This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/r2cUyHBMaewNpNV3po9MOZwNcyU.roa File: r2cUyHBMaewNpNV3po9MOZwNcyU.roa (raw, json) Hash identifier: SVkhtUySEPUVdVwXoSgDIclbqsQ0muf2pONZTDoO/YE= Subject key identifier: AF:67:14:C8:70:4C:69:EC:0D:A4:D5:77:A6:8F:4C:39:9C:0D:73:25 Certificate issuer: /CN=3d8a553e05f0319bf452fa206c14ccda87304654 Certificate serial: 019B77C71EF2A5A0950FC9CAEBF440EC9E1B Authority key identifier: 3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/r2cUyHBMaewNpNV3po9MOZwNcyU.roa Signing time: Thu 01 Jan 2026 04:18:16 +0000 ROA not before: Thu 01 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8368 IP address blocks: 46.243.24.0/21 maxlen: 24 62.213.192.0/19 maxlen: 24 62.213.238.0/24 maxlen: 24 78.41.64.0/21 maxlen: 24 78.110.192.0/20 maxlen: 24 82.146.96.0/19 maxlen: 24 85.158.208.0/21 maxlen: 24 87.237.8.0/21 maxlen: 24 88.82.32.0/19 maxlen: 24 89.35.16.0/21 maxlen: 24 89.250.176.0/20 maxlen: 24 91.197.108.0/22 maxlen: 24 94.140.160.0/19 maxlen: 24 94.158.248.0/24 maxlen: 24 94.158.250.0/24 maxlen: 24 95.171.160.0/19 maxlen: 24 178.132.8.0/21 maxlen: 24 185.39.124.0/22 maxlen: 24 185.47.0.0/22 maxlen: 24 185.48.100.0/22 maxlen: 24 185.72.168.0/22 maxlen: 24 185.78.180.0/22 maxlen: 24 185.81.224.0/22 maxlen: 24 185.90.184.0/22 maxlen: 22 185.174.64.0/22 maxlen: 24 185.214.4.0/22 maxlen: 24 185.224.236.0/22 maxlen: 22 188.64.72.0/21 maxlen: 24 188.118.0.0/18 maxlen: 24 195.110.54.0/23 maxlen: 24 195.144.64.0/19 maxlen: 24 195.225.100.0/22 maxlen: 24 213.193.200.0/21 maxlen: 24 213.193.224.0/21 maxlen: 24 213.193.248.0/23 maxlen: 24 2001:4158::/29 maxlen: 48 2001:4c40::/32 maxlen: 48 2a00:c78::/32 maxlen: 48 2a00:1fb8::/32 maxlen: 48 2a01:8c20::/32 maxlen: 48 2a0b:8b00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1e:f2:a5:a0:95:0f:c9:ca:eb:f4:40:ec:9e:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8a553e05f0319bf452fa206c14ccda87304654 Validity Not Before: Jan 1 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af6714c8704c69ec0da4d577a68f4c399c0d7325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:28:87:ec:56:11:dd:49:20:da:7d:48:35:74: d0:ea:1e:ce:57:aa:b7:5c:2c:88:07:9c:13:b0:c2: 81:74:52:e2:b2:3c:74:e5:76:15:cf:6b:63:7b:5f: b6:2b:26:2f:80:fa:5e:5c:88:06:eb:07:8d:b2:e8: e2:1e:f2:58:26:e5:39:29:fd:89:75:79:ec:b3:92: b6:d3:be:96:e0:8a:b2:11:bb:80:af:03:65:f7:c8: 4e:c3:c6:29:ef:ce:ff:cb:a8:6e:4d:36:ea:61:5b: a0:c9:ca:f7:0d:e3:13:6b:c5:53:c4:ac:e9:de:44: 78:69:70:5a:34:fe:c1:03:d2:ca:ba:80:48:61:f4: c0:14:1c:38:23:ba:ef:8c:c9:02:a4:66:c5:d8:91: af:6a:d0:dd:10:83:d8:db:d3:23:c4:e2:c5:b9:b4: 1e:bf:ea:69:5f:54:d4:c8:a1:00:1b:b5:99:09:a4: 3b:b7:81:1c:33:1b:73:86:1e:50:ce:27:31:e5:e7: 42:a4:c2:3a:17:2a:2b:62:34:d6:c9:26:6b:ff:12: e8:25:48:45:ed:5f:b8:48:50:c3:61:3b:58:a3:60: 72:76:c1:35:13:ac:be:b8:fb:97:28:37:0b:4b:2b: a9:3f:f6:4c:a9:f5:17:7c:bf:57:2a:37:81:a8:55: 42:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:67:14:C8:70:4C:69:EC:0D:A4:D5:77:A6:8F:4C:39:9C:0D:73:25 X509v3 Authority Key Identifier: keyid:3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/r2cUyHBMaewNpNV3po9MOZwNcyU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.24.0/21 62.213.192.0/19 62.213.238.0/24 78.41.64.0/21 78.110.192.0/20 82.146.96.0/19 85.158.208.0/21 87.237.8.0/21 88.82.32.0/19 