This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/IIegb6cWbpL6NhxIA59R0LStrog.roa File: IIegb6cWbpL6NhxIA59R0LStrog.roa (raw, json) Hash identifier: LUWiOn6fZDRMgYsCYhABBAG0QBLz/uUpM0vTg4+6Jj8= Subject key identifier: 20:87:A0:6F:A7:16:6E:92:FA:36:1C:48:03:9F:51:D0:B4:AD:AE:88 Certificate issuer: /CN=07664130764480ef2dd8178116b5dd0c59d2e994 Certificate serial: 019BE0C9F419B5D7083F7981B536D828CFC2 Authority key identifier: 07:66:41:30:76:44:80:EF:2D:D8:17:81:16:B5:DD:0C:59:D2:E9:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/IIegb6cWbpL6NhxIA59R0LStrog.roa Signing time: Wed 21 Jan 2026 13:41:30 +0000 ROA not before: Wed 21 Jan 2026 13:41:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214476 IP address blocks: 5.182.62.0/24 maxlen: 24 2a01:e000::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:c9:f4:19:b5:d7:08:3f:79:81:b5:36:d8:28:cf:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07664130764480ef2dd8178116b5dd0c59d2e994 Validity Not Before: Jan 21 13:41:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2087a06fa7166e92fa361c48039f51d0b4adae88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ab:d5:3f:8d:07:29:57:e0:66:ff:cd:85:6c: 32:b6:b6:23:9f:9d:ea:5c:8a:0b:19:94:04:32:c1: bf:de:87:ea:08:ec:e4:53:6e:ad:75:20:ee:0c:7c: 31:a8:ea:ef:7d:1a:2e:d1:f3:5c:06:0e:5d:ec:a6: 83:d9:6b:63:9c:09:ff:60:32:bc:49:02:69:e8:da: 3a:5e:d2:af:00:42:70:8c:11:8b:7a:b2:9d:74:ab: b8:ae:21:ec:fa:8c:25:2a:68:d1:18:ec:7f:6b:83: 5a:ad:e6:af:da:c7:17:31:a5:cf:df:7a:e7:36:f9: fc:4f:0c:e6:28:e5:29:36:5c:e1:34:e7:c8:da:22: 2b:2c:f1:5a:39:5d:d3:47:7b:1d:a4:d7:57:24:61: 7c:d1:78:d5:2f:0b:86:64:ce:7f:69:1f:39:31:26: 2f:19:16:c3:2a:42:19:79:92:6c:1d:e1:7b:10:86: 84:53:5a:c5:22:df:d5:23:c5:80:21:fd:db:63:68: 05:9e:54:1d:dc:1c:85:91:66:53:ca:43:a3:6d:b1: f7:94:a6:49:c9:1b:73:ec:75:df:a1:cc:ac:96:61: 4f:0f:3a:b2:4b:05:d7:71:81:c3:3c:e1:d6:e3:69: e6:9e:c2:31:03:0f:4d:cc:51:cb:98:de:c0:e5:2c: 27:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:87:A0:6F:A7:16:6E:92:FA:36:1C:48:03:9F:51:D0:B4:AD:AE:88 X509v3 Authority Key Identifier: keyid:07:66:41:30:76:44:80:EF:2D:D8:17:81:16:B5:DD:0C:59:D2:E9:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/IIegb6cWbpL6NhxIA59R0LStrog.