This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/ScPX6tqlw5o1ZcCYpkNMnCrj72U.roa File: ScPX6tqlw5o1ZcCYpkNMnCrj72U.roa (raw, json) Hash identifier: OWPE9KkCxV1y82ynMwT7Wfz+7H4kVGPyxV8fArKWLm0= Subject key identifier: 49:C3:D7:EA:DA:A5:C3:9A:35:65:C0:98:A6:43:4C:9C:2A:E3:EF:65 Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Certificate serial: 019B7AC933FEE2CAFB05E81119A3F084CF58 Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/ScPX6tqlw5o1ZcCYpkNMnCrj72U.roa Signing time: Thu 01 Jan 2026 18:19:24 +0000 ROA not before: Thu 01 Jan 2026 18:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34400 IP address blocks: 5.108.0.0/14 maxlen: 14 5.244.0.0/14 maxlen: 14 31.166.0.0/15 maxlen: 15 37.121.0.0/16 maxlen: 16 37.124.0.0/14 maxlen: 14 37.240.0.0/14 maxlen: 14 46.52.0.0/17 maxlen: 17 46.152.0.0/15 maxlen: 15 62.120.0.0/16 maxlen: 16 84.23.96.0/19 maxlen: 19 84.23.96.0/20 maxlen: 24 84.23.105.0/24 maxlen: 24 84.23.106.0/24 maxlen: 24 84.23.107.0/24 maxlen: 24 84.23.108.0/24 maxlen: 24 84.23.109.0/24 maxlen: 24 84.23.113.0/24 maxlen: 24 84.23.115.0/24 maxlen: 24 92.48.0.0/18 maxlen: 18 109.82.0.0/15 maxlen: 15 176.16.0.0/14 maxlen: 14 176.224.0.0/15 maxlen: 15 178.80.0.0/15 maxlen: 15 188.132.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:33:fe:e2:ca:fb:05:e8:11:19:a3:f0:84:cf:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Validity Not Before: Jan 1 18:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49c3d7eadaa5c39a3565c098a6434c9c2ae3ef65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:92:3f:94:19:a2:fa:60:1d:18:2e:e9:ae:e8: 08:87:75:8c:f3:42:86:b8:58:32:f5:72:c0:6f:59: 19:0f:c3:1f:97:d1:5b:8c:21:0d:f4:71:10:25:4e: 0c:29:ba:e7:61:8e:4e:91:bc:1f:e7:b0:79:6a:6e: 5f:9c:3c:31:53:d8:de:e7:56:55:c7:c4:af:29:22: 6c:b9:70:cc:c4:8d:74:e0:6c:7a:28:fc:0c:c0:e2: a7:c9:3a:3e:ae:3c:7d:85:21:a4:31:20:90:82:6a: 69:de:a8:a1:80:3d:4c:ee:8d:dd:25:f8:66:87:45: 46:df:7b:cb:86:f9:ea:d6:fe:80:4f:57:bb:fb:3a: 6e:f5:de:80:23:a5:c4:8b:69:70:b5:9f:14:ff:e8: ee:48:51:a8:81:ff:54:e3:60:6a:e5:a3:5b:c5:b9: d4:61:75:da:c8:98:49:68:1b:6f:9f:63:01:a1:aa: d6:91:bc:56:64:af:c0:15:0c:0e:18:2a:8e:29:57: 48:cb:d4:1b:8d:c5:0c:be:bf:34:95:14:67:29:da: 82:c1:2a:f9:69:f7:c4:42:59:82:8f:e7:28:02:9d: ad:05:1f:56:92:5f:67:fd:c1:49:7b:c6:44:a6:c0: cc:2b:22:62:3d:4a:cc:73:a5:e4:0f:11:0e:25:64: 82:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C3:D7:EA:DA:A5:C3:9A:35:65:C0:98:A6:43:4C:9C:2A:E3:EF:65 X509v3 Authority Key Identifier: keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/ScPX6tqlw5o1ZcCYpkNMnCrj72U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.108.0.0/14 