This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/thPcIoKtIvGClErER5bdo5CQdFA.roa File: thPcIoKtIvGClErER5bdo5CQdFA.roa (raw, json) Hash identifier: QWILRzmfJX8rKEdEf9H7lFVPcks7wmmtzCOKcF4i6bw= Subject key identifier: B6:13:DC:22:82:AD:22:F1:82:94:4A:C4:47:96:DD:A3:90:90:74:50 Certificate issuer: /CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db Certificate serial: 019B7D5C3D529A8ADD39BECB371957F099C5 Authority key identifier: DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/thPcIoKtIvGClErER5bdo5CQdFA.roa Signing time: Fri 02 Jan 2026 06:19:15 +0000 ROA not before: Fri 02 Jan 2026 06:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41960 IP address blocks: 2.56.216.0/22 maxlen: 24 5.183.132.0/22 maxlen: 24 37.148.184.0/21 maxlen: 24 45.10.124.0/22 maxlen: 24 45.95.252.0/22 maxlen: 24 45.140.156.0/22 maxlen: 24 45.151.116.0/22 maxlen: 24 77.73.224.0/21 maxlen: 24 85.184.8.0/21 maxlen: 24 91.202.210.0/24 maxlen: 24 93.188.64.0/22 maxlen: 24 94.142.253.0/24 maxlen: 24 151.248.16.0/22 maxlen: 24 171.22.176.0/22 maxlen: 24 185.112.73.0/24 maxlen: 24 185.116.12.0/22 maxlen: 24 185.234.152.0/23 maxlen: 24 185.234.154.0/24 maxlen: 24 185.239.168.0/23 maxlen: 24 185.239.170.0/24 maxlen: 24 185.249.136.0/22 maxlen: 24 185.251.152.0/22 maxlen: 24 185.253.48.0/22 maxlen: 24 193.105.183.0/24 maxlen: 24 194.61.84.0/24 maxlen: 24 194.61.86.0/24 maxlen: 24 195.184.86.0/23 maxlen: 24 195.184.90.0/23 maxlen: 24 195.238.86.0/23 maxlen: 24 212.18.105.0/24 maxlen: 24 212.19.192.0/19 maxlen: 24 212.26.192.0/19 maxlen: 24 212.57.48.0/20 maxlen: 24 213.156.0.0/20 maxlen: 24 213.173.56.0/22 maxlen: 24 217.8.96.0/20 maxlen: 24 2001:6e0::/29 maxlen: 48 2a02:690::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:3d:52:9a:8a:dd:39:be:cb:37:19:57:f0:99:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db Validity Not Before: Jan 2 06:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b613dc2282ad22f182944ac44796dda390907450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:38:24:94:14:c4:8c:d5:be:a0:3c:af:48:6e: 22:6a:83:fc:72:46:26:a0:45:2e:42:52:00:56:91: 65:eb:2d:01:74:88:2b:68:29:48:5d:f4:2e:a6:00: c2:c0:6f:09:55:c8:de:17:4a:de:8a:c8:f8:94:4f: 53:d6:d0:99:70:6e:82:c8:d5:cc:4d:fc:3c:5a:f1: b2:75:6c:de:8f:3c:92:3a:a2:c5:7d:22:1f:f0:bd: 79:e4:ea:f2:65:8c:c2:16:e3:b6:4d:c8:74:e6:6b: 44:2e:6b:5e:92:b4:a2:3e:ce:a9:ff:80:57:1e:7a: 32:ec:75:8d:a7:25:3e:00:71:97:4d:99:95:ab:9d: 29:40:4f:d7:d9:98:47:41:be:38:c5:b8:64:ec:a8: 7e:0c:a5:41:71:d7:99:d8:ea:fe:e8:d3:13:de:48: df:0f:79:b7:4b:00:66:e0:aa:ab:86:3d:d7:a6:33: 4a:b4:e7:f7:52:38:ef:f5:5a:e6:9a:8e:68:f2:c6: f9:f1:2e:ee:ae:91:a8:3a:51:e7:b4:03:d7:b6:36: 4d:e7:55:ed:d1:5e:27:45:1e:9c:18:1f:11:bf:df: 9c:0c:c8:12:72:f0:06:6f:ff:32:1d:a8:20:12:85: f4:51:ff:a5:26:21:20:40:72:16:39:aa:66:f6:12: 47:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:13:DC:22:82:AD:22:F1:82:94:4A:C4:47:96:DD:A3:90:90:74:50 X509v3 Authority Key Identifier: keyid:DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/thPcIoKtIvGClErER5bdo5CQdFA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.216.0/22 5.183.132.0/22 37.148.184.0/21 45.10.124.0/22 45.95.252.0/22 45.140.156.0/22 45.151.116.0/22 77.73.224.0/21 85.184.8.0/21 91.202.210.0/24 93.188.64.0/22 94.142.253.0/24 