This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/m72BlK4pK3nz4quwny73cERWUUU.roa File: m72BlK4pK3nz4quwny73cERWUUU.roa (raw, json) Hash identifier: 3sQVvJAEO+cZVJVe28TC5M0aUTp2A0mSxPgJfwLQboM= Subject key identifier: 9B:BD:81:94:AE:29:2B:79:F3:E2:AB:B0:9F:2E:F7:70:44:56:51:45 Certificate issuer: /CN=996721831afb8b38307b49f5b9ee6292ad1e5850 Certificate serial: 019B7F15D52F32EE11947BC4902FB8AFB5E7 Authority key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/m72BlK4pK3nz4quwny73cERWUUU.roa Signing time: Fri 02 Jan 2026 14:21:35 +0000 ROA not before: Fri 02 Jan 2026 14:21:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44407 IP address blocks: 37.140.224.0/21 maxlen: 21 37.157.56.0/22 maxlen: 24 45.81.80.0/22 maxlen: 22 45.87.56.0/22 maxlen: 22 45.132.248.0/22 maxlen: 24 45.148.108.0/22 maxlen: 22 45.156.228.0/22 maxlen: 22 46.247.224.0/19 maxlen: 19 62.244.76.0/22 maxlen: 24 62.244.78.0/23 maxlen: 24 62.244.94.0/23 maxlen: 23 62.244.108.0/22 maxlen: 24 62.244.116.0/24 maxlen: 24 62.244.118.0/24 maxlen: 24 62.244.120.0/21 maxlen: 24 62.244.124.0/22 maxlen: 24 79.132.144.0/20 maxlen: 20 80.240.160.0/20 maxlen: 20 85.112.192.0/19 maxlen: 19 86.105.88.0/21 maxlen: 21 86.107.248.0/21 maxlen: 21 89.35.208.0/21 maxlen: 21 89.43.156.0/22 maxlen: 24 93.190.208.0/21 maxlen: 24 93.190.212.0/22 maxlen: 22 185.16.48.0/22 maxlen: 22 185.102.176.0/22 maxlen: 24 185.176.176.0/22 maxlen: 22 185.181.152.0/22 maxlen: 22 185.183.60.0/22 maxlen: 22 185.183.64.0/22 maxlen: 22 185.183.252.0/22 maxlen: 22 185.184.4.0/22 maxlen: 22 185.198.224.0/22 maxlen: 22 185.204.252.0/22 maxlen: 22 185.209.140.0/22 maxlen: 22 185.223.148.0/22 maxlen: 22 185.243.120.0/22 maxlen: 22 194.36.192.0/22 maxlen: 22 195.123.7.0/24 maxlen: 24 195.177.108.0/22 maxlen: 22 217.26.192.0/20 maxlen: 20 2001:4000::/32 maxlen: 32 2a0a:1c80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d5:2f:32:ee:11:94:7b:c4:90:2f:b8:af:b5:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=996721831afb8b38307b49f5b9ee6292ad1e5850 Validity Not Before: Jan 2 14:21:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bbd8194ae292b79f3e2abb09f2ef77044565145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5c:f1:75:a3:aa:d5:db:b8:32:1b:b0:fc:89: 56:21:ec:37:f5:79:d0:b4:f0:66:cb:63:c4:4c:0b: 