This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/X22P1NloWugtV33VklnsZASB77I.roa File: X22P1NloWugtV33VklnsZASB77I.roa (raw, json) Hash identifier: RELi8S+QmS5zizjTXUSelucOgYS8Q6L5FGNYX0riiUs= Subject key identifier: 5F:6D:8F:D4:D9:68:5A:E8:2D:57:7D:D5:92:59:EC:64:04:81:EF:B2 Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2 Certificate serial: 019B7C7F87BAFA7AE5C88725AAA5EF5D77F3 Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/X22P1NloWugtV33VklnsZASB77I.roa Signing time: Fri 02 Jan 2026 02:18:11 +0000 ROA not before: Fri 02 Jan 2026 02:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6908 IP address blocks: 5.102.184.0/21 maxlen: 21 46.252.64.0/20 maxlen: 20 62.149.32.0/19 maxlen: 19 62.149.48.0/20 maxlen: 20 77.75.232.0/23 maxlen: 23 78.41.152.0/21 maxlen: 21 80.79.128.0/20 maxlen: 20 80.79.128.0/21 maxlen: 21 80.79.136.0/21 maxlen: 21 82.147.0.0/19 maxlen: 19 85.92.192.0/19 maxlen: 19 91.135.224.0/20 maxlen: 20 91.151.208.0/20 maxlen: 20 91.199.24.0/24 maxlen: 24 94.247.96.0/21 maxlen: 21 95.131.216.0/21 maxlen: 21 109.71.120.0/21 maxlen: 21 109.239.80.0/20 maxlen: 20 158.58.160.0/21 maxlen: 21 185.64.160.0/22 maxlen: 22 185.109.92.0/22 maxlen: 22 185.119.68.0/22 maxlen: 22 185.120.152.0/22 maxlen: 22 185.121.248.0/22 maxlen: 22 185.122.232.0/22 maxlen: 22 195.72.128.0/22 maxlen: 22 213.133.128.0/19 maxlen: 19 217.10.128.0/19 maxlen: 19 217.20.16.0/20 maxlen: 20 217.61.176.0/20 maxlen: 20 217.61.180.0/22 maxlen: 24 217.61.184.0/22 maxlen: 24 217.169.32.0/19 maxlen: 19 2001:1b90::/32 maxlen: 32 2a01:450::/32 maxlen: 32 2a02:298::/32 maxlen: 32 2a02:2458::/32 maxlen: 32 2a03:14e0::/32 maxlen: 32 2a03:6a00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:87:ba:fa:7a:e5:c8:87:25:aa:a5:ef:5d:77:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2 Validity Not Before: Jan 2 02:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f6d8fd4d9685ae82d577dd59259ec640481efb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:aa:fc:62:a2:d3:22:61:bb:ce:72:d5:15:4f: 60:d1:d3:f7:f0:13:e8:3e:a9:e0:f4:21:86:fd:f6: e4:4f:e9:bf:9c:59:d7:4d:c7:16:87:12:c7:64:34: a3:eb:39:cf:db:2a:99:f1:2a:8f:44:82:32:36:bf: 94:5b:08:30:45:af:76:f6:b7:25:84:22:65:b3:85: 1b:e4:dc:c0:b0:c9:f0:34:73:05:9a:24:f5:42:e2: fa:29:f1:5d:8b:52:c8:7a:dd:c3:68:4d:3b:02:76: 4d:7a:3c:d6:07:b3:8f:eb:dd:51:af:78:09:a7:66: 17:8e:76:a0:ab:ef:7e:2a:fa:3c:69:a7:36:2d:cf: 2e:4b:dd:b3:aa:d2:83:de:16:a6:ff:c3:38:49:c1: 1d:8d:ec:58:65:a6:14:2c:e6:58:ae:fa:8b:75:78: 63:26:df:89:d5:eb:6d:ee:61:c0:fb:04:81:52:ae: 32:a6:11:55:e6:f2:71:3d:62:e8:e4:36:2e:e1:72: 6b:50:8b:e4:e2:f4:86:6b:30:5c:61:d8:87:88:13: 82:be:4b:6e:10:3a:70:90:b5:6d:96:f9:12:cf:f0: 25:03:b3:6b:ec:44:a8:db:63:38:c1:97:fe:7b:3d: 63:46:6a:01:13:4a:1e:23:81:ac:d4:da:37:d5:68: e2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:6D:8F:D4:D9:68:5A:E8:2D:57:7D:D5:92:59:EC:64:04:81:EF:B2 X509v3 Authority Key Identifier: keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/X22P1NloWugtV33VklnsZASB77I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.184.0/21 46.252.64.0/20 62.149.32.0/19 77.75.232.0/23 78.41.152.0/21 80.79.128.0/20 82.147.0.0/19 85.92.192.0/19 91.135.224.0/20 91.151.208.0/20 91.199.24.0/24 