This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/rDqpWECW0pza-2J9_z5v1QcmMYM.roa File: rDqpWECW0pza-2J9_z5v1QcmMYM.roa (raw, json) Hash identifier: BlCKHTq9I2NrgHH11AE9oJ3PcBo5UMsZimSMaB2XjYs= Subject key identifier: AC:3A:A9:58:40:96:D2:9C:DA:FB:62:7D:FF:3E:6F:D5:07:26:31:83 Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9 Certificate serial: 019B7D5AE5BB8F87212EFA4E1E74A0ECEFA1 Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/rDqpWECW0pza-2J9_z5v1QcmMYM.roa Signing time: Fri 02 Jan 2026 06:17:47 +0000 ROA not before: Fri 02 Jan 2026 06:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30148 IP address blocks: 185.93.228.0/22 maxlen: 24 193.19.224.0/22 maxlen: 24 2a02:fe80:11::/48 maxlen: 48 2a02:fe80:12::/48 maxlen: 48 2a02:fe80:13::/48 maxlen: 48 2a02:fe80:14::/48 maxlen: 48 2a02:fe80:15::/48 maxlen: 48 2a02:fe80:16::/48 maxlen: 48 2a02:fe80:17::/48 maxlen: 48 2a02:fe80:18::/48 maxlen: 48 2a02:fe80:19::/48 maxlen: 48 2a02:fe80:20::/48 maxlen: 48 2a02:fe80:21::/48 maxlen: 48 2a02:fe80:22::/48 maxlen: 48 2a02:fe80:1010::/48 maxlen: 48 2a02:fe80:2010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:e5:bb:8f:87:21:2e:fa:4e:1e:74:a0:ec:ef:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9 Validity Not Before: Jan 2 06:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac3aa9584096d29cdafb627dff3e6fd507263183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3e:39:88:4e:52:0e:0c:6a:a8:f0:44:0c:c4: bd:6f:c6:6f:25:88:cc:af:ad:be:47:55:7f:6a:dd: 96:3b:ca:2e:68:51:13:f4:cc:f1:87:1a:63:a1:d2: 0d:bf:d8:93:fb:c1:72:3c:cb:bb:5b:d1:5f:19:f3: 73:5a:d0:58:32:b4:95:42:ac:cb:d0:81:0e:93:8c: a0:d7:21:98:1b:8b:b7:bf:37:d8:34:0e:14:08:cb: 97:e4:83:d5:aa:f1:70:90:f2:dc:ac:c8:6d:60:cf: 09:e6:4e:16:13:e8:85:a6:2a:be:16:61:af:58:c3: c3:72:ff:bc:51:80:ba:6e:34:be:84:91:9b:9d:60: fa:ea:0c:99:39:4e:bb:51:35:59:12:87:7a:b0:41: 49:9c:df:8b:05:33:8e:ec:05:05:30:16:04:10:b0: a8:ac:1a:62:18:7b:06:21:a0:1d:6b:7d:62:fd:9c: 96:6c:84:f0:0a:58:d8:14:84:51:cd:c2:07:7b:f7: 44:c7:23:c1:42:54:e2:7e:c2:c4:a9:8d:09:e4:3e: e8:21:6d:cc:36:64:56:60:1a:ea:13:c1:b1:07:d5: 1b:07:ae:fc:d6:98:f2:00:23:84:a7:c9:d8:3f:70: d3:2c:6b:0a:ea:da:bd:57:c2:a8:e5:83:4e:3d:28: 6d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3A:A9:58:40:96:D2:9C:DA:FB:62:7D:FF:3E:6F:D5:07:26:31:83 X509v3 Authority Key Identifier: keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/rDqpWECW0pza-2J9_z5v1QcmMYM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.93.228.0/22 193.19.224.0/22 IPv6: 2a02:fe80:11::-2a02:fe80:19:ffff:ffff:ffff:ffff:ffff 2a02:fe80:20::-2a02:fe80:22:ffff:ffff:ffff:ffff:ffff 2a02:fe80:1010::/48 2a02:fe80:2010::/48 