This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/rtWyT0ydn4TbKiT2WPrlr1PKiuk.roa File: rtWyT0ydn4TbKiT2WPrlr1PKiuk.roa (raw, json) Hash identifier: RNjhWF0V8FlD5sEBigcfklZ1Ji8x5NrJUS7A6XO++0E= Subject key identifier: AE:D5:B2:4F:4C:9D:9F:84:DB:2A:24:F6:58:FA:E5:AF:53:CA:8A:E9 Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528 Certificate serial: 019B7834421CE6505D756B10157E6310C951 Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/rtWyT0ydn4TbKiT2WPrlr1PKiuk.roa Signing time: Thu 01 Jan 2026 06:17:29 +0000 ROA not before: Thu 01 Jan 2026 06:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42388 IP address blocks: 144.208.214.232/29 maxlen: 29 144.208.243.0/24 maxlen: 24 185.81.206.64/26 maxlen: 26 185.81.206.128/26 maxlen: 26 185.81.208.0/24 maxlen: 24 188.172.219.64/32 maxlen: 32 188.172.235.188/32 maxlen: 32 188.172.248.0/24 maxlen: 24 213.227.160.0/24 maxlen: 24 213.227.168.222/32 maxlen: 32 213.227.191.0/24 maxlen: 24 217.146.18.0/24 maxlen: 24 217.146.22.170/32 maxlen: 32 217.146.26.216/32 maxlen: 32 2a00:11c0:5:613::1000/128 maxlen: 128 2a00:11c0:d::1a/128 maxlen: 128 2a00:11c0:e:ffff:1::1000/128 maxlen: 128 2a00:11c0:48:13::/64 maxlen: 64 2a00:11c0:63:350::1000/128 maxlen: 128 2a00:11c0:82:359::1000/128 maxlen: 128 2a00:11c0:aa1::/48 maxlen: 48 2a00:11c0:1010::/48 maxlen: 48 2a00:11c0:11c0::/48 maxlen: 128 2a05:8900:aa1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:42:1c:e6:50:5d:75:6b:10:15:7e:63:10:c9:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528 Validity Not Before: Jan 1 06:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aed5b24f4c9d9f84db2a24f658fae5af53ca8ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f4:4a:1f:8a:5b:c3:8f:69:81:23:79:19:fb: ec:2d:70:64:27:25:43:84:d9:9b:58:97:f9:8f:c2: b3:e4:d4:53:69:d2:39:37:8f:44:d7:6c:41:d0:e6: 93:e7:9a:4b:dc:4e:e6:1b:2c:16:7e:35:07:bf:ec: ac:bf:af:73:ed:3b:1f:04:85:9f:55:8b:0b:10:95: cd:25:fb:a8:b3:cd:5f:3a:eb:a2:df:ad:41:0b:a5: e2:82:e7:95:ac:6d:ae:bb:e5:52:8a:09:e7:5e:eb: bb:2f:82:32:48:53:f7:ff:c7:db:a0:30:ca:f3:5f: 92:e2:30:b1:a3:66:6f:8d:14:4d:29:d3:a9:94:9a: a0:43:ce:c0:83:1b:94:31:27:40:04:36:d2:e3:7d: a3:d1:48:c5:84:02:f0:06:ed:a7:28:dd:70:ef:6f: d4:8b:23:04:ae:16:73:f3:5c:a5:2e:93:3b:9b:bf: 72:e8:56:37:1f:b9:61:8b:9a:bd:10:e6:89:2c:d8: a1:f1:7f:c2:24:6d:b2:27:5a:4b:d5:b5:27:b4:e3: 7c:5a:88:60:37:05:25:5c:69:93:03:0d:0e:db:c5: f6:79:d9:67:c0:19:9d:ec:09:c7:aa:25:11:73:7f: b5:24:73:15:60:86:e7:5e:d0:45:8a:8b:f8:06:4a: 09:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D5:B2:4F:4C:9D:9F:84:DB:2A:24:F6:58:FA:E5:AF:53:CA:8A:E9 X509v3 Authority Key Identifier: keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/rtWyT0ydn4TbKiT2WPrlr1PKiuk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.208.214.232/29 144.208.243.0/24 185.81.206.64-185.81.206.191 185.81.208.0/24 188.172.219.64/32 188.172.235.188/32 188.172.248.0/24 213.227.160.0/24 213.227.168.222/32 213.227.191.0/24 217.146.18.0/24 217.146.22.170/32 