This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/tA0K8bGZYQr51ts9fgVMQNNETk0.roa File: tA0K8bGZYQr51ts9fgVMQNNETk0.roa (raw, json) Hash identifier: tyQ/+T3yjAq3vDmdw3JjnFixVEUOuWwoh0sIsij3a8o= Subject key identifier: B4:0D:0A:F1:B1:99:61:0A:F9:D6:DB:3D:7E:05:4C:40:D3:44:4E:4D Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b Certificate serial: 019B7DCABC98C2AB0813273CEA0611D48F58 Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/tA0K8bGZYQr51ts9fgVMQNNETk0.roa Signing time: Fri 02 Jan 2026 08:19:57 +0000 ROA not before: Fri 02 Jan 2026 08:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21500 IP address blocks: 62.106.68.0/24 maxlen: 24 81.17.129.0/24 maxlen: 24 81.17.130.0/24 maxlen: 24 81.17.130.194/32 maxlen: 32 81.17.130.198/32 maxlen: 32 81.17.133.0/24 maxlen: 24 81.17.134.0/24 maxlen: 24 81.17.135.0/24 maxlen: 24 81.17.136.0/24 maxlen: 24 81.17.140.0/24 maxlen: 24 81.17.142.0/24 maxlen: 24 85.90.200.0/22 maxlen: 22 92.118.136.0/22 maxlen: 22 92.118.224.0/24 maxlen: 24 92.118.225.0/24 maxlen: 24 92.118.226.0/24 maxlen: 24 195.69.184.0/22 maxlen: 24 195.69.184.0/24 maxlen: 24 195.69.185.0/24 maxlen: 24 195.69.186.0/24 maxlen: 24 195.234.220.0/22 maxlen: 22 2a06:6200::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:bc:98:c2:ab:08:13:27:3c:ea:06:11:d4:8f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b Validity Not Before: Jan 2 08:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b40d0af1b199610af9d6db3d7e054c40d3444e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:09:f1:86:9b:0b:da:d4:d2:98:28:0e:92:bd: 06:4e:54:55:4d:94:27:f2:15:02:94:9c:6b:35:1f: a5:f8:e8:7c:91:a2:cb:77:11:33:05:0e:7d:68:d1: 7e:56:02:19:55:24:44:1e:2e:4e:63:f7:6a:10:cb: 91:ed:96:66:99:fa:25:72:3d:8f:4a:5d:e3:cc:4a: df:98:7f:e9:9f:ec:77:3f:62:b7:7a:eb:21:19:28: 15:a9:4e:36:94:b0:f7:3c:44:1a:c6:e2:cc:e0:b1: 7d:85:fe:80:8c:8e:aa:a2:89:ad:56:f9:b8:7d:01: 04:e3:09:e3:cc:15:31:1f:06:6e:90:e3:e1:47:69: 03:c3:61:35:ed:89:82:ab:3e:bb:e8:08:dd:d5:9f: 61:31:a4:6f:f4:42:be:b1:16:8b:57:f9:80:6d:6f: 72:54:91:17:32:d8:22:2f:1d:ab:dc:6c:23:b1:02: f3:34:ab:ea:41:14:c2:65:99:d7:c7:23:9d:2d:cc: c5:a6:c0:7c:c8:ba:6c:d9:13:b5:63:e3:b3:81:9b: 1c:cb:3f:38:fb:65:c0:9a:67:20:42:30:d3:39:2f: 9f:d9:20:cc:73:01:65:81:23:93:63:0b:c7:33:bc: 1c:35:ab:ae:5a:9e:c1:f1:a3:04:0e:f2:f1:08:21: 77:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0D:0A:F1:B1:99:61:0A:F9:D6:DB:3D:7E:05:4C:40:D3:44:4E:4D X509v3 Authority Key Identifier: keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/tA0K8bGZYQr51ts9fgVMQNNETk0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.106.68.0/24 81.17.129.0-81.17.130.255 