This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/cDJOpXY5IOe_jLTdJ-OS8qr6SvE.roa File: cDJOpXY5IOe_jLTdJ-OS8qr6SvE.roa (raw, json) Hash identifier: 6iAur4FsqXDOBKEZajqm+YOOYdc6UHHVGhnROwWKxXk= Subject key identifier: 70:32:4E:A5:76:39:20:E7:BF:8C:B4:DD:27:E3:92:F2:AA:FA:4A:F1 Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Certificate serial: 019B77C696A7BBB6FD7578D4365A7217EF7D Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/cDJOpXY5IOe_jLTdJ-OS8qr6SvE.roa Signing time: Thu 01 Jan 2026 04:17:41 +0000 ROA not before: Thu 01 Jan 2026 04:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 151.145.128.0/19 maxlen: 19 158.120.48.0/24 maxlen: 24 158.120.50.0/24 maxlen: 24 158.120.52.0/24 maxlen: 24 158.120.54.0/24 maxlen: 24 158.120.56.0/24 maxlen: 24 158.120.58.0/24 maxlen: 24 158.120.60.0/24 maxlen: 24 158.120.62.0/24 maxlen: 24 170.100.147.0/24 maxlen: 24 170.100.148.0/22 maxlen: 22 170.100.204.0/24 maxlen: 24 170.100.206.0/23 maxlen: 23 192.6.64.0/22 maxlen: 22 192.6.172.0/22 maxlen: 22 192.6.252.0/22 maxlen: 22 192.25.180.0/22 maxlen: 22 192.25.200.0/22 maxlen: 22 192.25.208.0/22 maxlen: 22 192.25.232.0/22 maxlen: 22 192.25.244.0/22 maxlen: 22 192.137.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:96:a7:bb:b6:fd:75:78:d4:36:5a:72:17:ef:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Validity Not Before: Jan 1 04:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70324ea5763920e7bf8cb4dd27e392f2aafa4af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:dc:8e:a2:c0:4d:cf:f2:95:a8:bf:bd:e8:4f: 00:82:ea:06:56:23:17:34:9d:f8:b6:c7:c3:97:4c: 35:57:11:b0:72:c3:1d:80:91:70:8f:ce:81:2c:02: 68:ec:1c:a4:04:94:75:91:21:b2:fa:05:eb:d3:9a: 4c:20:2a:a7:38:9d:5c:71:7e:40:ae:54:33:a0:28: f2:5f:a8:90:52:2d:38:5e:03:1a:f5:11:ec:c8:83: 05:47:76:50:00:07:cc:42:a2:26:fb:6c:e4:dd:8d: 87:c3:f9:ab:9b:76:68:43:cf:bc:ef:73:cd:d9:da: f2:3f:43:4d:1e:7b:cd:4b:8a:1a:85:9b:31:52:93: 27:9f:92:6a:89:c6:5d:73:a2:d5:01:fb:c8:c5:35: 79:26:6d:78:58:0b:2b:4c:fd:be:90:30:35:ff:36: 36:28:7e:99:21:ab:c8:ce:aa:6b:9d:97:5f:b2:90: dd:d2:07:c8:4e:7b:7c:c1:42:41:70:32:4f:88:6e: e5:2c:13:f7:0a:07:43:67:82:5f:3c:af:68:7a:09: 89:fe:59:66:cb:af:a4:a2:c3:6d:8b:c9:d5:f3:9c: 7c:74:6d:40:50:1c:e7:3a:6a:ba:6a:cc:c1:1b:9e: e6:09:66:3e:f2:31:6b:81:12:bd:52:84:21:8f:93: 9b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:32:4E:A5:76:39:20:E7:BF:8C:B4:DD:27:E3:92:F2:AA:FA:4A:F1 X509v3 Authority Key Identifier: keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/cDJOpXY5IOe_jLTdJ-OS8qr6SvE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.145.128.0/19 158.120.48.0/24 158.120.50.0/24 158.120.52.0/24 158.120.54.0/24 158.120.56.0/24 