Signature Algorithm: sha256WithRSAEncryption 17:8e:3c:c1:bb:49:ed:26:26:51:0c:c6:5d:1c:b2:66:39:04: 2f:3f:61:9b:3a:dc:e6:66:34:d3:d8:e5:4e:dc:af:e3:e5:cc: 59:16:a5:08:a6:86:41:fc:7e:5b:24:65:5a:69:eb:87:06:20: 41:6a:ea:8d:71:d5:27:54:a5:35:ce:aa:c5:ae:a4:c8:00:fa: 4d:9e:6b:ff:52:0c:b3:26:37:ac:31:07:b0:1d:28:74:7f:10: f4:a6:e6:5d:49:d1:30:8b:e0:aa:ee:97:d7:9d:25:09:0c:78: 42:c4:fb:8a:bb:55:cd:59:23:79:54:21:67:31:39:00:1d:c1: 02:14:ad:97:06:e4:67:40:44:aa:eb:3c:40:9b:e0:f4:32:f8: d1:a0:b9:ef:7e:3f:65:73:af:f6:f4:fc:ec:32:e2:f4:9f:0a: cf:a2:77:7f:cd:0d:69:a7:6a:40:0f:2d:dc:28:a7:87:33:97: 5f:4c:3b:3f:d3:c6:7b:c8:42:9f:27:27:56:c5:38:13:25:9b: 55:50:02:59:05:49:b7:6b:c3:bd:81:a6:7c:72:20:e4:ef:69: 45:a7:05:6d:2e:23:0b:ec:45:22:6c:ef:62:d6:94:3f:09:21: 06:92:26:6a:f4:c5:80:b9:b9:ee:4a:6e:36:0c:d3:12:c2:32: bd:d2:44:5e -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZt9WuW7j4chLvpOHnSg7O+hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNGJkNGVkY2EyOWQ0ZTcyYmU4NmNlZDBiN2FkNjUyYzdk MjYxYzkwHhcNMjYwMTAyMDYxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzNhYTk1ODQwOTZkMjljZGFmYjYyN2RmZjNlNmZkNTA3MjYzMTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD45iE5SDgxqqPBEDMS9b8ZvJYjM r62+R1V/at2WO8ouaFET9MzxhxpjodINv9iT+8FyPMu7W9FfGfNzWtBYMrSVQqzL 0IEOk4yg1yGYG4u3vzfYNA4UCMuX5IPVqvFwkPLcrMhtYM8J5k4WE+iFpiq+FmGv WMPDcv+8UYC6bjS+hJGbnWD66gyZOU67UTVZEod6sEFJnN+LBTOO7AUFMBYEELCo rBpiGHsGIaAda31i/ZyWbITwCljYFIRRzcIHe/dExyPBQlTifsLEqY0J5D7oIW3M NmRWYBrqE8GxB9UbB6781pjyACOEp8nYP3DTLGsK6tq9V8Ko5YNOPSht1QIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFKw6qVhAltKc2vtiff8+b9UHJjGDMB8GA1UdIwQY MBaAFC5L1O3KKdTnK+hs7Qt61lLH0mHJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGt2VTdjb3AxT2NyNkd6dEMzcldVc2ZTWWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hNTNiYjYtNjZjMC00ODYxLWIyODgt MmE2MzcyZTA1NGQyLzEvckRxcFdFQ1cwcHphLTJKOV96NXYxUWNtTVlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9hNTNiYjYtNjZjMC00ODYxLWIyODgtMmE2MzcyZTA1NGQy LzEvTGt2VTdjb3AxT2NyNkd6dEMzcldVc2ZTWWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjASBAIAATAMAwQCuV3kAwQC wRPgMEAEAgACMDowEgMHACoC/oAAEQMHASoC/oAAGDASAwcFKgL+gAAgAwcAKgL+ gAAiAwcAKgL+gBAQAwcAKgL+gCAQMA0GCSqGSIb3DQEBCwUAA4IBAQAXjjzBu0nt JiZRDMZdHLJmOQQvP2GbOtzmZjTT2OVO3K/j5cxZFqUIpoZB/H5bJGVaaeuHBiBB auqNcdUnVKU1zqrFrqTIAPpNnmv/UgyzJjesMQewHSh0fxD0puZdSdEwi+Cq7pfX nSUJDHhCxPuKu1XNWSN5VCFnMTkAHcECFK2XBuRnQESq6zxAm+D0MvjRoLnvfj9l c6/29PzsMuL0nwrPond/zQ1pp2pADy3cKKeHM5dfTDs/08Z7yEKfJydWxTgTJZtV UAJZBUm3a8O9gaZ8ciDk72lFpwVtLiML7EUibO9i1pQ/CSEGkiZq9MWAubnuSm42 DNMSwjK90kRe -----END CERTIFICATE-----Generated at Sun Jan 25 12:02:47 2026 by rpki-client