This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/RjTlguRgcAqb5mkC5whD5YBTtos.roa File: RjTlguRgcAqb5mkC5whD5YBTtos.roa (raw, json) Hash identifier: rBmFvqm9la/6Kn095Es+kobXfpMnMG+qYPPeDl24mPQ= Subject key identifier: 46:34:E5:82:E4:60:70:0A:9B:E6:69:02:E7:08:43:E5:80:53:B6:8B Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Certificate serial: 019B7FF2811277E1778A166B75C09EE2C083 Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/RjTlguRgcAqb5mkC5whD5YBTtos.roa Signing time: Fri 02 Jan 2026 18:22:37 +0000 ROA not before: Fri 02 Jan 2026 18:22:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31200 IP address blocks: 5.128.0.0/16 maxlen: 16 5.128.119.0/24 maxlen: 24 5.129.0.0/17 maxlen: 17 5.129.128.0/19 maxlen: 19 5.129.181.0/24 maxlen: 24 5.129.184.0/23 maxlen: 23 5.129.186.0/24 maxlen: 24 5.130.0.0/16 maxlen: 16 5.130.162.0/24 maxlen: 24 5.130.163.0/24 maxlen: 24 5.130.164.0/24 maxlen: 24 5.130.165.0/24 maxlen: 24 5.130.166.0/24 maxlen: 24 5.131.0.0/16 maxlen: 16 5.131.0.0/17 maxlen: 17 5.131.128.0/18 maxlen: 18 5.131.192.0/19 maxlen: 19 5.131.224.0/20 maxlen: 20 5.131.224.0/24 maxlen: 24 5.131.240.0/20 maxlen: 20 5.131.251.0/24 maxlen: 24 5.131.253.0/24 maxlen: 24 37.192.0.0/14 maxlen: 14 37.192.0.0/16 maxlen: 16 37.193.0.0/16 maxlen: 16 37.194.0.0/16 maxlen: 16 37.195.0.0/16 maxlen: 16 178.49.0.0/16 maxlen: 24 178.49.0.0/17 maxlen: 17 178.49.12.0/22 maxlen: 22 178.49.56.0/22 maxlen: 22 178.49.128.0/17 maxlen: 24 178.49.132.0/24 maxlen: 24 178.49.133.0/24 maxlen: 24 178.49.141.0/24 maxlen: 24 178.49.142.0/24 maxlen: 24 178.49.144.0/24 maxlen: 24 178.49.145.0/24 maxlen: 24 178.49.146.0/24 maxlen: 24 178.49.147.0/24 maxlen: 24 178.49.148.0/24 maxlen: 24 178.49.150.0/23 maxlen: 23 178.49.152.0/22 maxlen: 22 178.49.152.0/23 maxlen: 23 178.49.152.0/24 maxlen: 24 178.49.154.0/23 maxlen: 23 178.49.154.0/24 maxlen: 24 178.49.156.0/23 maxlen: 23 178.49.158.0/24 maxlen: 24 178.49.159.0/24 maxlen: 24 178.49.200.0/22 maxlen: 22 178.49.248.0/22 maxlen: 22 2a00:7700::/32 maxlen: 32 2a00:7700:8a02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:81:12:77:e1:77:8a:16:6b:75:c0:9e:e2:c0:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Validity Not Before: Jan 2 18:22:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4634e582e460700a9be66902e70843e58053b68b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:34:1c:cb:32:a6:cf:26:57:b7:c2:d3:82:ec: 5f:4d:de:08:89:12:fe:d9:ec:16:77:92:ec:a6:3e: 07:89:b7:d2:2f:18:fc:cd:1e:73:ab:eb:b6:22:94: bb:b3:e7:c1:9c:7f:5f:33:5e:37:7b:76:00:b0:f3: 78:0b:24:66:e5:98:f5:08:a3:87:21:00:f5:82:74: b3:82:eb:38:5b:b3:7e:43:92:01:bd:0c:c7:f2:81: 18:d2:d2:a8:4b:6f:32:bd:fe:43:db:91:44:cc:2d: 7b:47:f5:86:dc:02:d6:4e:ac:a1:3a:81:18:d6:2d: c8:92:85:b7:b7:8a:ff:ed:0e:f9:25:dc:81:17:43: b5:8a:cd:4a:70:f5:f6:a5:f9:e6:57:4a:37:4e:f1: ff:f4:d8:cb:78:ae:60:04:64:cd:1c:95:9b:86:b0: 04:4f:48:ef:ed:bf:a9:ab:08:c5:d5:da:ff:63:b1: 02:61:16:92:b1:6e:92:08:84:77:02:e1:6b:6a:37: b4:00:5b:bb:7a:8c:6a:b7:ab:cf:5a:be:22:f9:6b: cc:cd:a3:64:b6:b1:44:69:71:72:51:e6:20:4b:f4: 16:2e:17:ac:d1:19:d7:a8:49:18:24:4f:46:98:bd: 2a:1b:b6:0b:19:1d:c5:eb:5a:c2:d2:0c:11:c6:0a: 8a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:34:E5:82:E4:60:70:0A:9B:E6:69:02:E7:08:43:E5:80:53:B6:8B X509v3 Authority Key Identifier: keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/RjTlguRgcAqb5mkC5whD5YBTtos.