This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/mJc1uOIr1hw4GTVUxLc2mBswysw.roa File: mJc1uOIr1hw4GTVUxLc2mBswysw.roa (raw, json) Hash identifier: diUF/JvZyAKF5uqv3TnUWrIHgd/X2LtxFoqD530JnlA= Subject key identifier: 98:97:35:B8:E2:2B:D6:1C:38:19:35:54:C4:B7:36:98:1B:30:CA:CC Certificate issuer: /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39 Certificate serial: 019B7BA4C913EEFD1214231E8C1AD3B05C01 Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/mJc1uOIr1hw4GTVUxLc2mBswysw.roa Signing time: Thu 01 Jan 2026 22:19:15 +0000 ROA not before: Thu 01 Jan 2026 22:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 91.84.0.0/18 maxlen: 24 91.84.128.0/17 maxlen: 24 91.85.32.0/19 maxlen: 24 91.85.64.0/18 maxlen: 24 91.85.128.0/19 maxlen: 24 91.85.192.0/18 maxlen: 24 194.46.36.0/24 maxlen: 24 194.46.37.0/24 maxlen: 24 194.46.39.0/24 maxlen: 24 194.46.40.0/24 maxlen: 24 194.46.41.0/24 maxlen: 24 194.46.43.0/24 maxlen: 24 194.46.44.0/24 maxlen: 24 194.46.45.0/24 maxlen: 24 194.46.46.0/24 maxlen: 24 194.46.48.0/21 maxlen: 21 194.46.56.0/24 maxlen: 24 194.46.61.0/24 maxlen: 24 194.46.64.0/22 maxlen: 24 194.46.68.0/23 maxlen: 24 194.46.72.0/22 maxlen: 24 194.46.76.0/23 maxlen: 24 194.46.78.0/24 maxlen: 24 194.46.80.0/23 maxlen: 24 194.46.81.0/24 maxlen: 24 194.46.82.0/24 maxlen: 24 212.104.129.0/24 maxlen: 24 212.104.130.0/24 maxlen: 24 212.104.132.0/24 maxlen: 24 212.104.136.0/24 maxlen: 24 212.104.143.0/24 maxlen: 24 212.104.149.0/24 maxlen: 24 212.104.150.0/24 maxlen: 24 212.104.152.0/24 maxlen: 24 212.104.155.0/24 maxlen: 24 212.104.156.0/24 maxlen: 24 212.104.159.0/24 maxlen: 24 212.108.80.0/23 maxlen: 24 212.108.84.0/24 maxlen: 24 212.108.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c9:13:ee:fd:12:14:23:1e:8c:1a:d3:b0:5c:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39 Validity Not Before: Jan 1 22:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=989735b8e22bd61c38193554c4b736981b30cacc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:63:05:ec:99:b4:43:88:3c:d9:1f:a8:62:a5: b4:9b:aa:e5:c7:7e:a1:e3:ac:e4:37:a3:d6:d0:05: 87:46:c0:ff:0a:4e:a3:a5:07:aa:99:d7:e1:c9:b4: 46:43:75:f3:94:7f:66:d8:14:c6:1e:f5:47:be:02: 4f:cc:df:04:9d:59:08:a6:0c:b9:e0:38:44:51:fc: 2f:af:46:06:2d:56:b7:4a:59:70:11:f7:58:73:db: f1:ad:8b:50:13:e6:54:be:a0:45:aa:fb:47:00:d3: f3:26:b1:ec:1b:1a:f8:e8:09:af:f1:2f:46:20:80: 8d:84:d5:dd:85:1f:c3:38:5d:46:e1:cf:bd:16:c4: 8f:c2:59:22:59:d0:95:d6:e2:3e:c8:38:12:cb:f2: 17:08:9e:30:2d:81:06:52:f2:f1:94:2c:b9:0c:2e: f2:71:2e:63:18:39:91:91:1a:6b:a7:8d:de:b5:5c: 7e:c1:61:56:0c:31:b9:a2:09:0b:46:ea:ca:4d:f2: 60:c3:fe:80:0d:ed:d6:09:ef:f4:99:1c:8a:48:4e: ce:9b:2f:d6:43:6e:57:49:5e:fe:1e:2f:80:0a:a0: e5:2e:21:2b:70:53:94:86:4f:c5:5e:5e:d9:65:f8: 83:8b:db:25:34:10:74:40:80:8f:08:69:2f:09:70: 40:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:97:35:B8:E2:2B:D6:1C:38:19:35:54:C4:B7:36:98:1B:30:CA:CC X509v3 Authority Key Identifier: keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/mJc1uOIr1hw4GTVUxLc2mBswysw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.84.0.0/18 91.84.128.0/17 91.85.32.0-91.85.159.255 91.85.192.0/18 194.46.36.0/23 194.46.39.0-194.46.41.255 194.46.43.0-194.46.46.255 