This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/1R40RwSkegC_HsL5IAb308RJy7c.roa File: 1R40RwSkegC_HsL5IAb308RJy7c.roa (raw, json) Hash identifier: NUiWWxJmf6nBjZL7nemqUuYwgnn2w0RTzkdB/U1hYno= Subject key identifier: D5:1E:34:47:04:A4:7A:00:BF:1E:C2:F9:20:06:F7:D3:C4:49:CB:B7 Certificate issuer: /CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0 Certificate serial: 019B7C80311186C199B24B32B23EEE998AB8 Authority key identifier: F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/1R40RwSkegC_HsL5IAb308RJy7c.roa Signing time: Fri 02 Jan 2026 02:18:54 +0000 ROA not before: Fri 02 Jan 2026 02:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47956 IP address blocks: 5.102.192.0/18 maxlen: 24 31.210.176.0/21 maxlen: 21 31.210.176.0/22 maxlen: 22 31.210.176.0/23 maxlen: 23 31.210.180.0/22 maxlen: 22 31.210.184.0/22 maxlen: 22 37.46.32.0/20 maxlen: 24 91.205.152.0/22 maxlen: 24 94.230.80.0/20 maxlen: 24 94.230.80.0/21 maxlen: 21 94.230.80.0/22 maxlen: 22 94.230.84.0/22 maxlen: 22 94.230.88.0/22 maxlen: 22 94.230.92.0/22 maxlen: 22 141.226.0.0/19 maxlen: 24 141.226.0.0/21 maxlen: 21 141.226.0.0/22 maxlen: 22 141.226.4.0/22 maxlen: 22 141.226.8.0/21 maxlen: 21 141.226.8.0/22 maxlen: 22 141.226.12.0/22 maxlen: 22 141.226.32.0/20 maxlen: 24 141.226.48.0/22 maxlen: 24 141.226.52.0/23 maxlen: 24 141.226.54.0/24 maxlen: 24 141.226.56.0/21 maxlen: 24 141.226.64.0/22 maxlen: 24 141.226.68.0/23 maxlen: 24 141.226.70.0/24 maxlen: 24 141.226.72.0/21 maxlen: 24 141.226.144.0/20 maxlen: 24 141.226.144.0/21 maxlen: 21 141.226.152.0/21 maxlen: 21 141.226.160.0/20 maxlen: 24 141.226.160.0/21 maxlen: 21 141.226.160.0/22 maxlen: 22 141.226.168.0/21 maxlen: 21 141.226.176.0/21 maxlen: 24 188.120.128.0/19 maxlen: 24 2a02:ed0::/29 maxlen: 29 2a02:ed0::/32 maxlen: 48 2a02:ed1::/32 maxlen: 32 2a02:ed2::/32 maxlen: 32 2a02:ed2::/40 maxlen: 48 2a02:ed3::/32 maxlen: 48 2a02:ed5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.crl rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:31:11:86:c1:99:b2:4b:32:b2:3e:ee:99:8a:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0 Validity Not Before: Jan 2 02:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d51e344704a47a00bf1ec2f92006f7d3c449cbb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ef:24:a6:fd:1b:06:2d:28:25:cc:68:63:cd: bd:62:8a:78:3b:d6:7b:73:5d:1f:96:b6:44:e6:49: 16:7e:5e:51:d2:ba:9f:8f:03:e1:0d:82:8d:51:0d: 4d:a1:5b:62:9d:bc:57:30:cc:c8:18:ed:07:8a:c4: 19:ab:36:40:cc:df:1e:ae:94:2d:e4:cc:ce:ca:5d: 1c:d9:60:11:40:b7:0e:4f:97:e9:72:1b:b8:05:1e: ec:a3:bd:0f:0f:09:03:c6:9d:a2:3f:59:b4:81:6e: 15:49:92:72:b6:64:ca:46:f0:b3:31:8c:17:6f:76: d1:ba:92:bf:49:a4:3a:b4:c5:f4:13:1d:89:6d:d8: 22:31:7a:19:c3:da:14:f9:d9:cd:03:b3:88:78:e8: 34:f4:e6:bd:f3:1c:40:91:86:be:2a:08:f1:34:0c: 45:71:6e:69:d2:f6:5d:10:19:ce:38:b9:a6:02:61: fa:83:d4:70:eb:7c:4c:77:67:a2:cc:54:41:21:cf: d7:5c:11:36:74:be:98:66:cb:2c:bd:9f:b7:9f:ef: b5:1b:26:11:48:9b:45:cc:88:7f:48:10:a0:f4:bb: 47:78:25:38:27:ef:dc:a1:e9:4b:4c:2b:d3:4f:10: 16:a0:f3:25:5b:c2:fa:7b:32:ed:ac:7f:08:31:50: