This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/C3Lj3Wt6YNWIPGHmadEQ-dchhaw.roa File: C3Lj3Wt6YNWIPGHmadEQ-dchhaw.roa (raw, json) Hash identifier: fn0aOrz4mN4OtO/EtlMrSuF4wh5zaQaJSbD2ep7jxzI= Subject key identifier: 0B:72:E3:DD:6B:7A:60:D5:88:3C:61:E6:69:D1:10:F9:D7:21:85:AC Certificate issuer: /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39 Certificate serial: 019B7AC805CE78077816B7823B24622BAAF2 Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/C3Lj3Wt6YNWIPGHmadEQ-dchhaw.roa Signing time: Thu 01 Jan 2026 18:18:07 +0000 ROA not before: Thu 01 Jan 2026 18:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16347 IP address blocks: 2.59.144.0/22 maxlen: 22 5.10.128.0/21 maxlen: 21 5.183.248.0/22 maxlen: 22 23.90.192.0/18 maxlen: 18 31.204.80.0/21 maxlen: 21 45.80.252.0/22 maxlen: 22 45.86.96.0/22 maxlen: 22 45.89.76.0/22 maxlen: 22 45.92.180.0/22 maxlen: 22 45.129.216.0/24 maxlen: 24 45.129.217.0/24 maxlen: 24 45.129.218.0/24 maxlen: 24 45.133.68.0/22 maxlen: 22 45.142.108.0/22 maxlen: 22 45.152.16.0/22 maxlen: 22 46.18.120.0/22 maxlen: 22 46.18.124.0/24 maxlen: 24 46.18.125.0/24 maxlen: 24 46.18.126.0/23 maxlen: 23 62.192.156.0/22 maxlen: 22 79.99.160.0/21 maxlen: 21 88.86.224.0/19 maxlen: 19 88.218.12.0/22 maxlen: 22 92.119.232.0/22 maxlen: 22 94.154.4.0/24 maxlen: 24 94.187.128.0/19 maxlen: 19 168.220.128.0/19 maxlen: 19 185.20.16.0/22 maxlen: 22 185.48.252.0/22 maxlen: 22 185.86.88.0/22 maxlen: 22 185.87.100.0/22 maxlen: 22 185.98.116.0/22 maxlen: 22 185.132.64.0/22 maxlen: 22 185.133.80.0/22 maxlen: 22 185.134.156.0/22 maxlen: 22 185.135.176.0/22 maxlen: 22 185.138.116.0/22 maxlen: 22 185.163.136.0/22 maxlen: 22 185.163.212.0/22 maxlen: 22 185.163.220.0/22 maxlen: 22 185.163.228.0/22 maxlen: 22 185.169.156.0/22 maxlen: 22 185.186.88.0/22 maxlen: 22 185.191.36.0/22 maxlen: 22 185.197.108.0/22 maxlen: 22 185.241.140.0/22 maxlen: 22 185.254.8.0/22 maxlen: 22 192.214.192.0/19 maxlen: 19 195.216.140.0/22 maxlen: 22 212.122.96.0/19 maxlen: 24 2a00:41e0::/29 maxlen: 29 2a00:6780::/29 maxlen: 32 2a00:6780::/32 maxlen: 32 2a01:648::/29 maxlen: 29 2a05:b780::/29 maxlen: 29 2a05:c100::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:05:ce:78:07:78:16:b7:82:3b:24:62:2b:aa:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39 Validity Not Before: Jan 1 18:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b72e3dd6b7a60d5883c61e669d110f9d72185ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a2:27:7e:d1:ad:fe:d3:e6:aa:7b:b1:46:99: 