This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/njAjm5IVy_ku-IroQUFvnNMEVwo.roa File: njAjm5IVy_ku-IroQUFvnNMEVwo.roa (raw, json) Hash identifier: 4YYCc4uei3qwSyUA4VakxjfTbp3ntcHw/0Om+WMIZxk= Subject key identifier: 9E:30:23:9B:92:15:CB:F9:2E:F8:8A:E8:41:41:6F:9C:D3:04:57:0A Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Certificate serial: 019B9923BB1556CC9041A29FF6A2F93C609A Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/njAjm5IVy_ku-IroQUFvnNMEVwo.roa Signing time: Wed 07 Jan 2026 15:46:54 +0000 ROA not before: Wed 07 Jan 2026 15:46:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48309 IP address blocks: 37.191.64.0/20 maxlen: 24 37.191.92.0/22 maxlen: 24 188.136.128.0/24 maxlen: 24 188.136.129.0/24 maxlen: 24 188.136.130.0/24 maxlen: 24 188.136.131.0/24 maxlen: 24 188.136.132.0/24 maxlen: 24 188.136.133.0/24 maxlen: 24 188.136.135.0/24 maxlen: 24 188.136.140.0/24 maxlen: 24 188.136.142.0/24 maxlen: 24 188.136.143.0/24 maxlen: 24 188.136.144.0/24 maxlen: 24 188.136.146.0/24 maxlen: 24 188.136.147.0/24 maxlen: 24 188.136.149.0/24 maxlen: 24 188.136.150.0/24 maxlen: 24 188.136.152.0/24 maxlen: 24 188.136.153.0/24 maxlen: 24 188.136.154.0/24 maxlen: 24 188.136.155.0/24 maxlen: 24 188.136.156.0/24 maxlen: 24 188.136.160.0/24 maxlen: 24 188.136.161.0/24 maxlen: 24 188.136.163.0/24 maxlen: 24 188.136.164.0/24 maxlen: 24 188.136.166.0/24 maxlen: 24 188.136.167.0/24 maxlen: 24 188.136.168.0/24 maxlen: 24 188.136.169.0/24 maxlen: 24 188.136.170.0/24 maxlen: 24 188.136.171.0/24 maxlen: 24 188.136.172.0/24 maxlen: 24 188.136.173.0/24 maxlen: 24 188.136.196.0/24 maxlen: 24 188.136.210.0/24 maxlen: 24 188.136.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:99:23:bb:15:56:cc:90:41:a2:9f:f6:a2:f9:3c:60:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Validity Not Before: Jan 7 15:46:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e30239b9215cbf92ef88ae841416f9cd304570a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b4:85:61:6e:ff:8f:dd:6c:82:1e:5f:90:71: cc:af:a0:66:d7:49:47:5a:b4:ae:8d:db:94:1b:68: 7f:92:e7:07:5d:b9:c4:50:7b:05:0d:69:04:cb:c5: 85:49:cb:01:3b:58:97:55:1d:37:f3:ff:a7:f2:31: 7a:5f:08:dd:a6:5d:5c:ae:15:d6:0d:8c:f6:24:74: 5e:9b:a2:11:0e:d7:f0:d9:5b:98:59:7b:1f:84:9c: 1d:39:09:33:21:ab:3d:0b:a0:21:43:fe:c7:ed:d2: fa:d7:d8:57:b6:a4:ef:d0:b1:37:83:a1:70:13:4e: 22:8d:e9:65:6f:7c:86:8e:82:41:99:5e:a7:aa:d2: c5:08:18:ec:bf:f8:e0:2e:0c:95:57:2d:f1:74:03: 33:90:cf:d3:36:bc:df:55:83:3e:35:02:24:a5:a8: b7:05:5e:94:21:96:4c:cc:16:b3:e5:b1:51:be:be: 31:dd:8d:ab:fd:01:89:2a:e7:e3:72:cb:52:e4:45: a3:35:00:45:e9:ad:f2:7b:2f:be:e9:82:85:a2:22: 4b:05:d8:2a:7b:ec:02:63:eb:57:fb:1f:02:f0:f1: 3b:68:14:f9:1a:b7:3e:aa:98:67:d1:dc:a7:85:8e: 23:e6:fb:5b:a7:a5:01:65:46:e6:0b:c7:88:f8:73: 10:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:30:23:9B:92:15:CB:F9:2E:F8:8A:E8:41:41:6F:9C:D3:04:57:0A X509v3 Authority Key Identifier: keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/njAjm5IVy_ku-IroQUFvnNMEVwo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.191.64.0/20 37.191.92.0/22 188.136.128.0-188.136.133.255 188.136.135.0/24 188.136.140.0/24 188.136.142.0-188.136.144.255 188.136.146.0/23 188.136.149.0-188.136.150.255 188.136.152.0-188.136.156.255 188.136.160.0/23 188.136.163.0-188.136.164.255 188.136.166.0-188.136.173.255 188.136.196.0/24 188.136.210.