This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/1-nbvgTns4XEuIeTkS-WiJtQc-Ow.roa File: 1-nbvgTns4XEuIeTkS-WiJtQc-Ow.roa (raw, json) Hash identifier: EpsG3PKVN4LLuyVtTXVPkQWMYJTWkP9XR4apujaoYwQ= Subject key identifier: FA:76:EF:81:39:EC:E1:71:2E:21:E4:E4:4B:E5:A2:26:D4:1C:F8:EC Certificate issuer: /CN=ec3543aa00373e9e4d10e64c83d3779b378888c1 Certificate serial: 019B7A5A97A5B6CC9F4CFF3E801F6E004212 Authority key identifier: EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/1-nbvgTns4XEuIeTkS-WiJtQc-Ow.roa Signing time: Thu 01 Jan 2026 16:18:35 +0000 ROA not before: Thu 01 Jan 2026 16:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15598 IP address blocks: 62.146.0.0/22 maxlen: 22 62.146.4.0/22 maxlen: 22 62.146.8.0/22 maxlen: 22 62.146.12.0/22 maxlen: 22 62.146.16.0/22 maxlen: 22 62.146.17.0/24 maxlen: 24 62.146.20.0/22 maxlen: 22 62.146.24.0/22 maxlen: 22 62.146.28.0/22 maxlen: 22 62.146.32.0/22 maxlen: 22 62.146.36.0/22 maxlen: 22 62.146.40.0/22 maxlen: 22 62.146.44.0/22 maxlen: 22 62.146.48.0/22 maxlen: 22 62.146.52.0/22 maxlen: 22 62.146.56.0/22 maxlen: 22 62.146.60.0/22 maxlen: 22 62.146.64.0/22 maxlen: 22 62.146.68.0/22 maxlen: 22 62.146.72.0/22 maxlen: 22 62.146.76.0/22 maxlen: 22 62.146.80.0/22 maxlen: 22 62.146.84.0/22 maxlen: 22 62.146.88.0/22 maxlen: 22 62.146.92.0/22 maxlen: 22 62.146.96.0/22 maxlen: 22 62.146.100.0/22 maxlen: 22 62.146.104.0/22 maxlen: 22 62.146.108.0/22 maxlen: 22 62.146.112.0/22 maxlen: 22 62.146.116.0/22 maxlen: 22 62.146.120.0/22 maxlen: 22 62.146.124.0/22 maxlen: 22 62.146.128.0/22 maxlen: 22 62.146.132.0/22 maxlen: 22 62.146.136.0/22 maxlen: 22 62.146.140.0/22 maxlen: 22 62.146.144.0/22 maxlen: 22 62.146.148.0/22 maxlen: 22 62.146.152.0/22 maxlen: 22 62.146.156.0/22 maxlen: 22 62.146.160.0/22 maxlen: 22 62.146.184.0/22 maxlen: 22 62.146.188.0/22 maxlen: 22 62.146.192.0/22 maxlen: 22 62.146.196.0/22 maxlen: 22 62.146.200.0/22 maxlen: 22 62.146.204.0/22 maxlen: 22 62.146.208.0/22 maxlen: 22 62.146.212.0/22 maxlen: 22 62.146.212.0/24 maxlen: 24 62.146.216.0/22 maxlen: 22 62.146.220.0/22 maxlen: 22 62.146.240.0/22 maxlen: 22 80.190.4.0/22 maxlen: 22 80.190.8.0/21 maxlen: 21 80.190.16.0/21 maxlen: 21 80.190.24.0/21 maxlen: 21 80.190.32.0/21 maxlen: 21 80.190.40.0/21 maxlen: 21 80.190.48.0/21 maxlen: 21 80.190.56.0/21 maxlen: 21 80.190.64.0/21 maxlen: 21 80.190.88.0/21 maxlen: 21 80.190.96.0/21 maxlen: 21 80.190.104.0/21 maxlen: 21 80.190.112.0/21 maxlen: 21 80.190.120.0/21 maxlen: 21 80.190.128.0/21 maxlen: 21 80.190.136.0/21 maxlen: 21 80.190.144.0/21 