This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/IsYx3r_VR1euX7MNpuVGInlu8Kg.roa File: IsYx3r_VR1euX7MNpuVGInlu8Kg.roa (raw, json) Hash identifier: 3hyCRt7tTTRg7HqXiGxR0im0GAZE+5qj4hyPl/SfsRg= Subject key identifier: 22:C6:31:DE:BF:D5:47:57:AE:5F:B3:0D:A6:E5:46:22:79:6E:F0:A8 Certificate issuer: /CN=8c186a56ea84c13c62768a9d17bae133cedf1045 Certificate serial: 019B7B367658461047C76640C7E804A4EBC6 Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/IsYx3r_VR1euX7MNpuVGInlu8Kg.roa Signing time: Thu 01 Jan 2026 20:18:45 +0000 ROA not before: Thu 01 Jan 2026 20:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5482 IP address blocks: 31.22.12.0/22 maxlen: 24 37.48.224.0/24 maxlen: 24 37.48.229.0/24 maxlen: 24 37.48.230.0/24 maxlen: 24 45.89.4.0/22 maxlen: 24 51.179.192.0/18 maxlen: 24 51.179.192.0/21 maxlen: 24 51.179.200.0/21 maxlen: 24 51.179.208.0/21 maxlen: 24 62.64.128.0/21 maxlen: 24 62.64.136.0/22 maxlen: 24 62.64.144.0/20 maxlen: 24 141.195.128.0/18 maxlen: 24 141.195.136.0/21 maxlen: 24 141.195.144.0/21 maxlen: 24 141.195.152.0/21 maxlen: 24 185.102.148.0/22 maxlen: 24 188.74.64.0/19 maxlen: 24 193.17.86.0/23 maxlen: 24 193.17.176.0/23 maxlen: 24 212.132.160.0/19 maxlen: 24 217.142.64.0/18 maxlen: 24 217.168.248.0/21 maxlen: 24 2a04:c880::/32 maxlen: 48 2a05:87c0::/29 maxlen: 48 2a0a:5580::/29 maxlen: 48 2a0a:5583::/32 maxlen: 48 2a0f:9d80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:76:58:46:10:47:c7:66:40:c7:e8:04:a4:eb:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045 Validity Not Before: Jan 1 20:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22c631debfd54757ae5fb30da6e54622796ef0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:03:c0:48:bb:29:db:41:70:8e:b1:55:04:02: 7d:af:b9:98:67:cb:6e:4e:40:19:1e:53:e3:00:65: 9d:22:56:35:4e:8c:a4:15:bf:9f:dc:6f:20:da:5d: 0d:4e:03:5b:85:0b:f3:28:70:25:7b:f4:01:d8:38: ad:b5:d5:d3:df:39:1a:1e:b4:b1:c3:9b:22:66:15: 9a:7f:d3:cc:be:66:aa:b5:fb:e0:3b:7c:89:68:25: 24:93:8e:79:ea:74:63:d2:df:f7:de:fa:d4:66:8e: 0b:95:90:10:07:24:22:12:6f:8c:07:51:17:94:99: c9:7e:3f:47:19:c3:73:8a:23:f4:de:8f:30:49:df: 8e:37:4f:5a:3c:7a:69:2f:08:db:4e:f2:c0:bb:e9: e0:1f:8a:27:d7:3e:87:ea:af:cc:92:7b:cf:3e:b4: f9:a3:b2:e1:e3:b7:1a:70:48:45:93:12:82:79:fa: 06:30:01:9e:81:62:c8:b7:29:3a:29:62:75:08:89: 98:f4:75:81:7f:ff:c4:3c:11:70:ee:56:74:97:42: de:fb:b3:13:2d:f2:c8:89:94:54:21:d0:b7:cf:1c: 44:48:58:7c:e0:9c:ef:4e:79:7e:a6:a8:28:e1:38: 9a:c0:0f:e0:5d:b8:48:b8:e4:f3:99:19:0b:e4:3b: b2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C6:31:DE:BF:D5:47:57:AE:5F:B3:0D:A6:E5:46:22:79:6E:F0:A8 X509v3 Authority Key Identifier: keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/IsYx3r_VR1euX7MNpuVGInlu8Kg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.22.12.0/22 37.48.224.0/24 37.48.229.0-37.48.230.255 45.89.4.0/22 51.179.192.0/18 62.64.128.0-62.64.139.255 62.64.144.0/20 