17:5f:8a:e1:6c: 97:b5:12:c1:8a:27:0a:ef:5d:82:fc:6a:6f:3d:dc: f7:56:f6:53:2a:f4:aa:bc:68:63:a2:98:cb:9e:59: 1a:f9:1d:ec:28:68:d1:98:e8:ed:8e:0a:03:fa:8a: 24:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:91:97:76:A8:8F:C4:EB:B7:48:EF:C7:24:33:FF:57:58:1C:72:16 X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/85GXdqiPxOu3SO_HJDP_V1gcchY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.224.0-37.202.242.255 37.202.244.0-37.202.248.255 37.202.251.0/24 94.182.81.0/24 94.182.101.0/24 94.182.103.0-94.182.109.255 94.182.114.0/24 94.182.116.0/24 94.182.128.0/23 94.182.131.0-94.182.132.255 94.182.134.0-94.182.137.255 94.182.144.0/23 94.182.147.0/24 94.182.149.0-94.182.152.255 94.182.223.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:4b:aa:1b:ac:47:6a:49:e2:73:ac:59:8c:27:b1:e1:81:cc: f5:fe:66:a1:b4:70:5a:76:a7:94:93:40:4d:24:1f:db:9d:99: 70:43:a9:92:4f:a8:00:62:91:55:60:f4:02:04:66:23:8b:49: 83:f6:79:1a:ea:b7:b2:3d:c6:94:66:ae:b5:78:61:13:70:84: 88:2e:f0:4a:88:cd:6d:58:bd:7e:2d:21:12:e7:cc:4f:91:8e: 7e:8e:8b:38:18:e4:e8:4e:83:1a:ca:f5:7f:c3:89:2f:f5:f9: ff:ed:b0:ff:dd:57:ba:41:e9:1a:c1:97:00:a5:0f:ba:94:2c: e6:72:c3:f8:38:4d:5b:8e:95:5e:bd:68:94:70:1c:75:ce:2a: 46:4d:8b:06:f0:cb:e7:bb:7b:e5:75:8d:8a:28:65:a9:28:e1: 5b:11:56:96:3b:07:b6:27:3e:43:dc:35:99:9e:da:e2:4f:29: 2a:2e:86:ce:8a:5e:0a:78:c0:d9:54:85:48:a3:10:ec:7e:73: 80:f3:d9:f8:43:5e:57:30:bd:db:e6:ab:bf:a2:bb:d4:f6:5f: dd:70:7d:34:de:aa:e3:18:4b:88:37:63:c7:2c:0b:a6:3e:cc: cc:97:ee:16:ac:62:57:fb:f5:95:7e:8d:2a:6d:38:28:f0:68: a6:67:74:0e -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISAZw2lTBimlN+gplPAnAP2e8lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjYwMjA3MDUzMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzkxOTc3NmE4OGZjNGViYjc0OGVmYzcyNDMzZmY1NzU4MWM3MjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/BJVjr6Wofob+Q6lRvi/XE2K7Pm S9+k9YIGv0vWkHMekUN3tCHC8F9PbCYS7TViBbII2bA7FVAanMkTF46/32pSWfi3 DYmaHqu3QoDqKrhISRrJQ5wSTuyKqLZK3eQS18LIp2BG11tR1HiYXLYOP5vxye0X 6y6OpRl9wG7Sfp79ZvJZD2/ffOLu6hygIWCOmdy2sA7DoiIRBYo71ah+JUy7SCTR 4+NZCd92SS7ChsKky3fzHdnrGqP5lFyLZgJwK7GSvG2Ulnw9JA/GF1+K4WyXtRLB iicK712C/GpvPdz3VvZTKvSqvGhjopjLnlka+R3sKGjRmOjtjgoD+ookwwIDAQAB o4ICkjCCAo4wHQYDVR0OBBYEFPORl3aoj8Trt0jvxyQz/1dYHHIWMB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvODVHWGRxaVB4T3UzU09fSEpEUF9WMWdjY2hZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGnBggrBgEFBQcBBwEB/wSBlzCBlDCBkQQCAAEwgYowDAME BSXK4AMEACXK8jAMAwQCJcr0AwQAJcr4AwQAJcr7AwQAXrZRAwQAXrZlMAwDBABe tmcDBAFetmwDBABetnIDBABetnQDBAFetoAwDAMEAF62gwMEAF62hDAMAwQBXraG AwQBXraIAwQBXraQAwQAXraTMAwDBABetpUDBABetpgDBABett8wDQYJKoZIhvcN AQELBQADggEBAB9LqhusR2pJ4nOsWYwnseGBzPX+ZqG0cFp2p5STQE0kH9udmXBD qZJPqABikVVg9AIEZiOLSYP2eRrqt7I9xpRmrrV4YRNwhIgu8EqIzW1YvX4tIRLn zE+Rjn6OizgY5OhOgxrK9X/DiS/1+f/tsP/dV7pB6RrBlwClD7qULOZyw/g4TVuO lV69aJRwHHXOKkZNiwbwy+e7e+V1jYooZako4VsRVpY7B7YnPkPcNZme2uJPKSou hs6KXgp4wNlUhUijEOx+c4Dz2fhDXlcwvdvmq7+iu9T2X91wfTTequMYS4g3Y8cs C6Y+zMyX7hasYlf79ZV+jSptOCjwaKZndA4= -----END CERTIFICATE-----Generated at Tue Feb 10 06:07:34 2026 by rpki-client