This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/RiCeGoLJLFsyXLs4imgog-X_h40.roa File: RiCeGoLJLFsyXLs4imgog-X_h40.roa (raw, json) Hash identifier: m5IiGNSxjj3YSYsLMUU0YB0kkycBv85oeXqVJ5P7/kM= Subject key identifier: 46:20:9E:1A:82:C9:2C:5B:32:5C:BB:38:8A:68:28:83:E5:FF:87:8D Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301 Certificate serial: 019B76EAE867E21B5B6C2CFA0F32A374EF72 Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/RiCeGoLJLFsyXLs4imgog-X_h40.roa Signing time: Thu 01 Jan 2026 00:17:44 +0000 ROA not before: Thu 01 Jan 2026 00:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43647 IP address blocks: 62.122.216.0/22 maxlen: 24 82.148.0.0/21 maxlen: 24 89.232.184.0/22 maxlen: 24 94.154.128.0/22 maxlen: 24 185.76.12.0/22 maxlen: 24 185.228.88.0/22 maxlen: 24 193.149.16.0/22 maxlen: 24 213.232.225.0/24 maxlen: 24 213.232.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e8:67:e2:1b:5b:6c:2c:fa:0f:32:a3:74:ef:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301 Validity Not Before: Jan 1 00:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46209e1a82c92c5b325cbb388a682883e5ff878d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c4:b7:bc:d8:62:4f:ff:95:d2:85:86:5b:8c: 19:be:b7:78:e5:bb:55:0f:52:c6:28:a7:a7:50:85: 1d:42:44:6d:8c:b2:97:77:52:0a:8d:3c:b1:8c:3f: bb:70:5f:c2:c3:3d:91:52:0e:1a:3d:f5:47:e4:49: 7b:5c:68:d3:8b:c0:5c:dd:e2:47:ba:30:b1:18:36: ab:09:6f:28:c7:15:27:10:81:0f:08:68:1d:cf:12: 66:19:4f:8e:a2:46:2a:e2:32:dc:2d:06:3a:87:a7: 73:ec:03:b3:bd:13:0a:ee:43:32:3b:3a:c6:7e:db: af:c3:ef:9e:a2:91:55:58:ca:98:94:56:37:77:9b: b8:c6:44:bb:79:34:27:28:fd:04:a8:6d:87:2f:28: 03:1a:e5:a1:ae:49:7a:7b:cf:6c:cd:48:7b:1b:fb: 86:06:93:a6:bb:31:1c:5d:2e:cb:43:f6:ad:af:24: 4c:4e:ce:d6:6d:f4:e6:56:96:90:4c:43:c6:a8:3a: 48:26:f0:64:79:9d:a1:8c:e0:23:fc:6e:c3:0f:e8: 85:1b:de:11:06:1e:e2:0d:e3:32:68:60:95:fc:00: 0f:dc:9e:ee:34:d4:dd:4d:ee:b9:33:23:80:fb:5d: e6:64:42:a8:1e:93:5a:8f:60:59:f9:54:c5:d5:5e: ae:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:20:9E:1A:82:C9:2C:5B:32:5C:BB:38:8A:68:28:83:E5:FF:87:8D X509v3 Authority Key Identifier: keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/RiCeGoLJLFsyXLs4imgog-X_h40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.122.216.0/22 82.148.0.0/21 89.232.184.0/22 94.154.128.0/22 185.76.12.0/22 185.228.88.0/22 193.149.16.0/22 213.232.225.0/24 213.232.245.0/24 Signature