This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/IdFrGrKneVQ113i2Ab1LUCgT8ik.roa File: IdFrGrKneVQ113i2Ab1LUCgT8ik.roa (raw, json) Hash identifier: Sm8SdZG5311jvtK6aaYEc75A08lq9xHwUDfK1v42f28= Subject key identifier: 21:D1:6B:1A:B2:A7:79:54:35:D7:78:B6:01:BD:4B:50:28:13:F2:29 Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B77C741A4006F18CA4E9D46ED6A59B95D Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/IdFrGrKneVQ113i2Ab1LUCgT8ik.roa Signing time: Thu 01 Jan 2026 04:18:25 +0000 ROA not before: Thu 01 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 62.164.224.0/19 maxlen: 20 66.9.96.0/20 maxlen: 24 66.117.8.0/22 maxlen: 24 77.223.192.0/21 maxlen: 24 77.223.200.0/23 maxlen: 24 79.139.64.0/23 maxlen: 24 83.142.200.0/21 maxlen: 24 84.247.59.0/24 maxlen: 24 86.104.8.0/24 maxlen: 24 88.135.96.0/20 maxlen: 24 89.34.171.0/24 maxlen: 24 89.42.40.0/24 maxlen: 24 93.119.184.0/21 maxlen: 24 94.26.110.0/23 maxlen: 24 94.101.103.0/24 maxlen: 24 95.178.8.0/21 maxlen: 24 116.50.16.0/21 maxlen: 24 121.127.48.0/20 maxlen: 24 121.127.56.0/21 maxlen: 24 168.75.224.0/20 maxlen: 24 176.222.48.0/22 maxlen: 24 192.200.192.0/19 maxlen: 23 194.149.76.0/22 maxlen: 24 195.133.202.0/23 maxlen: 24 198.14.16.0/20 maxlen: 24 198.145.112.0/22 maxlen: 24 205.134.244.0/22 maxlen: 24 212.32.96.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:41:a4:00:6f:18:ca:4e:9d:46:ed:6a:59:b9:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Jan 1 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21d16b1ab2a7795435d778b601bd4b502813f229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c1:a5:a6:dc:0d:94:40:77:e0:cc:71:2c:d4: 8f:02:35:9a:e2:f3:c8:9e:f7:7f:55:88:e6:46:2f: 76:ac:30:ff:a0:54:0e:d9:42:5b:9a:4c:fe:96:ff: bd:a7:33:80:4a:50:38:9b:22:95:f9:e5:a2:37:6c: d3:83:75:1b:ce:18:e1:26:47:e8:fb:0a:e6:85:87: a9:aa:28:7b:27:64:35:a8:6c:b9:ca:d6:ba:d3:4d: 67:bc:98:dd:88:f5:59:18:41:e3:af:c7:16:95:e2: 5e:9f:95:71:bd:e2:b5:75:a9:b2:ad:5b:cc:e9:8d: 3f:7f:e4:eb:06:63:e0:d8:19:3d:c0:bd:d4:e5:47: ed:4b:cc:62:8c:64:33:e9:5b:86:a6:d2:01:9e:9f: 73:45:5a:7f:f8:40:ba:60:a7:c2:cc:1f:8a:12:30: 96:1f:53:12:fd:c6:d8:06:32:f6:81:31:5e:39:3b: 0b:57:99:8b:74:7f:7d:0c:57:0e:3f:c3:9a:a1:8a: 63:b0:9f:b4:b7:07:4f:ec:a2:2d:6f:c1:a6:f8:45: 99:7e:4d:b6:53:f9:16:eb:ba:b4:f6:06:b5:0c:5f: 69:37:a2:48:a8:74:bc:22:74:1b:fb:77:b2:e9:1d: e7:8f:e6:01:2a:15:c1:c4:46:3f:f4:3c:e0:58:ac: 32:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D1:6B:1A:B2:A7:79:54:35:D7:78:B6:01:BD:4B:50:28:13:F2:29 X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/IdFrGrKneVQ113i2Ab1LUCgT8ik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.164.224.0/19 66.9.96.0/20 66.117.8.0/22 77.223.192.0-77.223.201.255 