This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/s1fRzoLSNvV_vSYF8FK7qpyreHQ.roa File: s1fRzoLSNvV_vSYF8FK7qpyreHQ.roa (raw, json) Hash identifier: L6hjH+xxHxV60LTIVIU/YS2Mb7ljdN9j8bKUQEJGgyQ= Subject key identifier: B3:57:D1:CE:82:D2:36:F5:7F:BD:26:05:F0:52:BB:AA:9C:AB:78:74 Certificate issuer: /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413 Certificate serial: 019B7AC7F791F5A21CBD8FC41D65E25F40C7 Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/s1fRzoLSNvV_vSYF8FK7qpyreHQ.roa Signing time: Thu 01 Jan 2026 18:18:03 +0000 ROA not before: Thu 01 Jan 2026 18:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12312 IP address blocks: 62.26.0.0/15 maxlen: 23 62.144.0.0/19 maxlen: 19 62.144.64.0/19 maxlen: 19 62.144.96.0/19 maxlen: 19 62.144.128.0/17 maxlen: 17 62.246.0.0/16 maxlen: 16 79.140.176.0/20 maxlen: 20 80.83.96.0/20 maxlen: 20 185.210.52.0/23 maxlen: 23 194.112.16.0/20 maxlen: 20 194.112.16.0/22 maxlen: 22 194.112.24.0/21 maxlen: 21 195.52.0.0/16 maxlen: 23 195.63.32.0/19 maxlen: 19 195.63.64.0/18 maxlen: 18 195.78.160.0/19 maxlen: 19 195.185.0.0/16 maxlen: 16 212.172.0.0/16 maxlen: 16 2001:4090::/32 maxlen: 32 2001:4091::/32 maxlen: 32 2a01:5c8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:f7:91:f5:a2:1c:bd:8f:c4:1d:65:e2:5f:40:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413 Validity Not Before: Jan 1 18:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b357d1ce82d236f57fbd2605f052bbaa9cab7874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:66:9e:db:5c:dd:66:e7:b4:31:59:e4:62:1f: 9f:38:c2:19:67:d3:c6:d4:08:d9:83:34:f8:96:46: b1:b3:26:97:fd:9f:1b:f6:0b:da:3b:21:b8:66:1b: fc:5b:dc:be:05:37:a0:e3:5d:4c:08:5d:71:a5:6c: 87:dc:c4:64:0d:b7:a9:dc:eb:e2:9f:6c:70:fa:d9: ee:d5:60:6a:5d:26:01:1a:af:4c:7a:98:b9:ea:79: 45:61:a3:3b:8a:55:f6:c8:c7:7b:10:a3:59:6a:54: 0a:2d:d8:72:ce:9c:8b:e7:00:35:b3:2c:38:c9:d0: 5e:1a:a1:58:04:b7:48:be:bf:78:20:11:3d:d5:44: eb:44:85:df:eb:62:7b:1d:d7:44:7d:c3:5c:72:1f: d5:7c:40:61:63:8e:35:d2:f9:e5:63:d2:d3:9d:05: 32:a3:f5:d3:52:c8:b4:64:d0:4a:38:87:a1:36:df: f2:b6:6c:32:d7:d9:74:5c:2d:0f:aa:54:5c:1e:e3: 88:51:b8:cd:bd:7c:f5:17:11:3a:73:7c:11:ec:0c: 08:fa:51:39:db:c8:37:76:36:c7:35:46:52:09:f9: 1d:5b:c7:14:c2:5a:f9:a5:7f:25:fe:7d:49:a4:fc: 0d:00:90:cb:25:56:67:a4:80:a5:6f:08:6b:43:0b: 27:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:57:D1:CE:82:D2:36:F5:7F:BD:26:05:F0:52:BB:AA:9C:AB:78:74 X509v3 Authority Key Identifier: keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/s1fRzoLSNvV_vSYF8FK7qpyreHQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.26.0.0/15 62.144.0.0/19 62.144.64.0-62.144.255.255 62.246.0.0/16 79.140.176.0/20 80.83.96.0/20 185.210.52.0/23 