This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/RMFqaLIJrXHt-_YOGji1ilLJROc.roa File: RMFqaLIJrXHt-_YOGji1ilLJROc.roa (raw, json) Hash identifier: QQQKjhswWsKoEbYzVi7KTXOzLabCgatO2tMsPwkwiQo= Subject key identifier: 44:C1:6A:68:B2:09:AD:71:ED:FB:F6:0E:1A:38:B5:8A:52:C9:44:E7 Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b Certificate serial: 019B7C11547CF3512526AD26F2898E45DFA5 Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/RMFqaLIJrXHt-_YOGji1ilLJROc.roa Signing time: Fri 02 Jan 2026 00:17:49 +0000 ROA not before: Fri 02 Jan 2026 00:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6739 IP address blocks: 2.154.0.0/15 maxlen: 16 2.154.0.0/16 maxlen: 16 2.154.192.0/18 maxlen: 18 2.155.0.0/16 maxlen: 16 5.40.0.0/16 maxlen: 16 62.42.0.0/15 maxlen: 16 62.57.0.0/16 maxlen: 16 62.81.0.0/16 maxlen: 24 62.82.0.0/15 maxlen: 16 62.100.96.0/19 maxlen: 19 62.174.0.0/15 maxlen: 19 80.224.0.0/16 maxlen: 16 81.60.0.0/15 maxlen: 18 81.184.0.0/16 maxlen: 16 81.202.0.0/16 maxlen: 16 82.159.0.0/16 maxlen: 16 82.213.128.0/18 maxlen: 18 83.173.128.0/18 maxlen: 18 84.120.0.0/13 maxlen: 19 84.127.229.0/24 maxlen: 24 85.219.0.0/17 maxlen: 17 85.251.0.0/16 maxlen: 17 89.140.0.0/16 maxlen: 17 95.39.0.0/16 maxlen: 19 185.128.128.0/22 maxlen: 24 194.106.0.0/19 maxlen: 19 194.140.128.0/18 maxlen: 18 194.149.192.0/19 maxlen: 19 212.21.224.0/19 maxlen: 19 212.40.224.0/19 maxlen: 19 212.40.224.0/24 maxlen: 24 212.78.128.0/19 maxlen: 19 212.79.128.0/19 maxlen: 19 212.95.192.0/19 maxlen: 19 212.97.160.0/19 maxlen: 19 212.183.192.0/18 maxlen: 18 213.37.0.0/16 maxlen: 16 213.201.0.0/17 maxlen: 17 213.227.0.0/18 maxlen: 18 213.231.64.0/18 maxlen: 18 2a02:a800::/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:54:7c:f3:51:25:26:ad:26:f2:89:8e:45:df:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b Validity Not Before: Jan 2 00:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44c16a68b209ad71edfbf60e1a38b58a52c944e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5a:ab:b4:14:39:4c:c5:68:a2:32:f9:41:dd: f9:9a:cf:69:eb:f0:b0:2e:3f:db:c5:20:14:49:dc: df:ef:88:c8:90:20:d4:44:a9:7f:32:c5:25:96:8b: 31:c3:80:a0:46:03:ef:70:90:0b:39:32:2a:07:53: 64:ab:0e:f8:4c:51:8c:70:57:f6:2f:a4:3a:7b:1c: 1a:99:35:52:b7:15:e0:6d:c7:90:cf:9d:52:68:5e: 47:fc:0a:56:4b:53:54:d6:9f:ce:e1:2d:03:1c:0d: 81:3d:a0:44:1d:75:1b:c5:bb:0e:bf:6b:89:d5:32: 58:04:c6:f7:50:8f:b5:2f:23:19:2a:59:2a:17:10: e5:ef:01:25:7c:23:cc:a6:6e:e2:ab:3f:ae:c8:62: ce:3f:67:8b:38:95:c1:fa:94:9c:72:5f:55:c2:90: 83:e2:bb:ca:36:01:8e:8f:55:85:2f:01:06:08:7f: 23:b0:d6:ad:f6:4a:38:b6:67:ad:e0:bd:74:87:21: 08:25:33:74:c2:ad:6e:07:87:a6:ad:b1:00:87:74: 62:a8:59:fa:7c:bc:eb:e5:3a:e3:4f:0b:5a:ba:5d: cf:2d:75:e2:69:48:14:c8:6e:15:8a:9e:f1:30:4f: 61:b3:68:ac:6f:09:c0:b7:97:05:6d:99:d2:d2:30: 38:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C1:6A:68:B2:09:AD:71:ED:FB:F6:0E:1A:38:B5:8A:52:C9:44:E7 X509v3 Authority Key Identifier: keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/RMFqaLIJrXHt-_YOGji1ilLJROc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.154.0.0/15 5.40.0.0/16 62.42.0.0/15 62.57.0.0/16 