This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/x6mrmaGJy47kqFFnItocufmY7bk.roa File: x6mrmaGJy47kqFFnItocufmY7bk.roa (raw, json) Hash identifier: 90I12SKOCzcno81WuRmhP04+3okEGu9BIcjtNunNPgM= Subject key identifier: C7:A9:AB:99:A1:89:CB:8E:E4:A8:51:67:22:DA:1C:B9:F9:98:ED:B9 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D5A7482C920671EAE9BC8B393412D Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/x6mrmaGJy47kqFFnItocufmY7bk.roa Signing time: Fri 02 Jan 2026 06:20:28 +0000 ROA not before: Fri 02 Jan 2026 06:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209854 IP address blocks: 45.144.227.0/24 maxlen: 24 62.197.144.0/24 maxlen: 24 62.197.145.0/24 maxlen: 24 62.197.146.0/24 maxlen: 24 62.197.147.0/24 maxlen: 24 62.197.148.0/24 maxlen: 24 62.197.149.0/24 maxlen: 24 62.197.150.0/24 maxlen: 24 62.197.151.0/24 maxlen: 24 62.197.152.0/24 maxlen: 24 62.197.153.0/24 maxlen: 24 62.197.154.0/23 maxlen: 24 62.197.156.0/23 maxlen: 24 62.197.158.0/24 maxlen: 24 62.197.159.0/24 maxlen: 24 92.62.120.0/24 maxlen: 24 92.62.121.0/24 maxlen: 24 92.62.122.0/23 maxlen: 24 185.244.139.0/24 maxlen: 24 194.169.168.0/24 maxlen: 24 194.169.169.0/24 maxlen: 24 194.169.170.0/23 maxlen: 24 212.119.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:5a:74:82:c9:20:67:1e:ae:9b:c8:b3:93:41:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7a9ab99a189cb8ee4a8516722da1cb9f998edb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f3:44:24:71:4a:3f:41:14:59:66:42:00:58: 33:99:b3:c4:65:91:43:72:5a:6e:11:4c:af:54:a5: 49:b7:f1:c6:a1:9d:1a:c4:89:53:89:9d:58:11:c2: 99:fd:78:cd:58:e1:d7:87:d1:a6:6e:03:f7:03:bd: ff:f2:e5:b6:6a:b1:1b:d0:9a:94:ee:c9:56:02:4e: 8d:f6:8c:4c:ad:b5:92:94:a3:23:a0:cf:2a:99:5b: 57:fb:36:2b:84:1c:1b:8a:75:38:7c:25:7f:8f:c7: 3d:70:e9:fc:f0:03:d5:4b:6e:7f:ad:a9:49:56:31: 49:9e:59:5d:1b:3e:44:c6:cd:12:a3:20:33:5d:b7: d7:e3:ff:a2:47:ff:ec:59:99:77:2b:19:e7:b4:10: 9b:60:0d:a9:99:3b:c9:3c:e8:f8:b6:29:d0:1b:94: 47:22:7e:73:18:4d:55:ab:bf:88:4f:86:1c:d6:1e: 89:c9:f9:91:05:3b:d1:6a:bf:d4:c5:1a:9d:ac:39: 2d:78:e1:c1:ac:23:00:81:09:24:bc:23:9f:7b:5c: f6:5b:4d:9e:9b:fd:1b:12:8e:75:03:a7:5b:85:a5: 1d:1c:0c:3d:3a:e7:cc:3d:26:0c:3e:e1:86:e7:a3: 58:cb:10:b8:e2:40:51:92:df:6a:97:c5:0d:1e:c3: c5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A9:AB:99:A1:89:CB:8E:E4:A8:51:67:22:DA:1C:B9:F9:98:ED:B9 