This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/rBkjRpH6N7gyeSMt5XLtwV7FPmI.roa File: rBkjRpH6N7gyeSMt5XLtwV7FPmI.roa (raw, json) Hash identifier: GWnPhOPiOnq1p7VgN0RvkaMmxgG2lm2HTRuj/r6qDXQ= Subject key identifier: AC:19:23:46:91:FA:37:B8:32:79:23:2D:E5:72:ED:C1:5E:C5:3E:62 Certificate issuer: /CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d Certificate serial: 019B7C7FF2A80B3F09D21881CEE021E0C006 Authority key identifier: 9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/rBkjRpH6N7gyeSMt5XLtwV7FPmI.roa Signing time: Fri 02 Jan 2026 02:18:38 +0000 ROA not before: Fri 02 Jan 2026 02:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56478 IP address blocks: 31.14.248.0/22 maxlen: 22 37.156.72.0/22 maxlen: 22 68.168.32.0/19 maxlen: 19 68.168.32.0/22 maxlen: 22 88.98.192.0/18 maxlen: 18 88.98.200.0/22 maxlen: 22 88.98.204.0/22 maxlen: 22 88.98.216.0/23 maxlen: 23 88.98.218.0/23 maxlen: 23 88.98.240.0/20 maxlen: 20 88.98.240.0/22 maxlen: 22 89.32.120.0/22 maxlen: 22 89.34.164.0/22 maxlen: 22 89.35.196.0/22 maxlen: 22 89.36.64.0/21 maxlen: 21 89.39.136.0/21 maxlen: 21 89.44.40.0/22 maxlen: 22 93.115.192.0/22 maxlen: 22 137.220.64.0/18 maxlen: 18 137.220.68.0/22 maxlen: 22 137.220.72.0/21 maxlen: 21 137.220.80.0/22 maxlen: 22 137.220.84.0/22 maxlen: 22 137.220.88.0/22 maxlen: 22 137.220.92.0/22 maxlen: 22 137.220.96.0/22 maxlen: 22 137.220.100.0/22 maxlen: 22 137.220.104.0/22 maxlen: 22 137.220.108.0/22 maxlen: 22 137.220.112.0/23 maxlen: 23 137.220.114.0/23 maxlen: 23 137.220.116.0/23 maxlen: 23 137.220.118.0/23 maxlen: 23 137.220.120.0/23 maxlen: 23 137.220.122.0/23 maxlen: 23 137.220.124.0/22 maxlen: 22 140.228.32.0/19 maxlen: 19 140.228.40.0/22 maxlen: 22 140.228.44.0/22 maxlen: 22 140.228.48.0/22 maxlen: 22 140.228.52.0/22 maxlen: 22 140.228.56.0/22 maxlen: 22 140.228.64.0/19 maxlen: 19 140.228.80.0/21 maxlen: 21 140.228.88.0/22 maxlen: 22 140.228.92.0/22 maxlen: 22 141.0.144.0/21 maxlen: 21 141.0.152.0/21 maxlen: 21 143.58.128.0/18 maxlen: 18 143.58.128.0/21 maxlen: 21 143.58.136.0/21 maxlen: 21 143.58.144.0/22 maxlen: 22 143.58.148.0/22 maxlen: 22 143.58.152.0/21 maxlen: 21 143.58.160.0/21 maxlen: 21 143.58.168.0/21 maxlen: 21 143.58.176.0/21 maxlen: 21 143.58.184.0/21 maxlen: 21 143.58.192.0/18 maxlen: 18 143.58.192.0/21 maxlen: 21 143.58.200.0/21 maxlen: 21 143.58.212.0/22 maxlen: 22 143.58.216.0/21 maxlen: 21 143.58.216.0/22 maxlen: 22 143.58.220.0/22 maxlen: 22 143.58.224.0/21 maxlen: 21 143.58.224.0/22 maxlen: 22 143.58.228.0/22 maxlen: 22 143.58.232.0/22 maxlen: 22 143.58.236.0/22 maxlen: 22 143.58.240.0/21 maxlen: 21 143.58.248.0/21 maxlen: 21 152.37.64.0/18 maxlen: 18 152.37.64.0/22 maxlen: 22 152.37.68.0/22 maxlen: 22 152.37.72.0/22 maxlen: 22 152.37.76.0/22 maxlen: 22 152.37.80.0/22 