This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/hKeD7-yvYTnC2B1D_CMXmIZsTFI.roa File: hKeD7-yvYTnC2B1D_CMXmIZsTFI.roa (raw, json) Hash identifier: BtutRZ7sc6rJry5/ekbE4GEG0knTxvmRvj4IiwdOT5A= Subject key identifier: 84:A7:83:EF:EC:AF:61:39:C2:D8:1D:43:FC:23:17:98:86:6C:4C:52 Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B77C74C20C0C4176479A8964B96E7F670 Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/hKeD7-yvYTnC2B1D_CMXmIZsTFI.roa Signing time: Thu 01 Jan 2026 04:18:28 +0000 ROA not before: Thu 01 Jan 2026 04:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200598 IP address blocks: 24.235.22.0/23 maxlen: 24 62.112.30.0/24 maxlen: 24 66.9.96.0/20 maxlen: 24 69.72.72.0/22 maxlen: 24 77.223.192.0/21 maxlen: 24 77.223.200.0/23 maxlen: 24 79.110.184.0/22 maxlen: 24 79.139.64.0/23 maxlen: 24 83.142.200.0/21 maxlen: 24 85.204.28.0/23 maxlen: 24 86.106.28.0/23 maxlen: 24 89.20.50.0/23 maxlen: 24 89.37.60.0/23 maxlen: 24 89.39.184.0/23 maxlen: 24 89.40.236.0/23 maxlen: 24 89.42.215.0/24 maxlen: 24 91.217.106.0/23 maxlen: 24 95.215.144.0/22 maxlen: 24 121.127.48.0/20 maxlen: 24 128.0.60.0/22 maxlen: 24 141.193.108.0/22 maxlen: 24 141.193.214.0/23 maxlen: 24 162.216.138.0/23 maxlen: 24 162.250.216.0/22 maxlen: 24 168.149.248.0/23 maxlen: 24 173.214.200.0/22 maxlen: 24 176.111.54.0/23 maxlen: 24 176.222.48.0/22 maxlen: 24 178.216.184.0/21 maxlen: 24 188.215.12.0/22 maxlen: 24 193.91.8.0/23 maxlen: 24 195.78.90.0/23 maxlen: 24 195.128.136.0/24 maxlen: 24 198.14.16.0/20 maxlen: 24 198.145.112.0/22 maxlen: 24 199.48.230.0/23 maxlen: 24 204.15.4.0/22 maxlen: 24 205.220.216.0/23 maxlen: 24 217.144.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4c:20:c0:c4:17:64:79:a8:96:4b:96:e7:f6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Jan 1 04:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84a783efecaf6139c2d81d43fc231798866c4c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ef:8c:6f:1f:fc:31:bc:3c:59:be:26:b6:cf: e4:2f:a2:c2:71:fe:e7:8d:65:5c:13:a8:8c:4a:af: d2:99:3e:76:4c:60:80:e9:54:c0:6f:59:76:91:3b: 25:32:08:01:16:26:90:76:02:36:77:48:9c:3b:7b: 9d:f3:32:0c:d2:e7:b2:61:87:58:19:fb:f2:0f:f2: 14:da:49:af:00:6d:01:ff:3d:89:fc:50:e5:9c:37: 8c:38:7d:35:d5:57:1f:f5:4a:16:91:14:c5:70:e0: 0a:a1:53:90:b9:75:99:fc:53:32:ca:54:ec:66:fb: 13:77:68:5a:36:56:51:af:14:0d:3f:9f:c6:4d:2a: 6a:43:7e:e2:fd:95:42:f3:74:b6:2e:7b:61:08:95: e6:21:96:83:71:2d:ad:3e:29:a6:bb:00:7f:cd:6e: 16:a6:97:36:ea:e6:06:81:82:b1:aa:7a:41:a8:a6: e7:26:ad:7f:e6:a8:5f:7e:ad:d2:17:95:62:f0:32: f2:71:09:20:91:31:0b:21:80:05:0b:91:32:84:a5: 4b:cf:75:0e:df:8f:43:ed:c5:97:5b:6e:5d:9e:b0: 2a:c3:a3:0b:85:98:f3:21:45:54:e6:12:c6:23:ae: 5e:4e:98:4a:60:5f:21:cf:06:07:7d:77:0a:82:34: bc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A7:83:EF:EC:AF:61:39:C2:D8:1D:43:FC:23:17:98:86:6C:4C:52 X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/hKeD7-yvYTnC2B1D_CMXmIZsTFI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.235.22.0/23 62.112.30.0/24 66.9.96.0/20 69.72.72.0/22 