This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/aW3M8On5MmS81nR314v2KAMjhWo.roa File: aW3M8On5MmS81nR314v2KAMjhWo.roa (raw, json) Hash identifier: 9ZW0rFhmByfJbfB+yP9UIWPM/yI+swsdrl4gzJqco04= Subject key identifier: 69:6D:CC:F0:E9:F9:32:64:BC:D6:74:77:D7:8B:F6:28:03:23:85:6A Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Certificate serial: 019B7B36ABA9B88295E1C5E9332CB4A502BA Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/aW3M8On5MmS81nR314v2KAMjhWo.roa Signing time: Thu 01 Jan 2026 20:18:58 +0000 ROA not before: Thu 01 Jan 2026 20:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3316 IP address blocks: 86.62.49.0/24 maxlen: 24 193.232.85.0/24 maxlen: 24 193.232.131.0/24 maxlen: 24 194.85.105.0/24 maxlen: 24 194.85.106.0/24 maxlen: 24 194.85.117.0/24 maxlen: 24 194.85.118.0/24 maxlen: 24 194.85.119.0/24 maxlen: 24 194.190.132.0/22 maxlen: 22 194.190.132.0/24 maxlen: 24 194.190.134.0/24 maxlen: 24 194.190.138.0/24 maxlen: 24 194.190.141.0/24 maxlen: 24 194.190.142.0/24 maxlen: 24 194.190.145.0/24 maxlen: 24 194.190.148.0/24 maxlen: 24 194.190.156.0/24 maxlen: 24 194.226.29.0/24 maxlen: 24 194.226.44.0/24 maxlen: 24 194.226.46.0/23 maxlen: 23 195.19.26.0/24 maxlen: 24 195.208.22.0/23 maxlen: 23 195.209.4.0/24 maxlen: 24 195.209.8.0/24 maxlen: 24 195.209.16.0/24 maxlen: 24 195.209.146.0/24 maxlen: 24 212.193.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ab:a9:b8:82:95:e1:c5:e9:33:2c:b4:a5:02:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Validity Not Before: Jan 1 20:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=696dccf0e9f93264bcd67477d78bf6280323856a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:38:77:ea:ed:4b:e0:d4:72:4b:65:f9:4c:49: a2:33:94:1e:4b:4b:17:f8:52:90:6e:e7:d1:7a:bd: ed:58:2e:9d:d9:6c:5f:8b:b7:f2:6e:ff:5e:a0:23: 31:ba:34:42:8c:42:d6:f5:c8:bf:03:c1:82:ae:ab: 4b:d2:94:1a:14:2b:a7:87:3a:25:7e:4f:eb:70:99: ad:51:36:46:12:33:5f:f9:c0:97:2e:49:99:78:d6: e9:1b:e2:7c:4a:c1:c2:61:db:80:5e:f9:16:21:61: fd:2e:9e:f4:17:3f:45:de:be:0c:98:2a:a9:c6:24: a8:19:9d:ee:9a:47:45:7d:c4:e5:27:88:d3:12:ee: 2c:5c:d4:88:27:10:5c:0e:12:14:f4:8d:38:a0:5d: d2:ab:e0:f3:89:27:0f:fc:d9:e2:de:70:b1:1d:40: 15:ce:97:72:6b:09:71:5e:90:63:d6:0b:13:dc:6e: d4:8c:ff:db:3a:06:6f:de:36:14:12:8e:e8:80:9c: 56:d7:16:56:ce:a3:58:d3:bc:e0:3a:73:85:dc:f5: 58:69:31:72:93:b8:c8:08:fc:78:4d:8e:ce:5e:75: 55:22:d0:24:99:f7:15:70:f6:30:94:af:db:f4:2b: e4:3d:b9:91:51:76:ca:8d:7c:0d:82:24:de:d6:9d: 8a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:6D:CC:F0:E9:F9:32:64:BC:D6:74:77:D7:8B:F6:28:03:23:85:6A X509v3 Authority Key Identifier: keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/aW3M8On5MmS81nR314v2KAMjhWo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.62.49.0/24 193.232.85.0/24 