05:a5:d6:f6:7c:ff:a9:7b:b6:a3:26:e2:62:87:3a: d7:6b:20:6f:19:ce:e4:1c:bd:9c:ea:18:1c:ca:d8: 0c:cc:42:f9:4c:e6:30:98:71:f7:70:95:8d:d4:a8: aa:dd:b8:0c:27:0e:b6:53:29:78:fd:b7:e5:21:07: 46:36:2b:e9:ec:df:8e:a8:23:12:a3:38:d8:e3:2c: 2c:f2:8d:76:8e:33:94:9c:34:69:f5:89:29:9c:a2: 7e:23:5b:96:ec:e0:2d:a9:0b:c8:bc:65:b7:ff:dc: 8f:f3:f1:5e:f8:25:b8:fa:01:67:a0:da:fa:0a:38: d5:fe:9f:68:df:90:4c:51:a8:1d:cd:fa:1c:34:23: a8:38:9e:6c:27:18:c1:4b:dc:97:7a:cf:0a:aa:f6: 58:30:54:15:09:20:53:6d:24:77:e1:e3:40:ba:d6: 9b:4f:f5:37:39:6e:a8:ad:53:87:97:63:43:5d:39: ee:e1:02:cf:e8:4c:95:1d:e6:66:ff:97:e5:91:4c: 9d:97:61:20:17:a5:2e:bf:17:59:56:ce:b7:00:a8: c0:bc:54:8d:74:8b:42:0f:35:f0:26:22:61:31:11: 24:5b:3b:95:55:78:5c:d6:dd:76:d6:ff:27:d8:fb: b3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:72:E3:DD:6B:7A:60:D5:88:3C:61:E6:69:D1:10:F9:D7:21:85:AC X509v3 Authority Key Identifier: keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/C3Lj3Wt6YNWIPGHmadEQ-dchhaw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.144.0/22 5.10.128.0/21 5.183.248.0/22 23.90.192.0/18 31.204.80.0/21 45.80.252.0/22 45.86.96.0/22 45.89.76.0/22 45.92.180.0/22 45.129.216.0-45.129.218.255 45.133.68.0/22 45.142.108.0/22 45.152.16.0/22 46.18.120.0/21 62.192.156.0/22 79.99.160.0/21 88.86.224.0/19 88.218.12.0/22 92.119.232.0/22 94.154.4.0/24 94.187.128.0/19 168.220.128.0/19 185.20.16.0/22 185.48.252.0/22 185.86.88.0/22 185.87.100.0/22 185.98.116.0/22 185.132.64.0/22 185.133.80.0/22 185.134.156.0/22 185.135.176.0/22 185.138.116.0/22 185.163.136.0/22 185.163.212.0/22 185.163.220.0/22 185.163.228.0/22 185.169.156.0/22 185.186.88.0/22 185.191.36.0/22 185.197.108.0/22 185.241.140.0/22 185.254.8.0/22 192.214.192.0/19 195.216.140.0/22 212.122.96.0/19 IPv6: 2a00:41e0::/29 2a00:6780::/29 2a01:648::/29 2a05:b780::/29 2a05:c100::/29 Signature Algorithm: sha256WithRSAEncryption 6a:14:1d:c3:20:ce:e6:18:f8:0b:c3:3d:6d:66:7b:b8:56:2d: 39:98:32:c1:41:a4:af:33:9a:b5:78:e6:f8:57:5b:64:3f:9d: c0:7f:c9:78:29:3b:10:1a:b2:e4:a5:4a:95:d6:74:09:d6:61: 59:1f:6b:e6:e6:20:64:ba:98:84:c1:36:bd:07:b2:16:90:f1: 64:74:69:02:66:32:42:5c:37:94:40:06:dc:cf:b6:6f:1d:d3: d7:3e:90:b6:bc:f1:e5:37:ce:0e:2d:89:fd:45:4c:1f:c7:cb: fa:49:69:b1:1b:0c:91:a3:08:ab:b1:78:10:dc:8d:73:93:b6: c8:8a:9d:50:7c:6f:02:e1:d9:b5:51:82:51:59:e5:91:bc:7b: aa:72:22:04:0e:7e:0a:16:70:cf:65:f0:3f:e5:1e:5f:e5:e3: 