maxlen: 22 152.37.84.0/22 maxlen: 22 152.37.88.0/22 maxlen: 22 152.37.92.0/22 maxlen: 22 152.37.96.0/22 maxlen: 22 152.37.100.0/23 maxlen: 23 152.37.102.0/23 maxlen: 23 152.37.104.0/22 maxlen: 22 152.37.108.0/22 maxlen: 22 152.37.114.0/23 maxlen: 23 152.37.116.0/22 maxlen: 22 152.37.120.0/22 maxlen: 22 152.37.124.0/23 maxlen: 23 152.37.126.0/23 maxlen: 23 185.24.120.0/22 maxlen: 22 188.172.144.0/20 maxlen: 20 188.210.208.0/21 maxlen: 21 188.210.208.0/22 maxlen: 22 188.210.212.0/22 maxlen: 22 188.210.212.0/23 maxlen: 23 188.210.214.0/23 maxlen: 23 188.211.160.0/22 maxlen: 22 188.213.136.0/22 maxlen: 22 188.214.8.0/21 maxlen: 21 209.35.64.0/19 maxlen: 19 209.35.64.0/21 maxlen: 21 209.35.72.0/22 maxlen: 22 209.35.76.0/22 maxlen: 22 209.35.78.0/23 maxlen: 23 209.35.80.0/21 maxlen: 21 209.35.80.0/22 maxlen: 22 209.35.84.0/22 maxlen: 22 209.35.88.0/21 maxlen: 21 209.35.88.0/22 maxlen: 22 209.35.92.0/22 maxlen: 22 2a01:4b00::/32 maxlen: 32 2a01:4b00:d000::/36 maxlen: 36 2a01:4b00:e000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:f2:a8:0b:3f:09:d2:18:81:ce:e0:21:e0:c0:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d Validity Not Before: Jan 2 02:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac19234691fa37b83279232de572edc15ec53e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:54:90:3e:0a:68:8b:ce:5e:80:ff:7d:75:0b: 93:4e:f9:e2:e6:5a:4c:15:30:09:18:57:c9:bf:c9: c0:0c:0f:e4:e3:53:d1:cb:bc:2e:fd:ff:ec:1c:c4: 80:f8:cc:ee:bf:39:b0:49:fa:0e:2a:77:a2:0b:16: 51:d9:0d:73:bc:1f:24:93:86:ec:6e:ae:5b:55:0c: 3a:ae:4b:96:43:02:5c:64:f9:de:19:53:13:79:04: 50:10:07:7c:cd:95:d3:3f:54:44:b0:8a:16:29:0f: a1:e9:f6:b6:99:8b:93:93:4e:6d:a0:9a:01:5e:c4: 02:43:ae:21:9c:a5:ff:70:f5:2a:45:1e:d7:fb:9d: ce:10:03:33:03:53:c4:a0:9a:5e:77:cc:18:2e:40: e3:2d:53:6e:2c:c1:ed:9d:a6:81:1c:17:a7:cf:00: 50:c9:c5:8c:ac:42:3c:f9:d6:59:5d:4e:16:5f:22: ae:12:c8:bf:dc:62:5e:ac:09:d2:17:bb:96:df:96: 83:51:b4:1d:0e:41:9a:2b:58:76:89:e4:76:19:c7: 8e:e4:56:11:76:ba:6c:de:2d:4b:78:56:49:89:49: dc:9c:3d:02:39:2b:8f:38:f1:bf:56:41:a9:3e:f2: 13:1e:99:4c:86:f6:6f:b3:45:48:d0:90:58:cd:76: 0c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:19:23:46:91:FA:37:B8:32:79:23:2D:E5:72:ED:C1:5E:C5:3E:62 X509v3 Authority Key Identifier: keyid:9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/rBkjRpH6N7gyeSMt5XLtwV7FPmI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.248.0/22 37.156.72.0/22 68.168.32.0/19 88.98.192.0/18 89.32.120.0/22 89.34.164.0/22 89.35.196.0/22 89.36.64.0/21 89.39.136.0/21 89.44.40.0/22 93.115.192.0/22 137.220.64.0/18 140.228.32.0-140.228.95.255 141.0.144.0/20 143.58.128.0/17 152.37.64.0/18 185.24.120.0/22 188.172.144.0/20 188.210.208.0/21 188.211.160.0/22 188.213.136.0/22 188.214.8.0/21 209.35.64.0/19 IPv6: 2a01:4b00::/32 