This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/l6HrdleVhy2ogO9R43FSLGOYE-0.roa File: l6HrdleVhy2ogO9R43FSLGOYE-0.roa (raw, json) Hash identifier: I66ExL815Wc0ZDz47aWr6Q06u4QEOdOCM1yWi8w7a+g= Subject key identifier: 97:A1:EB:76:57:95:87:2D:A8:80:EF:51:E3:71:52:2C:63:98:13:ED Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 019B7E39237321FB731D25E70C319468142C Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/l6HrdleVhy2ogO9R43FSLGOYE-0.roa Signing time: Fri 02 Jan 2026 10:20:32 +0000 ROA not before: Fri 02 Jan 2026 10:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 10557 IP address blocks: 31.13.214.0/24 maxlen: 24 37.60.142.0/24 maxlen: 24 37.61.225.0/24 maxlen: 24 37.61.230.0/24 maxlen: 24 87.120.58.0/24 maxlen: 24 87.120.62.0/24 maxlen: 24 87.120.247.0/24 maxlen: 24 87.121.102.0/24 maxlen: 24 93.123.25.0/24 maxlen: 24 93.123.111.0/24 maxlen: 24 94.156.40.0/23 maxlen: 23 94.156.43.0/24 maxlen: 24 94.156.62.0/23 maxlen: 23 94.156.132.0/23 maxlen: 23 94.156.145.0/24 maxlen: 24 94.156.224.0/23 maxlen: 23 158.120.252.0/23 maxlen: 23 188.212.110.0/24 maxlen: 24 192.175.2.0/24 maxlen: 24 198.160.152.0/24 maxlen: 24 203.17.237.0/24 maxlen: 24 203.25.139.0/24 maxlen: 24 203.78.161.0/24 maxlen: 24 203.78.163.0/24 maxlen: 24 203.78.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:23:73:21:fb:73:1d:25:e7:0c:31:94:68:14:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Jan 2 10:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97a1eb765795872da880ef51e371522c639813ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:08:c5:04:18:cf:af:32:71:21:a9:1a:5a:4b: 40:d5:48:7e:9e:78:d9:cd:5e:c1:d6:3c:6d:cb:65: 35:a0:24:e8:93:ea:0f:14:e5:9a:e0:eb:ad:28:fd: fc:1a:1f:08:20:dd:b5:f9:ae:5f:c8:3e:89:c1:eb: e1:4b:44:67:56:b5:ed:ef:d7:c0:ae:2f:f9:85:95: 88:23:ce:76:52:8c:b5:a4:f0:b5:ca:66:58:30:ef: 7c:3f:9b:d2:89:15:2d:23:f2:f8:cb:33:23:2e:ef: 4c:71:85:ca:c2:2b:54:2b:ae:48:28:63:e8:90:5f: c6:f4:98:c9:de:c5:69:01:f7:77:cc:cf:6d:5e:83: 99:b7:f5:22:1d:37:ea:fd:9f:e0:07:79:aa:6f:fd: 99:1c:a3:47:05:66:9d:42:c6:34:03:22:13:17:3c: 64:78:b2:d9:cd:58:28:1e:cb:7b:7f:67:9a:66:be: 7d:67:cf:48:37:ae:6d:32:f1:91:6a:42:f4:e1:ef: cd:be:47:53:60:32:d0:bf:2a:43:f9:d3:75:94:ca: 7a:c1:13:d0:d3:00:cf:77:fb:97:7b:34:fc:dc:61: 46:17:83:44:a0:ff:45:8d:b2:d4:08:c0:62:fa:94: 8b:7e:e6:75:ba:84:61:69:93:a7:7c:16:45:4d:38: 0f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A1:EB:76:57:95:87:2D:A8:80:EF:51:E3:71:52:2C:63:98:13:ED X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/l6HrdleVhy2ogO9R43FSLGOYE-0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.13.214.0/24 37.60.142.0/24 37.61.225.0/24 37.61.230.0/24 87.120.58.0/24 87.120.62.0/24 