This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/NE7pTp4QnaDUGUHHElFTbo-gDG0.roa File: NE7pTp4QnaDUGUHHElFTbo-gDG0.roa (raw, json) Hash identifier: r/+SGcFjTDLD6C4xVwjhnpDBi0wwxr0NEt4KOnZIJYg= Subject key identifier: 34:4E:E9:4E:9E:10:9D:A0:D4:19:41:C7:12:51:53:6E:8F:A0:0C:6D Certificate issuer: /CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81 Certificate serial: 019B7BA4772318C75E5AD39A885663CFD761 Authority key identifier: 1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/NE7pTp4QnaDUGUHHElFTbo-gDG0.roa Signing time: Thu 01 Jan 2026 22:18:54 +0000 ROA not before: Thu 01 Jan 2026 22:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16086 IP address blocks: 37.33.0.0/16 maxlen: 16 37.130.160.0/19 maxlen: 19 37.136.0.0/16 maxlen: 16 37.219.0.0/16 maxlen: 16 62.44.192.0/18 maxlen: 18 62.78.96.0/19 maxlen: 19 62.78.128.0/17 maxlen: 17 62.113.160.0/19 maxlen: 19 62.165.128.0/18 maxlen: 18 62.183.128.0/17 maxlen: 17 62.197.160.0/19 maxlen: 19 62.236.0.0/15 maxlen: 15 62.241.192.0/18 maxlen: 18 78.27.64.0/18 maxlen: 18 80.64.0.0/20 maxlen: 20 81.175.128.0/17 maxlen: 17 82.128.128.0/17 maxlen: 17 82.181.0.0/16 maxlen: 16 82.203.128.0/17 maxlen: 17 83.100.0.0/17 maxlen: 17 83.102.0.0/17 maxlen: 17 84.253.192.0/18 maxlen: 18 85.23.0.0/16 maxlen: 16 85.131.0.0/17 maxlen: 17 87.92.0.0/14 maxlen: 14 87.100.128.0/17 maxlen: 17 88.148.128.0/17 maxlen: 17 89.27.0.0/17 maxlen: 17 89.166.0.0/17 maxlen: 17 91.145.64.0/18 maxlen: 18 109.108.0.0/19 maxlen: 19 159.255.224.0/19 maxlen: 19 176.93.0.0/16 maxlen: 16 178.55.0.0/16 maxlen: 16 178.75.128.0/18 maxlen: 18 185.15.212.0/22 maxlen: 22 188.67.0.0/16 maxlen: 16 188.94.64.0/21 maxlen: 21 192.107.200.0/21 maxlen: 21 192.107.208.0/20 maxlen: 20 192.107.224.0/21 maxlen: 21 193.143.70.0/23 maxlen: 23 193.143.73.0/24 maxlen: 24 193.143.79.0/24 maxlen: 24 193.143.80.0/21 maxlen: 21 193.143.88.0/23 maxlen: 23 193.143.91.0/24 maxlen: 24 193.143.93.0/24 maxlen: 24 193.143.94.0/23 maxlen: 23 194.100.0.0/16 maxlen: 16 195.10.128.0/18 maxlen: 18 212.50.128.0/19 maxlen: 19 212.86.0.0/19 maxlen: 19 212.90.64.0/19 maxlen: 19 212.146.0.0/18 maxlen: 18 212.149.128.0/17 maxlen: 17 213.139.160.0/19 maxlen: 19 213.141.96.0/19 maxlen: 19 213.186.224.0/19 maxlen: 19 213.186.224.0/24 maxlen: 24 213.216.192.0/18 maxlen: 18 213.243.128.0/18 maxlen: 18 217.78.192.0/19 maxlen: 19 2001:6e8::/29 maxlen: 29 2001:14b8::/29 maxlen: 29 2001:4078::/29 maxlen: 29 2a01:a800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:77:23:18:c7:5e:5a:d3:9a:88:56:63:cf:d7:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81 Validity Not Before: Jan 1 22:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=344ee94e9e109da0d41941c71251536e8fa00c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b5:58:88:98:9b:f4:6f:21:fe:84:3f:d7:16: 8e:b4:2e:83:9b:23:74:4c:48:b7:39:39:07:18:4b: 20:93:7f:92:6f:67:e9:2a:cf:59:15:ee:f1:b2:1a: 10:e8:5d:df:f4:05:40:e8:44:14:f9:99:b0:25:eb: b5:74:46:de:94:71:01:66:04:57:7a:98:cf:7f:b5: 43:3a:75:ea:19:24:99:2e:7d:c1:49:15:57:6a:b2: 5a:c4:c1:81:49:26:33:09:2b:05:51:4e:9d:a3:89: d9:79:93:88:c0:8d:75:38:4f:22:cd:c5:3e:16:ab: 2b:6e:f0:4f:35:b3:c7:30:b8:1e:c4:c9:0e:8f:1a: 2f:0c:08:36:18:12:70:55:fb:cb:51:83:3b:ca:0e: d2:35:67:a6:9d:38:db:ca:19:51:28:ed:f6:1e:53: e0:8c:39:2e:b0:ac:a8:ce:dc:2a:2c:b5:09:fe:af: 66:cc:72:dd:ac:b6:84:f2:12:da:fa:57:c2:66:a8: 23:ff:31:89:83:a9:4e:e8:0a:b2:06:ff:08:0a:6b: b5:45:6c:51:78:70:d9:ba:2c:46:34:c3:c7:0b:72: f7:98:0a:ce:8a:67:32:fb:79:8f:b0:86:ea:8e:75: 3a:99:e0:93:59:0a:60:b7:46:ef:d6:0d:30:56:4b: d4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4E:E9:4E:9E:10:9D:A0:D4:19:41:C7:12:51:53:6E:8F:A0:0C:6D X509v3 Authority Key Identifier: keyid:1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/NE7pTp4QnaDUGUHHElFTbo-gDG0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.33.0.0/16 37.130.160.0/19 37.136.0.0/16 37.219.0.0/16 62.44.192.0/18 62.78.96.0-62.78.255.255 62.113.160.0/19 62.165.128.0/18 62.183.128.0/17 62.197.160.0/19 62.236.0.0/15 62.241.192.0/18 78.27.64.0/18 80.64.0.0/20 81.175.128.0/17 82.128.128.0/17 82.181.0.0/16 82.203.128.0/17 83.100.0.0/17 83.102.0.0/17 84.253.192.0/18 85.23.0.0/16 85.131.0.0/17 87.92.0.0/14 87.100.128.0/17 88.148.128.0/17 89.27.0.0/17 89.166.0.0/17 91.145.64.0/18 109.108.0.0/19 159.255.224.0/19 176.93.0.0/16 178.55.0.0/16 178.75.128.0/18 185.15.212.0/22 188.67.0.0/16 188.94.64.0/21 192.107.200.0-192.107.231.255 193.143.70.0/23 193.143.73.0/24 193.143.79.0-193.143.89.255 193.143.91.0/24 193.143.93.0-193.143.95.255 194.100.0.0/16 195.10.128.0/18 212.50.128.0/19 212.86.0.0/19 212.90.64.0/19 212.146.0.0/18 212.149.128.0/17 213.139.160.0/19 213.141.96.0/19 213.186.224.0/19 213.216.192.0/18 213.243.128.0/18 217.78.192.0/19 IPv6: 2001:6e8::/29 2001:14b8::/29 2001:4078::/29 2a01:a800::/29 Signature Algorithm: sha256WithRSAEncryption 27:af:5e:8e:d2:22:d3:2e:47:03:e5:9e:a8:19:f1:6d:5e:49: 74:a5:be:da:5c:b2:03:2d:f5:46:0f:93:7f:de:c0:30:2f:97: c4:1a:08:5e:ca:71:19:b5:04:47:21:4d:b9:68:bc:3b:6b:b2: 7f:d6:c3:d9:a5:ea:9f:76:e0:1e:68:78:90:ce:3b:0b:86:e8: 4a:3b:32:12:a9:8c:ea:ae:dc:41:39:6f:a3:bd:ec:ab:3d:56: 35:06:a4:ff:f0:f7:f7:a9:6a:f0:48:d8:1c:a0:db:6f:ad:a1: db:36:2a:4e:4b:14:04:99:5e:37:48:62:a9:79:32:4c:99:bf: 57:8d:03:44:83:a2:16:57:a3:be:9d:d4:c3:ec:55:84:8d:92: 