This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/iimjKUl-qjBPkN04_QBUYyWdW7o.roa File: iimjKUl-qjBPkN04_QBUYyWdW7o.roa (raw, json) Hash identifier: T+YUf0Z6oxTt8MxUmLWzLVl7rc+n8K/6kIavpWBwNJ4= Subject key identifier: 8A:29:A3:29:49:7E:AA:30:4F:90:DD:38:FD:00:54:63:25:9D:5B:BA Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Certificate serial: 019B77C76F34212E6A6F7BCAABA719A2E188 Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/iimjKUl-qjBPkN04_QBUYyWdW7o.roa Signing time: Thu 01 Jan 2026 04:18:37 +0000 ROA not before: Thu 01 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8308 IP address blocks: 194.92.0.0/16 maxlen: 16 194.92.32.0/24 maxlen: 24 194.92.33.0/24 maxlen: 24 194.92.34.0/24 maxlen: 24 194.92.35.0/24 maxlen: 24 194.92.36.0/24 maxlen: 24 194.92.37.0/24 maxlen: 24 194.92.38.0/24 maxlen: 24 194.92.39.0/24 maxlen: 24 194.92.40.0/24 maxlen: 24 194.92.41.0/24 maxlen: 24 194.92.42.0/24 maxlen: 24 194.92.43.0/24 maxlen: 24 194.92.44.0/24 maxlen: 24 194.92.45.0/24 maxlen: 24 194.92.46.0/24 maxlen: 24 194.92.47.0/24 maxlen: 24 194.92.48.0/24 maxlen: 24 194.92.49.0/24 maxlen: 24 194.92.50.0/24 maxlen: 24 194.92.51.0/24 maxlen: 24 194.92.52.0/24 maxlen: 24 194.92.53.0/24 maxlen: 24 194.92.54.0/24 maxlen: 24 194.92.55.0/24 maxlen: 24 194.92.56.0/24 maxlen: 24 194.92.57.0/24 maxlen: 24 194.92.58.0/24 maxlen: 24 194.92.59.0/24 maxlen: 24 194.92.60.0/24 maxlen: 24 194.92.61.0/24 maxlen: 24 194.92.62.0/24 maxlen: 24 194.92.63.0/24 maxlen: 24 194.92.77.0/24 maxlen: 24 194.92.102.0/24 maxlen: 24 2a0a:3a40::/32 maxlen: 32 2a0a:3a40:1004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6f:34:21:2e:6a:6f:7b:ca:ab:a7:19:a2:e1:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Validity Not Before: Jan 1 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a29a329497eaa304f90dd38fd005463259d5bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:96:08:67:bb:c1:02:9e:db:41:73:b5:c2:88: 47:e6:3f:ae:5e:e2:c4:40:aa:a7:90:c6:46:d2:41: 3d:9a:34:16:50:91:f8:71:8d:7d:d2:be:9c:84:7d: 71:f0:38:bc:63:18:80:17:0e:02:71:87:7b:5f:10: 94:c9:fd:24:38:50:27:a7:4d:3c:10:2e:4d:94:a5: 34:85:af:8a:1b:31:e7:9b:1b:ae:7c:ae:ce:43:8e: da:62:2c:26:a8:34:be:c5:da:3f:92:30:11:84:e4: 22:72:8a:c6:ce:af:26:7d:ba:43:7c:43:ad:64:cc: 4d:68:19:3b:93:98:d5:b4:f2:f1:30:f5:9e:56:53: eb:a7:24:03:e6:47:11:5e:74:08:cb:9a:fc:ed:81: b6:b1:3b:77:6e:47:33:6c:70:33:a8:3d:8b:25:9c: cf:ec:e5:33:79:00:00:aa:61:87:65:74:06:60:80: 17:cc:f7:c7:3f:dd:3d:81:9a:e5:69:70:5d:67:ff: 70:83:8c:53:ab:74:8e:f6:d9:cf:12:fc:1b:81:c1: 9d:8c:d6:61:63:70:4b:11:f4:fe:9e:91:6c:24:82: b6:16:43:97:ac:0c:17:aa:33:a1:d0:db:84:79:a3: 1f:96:aa:30:7f:20:f4:8d:45:c0:be:d4:37:e3:55: 58:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:29:A3:29:49:7E:AA:30:4F:90:DD:38:FD:00:54:63:25:9D:5B:BA X509v3 Authority Key Identifier: keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/iimjKUl-qjBPkN04_QBUYyWdW7o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.92.0.0/16 IPv6: 2a0a:3a40::/32 Signature Algorithm: sha256WithRSAEncryption 2b:48:8c:8e:cb:4d:88:fe:18:a9:c5:f1:12:09:fa:91:38:d3: 25:21:e9:db:6b:cd:ae:4b:fb:4f:d7:d2:85:3f:56:17:d2:bb: f9:2a:2b:88:28:eb:36:87:f9:de:4c:c3:ec:37:9d:f1:07:9c: b7:49:90:b0:62:6c:7c:f5:c1:2a:d5:ea:88:1b:e5:3e:04:70: 87:ca:3e:b4:4b:8c:c6:6e:b5:07:88:7e:2d:27:0a:1f:b0:3e: 30:81:bd:86:6b:e9:09:95:de:98:cc:3e:78:62:12:3e:4f:96: 05:96:f9:be:1c:3f:15:89:66:cf:d6:62:ee:bf:cf:d7:0b:a1: bb:2e:eb:73:3e:62:58:67:bd:99:76:02:bb:88:5e:23:ae:bc: 98:7d:db:e1:2c:68:58:64:e5:a9:09:ae:2d:b8:43:c3:3d:fd: 3d:a3:3d:1d:82:2f:b8:cd:cf:33:4a:a9:2c:da:c8:d2:6b:e4: 20:40:4e:c8:94:22:49:9b:80:21:a4:e6:53:5f:15:70:4b:ad: 58:c6:e0:a2:74:3b:25:b0:84:a3:01:af:6c:51:ec:46:32:6a: 54:55:4a:3e:8f:3b:4c:d3:7e:68:10:ad:b5:bc:4a:6f:35:9a: cf:ab:08:1e:2a:c4:d7:46:e9:eb:9b:31:8f:c7:0b:dc:12:91: 1e:00:a6:2d -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt3x280IS5qb3vKq6cZouGIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOWU5Njk2ZGNjZjZjMWE0MzIwOTA0MDg1MTRhZWNkYzNm NjA3MzkwHhcNMjYwMTAxMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTI5YTMyOTQ5N2VhYTMwNGY5MGRkMzhmZDAwNTQ2MzI1OWQ1YmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJYIZ7vBAp7bQXO1wohH5j+uXuLE QKqnkMZG0kE9mjQWUJH4cY190r6chH1x8Di8YxiAFw4CcYd7XxCUyf0kOFAnp008 EC5NlKU0ha+KGzHnmxuufK7OQ47aYiwmqDS+xdo/kjARhOQicorGzq8mfbpDfEOt ZMxNaBk7k5jVtPLxMPWeVlPrpyQD5kcRXnQIy5r87YG2sTt3bkczbHAzqD2LJZzP 7OUzeQAAqmGHZXQGYIAXzPfHP909gZrlaXBdZ/9wg4xTq3SO9tnPEvwbgcGdjNZh Y3BLEfT+npFsJIK2FkOXrAwXqjOh0NuEeaMflqowfyD0jUXAvtQ341VYaQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFIopoylJfqowT5DdOP0AVGMlnVu6MB8GA1UdIwQY MBaAFG+elpbcz2waQyCQQIUUrs3D9gc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjIt YmFmNGUwYjRhNjllLzEvaWltaktVbC1xakJQa04wNF9RQlVZeVdkVzdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjItYmFmNGUwYjRhNjll LzEvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDALBAIAATAFAwMAwlwwDQQC AAIwBwMFACoKOkAwDQYJKoZIhvcNAQELBQADggEBACtIjI7LTYj+GKnF8RIJ+pE4 0yUh6dtrza5L+0/X0oU/VhfSu/kqK4go6zaH+d5Mw+w3nfEHnLdJkLBibHz1wSrV 6ogb5T4EcIfKPrRLjMZutQeIfi0nCh+wPjCBvYZr6QmV3pjMPnhiEj5PlgWW+b4c PxWJZs/WYu6/z9cLobsu63M+YlhnvZl2AruIXiOuvJh92+EsaFhk5akJri24Q8M9 /T2jPR2CL7jNzzNKqSzayNJr5CBATsiUIkmbgCGk5lNfFXBLrVjG4KJ0OyWwhKMB r2xR7EYyalRVSj6PO0zTfmgQrbW8Sm81ms+rCB4qxNdG6eubMY/HC9wSkR4Api0= -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:59 2026 by rpki-client