This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/1UiUTiwKgTMIt2VTMxLe14f3nS4.roa File: 1UiUTiwKgTMIt2VTMxLe14f3nS4.roa (raw, json) Hash identifier: pqQp2WmJbg2RhT73uD+Ys0RPrhInn/LiUGnsvcFLzWI= Subject key identifier: D5:48:94:4E:2C:0A:81:33:08:B7:65:53:33:12:DE:D7:87:F7:9D:2E Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5 Certificate serial: 019B7BA531CEFF0E7595281310DA75C74F43 Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/1UiUTiwKgTMIt2VTMxLe14f3nS4.roa Signing time: Thu 01 Jan 2026 22:19:42 +0000 ROA not before: Thu 01 Jan 2026 22:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57794 IP address blocks: 37.98.192.0/21 maxlen: 21 37.98.192.0/22 maxlen: 22 37.98.196.0/22 maxlen: 22 82.192.2.0/23 maxlen: 23 82.192.2.0/24 maxlen: 24 82.192.3.0/24 maxlen: 24 185.92.164.0/22 maxlen: 24 188.117.192.0/21 maxlen: 21 188.117.192.0/22 maxlen: 22 188.117.196.0/22 maxlen: 22 188.117.216.0/22 maxlen: 22 188.117.216.0/23 maxlen: 23 188.117.218.0/23 maxlen: 23 188.117.224.0/21 maxlen: 22 188.117.232.0/21 maxlen: 22 188.117.240.0/22 maxlen: 22 188.117.240.0/23 maxlen: 23 188.117.242.0/23 maxlen: 23 188.117.248.0/22 maxlen: 22 188.117.248.0/23 maxlen: 23 188.117.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:31:ce:ff:0e:75:95:28:13:10:da:75:c7:4f:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5 Validity Not Before: Jan 1 22:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d548944e2c0a813308b765533312ded787f79d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f2:6f:f1:98:90:ba:17:30:3f:d1:93:09:e4: 06:23:71:05:6b:06:4f:38:84:9d:9f:a8:86:c2:5b: e3:e6:33:6b:d0:07:4d:66:1c:a5:18:f7:00:b5:7a: da:bc:35:ed:22:d3:87:87:8f:04:c2:00:8c:cf:df: 1c:ac:ce:01:11:a0:fb:20:8f:f1:5e:67:5c:b4:a8: 7f:23:ec:44:35:2d:67:31:c7:73:e0:f2:ad:29:30: 2e:e5:aa:f1:2b:26:8d:d4:92:74:7e:41:20:80:d8: 0a:bf:a2:c9:65:fb:fd:87:c1:f5:ea:9b:fc:ce:95: 21:08:3b:66:ea:1e:96:4e:d2:74:9e:11:c5:b6:84: d4:ad:a8:46:96:d6:70:e6:ef:d7:ba:18:a0:c8:42: c5:f6:51:cd:1b:d8:ec:6b:08:90:b0:0f:83:f5:c0: 01:22:0f:8a:32:d5:82:45:c4:b8:21:fd:bf:fd:38: 0f:3d:91:70:da:4b:02:b5:12:74:d7:92:ad:5d:0c: 8e:1c:1a:32:f2:af:d5:54:00:0d:f5:27:eb:77:4f: 18:a3:ad:8d:1a:04:59:66:1f:db:4b:8d:94:ad:1d: 46:4d:c4:da:b1:d4:d4:11:48:fd:78:77:e2:a7:2f: ec:63:c4:e3:44:78:c8:c2:65:91:5c:3d:b3:23:d3: 6d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:48:94:4E:2C:0A:81:33:08:B7:65:53:33:12:DE:D7:87:F7:9D:2E X509v3 Authority Key Identifier: keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/1UiUTiwKgTMIt2VTMxLe14f3nS4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.98.192.0/21 