This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sKSQxiv0SOBGOi7FexkRsfKcylk.roa File: sKSQxiv0SOBGOi7FexkRsfKcylk.roa (raw, json) Hash identifier: zL/H3NlJCoXcLTrbeORj36UcQnWaMawDBUw2XzgcCrM= Subject key identifier: B0:A4:90:C6:2B:F4:48:E0:46:3A:2E:C5:7B:19:11:B1:F2:9C:CA:59 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019BEC39D136CE2C84AB783E78AF9AF07A1C Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sKSQxiv0SOBGOi7FexkRsfKcylk.roa Signing time: Fri 23 Jan 2026 18:59:30 +0000 ROA not before: Fri 23 Jan 2026 18:59:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 185.72.10.0/24 maxlen: 24 192.124.190.0/24 maxlen: 24 193.124.4.0/24 maxlen: 24 193.124.7.0/24 maxlen: 24 193.124.18.0/24 maxlen: 24 193.124.89.0/24 maxlen: 24 193.124.205.0/24 maxlen: 24 193.124.226.0/24 maxlen: 24 194.58.58.0/24 maxlen: 24 194.58.155.0/24 maxlen: 24 194.58.223.0/24 maxlen: 24 194.87.33.0/24 maxlen: 24 194.87.52.0/24 maxlen: 24 194.87.53.0/24 maxlen: 24 194.87.59.0/24 maxlen: 24 194.87.61.0/24 maxlen: 24 194.87.75.0/24 maxlen: 24 194.87.78.0/24 maxlen: 24 194.87.119.0/24 maxlen: 24 194.87.126.0/24 maxlen: 24 194.87.136.0/24 maxlen: 24 194.87.152.0/24 maxlen: 24 194.87.169.0/24 maxlen: 24 194.87.179.0/24 maxlen: 24 194.87.192.0/24 maxlen: 24 194.87.193.0/24 maxlen: 24 194.87.194.0/24 maxlen: 24 194.87.195.0/24 maxlen: 24 194.87.212.0/24 maxlen: 24 194.87.228.0/24 maxlen: 24 194.87.229.0/24 maxlen: 24 194.87.231.0/24 maxlen: 24 194.135.24.0/24 maxlen: 24 195.133.19.0/24 maxlen: 24 195.133.24.0/23 maxlen: 23 195.133.29.0/24 maxlen: 24 195.133.35.0/24 maxlen: 24 195.133.40.0/23 maxlen: 23 195.133.50.0/23 maxlen: 23 195.133.57.0/24 maxlen: 24 195.133.58.0/24 maxlen: 24 195.133.92.0/23 maxlen: 23 212.192.241.0/24 maxlen: 24 212.192.242.0/24 maxlen: 24 212.192.247.0/24 maxlen: 24 212.192.249.0/24 maxlen: 24 212.193.0.0/24 maxlen: 24 212.193.26.0/23 maxlen: 23 2a01:57c0::/29 maxlen: 29 2a0c:ff40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ec:39:d1:36:ce:2c:84:ab:78:3e:78:af:9a:f0:7a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 23 18:59:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0a490c62bf448e0463a2ec57b1911b1f29cca59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0a:9e:53:66:05:cc:a5:71:5e:c9:c4:b1:1e: 41:ae:f1:29:c9:1c:cd:cb:53:87:d1:ae:1e:f8:c0: 90:33:ad:45:c8:cc:26:da:8a:73:de:a3:8f:7c:18: 3a:9b:ac:8a:45:a1:92:52:c2:76:d4:18:94:13:69: c2:08:fc:0c:9f:fb:f1:7c:64:ed:69:3e:50:92:3c: 3f:58:cf:97:fd:48:e6:00:0c:4c:a3:82:55:53:32: a8:52:1a:5a:36:74:31:e7:bb:f1:45:22:73:60:16: 8e:ec:67:03:a3:81:70:d1:fa:3e:22:a9:eb:b3:72: 52:a8:ad:5d:c7:01:54:97:8d:50:b8:1a:3b:c3:b8: 2d:42:06:e3:95:d3:26:b6:68:8a:b6:3e:12:73:3f: 76:fa:28:4a:c6:77:8b:f2:b6:50:b2:1a:9d:31:5a: a8:a9:68:79:12:d6:96:38:e6:ce:df:5d:58:58:a0: 65:0a:6d:7d:4b:56:d8:df:8d:46:bc:03:32:e4:3e: d1:81:a8:de:b9:a9:5c:91:88:54:9d:6a:d6:fc:6a: d1:bd:1f:e8:36:b0:7b:4a:51:95:a7:29:7b:04:4e: cc:8e:f6:04:47:6e:95:8d:38:30:11:c3:af:8b:6a: a3:1b:74:2e:8d:45:d0:1b:39:16:2b:74:90:de:8b: 8a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A4:90:C6:2B:F4:48:E0:46:3A:2E:C5:7B:19:11:B1:F2:9C:CA:59 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sKSQxiv0SOBGOi7FexkRsfKcylk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.72.10.0/24 