This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/dA8NWdyS0f06Erm6RVd9DfssKjU.roa File: dA8NWdyS0f06Erm6RVd9DfssKjU.roa (raw, json) Hash identifier: IZmapnDLq3R54YRETdfjg+rEgpwO069ZWxHLiaQ38d0= Subject key identifier: 74:0F:0D:59:DC:92:D1:FD:3A:12:B9:BA:45:57:7D:0D:FB:2C:2A:35 Certificate issuer: /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb Certificate serial: 019B78354E7925DFCF6C0E5C8723F0F4AF94 Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/dA8NWdyS0f06Erm6RVd9DfssKjU.roa Signing time: Thu 01 Jan 2026 06:18:37 +0000 ROA not before: Thu 01 Jan 2026 06:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199256 IP address blocks: 5.149.168.0/21 maxlen: 24 45.137.184.0/22 maxlen: 22 81.173.12.0/22 maxlen: 24 91.216.236.0/24 maxlen: 24 91.216.241.0/24 maxlen: 24 93.119.24.0/22 maxlen: 24 144.2.240.0/21 maxlen: 24 159.253.224.0/22 maxlen: 24 185.32.152.0/22 maxlen: 24 185.57.100.0/22 maxlen: 24 185.122.132.0/22 maxlen: 24 185.156.196.0/22 maxlen: 24 2a04:b00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:4e:79:25:df:cf:6c:0e:5c:87:23:f0:f4:af:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb Validity Not Before: Jan 1 06:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=740f0d59dc92d1fd3a12b9ba45577d0dfb2c2a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f4:b1:25:a9:22:a2:27:d9:1d:ad:83:ca:77: 2b:81:ef:45:74:d7:02:fd:51:1e:8e:81:ec:8c:6f: 7a:e8:f7:4d:87:4c:1e:29:51:5b:96:08:b5:1d:59: b9:6b:03:65:2b:d0:06:cb:c6:d9:84:a3:63:24:17: b0:32:3c:f5:05:55:b3:a8:bb:07:d8:8f:ef:eb:f3: ca:ce:ca:d8:9c:58:5b:6b:49:a5:37:a4:c2:02:14: 8c:b5:fc:91:a4:84:bd:b4:e1:3f:68:b9:33:c8:98: 13:89:a8:b1:30:ad:25:dd:af:47:32:22:76:1f:7d: f4:a5:14:af:65:68:dc:6e:79:40:f2:0d:c7:f8:48: 70:f7:9a:4f:40:fb:56:87:2a:be:99:af:8a:35:27: ea:17:c7:0a:e8:45:6b:26:d7:dd:a1:af:f0:84:32: dc:0a:a4:ac:17:43:dd:d1:96:e7:86:4a:d0:51:0b: 7b:1c:3a:05:17:32:1b:a7:6a:9d:77:bb:b4:af:7f: 1a:16:62:30:a2:14:75:88:c0:1e:1c:c2:7b:86:00: 63:c7:e3:c1:22:fa:66:77:ce:f8:5f:36:67:09:28: ab:a4:cf:bd:7e:3b:cd:8e:d4:08:be:66:bb:c7:99: ac:ba:ca:c2:d8:67:54:db:0c:b8:90:a0:aa:32:dd: c8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0F:0D:59:DC:92:D1:FD:3A:12:B9:BA:45:57:7D:0D:FB:2C:2A:35 X509v3 Authority Key Identifier: keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/dA8NWdyS0f06Erm6RVd9DfssKjU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.149.168.0/21 45.137.184.0/22 81.173.12.0/22 91.216.236.0/24 91.216.241.0/24 93.119.24.0/22 144.2.240.0/21 159.253.224.0/22 185.32.152.0/22 185.57.100.0/22 185.122.132.0/22 185.156.196.0/22 IPv6: 2a04:b00::/29 Signature Algorithm: sha256WithRSAEncryption b1:44:dd:15:c0:41:b5:ab:ab:27:ae:9e:fe:b7:3a:f7:20:da: 98:81:ea:21:a3:cd:fd:e7:86:fb:a9:c4:21:3b:22:ba:01:8d: 69:35:94:8a:00:92:49:df:04:38:75:a0:c9:04:e1:87:f9:78: 46:39:8b:60:80:ce:78:04:55:47:af:6e:b0:02:a7:20:d8:c8: ae:29:ba:52:7c:7a:47:8f:18:a3:bb:dd:e4:f5:0b:cb:d2:8a: d8:64:de:a3:15:d4:49:8f:b0:48:83:2d:60:2c:22:46:0f:6a: 1b:67:06:82:08:64:68:c2:e3:f6:d6:d3:34:7d:ab:f5:b0:9b: cf:ca:f1:37:b3:b4:1a:77:0c:d6:ce:8c:aa:40:98:d3:62:88: a0:ca:3c:12:4b:b3:4f:15:f0:f8:de:da:6d:67:a6:b0:cb:6f: dc:f2:8c:e2:5f:b7:e9:68:ed:9f:1b:d6:c2:cb:d0:cd:2b:48: c0:f1:41:bb:39:2a:8e:a6:eb:d5:77:60:22:8b:60:f8:c0:e4: 6f:1b:ee:a9:df:17:f9:8e:f0:99:9f:42:05:47:d1:55:be:78: 8a:1a:b4:ef:7f:97:8e:ff:70:09:ce:19:92:d2:25:ef:48:16: c7:16:d3:0f:f3:5a:c5:0f:38:53:5f:84:9f:bc:7d:b3:97:36: 91:50:a4:8c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgISAZt4NU55Jd/PbA5chyPw9K+UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYjI5ODE5Nzg4ODU2OTZjZTFjMmJiZjRhZjk5ZGFkYzJj NjE4ZWIwHhcNMjYwMTAxMDYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDBmMGQ1OWRjOTJkMWZkM2ExMmI5YmE0NTU3N2QwZGZiMmMyYTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/SxJakioifZHa2Dyncrge9FdNcC /VEejoHsjG966PdNh0weKVFblgi1HVm5awNlK9AGy8bZhKNjJBewMjz1BVWzqLsH 2I/v6/PKzsrYnFhba0mlN6TCAhSMtfyRpIS9tOE/aLkzyJgTiaixMK0l3a9HMiJ2 H330pRSvZWjcbnlA8g3H+Ehw95pPQPtWhyq+ma+KNSfqF8cK6EVrJtfdoa/whDLc CqSsF0Pd0ZbnhkrQUQt7HDoFFzIbp2qdd7u0r38aFmIwohR1iMAeHMJ7hgBjx+PB Ivpmd874XzZnCSirpM+9fjvNjtQIvma7x5msusrC2GdU2wy4kKCqMt3InQIDAQAB o4ICWjCCAlYwHQYDVR0OBBYEFHQPDVncktH9OhK5ukVXfQ37LCo1MB8GA1UdIwQY MBaAFJOymBl4iFaWzhwrv0r5na3CxhjrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazdLWUdYaUlWcGJPSEN1X1N2bWRyY0xHR09zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83OTg2YTktNGU0Ni00YzMzLTkyYzkt MzFjOTVlMmExZDZmLzEvZEE4TldkeVMwZjA2RXJtNlJWZDlEZnNzS2pVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83OTg2YTktNGU0Ni00YzMzLTkyYzktMzFjOTVlMmExZDZm LzEvazdLWUdYaUlWcGJPSEN1X1N2bWRyY0xHR09zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQDBZWoAwQC LYm4AwQCUa0MAwQAW9jsAwQAW9jxAwQCXXcYAwQDkALwAwQCn/3gAwQCuSCYAwQC uTlkAwQCuXqEAwQCuZzEMA0EAgACMAcDBQMqBAsAMA0GCSqGSIb3DQEBCwUAA4IB AQCxRN0VwEG1q6snrp7+tzr3INqYgeoho83954b7qcQhOyK6AY1pNZSKAJJJ3wQ4 daDJBOGH+XhGOYtggM54BFVHr26wAqcg2MiuKbpSfHpHjxiju93k9QvL0orYZN6j FdRJj7BIgy1gLCJGD2obZwaCCGRowuP21tM0fav1sJvPyvE3s7QadwzWzoyqQJjT YoigyjwSS7NPFfD43tptZ6awy2/c8oziX7fpaO2fG9bCy9DNK0jA8UG7OSqOpuvV d2Aii2D4wORvG+6p3xf5jvCZn0IFR9FVvniKGrTvf5eO/3AJzhmS0iXvSBbHFtMP 81rFDzhTX4SfvH2zlzaRUKSM -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:32 2026 by rpki-client