This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/249_vWOJGgvFFmLv_5dYY1MQIWI.roa File: 249_vWOJGgvFFmLv_5dYY1MQIWI.roa (raw, json) Hash identifier: XCFj+iRH39Cj0T/bNpjf+R2spCw9+pyFathw15z8sLI= Subject key identifier: DB:8F:7F:BD:63:89:1A:0B:C5:16:62:EF:FF:97:58:63:53:10:21:62 Certificate issuer: /CN=2347aaab2206c08128f543730064a145a3effa14 Certificate serial: 019B7C7F2690D8AD8D126F4BDBFD27FA2BA7 Authority key identifier: 23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/249_vWOJGgvFFmLv_5dYY1MQIWI.roa Signing time: Fri 02 Jan 2026 02:17:46 +0000 ROA not before: Fri 02 Jan 2026 02:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8434 IP address blocks: 46.194.0.0/15 maxlen: 15 62.13.0.0/17 maxlen: 17 62.65.64.0/18 maxlen: 18 62.119.0.0/16 maxlen: 16 62.127.0.0/16 maxlen: 16 78.82.0.0/16 maxlen: 16 79.102.0.0/16 maxlen: 16 80.68.96.0/20 maxlen: 20 81.26.224.0/19 maxlen: 19 82.182.0.0/15 maxlen: 15 83.226.0.0/15 maxlen: 15 84.216.0.0/14 maxlen: 14 85.224.0.0/13 maxlen: 13 92.32.0.0/14 maxlen: 14 94.234.0.0/16 maxlen: 16 178.28.0.0/14 maxlen: 14 195.43.192.0/18 maxlen: 18 195.54.96.0/19 maxlen: 19 195.58.96.0/19 maxlen: 19 195.66.32.0/19 maxlen: 19 212.73.0.0/19 maxlen: 19 212.73.160.0/19 maxlen: 19 212.75.64.0/19 maxlen: 19 212.105.0.0/17 maxlen: 17 213.112.0.0/14 maxlen: 14 213.150.128.0/19 maxlen: 19 213.163.128.0/19 maxlen: 19 213.204.128.0/18 maxlen: 18 213.214.192.0/18 maxlen: 18 213.238.192.0/18 maxlen: 18 213.242.128.0/18 maxlen: 18 217.174.64.0/19 maxlen: 19 2a02:1400::/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:26:90:d8:ad:8d:12:6f:4b:db:fd:27:fa:2b:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2347aaab2206c08128f543730064a145a3effa14 Validity Not Before: Jan 2 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db8f7fbd63891a0bc51662efff97586353102162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f5:0f:18:c1:ce:38:11:8a:40:2e:d3:e5:09: 48:9f:37:09:91:77:87:5c:6e:16:ee:73:ad:92:f7: 27:48:f9:00:66:71:39:26:77:79:05:51:00:59:b4: ed:bd:b1:1c:3e:2f:4a:1c:03:20:67:64:89:ae:29: e5:b1:93:fd:35:10:09:2b:4d:54:2a:22:33:f6:42: db:0a:e2:a6:13:cb:2c:e0:93:b3:79:be:97:8c:32: 09:55:1b:a4:25:24:3f:8a:0d:9d:b1:bc:aa:59:50: 5f:50:ee:0c:e3:d8:30:73:e2:4e:a4:ba:74:08:3e: 6a:c5:37:c9:23:3d:6d:71:d8:60:19:8c:4e:ef:19: 7e:a2:6f:04:76:87:0c:0c:22:06:66:a3:7d:1b:a1: 2d:ce:f7:97:9c:d7:dd:d1:13:74:d8:0f:ea:40:73: fa:65:01:db:cc:19:42:a8:3b:94:97:23:f8:d6:9f: b7:09:28:3b:8f:dd:5f:6a:f7:3c:74:9c:08:31:5a: c9:f7:86:ef:b7:b6:73:79:2a:b6:72:e0:96:2f:89: 5c:1c:25:60:cd:13:75:d5:1a:ca:55:1c:5d:ea:4e: 45:47:ac:0a:4f:10:0d:da:a4:10:38:35:99:f6:1e: ee:17:dc:0b:e5:38:2f:78:ef:61:b1:f9:ce:e0:cd: b4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8F:7F:BD:63:89:1A:0B:C5:16:62:EF:FF:97:58:63:53:10:21:62 X509v3 Authority Key Identifier: keyid:23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/249_vWOJGgvFFmLv_5dYY1MQIWI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.194.0.0/15 62.13.0.0/17 62.65.64.0/18 62.119.0.0/16 62.127.0.0/16 78.82.0.0/16 79.102.0.0/16 80.68.96.0/20 81.26.224.0/19 82.182.0.0/15 83.226.0.0/15 84.216.0.0/14 85.224.0.0/13 