5.244.0.0/14 31.166.0.0/15 37.121.0.0/16 37.124.0.0/14 37.240.0.0/14 46.52.0.0/17 46.152.0.0/15 62.120.0.0/16 84.23.96.0/19 92.48.0.0/18 109.82.0.0/15 176.16.0.0/14 176.224.0.0/15 178.80.0.0/15 188.132.0.0/17 Signature Algorithm: sha256WithRSAEncryption 1d:18:2d:ed:81:d4:af:9e:c0:38:32:9c:e6:7f:e0:72:4f:86: 77:4e:4d:39:0a:a5:24:fb:04:fc:c8:02:45:34:b2:7a:3e:7c: 12:f5:9b:8e:bb:6e:3b:71:ba:8f:ef:65:98:1b:3d:5f:33:f3: a6:5d:22:65:27:05:b4:e0:fc:5c:c1:f5:a4:2e:12:e1:89:04: 8e:d6:95:eb:7f:63:6d:14:b1:3b:de:68:d7:9b:63:23:b1:8c: 46:ec:5b:ab:d8:bb:a4:b0:8b:d4:3e:73:c8:b7:95:ab:22:f6: d5:26:16:e5:63:02:36:82:0a:20:96:5c:02:ee:32:2f:52:cd: 15:a0:e4:54:ce:f7:fd:e0:8e:09:2c:4a:87:fc:68:a8:d7:24: 8d:00:c6:6b:f1:dd:9a:61:9a:4f:02:7c:50:e2:a3:48:2a:76: 97:89:21:73:06:aa:bc:10:33:97:2a:19:0b:dd:4b:58:a9:47: 0e:77:fd:71:ad:b3:5c:9d:24:67:95:05:c2:1b:51:c0:b2:02: 11:46:66:d2:c3:80:d9:8e:1a:b6:62:b9:8b:c3:db:86:3e:cf: 03:50:64:cb:8a:87:61:93:31:e7:08:c5:7f:8f:18:c8:6e:24: 12:b4:f5:77:36:4a:5b:0c:9c:ac:40:73:01:76:e3:31:c1:80: 9d:47:e3:26 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZt6yTP+4sr7BegRGaPwhM9YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk OTIyMTIwHhcNMjYwMTAxMTgxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWMzZDdlYWRhYTVjMzlhMzU2NWMwOThhNjQzNGM5YzJhZTNlZjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5I/lBmi+mAdGC7prugIh3WM80KG uFgy9XLAb1kZD8Mfl9FbjCEN9HEQJU4MKbrnYY5Okbwf57B5am5fnDwxU9je51ZV x8SvKSJsuXDMxI104Gx6KPwMwOKnyTo+rjx9hSGkMSCQgmpp3qihgD1M7o3dJfhm h0VG33vLhvnq1v6AT1e7+zpu9d6AI6XEi2lwtZ8U/+juSFGogf9U42Bq5aNbxbnU YXXayJhJaBtvn2MBoarWkbxWZK/AFQwOGCqOKVdIy9QbjcUMvr80lRRnKdqCwSr5 affEQlmCj+coAp2tBR9Wkl9n/cFJe8ZEpsDMKyJiPUrMc6XkDxEOJWSCswIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFEnD1+rapcOaNWXAmKZDTJwq4+9lMB8GA1UdIwQY MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt NDkyNGZhMDAwYjdjLzEvU2NQWDZ0cWx3NW8xWmNDWXBrTk1uQ3JqNzJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwMCBWwDAwIF 9AMDAR+mAwMAJXkDAwIlfAMDAiXwAwQHLjQAAwMBLpgDAwA+eAMEBVQXYAMEBlww AAMDAW1SAwMCsBADAwGw4AMDAbJQAwQHvIQAMA0GCSqGSIb3DQEBCwUAA4IBAQAd GC3tgdSvnsA4Mpzmf+ByT4Z3Tk05CqUk+wT8yAJFNLJ6PnwS9ZuOu247cbqP72WY Gz1fM/OmXSJlJwW04PxcwfWkLhLhiQSO1pXrf2NtFLE73mjXm2MjsYxG7Fur2Luk sIvUPnPIt5WrIvbVJhblYwI2ggogllwC7jIvUs0VoORUzvf94I4JLEqH/Gio1ySN AMZr8d2aYZpPAnxQ4qNIKnaXiSFzBqq8EDOXKhkL3UtYqUcOd/1xrbNcnSRnlQXC G1HAsgIRRmbSw4DZjhq2YrmLw9uGPs8DUGTLiodhkzHnCMV/jxjIbiQStPV3Nkpb DJysQHMBduMxwYCdR+Mm -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:20 2026 by rpki-client