This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/tmAwZ9rp_6wm7u527HJaXsN99iU.roa File: tmAwZ9rp_6wm7u527HJaXsN99iU.roa (raw, json) Hash identifier: RX2GBKLuRCt7FRxgKIFpvkG43EUbtKKHIwQ+YaosNiU= Subject key identifier: B6:60:30:67:DA:E9:FF:AC:26:EE:EE:76:EC:72:5A:5E:C3:7D:F6:25 Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0 Certificate serial: 019B8E33D125AA3A5346E7C6837AB81513BA Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/tmAwZ9rp_6wm7u527HJaXsN99iU.roa Signing time: Mon 05 Jan 2026 12:48:39 +0000 ROA not before: Mon 05 Jan 2026 12:48:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20546 IP address blocks: 5.182.236.0/22 maxlen: 24 45.10.60.0/22 maxlen: 24 45.14.188.0/22 maxlen: 24 45.93.108.0/22 maxlen: 24 45.128.180.0/22 maxlen: 24 45.131.36.0/22 maxlen: 24 45.136.168.0/22 maxlen: 24 45.143.76.0/22 maxlen: 24 46.243.80.0/21 maxlen: 24 85.132.192.0/19 maxlen: 24 92.119.8.0/22 maxlen: 24 94.16.64.0/19 maxlen: 24 94.46.64.0/19 maxlen: 24 95.131.96.0/21 maxlen: 24 134.101.16.0/20 maxlen: 24 149.249.128.0/19 maxlen: 24 185.9.28.0/22 maxlen: 24 185.117.68.0/22 maxlen: 24 185.189.140.0/22 maxlen: 24 185.194.64.0/22 maxlen: 24 185.238.252.0/22 maxlen: 24 195.2.160.0/19 maxlen: 24 195.80.52.0/22 maxlen: 24 212.126.192.0/19 maxlen: 24 212.232.80.0/20 maxlen: 24 213.157.0.0/19 maxlen: 24 213.188.96.0/19 maxlen: 24 217.173.144.0/20 maxlen: 24 2a02:b98::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:33:d1:25:aa:3a:53:46:e7:c6:83:7a:b8:15:13:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0 Validity Not Before: Jan 5 12:48:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6603067dae9ffac26eeee76ec725a5ec37df625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b1:ea:43:27:2e:cf:5c:26:44:1e:ea:26:11: 40:d0:64:4e:5b:0b:59:92:f5:a5:04:d9:54:49:d0: 33:de:4b:fc:85:80:1f:c6:f3:da:02:e6:e7:b9:64: 22:04:f7:e7:c7:4a:b4:a4:af:26:bf:7f:24:46:34: 74:26:20:d2:e0:fc:2f:33:c1:ea:50:68:98:fa:f9: 0b:76:32:b8:1d:a0:33:80:a8:00:b5:20:96:dc:1a: fc:ba:8b:82:24:66:ca:20:19:5c:11:71:93:44:1e: 91:72:92:eb:67:75:1f:56:ba:5d:1b:9b:e3:40:74: 1f:32:b1:74:98:61:ac:88:cf:6e:27:8c:f2:cb:67: d4:65:dc:1e:c1:76:9b:06:ad:5e:22:af:19:63:d2: 6f:25:06:6c:5c:c3:64:ca:5a:55:2f:af:42:bc:3a: 21:73:86:6e:e4:66:a1:72:ac:d4:00:2c:dd:3c:54: 90:9a:d2:64:a7:78:c3:70:65:ff:3a:9b:d3:d0:e2: 1c:a0:c9:5f:80:fe:66:2b:7b:7e:67:c3:9f:ec:1d: 44:b5:9d:d9:44:71:ca:0f:5f:da:52:56:77:01:68: 6c:40:48:a6:65:b3:27:9e:07:08:05:10:3e:d3:68: 75:4a:73:80:37:42:5b:13:b4:a3:01:bf:83:d7:f2: 7b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:60:30:67:DA:E9:FF:AC:26:EE:EE:76:EC:72:5A:5E:C3:7D:F6:25 X509v3 Authority Key Identifier: keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/tmAwZ9rp_6wm7u527HJaXsN99iU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.236.0/22 45.10.60.0/22 45.14.188.0/22 45.93.108.0/22 45.128.180.0/22 45.131.36.0/22 45.136.168.0/22 45.143.76.0/22 46.243.80.0/21 85.132.192.0/19 92.119.8.0/22 94.16.64.0/19 