This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/1mrNfoe_DrEnoFcdS9vvvmUHCy4.roa File: 1mrNfoe_DrEnoFcdS9vvvmUHCy4.roa (raw, json) Hash identifier: QkanHcHHq6Wt9NiRP2L21ngt1ytK/u1yXZ42ZWeZwX8= Subject key identifier: D6:6A:CD:7E:87:BF:0E:B1:27:A0:57:1D:4B:DB:EF:BE:65:07:0B:2E Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Certificate serial: 019BE52AB32C2438064F315D6AB1236B86BB Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/1mrNfoe_DrEnoFcdS9vvvmUHCy4.roa Signing time: Thu 22 Jan 2026 10:05:39 +0000 ROA not before: Thu 22 Jan 2026 10:05:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 62.171.232.0/21 maxlen: 24 62.171.240.0/22 maxlen: 24 62.171.244.0/22 maxlen: 24 62.171.248.0/24 maxlen: 24 194.154.24.0/22 maxlen: 24 194.154.28.0/22 maxlen: 24 194.238.40.0/23 maxlen: 24 194.238.42.0/23 maxlen: 24 194.238.44.0/22 maxlen: 24 194.238.72.0/22 maxlen: 24 194.238.76.0/22 maxlen: 24 194.238.78.0/24 maxlen: 24 194.238.79.0/24 maxlen: 24 194.238.80.0/22 maxlen: 24 194.238.84.0/22 maxlen: 24 194.238.88.0/22 maxlen: 24 194.238.92.0/22 maxlen: 24 213.18.245.0/24 maxlen: 24 217.177.0.0/21 maxlen: 24 217.177.8.0/22 maxlen: 24 217.177.12.0/22 maxlen: 24 217.177.32.0/24 maxlen: 24 217.177.33.0/24 maxlen: 24 217.177.34.0/24 maxlen: 24 217.177.35.0/24 maxlen: 24 217.177.40.0/22 maxlen: 24 217.177.44.0/22 maxlen: 24 217.177.72.0/24 maxlen: 24 217.177.73.0/24 maxlen: 24 217.177.74.0/24 maxlen: 24 217.177.75.0/24 maxlen: 24 217.177.80.0/22 maxlen: 24 217.177.84.0/22 maxlen: 24 217.179.72.0/23 maxlen: 24 217.179.88.0/24 maxlen: 24 217.179.91.0/24 maxlen: 24 217.179.228.0/22 maxlen: 24 217.180.15.0/24 maxlen: 24 217.180.20.0/24 maxlen: 24 217.180.21.0/24 maxlen: 24 217.180.22.0/23 maxlen: 24 217.180.40.0/22 maxlen: 24 217.180.44.0/24 maxlen: 24 217.180.45.0/24 maxlen: 24 217.180.46.0/24 maxlen: 24 217.180.47.0/24 maxlen: 24 217.180.52.0/24 maxlen: 24 217.180.53.0/24 maxlen: 24 217.180.54.0/24 maxlen: 24 217.180.55.0/24 maxlen: 24 217.180.60.0/24 maxlen: 24 217.181.80.0/21 maxlen: 24 217.181.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:2a:b3:2c:24:38:06:4f:31:5d:6a:b1:23:6b:86:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Validity Not Before: Jan 22 10:05:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d66acd7e87bf0eb127a0571d4bdbefbe65070b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:64:ec:9c:87:db:37:b2:c1:eb:c1:30:38:28: c6:c5:93:e5:dd:d2:ed:8c:89:a5:85:5f:b3:c3:e1: 67:8b:cb:b8:ee:c5:fa:43:1e:64:ed:e8:d6:b9:16: 05:99:4e:5a:81:42:b6:7b:d4:9e:29:fd:b7:e1:db: 18:d2:50:01:c5:2c:61:67:63:b0:4e:2e:6f:6a:c7: ed:23:f5:6b:1a:a5:52:a9:ae:ee:b5:c1:35:d9:d7: 99:de:7f:ae:db:a8:22:35:08:a9:b3:6a:26:a1:e5: 8f:2f:aa:a5:86:c1:70:3b:bd:ec:1c:3f:2c:be:e5: 51:48:7e:9b:34:f8:ab:09:52:2b:a3:cd:f2:89:f8: 00:0f:b8:54:74:ff:5c:04:02:73:d5:32:51:a8:c8: 6c:f0:7e:21:1c:a3:38:3c:f4:20:1a:54:8b:4a:d8: fd:f6:f9:4f:30:ec:4d:6d:27:be:db:5a:22:bc:00: 33:86:48:5c:e7:3f:3e:7c:b0:2c:85:89:cf:1a:f3: af:68:80:5e:86:9a:3e:7a:77:66:03:bc:02:d0:ba: c3:4d:92:5f:e4:f4:60:78:db:5a:9a:16:d4:4b:f5: 9a:dd:74:20:b9:4f:f3:eb:3c:3a:e9:ca:2b:59:ea: 