194.46.48.0-194.46.56.255 194.46.61.0/24 194.46.64.0-194.46.69.255 194.46.72.0-194.46.78.255 194.46.80.0-194.46.82.255 212.104.129.0-212.104.130.255 212.104.132.0/24 212.104.136.0/24 212.104.143.0/24 212.104.149.0-212.104.150.255 212.104.152.0/24 212.104.155.0-212.104.156.255 212.104.159.0/24 212.108.80.0/23 212.108.84.0/24 212.108.88.0/23 Signature Algorithm: sha256WithRSAEncryption 03:4f:c2:19:c9:66:b7:6d:43:47:23:20:42:b8:3e:38:03:3b: e4:f3:33:96:21:ee:d8:87:12:99:6f:ea:ba:7e:71:a0:f7:b3: 49:03:cb:55:ce:3b:5b:84:f7:25:a9:5e:fa:e2:c7:7f:1c:c1: 29:9a:c9:c4:c5:9b:e4:66:cb:1c:1c:71:55:2e:cf:82:0b:d2: 6d:c9:94:1c:a3:ce:7e:52:49:9e:58:f8:e6:9a:d8:66:c0:8c: 0e:f5:70:e1:01:b8:86:31:e2:90:0c:78:b4:05:09:7a:02:c4: dc:aa:69:d7:73:01:af:48:5f:28:53:99:1d:20:6f:a0:53:2a: 69:fa:6c:0e:6c:ce:64:7c:d1:d2:62:60:89:8a:9e:ae:89:7d: 00:14:8e:bd:7f:00:16:fb:6a:ae:13:1d:3c:7a:69:1d:16:4a: 5c:e6:0e:b6:aa:01:b7:78:09:f8:aa:87:b1:d6:47:74:58:42: 84:a6:0e:40:67:e1:61:fd:7e:a3:81:b8:fd:bc:31:91:ce:36: f4:67:3f:a6:03:de:54:42:10:75:c1:02:e0:e0:38:77:c7:90: 3e:3d:3d:70:ea:aa:b1:80:5f:b9:78:2e:81:f2:54:f0:76:f3: 7e:ad:51:7a:e0:ed:5e:71:d2:5c:5d:0c:bb:30:11:b8:26:7e: 54:f2:1d:ce -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgISAZt7pMkT7v0SFCMejBrTsFwBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZDM1MzkzMzY3NGE1NjA4ZjZkMWVlMmRhYjRmNjRjOGJm ZjhmMzkwHhcNMjYwMTAxMjIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODk3MzViOGUyMmJkNjFjMzgxOTM1NTRjNGI3MzY5ODFiMzBjYWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGMF7Jm0Q4g82R+oYqW0m6rlx36h 46zkN6PW0AWHRsD/Ck6jpQeqmdfhybRGQ3XzlH9m2BTGHvVHvgJPzN8EnVkIpgy5 4DhEUfwvr0YGLVa3SllwEfdYc9vxrYtQE+ZUvqBFqvtHANPzJrHsGxr46Amv8S9G IICNhNXdhR/DOF1G4c+9FsSPwlkiWdCV1uI+yDgSy/IXCJ4wLYEGUvLxlCy5DC7y cS5jGDmRkRprp43etVx+wWFWDDG5ogkLRurKTfJgw/6ADe3WCe/0mRyKSE7Omy/W Q25XSV7+Hi+ACqDlLiErcFOUhk/FXl7ZZfiDi9slNBB0QICPCGkvCXBAbwIDAQAB o4IC4jCCAt4wHQYDVR0OBBYEFJiXNbjiK9YcOBk1VMS3NpgbMMrMMB8GA1UdIwQY MBaAFK3TU5M2dKVgj20e4tq09kyL/485MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmROVGt6WjBwV0NQYlI3aTJyVDJUSXZfanprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy80OGI0MDctNmQ5NC00OWFlLWEzZDgt NzJjODMxMjg3NjFiLzEvbUpjMXVPSXIxaHc0R1RWVXhMYzJtQnN3eXN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy80OGI0MDctNmQ5NC00OWFlLWEzZDgtNzJjODMxMjg3NjFi LzEvcmROVGt6WjBwV0NQYlI3aTJyVDJUSXZfanprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH3BggrBgEFBQcBBwEB/wSB5zCB5DCB4QQCAAEwgdoDBAZb VAADBAdbVIAwDAMEBVtVIAMEBVtVgAMEBltVwAMEAcIuJDAMAwQAwi4nAwQBwi4o MAwDBADCLisDBADCLi4wDAMEBMIuMAMEAMIuOAMEAMIuPTAMAwQGwi5AAwQBwi5E MAwDBAPCLkgDBADCLk4wDAMEBMIuUAMEAMIuUjAMAwQA1GiBAwQA1GiCAwQA1GiE AwQA1GiIAwQA1GiPMAwDBADUaJUDBADUaJYDBADUaJgwDAMEANRomwMEANRonAME ANRonwMEAdRsUAMEANRsVAMEAdRsWDANBgkqhkiG9w0BAQsFAAOCAQEAA0/CGclm t21DRyMgQrg+OAM75PMzliHu2IcSmW/qun5xoPezSQPLVc47W4T3Jale+uLHfxzB KZrJxMWb5GbLHBxxVS7PggvSbcmUHKPOflJJnlj45prYZsCMDvVw4QG4hjHikAx4 tAUJegLE3Kpp13MBr0hfKFOZHSBvoFMqafpsDmzOZHzR0mJgiYqerol9ABSOvX8A FvtqrhMdPHppHRZKXOYOtqoBt3gJ+KqHsdZHdFhChKYOQGfhYf1+o4G4/bwxkc42 9Gc/pgPeVEIQdcEC4OA4d8eQPj09cOqqsYBfuXgugfJU8Hbzfq1ReuDtXnHSXF0M uzARuCZ+VPIdzg== -----END CERTIFICATE-----Generated at Fri Jan 9 18:43:04 2026 by rpki-client