217.146.26.216/32 IPv6: 2a00:11c0:5:613:0:0:0:1000/128 2a00:11c0:d:0:0:0:0:1a/128 2a00:11c0:e:ffff:1:0:0:1000/128 2a00:11c0:48:13::/64 2a00:11c0:63:350:0:0:0:1000/128 2a00:11c0:82:359:0:0:0:1000/128 2a00:11c0:aa1::/48 2a00:11c0:1010::/48 2a00:11c0:11c0::/48 2a05:8900:aa1::/48 Signature Algorithm: sha256WithRSAEncryption 95:33:66:6d:ab:d1:bb:0a:2a:b3:dc:46:f8:63:70:0b:0a:6f: a0:94:f3:5d:3b:a8:30:b0:13:76:af:34:04:ba:06:a1:13:09: 1d:90:17:3f:da:0f:3e:9e:4e:a7:2e:82:5b:7e:32:e4:af:85: 40:f7:1a:b5:35:b0:ac:4a:f0:fd:47:dc:1f:98:ce:9f:0e:64: 25:56:11:7f:fb:66:7f:26:4b:89:cc:db:23:48:5e:d3:82:3d: 14:73:67:b0:57:2a:e1:bc:7a:da:1f:d3:28:59:ae:b8:7b:ad: cd:d7:41:ea:a6:49:d9:21:71:0c:db:c5:7c:8a:74:13:3a:c5: b2:0b:90:92:56:e5:33:e0:74:b0:df:0d:a6:f7:8e:7b:84:ff: 44:63:c9:aa:bc:60:52:98:d7:7f:44:99:aa:40:40:17:a8:6b: c6:5e:15:60:79:9a:13:43:de:38:f7:21:bc:5f:ab:8b:89:b3: c6:e1:1c:97:de:ac:97:f1:c6:16:1c:c2:1f:6d:01:25:88:a5: 3b:4f:a0:dd:67:d7:8a:92:25:5e:f3:e1:96:01:f5:61:0e:fa: 88:cb:91:0b:d4:76:15:84:00:e8:61:68:94:21:93:36:20:f1: 52:30:ef:bc:30:10:98:93:02:ab:1b:84:06:d8:cf:4c:d5:73: 1c:9f:96:a2 -----BEGIN CERTIFICATE----- MIIF8jCCBNqgAwIBAgISAZt4NEIc5lBddWsQFX5jEMlRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MzlhZmViYWNlODk5YThlZTBiYjRmOGJiNDQ3NWZlMjQ3 YTE1MjgwHhcNMjYwMTAxMDYxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWQ1YjI0ZjRjOWQ5Zjg0ZGIyYTI0ZjY1OGZhZTVhZjUzY2E4YWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/RKH4pbw49pgSN5GfvsLXBkJyVD hNmbWJf5j8Kz5NRTadI5N49E12xB0OaT55pL3E7mGywWfjUHv+ysv69z7TsfBIWf VYsLEJXNJfuos81fOuui361BC6XigueVrG2uu+VSignnXuu7L4IySFP3/8fboDDK 81+S4jCxo2ZvjRRNKdOplJqgQ87AgxuUMSdABDbS432j0UjFhALwBu2nKN1w72/U iyMErhZz81ylLpM7m79y6FY3H7lhi5q9EOaJLNih8X/CJG2yJ1pL1bUntON8Wohg NwUlXGmTAw0O28X2edlnwBmd7AnHqiURc3+1JHMVYIbnXtBFiov4BkoJ/QIDAQAB o4IC/jCCAvowHQYDVR0OBBYEFK7Vsk9MnZ+E2yok9lj65a9TyorpMB8GA1UdIwQY MBaAFKU5r+us6Jmo7gu0+LtEdf4kehUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYt NzQxMzk1OTEzMTJlLzEvcnRXeVQweWRuNFRiS2lUMldQcmxyMVBLaXVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYtNzQxMzk1OTEzMTJl LzEvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBEgYIKwYBBQUHAQcBAf8EggEBMIH+MGQEAgABMF4DBQOQ 0NboAwQAkNDzMA4DBQa5Uc5AAwUGuVHOgAMEALlR0AMFALys20ADBQC8rOu8AwQA vKz4AwQA1eOgAwUA1eOo3gMEANXjvwMEANmSEgMFANmSFqoDBQDZkhrYMIGVBAIA AjCBjgMRACoAEcAABQYTAAAAAAAAEAADEQAqABHAAA0AAAAAAAAAAAAaAxEAKgAR wAAO//8AAQAAAAAQAAMJACoAEcAASAATAxEAKgARwABjA1AAAAAAAAAQAAMRACoA EcAAggNZAAAAAAAAEAADBwAqABHACqEDBwAqABHAEBADBwAqABHAEcADBwAqBYkA CqEwDQYJKoZIhvcNAQELBQADggEBAJUzZm2r0bsKKrPcRvhjcAsKb6CU8107qDCw E3avNAS6BqETCR2QFz/aDz6eTqcuglt+MuSvhUD3GrU1sKxK8P1H3B+Yzp8OZCVW EX/7Zn8mS4nM2yNIXtOCPRRzZ7BXKuG8etof0yhZrrh7rc3XQeqmSdkhcQzbxXyK dBM6xbILkJJW5TPgdLDfDab3jnuE/0Rjyaq8YFKY139EmapAQBeoa8ZeFWB5mhND 3jj3Ibxfq4uJs8bhHJferJfxxhYcwh9tASWIpTtPoN1n14qSJV7z4ZYB9WEO+ojL kQvUdhWEAOhhaJQhkzYg8VIw77wwEJiTAqsbhAbYz0zVcxyflqI= -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:44 2026 by rpki-client