81.17.133.0-81.17.136.255 81.17.140.0/24 81.17.142.0/24 85.90.200.0/22 92.118.136.0/22 92.118.224.0-92.118.226.255 195.69.184.0/22 195.234.220.0/22 IPv6: 2a06:6200::/29 Signature Algorithm: sha256WithRSAEncryption 42:53:c7:5f:0e:00:72:21:3a:fb:a5:08:3a:26:ac:71:3a:a1: 41:1a:ca:bb:66:83:82:25:3d:99:ac:33:f2:9f:65:e7:a0:a0: d7:a5:28:c1:98:9f:bf:61:35:80:ae:2b:5d:ca:ce:d9:93:4a: f4:b4:47:b8:70:57:65:5e:a7:33:8d:a7:51:ff:ef:cb:82:85: e6:87:44:44:78:f1:de:22:5d:0b:23:9f:6f:9f:2d:10:8e:36: e2:36:60:2d:c0:a9:9a:fa:72:95:d5:e8:b6:ee:ba:6b:5c:75: 75:9b:c8:d4:62:82:58:98:6c:a8:de:bf:09:fc:fb:bd:1a:64: b8:f1:79:04:4b:e2:71:f9:29:ed:de:4e:b9:6a:b3:71:14:53: 4f:ac:e3:5f:d4:37:52:40:6c:28:46:2a:02:32:57:f4:14:f7: b9:15:8a:0d:ce:3b:bd:9a:38:79:67:b1:93:d6:42:58:48:45: ce:1e:3b:87:e5:9a:47:eb:78:b7:98:cb:cc:0e:ae:76:d1:9c: b3:9a:b1:51:a2:95:e5:49:07:df:e8:b6:b7:b2:64:6e:2d:b8: 50:25:38:1a:8d:b8:b8:06:d6:c6:2d:ef:cd:ea:a5:98:3f:74: 32:80:37:fb:cd:7a:7f:7b:ff:6f:18:72:d1:93:8d:74:f5:86: 9c:68:7a:6b -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgISAZt9yryYwqsIEyc86gYR1I9YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNTc0YzI4NzhkNmI1MzYxMzliODk1ZjA4YzljNmRiMThl MTJhOWIwHhcNMjYwMTAyMDgxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDBkMGFmMWIxOTk2MTBhZjlkNmRiM2Q3ZTA1NGM0MGQzNDQ0ZTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgnxhpsL2tTSmCgOkr0GTlRVTZQn 8hUClJxrNR+l+Oh8kaLLdxEzBQ59aNF+VgIZVSREHi5OY/dqEMuR7ZZmmfolcj2P Sl3jzErfmH/pn+x3P2K3eushGSgVqU42lLD3PEQaxuLM4LF9hf6AjI6qoomtVvm4 fQEE4wnjzBUxHwZukOPhR2kDw2E17YmCqz676Ajd1Z9hMaRv9EK+sRaLV/mAbW9y VJEXMtgiLx2r3GwjsQLzNKvqQRTCZZnXxyOdLczFpsB8yLps2RO1Y+OzgZscyz84 +2XAmmcgQjDTOS+f2SDMcwFlgSOTYwvHM7wcNauuWp7B8aMEDvLxCCF3lQIDAQAB o4ICZjCCAmIwHQYDVR0OBBYEFLQNCvGxmWEK+dbbPX4FTEDTRE5NMB8GA1UdIwQY MBaAFOBXTCh41rU2E5uJXwjJxtsY4SqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUt NDQ2MDE5OTY2YTE5LzEvdEEwSzhiR1pZUXI1MXRzOWZnVk1RTk5FVGswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUtNDQ2MDE5OTY2YTE5 LzEvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEHAQH/BG0wazBaBAIAATBUAwQAPmpEMAwD BABREYEDBABREYIwDAMEAFERhQMEAFERiAMEAFERjAMEAFERjgMEAlVayAMEAlx2 iDAMAwQFXHbgAwQAXHbiAwQCw0W4AwQCw+rcMA0EAgACMAcDBQMqBmIAMA0GCSqG SIb3DQEBCwUAA4IBAQBCU8dfDgByITr7pQg6JqxxOqFBGsq7ZoOCJT2ZrDPyn2Xn oKDXpSjBmJ+/YTWAritdys7Zk0r0tEe4cFdlXqczjadR/+/LgoXmh0REePHeIl0L I59vny0QjjbiNmAtwKma+nKV1ei27rprXHV1m8jUYoJYmGyo3r8J/Pu9GmS48XkE S+Jx+Snt3k65arNxFFNPrONf1DdSQGwoRioCMlf0FPe5FYoNzju9mjh5Z7GT1kJY SEXOHjuH5ZpH63i3mMvMDq520ZyzmrFRopXlSQff6La3smRuLbhQJTgajbi4BtbG Le/N6qWYP3QygDf7zXp/e/9vGHLRk4109YacaHpr -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:13 2026 by rpki-client