62.81.0.0-62.83.255.255 62.100.96.0/19 62.174.0.0/15 80.224.0.0/16 81.60.0.0/15 81.184.0.0/16 81.202.0.0/16 82.159.0.0/16 82.213.128.0/18 83.173.128.0/18 84.120.0.0/13 85.219.0.0/17 85.251.0.0/16 89.140.0.0/16 95.39.0.0/16 185.128.128.0/22 194.106.0.0/19 194.140.128.0/18 194.149.192.0/19 212.21.224.0/19 212.40.224.0/19 212.78.128.0/19 212.79.128.0/19 212.95.192.0/19 212.97.160.0/19 212.183.192.0/18 213.37.0.0/16 213.201.0.0/17 213.227.0.0/18 213.231.64.0/18 IPv6: 2a02:a800::/26 Signature Algorithm: sha256WithRSAEncryption 66:15:27:4e:06:64:09:0e:65:b9:39:e0:fa:f3:c0:c5:78:6a: 52:26:4a:37:9d:7a:d8:24:07:6d:a8:3b:3c:bd:05:83:0b:94: 00:f2:f4:a7:77:2a:e3:9e:b8:02:44:99:00:06:7d:c2:5d:96: d6:d9:7f:c5:22:5a:b9:f8:2d:74:17:af:ab:27:ce:d0:58:3d: 00:ed:99:32:38:06:32:c0:e9:0e:da:9d:b2:10:66:18:a6:8c: 9f:ef:93:73:c4:96:6b:73:b7:7c:9a:71:87:4c:96:a5:c4:a1: d9:c9:07:b1:89:5b:28:5b:26:73:9a:5a:28:3a:86:36:93:81: 3c:17:51:d2:a6:8c:fe:1e:f5:cc:b3:af:f8:c0:4c:f1:10:84: 42:4e:89:56:ec:ab:f9:28:98:3d:ab:ba:be:6a:ac:9b:19:31: 3f:09:8f:da:d3:58:a4:c2:4a:16:46:97:0b:1a:ac:01:33:fb: ec:f0:1b:bb:8b:d2:fb:fc:62:ab:b9:03:96:54:de:49:7a:50: ec:00:23:64:1e:59:11:a6:ff:4c:b2:c0:c9:f7:27:94:4d:9f: 58:8e:2b:d5:46:c7:bf:96:63:5a:7a:f8:58:2b:da:4e:f3:8b: 99:85:10:dc:10:38:37:4a:e4:ca:a4:71:a1:2e:5a:17:73:38: 76:85:91:f8 -----BEGIN CERTIFICATE----- MIIFzjCCBLagAwIBAgISAZt8EVR881ElJq0m8omORd+lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MzRmMTY4NjEwMjg3NmM2MjE2YmNlYTI4YTVlNTAyZWMw ZDdiNmIwHhcNMjYwMTAyMDAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGMxNmE2OGIyMDlhZDcxZWRmYmY2MGUxYTM4YjU4YTUyYzk0NGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFqrtBQ5TMVoojL5Qd35ms9p6/Cw Lj/bxSAUSdzf74jIkCDURKl/MsUllosxw4CgRgPvcJALOTIqB1Nkqw74TFGMcFf2 L6Q6exwamTVStxXgbceQz51SaF5H/ApWS1NU1p/O4S0DHA2BPaBEHXUbxbsOv2uJ 1TJYBMb3UI+1LyMZKlkqFxDl7wElfCPMpm7iqz+uyGLOP2eLOJXB+pSccl9VwpCD 4rvKNgGOj1WFLwEGCH8jsNat9ko4tmet4L10hyEIJTN0wq1uB4emrbEAh3RiqFn6 fLzr5TrjTwtaul3PLXXiaUgUyG4Vip7xME9hs2isbwnAt5cFbZnS0jA4IQIDAQAB o4IC2jCCAtYwHQYDVR0OBBYEFETBamiyCa1x7fv2Dho4tYpSyUTnMB8GA1UdIwQY MBaAFNQ08WhhAodsYha86iil5QLsDXtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2Ut NTcxMmQ5NWFlNjM4LzEvUk1GcWFMSUpyWEh0LV9ZT0dqaTFpbExKUk9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2UtNTcxMmQ5NWFlNjM4 LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHvBggrBgEFBQcBBwEB/wSB3zCB3DCBygQCAAEwgcMDAwEC mgMDAAUoAwMBPioDAwA+OTAKAwMAPlEDAwI+UAMEBT5kYAMDAT6uAwMAUOADAwFR PAMDAFG4AwMAUcoDAwBSnwMEBlLVgAMEBlOtgAMDA1R4AwQHVdsAAwMAVfsDAwBZ jAMDAF8nAwQCuYCAAwQFwmoAAwQGwoyAAwQFwpXAAwQF1BXgAwQF1CjgAwQF1E6A AwQF1E+AAwQF1F/AAwQF1GGgAwQG1LfAAwMA1SUDBAfVyQADBAbV4wADBAbV50Aw DQQCAAIwBwMFBioCqAAwDQYJKoZIhvcNAQELBQADggEBAGYVJ04GZAkOZbk54Prz wMV4alImSjedetgkB22oOzy9BYMLlADy9Kd3KuOeuAJEmQAGfcJdltbZf8UiWrn4 LXQXr6snztBYPQDtmTI4BjLA6Q7anbIQZhimjJ/vk3PElmtzt3yacYdMlqXEodnJ B7GJWyhbJnOaWig6hjaTgTwXUdKmjP4e9cyzr/jATPEQhEJOiVbsq/komD2rur5q rJsZMT8Jj9rTWKTCShZGlwsarAEz++zwG7uL0vv8Yqu5A5ZU3kl6UOwAI2QeWRGm /0yywMn3J5RNn1iOK9VGx7+WY1p6+Fgr2k7zi5mFENwQODdK5MqkcaEuWhdzOHaF kfg= -----END CERTIFICATE-----Generated at Mon Jan 26 20:41:38 2026 by rpki-client