This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/DJ50to7qvdsltzV5zTHIT9kdh4c.roa File: DJ50to7qvdsltzV5zTHIT9kdh4c.roa (raw, json) Hash identifier: 67gDjS5zeYKVSExiDrzB+7caMmnHyLCA2SD54a28mu0= Subject key identifier: 0C:9E:74:B6:8E:EA:BD:DB:25:B7:35:79:CD:31:C8:4F:D9:1D:87:87 Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EAFF630091A78389B3735F111707D5 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/DJ50to7qvdsltzV5zTHIT9kdh4c.roa Signing time: Thu 01 Jan 2026 00:17:50 +0000 ROA not before: Thu 01 Jan 2026 00:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212552 IP address blocks: 43.225.90.0/24 maxlen: 24 45.146.241.0/24 maxlen: 24 46.249.98.0/23 maxlen: 24 46.249.100.0/22 maxlen: 24 46.249.103.0/24 maxlen: 24 46.249.111.0/24 maxlen: 24 82.115.8.0/24 maxlen: 24 82.115.13.0/24 maxlen: 24 82.115.16.0/24 maxlen: 24 82.115.17.0/24 maxlen: 24 82.115.18.0/24 maxlen: 24 82.115.19.0/24 maxlen: 24 82.115.20.0/23 maxlen: 24 82.115.24.0/22 maxlen: 24 89.251.8.0/23 maxlen: 24 103.75.196.0/22 maxlen: 24 185.80.196.0/24 maxlen: 24 185.215.244.0/23 maxlen: 24 193.36.84.0/23 maxlen: 24 202.133.88.0/24 maxlen: 24 202.133.89.0/24 maxlen: 24 202.133.90.0/24 maxlen: 24 202.133.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ff:63:00:91:a7:83:89:b3:73:5f:11:17:07:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c9e74b68eeabddb25b73579cd31c84fd91d8787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c9:03:67:41:68:7a:9c:7e:aa:02:aa:b1:d5: 1b:e2:57:64:35:70:cd:ea:81:11:d2:5a:3c:59:7c: 02:10:cd:a8:25:b8:2c:0e:93:d1:61:75:51:e1:c7: 18:f4:87:58:66:04:23:0c:08:d4:49:07:7f:a8:2a: eb:20:48:91:bb:a0:b3:44:e7:21:18:df:fd:36:8c: 36:b6:c7:81:54:5c:f3:bb:3c:a5:d4:6c:fa:19:9c: d2:53:c1:b1:bb:cc:b5:00:c6:b2:15:e6:1c:08:54: 7a:5d:b2:03:4f:35:67:c3:5a:1a:5f:c3:2a:b9:26: 52:a2:ea:c1:18:af:ab:88:45:49:83:d6:30:05:bd: 9f:0a:df:3f:38:44:d9:d3:62:98:d8:d0:3b:ec:60: ef:24:dd:de:58:13:b0:67:c3:7f:f9:6e:e6:48:8f: 9a:fe:96:84:84:b2:22:bb:dd:d5:c4:72:25:7f:a8: bc:a4:d2:56:d2:76:b2:f2:8a:a8:28:be:d3:9d:ad: 56:75:35:da:a1:13:cc:b5:3c:48:f7:c7:55:26:da: e1:6c:fe:c8:93:55:2c:9f:9c:00:4f:8a:8b:40:8f: 1e:68:5d:50:e2:25:4d:4c:df:d4:61:5a:09:96:03: 81:4b:c2:ee:60:d9:bd:d3:90:00:4f:12:28:4e:84: d8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9E:74:B6:8E:EA:BD:DB:25:B7:35:79:CD:31:C8:4F:D9:1D:87:87 X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/DJ50to7qvdsltzV5zTHIT9kdh4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.225.90.0/24 