This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/Rl7efdhYeXftFwvFAmfRH2As_rs.roa File: Rl7efdhYeXftFwvFAmfRH2As_rs.roa (raw, json) Hash identifier: Fkewx2otKYj7NOwHTF8pWpF8lfCLVjfeAiN9uWh62QU= Subject key identifier: 46:5E:DE:7D:D8:58:79:77:ED:17:0B:C5:02:67:D1:1F:60:2C:FE:BB Certificate issuer: /CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb Certificate serial: 019B7F14D1615560998297E7CED0819BB7F7 Authority key identifier: 4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/Rl7efdhYeXftFwvFAmfRH2As_rs.roa Signing time: Fri 02 Jan 2026 14:20:29 +0000 ROA not before: Fri 02 Jan 2026 14:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12338 IP address blocks: 77.26.0.0/18 maxlen: 18 77.26.64.0/18 maxlen: 18 77.26.128.0/18 maxlen: 18 77.26.192.0/18 maxlen: 18 77.27.0.0/18 maxlen: 18 77.27.64.0/18 maxlen: 18 77.27.128.0/18 maxlen: 18 77.27.192.0/18 maxlen: 18 83.165.0.0/18 maxlen: 18 83.165.64.0/18 maxlen: 18 83.165.128.0/18 maxlen: 18 83.165.192.0/18 maxlen: 18 85.152.104.0/22 maxlen: 22 85.152.124.0/22 maxlen: 22 91.116.64.0/18 maxlen: 18 91.116.128.0/18 maxlen: 18 91.116.192.0/18 maxlen: 18 91.117.0.0/18 maxlen: 18 91.117.64.0/18 maxlen: 18 91.117.128.0/18 maxlen: 18 91.117.192.0/18 maxlen: 18 92.53.192.0/19 maxlen: 19 178.60.0.0/18 maxlen: 18 178.60.128.0/18 maxlen: 18 178.60.192.0/18 maxlen: 18 178.60.197.0/24 maxlen: 24 188.171.234.0/24 maxlen: 24 188.171.240.0/21 maxlen: 21 188.171.248.0/21 maxlen: 21 212.51.32.0/19 maxlen: 19 212.89.1.0/24 maxlen: 24 213.60.0.0/18 maxlen: 18 213.60.64.0/18 maxlen: 18 213.60.128.0/18 maxlen: 18 213.60.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:d1:61:55:60:99:82:97:e7:ce:d0:81:9b:b7:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb Validity Not Before: Jan 2 14:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=465ede7dd8587977ed170bc50267d11f602cfebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8b:76:15:c4:7e:9b:11:d7:4d:4c:c7:7a:8f: ce:30:e3:43:37:be:2f:15:8c:63:84:dd:e5:7e:0a: 4e:d1:86:28:49:40:4f:e3:e5:21:bb:92:87:5c:35: 08:e0:7c:a3:60:38:3f:b4:62:b0:d0:8e:d7:b6:05: 27:6f:9b:d4:82:59:fe:c6:e5:b1:ad:86:b5:0a:b4: 49:a8:57:ba:b8:5a:dc:06:7f:a1:ea:dd:8b:b5:55: 8d:26:d1:c3:a4:74:6b:7b:0c:8b:dd:29:ee:0c:45: af:07:50:4c:35:fd:fa:d1:bd:cc:42:0f:83:36:d7: b5:59:13:72:54:56:79:54:56:c5:7d:f7:b8:44:15: ca:10:8c:ac:cf:27:20:99:e9:17:13:f0:2d:be:da: 39:0d:4b:74:1f:05:e9:9c:62:9a:33:5a:50:d3:13: b5:40:ca:d8:ff:0f:81:2f:08:4d:66:e8:d3:6a:ad: 4c:de:0f:54:a1:ca:c0:50:f1:cc:7d:39:ad:b4:5c: 09:ae:58:fd:b7:ce:35:30:21:50:1f:fb:b9:b7:23: f0:c9:fa:5c:e9:80:3e:53:ff:c9:19:11:e8:d4:91: d3:95:26:73:25:b4:d7:af:d4:87:9f:09:92:a7:9d: 13:99:b3:ba:37:40:4b:3c:34:c7:6f:4d:e4:30:a8: b5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5E:DE:7D:D8:58:79:77:ED:17:0B:C5:02:67:D1:1F:60:2C:FE:BB X509v3 Authority Key Identifier: keyid:4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/Rl7efdhYeXftFwvFAmfRH2As_rs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.26.0.0/15 83.165.0.0/16 85.152.104.0/22 85.152.124.0/22 91.116.64.0-91.117.255.255 92.53.192.0/19 178.60.0.0/18 178.60.128.0/17 188.171.234.0/24 188.171.240.0/20 212.51.32.0/19 212.89.1.0/24 213.60.0.0/16 Signature Algorithm: sha256WithRSAEncryption 79:99:d5:c3:94:ee:fb:e2:6d:27:53:f7:ca:23:ea:9f:3f:6e: 3f:e0:25:1e:0d:e2:89:f0:ac:e5:79:05:52:6a:db:70:94:c9: 0f:ef:60:e0:a5:7b:64:db:d4:f9:6b:32:e9:b9:2e:d2:8b:6f: 1b:76:f8:84:49:39:af:b5:a6:ed:96:7f:18:31:06:94:01:dd: 2d:99:33:e4:56:3d:38:ef:f6:0f:15:66:d8:34:5c:e0:69:20: c0:af:35:72:93:92:c8:c6:df:95:ab:61:d4:cc:6c:10:22:4a: 87:d7:27:3d:44:6a:f0:7b:b0:8b:b8:51:07:d7:dd:a6:63:4e: d4:3d:21:31:18:dc:2a:29:eb:f9:51:17:9a:22:3b:ae:b7:cf: 36:3d:e6:b6:7e:2e:b1:d1:3e:7c:82:d1:93:82:6b:d1:a9:8d: e3:f8:c2:ff:82:30:a6:1f:ff:b9:0e:53:d8:37:26:ab:50:1a: 2f:24:01:10:48:4f:23:65:5a:6c:3b:ef:3a:58:8e:10:f0:b9: 8a:37:a9:af:65:fb:6a:04:da:ee:3f:fc:97:0b:7a:40:fc:7a: 94:95:d0:84:2e:3a:cd:af:48:9b:01:44:e9:40:59:b3:d2:71: 1e:e4:e2:74:d5:0d:a8:4b:4c:9a:f7:c6:8a:e1:0f:2e:8e:f9: b1:c0:65:b3 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZt/FNFhVWCZgpfnztCBm7f3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYTY1YzdlZGJhNDY5ZDA5OWQ3NmFhY2Q3ZGMyNjNmNGRm ZWM1ZWIwHhcNMjYwMTAyMTQyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjVlZGU3ZGQ4NTg3OTc3ZWQxNzBiYzUwMjY3ZDExZjYwMmNmZWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIt2FcR+mxHXTUzHeo/OMONDN74v FYxjhN3lfgpO0YYoSUBP4+Uhu5KHXDUI4HyjYDg/tGKw0I7XtgUnb5vUgln+xuWx rYa1CrRJqFe6uFrcBn+h6t2LtVWNJtHDpHRrewyL3SnuDEWvB1BMNf360b3MQg+D Nte1WRNyVFZ5VFbFffe4RBXKEIyszycgmekXE/Atvto5DUt0HwXpnGKaM1pQ0xO1 QMrY/w+BLwhNZujTaq1M3g9UocrAUPHMfTmttFwJrlj9t841MCFQH/u5tyPwyfpc 6YA+U//JGRHo1JHTlSZzJbTXr9SHnwmSp50TmbO6N0BLPDTHb03kMKi1kwIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFEZe3n3YWHl37RcLxQJn0R9gLP67MB8GA1UdIwQY MBaAFE6mXH7bpGnQmddqrNfcJj9N/sXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHFaY2Z0dWthZENaMTJxczE5d21QMDMteGVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wN2YyNzAtYzZjYy00OWNkLWFlNDYt NTEwMGEyNmQyNzRiLzEvUmw3ZWZkaFllWGZ0Rnd2RkFtZlJIMkFzX3JzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8wN2YyNzAtYzZjYy00OWNkLWFlNDYtNTEwMGEyNmQyNzRi LzEvVHFaY2Z0dWthZENaMTJxczE5d21QMDMteGVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSAwMBTRoDAwBT pQMEAlWYaAMEAlWYfDALAwQGW3RAAwMBW3QDBAVcNcADBAayPAADBAeyPIADBAC8 q+oDBAS8q/ADBAXUMyADBADUWQEDAwDVPDANBgkqhkiG9w0BAQsFAAOCAQEAeZnV w5Tu++JtJ1P3yiPqnz9uP+AlHg3iifCs5XkFUmrbcJTJD+9g4KV7ZNvU+Wsy6bku 0otvG3b4hEk5r7Wm7ZZ/GDEGlAHdLZkz5FY9OO/2DxVm2DRc4GkgwK81cpOSyMbf lath1MxsECJKh9cnPURq8Huwi7hRB9fdpmNO1D0hMRjcKinr+VEXmiI7rrfPNj3m tn4usdE+fILRk4Jr0amN4/jC/4Iwph//uQ5T2Dcmq1AaLyQBEEhPI2VabDvvOliO EPC5ijepr2X7agTa7j/8lwt6QPx6lJXQhC46za9ImwFE6UBZs9JxHuTidNUNqEtM mvfGiuEPLo75scBlsw== -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:51 2026 by rpki-client