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/x6mrmaGJy47kqFFnItocufmY7bk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.227.0/24 62.197.144.0/20 92.62.120.0/22 185.244.139.0/24 194.169.168.0/22 212.119.32.0/23 Signature Algorithm: sha256WithRSAEncryption 15:37:05:76:84:24:55:4b:2b:da:78:67:c8:15:ad:cb:da:48: 67:55:fe:e9:7c:2b:2c:a0:15:eb:f2:3c:52:f9:39:f8:7c:f0: 71:cd:a1:48:a1:4a:e5:3c:c0:2c:54:11:df:7e:db:a4:7f:38: 05:f5:87:cc:2d:d4:de:a7:41:93:e8:79:10:e1:19:e4:5b:1a: 42:22:23:42:3e:b2:78:95:43:10:a3:f9:8f:5c:0a:94:5b:72: 02:fd:19:c2:eb:e0:ca:a7:a5:6f:d6:8d:12:a4:d1:cc:26:70: 77:6a:ad:e4:e6:41:5c:b6:82:4d:dc:75:92:14:c1:18:5e:99: 1b:28:8e:f1:99:2a:ff:a7:fc:08:24:cd:ef:f3:28:f7:74:82: 00:38:30:49:e9:67:78:8a:1b:82:07:4d:4a:78:34:66:8f:04: 0c:3c:52:60:97:f6:b3:9a:36:9e:9f:1d:ad:95:f7:20:e8:02: c8:91:b8:ff:48:6d:22:3c:7d:00:42:70:fc:e4:b3:a3:06:66: ca:f8:6a:21:9f:d8:cc:d9:26:bf:a8:c6:98:a5:c0:7c:23:bf: 99:67:13:b0:84:ec:3d:0c:a8:08:20:17:6e:ce:d7:23:62:9f: 3a:c9:d7:ae:4a:40:f6:34:c4:76:73:d2:77:1f:3c:cb:2e:d6: bf:47:ec:bf -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt9XVp0gskgZx6um8izk0EtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2E5YWI5OWExODljYjhlZTRhODUxNjcyMmRhMWNiOWY5OThlZGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/NEJHFKP0EUWWZCAFgzmbPEZZFD clpuEUyvVKVJt/HGoZ0axIlTiZ1YEcKZ/XjNWOHXh9GmbgP3A73/8uW2arEb0JqU 7slWAk6N9oxMrbWSlKMjoM8qmVtX+zYrhBwbinU4fCV/j8c9cOn88APVS25/ralJ VjFJnlldGz5Exs0SoyAzXbfX4/+iR//sWZl3KxnntBCbYA2pmTvJPOj4tinQG5RH In5zGE1Vq7+IT4Yc1h6JyfmRBTvRar/UxRqdrDkteOHBrCMAgQkkvCOfe1z2W02e m/0bEo51A6dbhaUdHAw9OufMPSYMPuGG56NYyxC44kBRkt9ql8UNHsPFCQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFMepq5mhicuO5KhRZyLaHLn5mO25MB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEveDZtcm1hR0p5NDdrcUZGbkl0b2N1Zm1ZN2JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALZDjAwQE PsWQAwQCXD54AwQAufSLAwQCwqmoAwQB1HcgMA0GCSqGSIb3DQEBCwUAA4IBAQAV NwV2hCRVSyvaeGfIFa3L2khnVf7pfCssoBXr8jxS+Tn4fPBxzaFIoUrlPMAsVBHf ftukfzgF9YfMLdTep0GT6HkQ4RnkWxpCIiNCPrJ4lUMQo/mPXAqUW3IC/RnC6+DK p6Vv1o0SpNHMJnB3aq3k5kFctoJN3HWSFMEYXpkbKI7xmSr/p/wIJM3v8yj3dIIA ODBJ6Wd4ihuCB01KeDRmjwQMPFJgl/azmjaenx2tlfcg6ALIkbj/SG0iPH0AQnD8 5LOjBmbK+Gohn9jM2Sa/qMaYpcB8I7+ZZxOwhOw9DKgIIBduztcjYp86ydeuSkD2 NMR2c9J3HzzLLta/R+y/ -----END CERTIFICATE-----Generated at Mon Jan 19 17:32:55 2026 by rpki-client