This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/InpXhnM9MS1muu9R3XQVBIkVVN8.roa File: InpXhnM9MS1muu9R3XQVBIkVVN8.roa (raw, json) Hash identifier: yU7SB2RYwoKjc2l3Eev4frxkOGpJzWi5EJ1oAWnsaXI= Subject key identifier: 22:7A:57:86:73:3D:31:2D:66:BA:EF:51:DD:74:15:04:89:15:54:DF Certificate issuer: /CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16 Certificate serial: 019B7DC9D9ECC9E8D182C3628A8ADAE295BC Authority key identifier: D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/InpXhnM9MS1muu9R3XQVBIkVVN8.roa Signing time: Fri 02 Jan 2026 08:18:59 +0000 ROA not before: Fri 02 Jan 2026 08:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36224 IP address blocks: 164.138.69.0/24 maxlen: 24 185.33.114.0/24 maxlen: 24 185.36.78.0/24 maxlen: 24 202.162.49.0/24 maxlen: 24 202.162.51.0/24 maxlen: 24 202.162.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:d9:ec:c9:e8:d1:82:c3:62:8a:8a:da:e2:95:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16 Validity Not Before: Jan 2 08:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=227a5786733d312d66baef51dd741504891554df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:29:8c:ad:e4:5f:c7:f9:1a:d9:f2:f8:39:eb: 76:27:14:df:23:aa:14:a5:f2:0c:66:1c:f1:8b:89: 1a:ef:c1:e1:e0:0d:f3:8d:68:17:7d:9e:ee:af:9a: 22:99:d1:3a:d3:74:dd:f7:14:97:c6:94:14:53:1c: 6c:8e:58:03:4d:a6:96:c6:2d:81:fc:e1:0f:e3:6e: e3:20:70:d5:54:d0:a6:f2:69:e3:cd:35:da:7c:29: 02:a9:d3:ea:9c:13:fe:20:f2:a1:35:de:c2:06:ca: 88:d8:54:ae:1d:61:c1:c2:e6:cc:fd:63:97:5c:81: 73:79:53:5c:8a:7f:6b:df:14:07:cd:0d:51:ed:7d: 20:c2:18:ec:36:d4:ee:fa:1e:81:63:7c:9b:a8:be: 48:eb:cf:48:58:13:71:41:cd:a7:08:21:3b:35:68: ba:43:33:1d:d0:54:32:f1:8f:6a:de:8e:4f:97:98: 5d:1f:c4:31:a5:de:15:75:f0:4c:e9:60:67:16:dc: c5:5b:85:c4:56:c2:1d:68:1b:4e:82:12:96:34:35: a8:51:20:35:13:ca:53:67:cb:f7:91:9f:68:f6:b6: 6d:8c:8b:45:70:3b:34:da:b2:a4:1a:cc:ad:e2:ab: 26:d9:7f:28:c0:33:4d:4f:a6:97:23:84:de:a7:16: 14:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:7A:57:86:73:3D:31:2D:66:BA:EF:51:DD:74:15:04:89:15:54:DF X509v3 Authority Key Identifier: keyid:D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/InpXhnM9MS1muu9R3XQVBIkVVN8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.138.69.0/24 185.33.114.0/24 185.36.78.0/24 202.162.49.0/24 202.162.51.0-202.162.52.255 Signature Algorithm: sha256WithRSAEncryption 19:5b:61:06:c5:b9:8f:f0:2e:53:65:dd:e1:5e:c3:43:45:57: eb:36:78:36:eb:37:60:b2:f9:47:38:90:16:14:e5:76:95:46: 