This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/ak8HVtrmGxvInowGPhlMDzmN9SM.roa File: ak8HVtrmGxvInowGPhlMDzmN9SM.roa (raw, json) Hash identifier: Msq1UpzgMDv4rBF2XasOizTCDajrLDwFESmKrBqYZMM= Subject key identifier: 6A:4F:07:56:DA:E6:1B:1B:C8:9E:8C:06:3E:19:4C:0F:39:8D:F5:23 Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Certificate serial: 019B7E38B70CBDB23966C02D1BC1A99CE855 Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/ak8HVtrmGxvInowGPhlMDzmN9SM.roa Signing time: Fri 02 Jan 2026 10:20:04 +0000 ROA not before: Fri 02 Jan 2026 10:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 62.171.228.0/22 maxlen: 24 62.171.232.0/21 maxlen: 24 62.171.240.0/22 maxlen: 24 62.171.244.0/22 maxlen: 24 62.171.248.0/24 maxlen: 24 194.154.24.0/22 maxlen: 24 194.154.28.0/22 maxlen: 24 194.238.40.0/23 maxlen: 24 194.238.42.0/23 maxlen: 24 194.238.44.0/22 maxlen: 24 194.238.56.0/22 maxlen: 24 194.238.72.0/22 maxlen: 24 194.238.76.0/22 maxlen: 24 194.238.78.0/24 maxlen: 24 194.238.79.0/24 maxlen: 24 194.238.80.0/22 maxlen: 24 194.238.84.0/22 maxlen: 24 194.238.88.0/22 maxlen: 24 194.238.92.0/22 maxlen: 24 213.18.245.0/24 maxlen: 24 217.177.0.0/21 maxlen: 24 217.177.8.0/22 maxlen: 24 217.177.12.0/22 maxlen: 24 217.177.32.0/24 maxlen: 24 217.177.33.0/24 maxlen: 24 217.177.34.0/24 maxlen: 24 217.177.35.0/24 maxlen: 24 217.177.40.0/22 maxlen: 24 217.177.44.0/22 maxlen: 24 217.177.72.0/24 maxlen: 24 217.177.73.0/24 maxlen: 24 217.177.74.0/24 maxlen: 24 217.177.75.0/24 maxlen: 24 217.177.80.0/22 maxlen: 24 217.177.84.0/22 maxlen: 24 217.179.4.0/23 maxlen: 24 217.179.6.0/24 maxlen: 24 217.179.7.0/24 maxlen: 24 217.179.72.0/22 maxlen: 24 217.179.72.0/23 maxlen: 24 217.179.88.0/24 maxlen: 24 217.179.91.0/24 maxlen: 24 217.179.228.0/22 maxlen: 24 217.180.15.0/24 maxlen: 24 217.180.20.0/24 maxlen: 24 217.180.21.0/24 maxlen: 24 217.180.22.0/23 maxlen: 24 217.180.40.0/22 maxlen: 24 217.180.44.0/24 maxlen: 24 217.180.45.0/24 maxlen: 24 217.180.46.0/24 maxlen: 24 217.180.47.0/24 maxlen: 24 217.180.52.0/24 maxlen: 24 217.180.53.0/24 maxlen: 24 217.180.54.0/24 maxlen: 24 217.180.55.0/24 maxlen: 24 217.180.60.0/24 maxlen: 24 217.181.80.0/21 maxlen: 24 217.181.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 16:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b7:0c:bd:b2:39:66:c0:2d:1b:c1:a9:9c:e8:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Validity Not Before: Jan 2 10:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4f0756dae61b1bc89e8c063e194c0f398df523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:34:d2:81:02:d6:a3:80:4c:f1:f3:ba:60:b7: c1:ad:c3:b4:e4:dc:29:61:94:55:94:7f:a3:36:d7: 43:ca:d7:85:06:4b:a5:3b:ab:b3:14:01:1a:aa:55: 06:e1:8a:f9:2f:bd:2a:e9:fb:fd:ac:49:24:4b:48: 13:74:b5:83:4c:0a:db:f6:a2:fb:0b:14:a5:b9:55: b1:41:1a:f8:2a:5e:f1:c8:4c:68:50:e6:6e:a8:7d: 35:96:e1:72:35:8d:b1:9b:96:34:e0:c6:c1:1e:e3: 0b:58:b5:c8:0f:ee:d9:d8:1f:d3:c0:51:30:6e:c0: 14:a8:77:fc:36:69:3e:1c:69:d3:dc:50:9f:90:1b: 07:a7:d4:f8:fc:c7:72:6b:6f:92:76:b7:30:02:b4: 83:23:5e:e6:2e:69:e3:be:22:10:94:c5:e5:37:d2: 6c:f3:3f:e2:ae:a1:7c:31:b1:ea:66:1e:b9:96:f6: c0:0d:e3:d7:c9:70:9c:27:81:c5:5c:18:8e:ed:59: ec:0e:e7:7c:70:e8:2d:1f:9d:08:9c:4e:3f:3e:43: 