20:c9:da:2d:23:2e:cf:d8:96:ed:fd:1a:3b:77:29: 56:74:97:cd:35:b3:83:6e:0e:7f:f9:72:5f:9d:e1: e4:b9:28:f6:3e:43:36:4b:c5:d7:9c:1e:57:e4:9c: 0f:65:7d:57:d5:6e:d5:55:10:e5:d9:45:57:b0:61: 99:10:d2:2b:54:84:11:3d:56:43:dd:d3:a2:b1:a8: 9c:b2:1d:c9:f8:c0:38:0a:89:df:c9:20:65:4e:f9: b8:e8:20:92:0a:c2:65:cd:5f:38:35:6e:68:f5:34: 66:21:09:82:a0:18:6c:d9:18:bf:c3:83:24:27:ea: 81:44:e3:cf:48:e0:3b:04:d9:16:ba:d0:5e:e8:24: 6a:89:fe:6a:27:3e:86:dc:23:e4:90:05:a4:de:9d: 73:7c:8a:1f:eb:7f:31:b4:44:c9:b4:fc:c7:8b:f2: 56:12:5d:9e:d3:11:e1:77:7b:06:1f:a3:e7:05:b0: ba:a7:9f:c2:14:48:3e:ee:6f:62:4b:ce:21:20:f2: 29:11:6a:78:e8:b7:09:a4:b8:10:1d:12:0c:62:2a: 62:aa:32:18:70:73:f2:4d:48:b5:2f:34:61:55:0c: 18:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BD:81:94:AE:29:2B:79:F3:E2:AB:B0:9F:2E:F7:70:44:56:51:45 X509v3 Authority Key Identifier: keyid:99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/m72BlK4pK3nz4quwny73cERWUUU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.140.224.0/21 37.157.56.0/22 45.81.80.0/22 45.87.56.0/22 45.132.248.0/22 45.148.108.0/22 45.156.228.0/22 46.247.224.0/19 62.244.76.0/22 62.244.94.0/23 62.244.108.0/22 62.244.116.0/24 62.244.118.0/24 62.244.120.0/21 79.132.144.0/20 80.240.160.0/20 85.112.192.0/19 86.105.88.0/21 86.107.248.0/21 89.35.208.0/21 89.43.156.0/22 93.190.208.0/21 185.16.48.0/22 185.102.176.0/22 185.176.176.0/22 185.181.152.0/22 185.183.60.0-185.183.67.255 185.183.252.0/22 185.184.4.0/22 185.198.224.0/22 185.204.252.0/22 185.209.140.0/22 185.223.148.0/22 185.243.120.0/22 194.36.192.0/22 195.123.7.0/24 195.177.108.0/22 217.26.192.0/20 IPv6: 2001:4000::/32 2a0a:1c80::/29 Signature Algorithm: sha256WithRSAEncryption 76:09:1d:b8:d2:59:b7:b5:15:df:5d:4a:7a:1c:57:b2:01:d4: dc:b1:a6:a4:2c:b9:9a:26:d9:11:3d:3d:f8:b9:7a:5f:df:fe: a0:1e:78:ae:55:ce:d4:ee:a9:a7:d2:7a:0b:96:88:93:d5:d8: 49:18:93:02:15:60:36:c7:93:a1:8e:22:6b:3e:ab:46:f6:30: 06:63:e0:57:f1:e8:1c:1f:7a:24:29:05:54:a9:2f:02:50:19: 41:d8:93:bc:a2:a2:6d:ac:c5:22:9a:3f:85:b3:d3:34:ae:0d: f9:be:0e:f8:f0:f4:27:3c:55:7d:d9:ad:25:5c:44:f5:9f:b1: 67:a6:e6:e4:f6:7d:b5:2c:dc:93:11:97:e1:55:85:f6:82:b5: 75:fa:92:9f:d7:28:3d:f5:e1:40:82:28:cf:b9:16:bd:32:ea: 05:3d:a9:6b:2f:a2:3d:f1:27:97:b4:2a:96:58:3e:b9:ac:a6: cd:1d:05:e1:13:13:d5:77:30:ec:49:ca:4b:12:eb:22:87:9a: 