94.46.64.0/19 95.131.96.0/21 134.101.16.0/20 149.249.128.0/19 185.9.28.0/22 185.117.68.0/22 185.189.140.0/22 185.194.64.0/22 185.238.252.0/22 195.2.160.0/19 195.80.52.0/22 212.126.192.0/19 212.232.80.0/20 213.157.0.0/19 213.188.96.0/19 217.173.144.0/20 IPv6: 2a02:b98::/32 Signature Algorithm: sha256WithRSAEncryption 43:b8:c3:be:ed:25:c5:41:29:4f:b2:64:19:df:b8:b6:76:b0: 29:a2:48:5d:35:fa:b2:14:ad:9d:40:d8:5f:cc:07:0a:a2:04: d7:15:48:c0:50:a2:f3:58:83:7b:e4:a7:42:f9:5c:13:a9:9a: 4d:eb:ee:46:56:b8:44:22:45:7b:13:39:1b:eb:b6:63:a4:04: c9:8f:14:09:a1:77:29:e6:be:8a:f3:b1:ba:89:9f:8c:be:74: 6d:f9:5a:6f:7a:a1:71:51:b0:a9:f8:9c:07:23:67:bd:bc:94: e3:f0:ce:77:93:a1:6e:74:d5:46:ef:e3:0c:52:89:99:53:a9: 42:1c:fd:e6:82:ca:7f:60:d4:5c:fc:6e:f2:be:ca:f7:bd:4f: 9b:dd:8b:27:67:2e:d7:32:bc:e9:63:86:61:ed:79:02:b8:f3: 76:d7:7c:55:27:87:df:11:44:9e:c1:7b:85:bd:45:6d:f0:f2: 59:e7:92:85:14:70:50:70:6c:bf:b3:cf:ca:16:d2:c4:68:59: 92:48:93:62:55:57:dd:da:cf:08:f0:96:4c:70:89:85:07:d9: db:3f:2c:57:8d:11:9d:03:5b:be:16:d7:80:a8:45:2c:30:47: e7:0b:80:74:71:1a:13:a9:49:66:54:e1:a6:12:07:e9:9f:85: 80:2a:28:68 -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZuOM9ElqjpTRufGg3q4FRO6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YjgwMGMzOTEyNmRiM2NhNGUwZDU2OTEwZjBhZDM3OTI1 N2U0YTAwHhcNMjYwMTA1MTI0ODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjYwMzA2N2RhZTlmZmFjMjZlZWVlNzZlYzcyNWE1ZWMzN2RmNjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7HqQycuz1wmRB7qJhFA0GROWwtZ kvWlBNlUSdAz3kv8hYAfxvPaAubnuWQiBPfnx0q0pK8mv38kRjR0JiDS4PwvM8Hq UGiY+vkLdjK4HaAzgKgAtSCW3Br8uouCJGbKIBlcEXGTRB6RcpLrZ3UfVrpdG5vj QHQfMrF0mGGsiM9uJ4zyy2fUZdwewXabBq1eIq8ZY9JvJQZsXMNkylpVL69CvDoh c4Zu5GahcqzUACzdPFSQmtJkp3jDcGX/OpvT0OIcoMlfgP5mK3t+Z8Of7B1EtZ3Z RHHKD1/aUlZ3AWhsQEimZbMnngcIBRA+02h1SnOAN0JbE7SjAb+D1/J7qQIDAQAB o4ICvzCCArswHQYDVR0OBBYEFLZgMGfa6f+sJu7uduxyWl7DffYlMB8GA1UdIwQY MBaAFBm4AMORJts8pODVaRDwrTeSV+SgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS84NGI0ODktOGI2Zi00NTlkLTlhMzEt ZjE4YWQ5ZjRjYzM0LzEvdG1Bd1o5cnBfNndtN3U1MjdISmFYc045OWlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS84NGI0ODktOGI2Zi00NTlkLTlhMzEtZjE4YWQ5ZjRjYzM0 LzEvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHUBggrBgEFBQcBBwEB/wSBxDCBwTCBrwQCAAEwgagDBAIF tuwDBAItCjwDBAItDrwDBAItXWwDBAItgLQDBAItgyQDBAItiKgDBAItj0wDBAMu 81ADBAVVhMADBAJcdwgDBAVeEEADBAVeLkADBANfg2ADBASGZRADBAWV+YADBAK5 CRwDBAK5dUQDBAK5vYwDBAK5wkADBAK57vwDBAXDAqADBALDUDQDBAXUfsADBATU 6FADBAXVnQADBAXVvGADBATZrZAwDQQCAAIwBwMFACoCC5gwDQYJKoZIhvcNAQEL BQADggEBAEO4w77tJcVBKU+yZBnfuLZ2sCmiSF01+rIUrZ1A2F/MBwqiBNcVSMBQ ovNYg3vkp0L5XBOpmk3r7kZWuEQiRXsTORvrtmOkBMmPFAmhdynmvorzsbqJn4y+ dG35Wm96oXFRsKn4nAcjZ728lOPwzneToW501Ubv4wxSiZlTqUIc/eaCyn9g1Fz8 bvK+yve9T5vdiydnLtcyvOljhmHteQK483bXfFUnh98RRJ7Be4W9RW3w8lnnkoUU cFBwbL+zz8oW0sRoWZJIk2JVV93azwjwlkxwiYUH2ds/LFeNEZ0DW74W14CoRSww R+cLgHRxGhOpSWZU4aYSB+mfhYAqKGg= -----END CERTIFICATE-----Generated at Sun Jan 25 09:40:57 2026 by rpki-client