This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/shLsGCsQ3GYKsx66_GQH9jhS_44.roa File: shLsGCsQ3GYKsx66_GQH9jhS_44.roa (raw, json) Hash identifier: lvpextwl0L1UgfkWNLF1qMfokRQbiO6CVn1PLpjfaxM= Subject key identifier: B2:12:EC:18:2B:10:DC:66:0A:B3:1E:BA:FC:64:07:F6:38:52:FF:8E Certificate issuer: /CN=9bed36af13da482fdf79fb5403e5074860eecd0d Certificate serial: 019B7A5ACC337552939CA0AEC28CB88DC7B4 Authority key identifier: 9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/shLsGCsQ3GYKsx66_GQH9jhS_44.roa Signing time: Thu 01 Jan 2026 16:18:49 +0000 ROA not before: Thu 01 Jan 2026 16:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196925 IP address blocks: 5.133.224.0/20 maxlen: 20 109.235.192.0/21 maxlen: 21 109.235.193.0/24 maxlen: 24 109.235.199.0/24 maxlen: 24 131.117.128.0/20 maxlen: 20 134.19.208.0/20 maxlen: 20 134.19.216.0/24 maxlen: 24 134.19.217.0/24 maxlen: 24 149.126.112.0/20 maxlen: 20 149.126.116.0/24 maxlen: 24 149.126.117.0/24 maxlen: 24 149.126.118.0/24 maxlen: 24 149.126.119.0/24 maxlen: 24 185.138.12.0/22 maxlen: 22 2a00:9100::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:cc:33:75:52:93:9c:a0:ae:c2:8c:b8:8d:c7:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bed36af13da482fdf79fb5403e5074860eecd0d Validity Not Before: Jan 1 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b212ec182b10dc660ab31ebafc6407f63852ff8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:42:90:a8:2a:f0:ad:7d:30:7a:a9:24:9f:38: 66:42:64:b7:d3:f5:d3:1b:79:a6:a7:66:7c:a5:1f: 32:61:42:75:fe:a8:c4:d9:85:7d:95:80:ed:0e:fa: 1d:83:73:30:37:f8:a5:68:b6:e4:24:77:66:34:64: 9c:89:99:f4:c1:f4:31:44:53:2a:50:0f:f8:91:98: df:cb:8b:4c:46:2b:e2:4c:31:1e:6b:85:2d:04:44: dd:81:20:a3:79:35:e0:c8:ce:5c:dd:83:1e:2e:f5: 91:99:0e:f3:07:b7:69:df:2a:c0:f0:10:11:36:81: ad:b7:d6:ef:81:a4:51:fa:c3:4f:62:10:62:b1:a3: 82:f1:33:cb:0e:23:f2:44:80:11:d3:0c:de:a8:1c: b6:29:84:45:8c:bb:fa:2e:df:20:d1:48:eb:f5:4b: 11:6e:12:71:8e:51:43:70:3f:c3:d9:84:e9:0a:d4: 5b:ce:b8:0e:2a:d9:88:45:e7:94:ed:75:bf:00:cc: d6:26:4b:85:09:2f:79:46:b0:d0:b4:58:82:22:f2: d8:4f:53:23:31:46:e9:86:7b:d5:e9:1b:ba:73:cc: 08:34:2c:f0:3d:80:85:06:a9:e0:8c:0b:65:ec:a3: e3:99:91:05:bf:a1:9b:1e:6c:02:a9:0a:e6:8f:13: 2b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:12:EC:18:2B:10:DC:66:0A:B3:1E:BA:FC:64:07:F6:38:52:FF:8E X509v3 Authority Key Identifier: keyid:9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/shLsGCsQ3GYKsx66_GQH9jhS_44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.224.0/20 109.235.192.0/21 131.117.128.0/20 134.19.208.0/20 149.126.112.0/20 185.138.12.0/22 IPv6: 