This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/RmwlWvxPZCDB4xbKMMesGg3bu0I.roa File: RmwlWvxPZCDB4xbKMMesGg3bu0I.roa (raw, json) Hash identifier: fIWc46L++Y89xrT3n8iiNza9KgN/VAJAA63Ft2Lj+vM= Subject key identifier: 46:6C:25:5A:FC:4F:64:20:C1:E3:16:CA:30:C7:AC:1A:0D:DB:BB:42 Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7 Certificate serial: 019B78A360C80FC17346C642F0206C977409 Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/RmwlWvxPZCDB4xbKMMesGg3bu0I.roa Signing time: Thu 01 Jan 2026 08:18:51 +0000 ROA not before: Thu 01 Jan 2026 08:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25160 IP address blocks: 5.10.144.0/20 maxlen: 20 31.28.65.0/24 maxlen: 24 31.28.67.0/24 maxlen: 24 31.28.68.0/24 maxlen: 24 31.28.70.0/24 maxlen: 24 31.28.72.0/24 maxlen: 24 31.28.75.0/24 maxlen: 24 31.28.80.0/22 maxlen: 22 31.28.84.0/23 maxlen: 23 31.28.86.0/24 maxlen: 24 37.157.32.0/21 maxlen: 21 45.88.112.0/22 maxlen: 22 82.163.112.0/21 maxlen: 21 82.163.124.0/22 maxlen: 22 82.163.192.0/19 maxlen: 24 82.163.205.0/24 maxlen: 24 91.238.221.0/24 maxlen: 24 94.126.43.0/24 maxlen: 24 94.126.47.0/24 maxlen: 24 144.98.0.0/16 maxlen: 16 158.41.64.0/18 maxlen: 18 165.65.0.0/16 maxlen: 16 178.18.116.0/23 maxlen: 23 178.18.119.0/24 maxlen: 24 185.28.240.0/22 maxlen: 22 185.53.224.0/22 maxlen: 22 185.120.204.0/22 maxlen: 22 185.121.76.0/22 maxlen: 22 185.135.164.0/22 maxlen: 22 185.237.48.0/22 maxlen: 22 193.0.176.0/23 maxlen: 23 193.221.128.0/19 maxlen: 19 194.8.254.0/23 maxlen: 23 195.250.16.0/22 maxlen: 22 206.245.192.0/18 maxlen: 24 2a00:e340::/29 maxlen: 29 2a01:a220::/29 maxlen: 29 2a10:d700::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:60:c8:0f:c1:73:46:c6:42:f0:20:6c:97:74:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7 Validity Not Before: Jan 1 08:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=466c255afc4f6420c1e316ca30c7ac1a0ddbbb42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7c:80:2c:e5:6d:e2:a5:11:1f:43:34:3a:c8: 0f:8a:49:03:53:14:8c:45:8c:9d:ee:6d:bd:78:52: 0f:7f:a0:c7:21:7e:cd:fc:1b:06:cb:fe:7d:0d:89: 32:3d:9e:68:e2:b1:d2:b3:a4:fd:a5:4c:b1:cc:b0: 42:17:80:2b:2e:cf:32:1a:ac:2b:d0:5f:5f:ca:84: ac:de:b0:4a:6b:a6:03:cb:33:e9:a3:99:ae:52:41: 1b:f8:7d:20:be:ec:c3:d3:a6:bd:0b:f4:bb:f0:f4: b5:d2:09:f5:98:61:50:ff:3c:dd:7d:a4:b1:fd:31: e4:85:26:a0:f9:52:53:75:2c:34:7c:b4:b7:c4:99: 6f:71:ca:c6:73:f9:26:f5:15:29:c0:91:1b:96:51: b5:f5:1c:64:c2:d1:38:62:10:91:20:52:e7:f7:72: 3e:bf:66:60:cb:6a:5c:46:c9:9a:46:fb:72:18:bb: fb:ad:b6:21:84:fd:94:67:00:b9:fb:5a:a1:72:3d: 8a:e2:04:df:38:03:31:d4:9f:a1:e7:20:29:ae:84: 93:29:26:9b:35:0d:2f:74:ba:46:57:cf:39:1d:bf: ae:03:dd:18:fd:0e:f2:5d:2b:a6:6b:ab:a5:81:81: ff:46:5c:75:a4:3d:33:75:38:e8:4b:67:a3:07:3b: ef:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6C:25:5A:FC:4F:64:20:C1:E3:16:CA:30:C7:AC:1A:0D:DB:BB:42 X509v3 Authority Key Identifier: keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/RmwlWvxPZCDB4xbKMMesGg3bu0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.144.0/20 31.28.65.0/24 31.28.67.0-31.28.68.255 31.28.70.0/24 31.28.72.0/24 31.28.75.0/24 31.28.80.0-31.28.86.255 37.157.32.0/21 