This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/0lvXa172UplN6y7av1cXq_FBnIY.roa File: 0lvXa172UplN6y7av1cXq_FBnIY.roa (raw, json) Hash identifier: wYYltyOrSFKK2j0JVE4ExTzSFfm4Tu29VSNIrOnj0/w= Subject key identifier: D2:5B:D7:6B:5E:F6:52:99:4D:EB:2E:DA:BF:57:17:AB:F1:41:9C:86 Certificate issuer: /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3 Certificate serial: 019B7C12455C3BC4F50670BEBA3559AB43A1 Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/0lvXa172UplN6y7av1cXq_FBnIY.roa Signing time: Fri 02 Jan 2026 00:18:50 +0000 ROA not before: Fri 02 Jan 2026 00:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 149.238.0.0/19 maxlen: 24 149.238.32.0/19 maxlen: 24 149.238.64.0/19 maxlen: 24 149.238.96.0/19 maxlen: 24 149.238.128.0/19 maxlen: 24 149.238.160.0/19 maxlen: 24 149.238.192.0/19 maxlen: 24 149.238.224.0/19 maxlen: 24 192.77.114.0/23 maxlen: 24 192.112.208.0/24 maxlen: 24 193.33.52.0/23 maxlen: 24 2a13:cb40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:45:5c:3b:c4:f5:06:70:be:ba:35:59:ab:43:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3 Validity Not Before: Jan 2 00:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d25bd76b5ef652994deb2edabf5717abf1419c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d3:ed:a2:19:cb:a7:97:ff:a8:0d:b8:7f:c9: 9d:22:9f:b4:6e:31:52:f7:e1:4a:19:62:a0:78:05: 80:16:69:ef:60:87:3c:4a:19:f6:1e:4a:d3:1e:eb: 1c:07:49:e4:c0:30:be:f4:50:6c:dd:c9:84:29:a1: 0f:7a:b1:03:89:07:f3:84:ef:7a:3b:dd:47:f0:df: 02:6d:7c:f8:fb:a8:bd:c3:29:b9:db:d2:72:c7:97: 39:00:79:f8:95:a1:01:47:c6:36:48:1b:85:98:25: 39:9f:7f:94:d7:0f:03:42:bc:c5:e0:93:33:7d:72: 8b:b8:c6:0a:4d:36:05:e6:36:47:c9:ec:45:90:ea: 82:55:64:7e:d3:e3:be:a2:0a:06:3e:a4:80:d3:8e: 80:b4:41:24:ee:15:0b:d3:e6:c0:b6:7a:41:99:18: 13:b9:ff:5a:d7:bf:87:6c:71:2c:4f:1b:91:0f:0f: f6:6f:52:58:d6:d7:9f:ee:08:2c:cb:9e:b1:af:ba: 5d:eb:d8:c8:ad:86:9b:61:a5:e4:c2:b1:9b:d3:80: 5c:a1:02:6e:a0:5c:80:0f:e2:6d:a1:81:79:fe:6f: a8:66:6a:95:54:67:ae:3e:ac:34:1a:9c:eb:57:9b: 28:d4:3b:dc:12:ca:32:9e:01:b5:a8:67:4c:0c:0c: 2a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5B:D7:6B:5E:F6:52:99:4D:EB:2E:DA:BF:57:17:AB:F1:41:9C:86 X509v3 Authority Key Identifier: keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/0lvXa172UplN6y7av1cXq_FBnIY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.238.0.0/16 192.77.114.0/23 192.112.208.0/24 193.33.52.0/23 IPv6: 2a13:cb40::/29 