This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/XHVi61WiazNgcFLfPPLSGooyVY0.roa File: XHVi61WiazNgcFLfPPLSGooyVY0.roa (raw, json) Hash identifier: DsQUXKDSsnP3SOeoq0hMzedmYIiSFC88k9HokDNi5rA= Subject key identifier: 5C:75:62:EB:55:A2:6B:33:60:70:52:DF:3C:F2:D2:1A:8A:32:55:8D Certificate issuer: /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5 Certificate serial: 019B76EAA97BC3E23C1A746F51D513E9CB74 Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/XHVi61WiazNgcFLfPPLSGooyVY0.roa Signing time: Thu 01 Jan 2026 00:17:28 +0000 ROA not before: Thu 01 Jan 2026 00:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48544 IP address blocks: 31.185.16.0/24 maxlen: 24 31.185.17.0/24 maxlen: 24 31.185.18.0/24 maxlen: 24 31.185.19.0/24 maxlen: 24 31.185.20.0/24 maxlen: 24 31.185.21.0/24 maxlen: 24 31.185.22.0/24 maxlen: 24 31.185.23.0/24 maxlen: 24 45.10.72.0/22 maxlen: 22 46.102.112.0/24 maxlen: 24 46.102.113.0/24 maxlen: 24 46.102.114.0/24 maxlen: 24 46.102.115.0/24 maxlen: 24 78.159.144.0/22 maxlen: 24 83.174.144.0/22 maxlen: 24 87.252.106.0/23 maxlen: 24 89.32.156.0/24 maxlen: 24 89.32.157.0/24 maxlen: 24 89.32.158.0/24 maxlen: 24 89.32.159.0/24 maxlen: 24 89.36.204.0/24 maxlen: 24 89.36.205.0/24 maxlen: 24 89.36.206.0/24 maxlen: 24 89.36.207.0/24 maxlen: 24 91.231.172.0/23 maxlen: 24 93.189.136.0/21 maxlen: 24 185.29.144.0/24 maxlen: 24 185.29.145.0/24 maxlen: 24 185.29.146.0/24 maxlen: 24 185.39.24.0/23 maxlen: 24 185.39.26.0/24 maxlen: 24 185.39.27.0/24 maxlen: 24 185.84.84.0/22 maxlen: 24 185.164.185.0/24 maxlen: 24 185.164.186.0/23 maxlen: 24 188.116.8.0/23 maxlen: 23 188.116.10.0/24 maxlen: 24 188.116.11.0/24 maxlen: 24 188.116.32.0/23 maxlen: 24 188.116.56.0/23 maxlen: 24 188.116.60.0/23 maxlen: 23 188.116.62.0/24 maxlen: 24 188.116.63.0/24 maxlen: 24 194.145.248.0/22 maxlen: 23 212.69.136.0/24 maxlen: 24 212.69.137.0/24 maxlen: 24 212.69.138.0/24 maxlen: 24 212.69.139.0/24 maxlen: 24 212.69.140.0/24 maxlen: 24 212.69.141.0/24 maxlen: 24 212.69.142.0/24 maxlen: 24 212.69.143.0/24 maxlen: 24 217.20.248.0/23 maxlen: 24 217.20.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:a9:7b:c3:e2:3c:1a:74:6f:51:d5:13:e9:cb:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5 Validity Not Before: Jan 1 00:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c7562eb55a26b33607052df3cf2d21a8a32558d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:da:b8:b6:d3:40:b4:23:6a:5d:bd:bb:58:a4: 6a:2e:50:c9:a3:35:49:26:d4:10:0a:d1:08:4c:b4: d6:1e:77:10:c6:3e:9f:4e:95:e0:99:d7:8c:17:15: 31:73:05:4e:90:36:17:a2:25:ed:12:9e:ff:cd:2b: 78:55:c2:de:a0:fe:9b:43:62:4a:a8:85:1f:96:19: 47:48:0d:0e:5b:eb:c4:c2:64:61:f5:75:42:62:11: 65:f5:7f:57:06:b6:06:a8:a7:9d:24:a7:b5:5a:d5: 17:b6:70:bb:36:b1:a2:ed:c0:09:9b:ce:af:2f:4f: 63:fb:92:1d:2a:48:27:55:ba:20:e2:d7:3a:66:ff: 7d:8f:aa:dc:cb:0c:f6:8a:fc:67:70:79:8b:d6:23: ad:eb:27:10:ad:1a:72:e6:fe:fe:1d:4d:53:21:f2: 8c:ff:ae:0f:6d:5d:a2:2b:46:8a:e0:f8:25:88:85: 01:6d:d2:57:8f:07:c5:6b:dc:7a:7a:4f:66:17:a1: 5a:9d:79:d9:4f:2b:4b:1e:54:0a:c7:f1:59:fb:26: 37:e7:ac:92:1b:f6:cc:cc:2b:d8:80:88:7c:f3:c6: ca:94:f0:90:0d:76:89:b0:86:f7:0b:23:3e:fe:3e: 23:a5:00:c5:5f:3b:17:e8:a0:ed:a7:3d:ca:60:5c: 55:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:75:62:EB:55:A2:6B:33:60:70:52:DF:3C:F2:D2:1A:8A:32:55:8D X509v3 Authority Key Identifier: keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/XHVi61WiazNgcFLfPPLSGooyVY0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.185.16.0/21 45.10.72.0/22 46.102.112.0/22 78.159.144.0/22 83.174.144.0/22 87.252.106.0/23 89.32.156.0/22 89.36.204.0/22 91.231.172.0/23 93.189.136.0/21 185.29.144.0-185.29.146.255 185.39.24.0/22 185.84.84.0/22 185.164.185.0-185.164.187.255 188.116.8.0/22 188.116.32.0/23 188.116.56.0/23 188.116.60.0/22 194.145.248.0/22 212.69.136.0/21 217.20.248.0/22 Signature Algorithm: sha256WithRSAEncryption 81:09:c4:99:9b:67:9a:54:42:e0:47:05:c2:5d:f7:cb:18:4a: c4:c4:4d:20:68:04:c5:ed:15:0a:00:ef:e9:3b:d8:72:07:8c: ef:54:b8:7c:fb:2c:1a:81:95:02:69:4d:e3:09:98:f8:3d:17: 19:47:40:ff:98:57:58:68:e2:4d:0a:6b:c8:28:e8:11:39:4e: a3:c5:de:55:68:15:5f:71:f3:f0:2b:87:6a:64:b3:0e:96:56: af:0e:25:0d:17:22:48:1e:b3:f9:6e:4e:13:3b:af:3a:ea:0d: 80:5e:ed:07:dc:31:ca:63:76:6a:45:f9:0f:3e:a1:62:9d:1d: 3d:64:1e:c5:88:ed:0a:03:b7:9a:fa:bd:0e:b0:89:fd:bb:a8: b4:6f:61:fc:4b:f6:d1:9a:6c:65:6b:e6:bd:67:d4:ca:39:11: 8c:07:5c:a8:cb:59:f0:dc:0d:fd:21:c0:bc:2d:8d:e9:8a:5c: ac:62:37:1f:50:2d:75:fd:2e:b3:26:8b:48:ff:bc:07:22:2e: 3e:f6:66:e8:ae:3d:fd:91:33:53:9b:a8:a6:dd:64:5d:e1:20: f0:d9:37:bf:84:cb:fc:44:16:19:77:27:c6:35:16:20:30:28: ad:69:9b:f4:b6:44:42:eb:ee:10:fe:c3:d1:46:5c:37:4e:fb: 6a:69:e4:3f -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgISAZt26ql7w+I8GnRvUdUT6ct0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzdkMzQ4NjliYzYwYjdkOWU3ODMzNWY0YTMyMzgxZmI3 MjEwZTUwHhcNMjYwMTAxMDAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Yzc1NjJlYjU1YTI2YjMzNjA3MDUyZGYzY2YyZDIxYThhMzI1NThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztq4ttNAtCNqXb27WKRqLlDJozVJ JtQQCtEITLTWHncQxj6fTpXgmdeMFxUxcwVOkDYXoiXtEp7/zSt4VcLeoP6bQ2JK qIUflhlHSA0OW+vEwmRh9XVCYhFl9X9XBrYGqKedJKe1WtUXtnC7NrGi7cAJm86v L09j+5IdKkgnVbog4tc6Zv99j6rcywz2ivxncHmL1iOt6ycQrRpy5v7+HU1TIfKM /64PbV2iK0aK4PgliIUBbdJXjwfFa9x6ek9mF6FanXnZTytLHlQKx/FZ+yY356yS G/bMzCvYgIh888bKlPCQDXaJsIb3CyM+/j4jpQDFXzsX6KDtpz3KYFxVGwIDAQAB o4ICljCCApIwHQYDVR0OBBYEFFx1YutVomszYHBS3zzy0hqKMlWNMB8GA1UdIwQY MBaAFO4300hpvGC32eeDNfSjI4H7chDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jOGM1ZTQtMjI1YS00ODllLTkxMDAt YWIyY2U5NGMxNDIzLzEvWEhWaTYxV2lhek5nY0ZMZlBQTFNHb295VlkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9jOGM1ZTQtMjI1YS00ODllLTkxMDAtYWIyY2U5NGMxNDIz LzEvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGrBggrBgEFBQcBBwEB/wSBmzCBmDCBlQQCAAEwgY4DBAMf uRADBAItCkgDBAIuZnADBAJOn5ADBAJTrpADBAFX/GoDBAJZIJwDBAJZJMwDBAFb 56wDBANdvYgwDAMEBLkdkAMEALkdkgMEArknGAMEArlUVDAMAwQAuaS5AwQCuaS4 AwQCvHQIAwQBvHQgAwQBvHQ4AwQCvHQ8AwQCwpH4AwQD1EWIAwQC2RT4MA0GCSqG SIb3DQEBCwUAA4IBAQCBCcSZm2eaVELgRwXCXffLGErExE0gaATF7RUKAO/pO9hy B4zvVLh8+ywagZUCaU3jCZj4PRcZR0D/mFdYaOJNCmvIKOgROU6jxd5VaBVfcfPw K4dqZLMOllavDiUNFyJIHrP5bk4TO6866g2AXu0H3DHKY3ZqRfkPPqFinR09ZB7F iO0KA7ea+r0OsIn9u6i0b2H8S/bRmmxla+a9Z9TKORGMB1yoy1nw3A39IcC8LY3p ilysYjcfUC11/S6zJotI/7wHIi4+9mborj39kTNTm6im3WRd4SDw2Te/hMv8RBYZ dyfGNRYgMCitaZv0tkRC6+4Q/sPRRlw3TvtqaeQ/ -----END CERTIFICATE-----Generated at Mon Jan 26 15:35:04 2026 by rpki-client