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:4b:41:3b:54:d2:53:78:35:d6:1a:fc:e5:ff:c9:89:14:ee: fd:8b:9e:82:7f:33:58:d2:38:5f:62:19:1a:05:3a:26:f3:c3: 6b:86:29:8c:61:16:4f:61:af:ce:28:f5:4d:fd:bd:1b:a3:71: f2:78:6e:e9:c0:81:ba:fb:4f:97:f0:3e:b5:10:64:18:f7:d2: b2:09:12:fa:17:95:3b:82:75:ea:51:26:4f:1a:64:e0:50:e3: 66:45:49:25:13:a2:ec:42:4c:0a:11:78:a7:ee:17:a2:74:4a: d3:dd:12:5d:94:ab:7e:09:16:7e:f1:ac:e0:94:14:59:b5:42: 0f:a2:eb:85:51:19:7a:8f:3e:59:83:76:b8:ca:22:09:08:35: bd:99:3c:16:f1:3f:f8:c2:41:c7:68:11:b3:39:07:e0:9d:b0: 00:ee:85:dd:c2:4b:d0:1c:18:47:08:17:25:75:26:d4:42:11: 2b:01:c3:40:bf:6c:db:3c:fd:7e:0d:6a:d6:83:89:a2:ad:bb: 84:b6:4f:d6:01:8d:84:fb:6c:f9:ac:2e:9b:4e:be:a6:12:21: 13:83:97:0e:1b:ab:a2:34:64:b7:b7:f0:02:9a:dd:70:fe:0e: f6:72:ff:73:36:74:af:bc:f4:c0:b3:f9:40:6c:91:95:a9:3e: b3:b6:1c:d2 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZuZI7sVVsyQQaKf9qL5PGCaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi YjgwZTEwHhcNMjYwMTA3MTU0NjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTMwMjM5YjkyMTVjYmY5MmVmODhhZTg0MTQxNmY5Y2QzMDQ1NzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rSFYW7/j91sgh5fkHHMr6Bm10lH WrSujduUG2h/kucHXbnEUHsFDWkEy8WFScsBO1iXVR038/+n8jF6Xwjdpl1crhXW DYz2JHRem6IRDtfw2VuYWXsfhJwdOQkzIas9C6AhQ/7H7dL619hXtqTv0LE3g6Fw E04ijellb3yGjoJBmV6nqtLFCBjsv/jgLgyVVy3xdAMzkM/TNrzfVYM+NQIkpai3 BV6UIZZMzBaz5bFRvr4x3Y2r/QGJKufjcstS5EWjNQBF6a3yey++6YKFoiJLBdgq e+wCY+tX+x8C8PE7aBT5Grc+qphn0dynhY4j5vtbp6UBZUbmC8eI+HMQuQIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFJ4wI5uSFcv5LviK6EFBb5zTBFcKMB8GA1UdIwQY MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt Y2MyZmFmZTNhOGI0LzEvbmpBam01SVZ5X2t1LUlyb1FVRnZuTk1FVndvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0 LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGhBggrBgEFBQcBBwEB/wSBkTCBjjCBiwQCAAEwgYQDBAQl v0ADBAIlv1wwDAMEB7yIgAMEAbyIhAMEALyIhwMEALyIjDAMAwQBvIiOAwQAvIiQ AwQBvIiSMAwDBAC8iJUDBAC8iJYwDAMEA7yImAMEALyInAMEAbyIoDAMAwQAvIij AwQAvIikMAwDBAG8iKYDBAG8iKwDBAC8iMQDBAG8iNIwDQYJKoZIhvcNAQELBQAD ggEBADxLQTtU0lN4NdYa/OX/yYkU7v2LnoJ/M1jSOF9iGRoFOibzw2uGKYxhFk9h r84o9U39vRujcfJ4bunAgbr7T5fwPrUQZBj30rIJEvoXlTuCdepRJk8aZOBQ42ZF SSUTouxCTAoReKfuF6J0StPdEl2Uq34JFn7xrOCUFFm1Qg+i64VRGXqPPlmDdrjK IgkINb2ZPBbxP/jCQcdoEbM5B+CdsADuhd3CS9AcGEcIFyV1JtRCESsBw0C/bNs8 /X4NataDiaKtu4S2T9YBjYT7bPmsLptOvqYSIRODlw4bq6I0ZLe38AKa3XD+DvZy /3M2dK+89MCz+UBskZWpPrO2HNI= -----END CERTIFICATE-----Generated at Mon Jan 26 07:08:09 2026 by rpki-client