158.120.58.0/24 158.120.60.0/24 158.120.62.0/24 170.100.147.0-170.100.151.255 170.100.204.0/24 170.100.206.0/23 192.6.64.0/22 192.6.172.0/22 192.6.252.0/22 192.25.180.0/22 192.25.200.0/22 192.25.208.0/22 192.25.232.0/22 192.25.244.0/22 192.137.24.0/22 Signature Algorithm: sha256WithRSAEncryption bb:96:82:a8:7b:7c:24:54:37:70:db:5c:73:5c:e2:cc:10:5e: e3:c1:e7:8b:41:71:00:e1:26:2e:d1:00:9e:78:a4:5d:b1:9f: 7c:90:53:ab:90:e0:48:51:c4:f9:c1:9c:4e:42:8b:07:70:6f: 03:23:60:54:6d:3e:03:09:ba:3c:d1:15:c0:0d:33:b9:4a:2b: 78:70:9a:b9:93:f4:a2:18:20:cc:e2:68:d7:dc:e8:f6:7d:a4: 0d:69:18:8e:89:ab:e4:77:99:2c:29:3b:98:06:9a:9f:ca:b4: 77:14:cb:b8:04:99:08:25:0d:e5:e3:74:d1:9a:c4:09:e5:8c: c9:4f:e4:2a:33:05:c8:ca:47:27:43:8a:13:72:55:fa:32:a3: 84:e4:c3:f2:1d:19:d4:a0:40:aa:fe:9b:e8:21:73:8b:e7:a5: 78:82:fa:c8:e2:11:6c:ff:81:c1:ac:c2:23:f8:6e:3b:73:0e: 38:e6:1d:92:96:52:e3:45:7f:77:ae:e4:65:bf:32:21:1a:be: b8:82:f3:26:bd:03:96:2d:50:e6:5d:ab:c8:2e:06:35:a9:02: a4:6c:f4:9c:1b:a5:bb:f4:3b:3f:4d:a0:96:d0:d4:2a:a1:4c: b2:a7:3c:b7:ce:c2:a0:82:e1:7a:f7:5d:a0:fb:bb:82:52:30: 0b:2f:5d:33 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgISAZt3xpanu7b9dXjUNlpyF+99MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1 ZmIwYjUwHhcNMjYwMTAxMDQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDMyNGVhNTc2MzkyMGU3YmY4Y2I0ZGQyN2UzOTJmMmFhZmE0YWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tyOosBNz/KVqL+96E8AguoGViMX NJ34tsfDl0w1VxGwcsMdgJFwj86BLAJo7BykBJR1kSGy+gXr05pMICqnOJ1ccX5A rlQzoCjyX6iQUi04XgMa9RHsyIMFR3ZQAAfMQqIm+2zk3Y2Hw/mrm3ZoQ8+873PN 2dryP0NNHnvNS4oahZsxUpMnn5JqicZdc6LVAfvIxTV5Jm14WAsrTP2+kDA1/zY2 KH6ZIavIzqprnZdfspDd0gfITnt8wUJBcDJPiG7lLBP3CgdDZ4JfPK9oegmJ/llm y6+kosNti8nV85x8dG1AUBznOmq6aszBG57mCWY+8jFrgRK9UoQhj5ObrQIDAQAB o4ICjjCCAoowHQYDVR0OBBYEFHAyTqV2OSDnv4y03SfjkvKq+krxMB8GA1UdIwQY MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct NWUwZjRhYjgwOWJiLzEvY0RKT3BYWTVJT2VfakxUZEotT1M4cXI2U3ZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGjBggrBgEFBQcBBwEB/wSBkzCBkDCBjQQCAAEwgYYDBAWX kYADBACeeDADBACeeDIDBACeeDQDBACeeDYDBACeeDgDBACeeDoDBACeeDwDBACe eD4wDAMEAKpkkwMEA6pkkAMEAKpkzAMEAapkzgMEAsAGQAMEAsAGrAMEAsAG/AME AsAZtAMEAsAZyAMEAsAZ0AMEAsAZ6AMEAsAZ9AMEAsCJGDANBgkqhkiG9w0BAQsF AAOCAQEAu5aCqHt8JFQ3cNtcc1zizBBe48Hni0FxAOEmLtEAnnikXbGffJBTq5Dg SFHE+cGcTkKLB3BvAyNgVG0+Awm6PNEVwA0zuUoreHCauZP0ohggzOJo19zo9n2k DWkYjomr5HeZLCk7mAaan8q0dxTLuASZCCUN5eN00ZrECeWMyU/kKjMFyMpHJ0OK E3JV+jKjhOTD8h0Z1KBAqv6b6CFzi+eleIL6yOIRbP+BwazCI/huO3MOOOYdkpZS 40V/d67kZb8yIRq+uILzJr0Dli1Q5l2ryC4GNakCpGz0nBulu/Q7P02gltDUKqFM sqc8t87CoILhevddoPu7glIwCy9dMw== -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:11 2026 by rpki-client