This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/spwZIDgAexUv2FMzIVJu6fx4n-o.roa File: spwZIDgAexUv2FMzIVJu6fx4n-o.roa (raw, json) Hash identifier: S+/uYIng1yCaxFbxy+y3ycIp+nBkmnExp9c8EhB5PxU= Subject key identifier: B2:9C:19:20:38:00:7B:15:2F:D8:53:33:21:52:6E:E9:FC:78:9F:EA Certificate issuer: /CN=22877298dae5d5a3beabca16e92d1a141e948627 Certificate serial: 019B78A2C210F4D71AB2AC963A72D346792A Authority key identifier: 22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/spwZIDgAexUv2FMzIVJu6fx4n-o.roa Signing time: Thu 01 Jan 2026 08:18:10 +0000 ROA not before: Thu 01 Jan 2026 08:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395403 IP address blocks: 163.114.197.0/24 maxlen: 24 163.114.198.0/24 maxlen: 24 163.114.224.0/24 maxlen: 24 163.114.225.0/24 maxlen: 24 163.114.226.0/24 maxlen: 24 163.114.227.0/24 maxlen: 24 163.114.228.0/24 maxlen: 24 163.114.229.0/24 maxlen: 24 163.114.230.0/24 maxlen: 24 163.114.231.0/24 maxlen: 24 163.114.232.0/24 maxlen: 24 163.114.254.0/24 maxlen: 24 163.114.255.0/24 maxlen: 24 2a00:edc0:1007::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:c2:10:f4:d7:1a:b2:ac:96:3a:72:d3:46:79:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22877298dae5d5a3beabca16e92d1a141e948627 Validity Not Before: Jan 1 08:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b29c192038007b152fd8533321526ee9fc789fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:23:00:c8:8a:62:23:6c:62:d4:51:60:12:ea: 7e:1e:a5:72:ce:30:df:69:27:e4:cd:b5:f8:e9:f0: 21:b2:fe:7b:d7:8c:42:47:1d:8e:a0:d5:33:9c:90: 93:b0:49:c6:ca:ca:c7:4a:8b:74:f0:2b:71:62:7a: c7:22:cb:11:c3:7f:d4:0a:30:6a:69:ed:64:ca:6e: f4:15:f3:47:35:6a:01:91:1d:95:ed:18:70:9f:bf: 43:c9:7d:91:9f:b9:6f:66:d9:b4:92:d6:04:16:f9: 3b:6a:fd:85:b3:d9:b4:17:e7:4a:31:ea:d2:89:63: 60:49:7c:5b:82:74:22:d5:98:b9:d6:2e:47:44:01: cd:2f:4d:f0:d7:83:b8:ea:31:eb:f5:ce:c8:79:68: 22:91:64:a1:91:9a:1b:d3:ab:2d:26:01:07:aa:7f: af:7b:79:97:12:6c:19:07:ef:ac:2a:8c:c1:01:0e: 3e:e2:49:3b:1d:54:d4:e9:66:a0:c6:95:6c:ce:00: 98:b5:13:77:77:a9:e5:71:c2:32:a5:aa:7b:1e:66: e8:bb:0d:78:79:32:e0:f4:9a:3b:90:35:3f:26:23: f1:03:fb:a8:8b:d5:4c:f6:60:b3:ea:3b:48:cd:6b: a2:86:66:09:e7:43:09:fb:6f:96:bf:00:a7:0a:22: af:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:9C:19:20:38:00:7B:15:2F:D8:53:33:21:52:6E:E9:FC:78:9F:EA X509v3 Authority Key Identifier: keyid:22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/spwZIDgAexUv2FMzIVJu6fx4n-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.114.197.0-163.114.198.255 163.114.224.0-163.114.232.255 163.114.254.0/23 IPv6: 2a00:edc0:1007::/48 Signature