2a00:9100::/32 Signature Algorithm: sha256WithRSAEncryption 92:6d:9e:4d:38:78:d2:13:4d:7e:b1:5e:7b:4e:d4:45:77:b0: 84:f1:07:21:56:4b:16:3f:4d:4c:4a:62:54:d4:ad:72:5e:54: 1c:dc:bc:ed:5c:da:4b:0f:08:81:64:f2:3e:3d:2a:07:d5:5b: e7:bb:1a:f0:f4:94:4f:10:88:56:e1:72:74:45:b3:db:0d:c2: 78:d8:2d:3f:b0:4c:5c:ac:e6:17:2c:c4:2b:da:e3:23:fb:8b: ae:5d:f2:ce:63:58:ec:fd:a0:14:c4:69:4b:4a:3a:d3:39:c0: 1c:c8:67:3e:30:e0:64:61:5e:20:44:a2:f1:d4:b7:4c:13:89: c3:8f:f5:a3:41:06:55:fa:e9:d2:32:3d:b9:51:a0:db:e6:4f: b7:28:55:d9:b0:0a:50:6b:78:93:28:64:df:cf:af:fa:37:49: e8:73:50:94:40:0c:9b:1f:44:bd:96:b6:30:de:db:19:b9:a3: 73:d4:7e:fd:54:b2:f5:e7:5c:2e:ef:ca:78:f3:be:4d:a4:d2: 01:4e:37:b8:14:7a:5b:17:a1:84:ed:cc:02:db:60:31:32:75: 1c:dd:e7:fc:09:db:b3:00:52:81:5e:aa:2f:9d:69:6d:b7:38: 1d:d2:83:d1:82:d9:cb:ab:11:6c:34:a2:b7:bc:8c:ef:e3:9f: 0a:ad:7a:9d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt6WswzdVKTnKCuwoy4jce0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZWQzNmFmMTNkYTQ4MmZkZjc5ZmI1NDAzZTUwNzQ4NjBl ZWNkMGQwHhcNMjYwMTAxMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjEyZWMxODJiMTBkYzY2MGFiMzFlYmFmYzY0MDdmNjM4NTJmZjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0KQqCrwrX0weqkknzhmQmS30/XT G3mmp2Z8pR8yYUJ1/qjE2YV9lYDtDvodg3MwN/ilaLbkJHdmNGSciZn0wfQxRFMq UA/4kZjfy4tMRiviTDEea4UtBETdgSCjeTXgyM5c3YMeLvWRmQ7zB7dp3yrA8BAR NoGtt9bvgaRR+sNPYhBisaOC8TPLDiPyRIAR0wzeqBy2KYRFjLv6Lt8g0Ujr9UsR bhJxjlFDcD/D2YTpCtRbzrgOKtmIReeU7XW/AMzWJkuFCS95RrDQtFiCIvLYT1Mj MUbphnvV6Ru6c8wINCzwPYCFBqngjAtl7KPjmZEFv6GbHmwCqQrmjxMrIQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFLIS7BgrENxmCrMeuvxkB/Y4Uv+OMB8GA1UdIwQY MBaAFJvtNq8T2kgv33n7VAPlB0hg7s0NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbS0wMnJ4UGFTQ19mZWZ0VUEtVUhTR0R1elEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80YjAyODMtYTkwYy00ZDY0LTgzMDEt ZDIyMWViZDA4MThkLzEvc2hMc0dDc1EzR1lLc3g2Nl9HUUg5amhTXzQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni80YjAyODMtYTkwYy00ZDY0LTgzMDEtZDIyMWViZDA4MThk LzEvbS0wMnJ4UGFTQ19mZWZ0VUEtVUhTR0R1elEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQEBYXgAwQD bevAAwQEg3WAAwQEhhPQAwQElX5wAwQCuYoMMA0EAgACMAcDBQAqAJEAMA0GCSqG SIb3DQEBCwUAA4IBAQCSbZ5NOHjSE01+sV57TtRFd7CE8QchVksWP01MSmJU1K1y XlQc3LztXNpLDwiBZPI+PSoH1Vvnuxrw9JRPEIhW4XJ0RbPbDcJ42C0/sExcrOYX LMQr2uMj+4uuXfLOY1js/aAUxGlLSjrTOcAcyGc+MOBkYV4gRKLx1LdME4nDj/Wj QQZV+unSMj25UaDb5k+3KFXZsApQa3iTKGTfz6/6N0noc1CUQAybH0S9lrYw3tsZ uaNz1H79VLL151wu78p4875NpNIBTje4FHpbF6GE7cwC22AxMnUc3ef8CduzAFKB XqovnWlttzgd0oPRgtnLqxFsNKK3vIzv458KrXqd -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:28 2026 by rpki-client