This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/t-pLeWcIvef4naMMVg7IfVnMzoo.roa File: t-pLeWcIvef4naMMVg7IfVnMzoo.roa (raw, json) Hash identifier: nSfRaSs5UGTiFbnlTihkEwQZzguUM1WTn+o9MApqGQQ= Subject key identifier: B7:EA:4B:79:67:08:BD:E7:F8:9D:A3:0C:56:0E:C8:7D:59:CC:CE:8A Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0 Certificate serial: 019BD69F493A6145233B85FA79E059974530 Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/t-pLeWcIvef4naMMVg7IfVnMzoo.roa Signing time: Mon 19 Jan 2026 14:18:41 +0000 ROA not before: Mon 19 Jan 2026 14:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136787 IP address blocks: 64.38.116.0/24 maxlen: 32 65.38.123.0/24 maxlen: 32 65.79.176.0/24 maxlen: 32 66.45.76.0/24 maxlen: 32 66.45.113.0/24 maxlen: 32 66.179.15.0/24 maxlen: 32 66.179.141.0/24 maxlen: 32 66.179.142.0/24 maxlen: 32 66.179.156.0/24 maxlen: 32 66.179.176.0/24 maxlen: 32 173.252.145.0/24 maxlen: 32 173.252.160.0/24 maxlen: 32 173.252.166.0/24 maxlen: 32 209.46.1.0/24 maxlen: 32 209.46.39.0/24 maxlen: 32 216.183.105.0/24 maxlen: 32 216.183.109.0/24 maxlen: 32 216.183.115.0/24 maxlen: 32 216.183.123.0/24 maxlen: 32 216.203.13.0/24 maxlen: 32 216.203.31.0/24 maxlen: 32 216.203.38.0/24 maxlen: 32 216.203.56.0/24 maxlen: 32 216.245.152.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:9f:49:3a:61:45:23:3b:85:fa:79:e0:59:97:45:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0 Validity Not Before: Jan 19 14:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7ea4b796708bde7f89da30c560ec87d59ccce8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9c:cf:ae:9a:ca:0e:f6:f6:dd:05:fc:ec:5a: e3:8f:68:29:d9:64:99:4a:7f:31:cb:c7:08:5d:92: f4:27:9e:de:be:2e:e5:b3:85:12:8c:9a:a2:fc:e3: 47:bb:fa:00:92:56:92:92:dd:d4:73:05:6a:73:7f: d3:75:e8:f0:23:a0:e6:5d:63:6d:53:ac:09:95:0c: e9:09:59:7c:b6:4d:8b:42:e8:d2:36:b9:ae:c6:4d: 3b:b1:92:e0:51:c5:79:26:29:e6:eb:70:5e:67:02: a1:7f:75:d3:ad:d7:68:c7:9c:84:be:09:af:8a:a0: c1:6a:ec:43:f1:39:3c:43:50:d1:be:0f:9f:62:52: 1e:07:bd:42:cc:94:ac:db:45:b6:53:ab:d3:bd:fd: ba:68:61:4c:48:11:1d:2d:74:e3:60:49:f2:d7:9a: 3f:f3:4d:0c:59:41:53:b5:a3:e3:c0:82:aa:86:21: 54:4e:f7:ac:44:46:e0:63:23:a9:10:27:9e:a5:83: 84:47:42:80:84:51:4b:eb:29:72:be:3b:84:8a:73: 75:47:fa:ab:61:0e:ca:f7:d9:39:0c:ef:20:62:97: ff:03:64:e1:f2:0d:c4:c4:4e:52:75:5d:ae:79:07: 26:b4:13:b5:2e:c5:3f:30:1a:6c:73:30:f7:93:fc: cf:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:EA:4B:79:67:08:BD:E7:F8:9D:A3:0C:56:0E:C8:7D:59:CC:CE:8A X509v3 Authority Key Identifier: keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/t-pLeWcIvef4naMMVg7IfVnMzoo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.38.116.0/24 65.38.123.0/24 65.79.176.0/24 66.45.76.0/24 66.45.113.0/24 66.179.15.0/24 66.179.141.0-66.179.142.255 66.179.156.0/24 66.179.176.0/24 173.252.145.0/24 173.252.160.0/24 173.252.166.0/24 209.46.1.0/24 209.46.39.0/24 