This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/01R0I9DHDPHcmxrcTn54aUYrxU4.roa File: 01R0I9DHDPHcmxrcTn54aUYrxU4.roa (raw, json) Hash identifier: LZW1SFZial6vNqkBHwqDupXnYLh58eQuRcWzvrTL1pI= Subject key identifier: D3:54:74:23:D0:C7:0C:F1:DC:9B:1A:DC:4E:7E:78:69:46:2B:C5:4E Certificate issuer: /CN=597a01de87e011803f890ae17749020f995f140c Certificate serial: 019B797E6E651B756071254D7F7049A3931C Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/01R0I9DHDPHcmxrcTn54aUYrxU4.roa Signing time: Thu 01 Jan 2026 12:18:07 +0000 ROA not before: Thu 01 Jan 2026 12:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2773 IP address blocks: 164.18.0.0/24 maxlen: 24 164.18.1.0/24 maxlen: 24 164.18.2.0/23 maxlen: 23 164.18.4.0/22 maxlen: 22 164.18.8.0/22 maxlen: 22 164.18.12.0/24 maxlen: 24 164.18.13.0/24 maxlen: 24 164.18.14.0/24 maxlen: 24 164.18.15.0/24 maxlen: 24 164.18.65.0/24 maxlen: 24 164.18.128.0/23 maxlen: 23 164.18.160.0/24 maxlen: 24 164.18.161.0/24 maxlen: 24 164.18.162.0/24 maxlen: 24 164.18.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:6e:65:1b:75:60:71:25:4d:7f:70:49:a3:93:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597a01de87e011803f890ae17749020f995f140c Validity Not Before: Jan 1 12:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3547423d0c70cf1dc9b1adc4e7e7869462bc54e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b7:60:ad:96:f0:96:c7:65:66:41:b6:2a:ef: c7:c7:4b:9f:b1:20:be:99:36:58:1a:37:e3:9a:44: 7f:88:01:e6:74:48:0d:e2:c0:e7:51:a0:02:05:55: d7:e0:94:d1:cb:3f:26:b1:ed:3d:2f:3f:63:4f:4f: 1f:4f:bf:bf:44:32:64:6f:43:3f:72:83:16:a5:e5: 83:6a:dd:f8:21:91:9e:66:10:8d:2a:8d:03:68:fc: 9d:aa:17:65:df:f0:46:6f:22:01:68:73:8b:8c:c3: c4:14:96:70:5b:92:d4:24:39:18:64:4d:06:73:55: 1a:d5:44:58:4e:89:a2:9d:e4:6f:ba:b8:44:17:6a: 58:61:03:fd:7b:08:dc:eb:c6:66:16:3f:b7:d0:30: 4e:ea:98:4f:80:08:39:c7:0d:90:0e:6b:da:68:19: 2f:bc:6f:a4:a0:d4:63:af:ad:e4:17:ad:f0:77:fd: 2c:88:4f:71:9e:a3:c1:a4:a2:ff:ee:94:17:17:7f: 02:9f:de:77:23:eb:a7:71:99:2e:1f:90:7e:fb:d4: 4b:98:ee:0b:59:dc:cd:95:a7:ab:a4:cb:7b:7a:8d: 29:b0:67:2b:7b:c4:f8:68:4a:79:8d:34:46:ad:b9: da:ff:58:2e:86:03:3a:36:69:fc:40:c1:ee:e8:05: f6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:54:74:23:D0:C7:0C:F1:DC:9B:1A:DC:4E:7E:78:69:46:2B:C5:4E X509v3 Authority Key Identifier: keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/01R0I9DHDPHcmxrcTn54aUYrxU4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.18.0.0/20 164.18.65.0/24 164.18.128.0/23 164.18.160.0-164.18.162.255 164.18.164.