a2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1E:34:47:04:A4:7A:00:BF:1E:C2:F9:20:06:F7:D3:C4:49:CB:B7 X509v3 Authority Key Identifier: keyid:F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/1R40RwSkegC_HsL5IAb308RJy7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.192.0/18 31.210.176.0-31.210.187.255 37.46.32.0/20 91.205.152.0/22 94.230.80.0/20 141.226.0.0-141.226.54.255 141.226.56.0-141.226.70.255 141.226.72.0/21 141.226.144.0-141.226.183.255 188.120.128.0/19 IPv6: 2a02:ed0::/29 Signature Algorithm: sha256WithRSAEncryption 6b:58:b1:21:4d:80:ac:80:bd:57:8a:26:db:20:a3:05:92:7f: 69:e6:40:d3:64:a3:c5:51:07:f6:98:8b:fd:7e:33:66:a3:d1: ab:69:92:7a:16:d9:bf:97:43:e7:ed:f3:cf:3f:b7:66:21:69: 89:70:d2:9a:10:b8:56:eb:e3:e3:2a:f2:db:c8:f3:fe:63:c4: 67:bb:2d:98:a9:bb:43:8f:1d:f4:54:b0:98:01:23:43:d8:d7: df:8a:2f:7d:87:d2:4e:19:d3:d6:29:9a:79:b9:65:8d:e0:80: 9d:4b:4c:a9:2a:8f:58:78:2d:84:3a:9f:cc:fc:e0:88:d0:80: a1:8d:ba:3a:68:cb:d4:f5:14:c6:32:92:1f:89:0b:1f:4c:ce: b5:bf:df:a1:27:7a:d8:aa:27:b7:a5:12:e1:b3:c0:1c:f3:3c: c7:52:c4:d6:9b:b4:55:45:27:d2:b7:50:8d:1d:da:82:ed:ae: ff:1c:4a:d6:6d:ef:cb:09:d2:3b:48:65:d5:64:cb:34:67:b1: 9a:66:f5:63:b1:31:3a:b9:08:e0:7e:70:b6:c7:d3:2a:62:66: 8a:7d:8b:98:da:0d:28:71:3d:4a:30:95:6a:1e:68:98:c2:64: 58:65:68:88:1c:4e:5a:6e:17:3b:ee:b8:90:e4:4a:95:24:a0: ce:64:5f:d8 -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgISAZt8gDERhsGZsksysj7umYq4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YzBhYTdiM2UzY2JmZjg4MjYyYWRkOTJiMzM5ZTM1MDUx Y2UxYTAwHhcNMjYwMTAyMDIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTFlMzQ0NzA0YTQ3YTAwYmYxZWMyZjkyMDA2ZjdkM2M0NDljYmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO8kpv0bBi0oJcxoY829Yop4O9Z7 c10flrZE5kkWfl5R0rqfjwPhDYKNUQ1NoVtinbxXMMzIGO0HisQZqzZAzN8erpQt 5MzOyl0c2WARQLcOT5fpchu4BR7so70PDwkDxp2iP1m0gW4VSZJytmTKRvCzMYwX b3bRupK/SaQ6tMX0Ex2JbdgiMXoZw9oU+dnNA7OIeOg09Oa98xxAkYa+KgjxNAxF cW5p0vZdEBnOOLmmAmH6g9Rw63xMd2eizFRBIc/XXBE2dL6YZsssvZ+3n++1GyYR SJtFzIh/SBCg9LtHeCU4J+/coelLTCvTTxAWoPMlW8L6ezLtrH8IMVCiPwIDAQAB o4ICbjCCAmowHQYDVR0OBBYEFNUeNEcEpHoAvx7C+SAG99PEScu3MB8GA1UdIwQY MBaAFPTAqns+PL/4gmKt2SsznjUFHOGgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU1DcWV6NDh2X2lDWXEzWkt6T2VOUVVjNGFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85ZTJiMWEtMTYzYi00ODU0LTk2MWEt ZWE3NWRkZjQ3YjRhLzEvMVI0MFJ3U2tlZ0NfSHNMNUlBYjMwOFJKeTdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS85ZTJiMWEtMTYzYi00ODU0LTk2MWEtZWE3NWRkZjQ3YjRh LzEvOU1DcWV6NDh2X2lDWXEzWkt6T2VOUVVjNGFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwYQQCAAEwWwMEBgVmwDAM AwQEH9KwAwQCH9K4AwQEJS4gAwQCW82YAwQEXuZQMAsDAwGN4gMEAI3iNjAMAwQD jeI4AwQAjeJGAwQDjeJIMAwDBASN4pADBAON4rADBAW8eIAwDQQCAAIwBwMFAyoC DtAwDQYJKoZIhvcNAQELBQADggEBAGtYsSFNgKyAvVeKJtsgowWSf2nmQNNko8VR B/aYi/1+M2aj0atpknoW2b+XQ+ft888/t2YhaYlw0poQuFbr4+Mq8tvI8/5jxGe7 LZipu0OPHfRUsJgBI0PY19+KL32H0k4Z09Ypmnm5ZY3ggJ1LTKkqj1h4LYQ6n8z8 4IjQgKGNujpoy9T1FMYykh+JCx9MzrW/36EnetiqJ7elEuGzwBzzPMdSxNabtFVF J9K3UI0d2oLtrv8cStZt78sJ0jtIZdVkyzRnsZpm9WOxMTq5COB+cLbH0ypiZop9 i5jaDShxPUowlWoeaJjCZFhlaIgcTlpuFzvuuJDkSpUkoM5kX9g= -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:43 2026 by rpki-client