194.112.16.0/20 195.52.0.0/16 195.63.32.0-195.63.127.255 195.78.160.0/19 195.185.0.0/16 212.172.0.0/16 IPv6: 2001:4090::/31 2a01:5c8::/32 Signature Algorithm: sha256WithRSAEncryption 39:3b:32:ee:1c:c7:e2:6f:11:8c:cc:fd:ef:a2:10:9a:b2:c7: 2a:91:b2:90:fd:66:10:1d:f0:8f:a0:19:3c:c8:67:dd:0d:40: 54:9f:97:c0:c9:64:21:db:81:ce:a4:02:45:a2:72:9f:3e:9b: 31:2d:9e:e3:35:c4:28:77:cb:9c:97:5a:fd:73:bd:9b:1c:62: b3:8b:0d:f9:1f:e6:74:a9:eb:25:8a:76:b0:2f:17:5b:83:05: 5c:f1:1f:9d:c9:a4:54:14:70:27:c1:22:0b:b3:dd:c0:8a:a0: 2e:d9:d3:d2:75:1d:52:3c:86:67:af:b8:6c:d1:d9:4a:13:74: cb:4a:88:55:dd:fb:58:87:32:d3:7e:3e:89:85:3f:b3:f1:32: ad:2b:0e:5a:7d:9c:ec:5e:77:e8:8f:d0:91:5e:18:3b:c3:aa: 9f:d5:9b:51:b8:7a:61:1d:45:c5:6f:69:4d:b6:65:a5:b9:9c: 3a:cd:f9:43:37:f8:dd:34:bb:89:b9:fc:33:c1:5d:75:7e:d8: 9d:b8:50:d6:de:dd:0b:05:70:0c:8f:78:ed:de:6c:e7:a6:ed: 00:d0:75:3a:56:0d:36:bd:8b:29:58:6f:32:98:fc:2f:1a:4e: 4d:8b:c2:74:f2:26:f1:6c:09:d8:77:8a:fc:a2:71:49:e9:ea: 5f:3c:b7:4b -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgISAZt6x/eR9aIcvY/EHWXiX0DHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMWQ3MmFjMDgyNmUwOWJjMGQxN2RkZWU4YmE4N2Q5NzMx ZGQ0MTMwHhcNMjYwMTAxMTgxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzU3ZDFjZTgyZDIzNmY1N2ZiZDI2MDVmMDUyYmJhYTljYWI3ODc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2ae21zdZue0MVnkYh+fOMIZZ9PG 1AjZgzT4lkaxsyaX/Z8b9gvaOyG4Zhv8W9y+BTeg411MCF1xpWyH3MRkDbep3Ovi n2xw+tnu1WBqXSYBGq9Mepi56nlFYaM7ilX2yMd7EKNZalQKLdhyzpyL5wA1syw4 ydBeGqFYBLdIvr94IBE91UTrRIXf62J7HddEfcNcch/VfEBhY4410vnlY9LTnQUy o/XTUsi0ZNBKOIehNt/ytmwy19l0XC0PqlRcHuOIUbjNvXz1FxE6c3wR7AwI+lE5 28g3djbHNUZSCfkdW8cUwlr5pX8l/n1JpPwNAJDLJVZnpIClbwhrQwsnLQIDAQAB o4ICcjCCAm4wHQYDVR0OBBYEFLNX0c6C0jb1f70mBfBSu6qcq3h0MB8GA1UdIwQY MBaAFAodcqwIJuCbwNF93ui6h9lzHdQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82MzQxZGEtMmIzNC00ZDQ1LTljMTct OTU4MTEyYTQ4OWE0LzEvczFmUnpvTFNOdlZfdlNZRjhGSzdxcHlyZUhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC82MzQxZGEtMmIzNC00ZDQ1LTljMTctOTU4MTEyYTQ4OWE0 LzEvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwXgQCAAEwWAMDAT4aAwQF PpAAMAsDBAY+kEADAwA+kAMDAD72AwQET4ywAwQEUFNgAwQBudI0AwQEwnAQAwMA wzQwDAMEBcM/IAMEB8M/AAMEBcNOoAMDAMO5AwMA1KwwFAQCAAIwDgMFASABQJAD BQAqAQXIMA0GCSqGSIb3DQEBCwUAA4IBAQA5OzLuHMfibxGMzP3vohCasscqkbKQ /WYQHfCPoBk8yGfdDUBUn5fAyWQh24HOpAJFonKfPpsxLZ7jNcQod8ucl1r9c72b HGKziw35H+Z0qeslinawLxdbgwVc8R+dyaRUFHAnwSILs93AiqAu2dPSdR1SPIZn r7hs0dlKE3TLSohV3ftYhzLTfj6JhT+z8TKtKw5afZzsXnfoj9CRXhg7w6qf1ZtR uHphHUXFb2lNtmWluZw6zflDN/jdNLuJufwzwV11ftiduFDW3t0LBXAMj3jt3mzn pu0A0HU6Vg02vYspWG8ymPwvGk5Ni8J08ibxbAnYd4r8onFJ6epfPLdL -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:17 2026 by rpki-client