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.62.0/24 IPv6: 2a01:e000::/29 Signature Algorithm: sha256WithRSAEncryption 0f:d5:64:b3:c9:8e:4d:62:a1:42:ad:52:8e:bf:bf:22:45:47: 7d:71:24:c7:45:c9:76:84:c0:ec:b5:44:1c:1e:b3:fb:4d:2f: 22:01:ea:a7:88:83:18:dc:4f:d3:93:1f:38:8f:9c:e7:67:f3: 56:18:45:d3:59:c9:7b:20:2f:ad:32:f6:d1:e4:7f:41:c5:ed: 0f:0d:75:81:46:6c:8e:66:bc:db:4b:9a:23:a7:12:fd:7d:09: 08:14:52:dd:87:70:fa:40:22:9b:6f:7d:78:5d:90:9b:31:37: c4:ad:09:69:2a:09:d5:a2:e4:bc:16:9d:1f:da:3e:db:c2:48: de:89:9b:23:04:62:10:90:06:ba:d1:5b:17:dd:9c:81:2e:d3: 84:41:67:50:c9:ec:c9:77:c4:83:63:64:ce:35:03:7b:ef:fb: 38:71:b6:5b:94:09:71:2e:d7:bd:c0:75:35:9d:bd:6a:73:a8: 91:60:3b:07:06:68:d7:5e:e6:d4:fd:23:f8:d0:38:5c:df:ea: 29:92:f2:8c:cc:51:80:01:ea:11:4d:c1:21:4e:c6:7e:e5:f9: 48:5a:a2:21:8f:c9:2b:7c:da:ed:c3:0d:bf:44:ed:08:ba:33: 57:aa:cd:72:dd:6c:d9:75:f9:fb:b0:c4:01:d8:bf:b4:7f:01: 2c:cb:04:2a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZvgyfQZtdcIP3mBtTbYKM/CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NjY0MTMwNzY0NDgwZWYyZGQ4MTc4MTE2YjVkZDBjNTlk MmU5OTQwHhcNMjYwMTIxMTM0MTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDg3YTA2ZmE3MTY2ZTkyZmEzNjFjNDgwMzlmNTFkMGI0YWRhZTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKvVP40HKVfgZv/NhWwytrYjn53q XIoLGZQEMsG/3ofqCOzkU26tdSDuDHwxqOrvfRou0fNcBg5d7KaD2WtjnAn/YDK8 SQJp6No6XtKvAEJwjBGLerKddKu4riHs+owlKmjRGOx/a4Nareav2scXMaXP33rn Nvn8TwzmKOUpNlzhNOfI2iIrLPFaOV3TR3sdpNdXJGF80XjVLwuGZM5/aR85MSYv GRbDKkIZeZJsHeF7EIaEU1rFIt/VI8WAIf3bY2gFnlQd3ByFkWZTykOjbbH3lKZJ yRtz7HXfocyslmFPDzqySwXXcYHDPOHW42nmnsIxAw9NzFHLmN7A5SwnHQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCCHoG+nFm6S+jYcSAOfUdC0ra6IMB8GA1UdIwQY MBaAFAdmQTB2RIDvLdgXgRa13QxZ0umUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjJaQk1IWkVnTzh0MkJlQkZyWGRERm5TNlpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82YjIxZDQtMzI4Ny00ZDM1LTgyZDUt MTFlMTJmOTViNTI5LzEvSUllZ2I2Y1dicEw2Tmh4SUE1OVIwTFN0cm9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi82YjIxZDQtMzI4Ny00ZDM1LTgyZDUtMTFlMTJmOTViNTI5 LzEvQjJaQk1IWkVnTzh0MkJlQkZyWGRERm5TNlpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQABbY+MA0E AgACMAcDBQMqAeAAMA0GCSqGSIb3DQEBCwUAA4IBAQAP1WSzyY5NYqFCrVKOv78i RUd9cSTHRcl2hMDstUQcHrP7TS8iAeqniIMY3E/Tkx84j5znZ/NWGEXTWcl7IC+t MvbR5H9Bxe0PDXWBRmyOZrzbS5ojpxL9fQkIFFLdh3D6QCKbb314XZCbMTfErQlp KgnVouS8Fp0f2j7bwkjeiZsjBGIQkAa60VsX3ZyBLtOEQWdQyezJd8SDY2TONQN7 7/s4cbZblAlxLte9wHU1nb1qc6iRYDsHBmjXXubU/SP40Dhc3+opkvKMzFGAAeoR TcEhTsZ+5flIWqIhj8krfNrtww2/RO0IujNXqs1y3WzZdfn7sMQB2L+0fwEsywQq -----END CERTIFICATE-----Generated at Mon Feb 2 07:57:17 2026 by rpki-client