216.183.105.0/24 216.183.109.0/24 216.183.115.0/24 216.183.123.0/24 216.203.13.0/24 216.203.31.0/24 216.203.38.0/24 216.203.56.0/24 216.245.152.0/24 Signature Algorithm: sha256WithRSAEncryption 37:d1:ef:bf:84:4f:a6:7f:51:0f:70:c8:8b:c9:49:eb:4c:2d: 41:e8:65:7a:68:1b:f4:8f:d8:6a:bc:58:c4:b6:cc:45:44:5c: 80:78:bf:c0:51:2b:2d:c3:96:eb:49:bd:4e:3c:de:bd:c5:80: 04:8a:c3:2e:7e:bd:d5:b0:24:1c:81:21:b1:8d:7d:17:b4:0c: 77:00:ff:bf:10:0e:e1:9d:20:67:3f:ee:a2:51:d7:14:7f:cc: 8c:c7:f8:f8:b9:f1:2a:76:85:c6:12:bc:13:70:a9:19:d2:d8: 10:ab:9f:44:db:7b:49:05:d8:bb:7d:21:43:79:69:87:11:e0: f7:7d:e1:0c:fc:24:61:06:93:60:30:e0:fe:2e:da:fb:72:8c: fd:a3:c9:fa:83:c3:fb:97:7a:7f:21:6c:c6:16:93:44:ee:24: dc:6d:ae:29:50:d2:4d:49:9b:57:97:12:ec:6d:b6:c5:1b:0f: 81:95:bc:41:6d:10:65:71:b5:7b:78:b1:4d:d9:a1:2f:43:2f: ad:80:5f:77:0a:a9:a3:9c:aa:fb:f9:fe:de:a1:12:5a:45:66: 7c:c7:1b:77:69:02:71:aa:21:62:81:82:0b:20:f5:12:39:98: ec:16:c2:66:1e:26:68:2a:58:25:47:b1:3a:8c:aa:88:4a:6f: 61:8d:34:4b -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgISAZvWn0k6YUUjO4X6eeBZl0UwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZDQ0OTE5ZmRkMDhhZmI5YTRkMGE4Nzc4OTIzMDExMjUx ZGQ3ZjAwHhcNMjYwMTE5MTQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2VhNGI3OTY3MDhiZGU3Zjg5ZGEzMGM1NjBlYzg3ZDU5Y2NjZThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pzPrprKDvb23QX87Frjj2gp2WSZ Sn8xy8cIXZL0J57evi7ls4USjJqi/ONHu/oAklaSkt3UcwVqc3/TdejwI6DmXWNt U6wJlQzpCVl8tk2LQujSNrmuxk07sZLgUcV5Jinm63BeZwKhf3XTrddox5yEvgmv iqDBauxD8Tk8Q1DRvg+fYlIeB71CzJSs20W2U6vTvf26aGFMSBEdLXTjYEny15o/ 800MWUFTtaPjwIKqhiFUTvesREbgYyOpECeepYOER0KAhFFL6ylyvjuEinN1R/qr YQ7K99k5DO8gYpf/A2Th8g3ExE5SdV2ueQcmtBO1LsU/MBpsczD3k/zPwwIDAQAB o4ICmjCCApYwHQYDVR0OBBYEFLfqS3lnCL3n+J2jDFYOyH1ZzM6KMB8GA1UdIwQY MBaAFDLUSRn90Ir7mk0Kh3iSMBElHdfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXRSSkdmM1FpdnVhVFFxSGVKSXdFU1VkMV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9mZDIyOTQtY2YzNy00ZmM5LTllZGQt YTRmN2IwODhiYzFhLzEvdC1wTGVXY0l2ZWY0bmFNTVZnN0lmVm5Nem9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9mZDIyOTQtY2YzNy00ZmM5LTllZGQtYTRmN2IwODhiYzFh LzEvTXRSSkdmM1FpdnVhVFFxSGVKSXdFU1VkMV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGvBggrBgEFBQcBBwEB/wSBnzCBnDCBmQQCAAEwgZIDBABA JnQDBABBJnsDBABBT7ADBABCLUwDBABCLXEDBABCsw8wDAMEAEKzjQMEAEKzjgME AEKznAMEAEKzsAMEAK38kQMEAK38oAMEAK38pgMEANEuAQMEANEuJwMEANi3aQME ANi3bQMEANi3cwMEANi3ewMEANjLDQMEANjLHwMEANjLJgMEANjLOAMEANj1mDAN BgkqhkiG9w0BAQsFAAOCAQEAN9Hvv4RPpn9RD3DIi8lJ60wtQehlemgb9I/YarxY xLbMRURcgHi/wFErLcOW60m9TjzevcWABIrDLn691bAkHIEhsY19F7QMdwD/vxAO 4Z0gZz/uolHXFH/MjMf4+LnxKnaFxhK8E3CpGdLYEKufRNt7SQXYu30hQ3lphxHg 933hDPwkYQaTYDDg/i7a+3KM/aPJ+oPD+5d6fyFsxhaTRO4k3G2uKVDSTUmbV5cS 7G22xRsPgZW8QW0QZXG1e3ixTdmhL0MvrYBfdwqpo5yq+/n+3qESWkVmfMcbd2kC caohYoGCCyD1EjmY7BbCZh4maCpYJUexOoyqiEpvYY00Sw== -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:08 2026 by rpki-client