This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/spedoBjKMJtDwJNiXJyA0Dnksc0.roa File: spedoBjKMJtDwJNiXJyA0Dnksc0.roa (raw, json) Hash identifier: G+Sc7N0ClzMriCIU/pIBLulfxidvs+KXFvZMhEwVtOI= Subject key identifier: B2:97:9D:A0:18:CA:30:9B:43:C0:93:62:5C:9C:80:D0:39:E4:B1:CD Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8BD016A2AE5BD90EE64D2A32929D3 Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/spedoBjKMJtDwJNiXJyA0Dnksc0.roa Signing time: Thu 01 Jan 2026 18:18:54 +0000 ROA not before: Thu 01 Jan 2026 18:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5518 IP address blocks: 62.63.128.0/21 maxlen: 24 62.63.136.0/22 maxlen: 24 62.63.144.0/20 maxlen: 24 62.63.159.0/24 maxlen: 24 62.63.160.0/19 maxlen: 24 62.63.190.0/24 maxlen: 24 62.63.191.0/24 maxlen: 24 78.28.192.0/18 maxlen: 24 78.28.195.0/24 maxlen: 24 78.28.197.0/24 maxlen: 24 78.28.211.0/24 maxlen: 24 78.28.212.0/24 maxlen: 24 78.28.223.0/24 maxlen: 24 78.28.228.0/24 maxlen: 24 78.28.229.0/24 maxlen: 24 78.28.234.0/24 maxlen: 24 78.28.240.0/24 maxlen: 24 78.28.244.0/24 maxlen: 24 78.28.250.0/24 maxlen: 24 78.28.252.0/24 maxlen: 24 78.154.128.0/19 maxlen: 24 80.233.128.0/17 maxlen: 24 80.233.140.0/24 maxlen: 24 80.233.168.0/24 maxlen: 24 80.233.200.0/21 maxlen: 24 80.233.232.0/24 maxlen: 24 80.233.244.0/24 maxlen: 24 185.87.204.0/22 maxlen: 24 185.87.204.0/24 maxlen: 24 194.19.224.0/19 maxlen: 24 194.19.224.0/24 maxlen: 24 194.19.246.0/24 maxlen: 24 213.175.64.0/18 maxlen: 24 213.175.75.0/24 maxlen: 24 213.175.117.0/24 maxlen: 24 2a02:16d8::/32 maxlen: 32 2a02:16d8:102::/48 maxlen: 48 2a02:16d8:104::/48 maxlen: 48 2a02:16d8:107::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:bd:01:6a:2a:e5:bd:90:ee:64:d2:a3:29:29:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2979da018ca309b43c093625c9c80d039e4b1cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:31:d4:6e:10:a1:cb:5c:47:e7:2a:ae:51:0c: dc:0a:28:41:d3:c8:ac:96:b0:f0:67:49:20:cd:5f: 03:12:97:ee:db:d3:e7:5d:94:19:92:96:dc:98:39: fd:eb:0d:f0:b3:6d:4d:f2:d1:9b:20:ae:fe:79:cb: bc:60:cb:f1:fe:85:17:e7:bc:87:01:b7:3c:b7:66: c6:6d:d0:47:e4:b8:35:5e:0f:7b:16:5f:ad:cd:83: b0:27:7e:6b:76:e1:da:b0:2d:ea:2b:b8:db:3b:b3: 4d:e2:23:31:d9:71:98:65:d8:2e:bb:99:b4:2a:55: dc:bd:ed:61:34:b8:40:dd:56:a6:a2:e3:d4:0d:51: 94:16:37:3d:e9:a6:aa:6b:9c:5e:a9:33:40:61:36: bd:d6:b1:7c:f3:30:28:a3:67:19:10:d1:f0:9d:b9: 6a:da:e7:4e:5c:f5:d8:a1:ac:f9:79:27:e2:65:fb: f4:b0:74:47:48:9a:e4:11:a6:e3:ee:1f:b6:00:28: e9:92:ca:91:83:66:78:20:84:51:f4:e8:89:53:c5: bd:ad:26:73:ad:e1:9d:00:96:21:9f:54:3e:50:2c: 32:76:15:14:d5:8c:78:06:64:2e:af:7f:87:7f:36: fc:9b:0e:31:b1:61:4c:38:72:59:c7:9f:93:dc:f6: 23:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:97:9D:A0:18:CA:30:9B:43:C0:93:62:5C:9C:80:D0:39:E4:B1:CD X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/spedoBjKMJtDwJNiXJyA0Dnksc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.63.128.0-62.63.139.255 62.63.144.0-62.63.191.255 78.28.192.0/18 78.154.128.0/19 80.233.128.0/17 185.87.204.0/22 194.19.224.0/19 213.175.64.0/18 IPv6: 2a02:16d8::/32 Signature Algorithm: sha256WithRSAEncryption 13:bf:26:84:30:0b:10:d4:fe:ed:e6:6e:70:29:64:41:74:a1: f4:fd:12:2c:5e:92:99:8d:46:cc:5a:e5:94:25:09:99:2a:09: ec:3b:45:fc:a3:1b:02:e1:46:f5:5c:67:b6:a7:6c:3d:b1:de: a7:60:ae:de:d2:8f:2d:06:dc:42:99:7f:7b:03:63:b8:1a:e5: 6e:82:38:ef:ca:fe:4b:85:de:d8:5a:a0:88:c8:b7:c1:b1:fb: 3b:c4:9e:71:d3:60:a8:b5:87:68:ee:42:05:e2:07:c9:d5:50: e2:f0:9b:8b:90:0f:52:04:a5:ae:03:39:23:96:8d:57:60:ad: dc:14:dc:03:54:d4:de:07:d8:69:d8:15:76:d4:0c:18:32:ff: 8e:64:be:83:08:97:df:48:97:7e:c2:6b:41:aa:40:8c:35:87: fc:fa:55:b2:e7:5d:b3:db:a0:6f:1d:c3:cd:85:b7:e6:9c:ae: 3f:ed:bc:b7:f9:5c:6e:76:7f:c5:f7:dd:ce:4d:e0:6b:ab:a0: f6:42:88:30:88:d7:aa:89:a9:3c:f5:55:dc:1b:b9:ba:13:43: 32:54:a6:ba:2d:1a:d0:29:98:9a:53:b6:4d:f6:80:3e:e6:41: ef:53:8f:a7:50:de:c4:d8:0e:ae:1c:31:5f:a0:00:c5:1a:0f: 50:be:8c:8b -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgISAZt6yL0BairlvZDuZNKjKSnTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjk3OWRhMDE4Y2EzMDliNDNjMDkzNjI1YzljODBkMDM5ZTRiMWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjHUbhChy1xH5yquUQzcCihB08is lrDwZ0kgzV8DEpfu29PnXZQZkpbcmDn96w3ws21N8tGbIK7+ecu8YMvx/oUX57yH Abc8t2bGbdBH5Lg1Xg97Fl+tzYOwJ35rduHasC3qK7jbO7NN4iMx2XGYZdguu5m0 KlXcve1hNLhA3VamouPUDVGUFjc96aaqa5xeqTNAYTa91rF88zAoo2cZENHwnblq 2udOXPXYoaz5eSfiZfv0sHRHSJrkEabj7h+2ACjpksqRg2Z4IIRR9OiJU8W9rSZz reGdAJYhn1Q+UCwydhUU1Yx4BmQur3+Hfzb8mw4xsWFMOHJZx5+T3PYjiQIDAQAB o4ICUjCCAk4wHQYDVR0OBBYEFLKXnaAYyjCbQ8CTYlycgNA55LHNMB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvc3BlZG9CaktNSnREd0pOaVhKeUEwRG5rc2MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzBGBAIAATBAMAwDBAc+P4AD BAI+P4gwDAMEBD4/kAMEBj4/gAMEBk4cwAMEBU6agAMEB1DpgAMEArlXzAMEBcIT 4AMEBtWvQDANBAIAAjAHAwUAKgIW2DANBgkqhkiG9w0BAQsFAAOCAQEAE78mhDAL ENT+7eZucClkQXSh9P0SLF6SmY1GzFrllCUJmSoJ7DtF/KMbAuFG9VxntqdsPbHe p2Cu3tKPLQbcQpl/ewNjuBrlboI478r+S4Xe2FqgiMi3wbH7O8SecdNgqLWHaO5C BeIHydVQ4vCbi5APUgSlrgM5I5aNV2Ct3BTcA1TU3gfYadgVdtQMGDL/jmS+gwiX 30iXfsJrQapAjDWH/PpVsudds9ugbx3DzYW35pyuP+28t/lcbnZ/xffdzk3ga6ug 9kKIMIjXqompPPVV3Bu5uhNDMlSmui0a0CmYmlO2TfaAPuZB71OPp1DexNgOrhwx X6AAxRoPUL6Miw== -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:00 2026 by rpki-client