Algorithm: sha256WithRSAEncryption c6:20:38:5e:28:79:d1:cf:68:f8:9f:7b:d5:8c:92:b1:b3:cf: ad:7c:23:17:e8:b9:4e:47:ad:39:47:cf:41:d3:4c:de:23:2f: 06:f8:8d:e7:d9:99:b2:d7:a7:82:8f:a6:f4:cb:7c:62:d3:6d: b6:40:c1:4d:b3:8f:92:91:22:f5:44:59:bc:bb:bd:43:77:22: 52:8b:5a:83:1e:ab:f9:ff:37:33:1e:cb:ec:20:28:f2:17:06: 2d:05:1a:01:37:95:f8:ca:33:ac:af:e5:cb:a3:9d:43:10:8c: 11:b6:f3:37:d7:ee:44:80:61:ee:48:28:7a:01:38:1d:d5:d3: 39:a5:70:e3:5c:dd:35:c4:0f:54:08:51:4b:85:0a:0c:ac:d7: e5:48:b0:0d:11:f4:d0:8d:b7:fb:11:34:ce:d5:e6:51:62:4a: 9c:e6:2b:03:51:54:26:f6:55:3f:42:4a:b3:8e:e7:e1:1e:2d: 0b:f1:d0:e1:f6:f8:9b:5b:41:f9:23:30:94:bf:7f:2e:67:90: 5a:4a:6a:36:5c:04:5b:f8:38:7e:84:70:6c:8a:71:b7:0b:35: dc:d0:e4:c1:cd:ad:96:86:cd:37:18:9e:d1:30:3d:61:d9:b1: 6d:1a:7c:7d:99:d3:d0:a6:64:8c:1e:94:88:72:66:bc:1e:8b: 9f:1e:d9:09 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt4osIQ9NcasqyWOnLTRnkqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyODc3Mjk4ZGFlNWQ1YTNiZWFiY2ExNmU5MmQxYTE0MWU5 NDg2MjcwHhcNMjYwMTAxMDgxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjljMTkyMDM4MDA3YjE1MmZkODUzMzMyMTUyNmVlOWZjNzg5ZmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yMAyIpiI2xi1FFgEup+HqVyzjDf aSfkzbX46fAhsv5714xCRx2OoNUznJCTsEnGysrHSot08CtxYnrHIssRw3/UCjBq ae1kym70FfNHNWoBkR2V7Rhwn79DyX2Rn7lvZtm0ktYEFvk7av2Fs9m0F+dKMerS iWNgSXxbgnQi1Zi51i5HRAHNL03w14O46jHr9c7IeWgikWShkZob06stJgEHqn+v e3mXEmwZB++sKozBAQ4+4kk7HVTU6WagxpVszgCYtRN3d6nlccIypap7Hmbouw14 eTLg9Jo7kDU/JiPxA/uoi9VM9mCz6jtIzWuihmYJ50MJ+2+WvwCnCiKv/wIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFLKcGSA4AHsVL9hTMyFSbun8eJ/qMB8GA1UdIwQY MBaAFCKHcpja5dWjvqvKFuktGhQelIYnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSW9keW1OcmwxYU8tcThvVzZTMGFGQjZVaGljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84NjUxYzUtYmQ3Ny00NjBkLTgzYmYt NTkzM2EwOWY3MmQxLzEvc3B3WklEZ0FleFV2MkZNeklWSnU2Zng0bi1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84NjUxYzUtYmQ3Ny00NjBkLTgzYmYtNTkzM2EwOWY3MmQx LzEvSW9keW1OcmwxYU8tcThvVzZTMGFGQjZVaGljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAoBAIAATAiMAwDBACjcsUD BACjcsYwDAMEBaNy4AMEAKNy6AMEAaNy/jAPBAIAAjAJAwcAKgDtwBAHMA0GCSqG SIb3DQEBCwUAA4IBAQDGIDheKHnRz2j4n3vVjJKxs8+tfCMX6LlOR605R89B00ze Iy8G+I3n2Zmy16eCj6b0y3xi0222QMFNs4+SkSL1RFm8u71DdyJSi1qDHqv5/zcz HsvsICjyFwYtBRoBN5X4yjOsr+XLo51DEIwRtvM31+5EgGHuSCh6ATgd1dM5pXDj XN01xA9UCFFLhQoMrNflSLANEfTQjbf7ETTO1eZRYkqc5isDUVQm9lU/Qkqzjufh Hi0L8dDh9vibW0H5IzCUv38uZ5BaSmo2XARb+Dh+hHBsinG3CzXc0OTBza2Whs03 GJ7RMD1h2bFtGnx9mdPQpmSMHpSIcma8HoufHtkJ -----END CERTIFICATE-----Generated at Mon Jan 26 01:02:10 2026 by rpki-client