This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/rGoiQCmdvS4XmAkVedOPWx6pvfc.roa File: rGoiQCmdvS4XmAkVedOPWx6pvfc.roa (raw, json) Hash identifier: NENGKfJhaegTvTeAkQES6pzY2mWvrE4Gty5ShbLzPEM= Subject key identifier: AC:6A:22:40:29:9D:BD:2E:17:98:09:15:79:D3:8F:5B:1E:A9:BD:F7 Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Certificate serial: 019B7F14E57660BF0D7A3B110DFD570F3807 Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/rGoiQCmdvS4XmAkVedOPWx6pvfc.roa Signing time: Fri 02 Jan 2026 14:20:34 +0000 ROA not before: Fri 02 Jan 2026 14:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39537 IP address blocks: 31.210.128.0/21 maxlen: 24 37.35.88.0/21 maxlen: 24 45.145.180.0/22 maxlen: 24 87.237.64.0/21 maxlen: 24 93.95.8.0/21 maxlen: 24 94.190.240.0/21 maxlen: 24 94.199.184.0/21 maxlen: 24 109.69.80.0/21 maxlen: 24 151.236.208.0/21 maxlen: 24 185.11.240.0/22 maxlen: 24 185.31.252.0/22 maxlen: 24 185.33.184.0/22 maxlen: 24 185.49.236.0/22 maxlen: 24 185.68.0.0/22 maxlen: 24 185.71.24.0/22 maxlen: 24 185.122.216.0/22 maxlen: 24 195.94.112.0/20 maxlen: 24 2a00:e620::/32 maxlen: 36 2a01:500::/29 maxlen: 32 2a01:b280::/29 maxlen: 36 2a03:25e0::/32 maxlen: 36 2a04:5ac0::/29 maxlen: 36 2a0a:fd80::/29 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:e5:76:60:bf:0d:7a:3b:11:0d:fd:57:0f:38:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Validity Not Before: Jan 2 14:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac6a2240299dbd2e1798091579d38f5b1ea9bdf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:db:98:75:f1:43:ef:03:3c:2c:54:23:77:bb: e2:ef:77:94:24:c4:48:c7:c4:87:5d:4f:60:ae:c6: ad:fe:80:13:3d:e7:b4:da:72:73:0d:7e:b3:87:69: 0a:e8:b4:dc:c9:d3:3a:96:5f:d0:3d:5c:a0:15:9b: 49:de:b7:1c:4f:25:c0:c5:af:4c:05:a9:f8:d6:f6: 65:9e:d1:c3:44:00:e9:34:0a:c9:85:0f:69:6d:5e: 96:d5:b0:8f:2d:d2:7f:5a:66:a6:0a:f1:4b:6d:d7: ad:8f:ad:04:d9:ee:65:35:36:fd:20:6a:da:db:eb: 32:1c:85:0b:de:18:db:ae:bf:f5:85:4e:b9:e6:f4: 2f:a8:87:0c:52:76:18:c7:63:53:5c:c1:e6:fb:4e: 15:f9:eb:db:5b:2a:d8:c6:15:d1:e2:70:18:d6:cf: fa:24:73:f8:b7:34:e7:0e:9e:36:5f:5a:b9:95:2d: 8d:95:55:91:0e:98:4c:a3:b0:55:05:b0:ac:2d:91: e3:4a:3b:f8:25:eb:78:b4:91:0e:d5:93:10:8b:e7: 9f:f2:d7:83:37:cf:d9:d3:64:ed:e0:65:47:ee:29: 08:b2:54:14:9b:02:8a:21:09:a9:a2:e2:b2:08:b7: 9b:53:9f:8b:e2:7c:e5:7b:44:b9:b3:72:32:74:17: 06:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:6A:22:40:29:9D:BD:2E:17:98:09:15:79:D3:8F:5B:1E:A9:BD:F7 X509v3 Authority Key Identifier: keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/rGoiQCmdvS4XmAkVedOPWx6pvfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.128.0/21 37.35.88.0/21 45.145.180.0/22 87.237.64.0/21 93.95.8.0/21 94.190.240.0/21 94.199.184.0/21 109.69.80.0/21 151.236.208.0/21 185.11.240.0/22 