193.232.131.0/24 194.85.105.0-194.85.106.255 194.85.117.0-194.85.119.255 194.190.132.0/22 194.190.138.0/24 194.190.141.0-194.190.142.255 194.190.145.0/24 194.190.148.0/24 194.190.156.0/24 194.226.29.0/24 194.226.44.0/24 194.226.46.0/23 195.19.26.0/24 195.208.22.0/23 195.209.4.0/24 195.209.8.0/24 195.209.16.0/24 195.209.146.0/24 212.193.118.0/24 Signature Algorithm: sha256WithRSAEncryption 17:ba:e2:77:e7:d3:cf:94:5a:22:8e:95:f6:d2:8b:a8:3d:59: 98:74:b7:73:7d:9f:45:cc:7b:31:11:6a:11:99:47:ef:4f:3c: 1b:c2:d2:21:76:1b:5e:bf:d6:7a:6c:10:d6:12:60:a4:50:d8: df:bb:ab:90:5f:db:ee:60:7d:02:e2:7c:dd:64:17:02:1c:d2: b0:74:96:59:c2:f3:99:e9:db:d5:88:44:e8:9b:7d:e0:fc:73: 22:ef:a4:56:e3:a9:54:e9:a7:f9:40:2b:ff:6f:57:63:22:5f: 0f:63:bc:81:17:0a:94:a7:39:eb:10:12:95:79:21:6a:be:40: 7a:66:b2:b0:23:ae:cf:01:b7:94:d7:05:2e:34:2f:2b:c8:ff: 1c:48:53:e8:ee:b3:ee:5e:d6:a2:d4:dd:b9:9c:9a:41:9e:49: 80:da:80:7d:7b:27:20:5e:82:68:fa:05:f0:77:52:8b:f3:de: f8:0e:87:c2:d0:51:b0:49:b0:fb:81:9b:ae:9b:00:83:27:f1: 9c:d6:e2:b7:aa:d2:c1:f9:f9:1f:64:75:79:67:09:ae:2d:17: 74:0d:e7:65:e7:ec:a8:b3:62:91:9d:56:d8:71:b0:13:49:11: f8:ef:4c:26:84:d8:d6:d8:34:e3:09:1d:98:45:85:72:93:f1: 02:0c:93:c0 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISAZt7NqupuIKV4cXpMyy0pQK6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2 OTdhMDMwHhcNMjYwMTAxMjAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTZkY2NmMGU5ZjkzMjY0YmNkNjc0NzdkNzhiZjYyODAzMjM4NTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjh36u1L4NRyS2X5TEmiM5QeS0sX +FKQbufRer3tWC6d2Wxfi7fybv9eoCMxujRCjELW9ci/A8GCrqtL0pQaFCunhzol fk/rcJmtUTZGEjNf+cCXLkmZeNbpG+J8SsHCYduAXvkWIWH9Lp70Fz9F3r4MmCqp xiSoGZ3umkdFfcTlJ4jTEu4sXNSIJxBcDhIU9I04oF3Sq+DziScP/Nni3nCxHUAV zpdyawlxXpBj1gsT3G7UjP/bOgZv3jYUEo7ogJxW1xZWzqNY07zgOnOF3PVYaTFy k7jICPx4TY7OXnVVItAkmfcVcPYwlK/b9CvkPbmRUXbKjXwNgiTe1p2KjwIDAQAB o4ICnjCCApowHQYDVR0OBBYEFGltzPDp+TJkvNZ0d9eL9igDI4VqMB8GA1UdIwQY MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt Njg4ZDMzM2VkOWQ1LzEvYVczTThPbjVNbVM4MW5SMzE0djJLQU1qaFdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1 LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBABW PjEDBADB6FUDBADB6IMwDAMEAMJVaQMEAMJVajAMAwQAwlV1AwQDwlVwAwQCwr6E AwQAwr6KMAwDBADCvo0DBADCvo4DBADCvpEDBADCvpQDBADCvpwDBADC4h0DBADC 4iwDBAHC4i4DBADDExoDBAHD0BYDBADD0QQDBADD0QgDBADD0RADBADD0ZIDBADU wXYwDQYJKoZIhvcNAQELBQADggEBABe64nfn08+UWiKOlfbSi6g9WZh0t3N9n0XM ezERahGZR+9PPBvC0iF2G16/1npsENYSYKRQ2N+7q5Bf2+5gfQLifN1kFwIc0rB0 llnC85np29WIROibfeD8cyLvpFbjqVTpp/lAK/9vV2MiXw9jvIEXCpSnOesQEpV5 IWq+QHpmsrAjrs8Bt5TXBS40LyvI/xxIU+jus+5e1qLU3bmcmkGeSYDagH17JyBe gmj6BfB3Uovz3vgOh8LQUbBJsPuBm66bAIMn8ZzW4req0sH5+R9kdXlnCa4tF3QN 52Xn7KizYpGdVthxsBNJEfjvTCaE2NbYNOMJHZhFhXKT8QIMk8A= -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:46 2026 by rpki-client