94.247.96.0/21 95.131.216.0/21 109.71.120.0/21 109.239.80.0/20 158.58.160.0/21 185.64.160.0/22 185.109.92.0/22 185.119.68.0/22 185.120.152.0/22 185.121.248.0/22 185.122.232.0/22 195.72.128.0/22 213.133.128.0/19 217.10.128.0/19 217.20.16.0/20 217.61.176.0/20 217.169.32.0/19 IPv6: 2001:1b90::/32 2a01:450::/32 2a02:298::/32 2a02:2458::/32 2a03:14e0::/32 2a03:6a00::/29 Signature Algorithm: sha256WithRSAEncryption be:ae:0b:c9:33:92:aa:d5:26:f7:3d:11:f8:b3:2f:f3:4e:01: 29:e5:5e:0c:5e:49:e5:f9:0f:dc:51:7c:69:c6:b3:f6:78:43: aa:c7:95:7c:39:29:4e:f1:59:15:35:55:29:1a:2b:16:7f:66: 25:7a:08:42:69:50:d1:ab:d4:6e:dd:27:9e:97:70:e7:b5:31: 02:fe:d7:48:b7:51:83:bf:cd:ef:2e:c2:06:d5:9e:18:5f:8a: 7f:51:01:8a:85:39:61:44:80:e6:d5:a0:1b:f9:13:a8:f7:9e: 26:b4:47:81:f7:4a:db:26:fc:3c:9a:b0:94:99:eb:2e:ec:c1: f5:6f:0d:3d:43:09:42:9c:b2:8a:a6:4d:25:f4:6b:e8:85:39: bf:0c:ce:2b:0a:0c:93:25:2a:45:7b:79:c4:87:e4:84:41:78: 53:60:38:5f:05:76:8e:71:c9:05:11:19:c3:d6:b3:f4:6c:28: b7:fd:d1:49:47:89:d8:1b:8b:99:a8:54:f4:22:9f:b3:3d:f7: 1d:df:51:8a:53:0e:b4:0e:75:23:0a:08:ab:ba:36:b2:78:8f: 13:e9:d4:f1:4b:10:92:38:38:10:47:b3:e8:a6:b0:d0:ba:e5: 26:30:09:e3:79:8f:c6:3c:ea:1b:04:ff:08:6d:a3:26:3c:d3: d2:3e:f0:ee -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgISAZt8f4e6+nrlyIclqqXvXXfzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NGE4OGJjNmU5ZTEwYmJhZjE1MGYwMTliYmY4YTYxNWEy YjAzYzIwHhcNMjYwMTAyMDIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjZkOGZkNGQ5Njg1YWU4MmQ1NzdkZDU5MjU5ZWM2NDA0ODFlZmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKr8YqLTImG7znLVFU9g0dP38BPo Pqng9CGG/fbkT+m/nFnXTccWhxLHZDSj6znP2yqZ8SqPRIIyNr+UWwgwRa929rcl hCJls4Ub5NzAsMnwNHMFmiT1QuL6KfFdi1LIet3DaE07AnZNejzWB7OP691Rr3gJ p2YXjnagq+9+Kvo8aac2Lc8uS92zqtKD3ham/8M4ScEdjexYZaYULOZYrvqLdXhj Jt+J1ett7mHA+wSBUq4yphFV5vJxPWLo5DYu4XJrUIvk4vSGazBcYdiHiBOCvktu EDpwkLVtlvkSz/AlA7Nr7ESo22M4wZf+ez1jRmoBE0oeI4Gs1No31WjibQIDAQAB o4IC4jCCAt4wHQYDVR0OBBYEFF9tj9TZaFroLVd91ZJZ7GQEge+yMB8GA1UdIwQY MBaAFEdKiLxunhC7rxUPAZu/imFaKwPCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjBxSXZHNmVFTHV2RlE4Qm03LUtZVm9yQThJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9iYWQxYzEtMzY1ZC00MWRlLWFkN2Mt Y2U4ZmM5M2FkYjIxLzEvWDIyUDFObG9XdWd0VjMzVmtsbnNaQVNCNzdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9iYWQxYzEtMzY1ZC00MWRlLWFkN2MtY2U4ZmM5M2FkYjIx LzEvUjBxSXZHNmVFTHV2RlE4Qm03LUtZVm9yQThJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH3BggrBgEFBQcBBwEB/wSB5zCB5DCBrwQCAAEwgagDBAMF ZrgDBAQu/EADBAU+lSADBAFNS+gDBANOKZgDBARQT4ADBAVSkwADBAVVXMADBARb h+ADBARbl9ADBABbxxgDBANe92ADBANfg9gDBANtR3gDBARt71ADBAOeOqADBAK5 QKADBAK5bVwDBAK5d0QDBAK5eJgDBAK5efgDBAK5eugDBALDSIADBAXVhYADBAXZ CoADBATZFBADBATZPbADBAXZqSAwMAQCAAIwKgMFACABG5ADBQAqAQRQAwUAKgIC mAMFACoCJFgDBQAqAxTgAwUDKgNqADANBgkqhkiG9w0BAQsFAAOCAQEAvq4LyTOS qtUm9z0R+LMv804BKeVeDF5J5fkP3FF8acaz9nhDqseVfDkpTvFZFTVVKRorFn9m JXoIQmlQ0avUbt0nnpdw57UxAv7XSLdRg7/N7y7CBtWeGF+Kf1EBioU5YUSA5tWg G/kTqPeeJrRHgfdK2yb8PJqwlJnrLuzB9W8NPUMJQpyyiqZNJfRr6IU5vwzOKwoM kyUqRXt5xIfkhEF4U2A4XwV2jnHJBREZw9az9Gwot/3RSUeJ2BuLmahU9CKfsz33 Hd9RilMOtA51IwoIq7o2sniPE+nU8UsQkjg4EEez6Kaw0LrlJjAJ43mPxjzqGwT/ CG2jJjzT0j7w7g== -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:24 2026 by rpki-client