2c:bc:21:98:66:d9:5c:7e:3f:a0:ef:6a:42:ae:ed:70:41:3a: 71:ee:65:f8:b9:e9:a5:1a:b8:fb:db:00:04:70:52:69:b8:1e: 1f:df:10:1c:ff:81:7f:15:58:fa:41:46:7d:1b:2b:81:15:b0: 1f:60:f5:f3:0a:22:e3:25:74:e3:f8:d8:40:b1:d6:33:16:bb: 8d:4c:b6:90:c3:b5:f0:48:c8:ba:6a:fe:74:0a:f4:47:56:dc: ea:29:de:6a:d6:7e:0d:0d:5c:65:f4:fb:2e:df:89:f2:c9:20: a7:40:94:16 -----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgISAZt7pHcjGMdeWtOaiFZjz9dhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZDVmZWY2OTJiNGMyZDIyYmRkMDMxZmFiZmE3MTEwYjdi MzZlODEwHhcNMjYwMTAxMjIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDRlZTk0ZTllMTA5ZGEwZDQxOTQxYzcxMjUxNTM2ZThmYTAwYzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbVYiJib9G8h/oQ/1xaOtC6DmyN0 TEi3OTkHGEsgk3+Sb2fpKs9ZFe7xshoQ6F3f9AVA6EQU+ZmwJeu1dEbelHEBZgRX epjPf7VDOnXqGSSZLn3BSRVXarJaxMGBSSYzCSsFUU6do4nZeZOIwI11OE8izcU+ FqsrbvBPNbPHMLgexMkOjxovDAg2GBJwVfvLUYM7yg7SNWemnTjbyhlRKO32HlPg jDkusKyoztwqLLUJ/q9mzHLdrLaE8hLa+lfCZqgj/zGJg6lO6AqyBv8ICmu1RWxR eHDZuixGNMPHC3L3mArOimcy+3mPsIbqjnU6meCTWQpgt0bv1g0wVkvU0QIDAQAB o4IDlTCCA5EwHQYDVR0OBBYEFDRO6U6eEJ2g1BlBxxJRU26PoAxtMB8GA1UdIwQY MBaAFB/V/vaStMLSK90DH6v6cRC3s26BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDlYLTlwSzB3dElyM1FNZnFfcHhFTGV6Ym9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80OGUxYWUtOTBlOC00ZTQyLWFmM2Qt NTEwMWJlNWRkNjE1LzEvTkU3cFRwNFFuYURVR1VISEVsRlRiby1nREcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy80OGUxYWUtOTBlOC00ZTQyLWFmM2QtNTEwMWJlNWRkNjE1 LzEvSDlYLTlwSzB3dElyM1FNZnFfcHhFTGV6Ym9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBqQYIKwYBBQUHAQcBAf8EggGYMIIBlDCCAWwEAgABMIIB ZAMDACUhAwQFJYKgAwMAJYgDAwAl2wMEBj4swDALAwQFPk5gAwMAPk4DBAU+caAD BAY+pYADBAc+t4ADBAU+xaADAwE+7AMEBj7xwAMEBk4bQAMEBFBAAAMEB1GvgAME B1KAgAMDAFK1AwQHUsuAAwQHU2QAAwQHU2YAAwQGVP3AAwMAVRcDBAdVgwADAwJX XAMEB1dkgAMEB1iUgAMEB1kbAAMEB1mmAAMEBluRQAMEBW1sAAMEBZ//4AMDALBd AwMAsjcDBAayS4ADBAK5D9QDAwC8QwMEA7xeQDAMAwQDwGvIAwQDwGvgAwQBwY9G AwQAwY9JMAwDBADBj08DBAHBj1gDBADBj1swDAMEAMGPXQMEBcGPQAMDAMJkAwQG wwqAAwQF1DKAAwQF1FYAAwQF1FpAAwQG1JIAAwQH1JWAAwQF1YugAwQF1Y1gAwQF 1brgAwQG1djAAwQG1fOAAwQF2U7AMCIEAgACMBwDBQMgAQboAwUDIAEUuAMFAyAB QHgDBQMqAagAMA0GCSqGSIb3DQEBCwUAA4IBAQAnr16O0iLTLkcD5Z6oGfFtXkl0 pb7aXLIDLfVGD5N/3sAwL5fEGgheynEZtQRHIU25aLw7a7J/1sPZpeqfduAeaHiQ zjsLhuhKOzISqYzqrtxBOW+jveyrPVY1BqT/8Pf3qWrwSNgcoNtvraHbNipOSxQE mV43SGKpeTJMmb9XjQNEg6IWV6O+ndTD7FWEjZIsvCGYZtlcfj+g72pCru1wQTpx 7mX4uemlGrj72wAEcFJpuB4f3xAc/4F/FVj6QUZ9GyuBFbAfYPXzCiLjJXTj+NhA sdYzFruNTLaQw7XwSMi6av50CvRHVtzqKd5q1n4NDVxl9Psu34nyySCnQJQW -----END CERTIFICATE-----Generated at Mon Jan 26 21:09:51 2026 by rpki-client