92.32.0.0/14 94.234.0.0/16 178.28.0.0/14 195.43.192.0/18 195.54.96.0/19 195.58.96.0/19 195.66.32.0/19 212.73.0.0/19 212.73.160.0/19 212.75.64.0/19 212.105.0.0/17 213.112.0.0/14 213.150.128.0/19 213.163.128.0/19 213.204.128.0/18 213.214.192.0/18 213.238.192.0/18 213.242.128.0/18 217.174.64.0/19 IPv6: 2a02:1400::/26 Signature Algorithm: sha256WithRSAEncryption 83:53:46:a3:bc:27:8b:a4:52:4f:2d:83:39:06:fa:c8:5f:3b: 50:52:0a:11:53:90:75:db:8b:7b:b4:ff:29:4a:19:e5:97:d2: 16:26:49:28:1b:df:f2:1a:c8:c6:cf:b3:a6:b6:9e:cc:46:e4: 57:57:6d:eb:0c:58:d0:39:fc:d8:fe:86:0a:2c:e7:da:58:6c: 3d:26:fb:e2:39:40:42:15:76:f9:b6:0e:a4:4c:bb:80:c7:0f: cc:d0:4a:69:5f:88:81:99:e0:f9:2f:74:47:56:17:62:95:32: d1:dd:7d:30:47:99:db:f6:56:ca:d3:79:8b:b6:59:bf:51:94: 2e:b1:00:aa:16:2a:47:08:bc:9c:cf:4c:2c:a3:12:53:88:c7: c1:43:27:11:b0:56:01:45:f4:2e:4e:04:a6:5d:25:c1:9e:05: de:89:8f:28:d8:cd:a7:a1:4c:4e:05:e1:08:8c:46:b5:57:bb: 85:19:96:1d:7d:ea:20:e1:5a:84:4a:a0:e7:19:b2:33:23:17: ff:08:78:96:ec:41:39:45:39:a5:c1:63:6e:b0:9c:cc:d2:0a: f3:76:f2:84:3a:c4:c5:01:f1:75:d5:bc:8d:ae:ac:ba:77:18: f7:94:69:6c:f4:93:18:ec:e2:23:85:43:45:d8:2a:05:21:87: ab:8c:77:cf -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgISAZt8fyaQ2K2NEm9L2/0n+iunMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNDdhYWFiMjIwNmMwODEyOGY1NDM3MzAwNjRhMTQ1YTNl ZmZhMTQwHhcNMjYwMTAyMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjhmN2ZiZDYzODkxYTBiYzUxNjYyZWZmZjk3NTg2MzUzMTAyMTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fUPGMHOOBGKQC7T5QlInzcJkXeH XG4W7nOtkvcnSPkAZnE5Jnd5BVEAWbTtvbEcPi9KHAMgZ2SJrinlsZP9NRAJK01U KiIz9kLbCuKmE8ss4JOzeb6XjDIJVRukJSQ/ig2dsbyqWVBfUO4M49gwc+JOpLp0 CD5qxTfJIz1tcdhgGYxO7xl+om8EdocMDCIGZqN9G6EtzveXnNfd0RN02A/qQHP6 ZQHbzBlCqDuUlyP41p+3CSg7j91favc8dJwIMVrJ94bvt7ZzeSq2cuCWL4lcHCVg zRN11RrKVRxd6k5FR6wKTxAN2qQQODWZ9h7uF9wL5TgveO9hsfnO4M20TQIDAQAB o4ICyjCCAsYwHQYDVR0OBBYEFNuPf71jiRoLxRZi7/+XWGNTECFiMB8GA1UdIwQY MBaAFCNHqqsiBsCBKPVDcwBkoUWj7/oUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTBlcXF5SUd3SUVvOVVOekFHU2hSYVB2LWhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9lZjlmMGQtZDg0MC00MzcxLWFkYzQt NzU4NDA2NjFlYWY1LzEvMjQ5X3ZXT0pHZ3ZGRm1Mdl81ZFlZMU1RSVdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9lZjlmMGQtZDg0MC00MzcxLWFkYzQtNzU4NDA2NjFlYWY1 LzEvSTBlcXF5SUd3SUVvOVVOekFHU2hSYVB2LWhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHfBggrBgEFBQcBBwEB/wSBzzCBzDCBugQCAAEwgbMDAwEu wgMEBz4NAAMEBj5BQAMDAD53AwMAPn8DAwBOUgMDAE9mAwQEUERgAwQFURrgAwMB UrYDAwFT4gMDAlTYAwMDVeADAwJcIAMDAF7qAwMCshwDBAbDK8ADBAXDNmADBAXD OmADBAXDQiADBAXUSQADBAXUSaADBAXUS0ADBAfUaQADAwLVcAMEBdWWgAMEBdWj gAMEBtXMgAMEBtXWwAMEBtXuwAMEBtXygAMEBdmuQDANBAIAAjAHAwUGKgIUADAN BgkqhkiG9w0BAQsFAAOCAQEAg1NGo7wni6RSTy2DOQb6yF87UFIKEVOQdduLe7T/ KUoZ5ZfSFiZJKBvf8hrIxs+zpraezEbkV1dt6wxY0Dn82P6GCizn2lhsPSb74jlA QhV2+bYOpEy7gMcPzNBKaV+IgZng+S90R1YXYpUy0d19MEeZ2/ZWytN5i7ZZv1GU LrEAqhYqRwi8nM9MLKMSU4jHwUMnEbBWAUX0Lk4Epl0lwZ4F3omPKNjNp6FMTgXh CIxGtVe7hRmWHX3qIOFahEqg5xmyMyMX/wh4luxBOUU5pcFjbrCczNIK83byhDrE xQHxddW8ja6suncY95RpbPSTGOziI4VDRdgqBSGHq4x3zw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:24:48 2026 by rpki-client