45.146.241.0/24 46.249.98.0-46.249.103.255 46.249.111.0/24 82.115.8.0/24 82.115.13.0/24 82.115.16.0-82.115.21.255 82.115.24.0/22 89.251.8.0/23 103.75.196.0/22 185.80.196.0/24 185.215.244.0/23 193.36.84.0/23 202.133.88.0/22 Signature Algorithm: sha256WithRSAEncryption 56:74:91:15:20:c0:4e:a3:de:90:29:dd:ab:c6:86:01:fa:2b: cf:cd:f8:69:4c:cd:60:d2:9f:bf:ea:27:1f:80:19:58:85:14: 6c:cb:09:47:89:00:1f:2a:4d:f5:f2:95:0c:41:a5:7c:c0:c4: c3:c4:ab:e2:3f:91:57:6c:f5:f9:0f:3d:91:8e:44:97:10:0d: ee:da:55:70:19:58:37:b7:64:4e:b6:40:a3:2c:02:f3:ef:74: e8:9d:67:b5:a7:cb:8b:34:91:d2:e7:c4:5c:63:03:2a:9c:a1: 8e:e8:ac:41:98:6d:58:c3:1f:a2:e4:8f:6f:91:02:b4:e7:c5: 18:22:be:67:59:47:62:5a:35:41:8a:a8:5c:61:fb:91:de:a3: 66:ad:ac:ac:11:8d:83:16:85:32:a9:5e:42:88:16:6d:97:b7: 7f:1e:06:cf:0e:45:92:b7:7c:58:27:ed:d8:4e:0e:d5:97:7c: a9:dc:c4:6c:60:8a:ce:0f:31:ac:31:ed:a4:c7:6a:cc:d0:63: 8c:a4:41:ab:b2:9b:bc:ab:04:cd:07:86:96:68:23:00:4d:0e: 25:cf:b0:d0:ef:85:82:30:25:56:73:89:43:ab:af:e7:a5:ff: 0b:33:b4:5d:3a:17:a3:1a:da:0b:64:a9:3b:fc:7e:68:8b:02: 14:65:ff:3a -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgISAZt26v9jAJGng4mzc18RFwfVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzllNzRiNjhlZWFiZGRiMjViNzM1NzljZDMxYzg0ZmQ5MWQ4Nzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuskDZ0Foepx+qgKqsdUb4ldkNXDN 6oER0lo8WXwCEM2oJbgsDpPRYXVR4ccY9IdYZgQjDAjUSQd/qCrrIEiRu6CzROch GN/9Now2tseBVFzzuzyl1Gz6GZzSU8Gxu8y1AMayFeYcCFR6XbIDTzVnw1oaX8Mq uSZSourBGK+riEVJg9YwBb2fCt8/OETZ02KY2NA77GDvJN3eWBOwZ8N/+W7mSI+a /paEhLIiu93VxHIlf6i8pNJW0nay8oqoKL7Tna1WdTXaoRPMtTxI98dVJtrhbP7I k1Usn5wAT4qLQI8eaF1Q4iVNTN/UYVoJlgOBS8LuYNm905AATxIoToTY7wIDAQAB o4ICZzCCAmMwHQYDVR0OBBYEFAyedLaO6r3bJbc1ec0xyE/ZHYeHMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvREo1MHRvN3F2ZHNsdHpWNXpUSElUOWtkaDRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH0GCCsGAQUFBwEHAQH/BG4wbDBqBAIAATBkAwQAK+FaAwQA LZLxMAwDBAEu+WIDBAMu+WADBAAu+W8DBABScwgDBABScw0wDAMEBFJzEAMEAVJz FAMEAlJzGAMEAVn7CAMEAmdLxAMEALlQxAMEAbnX9AMEAcEkVAMEAsqFWDANBgkq hkiG9w0BAQsFAAOCAQEAVnSRFSDATqPekCndq8aGAforz834aUzNYNKfv+onH4AZ WIUUbMsJR4kAHypN9fKVDEGlfMDEw8Sr4j+RV2z1+Q89kY5ElxAN7tpVcBlYN7dk TrZAoywC8+906J1ntafLizSR0ufEXGMDKpyhjuisQZhtWMMfouSPb5ECtOfFGCK+ Z1lHYlo1QYqoXGH7kd6jZq2srBGNgxaFMqleQogWbZe3fx4Gzw5Fkrd8WCft2E4O 1Zd8qdzEbGCKzg8xrDHtpMdqzNBjjKRBq7KbvKsEzQeGlmgjAE0OJc+w0O+FgjAl VnOJQ6uv56X/CzO0XToXoxraC2SpO/x+aIsCFGX/Og== -----END CERTIFICATE-----Generated at Sun Jan 25 15:07:52 2026 by rpki-client