77.223.192.0-77.223.201.255 79.110.184.0/22 79.139.64.0/23 83.142.200.0/21 85.204.28.0/23 86.106.28.0/23 89.20.50.0/23 89.37.60.0/23 89.39.184.0/23 89.40.236.0/23 89.42.215.0/24 91.217.106.0/23 95.215.144.0/22 121.127.48.0/20 128.0.60.0/22 141.193.108.0/22 141.193.214.0/23 162.216.138.0/23 162.250.216.0/22 168.149.248.0/23 173.214.200.0/22 176.111.54.0/23 176.222.48.0/22 178.216.184.0/21 188.215.12.0/22 193.91.8.0/23 195.78.90.0/23 195.128.136.0/24 198.14.16.0/20 198.145.112.0/22 199.48.230.0/23 204.15.4.0/22 205.220.216.0/23 217.144.108.0/22 Signature Algorithm: sha256WithRSAEncryption 86:b3:5b:91:09:2d:bd:d1:5e:75:9c:31:19:5b:7b:fb:d7:70: 3c:a2:4f:20:61:ad:b5:b8:83:a7:28:48:60:77:9a:cf:bd:16: b2:fa:c6:42:b8:ec:1d:db:56:74:0c:ac:31:0f:d8:2f:97:c4: ee:c3:e0:e7:cb:fc:ef:e2:0a:ad:a4:7d:6e:79:47:b9:f3:9a: 75:10:e8:1b:90:85:ac:99:1a:13:54:a5:52:2b:ef:99:51:e0: 14:af:a3:03:68:dc:99:ca:f6:12:98:cf:48:47:75:06:dc:af: 98:66:75:09:c6:42:24:9a:ba:a4:03:2a:bd:9c:c6:c5:66:eb: c6:d5:de:a8:c3:49:3c:c8:b2:97:fe:c1:d6:32:34:9b:2e:ee: 96:12:60:81:48:dc:be:48:e3:2a:80:43:01:1f:5d:68:66:95: 46:cb:0c:ac:0b:7e:3c:46:6b:75:49:d9:e3:e1:c7:e9:f3:cf: 19:2f:02:77:83:25:00:2e:d3:55:50:19:18:55:9b:b2:40:48: a3:09:16:ac:18:42:10:a8:14:cf:da:c4:4b:90:3b:77:2d:33: 1f:0b:cf:21:04:ff:6d:fe:46:67:d5:1c:ff:fb:ac:ca:d9:83: 6e:aa:ca:05:69:af:d4:23:93:8d:30:11:ed:8c:24:a2:99:e7: c6:bc:2c:1f -----BEGIN CERTIFICATE----- MIIF6TCCBNGgAwIBAgISAZt3x0wgwMQXZHmolkuW5/ZwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMTAxMDQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGE3ODNlZmVjYWY2MTM5YzJkODFkNDNmYzIzMTc5ODg2NmM0YzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo++Mbx/8Mbw8Wb4mts/kL6LCcf7n jWVcE6iMSq/SmT52TGCA6VTAb1l2kTslMggBFiaQdgI2d0icO3ud8zIM0ueyYYdY GfvyD/IU2kmvAG0B/z2J/FDlnDeMOH011Vcf9UoWkRTFcOAKoVOQuXWZ/FMyylTs ZvsTd2haNlZRrxQNP5/GTSpqQ37i/ZVC83S2LnthCJXmIZaDcS2tPimmuwB/zW4W ppc26uYGgYKxqnpBqKbnJq1/5qhffq3SF5Vi8DLycQkgkTELIYAFC5EyhKVLz3UO 349D7cWXW25dnrAqw6MLhZjzIUVU5hLGI65eTphKYF8hzwYHfXcKgjS88QIDAQAB o4IC9TCCAvEwHQYDVR0OBBYEFISng+/sr2E5wtgdQ/wjF5iGbExSMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvaEtlRDcteXZZVG5DMkIxRF9DTVhtSVpzVEZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBCQYIKwYBBQUHAQcBAf8EgfkwgfYwgfMEAgABMIHsAwQB GOsWAwQAPnAeAwQEQglgAwQCRUhIMAwDBAZN38ADBAFN38gDBAJPbrgDBAFPi0AD BANTjsgDBAFVzBwDBAFWahwDBAFZFDIDBAFZJTwDBAFZJ7gDBAFZKOwDBABZKtcD BAFb2WoDBAJf15ADBAR5fzADBAKAADwDBAKNwWwDBAGNwdYDBAGi2IoDBAKi+tgD BAGolfgDBAKt1sgDBAGwbzYDBAKw3jADBAOy2LgDBAK81wwDBAHBWwgDBAHDTloD BADDgIgDBATGDhADBALGkXADBAHHMOYDBALMDwQDBAHN3NgDBALZkGwwDQYJKoZI hvcNAQELBQADggEBAIazW5EJLb3RXnWcMRlbe/vXcDyiTyBhrbW4g6coSGB3ms+9 FrL6xkK47B3bVnQMrDEP2C+XxO7D4OfL/O/iCq2kfW55R7nzmnUQ6BuQhayZGhNU pVIr75lR4BSvowNo3JnK9hKYz0hHdQbcr5hmdQnGQiSauqQDKr2cxsVm68bV3qjD STzIspf+wdYyNJsu7pYSYIFI3L5I4yqAQwEfXWhmlUbLDKwLfjxGa3VJ2ePhx+nz zxkvAneDJQAu01VQGRhVm7JASKMJFqwYQhCoFM/axEuQO3ctMx8LzyEE/23+RmfV HP/7rMrZg26qygVpr9Qjk40wEe2MJKKZ58a8LB8= -----END CERTIFICATE-----Generated at Thu Jan 1 20:30:06 2026 by rpki-client