Signature Algorithm: sha256WithRSAEncryption d6:94:d1:88:76:2a:2f:e6:76:2a:3e:42:9e:f5:52:e0:51:bc: 4a:17:0a:52:08:53:4f:7a:fd:37:72:60:21:6f:79:0f:dd:1e: b5:1d:13:df:3a:18:64:c9:a7:6e:24:54:17:cc:0b:54:46:a6: a8:4b:04:e2:81:0c:f3:02:63:ed:a1:4a:5e:20:dd:01:74:54: 7e:a2:e2:cf:db:1a:48:83:8c:a0:08:0b:e6:80:6f:f0:bd:93: 28:8d:7c:09:70:2a:40:f5:23:67:ef:fa:c3:90:b7:fa:e5:64: 43:36:30:0d:3c:c6:45:ba:4a:dd:17:fb:e5:03:bb:2e:6f:41: 83:b3:1c:7c:85:e5:c4:31:fd:34:6f:ff:bb:39:81:4d:49:dc: ac:a1:a6:0c:23:40:c9:4b:58:6d:42:65:50:58:8f:12:54:68: d1:70:4c:0b:ea:09:af:9b:a1:a1:66:c7:94:fc:c7:42:23:30: ec:61:44:db:63:4a:42:38:82:54:c2:56:b0:6c:9b:af:77:a4: e9:57:eb:a5:0d:64:f8:28:19:7f:d0:08:79:a7:cb:f0:92:08: d6:86:36:93:f3:be:21:71:04:64:bd:75:b9:64:49:59:d0:a0: 20:84:23:4f:0b:24:05:ef:d1:2d:08:8b:1c:64:f4:e8:49:1f: 8f:32:e6:c6 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt8EkVcO8T1BnC+ujVZq0OhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MzI3YzU2ZTk0MTE3MWVhM2JlYmEyNmViYjllMjNmNGRm NWJjZjMwHhcNMjYwMTAyMDAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjViZDc2YjVlZjY1Mjk5NGRlYjJlZGFiZjU3MTdhYmYxNDE5Yzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstPtohnLp5f/qA24f8mdIp+0bjFS 9+FKGWKgeAWAFmnvYIc8Shn2HkrTHuscB0nkwDC+9FBs3cmEKaEPerEDiQfzhO96 O91H8N8CbXz4+6i9wym529Jyx5c5AHn4laEBR8Y2SBuFmCU5n3+U1w8DQrzF4JMz fXKLuMYKTTYF5jZHyexFkOqCVWR+0+O+ogoGPqSA046AtEEk7hUL0+bAtnpBmRgT uf9a17+HbHEsTxuRDw/2b1JY1tef7ggsy56xr7pd69jIrYabYaXkwrGb04BcoQJu oFyAD+JtoYF5/m+oZmqVVGeuPqw0GpzrV5so1DvcEsoyngG1qGdMDAwqzwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFNJb12te9lKZTesu2r9XF6vxQZyGMB8GA1UdIwQY MBaAFKQyfFbpQRceo766Juu54j9N9bzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWIt MjhjMzQzY2U5ZDVkLzEvMGx2WGExNzJVcGxONnk3YXYxY1hxX0ZCbklZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWItMjhjMzQzY2U5ZDVk LzEvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAdBAIAATAXAwMAle4DBAHA TXIDBADAcNADBAHBITQwDQQCAAIwBwMFAyoTy0AwDQYJKoZIhvcNAQELBQADggEB ANaU0Yh2Ki/mdio+Qp71UuBRvEoXClIIU096/TdyYCFveQ/dHrUdE986GGTJp24k VBfMC1RGpqhLBOKBDPMCY+2hSl4g3QF0VH6i4s/bGkiDjKAIC+aAb/C9kyiNfAlw KkD1I2fv+sOQt/rlZEM2MA08xkW6St0X++UDuy5vQYOzHHyF5cQx/TRv/7s5gU1J 3KyhpgwjQMlLWG1CZVBYjxJUaNFwTAvqCa+boaFmx5T8x0IjMOxhRNtjSkI4glTC VrBsm693pOlX66UNZPgoGX/QCHmny/CSCNaGNpPzviFxBGS9dblkSVnQoCCEI08L JAXv0S0Iixxk9OhJH48y5sY= -----END CERTIFICATE-----Generated at Wed Jan 7 22:29:27 2026 by rpki-client