12:dd:3e:6c:e5:9e:73:67:f6:bd:16:c7:c3:fe:58:69:61:9f: 03:d5:03:45:f3:9c:23:2a:8f:ca:d7:b9:76:77:6e:4a:65:af: 5c:b5:e9:1f:66:72:75:ae:17:dd:46:fb:b6:e7:11:d7:f6:4f: 1f:9c:65:19 -----BEGIN CERTIFICATE----- MIIGATCCBOmgAwIBAgISAZt/FdUvMu4RlHvEkC+4r7XnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NjcyMTgzMWFmYjhiMzgzMDdiNDlmNWI5ZWU2MjkyYWQx ZTU4NTAwHhcNMjYwMTAyMTQyMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmJkODE5NGFlMjkyYjc5ZjNlMmFiYjA5ZjJlZjc3MDQ0NTY1MTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolzxdaOq1du4Mhuw/IlWIew39XnQ tPBmy2PETAsgydotIy7P2Jbt/Ro7dylWdJfNNbODbg5/+XJfneHkuSj2PkM2S8XX nB5X5JwPZX1X1W7VVRDl2UVXsGGZENIrVIQRPVZD3dOisaicsh3J+MA4ConfySBl Tvm46CCSCsJlzV84NW5o9TRmIQmCoBhs2Ri/w4MkJ+qBROPPSOA7BNkWutBe6CRq if5qJz6G3CPkkAWk3p1zfIof638xtETJtPzHi/JWEl2e0xHhd3sGH6PnBbC6p5/C FEg+7m9iS84hIPIpEWp46LcJpLgQHRIMYipiqjIYcHPyTUi1LzRhVQwYRQIDAQAB o4IDDTCCAwkwHQYDVR0OBBYEFJu9gZSuKSt58+KrsJ8u93BEVlFFMB8GA1UdIwQY MBaAFJlnIYMa+4s4MHtJ9bnuYpKtHlhQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVdjaGd4cjdpemd3ZTBuMXVlNWlrcTBlV0ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8xYzFlYjItMWY2NS00ZjcxLThiMzIt YjRiZmU0NTZkZGUwLzEvbTcyQmxLNHBLM256NHF1d255NzNjRVJXVVVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8xYzFlYjItMWY2NS00ZjcxLThiMzItYjRiZmU0NTZkZGUw LzEvbVdjaGd4cjdpemd3ZTBuMXVlNWlrcTBlV0ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBIQYIKwYBBQUHAQcBAf8EggEQMIIBDDCB8wQCAAEwgewD BAMljOADBAIlnTgDBAItUVADBAItVzgDBAIthPgDBAItlGwDBAItnOQDBAUu9+AD BAI+9EwDBAE+9F4DBAI+9GwDBAA+9HQDBAA+9HYDBAM+9HgDBARPhJADBARQ8KAD BAVVcMADBANWaVgDBANWa/gDBANZI9ADBAJZK5wDBANdvtADBAK5EDADBAK5ZrAD BAK5sLADBAK5tZgwDAMEArm3PAMEArm3QAMEArm3/AMEArm4BAMEArnG4AMEArnM /AMEArnRjAMEArnflAMEArnzeAMEAsIkwAMEAMN7BwMEAsOxbAMEBNkawDAUBAIA AjAOAwUAIAFAAAMFAyoKHIAwDQYJKoZIhvcNAQELBQADggEBAHYJHbjSWbe1Fd9d SnocV7IB1NyxpqQsuZom2RE9Pfi5el/f/qAeeK5VztTuqafSeguWiJPV2EkYkwIV YDbHk6GOIms+q0b2MAZj4Ffx6BwfeiQpBVSpLwJQGUHYk7yiom2sxSKaP4Wz0zSu Dfm+Dvjw9Cc8VX3ZrSVcRPWfsWem5uT2fbUs3JMRl+FVhfaCtXX6kp/XKD314UCC KM+5Fr0y6gU9qWsvoj3xJ5e0KpZYPrmsps0dBeETE9V3MOxJyksS6yKHmhLdPmzl nnNn9r0Wx8P+WGlhnwPVA0XznCMqj8rXuXZ3bkplr1y16R9mcnWuF91G+7bnEdf2 Tx+cZRk= -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:41 2026 by rpki-client