This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/A_P3T6C0UabjZJXaJgjvlygVKUc.roa File: A_P3T6C0UabjZJXaJgjvlygVKUc.roa (raw, json) Hash identifier: menqhG8VjNnWet+007C7+2qHBWuCfhk0qZ+ghL6RsI8= Subject key identifier: 03:F3:F7:4F:A0:B4:51:A6:E3:64:95:DA:26:08:EF:97:28:15:29:47 Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019BEEB8DA96E60F443865825560ACA02977 Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/A_P3T6C0UabjZJXaJgjvlygVKUc.roa Signing time: Sat 24 Jan 2026 06:37:30 +0000 ROA not before: Sat 24 Jan 2026 06:37:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49505 IP address blocks: 62.76.164.0/24 maxlen: 24 193.232.88.0/22 maxlen: 24 193.232.204.0/23 maxlen: 24 193.232.220.0/23 maxlen: 24 193.232.222.0/24 maxlen: 24 194.190.210.0/23 maxlen: 24 195.19.168.0/22 maxlen: 24 195.19.172.0/22 maxlen: 24 195.208.80.0/22 maxlen: 24 195.208.86.0/23 maxlen: 24 195.208.88.0/22 maxlen: 24 195.208.92.0/22 maxlen: 24 212.192.56.0/22 maxlen: 24 212.192.60.0/24 maxlen: 24 212.192.61.0/24 maxlen: 24 212.192.63.0/24 maxlen: 24 212.193.184.0/22 maxlen: 24 212.193.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ee:b8:da:96:e6:0f:44:38:65:82:55:60:ac:a0:29:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 24 06:37:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03f3f74fa0b451a6e36495da2608ef9728152947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6e:7b:b6:17:44:00:74:31:24:a9:df:0f:75: 10:41:67:b2:03:c1:1b:72:bd:9f:85:4d:0b:5e:d1: 9b:b1:7c:a1:e1:36:be:76:9e:8c:28:60:13:72:43: b0:b7:70:09:c9:13:b6:eb:d4:25:04:eb:28:aa:00: c5:7e:15:37:9b:00:e9:de:c1:eb:82:fd:fc:e5:ad: 37:f3:2b:5a:5e:b3:52:3e:f4:1d:5a:30:ad:97:65: 6c:3e:1e:c8:6f:9f:ba:f7:ac:d6:55:f3:45:48:23: 61:a5:f2:8c:31:87:ac:51:ff:e5:9a:bf:f2:ec:78: 0d:58:7c:53:c9:9a:d7:be:a3:e2:6d:97:9c:83:d7: 7a:3b:35:15:a4:67:4e:71:6a:39:70:86:03:72:07: 60:cc:20:b7:a6:dd:40:6f:ba:e2:3f:c7:40:99:cf: f6:65:7c:f7:77:86:49:dd:c2:cb:f4:9b:0a:bd:50: ea:c5:41:7b:95:c0:fd:63:b2:90:7c:ec:c9:6a:ae: 6e:3b:e5:95:f3:3a:67:58:10:5f:e9:e1:67:42:80: c0:29:39:00:50:2d:e8:96:a1:0a:c3:42:44:eb:4a: 9a:de:f8:eb:c4:72:12:f9:34:6a:64:4d:1c:3b:06: 76:b7:73:ab:1b:b9:86:f3:88:04:6a:7e:9d:3c:38: 89:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F3:F7:4F:A0:B4:51:A6:E3:64:95:DA:26:08:EF:97:28:15:29:47 X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/A_P3T6C0UabjZJXaJgjvlygVKUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.164.0/24 193.232.88.0/22 