79.139.64.0/23 83.142.200.0/21 84.247.59.0/24 86.104.8.0/24 88.135.96.0/20 89.34.171.0/24 89.42.40.0/24 93.119.184.0/21 94.26.110.0/23 94.101.103.0/24 95.178.8.0/21 116.50.16.0/21 121.127.48.0/20 168.75.224.0/20 176.222.48.0/22 192.200.192.0/19 194.149.76.0/22 195.133.202.0/23 198.14.16.0/20 198.145.112.0/22 205.134.244.0/22 212.32.96.0/19 Signature Algorithm: sha256WithRSAEncryption 35:3e:77:8d:42:45:24:ff:6e:95:dc:62:25:34:d0:59:47:7c: 1d:98:59:0b:68:7a:91:37:96:f7:c7:f4:2f:4c:e2:2f:76:00: d4:27:9b:57:1c:fc:35:70:67:0f:a3:49:60:70:5f:12:e5:c2: de:3b:c9:6e:61:3b:7f:8c:fc:aa:92:49:72:35:c9:e5:c5:14: 39:bf:0b:a8:65:27:e0:e5:a9:3b:4b:3f:f4:e3:18:ec:e3:c5: 20:ae:9d:cd:ac:f0:70:3a:19:1e:db:c6:38:cd:c7:f4:30:16: 17:d2:9d:2b:51:1b:01:6f:ed:bb:e2:e9:00:04:19:1d:5f:65: 72:1a:00:d2:7b:39:3f:e3:4d:35:9e:63:9b:95:82:39:dd:b4: bb:a3:7f:7b:bd:68:9c:d5:e0:7f:fa:33:93:fa:3b:12:b7:1d: 39:a3:5f:87:d7:fa:e2:4c:aa:29:31:55:8f:bb:68:23:bd:fa: 9c:a7:3b:b2:86:23:3d:74:9c:cb:68:65:9b:bb:f2:b5:e3:ee: 91:7b:eb:90:8c:ba:7a:17:c3:e8:56:a9:10:ed:0c:79:3b:ff: da:fa:b9:72:c6:a1:04:23:84:2f:38:94:cb:05:92:ea:96:fd: 75:d2:9e:3f:f9:d4:75:52:96:23:82:ef:9f:56:ff:0d:9b:53: d9:ec:d8:1e -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt3x0GkAG8Yyk6dRu1qWbldMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWQxNmIxYWIyYTc3OTU0MzVkNzc4YjYwMWJkNGI1MDI4MTNmMjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MGlptwNlEB34MxxLNSPAjWa4vPI nvd/VYjmRi92rDD/oFQO2UJbmkz+lv+9pzOASlA4myKV+eWiN2zTg3UbzhjhJkfo +wrmhYepqih7J2Q1qGy5yta6001nvJjdiPVZGEHjr8cWleJen5VxveK1damyrVvM 6Y0/f+TrBmPg2Bk9wL3U5UftS8xijGQz6VuGptIBnp9zRVp/+EC6YKfCzB+KEjCW H1MS/cbYBjL2gTFeOTsLV5mLdH99DFcOP8OaoYpjsJ+0twdP7KItb8Gm+EWZfk22 U/kW67q09ga1DF9pN6JIqHS8InQb+3ey6R3nj+YBKhXBxEY/9DzgWKwy9wIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFCHRaxqyp3lUNdd4tgG9S1AoE/IpMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvSWRGckdyS25lVlExMTNpMkFiMUxVQ2dUOGlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHBBggrBgEFBQcBBwEB/wSBsTCBrjCBqwQCAAEwgaQDBAU+ pOADBARCCWADBAJCdQgwDAMEBk3fwAMEAU3fyAMEAU+LQAMEA1OOyAMEAFT3OwME AFZoCAMEBFiHYAMEAFkiqwMEAFkqKAMEA113uAMEAV4abgMEAF5lZwMEA1+yCAME A3QyEAMEBHl/MAMEBKhL4AMEArDeMAMEBcDIwAMEAsKVTAMEAcOFygMEBMYOEAME AsaRcAMEAs2G9AMEBdQgYDANBgkqhkiG9w0BAQsFAAOCAQEANT53jUJFJP9uldxi JTTQWUd8HZhZC2h6kTeW98f0L0ziL3YA1CebVxz8NXBnD6NJYHBfEuXC3jvJbmE7 f4z8qpJJcjXJ5cUUOb8LqGUn4OWpO0s/9OMY7OPFIK6dzazwcDoZHtvGOM3H9DAW F9KdK1EbAW/tu+LpAAQZHV9lchoA0ns5P+NNNZ5jm5WCOd20u6N/e71onNXgf/oz k/o7ErcdOaNfh9f64kyqKTFVj7toI736nKc7soYjPXScy2hlm7vytePukXvrkIy6 ehfD6FapEO0MeTv/2vq5csahBCOELziUywWS6pb9ddKeP/nUdVKWI4Lvn1b/DZtT 2ezYHg== -----END CERTIFICATE-----Generated at Thu Jan 1 20:22:26 2026 by rpki-client