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:9f:6a:4e:2e:6d:03:72:2e:e7:d0:61:23:40:23:8e:16:e6: fb:f3:4d:f5:ad:c1:30:7c:5e:98:d5:80:ac:fd:f7:9e:00:af: a6:48:c5:18:36:cd:00:d2:a8:48:32:71:05:48:67:0b:ce:cc: 73:f5:4b:9f:f4:5f:b7:18:58:d1:7d:85:14:ea:9e:e5:fc:a3: 19:bd:5b:23:51:64:a1:8a:06:3a:67:b6:7d:ae:96:fb:74:58: 26:0d:6c:29:88:0c:bd:63:0f:8f:de:c7:38:45:60:c9:bd:ef: 8e:e9:bc:56:21:9f:3b:4c:ca:0a:61:11:70:80:64:32:cf:60: dd:37:82:df:9a:05:64:51:10:70:fc:40:05:c6:56:3f:d7:26: e5:c6:2e:b9:8f:de:45:91:e1:86:16:3b:89:33:d4:fa:a2:4b: 13:08:f5:d2:27:31:24:6f:25:4f:d0:47:11:13:b2:7a:f4:45: 63:94:4d:15:70:f2:78:87:bf:c7:36:f2:ad:09:25:d4:30:5a: 5a:dd:7c:3b:32:c1:cd:8a:7d:8b:19:7f:77:eb:69:8b:41:36: a8:c6:aa:a9:33:c7:77:a2:93:aa:87:09:77:32:e9:45:10:31: 84:2d:00:30:85:c0:65:83:90:26:fa:33:14:35:75:c5:28:69: fd:ba:8b:7d -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt5fm5lG3VgcSVNf3BJo5McMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5N2EwMWRlODdlMDExODAzZjg5MGFlMTc3NDkwMjBmOTk1 ZjE0MGMwHhcNMjYwMTAxMTIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzU0NzQyM2QwYzcwY2YxZGM5YjFhZGM0ZTdlNzg2OTQ2MmJjNTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bdgrZbwlsdlZkG2Ku/Hx0ufsSC+ mTZYGjfjmkR/iAHmdEgN4sDnUaACBVXX4JTRyz8mse09Lz9jT08fT7+/RDJkb0M/ coMWpeWDat34IZGeZhCNKo0DaPydqhdl3/BGbyIBaHOLjMPEFJZwW5LUJDkYZE0G c1Ua1URYTomineRvurhEF2pYYQP9ewjc68ZmFj+30DBO6phPgAg5xw2QDmvaaBkv vG+koNRjr63kF63wd/0siE9xnqPBpKL/7pQXF38Cn953I+uncZkuH5B++9RLmO4L WdzNlaerpMt7eo0psGcre8T4aEp5jTRGrbna/1guhgM6Nmn8QMHu6AX2WwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFNNUdCPQxwzx3Jsa3E5+eGlGK8VOMB8GA1UdIwQY MBaAFFl6Ad6H4BGAP4kK4XdJAg+ZXxQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8yM2VkOWEtMWNhNS00NWVhLTliOGMt NzM1MzNkZTA5OWMzLzEvMDFSMEk5REhEUEhjbXhyY1RuNTRhVVlyeFU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8yM2VkOWEtMWNhNS00NWVhLTliOGMtNzM1MzNkZTA5OWMz LzEvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQEpBIAAwQA pBJBAwQBpBKAMAwDBAWkEqADBACkEqIDBACkEqQwDQYJKoZIhvcNAQELBQADggEB AJ2fak4ubQNyLufQYSNAI44W5vvzTfWtwTB8XpjVgKz9954Ar6ZIxRg2zQDSqEgy cQVIZwvOzHP1S5/0X7cYWNF9hRTqnuX8oxm9WyNRZKGKBjpntn2ulvt0WCYNbCmI DL1jD4/exzhFYMm9747pvFYhnztMygphEXCAZDLPYN03gt+aBWRREHD8QAXGVj/X JuXGLrmP3kWR4YYWO4kz1PqiSxMI9dInMSRvJU/QRxETsnr0RWOUTRVw8niHv8c2 8q0JJdQwWlrdfDsywc2KfYsZf3fraYtBNqjGqqkzx3eik6qHCXcy6UUQMYQtADCF wGWDkCb6MxQ1dcUoaf26i30= -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:25 2026 by rpki-client