Algorithm: sha256WithRSAEncryption 32:87:c5:1e:da:4c:5d:95:e4:47:04:8b:59:cb:08:1d:7b:91: e7:d3:5d:f2:14:8c:68:64:25:3b:e1:33:0b:35:ce:01:07:4f: 8b:53:52:33:f6:33:a6:b1:08:6d:ea:2b:22:2d:fa:81:12:cb: 36:ec:7d:e2:e2:a2:51:c6:df:15:19:d1:c4:51:99:f2:b1:19: e9:30:bb:c6:36:5e:6a:61:8d:3d:b7:26:02:0f:e6:5e:be:27: a3:ea:27:99:10:9a:0b:14:bf:79:6d:b6:e8:b3:53:de:f1:dd: 47:fd:e2:17:e4:35:68:34:14:65:20:be:22:bd:a6:83:52:05: b3:89:b1:99:8a:e1:1a:c5:2b:82:70:1a:9a:51:17:5a:44:93: aa:cd:73:7a:9e:6b:f2:11:c6:cd:03:5e:7c:16:89:4c:0f:49: c1:7c:3a:4d:d4:00:8e:8b:06:74:e2:40:c8:3e:5b:9f:52:87: 95:06:76:72:59:cc:6f:dd:fa:ca:7e:7e:e2:69:c3:d4:a2:fd: 83:a8:d1:58:ac:35:66:21:0d:2d:22:af:4c:c4:b7:7a:09:4a: 7f:c2:05:eb:61:92:ac:78:72:03:59:06:7c:6a:b1:75:8b:54: 90:86:73:3d:dd:aa:b5:6b:55:50:ff:e0:9f:de:1f:62:f3:a6: d6:75:97:27 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt26uhn4htbbCz6DzKjdO9yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYjY5YjU5ZDE5ZjI5ODdlNDlmMTg1MmQ2MGJiMTc3N2Y4 MGEzMDEwHhcNMjYwMTAxMDAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjIwOWUxYTgyYzkyYzViMzI1Y2JiMzg4YTY4Mjg4M2U1ZmY4NzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksS3vNhiT/+V0oWGW4wZvrd45btV D1LGKKenUIUdQkRtjLKXd1IKjTyxjD+7cF/Cwz2RUg4aPfVH5El7XGjTi8Bc3eJH ujCxGDarCW8oxxUnEIEPCGgdzxJmGU+OokYq4jLcLQY6h6dz7AOzvRMK7kMyOzrG ftuvw++eopFVWMqYlFY3d5u4xkS7eTQnKP0EqG2HLygDGuWhrkl6e89szUh7G/uG BpOmuzEcXS7LQ/atryRMTs7WbfTmVpaQTEPGqDpIJvBkeZ2hjOAj/G7DD+iFG94R Bh7iDeMyaGCV/AAP3J7uNNTdTe65MyOA+13mZEKoHpNaj2BZ+VTF1V6uBQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFEYgnhqCySxbMly7OIpoKIPl/4eNMB8GA1UdIwQY MBaAFBG2m1nRnymH5J8YUtYLsXd/gKMBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTIt ZDE2OWMwODhiNDEyLzEvUmlDZUdvTEpMRnN5WExzNGltZ29nLVhfaDQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTItZDE2OWMwODhiNDEy LzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCPnrYAwQD UpQAAwQCWei4AwQCXpqAAwQCuUwMAwQCueRYAwQCwZUQAwQA1ejhAwQA1ej1MA0G CSqGSIb3DQEBCwUAA4IBAQAyh8Ue2kxdleRHBItZywgde5Hn013yFIxoZCU74TML Nc4BB0+LU1Iz9jOmsQht6isiLfqBEss27H3i4qJRxt8VGdHEUZnysRnpMLvGNl5q YY09tyYCD+Zeviej6ieZEJoLFL95bbbos1Pe8d1H/eIX5DVoNBRlIL4ivaaDUgWz ibGZiuEaxSuCcBqaURdaRJOqzXN6nmvyEcbNA158FolMD0nBfDpN1ACOiwZ04kDI PlufUoeVBnZyWcxv3frKfn7iacPUov2DqNFYrDVmIQ0tIq9MxLd6CUp/wgXrYZKs eHIDWQZ8arF1i1SQhnM93aq1a1VQ/+Cf3h9i86bWdZcn -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:50 2026 by rpki-client