45.88.112.0/22 82.163.112.0/21 82.163.124.0/22 82.163.192.0/19 91.238.221.0/24 94.126.43.0/24 94.126.47.0/24 144.98.0.0/16 158.41.64.0/18 165.65.0.0/16 178.18.116.0/23 178.18.119.0/24 185.28.240.0/22 185.53.224.0/22 185.120.204.0/22 185.121.76.0/22 185.135.164.0/22 185.237.48.0/22 193.0.176.0/23 193.221.128.0/19 194.8.254.0/23 195.250.16.0/22 206.245.192.0/18 IPv6: 2a00:e340::/29 2a01:a220::/29 2a10:d700::/29 Signature Algorithm: sha256WithRSAEncryption 17:9b:a2:8a:31:62:f9:33:7a:7d:f0:d8:9b:34:61:dc:32:3d: 73:d0:97:b8:35:08:e7:b6:0f:d1:fb:da:1a:1d:e9:65:3a:bf: 65:a3:95:2d:1c:64:dc:b6:3c:c3:e8:68:94:97:11:3b:63:5f: 37:29:1f:41:ed:f5:d6:bf:bd:13:f8:b5:31:41:ad:cd:fe:7e: f7:ea:b0:be:04:e2:6c:f9:73:5c:21:57:f2:fb:fb:89:79:36: af:83:48:1d:67:7d:66:80:91:da:a0:b1:8d:fe:4d:be:a3:13: e5:07:ce:84:4e:7f:d0:90:de:d0:58:f3:59:a4:9e:88:9e:9f: a5:e4:1d:a3:18:48:de:fe:9b:57:f1:a8:5f:ed:d2:74:78:a4: 90:b5:26:9d:14:2d:1d:8e:39:d0:60:d3:d3:46:7a:85:03:6a: 8a:7c:6f:94:4f:ad:8f:fc:c5:fa:43:ef:28:6a:72:45:b7:12: ec:5e:a3:2f:5c:5b:a0:ac:ac:9f:5f:7f:d5:e0:ea:e0:39:e6: ad:3e:e6:14:fd:f7:67:d3:f4:c8:eb:12:2e:fa:c1:20:58:a8: 8b:6f:f6:e3:2a:40:9c:c3:fa:93:a5:5e:b7:cf:23:7c:79:80: 18:27:f8:7d:19:ad:16:96:33:ea:89:6f:1e:07:95:f8:f0:5e: 7a:f5:a1:c9 -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgISAZt4o2DID8FzRsZC8CBsl3QJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZTg0M2E4NWRkNjY0ZTlkYzAzMTA4OTJiZDdkZDljZTUy NTkxYzcwHhcNMjYwMTAxMDgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjZjMjU1YWZjNGY2NDIwYzFlMzE2Y2EzMGM3YWMxYTBkZGJiYjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXyALOVt4qURH0M0OsgPikkDUxSM RYyd7m29eFIPf6DHIX7N/BsGy/59DYkyPZ5o4rHSs6T9pUyxzLBCF4ArLs8yGqwr 0F9fyoSs3rBKa6YDyzPpo5muUkEb+H0gvuzD06a9C/S78PS10gn1mGFQ/zzdfaSx /THkhSag+VJTdSw0fLS3xJlvccrGc/km9RUpwJEbllG19RxkwtE4YhCRIFLn93I+ v2Zgy2pcRsmaRvtyGLv7rbYhhP2UZwC5+1qhcj2K4gTfOAMx1J+h5yAproSTKSab NQ0vdLpGV885Hb+uA90Y/Q7yXSuma6ulgYH/Rlx1pD0zdTjoS2ejBzvvlQIDAQAB o4IC7jCCAuowHQYDVR0OBBYEFEZsJVr8T2QgweMWyjDHrBoN27tCMB8GA1UdIwQY MBaAFE7oQ6hd1mTp3AMQiSvX3ZzlJZHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9hZGFkMjAtYzUxMi00ZmIwLWExMjct NDhjZjQxMmIzODdiLzEvUm13bFd2eFBaQ0RCNHhiS01NZXNHZzNidTBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9hZGFkMjAtYzUxMi00ZmIwLWExMjctNDhjZjQxMmIzODdi LzEvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBAgYIKwYBBQUHAQcBAf8EgfIwge8wgc8EAgABMIHIAwQE BQqQAwQAHxxBMAwDBAAfHEMDBAAfHEQDBAAfHEYDBAAfHEgDBAAfHEswDAMEBB8c UAMEAB8cVgMEAyWdIAMEAi1YcAMEA1KjcAMEAlKjfAMEBVKjwAMEAFvu3QMEAF5+ KwMEAF5+LwMDAJBiAwQGnilAAwMApUEDBAGyEnQDBACyEncDBAK5HPADBAK5NeAD BAK5eMwDBAK5eUwDBAK5h6QDBAK57TADBAHBALADBAXB3YADBAHCCP4DBALD+hAD BAbO9cAwGwQCAAIwFQMFAyoA40ADBQMqAaIgAwUDKhDXADANBgkqhkiG9w0BAQsF AAOCAQEAF5uiijFi+TN6ffDYmzRh3DI9c9CXuDUI57YP0fvaGh3pZTq/ZaOVLRxk 3LY8w+holJcRO2NfNykfQe311r+9E/i1MUGtzf5+9+qwvgTibPlzXCFX8vv7iXk2 r4NIHWd9ZoCR2qCxjf5NvqMT5QfOhE5/0JDe0FjzWaSeiJ6fpeQdoxhI3v6bV/Go X+3SdHikkLUmnRQtHY450GDT00Z6hQNqinxvlE+tj/zF+kPvKGpyRbcS7F6jL1xb oKysn19/1eDq4DnmrT7mFP33Z9P0yOsSLvrBIFioi2/24ypAnMP6k6Vet88jfHmA GCf4fRmtFpYz6olvHgeV+PBeevWhyQ== -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:09 2026 by rpki-client