192.124.190.0/24 193.124.4.0/24 193.124.7.0/24 193.124.18.0/24 193.124.89.0/24 193.124.205.0/24 193.124.226.0/24 194.58.58.0/24 194.58.155.0/24 194.58.223.0/24 194.87.33.0/24 194.87.52.0/23 194.87.59.0/24 194.87.61.0/24 194.87.75.0/24 194.87.78.0/24 194.87.119.0/24 194.87.126.0/24 194.87.136.0/24 194.87.152.0/24 194.87.169.0/24 194.87.179.0/24 194.87.192.0/22 194.87.212.0/24 194.87.228.0/23 194.87.231.0/24 194.135.24.0/24 195.133.19.0/24 195.133.24.0/23 195.133.29.0/24 195.133.35.0/24 195.133.40.0/23 195.133.50.0/23 195.133.57.0-195.133.58.255 195.133.92.0/23 212.192.241.0-212.192.242.255 212.192.247.0/24 212.192.249.0/24 212.193.0.0/24 212.193.26.0/23 IPv6: 2a01:57c0::/29 2a0c:ff40::/29 Signature Algorithm: sha256WithRSAEncryption 36:5c:61:d9:48:ea:86:86:e5:67:8b:68:3d:6c:b3:0e:d2:e2: 1f:a5:11:a8:03:1d:a5:aa:a0:82:c8:57:dd:60:58:af:4b:88: da:4c:ae:9e:f0:57:b8:bf:fb:a8:e4:48:71:d9:5f:45:99:68: 17:00:a4:fe:19:b5:97:ae:cb:90:18:ae:94:94:67:bd:10:74: 17:61:7a:9c:2e:23:33:8b:3d:ed:e2:8b:c9:24:9a:e2:9e:93: 4a:68:9d:3a:6d:f8:db:c2:ca:d5:33:f0:41:e1:14:c5:64:69: f2:5b:59:ed:84:d0:3e:f6:49:f7:2e:b2:ed:94:5a:b8:a9:47: 8e:4b:c1:5e:81:ff:56:90:5b:d1:90:d9:66:78:91:c9:fc:24: a9:cd:ab:a7:42:d6:66:ef:ef:21:b9:af:30:d3:47:47:93:d8: 97:4d:e3:5c:57:58:07:0a:73:8b:20:38:47:b4:7a:1e:6f:c8: f3:b9:fb:64:c1:00:94:d2:c7:94:33:4b:f6:f2:53:9b:77:ec: c9:db:24:80:53:bf:b2:dd:69:22:65:18:e1:46:ba:99:cc:87: 01:03:4f:fb:32:91:ff:f8:c4:cf:45:35:f3:60:95:47:e0:c5: 2f:50:ac:5a:6c:e2:fc:bd:55:34:ab:8f:1d:14:af:86:ec:b8: e9:d5:bd:92 -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgISAZvsOdE2ziyEq3g+eK+a8HocMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTIzMTg1OTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGE0OTBjNjJiZjQ0OGUwNDYzYTJlYzU3YjE5MTFiMWYyOWNjYTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwqeU2YFzKVxXsnEsR5BrvEpyRzN y1OH0a4e+MCQM61FyMwm2opz3qOPfBg6m6yKRaGSUsJ21BiUE2nCCPwMn/vxfGTt aT5Qkjw/WM+X/UjmAAxMo4JVUzKoUhpaNnQx57vxRSJzYBaO7GcDo4Fw0fo+Iqnr s3JSqK1dxwFUl41QuBo7w7gtQgbjldMmtmiKtj4Scz92+ihKxneL8rZQshqdMVqo qWh5EtaWOObO311YWKBlCm19S1bY341GvAMy5D7RgajeualckYhUnWrW/GrRvR/o NrB7SlGVpyl7BE7MjvYER26VjTgwEcOvi2qjG3QujUXQGzkWK3SQ3ouKcQIDAQAB o4IDKTCCAyUwHQYDVR0OBBYEFLCkkMYr9EjgRjouxXsZEbHynMpZMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvc0tTUXhpdjBTT0JHT2k3RmV4a1JzZktjeWxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBPQYIKwYBBQUHAQcBAf8EggEsMIIBKDCCAQ4EAgABMIIB BgMEALlICgMEAMB8vgMEAMF8BAMEAMF8BwMEAMF8EgMEAMF8WQMEAMF8zQMEAMF8 4gMEAMI6OgMEAMI6mwMEAMI63wMEAMJXIQMEAcJXNAMEAMJXOwMEAMJXPQMEAMJX SwMEAMJXTgMEAMJXdwMEAMJXfgMEAMJXiAMEAMJXmAMEAMJXqQMEAMJXswMEAsJX wAMEAMJX1AMEAcJX5AMEAMJX5wMEAMKHGAMEAMOFEwMEAcOFGAMEAMOFHQMEAMOF IwMEAcOFKAMEAcOFMjAMAwQAw4U5AwQAw4U6AwQBw4VcMAwDBADUwPEDBADUwPID BADUwPcDBADUwPkDBADUwQADBAHUwRowFAQCAAIwDgMFAyoBV8ADBQMqDP9AMA0G CSqGSIb3DQEBCwUAA4IBAQA2XGHZSOqGhuVni2g9bLMO0uIfpRGoAx2lqqCCyFfd YFivS4jaTK6e8Fe4v/uo5Ehx2V9FmWgXAKT+GbWXrsuQGK6UlGe9EHQXYXqcLiMz iz3t4ovJJJrinpNKaJ06bfjbwsrVM/BB4RTFZGnyW1nthNA+9kn3LrLtlFq4qUeO S8Fegf9WkFvRkNlmeJHJ/CSpzaunQtZm7+8hua8w00dHk9iXTeNcV1gHCnOLIDhH tHoeb8jzuftkwQCU0seUM0v28lObd+zJ2ySAU7+y3WkiZRjhRrqZzIcBA0/7MpH/ +MTPRTXzYJVH4MUvUKxabOL8vVU0q48dFK+G7Ljp1b2S -----END CERTIFICATE-----Generated at Sun Jan 25 21:58:27 2026 by rpki-client