44:dd:dd:22:ef:0f:11:55:14:51:3f:6f:c9:a5:f2:98:b0:eb: 30:e0:76:5a:4a:ac:01:fd:a6:15:c0:88:12:04:cc:6d:70:13: 3f:38:62:f0:c2:cb:e1:03:2f:c4:7b:47:31:b3:3d:68:66:74: 91:aa:7b:e5:fc:d6:bc:1d:e8:ac:31:64:1c:63:18:ec:0c:c5: 4c:ae:57:d6:6e:b1:55:f9:cd:35:a2:83:9d:44:29:2f:77:ac: eb:84:f6:1b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgISAZt6yAXOeAd4FreCOyRiK6ryMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZDk5MDEzMTQ2N2I3N2QxMTE2MmI3OWZiZTNiMDZjYThh YjJkMzkwHhcNMjYwMTAxMTgxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjcyZTNkZDZiN2E2MGQ1ODgzYzYxZTY2OWQxMTBmOWQ3MjE4NWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KInftGt/tPmqnuxRpkFpdb2fP+p e7ajJuJihzrXayBvGc7kHL2c6hgcytgMzEL5TOYwmHH3cJWN1Kiq3bgMJw62Uyl4 /bflIQdGNivp7N+OqCMSozjY4yws8o12jjOUnDRp9YkpnKJ+I1uW7OAtqQvIvGW3 /9yP8/Fe+CW4+gFnoNr6CjjV/p9o35BMUagdzfocNCOoOJ5sJxjBS9yXes8KqvZY MFQVCSBTbSR34eNAutabT/U3OW6orVOHl2NDXTnu4QLP6EyVHeZm/5flkUydl2Eg F6UuvxdZVs63AKjAvFSNdItCDzXwJiJhMREkWzuVVXhc1t121v8n2Puz3wIDAQAB o4IDTjCCA0owHQYDVR0OBBYEFAty491remDViDxh5mnREPnXIYWsMB8GA1UdIwQY MBaAFIfZkBMUZ7d9ERYrefvjsGyoqy05MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDltUUV4Um50MzBSRml0NS0tT3diS2lyTFRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81ZGVhOTctN2VmNy00ZGIwLTk0YmMt YjhlOGIzNGRiMjkwLzEvQzNMajNXdDZZTldJUEdIbWFkRVEtZGNoaGF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni81ZGVhOTctN2VmNy00ZGIwLTk0YmMtYjhlOGIzNGRiMjkw LzEvaDltUUV4Um50MzBSRml0NS0tT3diS2lyTFRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBYgYIKwYBBQUHAQcBAf8EggFRMIIBTTCCAR4EAgABMIIB FgMEAgI7kAMEAwUKgAMEAgW3+AMEBhdawAMEAx/MUAMEAi1Q/AMEAi1WYAMEAi1Z TAMEAi1ctDAMAwQDLYHYAwQALYHaAwQCLYVEAwQCLY5sAwQCLZgQAwQDLhJ4AwQC PsCcAwQDT2OgAwQFWFbgAwQCWNoMAwQCXHfoAwQAXpoEAwQFXruAAwQFqNyAAwQC uRQQAwQCuTD8AwQCuVZYAwQCuVdkAwQCuWJ0AwQCuYRAAwQCuYVQAwQCuYacAwQC uYewAwQCuYp0AwQCuaOIAwQCuaPUAwQCuaPcAwQCuaPkAwQCuamcAwQCubpYAwQC ub8kAwQCucVsAwQCufGMAwQCuf4IAwQFwNbAAwQCw9iMAwQF1HpgMCkEAgACMCMD BQMqAEHgAwUDKgBngAMFAyoBBkgDBQMqBbeAAwUDKgXBADANBgkqhkiG9w0BAQsF AAOCAQEAahQdwyDO5hj4C8M9bWZ7uFYtOZgywUGkrzOatXjm+FdbZD+dwH/JeCk7 EBqy5KVKldZ0CdZhWR9r5uYgZLqYhME2vQeyFpDxZHRpAmYyQlw3lEAG3M+2bx3T 1z6Qtrzx5TfODi2J/UVMH8fL+klpsRsMkaMIq7F4ENyNc5O2yIqdUHxvAuHZtVGC UVnlkbx7qnIiBA5+ChZwz2XwP+UeX+XjRN3dIu8PEVUUUT9vyaXymLDrMOB2Wkqs Af2mFcCIEgTMbXATPzhi8MLL4QMvxHtHMbM9aGZ0kap75fzWvB3orDFkHGMY7AzF TK5X1m6xVfnNNaKDnUQpL3es64T2Gw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:32 2026 by rpki-client