This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/sIQZHyrMKrx0aGLhGaxyLwG43WI.roa File: sIQZHyrMKrx0aGLhGaxyLwG43WI.roa (raw, json) Hash identifier: 1DHs9q3U0NDHbbr1v8UvKlsFj4sQc1jDRLQRmJtbDIM= Subject key identifier: B0:84:19:1F:2A:CC:2A:BC:74:68:62:E1:19:AC:72:2F:01:B8:DD:62 Certificate issuer: /CN=a4f6d657c0fa21828d313507354dec1481580ed6 Certificate serial: 019B7AC802830479A518CCF466762EE57FF9 Authority key identifier: A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/sIQZHyrMKrx0aGLhGaxyLwG43WI.roa Signing time: Thu 01 Jan 2026 18:18:06 +0000 ROA not before: Thu 01 Jan 2026 18:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1267 IP address blocks: 62.98.0.0/16 maxlen: 16 81.81.0.0/16 maxlen: 16 151.3.0.0/16 maxlen: 16 151.4.0.0/16 maxlen: 16 151.5.0.0/16 maxlen: 16 151.6.0.0/16 maxlen: 16 151.7.0.0/16 maxlen: 16 151.8.0.0/16 maxlen: 16 151.9.0.0/16 maxlen: 16 151.10.0.0/16 maxlen: 16 151.12.0.0/16 maxlen: 16 151.13.0.0/16 maxlen: 16 151.14.0.0/16 maxlen: 16 151.15.0.0/16 maxlen: 16 151.16.0.0/16 maxlen: 16 151.17.0.0/16 maxlen: 16 151.18.0.0/16 maxlen: 16 151.19.0.0/16 maxlen: 16 151.20.0.0/16 maxlen: 16 151.21.0.0/16 maxlen: 16 151.22.0.0/16 maxlen: 16 151.23.0.0/16 maxlen: 16 151.24.0.0/16 maxlen: 16 151.25.0.0/16 maxlen: 16 151.26.0.0/16 maxlen: 16 151.27.0.0/16 maxlen: 16 151.28.0.0/16 maxlen: 16 151.29.0.0/16 maxlen: 16 151.30.0.0/16 maxlen: 16 151.31.0.0/16 maxlen: 16 151.32.0.0/16 maxlen: 16 151.33.0.0/16 maxlen: 16 151.34.0.0/16 maxlen: 16 151.35.0.0/16 maxlen: 16 151.36.0.0/16 maxlen: 16 151.37.0.0/16 maxlen: 16 151.38.0.0/16 maxlen: 16 151.39.0.0/16 maxlen: 16 151.40.0.0/16 maxlen: 16 151.41.0.0/16 maxlen: 16 151.42.0.0/16 maxlen: 16 151.43.0.0/16 maxlen: 16 151.44.0.0/16 maxlen: 16 151.45.0.0/16 maxlen: 16 151.46.0.0/16 maxlen: 16 151.47.0.0/16 maxlen: 16 151.48.0.0/16 maxlen: 16 151.49.0.0/16 maxlen: 16 151.50.0.0/16 maxlen: 16 151.51.0.0/16 maxlen: 16 151.52.0.0/16 maxlen: 16 151.53.0.0/16 maxlen: 16 151.54.0.0/16 maxlen: 16 151.55.0.0/16 maxlen: 16 151.56.0.0/16 maxlen: 16 151.57.0.0/16 maxlen: 16 151.58.0.0/16 maxlen: 16 151.60.0.0/16 maxlen: 16 151.61.0.0/16 maxlen: 16 151.62.0.0/16 maxlen: 16 151.63.0.0/16 maxlen: 16 151.64.0.0/16 maxlen: 16 151.65.0.0/16 maxlen: 16 151.66.0.0/16 maxlen: 16 151.67.0.0/16 maxlen: 16 151.68.0.0/16 maxlen: 16 151.69.0.0/16 maxlen: 16 151.70.0.0/16 maxlen: 16 151.71.0.0/16 maxlen: 16 151.72.0.0/16 maxlen: 16 151.73.0.0/16 maxlen: 16 151.74.0.0/16 maxlen: 16 151.75.0.0/16 maxlen: 16 151.76.0.0/16 maxlen: 16 151.77.0.0/16 maxlen: 16 151.78.0.0/16 maxlen: 16 151.79.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:02:83:04:79:a5:18:cc:f4:66:76:2e:e5:7f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f6d657c0fa21828d313507354dec1481580ed6 Validity Not Before: Jan 1 18:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b084191f2acc2abc746862e119ac722f01b8dd62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4e:04:0d:28:c7:e2:c0:b4:b4:98:a8:57:8e: 11:6f:af:d7:91:9b:d6:1b:ae:1c:db:24:02:b5:fd: b4:b7:09:92:1d:d3:5a:de:f6:8f:15:90:0a:be:14: 2f:9c:01:c1:00:e9:26:28:06:50:d2:59:bc:76:f5: d5:c8:42:cf:11:ce:96:59:df:04:a2:c0:cd:49:ad: e9:84:34:d9:2e:62:c3:0e:ff:8d:58:79:2d:97:a9: 09:54:c1:ef:18:92:3e:73:f6:38:22:ad:51:9a:94: 79:75:cd:10:64:b6:f2:22:8e:32:d7:c3:c0:b5:cc: 20:d6:fc:a0:05:b1:ec:a9:10:e4:c2:31:be:5d:04: f9:78:a6:9f:ba:7d:1c:c9:81:9f:10:c0:b6:ca:8c: 20:79:b6:18:b6:41:71:ba:cc:30:19:a8:90:44:e0: 6e:75:e1:dc:c5:d0:d8:0c:d1:6b:82:88:68:19:61: 86:d1:05:5a:b0:85:71:89:aa:df:e9:b0:68:8c:ae: 70:57:e9:ce:83:7a:33:26:cf:88:3d:73:de:b5:71: b4:e3:63:91:f8:96:83:5a:ec:87:e7:3c:25:22:3b: 28:db:7d:10:03:b5:41:74:97:e8:fb:83:0b:51:45: 74:ba:12:18:0c:4d:a3:0f:88:f0:70:2a:98:3f:73: 9e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:84:19:1F:2A:CC:2A:BC:74:68:62:E1:19:AC:72:2F:01:B8:DD:62 X509v3 Authority Key Identifier: keyid:A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/sIQZHyrMKrx0aGLhGaxyLwG43WI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.98.0.0/16 81.81.0.0/16 151.3.0.0-151.10.255.255 151.12.0.0-151.58.255.255 151.60.0.0-151.79.255.255 Signature Algorithm: sha256WithRSAEncryption c1:42:4c:51:94:92:aa:2a:95:64:4d:a3:ff:d0:d7:f2:7d:6b: 30:c9:de:2e:d1:b2:cb:cb:29:fb:2e:aa:fe:59:17:7f:b9:e5: f2:20:27:8c:de:3e:bf:39:33:44:b6:de:44:8e:f6:e3:82:bc: a0:57:cd:a1:55:f5:00:01:24:1c:83:a4:74:a5:d2:37:7c:04: af:bd:49:4f:9f:ad:b9:f1:fb:39:05:b0:fe:be:a8:4b:d2:27: 01:98:71:37:ca:95:83:22:be:8f:2a:c5:57:fd:09:7b:f5:38: 77:eb:44:ef:80:32:b7:c6:cb:6e:71:04:ef:97:73:a0:6b:01: 34:dd:05:32:77:a6:a8:97:eb:be:82:bc:cb:29:b1:01:cc:3a: 39:ba:0d:a7:06:b9:9a:94:ff:97:65:34:9a:8e:97:e8:3e:fd: 5e:a1:4d:db:73:70:71:77:75:6b:20:65:b6:0b:f3:aa:ba:46: 11:d4:40:2a:8d:a3:ab:ee:48:b3:26:a2:d1:76:7c:d2:7e:06: 5e:1c:7e:55:a7:b7:7e:4b:71:5e:d9:40:86:d7:fd:17:b5:84: e2:ef:83:0e:1b:18:3f:ae:17:55:bb:25:e4:8c:ef:2e:99:58: 4a:1d:d2:62:0b:8e:0f:34:ae:97:77:09:e1:88:3f:fb:65:92: ab:d3:8e:21 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt6yAKDBHmlGMz0ZnYu5X/5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZjZkNjU3YzBmYTIxODI4ZDMxMzUwNzM1NGRlYzE0ODE1 ODBlZDYwHhcNMjYwMTAxMTgxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDg0MTkxZjJhY2MyYWJjNzQ2ODYyZTExOWFjNzIyZjAxYjhkZDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU4EDSjH4sC0tJioV44Rb6/XkZvW G64c2yQCtf20twmSHdNa3vaPFZAKvhQvnAHBAOkmKAZQ0lm8dvXVyELPEc6WWd8E osDNSa3phDTZLmLDDv+NWHktl6kJVMHvGJI+c/Y4Iq1RmpR5dc0QZLbyIo4y18PA tcwg1vygBbHsqRDkwjG+XQT5eKafun0cyYGfEMC2yowgebYYtkFxuswwGaiQROBu deHcxdDYDNFrgohoGWGG0QVasIVxiarf6bBojK5wV+nOg3ozJs+IPXPetXG042OR +JaDWuyH5zwlIjso230QA7VBdJfo+4MLUUV0uhIYDE2jD4jwcCqYP3OedwIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFLCEGR8qzCq8dGhi4Rmsci8BuN1iMB8GA1UdIwQY MBaAFKT21lfA+iGCjTE1BzVN7BSBWA7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBiV1Y4RDZJWUtOTVRVSE5VM3NGSUZZRHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8yMzkzOTctMzQ3Ny00Mzc5LWFjNDYt NWMyNzYzNjQ4ZjFjLzEvc0lRWkh5ck1LcngwYUdMaEdheHlMd0c0M1dJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8yMzkzOTctMzQ3Ny00Mzc5LWFjNDYtNWMyNzYzNjQ4ZjFj LzEvcFBiV1Y4RDZJWUtOTVRVSE5VM3NGSUZZRHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwMAPmIDAwBR UTAKAwMAlwMDAwCXCjAKAwMClwwDAwCXOjAKAwMClzwDAwSXQDANBgkqhkiG9w0B AQsFAAOCAQEAwUJMUZSSqiqVZE2j/9DX8n1rMMneLtGyy8sp+y6q/lkXf7nl8iAn jN4+vzkzRLbeRI7244K8oFfNoVX1AAEkHIOkdKXSN3wEr71JT5+tufH7OQWw/r6o S9InAZhxN8qVgyK+jyrFV/0Je/U4d+tE74Ayt8bLbnEE75dzoGsBNN0FMnemqJfr voK8yymxAcw6OboNpwa5mpT/l2U0mo6X6D79XqFN23NwcXd1ayBltgvzqrpGEdRA Ko2jq+5Isyai0XZ80n4GXhx+Vae3fktxXtlAhtf9F7WE4u+DDhsYP64XVbsl5Izv LplYSh3SYguODzSul3cJ4Yg/+2WSq9OOIQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:32:44 2026 by rpki-client