151.248.16.0/22 171.22.176.0/22 185.112.73.0/24 185.116.12.0/22 185.234.152.0-185.234.154.255 185.239.168.0-185.239.170.255 185.249.136.0/22 185.251.152.0/22 185.253.48.0/22 193.105.183.0/24 194.61.84.0/24 194.61.86.0/24 195.184.86.0/23 195.184.90.0/23 195.238.86.0/23 212.18.105.0/24 212.19.192.0/19 212.26.192.0/19 212.57.48.0/20 213.156.0.0/20 213.173.56.0/22 217.8.96.0/20 IPv6: 2001:6e0::/29 2a02:690::/29 Signature Algorithm: sha256WithRSAEncryption 8f:fd:0b:b5:29:1e:2d:81:2d:80:ab:3d:98:1e:4c:5b:ce:c1: 4c:29:ae:52:cb:4c:c5:1e:82:2a:c9:ef:97:ad:cc:28:87:27: 9f:8b:08:18:35:4d:6c:40:4c:08:31:fa:78:50:89:64:0e:21: 5e:3c:56:7d:e7:1d:f0:0e:fa:93:e6:f4:60:c8:16:38:59:29: 4e:a9:fe:90:e8:be:cd:40:0a:a1:b0:fe:d3:54:6f:f2:0f:ba: ee:27:64:25:12:78:52:1e:55:0a:29:ad:8d:10:b0:58:f6:c9: 6b:1d:ca:57:ae:b2:54:18:32:3d:2e:51:52:ac:60:35:66:0a: 02:60:b2:ca:14:8c:68:ea:36:e2:59:42:53:2e:01:13:43:26: 03:c1:13:69:c5:3f:47:84:54:c7:51:55:ec:8d:ea:97:27:55: f4:41:0d:c8:c8:0e:78:6b:a0:b7:91:41:fb:00:cb:82:08:3f: 92:73:84:4c:3f:9b:e4:61:ff:fd:7e:49:93:4a:df:69:87:6a: 7d:be:6a:48:7c:f5:bb:57:bb:d3:a2:fc:11:12:74:01:39:a4: 8c:49:99:0d:d0:ad:98:b4:1a:63:7b:2b:bf:8c:71:e5:d4:0b: d3:68:49:6f:ef:0b:22:cd:7f:ff:27:b7:e2:86:7c:26:11:ef: 1b:aa:49:7d -----BEGIN CERTIFICATE----- MIIF7zCCBNegAwIBAgISAZt9XD1SmordOb7LNxlX8JnFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYTEyMjA3YWY0ZDE4NmM0NGRhMjUzM2MwYjhmMWZkMWY1 NWQ4ZGIwHhcNMjYwMTAyMDYxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjEzZGMyMjgyYWQyMmYxODI5NDRhYzQ0Nzk2ZGRhMzkwOTA3NDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTgklBTEjNW+oDyvSG4iaoP8ckYm oEUuQlIAVpFl6y0BdIgraClIXfQupgDCwG8JVcjeF0reisj4lE9T1tCZcG6CyNXM Tfw8WvGydWzejzySOqLFfSIf8L155OryZYzCFuO2Tch05mtELmtekrSiPs6p/4BX Hnoy7HWNpyU+AHGXTZmVq50pQE/X2ZhHQb44xbhk7Kh+DKVBcdeZ2Or+6NMT3kjf D3m3SwBm4Kqrhj3XpjNKtOf3Ujjv9Vrmmo5o8sb58S7urpGoOlHntAPXtjZN51Xt 0V4nRR6cGB8Rv9+cDMgScvAGb/8yHaggEoX0Uf+lJiEgQHIWOapm9hJHyQIDAQAB o4IC+zCCAvcwHQYDVR0OBBYEFLYT3CKCrSLxgpRKxEeW3aOQkHRQMB8GA1UdIwQY MBaAFNuhIgevTRhsRNolM8C48f0fVdjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjZFaUI2OU5HR3hFMmlVendManhfUjlWMk5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jODAxMGUtMzI4OS00YTM2LWEyYjgt MTJiMmJjNTgwNTNhLzEvdGhQY0lvS3RJdkdDbEVyRVI1YmRvNUNRZEZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9jODAxMGUtMzI4OS00YTM2LWEyYjgtMTJiMmJjNTgwNTNh LzEvMjZFaUI2OU5HR3hFMmlVendManhfUjlWMk5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBDwYIKwYBBQUHAQcBAf8Egf8wgfwwgeMEAgABMIHcAwQC AjjYAwQCBbeEAwQDJZS4AwQCLQp8AwQCLV/8AwQCLYycAwQCLZd0AwQDTUngAwQD VbgIAwQAW8rSAwQCXbxAAwQAXo79AwQCl/gQAwQCqxawAwQAuXBJAwQCuXQMMAwD BAO56pgDBAC56powDAMEA7nvqAMEALnvqgMEArn5iAMEArn7mAMEArn9MAMEAMFp twMEAMI9VAMEAMI9VgMEAcO4VgMEAcO4WgMEAcPuVgMEANQSaQMEBdQTwAMEBdQa wAMEBNQ5MAMEBNWcAAMEAtWtOAMEBNkIYDAUBAIAAjAOAwUDIAEG4AMFAyoCBpAw DQYJKoZIhvcNAQELBQADggEBAI/9C7UpHi2BLYCrPZgeTFvOwUwprlLLTMUegirJ 75etzCiHJ5+LCBg1TWxATAgx+nhQiWQOIV48Vn3nHfAO+pPm9GDIFjhZKU6p/pDo vs1ACqGw/tNUb/IPuu4nZCUSeFIeVQoprY0QsFj2yWsdyleuslQYMj0uUVKsYDVm CgJgssoUjGjqNuJZQlMuARNDJgPBE2nFP0eEVMdRVeyN6pcnVfRBDcjIDnhroLeR QfsAy4IIP5JzhEw/m+Rh//1+SZNK32mHan2+akh89btXu9Oi/BESdAE5pIxJmQ3Q rZi0GmN7K7+MceXUC9NoSW/vCyLNf/8nt+KGfCYR7xuqSX0= -----END CERTIFICATE-----Generated at Mon Jan 26 23:42:50 2026 by rpki-client