Signature Algorithm: sha256WithRSAEncryption 0a:13:a3:f0:82:3f:42:ed:c9:a4:d7:b2:ff:7d:8a:b8:78:57: b4:4a:ac:65:c0:c5:a6:c9:4b:94:9b:e6:11:90:56:d4:a8:70: 25:98:37:22:5e:c4:3e:dd:fc:21:69:13:99:8a:cc:ca:9b:fd: 33:c7:9d:6e:4e:b2:83:86:f4:84:4f:42:48:c0:77:8a:d1:c7: 57:fe:ff:fa:ff:5d:5f:29:e2:03:c1:1a:7b:b1:01:1d:d0:f6: f1:ad:b3:38:dc:5f:56:51:73:39:d1:ec:cc:ea:f9:c1:5b:09: e3:ae:1b:1d:c0:20:1e:bb:49:4a:77:14:f6:c7:2d:c2:f9:6f: 6c:15:cd:4e:1a:0f:86:17:56:97:63:d3:02:ed:3b:85:a4:7b: 96:41:13:a4:6f:18:97:15:b9:0e:38:b2:c3:62:74:15:2d:6d: 7e:c4:06:63:07:7f:71:ce:95:0e:95:25:66:45:cd:a8:a0:9b: 17:fd:dc:42:e2:78:3c:9d:bb:b2:3b:3f:a1:9f:c4:62:85:bc: 27:b6:c7:2b:92:30:97:6f:51:2b:5d:40:3a:e1:f1:f3:35:6c: 8a:2a:7e:b9:1b:d7:8a:17:82:0d:53:79:29:bd:c0:3b:18:b6: 08:91:64:c1:dd:82:1d:52:8d:ab:f5:de:41:95:4c:9c:10:f0: 4f:54:24:6e -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgISAZt8f/KoCz8J0hiBzuAh4MAGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMTE5ZDljMWE1ZDZlM2YzZTIxZjZmYTg2M2Q4N2Ey ZTRiMGQwHhcNMjYwMTAyMDIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzE5MjM0NjkxZmEzN2I4MzI3OTIzMmRlNTcyZWRjMTVlYzUzZTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFSQPgpoi85egP99dQuTTvni5lpM FTAJGFfJv8nADA/k41PRy7wu/f/sHMSA+MzuvzmwSfoOKneiCxZR2Q1zvB8kk4bs bq5bVQw6rkuWQwJcZPneGVMTeQRQEAd8zZXTP1REsIoWKQ+h6fa2mYuTk05toJoB XsQCQ64hnKX/cPUqRR7X+53OEAMzA1PEoJped8wYLkDjLVNuLMHtnaaBHBenzwBQ ycWMrEI8+dZZXU4WXyKuEsi/3GJerAnSF7uW35aDUbQdDkGaK1h2ieR2GceO5FYR drps3i1LeFZJiUncnD0COSuPOPG/VkGpPvITHplMhvZvs0VI0JBYzXYMHQIDAQAB o4ICqTCCAqUwHQYDVR0OBBYEFKwZI0aR+je4MnkjLeVy7cFexT5iMB8GA1UdIwQY MBaAFJ6VoRnZwaXW4/PiH2+oY9h6LksNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXaEdkbkJwZGJqOC1JZmI2aGoySG91U3cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9hOTM1MmUtOWEzYS00OWFhLWFkNzct N2JlNmViNmJjZTg3LzEvckJralJwSDZON2d5ZVNNdDVYTHR3VjdGUG1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9hOTM1MmUtOWEzYS00OWFhLWFkNzctN2JlNmViNmJjZTg3 LzEvbnBXaEdkbkJwZGJqOC1JZmI2aGoySG91U3cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG+BggrBgEFBQcBBwEB/wSBrjCBqzCBmQQCAAEwgZIDBAIf DvgDBAIlnEgDBAVEqCADBAZYYsADBAJZIHgDBAJZIqQDBAJZI8QDBANZJEADBANZ J4gDBAJZLCgDBAJdc8ADBAaJ3EAwDAMEBYzkIAMEBYzkQAMEBI0AkAMEB486gAME BpglQAMEArkYeAMEBLyskAMEA7zS0AMEArzToAMEArzViAMEA7zWCAMEBdEjQDAN BAIAAjAHAwUAKgFLADANBgkqhkiG9w0BAQsFAAOCAQEAChOj8II/Qu3JpNey/32K uHhXtEqsZcDFpslLlJvmEZBW1KhwJZg3Il7EPt38IWkTmYrMypv9M8edbk6yg4b0 hE9CSMB3itHHV/7/+v9dXyniA8Eae7EBHdD28a2zONxfVlFzOdHszOr5wVsJ464b HcAgHrtJSncU9sctwvlvbBXNThoPhhdWl2PTAu07haR7lkETpG8YlxW5Djiyw2J0 FS1tfsQGYwd/cc6VDpUlZkXNqKCbF/3cQuJ4PJ27sjs/oZ/EYoW8J7bHK5Iwl29R K11AOuHx8zVsiip+uRvXiheCDVN5Kb3AOxi2CJFkwd2CHVKNq/XeQZVMnBDwT1Qk bg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:02 2026 by rpki-client