89.35.16.0/21 89.250.176.0/20 91.197.108.0/22 94.140.160.0/19 94.158.248.0/24 94.158.250.0/24 95.171.160.0/19 178.132.8.0/21 185.39.124.0/22 185.47.0.0/22 185.48.100.0/22 185.72.168.0/22 185.78.180.0/22 185.81.224.0/22 185.90.184.0/22 185.174.64.0/22 185.214.4.0/22 185.224.236.0/22 188.64.72.0/21 188.118.0.0/18 195.110.54.0/23 195.144.64.0/19 195.225.100.0/22 213.193.200.0/21 213.193.224.0/21 213.193.248.0/23 IPv6: 2001:4158::/29 2001:4c40::/32 2a00:c78::/32 2a00:1fb8::/32 2a01:8c20::/32 2a0b:8b00::/29 Signature Algorithm: sha256WithRSAEncryption 05:fb:60:1e:e5:3a:28:69:00:65:cf:6b:fc:0b:ad:dc:78:73: b9:56:f9:fd:b7:59:93:bf:29:1e:a7:7e:fa:77:9b:c1:d5:fc: 5d:f3:f2:cb:9e:3a:80:82:b2:bd:04:17:1d:2f:9c:f4:3a:38: f4:3d:5e:01:ab:76:71:03:6b:93:17:e1:45:a9:84:52:2d:a9: 0e:b3:42:95:57:4f:26:a8:76:47:4d:c4:08:74:8e:c7:26:fb: 55:e0:fa:ff:db:e2:93:de:9f:10:90:b4:ef:bd:d5:91:0f:71: 45:b5:69:24:c9:ce:ea:21:79:63:88:94:3f:b4:6d:4b:7f:13: 27:f4:14:37:f1:a5:ad:9e:1e:ce:5e:fe:fe:dd:e1:ab:25:ef: 6a:49:75:d0:3f:72:13:dc:0a:36:8a:36:6e:3e:31:a7:91:17: 8c:e2:43:b8:b1:78:84:c7:f7:5d:da:d7:96:b6:d9:f6:6d:d4: 62:8c:81:5e:ca:b1:71:c5:5a:2b:fd:d0:28:f5:5b:86:77:36: 18:f1:43:ec:f7:41:86:f9:62:61:2a:84:08:45:9d:29:02:f6: 7d:d1:b0:e2:31:c3:54:7b:1d:f1:73:33:ce:64:ae:a9:b5:db: b8:d9:a2:53:c9:d1:20:68:8f:e5:15:76:a6:89:9a:87:4b:c3: ad:73:7d:e2 -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgISAZt3xx7ypaCVD8nK6/RA7J4bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGE1NTNlMDVmMDMxOWJmNDUyZmEyMDZjMTRjY2RhODcz MDQ2NTQwHhcNMjYwMTAxMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjY3MTRjODcwNGM2OWVjMGRhNGQ1NzdhNjhmNGMzOTljMGQ3MzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCiH7FYR3Ukg2n1INXTQ6h7OV6q3 XCyIB5wTsMKBdFLisjx05XYVz2tje1+2KyYvgPpeXIgG6weNsujiHvJYJuU5Kf2J dXnss5K2076W4IqyEbuArwNl98hOw8Yp787/y6huTTbqYVugycr3DeMTa8VTxKzp 3kR4aXBaNP7BA9LKuoBIYfTAFBw4I7rvjMkCpGbF2JGvatDdEIPY29MjxOLFubQe v+ppX1TUyKEAG7WZCaQ7t4EcMxtzhh5Qzicx5edCpMI6FyorYjTWySZr/xLoJUhF 7V+4SFDDYTtYo2BydsE1E6y+uPuXKDcLSyupP/ZMqfUXfL9XKjeBqFVCOQIDAQAB o4IDDzCCAwswHQYDVR0OBBYEFK9nFMhwTGnsDaTVd6aPTDmcDXMlMB8GA1UdIwQY MBaAFD2KVT4F8DGb9FL6IGwUzNqHMEZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81MmNlNTQtZTQ5Yy00MTFjLTg1Mjct MGZiNDgyM2Y1Yjg3LzEvcjJjVXlIQk1hZXdOcE5WM3BvOU1PWndOY3lVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy81MmNlNTQtZTQ5Yy00MTFjLTg1MjctMGZiNDgyM2Y1Yjg3 LzEvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBIwYIKwYBBQUHAQcBAf8EggESMIIBDjCB2QQCAAEwgdID BAMu8xgDBAU+1cADBAA+1e4DBANOKUADBARObsADBAVSkmADBANVntADBANX7QgD BAVYUiADBANZIxADBARZ+rADBAJbxWwDBAVejKADBABenvgDBABenvoDBAVfq6AD BAOyhAgDBAK5J3wDBAK5LwADBAK5MGQDBAK5SKgDBAK5TrQDBAK5UeADBAK5WrgD BAK5rkADBAK51gQDBAK54OwDBAO8QEgDBAa8dgADBAHDbjYDBAXDkEADBALD4WQD BAPVwcgDBAPVweADBAHVwfgwMAQCAAIwKgMFAyABQVgDBQAgAUxAAwUAKgAMeAMF ACoAH7gDBQAqAYwgAwUDKguLADANBgkqhkiG9w0BAQsFAAOCAQEABftgHuU6KGkA Zc9r/Aut3HhzuVb5/bdZk78pHqd++nebwdX8XfPyy546gIKyvQQXHS+c9Do49D1e Aat2cQNrkxfhRamEUi2pDrNClVdPJqh2R03ECHSOxyb7VeD6/9vik96fEJC0773V kQ9xRbVpJMnO6iF5Y4iUP7RtS38TJ/QUN/GlrZ4ezl7+/t3hqyXvakl10D9yE9wK Noo2bj4xp5EXjOJDuLF4hMf3XdrXlrbZ9m3UYoyBXsqxccVaK/3QKPVbhnc2GPFD 7PdBhvliYSqECEWdKQL2fdGw4jHDVHsd8XMzzmSuqbXbuNmiU8nRIGiP5RV2poma h0vDrXN94g== -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:24 2026 by rpki-client