67:da:82:8f:7b:a9:c8:44:62:72:e7:c7:0f:c7:d4: 2f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6A:CD:7E:87:BF:0E:B1:27:A0:57:1D:4B:DB:EF:BE:65:07:0B:2E X509v3 Authority Key Identifier: keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/1mrNfoe_DrEnoFcdS9vvvmUHCy4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.171.232.0-62.171.248.255 194.154.24.0/21 194.238.40.0/21 194.238.72.0-194.238.95.255 213.18.245.0/24 217.177.0.0/20 217.177.32.0/22 217.177.40.0/21 217.177.72.0/22 217.177.80.0/21 217.179.72.0/23 217.179.88.0/24 217.179.91.0/24 217.179.228.0/22 217.180.15.0/24 217.180.20.0/22 217.180.40.0/21 217.180.52.0/22 217.180.60.0/24 217.181.80.0-217.181.91.255 Signature Algorithm: sha256WithRSAEncryption 22:42:c9:15:a5:36:82:9c:77:9e:e2:e4:a9:bc:d8:40:35:53: e8:f3:8d:65:d1:c1:bb:3b:8a:2a:fb:d9:15:63:1a:c9:cd:8b: 73:b8:28:0b:47:88:1a:f3:6b:25:1a:05:70:d9:ae:fd:32:ea: d3:30:67:89:d3:03:39:31:5d:70:24:2c:0c:fb:9c:b7:f2:75: b1:da:8f:5f:9f:e6:01:ce:da:5d:72:dc:d2:84:3e:2f:1c:6d: 85:06:20:b3:4f:ae:a8:4e:5f:e0:8d:ce:df:20:fd:65:30:ec: 56:4b:dd:5b:e4:9b:1b:f6:65:73:bc:84:6c:fb:43:49:17:82: 3b:5a:b0:50:b9:c5:b4:70:aa:84:69:17:b4:42:d4:27:aa:a4: fa:0c:14:15:fe:bc:2b:a4:88:d9:d5:a3:9e:e6:46:15:dc:3a: a0:04:bd:d8:3a:2f:5c:73:36:84:f6:04:2f:1b:13:8d:88:01: ce:bc:30:67:d3:c5:91:ff:10:7b:67:21:13:fd:aa:60:2f:3c: a9:62:e1:59:cd:1b:95:86:98:c4:6a:7f:02:ef:c8:9f:31:8f: 5a:f3:57:13:37:57:53:24:be:d5:f7:8b:4b:ba:fe:61:fa:22: ad:2c:dc:a6:fd:74:0c:16:91:4b:a3:2f:97:74:7e:95:ef:7f: df:62:ff:fe -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgISAZvlKrMsJDgGTzFdarEja4a7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy ZGE3NGQwHhcNMjYwMTIyMTAwNTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjZhY2Q3ZTg3YmYwZWIxMjdhMDU3MWQ0YmRiZWZiZTY1MDcwYjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGTsnIfbN7LB68EwOCjGxZPl3dLt jImlhV+zw+Fni8u47sX6Qx5k7ejWuRYFmU5agUK2e9SeKf234dsY0lABxSxhZ2Ow Ti5vasftI/VrGqVSqa7utcE12deZ3n+u26giNQips2omoeWPL6qlhsFwO73sHD8s vuVRSH6bNPirCVIro83yifgAD7hUdP9cBAJz1TJRqMhs8H4hHKM4PPQgGlSLStj9 9vlPMOxNbSe+21oivAAzhkhc5z8+fLAshYnPGvOvaIBehpo+endmA7wC0LrDTZJf 5PRgeNtamhbUS/Wa3XQguU/z6zw66corWepn2oKPe6nIRGJy58cPx9QvNQIDAQAB o4ICmDCCApQwHQYDVR0OBBYEFNZqzX6Hvw6xJ6BXHUvb775lBwsuMB8GA1UdIwQY MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt YzE5OTQyNzM3ZTZkLzEvMW1yTmZvZV9EckVub0ZjZFM5dnZ2bVVIQ3k0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZAwDAME Az6r6AMEAD6r+AMEA8KaGAMEA8LuKDAMAwQDwu5IAwQFwu5AAwQA1RL1AwQE2bEA AwQC2bEgAwQD2bEoAwQC2bFIAwQD2bFQAwQB2bNIAwQA2bNYAwQA2bNbAwQC2bPk AwQA2bQPAwQC2bQUAwQD2bQoAwQC2bQ0AwQA2bQ8MAwDBATZtVADBALZtVgwDQYJ KoZIhvcNAQELBQADggEBACJCyRWlNoKcd57i5Km82EA1U+jzjWXRwbs7iir72RVj GsnNi3O4KAtHiBrzayUaBXDZrv0y6tMwZ4nTAzkxXXAkLAz7nLfydbHaj1+f5gHO 2l1y3NKEPi8cbYUGILNPrqhOX+CNzt8g/WUw7FZL3Vvkmxv2ZXO8hGz7Q0kXgjta sFC5xbRwqoRpF7RC1CeqpPoMFBX+vCukiNnVo57mRhXcOqAEvdg6L1xzNoT2BC8b E42IAc68MGfTxZH/EHtnIRP9qmAvPKli4VnNG5WGmMRqfwLvyJ8xj1rzVxM3V1Mk vtX3i0u6/mH6Iq0s3Kb9dAwWkUujL5d0fpXvf99i//4= -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:41 2026 by rpki-client