193.232.204.0/23 193.232.220.0-193.232.222.255 194.190.210.0/23 195.19.168.0/21 195.208.80.0/22 195.208.86.0-195.208.95.255 212.192.56.0-212.192.61.255 212.192.63.0/24 212.193.184.0/21 Signature Algorithm: sha256WithRSAEncryption 2e:0b:90:37:e2:27:f9:fb:9d:df:d8:cc:dc:80:75:a1:9b:63: 2f:06:b4:f5:cd:11:e6:4b:cf:3c:7e:3e:a1:9a:b5:48:0a:e2: 95:04:56:38:83:d7:77:b8:a3:ef:fd:2e:48:2a:97:22:b5:2b: 49:e7:7d:f5:1e:0e:d4:fb:93:ac:16:66:9c:7c:f8:1c:73:27: d6:11:7c:45:cf:d2:b5:68:6c:46:a8:6c:89:ce:37:45:0f:cd: c6:af:5c:4b:fa:b7:1b:d9:13:2c:34:70:c2:30:2f:23:4e:5b: 1d:5d:b0:bd:be:e0:27:25:27:62:87:31:d4:97:1c:16:99:76: b6:cf:90:4f:aa:78:a4:b1:c7:3d:4b:f3:07:45:63:08:38:6a: a6:a4:1f:d9:2a:de:5d:16:56:83:61:e9:95:8a:5b:21:e7:6d: f1:e2:15:2b:87:c6:2e:51:7c:ed:91:da:17:13:2a:bb:3e:1a: 43:e1:cb:37:b7:5c:12:10:20:2b:56:a0:ab:72:fa:5f:c9:80: ef:25:45:fc:89:99:8b:d4:38:03:be:3d:50:c5:6d:cc:7f:82: 8c:2c:a2:63:ff:0e:e4:0d:79:9b:ce:71:b9:25:f7:3e:62:2c: c3:45:01:f6:d4:89:66:47:61:5d:36:68:2b:8c:4d:03:2f:35: ff:c7:83:d5 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZvuuNqW5g9EOGWCVWCsoCl3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTI0MDYzNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2YzZjc0ZmEwYjQ1MWE2ZTM2NDk1ZGEyNjA4ZWY5NzI4MTUyOTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjm57thdEAHQxJKnfD3UQQWeyA8Eb cr2fhU0LXtGbsXyh4Ta+dp6MKGATckOwt3AJyRO269QlBOsoqgDFfhU3mwDp3sHr gv385a038ytaXrNSPvQdWjCtl2VsPh7Ib5+696zWVfNFSCNhpfKMMYesUf/lmr/y 7HgNWHxTyZrXvqPibZecg9d6OzUVpGdOcWo5cIYDcgdgzCC3pt1Ab7riP8dAmc/2 ZXz3d4ZJ3cLL9JsKvVDqxUF7lcD9Y7KQfOzJaq5uO+WV8zpnWBBf6eFnQoDAKTkA UC3olqEKw0JE60qa3vjrxHIS+TRqZE0cOwZ2t3OrG7mG84gEan6dPDiJmwIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFAPz90+gtFGm42SV2iYI75coFSlHMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvQV9QM1Q2QzBVYWJqWkpYYUpnanZseWdWS1VjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQAPkykAwQC wehYAwQBwejMMAwDBALB6NwDBADB6N4DBAHCvtIDBAPDE6gDBALD0FAwDAMEAcPQ VgMEBcPQQDAMAwQD1MA4AwQB1MA8AwQA1MA/AwQD1MG4MA0GCSqGSIb3DQEBCwUA A4IBAQAuC5A34if5+53f2MzcgHWhm2MvBrT1zRHmS888fj6hmrVICuKVBFY4g9d3 uKPv/S5IKpcitStJ5331Hg7U+5OsFmacfPgccyfWEXxFz9K1aGxGqGyJzjdFD83G r1xL+rcb2RMsNHDCMC8jTlsdXbC9vuAnJSdihzHUlxwWmXa2z5BPqnikscc9S/MH RWMIOGqmpB/ZKt5dFlaDYemVilsh523x4hUrh8YuUXztkdoXEyq7PhpD4cs3t1wS ECArVqCrcvpfyYDvJUX8iZmL1DgDvj1QxW3Mf4KMLKJj/w7kDXmbznG5Jfc+YizD RQH21IlmR2FdNmgrjE0DLzX/x4PV -----END CERTIFICATE-----Generated at Sun Jan 25 14:40:14 2026 by rpki-client