82.192.2.0/23 185.92.164.0/22 188.117.192.0/21 188.117.216.0/22 188.117.224.0-188.117.243.255 188.117.248.0/22 Signature Algorithm: sha256WithRSAEncryption 91:86:86:cf:f6:a4:41:c0:2c:de:86:f7:b9:8a:b0:c8:ee:4f: fa:c6:c0:c5:61:b9:37:c7:64:5a:d3:c0:ab:00:29:dd:4e:c1: 18:01:db:c9:c7:2c:79:c8:72:f7:f0:de:89:88:af:0d:10:be: 62:1a:42:b8:60:bd:e8:af:8b:e0:69:de:c0:ca:73:dc:c9:c7: 75:22:1e:60:82:e6:e5:a6:15:55:85:33:81:e0:86:18:59:ec: 0d:78:43:30:05:2d:b7:46:ab:7b:e7:41:a5:e9:81:c7:18:8b: c9:d6:82:43:28:88:b5:5e:f9:8c:ce:53:e2:cd:98:d1:d2:1b: 10:cc:c2:46:c7:ab:0d:67:39:db:6c:38:fa:83:31:a1:df:c8: 28:b3:3e:db:c6:79:3a:14:90:6b:66:ae:6f:da:07:8c:15:45: 3e:bf:2b:eb:9a:54:fa:58:7f:91:70:53:00:be:da:76:4e:25: ad:28:58:63:c1:f7:b4:85:1f:de:9f:3e:0b:d8:b0:66:67:57: a6:d7:8a:81:e1:81:35:e6:36:41:26:b5:23:96:73:d4:1c:45: 4a:18:53:c5:3d:51:a2:3a:4e:6f:29:0b:92:ec:9d:80:9e:66: 1f:01:31:7a:f2:5c:18:c6:ae:6d:e7:08:4f:97:75:60:66:30: 1d:a9:eb:86 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt7pTHO/w51lSgTENp1x09DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWI1MzY0MGIwOTMxOTI0YjczZjc2MDkyNTg0NTE1MGE2 Y2NjYTUwHhcNMjYwMTAxMjIxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTQ4OTQ0ZTJjMGE4MTMzMDhiNzY1NTMzMzEyZGVkNzg3Zjc5ZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/Jv8ZiQuhcwP9GTCeQGI3EFawZP OISdn6iGwlvj5jNr0AdNZhylGPcAtXravDXtItOHh48EwgCMz98crM4BEaD7II/x XmdctKh/I+xENS1nMcdz4PKtKTAu5arxKyaN1JJ0fkEggNgKv6LJZfv9h8H16pv8 zpUhCDtm6h6WTtJ0nhHFtoTUrahGltZw5u/XuhigyELF9lHNG9jsawiQsA+D9cAB Ig+KMtWCRcS4If2//TgPPZFw2ksCtRJ015KtXQyOHBoy8q/VVAAN9Sfrd08Yo62N GgRZZh/bS42UrR1GTcTasdTUEUj9eHfipy/sY8TjRHjIwmWRXD2zI9NtQwIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFNVIlE4sCoEzCLdlUzMS3teH950uMB8GA1UdIwQY MBaAFG6rU2QLCTGSS3P3YJJYRRUKbMylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAt NTMwNDYzMjM5NTFmLzEvMVVpVVRpd0tnVE1JdDJWVE14TGUxNGYzblM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAtNTMwNDYzMjM5NTFm LzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQDJWLAAwQB UsACAwQCuVykAwQDvHXAAwQCvHXYMAwDBAW8deADBAK8dfADBAK8dfgwDQYJKoZI hvcNAQELBQADggEBAJGGhs/2pEHALN6G97mKsMjuT/rGwMVhuTfHZFrTwKsAKd1O wRgB28nHLHnIcvfw3omIrw0QvmIaQrhgveivi+Bp3sDKc9zJx3UiHmCC5uWmFVWF M4HghhhZ7A14QzAFLbdGq3vnQaXpgccYi8nWgkMoiLVe+YzOU+LNmNHSGxDMwkbH qw1nOdtsOPqDMaHfyCizPtvGeToUkGtmrm/aB4wVRT6/K+uaVPpYf5FwUwC+2nZO Ja0oWGPB97SFH96fPgvYsGZnV6bXioHhgTXmNkEmtSOWc9QcRUoYU8U9UaI6Tm8p C5LsnYCeZh8BMXryXBjGrm3nCE+XdWBmMB2p64Y= -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:53 2026 by rpki-client