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.128.0.0-5.129.159.255 5.129.181.0/24 5.129.184.0-5.129.186.255 5.130.0.0/15 37.192.0.0/14 178.49.0.0/16 IPv6: 2a00:7700::/32 Signature Algorithm: sha256WithRSAEncryption 49:cf:83:bf:e8:b7:8e:c4:65:55:58:5e:93:5d:48:f8:d6:e8: d7:ba:6f:25:e6:f2:ae:3b:ec:6d:d5:c4:de:6f:fa:98:a8:65: 91:8b:27:12:44:7f:9a:02:f6:32:74:90:4e:92:80:58:49:83: 4e:89:12:2b:f5:ea:90:d2:c9:8d:c9:60:d6:3b:a9:13:ae:ae: e0:73:9b:6a:5d:cd:89:1c:fc:c8:ad:e4:99:29:4e:20:2f:08: 46:21:a2:f0:06:24:ae:4b:3b:ed:0b:cc:4d:8d:35:c3:a6:c2: 0c:41:ba:a6:80:77:15:aa:64:5b:78:21:75:4d:fe:79:7e:94: 7d:5a:3b:c3:a6:3b:1f:54:92:3f:da:1e:86:f5:23:3d:63:d9: 8c:57:6f:1f:06:91:ba:4e:74:6a:d5:c1:5c:42:25:40:aa:e5: 34:33:6a:36:88:d2:cd:ee:bb:79:93:b7:05:4f:cd:3e:01:e4: a9:8f:e3:c7:40:51:57:f6:af:69:9f:fa:13:55:4a:c5:85:e4: 65:f6:7a:49:b0:48:b5:12:53:07:86:ec:c8:c6:3f:4f:17:de: 11:fb:c8:7a:b2:99:e2:19:06:6b:6a:b9:0c:68:33:de:bb:cd: 8d:d5:cb:8d:c2:99:a3:3f:5f:c4:09:09:68:4d:4d:0c:26:08: 43:0c:b2:2a -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt/8oESd+F3ihZrdcCe4sCDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZGIzZGNkZjVlNmJlZTA5ODI1YzM3YmYzYjhiZGYyOGI2 ZmI1OTMwHhcNMjYwMTAyMTgyMjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjM0ZTU4MmU0NjA3MDBhOWJlNjY5MDJlNzA4NDNlNTgwNTNiNjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDQcyzKmzyZXt8LTguxfTd4IiRL+ 2ewWd5Lspj4HibfSLxj8zR5zq+u2IpS7s+fBnH9fM143e3YAsPN4CyRm5Zj1CKOH IQD1gnSzgus4W7N+Q5IBvQzH8oEY0tKoS28yvf5D25FEzC17R/WG3ALWTqyhOoEY 1i3IkoW3t4r/7Q75JdyBF0O1is1KcPX2pfnmV0o3TvH/9NjLeK5gBGTNHJWbhrAE T0jv7b+pqwjF1dr/Y7ECYRaSsW6SCIR3AuFraje0AFu7eoxqt6vPWr4i+WvMzaNk trFEaXFyUeYgS/QWLhes0RnXqEkYJE9GmL0qG7YLGR3F61rC0gwRxgqKdQIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFEY05YLkYHAKm+ZpAucIQ+WAU7aLMB8GA1UdIwQY MBaAFE3bPc315r7gmCXDe/O4vfKLb7WTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEt MjE3MGM1YzFkM2VkLzEvUmpUbGd1UmdjQXFiNW1rQzV3aEQ1WUJUdG9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEtMjE3MGM1YzFkM2Vk LzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwMAsDAwcFgAME BQWBgAMEAAWBtTAMAwQDBYG4AwQABYG6AwMBBYIDAwIlwAMDALIxMA0EAgACMAcD BQAqAHcAMA0GCSqGSIb3DQEBCwUAA4IBAQBJz4O/6LeOxGVVWF6TXUj41ujXum8l 5vKuO+xt1cTeb/qYqGWRiycSRH+aAvYydJBOkoBYSYNOiRIr9eqQ0smNyWDWO6kT rq7gc5tqXc2JHPzIreSZKU4gLwhGIaLwBiSuSzvtC8xNjTXDpsIMQbqmgHcVqmRb eCF1Tf55fpR9WjvDpjsfVJI/2h6G9SM9Y9mMV28fBpG6TnRq1cFcQiVAquU0M2o2 iNLN7rt5k7cFT80+AeSpj+PHQFFX9q9pn/oTVUrFheRl9npJsEi1ElMHhuzIxj9P F94R+8h6spniGQZrarkMaDPeu82N1cuNwpmjP1/ECQloTU0MJghDDLIq -----END CERTIFICATE-----Generated at Mon Jan 26 01:17:31 2026 by rpki-client