87.120.247.0/24 87.121.102.0/24 93.123.25.0/24 93.123.111.0/24 94.156.40.0/23 94.156.43.0/24 94.156.62.0/23 94.156.132.0/23 94.156.145.0/24 94.156.224.0/23 158.120.252.0/23 188.212.110.0/24 192.175.2.0/24 198.160.152.0/24 203.17.237.0/24 203.25.139.0/24 203.78.161.0/24 203.78.163.0-203.78.164.255 Signature Algorithm: sha256WithRSAEncryption 2a:cc:c5:18:43:cb:2d:8a:a6:f0:08:74:09:99:30:13:74:5b: ee:24:ca:76:b2:d9:74:b9:5f:25:ad:74:0e:85:02:7a:39:13: 63:c4:01:00:4d:70:82:ae:a9:a4:20:5b:bd:94:8a:6d:df:f4: 3c:76:c5:e1:8c:ee:c0:7c:db:4e:c1:42:57:b1:ad:08:23:bc: 15:92:5a:7c:50:96:a9:5c:72:bc:ae:39:7a:a0:9c:e8:1f:c5: 34:40:85:1c:2e:cf:f8:9e:e9:21:ba:ef:95:62:f9:33:14:36: 97:8c:bb:08:7b:f0:8f:48:0e:f9:42:15:98:cb:6e:7e:ff:9b: 71:99:92:7b:cc:ea:74:1e:e8:2a:5c:b7:1f:0a:71:dc:6c:7d: a9:03:6f:14:6c:d7:45:1b:76:7c:5d:f3:5b:73:61:e3:91:ac: 0d:85:e5:75:72:82:fc:6c:8a:12:41:9f:b9:ce:a7:63:36:a7: 48:49:4d:53:83:4c:a6:b1:1b:ac:5a:f1:65:bb:33:47:ab:34: fa:7e:36:cb:4b:2a:bd:79:9d:53:d7:cd:cd:37:62:77:d0:5a: 8c:6a:b7:e9:41:1b:99:0f:92:69:9d:04:6f:1a:3b:f3:e4:a1: 63:1e:52:3c:6c:02:ea:ea:bd:e1:c6:21:61:37:be:df:67:31: 6f:c8:b7:08 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+OSNzIftzHSXnDDGUaBQsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjYwMTAyMTAyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2ExZWI3NjU3OTU4NzJkYTg4MGVmNTFlMzcxNTIyYzYzOTgxM2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQjFBBjPrzJxIakaWktA1Uh+nnjZ zV7B1jxty2U1oCTok+oPFOWa4OutKP38Gh8IIN21+a5fyD6JwevhS0RnVrXt79fA ri/5hZWII852Uoy1pPC1ymZYMO98P5vSiRUtI/L4yzMjLu9McYXKwitUK65IKGPo kF/G9JjJ3sVpAfd3zM9tXoOZt/UiHTfq/Z/gB3mqb/2ZHKNHBWadQsY0AyITFzxk eLLZzVgoHst7f2eaZr59Z89IN65tMvGRakL04e/NvkdTYDLQvypD+dN1lMp6wRPQ 0wDPd/uXezT83GFGF4NEoP9FjbLUCMBi+pSLfuZ1uoRhaZOnfBZFTTgPvQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFJeh63ZXlYctqIDvUeNxUixjmBPtMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvbDZIcmRsZVZoeTJvZ085UjQzRlNMR09ZRS0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG1BggrBgEFBQcBBwEB/wSBpTCBojCBnwQCAAEwgZgDBAAf DdYDBAAlPI4DBAAlPeEDBAAlPeYDBABXeDoDBABXeD4DBABXePcDBABXeWYDBABd exkDBABde28DBAFenCgDBABenCsDBAFenD4DBAFenIQDBABenJEDBAFenOADBAGe ePwDBAC81G4DBADArwIDBADGoJgDBADLEe0DBADLGYsDBADLTqEwDAMEAMtOowME AMtOpDANBgkqhkiG9w0BAQsFAAOCAQEAKszFGEPLLYqm8Ah0CZkwE3Rb7iTKdrLZ dLlfJa10DoUCejkTY8QBAE1wgq6ppCBbvZSKbd/0PHbF4YzuwHzbTsFCV7GtCCO8 FZJafFCWqVxyvK45eqCc6B/FNECFHC7P+J7pIbrvlWL5MxQ2l4y7CHvwj0gO+UIV mMtufv+bcZmSe8zqdB7oKly3Hwpx3Gx9qQNvFGzXRRt2fF3zW3Nh45GsDYXldXKC /GyKEkGfuc6nYzanSElNU4NMprEbrFrxZbszR6s0+n42y0sqvXmdU9fNzTdid9Ba jGq36UEbmQ+SaZ0Ebxo78+ShYx5SPGwC6uq94cYhYTe+32cxb8i3CA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:35:49 2026 by rpki-client