This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/0xg0LHFmIAhRMpdSsXPI-Ie_PsI.roa File: 0xg0LHFmIAhRMpdSsXPI-Ie_PsI.roa (raw, json) Hash identifier: WHzwzDrG+iQh9uqHG4tV1Yh6NKaFw5D08VOYk/ojXTc= Subject key identifier: D3:18:34:2C:71:66:20:08:51:32:97:52:B1:73:C8:F8:87:BF:3E:C2 Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34 Certificate serial: 019B79ED53557A938A044A8B3E55363622B6 Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/0xg0LHFmIAhRMpdSsXPI-Ie_PsI.roa Signing time: Thu 01 Jan 2026 14:19:14 +0000 ROA not before: Thu 01 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211559 IP address blocks: 31.11.48.0/21 maxlen: 21 31.11.55.0/24 maxlen: 24 37.186.38.0/24 maxlen: 24 37.186.49.0/24 maxlen: 24 37.186.56.0/24 maxlen: 24 37.186.57.0/24 maxlen: 24 37.186.60.0/22 maxlen: 22 37.186.60.0/24 maxlen: 24 80.76.165.0/24 maxlen: 24 80.76.166.0/23 maxlen: 23 80.76.166.0/24 maxlen: 24 80.76.167.0/24 maxlen: 24 80.76.168.0/23 maxlen: 23 80.76.168.0/24 maxlen: 24 80.76.169.0/24 maxlen: 24 103.14.208.0/22 maxlen: 22 103.14.208.0/24 maxlen: 24 103.14.211.0/24 maxlen: 24 103.17.0.0/24 maxlen: 24 103.23.126.0/24 maxlen: 24 103.23.127.0/24 maxlen: 24 103.225.72.0/24 maxlen: 24 103.225.73.0/24 maxlen: 24 103.225.74.0/24 maxlen: 24 185.247.88.0/22 maxlen: 22 185.247.89.0/24 maxlen: 24 212.70.100.0/24 maxlen: 24 212.70.101.0/24 maxlen: 24 212.70.102.0/24 maxlen: 24 212.70.103.0/24 maxlen: 24 212.70.104.0/24 maxlen: 24 212.70.105.0/24 maxlen: 24 212.70.109.0/24 maxlen: 24 212.70.120.0/24 maxlen: 24 212.70.121.0/24 maxlen: 24 212.70.122.0/24 maxlen: 24 212.70.123.0/24 maxlen: 24 212.70.124.0/24 maxlen: 24 2a04:7f80:84::/48 maxlen: 48 2a04:7f80:85::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:53:55:7a:93:8a:04:4a:8b:3e:55:36:36:22:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34 Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d318342c7166200851329752b173c8f887bf3ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7f:62:04:38:31:cd:b6:a4:74:2e:a9:5c:48: cd:22:a2:b1:67:60:11:5b:30:c0:a2:9c:d1:6c:31: ff:ba:ff:6a:b5:1b:8d:11:31:a8:94:7c:c4:66:e2: 76:7a:33:80:a2:c7:dd:21:18:ad:a9:de:32:ec:bc: c2:30:b4:8d:43:f0:86:5a:c1:2a:67:0f:6c:70:90: 64:9c:cb:86:af:16:97:97:86:2f:10:11:39:4b:09: 72:2c:5b:de:89:a3:e6:9e:d9:fe:a2:18:b5:84:fe: 7f:83:91:ce:d1:78:05:26:65:6d:20:95:54:2d:1d: 2e:38:f6:d8:76:af:15:79:73:a5:39:da:4a:fc:1b: c7:6a:44:b2:cd:0d:63:31:09:3b:d9:c1:0c:14:0a: b0:d3:29:4f:63:d3:53:47:ae:c3:bf:e1:d6:79:dd: 3c:16:9c:07:13:b3:9e:c5:8b:ca:8f:42:5a:a2:31: e1:a9:47:a4:38:a0:8b:de:40:93:84:f9:4f:e7:bc: f2:13:be:97:6d:34:26:c5:12:aa:cb:c2:4f:cd:88: b4:f4:0a:1a:48:2f:d8:0f:49:f0:10:f3:38:d7:d4: 93:42:cc:22:9a:1c:0f:72:0e:3e:18:70:d9:09:88: ab:9d:e5:2e:48:0e:42:c1:55:06:5a:1c:ba:bd:8c: d0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:18:34:2C:71:66:20:08:51:32:97:52:B1:73:C8:F8:87:BF:3E:C2 X509v3 Authority Key Identifier: keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/0xg0LHFmIAhRMpdSsXPI-Ie_PsI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.11.48.0/21 37.186.38.0/24 37.186.49.0/24 37.186.56.0/23 37.186.60.0/22 80.76.165.0-80.76.169.255 103.14.208.0/22 103.17.0.0/24 103.23.126.0/23 103.225.72.0-103.225.74.255 185.247.88.0/22 212.70.100.0-212.70.105.255 212.70.109.0/24 212.70.120.0-212.70.124.255 IPv6: 2a04:7f80:84::/47 Signature Algorithm: sha256WithRSAEncryption 48:7e:e8:90:be:d1:bc:d4:9d:89:72:80:d4:15:3f:83:57:ad: a3:20:9e:44:00:bf:57:c1:8f:4f:c7:53:6f:31:a8:b2:7b:b5: cd:c7:fa:28:68:66:44:c9:dd:28:31:c8:fc:9c:31:03:ea:b3: 6b:b1:78:89:2d:ba:ee:6d:82:09:3e:d4:69:0e:cd:53:81:fe: 7d:06:36:55:cd:7b:a1:8f:4e:f0:f9:5c:5c:d8:90:c7:52:df: 58:f3:21:8e:2a:a8:59:22:95:5a:7a:3e:51:40:07:ae:fb:70: 7d:2e:5b:20:2f:68:e6:ca:9f:4c:13:87:5d:1e:2b:b4:04:40: 70:c8:85:1b:0a:b8:c6:7f:0d:23:65:77:11:d4:cb:b6:c5:39: 7e:23:5a:28:16:5d:ae:12:60:0f:e1:db:0c:56:31:9b:b2:4f: 03:74:74:50:45:0c:f1:34:0f:9a:a7:09:94:0d:0b:e3:9c:82: e2:d9:2e:3d:ad:e7:15:df:e8:81:f2:e5:8e:cc:84:e6:c8:d8: 46:95:f7:cf:4b:8a:bb:0f:ee:c9:db:36:22:bd:83:ea:5a:b2: eb:da:d9:93:37:74:89:62:90:5e:9e:b4:6a:1b:b1:db:1b:2a: 89:59:de:ca:d3:cf:a4:77:c2:e8:81:ed:e7:d3:bf:d4:bb:56: 91:bd:d0:eb -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgISAZt57VNVepOKBEqLPlU2NiK2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YTkzMDg3NDJlN2ViNjY1MDYyMTlkODI5ZDg2MTg1ODk5 YTFlMzQwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzE4MzQyYzcxNjYyMDA4NTEzMjk3NTJiMTczYzhmODg3YmYzZWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn9iBDgxzbakdC6pXEjNIqKxZ2AR WzDAopzRbDH/uv9qtRuNETGolHzEZuJ2ejOAosfdIRitqd4y7LzCMLSNQ/CGWsEq Zw9scJBknMuGrxaXl4YvEBE5SwlyLFveiaPmntn+ohi1hP5/g5HO0XgFJmVtIJVU LR0uOPbYdq8VeXOlOdpK/BvHakSyzQ1jMQk72cEMFAqw0ylPY9NTR67Dv+HWed08 FpwHE7OexYvKj0JaojHhqUekOKCL3kCThPlP57zyE76XbTQmxRKqy8JPzYi09Aoa SC/YD0nwEPM419STQswimhwPcg4+GHDZCYirneUuSA5CwVUGWhy6vYzQsQIDAQAB o4ICizCCAocwHQYDVR0OBBYEFNMYNCxxZiAIUTKXUrFzyPiHvz7CMB8GA1UdIwQY MBaAFOSpMIdC5+tmUGIZ2CnYYYWJmh40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYt ZWM1Yjg4ZDAxMzhhLzEvMHhnMExIRm1JQWhSTXBkU3NYUEktSWVfUHNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYtZWM1Yjg4ZDAxMzhh LzEvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGgBggrBgEFBQcBBwEB/wSBkDCBjTB6BAIAATB0AwQDHwsw AwQAJbomAwQAJboxAwQBJbo4AwQCJbo8MAwDBABQTKUDBAFQTKgDBAJnDtADBABn EQADBAFnF34wDAMEA2fhSAMEAGfhSgMEArn3WDAMAwQC1EZkAwQB1EZoAwQA1EZt MAwDBAPURngDBADURnwwDwQCAAIwCQMHASoEf4AAhDANBgkqhkiG9w0BAQsFAAOC AQEASH7okL7RvNSdiXKA1BU/g1etoyCeRAC/V8GPT8dTbzGosnu1zcf6KGhmRMnd KDHI/JwxA+qza7F4iS267m2CCT7UaQ7NU4H+fQY2Vc17oY9O8PlcXNiQx1LfWPMh jiqoWSKVWno+UUAHrvtwfS5bIC9o5sqfTBOHXR4rtARAcMiFGwq4xn8NI2V3EdTL tsU5fiNaKBZdrhJgD+HbDFYxm7JPA3R0UEUM8TQPmqcJlA0L45yC4tkuPa3nFd/o gfLljsyE5sjYRpX3z0uKuw/uyds2Ir2D6lqy69rZkzd0iWKQXp60ahux2xsqiVne ytPPpHfC6IHt59O/1LtWkb3Q6w== -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:06 2026 by rpki-client