4c:81:aa:44:a9:a8:e2:6f:73:c7:31:01:ed:b4:73: 8d:24:83:c8:99:a5:d0:20:b8:13:5c:75:dd:7c:1d: e0:af:11:a8:a4:44:2e:d0:e8:a7:30:3b:df:ce:74: c4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4F:07:56:DA:E6:1B:1B:C8:9E:8C:06:3E:19:4C:0F:39:8D:F5:23 X509v3 Authority Key Identifier: keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/ak8HVtrmGxvInowGPhlMDzmN9SM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.171.228.0-62.171.248.255 194.154.24.0/21 194.238.40.0/21 194.238.56.0/22 194.238.72.0-194.238.95.255 213.18.245.0/24 217.177.0.0/20 217.177.32.0/22 217.177.40.0/21 217.177.72.0/22 217.177.80.0/21 217.179.4.0/22 217.179.72.0/22 217.179.88.0/24 217.179.91.0/24 217.179.228.0/22 217.180.15.0/24 217.180.20.0/22 217.180.40.0/21 217.180.52.0/22 217.180.60.0/24 217.181.80.0-217.181.91.255 Signature Algorithm: sha256WithRSAEncryption 48:6f:1f:d2:18:38:9f:4d:cb:15:88:09:63:4e:81:2a:dd:0c: 1f:0b:62:05:7a:fa:18:05:98:fc:56:82:41:53:7a:cb:2d:6f: 77:cd:88:69:f8:60:12:b9:43:df:74:40:2e:1f:da:83:df:03: 6d:1e:8a:5c:6a:69:c2:f3:ee:e9:9c:ac:11:d5:eb:8a:69:9b: f1:6d:ba:ce:dc:9a:8f:6f:ea:4b:21:05:50:89:a1:4b:47:c8: 88:d5:7a:cc:ea:61:17:3f:b8:8a:44:09:aa:ed:04:51:bc:d5: 74:12:9b:54:20:4f:c5:c6:e3:21:d7:7b:c6:de:f5:e9:50:e6: c0:f2:66:5d:39:e1:ff:e9:a2:e9:f9:52:08:9d:36:02:a2:44: 85:1c:d8:89:5b:7b:aa:1f:10:92:b7:7b:9d:bc:72:53:d7:aa: e2:ed:76:25:64:20:06:bd:74:c7:7a:10:21:7b:fc:71:cf:49: 23:93:57:f9:b5:81:05:5e:30:a5:3a:d9:68:5c:7d:0f:7b:e6: a1:bf:c7:e3:d9:12:e2:b3:02:3d:40:4e:65:b2:90:66:5c:42: 53:d3:dd:86:f4:12:e4:ef:c6:7f:c5:9d:22:b1:51:53:4b:7d: 9a:20:6a:9b:38:83:c3:ff:b1:f9:09:7b:48:c8:b4:42:84:9c: 0c:3b:bc:6d -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgISAZt+OLcMvbI5ZsAtG8GpnOhVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy ZGE3NGQwHhcNMjYwMTAyMTAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTRmMDc1NmRhZTYxYjFiYzg5ZThjMDYzZTE5NGMwZjM5OGRmNTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDTSgQLWo4BM8fO6YLfBrcO05Nwp YZRVlH+jNtdDyteFBkulO6uzFAEaqlUG4Yr5L70q6fv9rEkkS0gTdLWDTArb9qL7 CxSluVWxQRr4Kl7xyExoUOZuqH01luFyNY2xm5Y04MbBHuMLWLXID+7Z2B/TwFEw bsAUqHf8Nmk+HGnT3FCfkBsHp9T4/Mdya2+SdrcwArSDI17mLmnjviIQlMXlN9Js 8z/irqF8MbHqZh65lvbADePXyXCcJ4HFXBiO7VnsDud8cOgtH50InE4/PkNMgapE qajib3PHMQHttHONJIPImaXQILgTXHXdfB3grxGopEQu0OinMDvfznTEbQIDAQAB o4ICpDCCAqAwHQYDVR0OBBYEFGpPB1ba5hsbyJ6MBj4ZTA85jfUjMB8GA1UdIwQY MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt YzE5OTQyNzM3ZTZkLzEvYWs4SFZ0cm1HeHZJbm93R1BobE1Eem1OOVNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG5BggrBgEFBQcBBwEB/wSBqTCBpjCBowQCAAEwgZwwDAME Aj6r5AMEAD6r+AMEA8KaGAMEA8LuKAMEAsLuODAMAwQDwu5IAwQFwu5AAwQA1RL1 AwQE2bEAAwQC2bEgAwQD2bEoAwQC2bFIAwQD2bFQAwQC2bMEAwQC2bNIAwQA2bNY AwQA2bNbAwQC2bPkAwQA2bQPAwQC2bQUAwQD2bQoAwQC2bQ0AwQA2bQ8MAwDBATZ tVADBALZtVgwDQYJKoZIhvcNAQELBQADggEBAEhvH9IYOJ9NyxWICWNOgSrdDB8L YgV6+hgFmPxWgkFTesstb3fNiGn4YBK5Q990QC4f2oPfA20eilxqacLz7umcrBHV 64ppm/Ftus7cmo9v6kshBVCJoUtHyIjVeszqYRc/uIpECartBFG81XQSm1QgT8XG 4yHXe8be9elQ5sDyZl054f/poun5UgidNgKiRIUc2Ilbe6ofEJK3e528clPXquLt diVkIAa9dMd6ECF7/HHPSSOTV/m1gQVeMKU62WhcfQ975qG/x+PZEuKzAj1ATmWy kGZcQlPT3Yb0EuTvxn/FnSKxUVNLfZogaps4g8P/sfkJe0jItEKEnAw7vG0= -----END CERTIFICATE-----Generated at Tue Jan 13 21:10:47 2026 by rpki-client