This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/W684H9ZjjArniCEjwC9yQkmGBu0.roa File: W684H9ZjjArniCEjwC9yQkmGBu0.roa (raw, json) Hash identifier: U9JAd0XMmzuPxuOF9oeLFcesJRjPBSGh98hvwqHnhgM= Subject key identifier: 5B:AF:38:1F:D6:63:8C:0A:E7:88:21:23:C0:2F:72:42:49:86:06:ED Certificate issuer: /CN=b14aba8b60749393478e83c360e6cbd75d156f89 Certificate serial: 019B7B358B4ADE98BFF01199CDC4DF722082 Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/W684H9ZjjArniCEjwC9yQkmGBu0.roa Signing time: Thu 01 Jan 2026 20:17:45 +0000 ROA not before: Thu 01 Jan 2026 20:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44565 IP address blocks: 79.171.16.0/24 maxlen: 24 79.171.17.0/24 maxlen: 24 79.171.18.0/24 maxlen: 24 79.171.19.0/24 maxlen: 24 79.171.20.0/24 maxlen: 24 79.171.21.0/24 maxlen: 24 93.186.112.0/24 maxlen: 24 93.186.113.0/24 maxlen: 24 93.186.114.0/24 maxlen: 24 93.186.115.0/24 maxlen: 24 93.186.116.0/24 maxlen: 24 93.186.117.0/24 maxlen: 24 93.186.118.0/24 maxlen: 24 93.186.119.0/24 maxlen: 24 93.186.120.0/24 maxlen: 24 93.186.121.0/24 maxlen: 24 93.186.122.0/24 maxlen: 24 93.186.123.0/24 maxlen: 24 93.186.124.0/24 maxlen: 24 93.186.126.0/24 maxlen: 24 93.186.127.0/24 maxlen: 24 185.93.248.0/24 maxlen: 24 188.124.1.0/24 maxlen: 24 188.124.2.0/24 maxlen: 24 188.124.4.0/24 maxlen: 24 188.124.7.0/24 maxlen: 24 188.124.8.0/24 maxlen: 24 188.124.9.0/24 maxlen: 24 188.124.10.0/24 maxlen: 24 188.124.11.0/24 maxlen: 24 188.124.12.0/24 maxlen: 24 188.124.13.0/24 maxlen: 24 188.124.14.0/24 maxlen: 24 188.124.15.0/24 maxlen: 24 188.124.16.0/24 maxlen: 24 188.124.17.0/24 maxlen: 24 188.124.18.0/24 maxlen: 24 188.124.19.0/24 maxlen: 24 188.124.20.0/24 maxlen: 24 188.124.21.0/24 maxlen: 24 188.124.23.0/24 maxlen: 24 188.124.24.0/24 maxlen: 24 188.124.25.0/24 maxlen: 24 188.124.26.0/24 maxlen: 24 188.124.27.0/24 maxlen: 24 188.124.28.0/24 maxlen: 24 188.124.29.0/24 maxlen: 24 188.124.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:8b:4a:de:98:bf:f0:11:99:cd:c4:df:72:20:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89 Validity Not Before: Jan 1 20:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5baf381fd6638c0ae7882123c02f7242498606ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3e:32:92:08:2c:81:ff:2a:06:c7:82:a5:11: d9:1b:d0:17:c0:6b:e3:aa:54:8d:e4:25:45:34:a3: 9f:2a:b6:41:74:82:22:f7:c5:d3:96:f0:fb:ba:5f: 23:00:ac:ed:ed:a1:da:25:59:f0:48:25:d5:51:86: cb:54:a9:88:88:ec:48:39:b1:62:75:90:9e:1f:df: 76:b0:2d:c7:25:d1:af:7a:14:11:b4:2c:cf:97:4d: 69:81:ed:eb:fd:73:38:56:7e:44:26:1b:d5:54:29: 53:7b:24:be:e1:22:66:d2:fc:b0:4d:be:6b:d3:27: 72:1f:3e:72:97:65:b8:b6:3b:b4:87:c4:7e:90:d4: c4:50:82:7e:b1:44:f6:86:d8:0c:bc:47:e3:2c:6f: dc:c1:1b:0a:ee:3c:08:ed:90:0c:8e:97:8a:12:7b: ea:ed:70:bf:c9:ef:d1:39:79:93:76:9e:6b:15:68: 16:b7:27:43:38:b0:fd:56:63:76:74:3b:5e:48:9d: c9:f3:99:d0:0e:32:8d:88:db:ff:68:bb:93:39:e4: c5:f1:db:4c:4a:71:15:10:01:f1:59:2c:32:22:d9: ef:ec:24:12:97:1b:a2:27:c9:b1:89:81:2e:8d:64: 94:11:3b:3a:c4:d6:22:b8:01:47:8b:17:d7:71:19: 88:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AF:38:1F:D6:63:8C:0A:E7:88:21:23:C0:2F:72:42:49:86:06:ED X509v3 Authority Key Identifier: keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/W684H9ZjjArniCEjwC9yQkmGBu0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.171.16.0-79.171.21.255 93.186.112.0-93.186.124.255 93.186.126.0/23 185.93.248.0/24 188.124.1.0-188.124.2.255 188.124.4.0/24 188.124.7.0-188.124.21.255 188.124.23.0-188.124.30.255 Signature Algorithm: sha256WithRSAEncryption 60:d8:bd:31:1d:e8:24:a7:af:6c:2f:70:f5:ce:4c:7f:04:4a: 3e:60:01:1e:67:90:80:46:0c:0e:0a:86:3a:9e:1a:78:db:b3: 47:d9:94:e6:98:92:d0:0d:79:50:1e:76:6e:af:18:ce:d4:2e: a7:8d:70:4d:c1:1c:e7:32:18:5e:c2:0b:18:8a:89:87:6d:ef: 9f:b8:03:d6:28:d1:95:d6:77:7e:db:4e:34:36:f9:61:c3:d1: 57:07:12:a4:08:6e:13:10:42:bb:5e:28:0f:0b:b0:b5:8b:3e: 96:36:80:00:51:93:45:dc:4d:86:5c:63:0c:e6:a0:42:4b:fa: 05:d4:d0:e9:7d:bd:dc:05:24:70:02:c8:a5:fc:33:4b:47:d2: 99:15:ed:29:ca:13:53:00:a7:e7:54:3f:31:38:40:7c:d9:71: 02:76:ec:fa:f6:16:ef:ba:5a:b3:80:94:83:08:9b:8d:14:90: 85:98:9e:fd:9e:69:85:bd:94:26:b8:7c:b6:33:64:2d:84:75: fb:a4:76:01:ff:0e:5f:80:4a:ce:6c:dc:f1:db:f1:ea:93:bb: 6e:b3:9d:5e:f0:f5:2e:44:5d:4f:85:c1:dd:9c:41:40:dd:c9: 08:89:4e:59:8e:5d:dd:3f:b9:79:38:0c:77:bc:10:18:a4:ff: 00:e2:0a:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgISAZt7NYtK3pi/8BGZzcTfciCCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNGFiYThiNjA3NDkzOTM0NzhlODNjMzYwZTZjYmQ3NWQx NTZmODkwHhcNMjYwMTAxMjAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmFmMzgxZmQ2NjM4YzBhZTc4ODIxMjNjMDJmNzI0MjQ5ODYwNmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj4ykggsgf8qBseCpRHZG9AXwGvj qlSN5CVFNKOfKrZBdIIi98XTlvD7ul8jAKzt7aHaJVnwSCXVUYbLVKmIiOxIObFi dZCeH992sC3HJdGvehQRtCzPl01pge3r/XM4Vn5EJhvVVClTeyS+4SJm0vywTb5r 0ydyHz5yl2W4tju0h8R+kNTEUIJ+sUT2htgMvEfjLG/cwRsK7jwI7ZAMjpeKEnvq 7XC/ye/ROXmTdp5rFWgWtydDOLD9VmN2dDteSJ3J85nQDjKNiNv/aLuTOeTF8dtM SnEVEAHxWSwyItnv7CQSlxuiJ8mxiYEujWSUETs6xNYiuAFHixfXcRmIBQIDAQAB o4ICWzCCAlcwHQYDVR0OBBYEFFuvOB/WY4wK54ghI8AvckJJhgbtMB8GA1UdIwQY MBaAFLFKuotgdJOTR46Dw2Dmy9ddFW+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1VxNmkyQjBrNU5Iam9QRFlPYkwxMTBWYjRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80NjE2ODUtMDczZS00MWFmLTliYjYt Y2Y2YzMwNTIxMmViLzEvVzY4NEg5WmpqQXJuaUNFandDOXlRa21HQnUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi80NjE2ODUtMDczZS00MWFmLTliYjYtY2Y2YzMwNTIxMmVi LzEvc1VxNmkyQjBrNU5Iam9QRFlPYkwxMTBWYjRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBeBAIAATBYMAwDBARPqxAD BAFPqxQwDAMEBF26cAMEAF26fAMEAV26fgMEALld+DAMAwQAvHwBAwQAvHwCAwQA vHwEMAwDBAC8fAcDBAG8fBQwDAMEALx8FwMEALx8HjANBgkqhkiG9w0BAQsFAAOC AQEAYNi9MR3oJKevbC9w9c5MfwRKPmABHmeQgEYMDgqGOp4aeNuzR9mU5piS0A15 UB52bq8YztQup41wTcEc5zIYXsILGIqJh23vn7gD1ijRldZ3fttONDb5YcPRVwcS pAhuExBCu14oDwuwtYs+ljaAAFGTRdxNhlxjDOagQkv6BdTQ6X293AUkcALIpfwz S0fSmRXtKcoTUwCn51Q/MThAfNlxAnbs+vYW77pas4CUgwibjRSQhZie/Z5phb2U Jrh8tjNkLYR1+6R2Af8OX4BKzmzc8dvx6pO7brOdXvD1LkRdT4XB3ZxBQN3JCIlO WY5d3T+5eTgMd7wQGKT/AOIKyQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:43:19 2026 by rpki-client