24:b9:16:9d:80:df:2a:41:ae:04:5b:11:d1:13:57:8c:5c:4e: f6:60:59:c9:1d:e3:63:12:3c:01:5b:c6:73:55:af:66:38:a8: 52:c4:67:39:51:3d:1b:f2:ce:57:4d:7b:ed:ca:fc:81:dc:81: a3:49:2f:f6:03:99:2d:16:8f:e4:c2:6f:4f:57:7a:3a:bf:01: fe:e8:51:6a:fa:16:48:30:05:e4:ba:51:76:e9:ef:47:58:6f: 2f:72:86:22:8c:24:cc:0a:a2:d3:20:d3:79:44:00:e7:45:0e: 5d:f3:c5:43:8a:39:4b:ce:bc:ce:6d:9d:a7:b0:e6:a5:08:0f: 4f:d2:8e:69:16:59:dd:56:66:9e:7e:54:89:39:33:d7:e8:26: 98:f0:5b:12:29:38:6c:bf:3e:31:af:39:37:0b:19:e1:b1:93: 0b:c4:51:7e:c9:ad:8b:e0:06:43:fe:48:c4:56:f5:35:49:b1: b4:67:42:11:c6:9f:7c:01:8b:c5:37:cf:d3:9a:86:0d:52:a1: 93:79:5b:aa:5d:7c:a7:c2:d8:6b:d6:a2:4e:5b:d3:83:c5:f3: 35:85:90:0e -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt9ydnsyejRgsNiiora4pW8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3YzYwYTU0ZTAzYzlmODE1Y2MzM2FmZDQ1ZDNjNGRiOWFm NzZmMTYwHhcNMjYwMTAyMDgxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjdhNTc4NjczM2QzMTJkNjZiYWVmNTFkZDc0MTUwNDg5MTU1NGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSmMreRfx/ka2fL4Oet2JxTfI6oU pfIMZhzxi4ka78Hh4A3zjWgXfZ7ur5oimdE603Td9xSXxpQUUxxsjlgDTaaWxi2B /OEP427jIHDVVNCm8mnjzTXafCkCqdPqnBP+IPKhNd7CBsqI2FSuHWHBwubM/WOX XIFzeVNcin9r3xQHzQ1R7X0gwhjsNtTu+h6BY3ybqL5I689IWBNxQc2nCCE7NWi6 QzMd0FQy8Y9q3o5Pl5hdH8Qxpd4VdfBM6WBnFtzFW4XEVsIdaBtOghKWNDWoUSA1 E8pTZ8v3kZ9o9rZtjItFcDs02rKkGsyt4qsm2X8owDNNT6aXI4TepxYUgQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFCJ6V4ZzPTEtZrrvUd10FQSJFVTfMB8GA1UdIwQY MBaAFNfGClTgPJ+BXMM6/UXTxNua928WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMThZS1ZPQThuNEZjd3pyOVJkUEUyNXIzYnhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84OTA5MGMtNTNiMS00MWJlLWEzMzgt MzgzMWYzZWQxY2E4LzEvSW5wWGhuTTlNUzFtdXU5UjNYUVZCSWtWVk44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84OTA5MGMtNTNiMS00MWJlLWEzMzgtMzgzMWYzZWQxY2E4 LzEvMThZS1ZPQThuNEZjd3pyOVJkUEUyNXIzYnhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQApIpFAwQA uSFyAwQAuSROAwQAyqIxMAwDBADKojMDBADKojQwDQYJKoZIhvcNAQELBQADggEB ABlbYQbFuY/wLlNl3eFew0NFV+s2eDbrN2Cy+Uc4kBYU5XaVRiS5Fp2A3ypBrgRb EdETV4xcTvZgWckd42MSPAFbxnNVr2Y4qFLEZzlRPRvyzldNe+3K/IHcgaNJL/YD mS0Wj+TCb09Xejq/Af7oUWr6FkgwBeS6UXbp70dYby9yhiKMJMwKotMg03lEAOdF Dl3zxUOKOUvOvM5tnaew5qUID0/SjmkWWd1WZp5+VIk5M9foJpjwWxIpOGy/PjGv OTcLGeGxkwvEUX7JrYvgBkP+SMRW9TVJsbRnQhHGn3wBi8U3z9Oahg1SoZN5W6pd fKfC2GvWok5b04PF8zWFkA4= -----END CERTIFICATE-----Generated at Wed Jan 21 15:54:25 2026 by rpki-client