185.31.252.0/22 185.33.184.0/22 185.49.236.0/22 185.68.0.0/22 185.71.24.0/22 185.122.216.0/22 195.94.112.0/20 IPv6: 2a00:e620::/32 2a01:500::/29 2a01:b280::/29 2a03:25e0::/32 2a04:5ac0::/29 2a0a:fd80::/29 Signature Algorithm: sha256WithRSAEncryption 0b:a7:fc:52:fa:49:db:bd:b7:f9:69:a1:a3:a5:05:8e:97:42: b8:04:6a:67:0d:cb:cd:ac:ec:c0:d9:47:3f:c6:41:48:0a:9b: 03:4f:53:a6:c2:96:67:52:7f:45:f9:77:09:ca:1e:9d:ab:a7: f6:96:a2:04:67:26:6e:00:c1:b6:5a:b0:ed:74:55:8b:62:d9: 58:0b:9b:40:b6:1a:4f:84:bb:11:fc:9c:bc:0c:46:2a:2c:26: 9a:b6:a8:f0:48:a1:a7:26:0c:db:60:d2:d3:4b:9c:8c:af:c4: a2:06:22:7d:6d:f0:c1:13:11:0e:b9:c3:6d:82:b5:6d:95:c9: f2:7d:87:40:b3:dd:de:9c:16:9c:d5:6e:a3:87:13:50:41:16: 16:c8:3d:1e:52:10:8c:ca:2a:b2:af:7e:59:fc:ba:d5:21:47: a9:37:39:5d:53:c4:16:ca:97:22:27:59:a0:5e:61:d3:2f:70: 91:eb:8f:9f:c5:f6:aa:cc:5b:f7:eb:ab:0f:04:cb:21:b9:eb: 0a:37:71:61:6c:25:dd:69:44:7a:a9:15:e3:dc:72:f3:07:66: cb:dc:3a:f6:75:53:e9:c8:0f:86:34:1a:4d:76:5b:37:e8:51: 3d:62:10:2a:9c:89:6a:7b:5b:55:10:24:8e:ab:d4:46:8f:88: 6c:1e:24:88 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISAZt/FOV2YL8NejsRDf1XDzgHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NGQ2MWNkMTdlZDkyZTU0YmIzMzk3ZjFlNWE2YjM5MDRh YzZmMDUwHhcNMjYwMTAyMTQyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzZhMjI0MDI5OWRiZDJlMTc5ODA5MTU3OWQzOGY1YjFlYTliZGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tuYdfFD7wM8LFQjd7vi73eUJMRI x8SHXU9grsat/oATPee02nJzDX6zh2kK6LTcydM6ll/QPVygFZtJ3rccTyXAxa9M Ban41vZlntHDRADpNArJhQ9pbV6W1bCPLdJ/WmamCvFLbdetj60E2e5lNTb9IGra 2+syHIUL3hjbrr/1hU655vQvqIcMUnYYx2NTXMHm+04V+evbWyrYxhXR4nAY1s/6 JHP4tzTnDp42X1q5lS2NlVWRDphMo7BVBbCsLZHjSjv4Jet4tJEO1ZMQi+ef8teD N8/Z02Tt4GVH7ikIslQUmwKKIQmpouKyCLebU5+L4nzle0S5s3IydBcGWwIDAQAB o4ICnjCCApowHQYDVR0OBBYEFKxqIkApnb0uF5gJFXnTj1seqb33MB8GA1UdIwQY MBaAFMhNYc0X7ZLlS7M5fx5aazkErG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGIt YzI1Nzc5MmRhZGM0LzEvckdvaVFDbWR2UzRYbUFrVmVkT1BXeDZwdmZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGItYzI1Nzc5MmRhZGM0 LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGzBggrBgEFBQcBBwEB/wSBozCBoDBsBAIAATBmAwQDH9KA AwQDJSNYAwQCLZG0AwQDV+1AAwQDXV8IAwQDXr7wAwQDXse4AwQDbUVQAwQDl+zQ AwQCuQvwAwQCuR/8AwQCuSG4AwQCuTHsAwQCuUQAAwQCuUcYAwQCuXrYAwQEw15w MDAEAgACMCoDBQAqAOYgAwUDKgEFAAMFAyoBsoADBQAqAyXgAwUDKgRawAMFAyoK /YAwDQYJKoZIhvcNAQELBQADggEBAAun/FL6Sdu9t/lpoaOlBY6XQrgEamcNy82s 7MDZRz/GQUgKmwNPU6bClmdSf0X5dwnKHp2rp/aWogRnJm4AwbZasO10VYti2VgL m0C2Gk+EuxH8nLwMRiosJpq2qPBIoacmDNtg0tNLnIyvxKIGIn1t8METEQ65w22C tW2VyfJ9h0Cz3d6cFpzVbqOHE1BBFhbIPR5SEIzKKrKvfln8utUhR6k3OV1TxBbK lyInWaBeYdMvcJHrj5/F9qrMW/frqw8EyyG56wo3cWFsJd1pRHqpFePccvMHZsvc OvZ1U+nID4Y0Gk12WzfoUT1iECqciWp7W1UQJI6r1EaPiGweJIg= -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:32 2026 by rpki-client