141.195.128.0/18 185.102.148.0/22 188.74.64.0/19 193.17.86.0/23 193.17.176.0/23 212.132.160.0/19 217.142.64.0/18 217.168.248.0/21 IPv6: 2a04:c880::/32 2a05:87c0::/29 2a0a:5580::/29 2a0f:9d80::/32 Signature Algorithm: sha256WithRSAEncryption 35:fa:18:7f:51:c8:51:6b:7f:92:0f:19:ca:d5:5b:36:b9:ed: 6c:e9:87:bb:bd:9d:11:a4:77:1c:39:3b:27:09:8d:3e:80:11: 72:9d:16:3b:28:9c:09:93:46:cb:b9:72:90:a8:4b:d5:03:c2: 98:c2:ac:5d:f7:78:23:fa:e8:83:68:7e:75:61:a9:0a:fc:82: 79:cb:e9:02:10:c4:ee:ec:4c:f2:91:dc:ab:06:4f:8b:24:6d: 92:19:74:43:52:28:73:50:73:1f:63:7e:57:d6:74:02:85:2c: 02:79:ba:92:d0:bb:22:31:07:84:f0:75:7e:a7:0c:0b:ef:4c: 9e:4c:e0:3e:80:f6:5c:cf:15:66:5a:d2:53:22:7b:5b:d7:db: ba:cb:90:a9:24:c8:34:59:10:eb:db:0b:c9:03:db:45:31:48: c2:b6:c0:1e:af:bb:6e:ef:df:94:7b:54:68:17:74:d5:19:cb: d2:b2:56:b8:da:42:55:47:cb:f5:92:a4:7e:8a:a0:23:4b:ef: b7:0d:d9:8b:c9:79:2c:1b:e4:41:23:aa:5e:79:95:f8:d7:8d: 76:a6:74:fc:f5:5d:42:57:0c:3a:d7:ba:e1:58:6f:9d:0a:f3: 59:67:3a:2c:91:81:32:a2:3a:e8:08:18:21:e6:14:7f:5c:9b: ec:b1:13:01 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgISAZt7NnZYRhBHx2ZAx+gEpOvGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMTg2YTU2ZWE4NGMxM2M2Mjc2OGE5ZDE3YmFlMTMzY2Vk ZjEwNDUwHhcNMjYwMTAxMjAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmM2MzFkZWJmZDU0NzU3YWU1ZmIzMGRhNmU1NDYyMjc5NmVmMGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwPASLsp20FwjrFVBAJ9r7mYZ8tu TkAZHlPjAGWdIlY1ToykFb+f3G8g2l0NTgNbhQvzKHAle/QB2DittdXT3zkaHrSx w5siZhWaf9PMvmaqtfvgO3yJaCUkk4556nRj0t/33vrUZo4LlZAQByQiEm+MB1EX lJnJfj9HGcNziiP03o8wSd+ON09aPHppLwjbTvLAu+ngH4on1z6H6q/MknvPPrT5 o7Lh47cacEhFkxKCefoGMAGegWLItyk6KWJ1CImY9HWBf//EPBFw7lZ0l0Le+7MT LfLIiZRUIdC3zxxESFh84JzvTnl+pqgo4TiawA/gXbhIuOTzmRkL5DuyzQIDAQAB o4IClDCCApAwHQYDVR0OBBYEFCLGMd6/1UdXrl+zDablRiJ5bvCoMB8GA1UdIwQY MBaAFIwYalbqhME8YnaKnRe64TPO3xBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakJocVZ1cUV3VHhpZG9xZEY3cmhNODdmRUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jOGVjOTUtYjVmNS00NGZiLWI5M2Qt MjA5MmFmNjQ3MDcwLzEvSXNZeDNyX1ZSMWV1WDdNTnB1VkdJbmx1OEtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9jOGVjOTUtYjVmNS00NGZiLWI5M2QtMjA5MmFmNjQ3MDcw LzEvakJocVZ1cUV3VHhpZG9xZEY3cmhNODdmRUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljBwBAIAATBqAwQCHxYM AwQAJTDgMAwDBAAlMOUDBAAlMOYDBAItWQQDBAYzs8AwDAMEBz5AgAMEAj5AiAME BD5AkAMEBo3DgAMEArlmlAMEBbxKQAMEAcERVgMEAcERsAMEBdSEoAMEBtmOQAME A9mo+DAiBAIAAjAcAwUAKgTIgAMFAyoFh8ADBQMqClWAAwUAKg+dgDANBgkqhkiG 9w0BAQsFAAOCAQEANfoYf1HIUWt/kg8ZytVbNrntbOmHu72dEaR3HDk7JwmNPoAR cp0WOyicCZNGy7lykKhL1QPCmMKsXfd4I/rog2h+dWGpCvyCecvpAhDE7uxM8pHc qwZPiyRtkhl0Q1Ioc1BzH2N+V9Z0AoUsAnm6ktC7IjEHhPB1fqcMC+9MnkzgPoD2 XM8VZlrSUyJ7W9fbusuQqSTINFkQ69sLyQPbRTFIwrbAHq+7bu/flHtUaBd01RnL 0rJWuNpCVUfL9ZKkfoqgI0vvtw3Zi8l5LBvkQSOqXnmV+NeNdqZ0/PVdQlcMOte6 4VhvnQrzWWc6LJGBMqI66AgYIeYUf1yb7LETAQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:54 2026 by rpki-client