maxlen: 21 80.190.152.0/21 maxlen: 21 80.190.160.0/21 maxlen: 21 80.190.168.0/21 maxlen: 21 80.190.176.0/21 maxlen: 21 80.190.184.0/21 maxlen: 21 80.190.192.0/21 maxlen: 21 80.190.200.0/21 maxlen: 21 80.190.208.0/21 maxlen: 21 80.190.216.0/21 maxlen: 21 80.190.224.0/21 maxlen: 21 80.190.232.0/21 maxlen: 21 80.190.240.0/21 maxlen: 21 80.190.248.0/21 maxlen: 21 81.17.104.0/22 maxlen: 22 81.17.108.0/22 maxlen: 22 81.17.112.0/22 maxlen: 22 81.17.116.0/22 maxlen: 22 82.149.64.0/22 maxlen: 22 82.149.68.0/22 maxlen: 22 82.149.84.0/22 maxlen: 22 82.149.88.0/22 maxlen: 22 82.149.92.0/22 maxlen: 22 185.234.108.0/24 maxlen: 24 212.112.224.0/19 maxlen: 19 212.123.96.0/19 maxlen: 19 2a01:138::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:97:a5:b6:cc:9f:4c:ff:3e:80:1f:6e:00:42:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec3543aa00373e9e4d10e64c83d3779b378888c1 Validity Not Before: Jan 1 16:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa76ef8139ece1712e21e4e44be5a226d41cf8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d4:7e:6a:14:e5:9f:22:18:49:9c:3f:51:c7: 74:00:c8:cb:49:21:02:9f:b3:56:d6:0d:99:c7:2b: 70:46:5e:ec:1b:4f:d7:7a:a1:25:1b:6f:00:ac:13: b9:e6:96:92:41:ae:5d:96:83:44:f9:a4:9c:c5:e1: 8f:28:80:dc:0d:38:a5:de:40:b2:d1:cd:bb:e5:8c: 20:73:32:e9:f0:4d:13:af:ca:b0:84:ee:7d:39:c8: a3:95:1e:74:3f:74:88:91:a6:67:b5:4c:33:59:d0: d2:4e:3a:75:9e:01:f0:30:62:c1:20:23:ce:e6:33: 8d:20:db:77:0e:9a:da:36:22:e5:ae:34:45:34:0e: bf:90:0c:df:9f:ff:f2:a8:d5:73:7f:c8:10:fb:07: 95:fa:44:fc:e0:48:ed:99:67:86:65:ed:7e:63:0e: 48:1e:b4:7e:cf:ea:30:a7:a0:ee:fd:d2:23:3d:1d: 58:9b:28:4c:54:bf:34:87:06:48:27:9d:80:2b:4b: 58:d9:50:0e:75:85:1c:bb:1f:67:fe:f2:d1:ea:3e: c3:e1:a0:81:1e:96:be:77:6b:0d:4f:ec:7a:61:b0: a7:24:82:e5:74:36:3b:3c:9d:eb:51:af:a3:32:3b: d7:e7:b0:88:16:48:60:8a:a8:3e:4c:ee:a7:7e:4a: aa:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:76:EF:81:39:EC:E1:71:2E:21:E4:E4:4B:E5:A2:26:D4:1C:F8:EC X509v3 Authority Key Identifier: keyid:EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/1-nbvgTns4XEuIeTkS-WiJtQc-Ow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.146.0.0-62.146.163.255 62.146.184.0-62.146.223.255 62.146.240.0/22 80.190.4.0-80.190.71.255 80.190.88.0-80.190.255.255 81.17.104.0-81.17.119.255 82.149.64.0/21 82.149.84.0-82.149.95.255 185.234.108.0/24 212.112.224.0/19 212.123.96.0/19 IPv6: 2a01:138::/32 Signature Algorithm: sha256WithRSAEncryption 4d:be:e3:9b:59:97:d6:eb:a7:81:77:b1:df:d6:fd:99:84:49: 9d:29:76:bc:3d:1c:3d:21:ae:a8:46:c3:07:b1:82:0d:71:e2: b5:b8:d7:cf:6e:39:fa:7c:58:58:2e:89:34:c1:04:32:f1:91: e5:d7:4d:8d:46:eb:e8:83:a2:2d:92:ca:f0:87:c1:61:0a:3f: 7c:50:89:56:a4:fa:75:6b:26:f9:fb:d5:9e:d1:4e:02:3c:8e: ec:c9:36:dc:32:94:89:4b:c0:61:94:9b:6e:a0:1c:6c:b8:c5: 06:68:9e:d6:58:a3:5b:87:e7:c7:00:27:37:60:7d:d6:07:ef: b0:67:aa:01:a6:26:82:46:9f:fb:17:ac:61:e0:6c:cb:d6:87: fc:03:0f:ae:dd:c2:df:81:b3:57:86:81:c4:c4:2c:16:1c:de: 76:69:f1:1a:9b:02:17:26:d4:e3:06:bc:88:82:26:f6:95:46: 48:62:58:f0:52:3e:21:c1:d5:eb:4b:f5:7e:fa:62:e8:85:7e: dd:4b:bd:8c:5f:cf:5c:6f:f9:ba:99:a1:d6:65:23:1c:e6:73: b2:d0:0a:1c:6a:72:b7:70:53:1a:67:0b:42:6e:57:63:77:42: 1b:92:c5:0b:4a:6d:85:d8:c3:4b:ec:f1:a4:d7:48:d9:b8:25: 27:c5:d5:b1 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgISAZt6WpeltsyfTP8+gB9uAEISMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjMzU0M2FhMDAzNzNlOWU0ZDEwZTY0YzgzZDM3NzliMzc4 ODg4YzEwHhcNMjYwMTAxMTYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTc2ZWY4MTM5ZWNlMTcxMmUyMWU0ZTQ0YmU1YTIyNmQ0MWNmOGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9R+ahTlnyIYSZw/Ucd0AMjLSSEC n7NW1g2ZxytwRl7sG0/XeqElG28ArBO55paSQa5dloNE+aScxeGPKIDcDTil3kCy 0c275YwgczLp8E0Tr8qwhO59OcijlR50P3SIkaZntUwzWdDSTjp1ngHwMGLBICPO 5jONINt3DpraNiLlrjRFNA6/kAzfn//yqNVzf8gQ+weV+kT84EjtmWeGZe1+Yw5I HrR+z+owp6Du/dIjPR1YmyhMVL80hwZIJ52AK0tY2VAOdYUcux9n/vLR6j7D4aCB Hpa+d2sNT+x6YbCnJILldDY7PJ3rUa+jMjvX57CIFkhgiqg+TO6nfkqqGQIDAQAB o4IChjCCAoIwHQYDVR0OBBYEFPp274E57OFxLiHk5EvloibUHPjsMB8GA1UdIwQY MBaAFOw1Q6oANz6eTRDmTIPTd5s3iIjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0RWRHFnQTNQcDVORU9aTWc5TjNtemVJaU1FLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xOWU3MTUtZmZhYS00YzQzLWI3OWEt NTZmNmVjYzFjMTIxLzEvMS1uYnZnVG5zNFhFdUllVGtTLVdpSnRRYy1Pdy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMmMvMTllNzE1LWZmYWEtNGM0My1iNzlhLTU2ZjZlY2MxYzEy MS8xLzdEVkRxZ0EzUHA1TkVPWk1nOU4zbXplSWlNRS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCBmgYIKwYBBQUHAQcBAf8EgYowgYcwdgQCAAEwcDALAwMB PpIDBAI+kqAwDAMEAz6SuAMEBT6SwAMEAj6S8DAMAwQCUL4EAwQDUL5AMAsDBANQ vlgDAwBQvjAMAwQDURFoAwQDURFwAwQDUpVAMAwDBAJSlVQDBAVSlUADBAC56mwD BAXUcOADBAXUe2AwDQQCAAIwBwMFACoBATgwDQYJKoZIhvcNAQELBQADggEBAE2+ 45tZl9brp4F3sd/W/ZmESZ0pdrw9HD0hrqhGwwexgg1x4rW4189uOfp8WFguiTTB BDLxkeXXTY1G6+iDoi2SyvCHwWEKP3xQiVak+nVrJvn71Z7RTgI8juzJNtwylIlL wGGUm26gHGy4xQZontZYo1uH58cAJzdgfdYH77BnqgGmJoJGn/sXrGHgbMvWh/wD D67dwt+Bs1eGgcTELBYc3nZp8RqbAhcm1OMGvIiCJvaVRkhiWPBSPiHB1etL9X76 YuiFft1LvYxfz1xv+bqZodZlIxzmc7LQChxqcrdwUxpnC0JuV2N3QhuSxQtKbYXY w0vs8aTXSNm4JSfF1bE= -----END CERTIFICATE-----Generated at Mon Jan 26 13:45:47 2026 by rpki-client