This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/m05lL7hZrioDHe2CgG1wWeDRStg.roa File: m05lL7hZrioDHe2CgG1wWeDRStg.roa (raw, json) Hash identifier: AHZyB96+h1G3Em4A6YW+Nyv9srSKi6BGeV7BLtJ1N2w= Subject key identifier: 9B:4E:65:2F:B8:59:AE:2A:03:1D:ED:82:80:6D:70:59:E0:D1:4A:D8 Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a Certificate serial: 019B7B35471CCD3EFCA64554C718154123BC Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/m05lL7hZrioDHe2CgG1wWeDRStg.roa Signing time: Thu 01 Jan 2026 20:17:27 +0000 ROA not before: Thu 01 Jan 2026 20:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48716 IP address blocks: 46.247.40.0/23 maxlen: 24 77.240.38.0/23 maxlen: 24 77.243.80.0/23 maxlen: 24 78.40.108.0/23 maxlen: 24 82.115.40.0/22 maxlen: 24 85.202.194.0/23 maxlen: 24 89.219.32.0/22 maxlen: 24 91.147.92.0/22 maxlen: 22 91.147.92.0/24 maxlen: 24 91.147.93.0/24 maxlen: 24 91.147.94.0/24 maxlen: 24 91.147.95.0/24 maxlen: 24 91.147.104.0/22 maxlen: 24 91.201.214.0/23 maxlen: 24 91.215.136.0/22 maxlen: 24 91.215.136.0/24 maxlen: 24 91.215.137.0/24 maxlen: 32 91.215.139.0/24 maxlen: 32 94.247.128.0/21 maxlen: 24 109.233.108.0/22 maxlen: 32 185.4.180.0/22 maxlen: 24 185.22.64.0/22 maxlen: 24 185.35.222.0/23 maxlen: 24 185.102.72.0/22 maxlen: 24 185.146.0.0/22 maxlen: 24 194.32.140.0/22 maxlen: 24 194.39.64.0/22 maxlen: 24 194.39.64.0/23 maxlen: 24 194.39.66.0/24 maxlen: 24 194.39.67.0/24 maxlen: 24 194.110.54.0/23 maxlen: 24 195.49.208.0/21 maxlen: 21 195.49.209.0/24 maxlen: 24 195.49.210.0/23 maxlen: 23 195.49.210.0/24 maxlen: 24 195.49.211.0/24 maxlen: 24 195.49.212.0/22 maxlen: 22 195.49.212.0/24 maxlen: 24 195.49.213.0/24 maxlen: 24 195.49.214.0/24 maxlen: 24 195.49.215.0/24 maxlen: 24 195.93.152.0/23 maxlen: 24 195.210.46.0/23 maxlen: 24 2a00:5da0::/36 maxlen: 48 2a00:5da0:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:47:1c:cd:3e:fc:a6:45:54:c7:18:15:41:23:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a Validity Not Before: Jan 1 20:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b4e652fb859ae2a031ded82806d7059e0d14ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d6:95:0d:ca:32:9a:bf:bd:2a:9d:6d:41:bb: 3a:b9:bc:5b:93:67:17:58:c2:10:29:7e:43:05:57: 72:12:bf:e8:28:78:5d:04:64:b7:06:5f:1f:96:13: 1a:cb:9a:3d:2d:22:b6:cd:56:37:57:46:6e:45:67: 23:2f:e4:0a:45:a4:d6:b2:c2:5d:b6:5c:86:24:7e: 71:d6:9c:43:f0:4b:03:18:2a:6b:12:8a:a9:e2:04: ff:be:ab:ad:34:1d:0f:96:ae:7f:1a:fb:4f:ce:11: f3:c9:ea:e1:12:2e:c1:03:fd:01:fd:d2:0d:b5:c6: 03:58:04:40:3c:4b:50:b2:3b:ed:64:af:f0:85:10: d9:47:73:0e:4c:5d:4d:ed:05:43:7b:1c:df:e9:ba: ae:cd:e6:55:62:dd:3f:fb:ff:3c:14:da:ff:e1:60: 3c:8d:82:2f:0b:d6:ee:49:1f:05:0f:3a:0f:2c:69: 8c:bc:c6:ed:48:49:74:f6:31:4e:4a:40:39:f1:5d: 02:f6:b8:6b:fd:62:c5:5a:7a:6f:43:0a:70:b2:76: 06:79:f3:58:03:d1:a9:d1:56:d5:1b:a9:2c:30:ac: 6e:b6:62:2e:30:9b:96:da:92:7c:5c:d8:bc:b7:b3: 83:a6:6b:ff:0c:72:11:a7:a2:d7:2c:78:8a:8c:d1: ce:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4E:65:2F:B8:59:AE:2A:03:1D:ED:82:80:6D:70:59:E0:D1:4A:D8 X509v3 Authority Key Identifier: keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/m05lL7hZrioDHe2CgG1wWeDRStg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.247.40.0/23 77.240.38.0/23 77.243.80.0/23 78.40.108.0/23 82.115.40.0/22 85.202.194.0/23 89.219.32.0/22 91.147.92.0/22 91.147.104.0/22 91.201.214.0/23 91.215.136.0/22 94.247.128.0/21 109.233.108.0/22 185.4.180.0/22 185.22.64.0/22 185.35.222.0/23 185.102.72.0/22 185.146.0.0/22 194.32.140.0/22 194.39.64.0/22 194.110.54.0/23 195.49.208.0/21 195.93.152.0/23 195.210.46.0/23 IPv6: 2a00:5da0::/35 Signature Algorithm: sha256WithRSAEncryption 48:79:e9:3c:32:dd:cc:11:2c:05:e6:f9:d1:b6:59:d0:7e:70: 78:fe:b2:9c:68:b9:a9:e1:63:34:80:3a:13:c0:d0:e6:a5:cf: e9:7e:9e:01:03:ca:15:50:c1:5f:7a:ed:a6:34:f7:10:97:72: 73:f9:97:20:b8:52:43:e1:26:2d:6e:2e:13:83:dd:c7:2f:3b: a5:84:7f:ad:60:6c:37:5e:19:d1:5e:db:10:a3:47:4d:7c:e0: 1b:b7:84:85:af:93:9e:6f:16:ea:fd:fe:6a:61:cc:aa:ec:b8: 3a:b4:ee:5c:b0:81:75:d8:a3:b0:e8:24:93:f7:4a:a0:5c:e8: bc:07:37:39:cc:6d:4e:15:27:d7:a1:30:fc:06:16:3b:bd:f7: f9:4e:ff:e9:41:45:66:8c:cd:8e:d7:0d:61:40:c9:04:4e:46: 59:00:e3:17:d0:63:52:3a:83:4a:30:85:5b:4b:f4:7f:c5:5d: 9f:91:a7:5a:7a:f3:da:ea:2e:97:96:4a:7c:16:7e:63:8b:4c: 66:ff:bb:03:65:1c:75:43:10:e9:64:0a:d6:56:50:cb:1c:1a: 9e:43:ae:68:1a:60:66:59:e0:f5:30:e2:ef:55:d0:0b:e0:74: ba:46:df:f1:25:eb:58:47:9e:cf:33:ae:3b:97:e9:af:f4:64: 5d:2d:c6:69 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgISAZt7NUcczT78pkVUxxgVQSO8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NDdiNTlkMjFlYTM2YjMwNjJmY2E4MGNlNzVjMTYxNmFm NTExOWEwHhcNMjYwMTAxMjAxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjRlNjUyZmI4NTlhZTJhMDMxZGVkODI4MDZkNzA1OWUwZDE0YWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2daVDcoymr+9Kp1tQbs6ubxbk2cX WMIQKX5DBVdyEr/oKHhdBGS3Bl8flhMay5o9LSK2zVY3V0ZuRWcjL+QKRaTWssJd tlyGJH5x1pxD8EsDGCprEoqp4gT/vqutNB0Plq5/GvtPzhHzyerhEi7BA/0B/dIN tcYDWARAPEtQsjvtZK/whRDZR3MOTF1N7QVDexzf6bquzeZVYt0/+/88FNr/4WA8 jYIvC9buSR8FDzoPLGmMvMbtSEl09jFOSkA58V0C9rhr/WLFWnpvQwpwsnYGefNY A9Gp0VbVG6ksMKxutmIuMJuW2pJ8XNi8t7ODpmv/DHIRp6LXLHiKjNHOUQIDAQAB o4ICqDCCAqQwHQYDVR0OBBYEFJtOZS+4Wa4qAx3tgoBtcFng0UrYMB8GA1UdIwQY MBaAFBhHtZ0h6jazBi/KgM51wWFq9RGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0VlMW5TSHFOck1HTDhxQXpuWEJZV3IxRVpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zODI0Y2QtZTUyNy00YWRjLWE0MTIt ZjkxYmI1MTc5MjE3LzEvbTA1bEw3aFpyaW9ESGUyQ2dHMXdXZURSU3RnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8zODI0Y2QtZTUyNy00YWRjLWE0MTItZjkxYmI1MTc5MjE3 LzEvR0VlMW5TSHFOck1HTDhxQXpuWEJZV3IxRVpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG9BggrBgEFBQcBBwEB/wSBrTCBqjCBlwQCAAEwgZADBAEu 9ygDBAFN8CYDBAFN81ADBAFOKGwDBAJScygDBAFVysIDBAJZ2yADBAJbk1wDBAJb k2gDBAFbydYDBAJb14gDBANe94ADBAJt6WwDBAK5BLQDBAK5FkADBAG5I94DBAK5 ZkgDBAK5kgADBALCIIwDBALCJ0ADBAHCbjYDBAPDMdADBAHDXZgDBAHD0i4wDgQC AAIwCAMGBSoAXaAAMA0GCSqGSIb3DQEBCwUAA4IBAQBIeek8Mt3MESwF5vnRtlnQ fnB4/rKcaLmp4WM0gDoTwNDmpc/pfp4BA8oVUMFfeu2mNPcQl3Jz+ZcguFJD4SYt bi4Tg93HLzulhH+tYGw3XhnRXtsQo0dNfOAbt4SFr5Oebxbq/f5qYcyq7Lg6tO5c sIF12KOw6CST90qgXOi8Bzc5zG1OFSfXoTD8BhY7vff5Tv/pQUVmjM2O1w1hQMkE TkZZAOMX0GNSOoNKMIVbS/R/xV2fkadaevPa6i6Xlkp8Fn5ji0xm/7sDZRx1QxDp ZArWVlDLHBqeQ65oGmBmWeD1MOLvVdAL4HS6Rt/xJetYR57PM647l+mv9GRdLcZp -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:36 2026 by rpki-client