This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/AM2lm9d_oTNlyo3zUcxiBsZlQF0.roa File: AM2lm9d_oTNlyo3zUcxiBsZlQF0.roa (raw, json) Hash identifier: HpEnQVxO56hL3Xk2Jqvq6y3SFeIUHquBEQE7moosli8= Subject key identifier: 00:CD:A5:9B:D7:7F:A1:33:65:CA:8D:F3:51:CC:62:06:C6:65:40:5D Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C76DD755D139D108D7DC920E8BD7FF Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/AM2lm9d_oTNlyo3zUcxiBsZlQF0.roa Signing time: Thu 01 Jan 2026 04:18:37 +0000 ROA not before: Thu 01 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50928 IP address blocks: 31.173.248.0/21 maxlen: 21 31.173.248.0/24 maxlen: 24 31.173.249.0/24 maxlen: 24 31.173.250.0/24 maxlen: 24 31.173.251.0/24 maxlen: 24 31.173.252.0/24 maxlen: 24 31.173.253.0/24 maxlen: 24 31.173.254.0/24 maxlen: 24 37.29.80.0/22 maxlen: 22 37.29.80.0/24 maxlen: 24 37.29.81.0/24 maxlen: 24 37.29.82.0/24 maxlen: 24 37.29.83.0/24 maxlen: 24 46.29.192.0/21 maxlen: 21 46.29.194.0/24 maxlen: 24 46.29.195.0/24 maxlen: 24 46.29.196.0/24 maxlen: 24 46.29.199.0/24 maxlen: 24 178.23.144.0/21 maxlen: 21 178.23.148.0/24 maxlen: 24 178.23.149.0/24 maxlen: 24 178.23.150.0/24 maxlen: 24 178.23.151.0/24 maxlen: 24 178.176.248.0/24 maxlen: 24 178.176.249.0/24 maxlen: 24 178.176.250.0/24 maxlen: 24 178.176.251.0/24 maxlen: 24 178.176.252.0/24 maxlen: 24 178.176.253.0/24 maxlen: 24 178.176.254.0/24 maxlen: 24 188.170.244.0/23 maxlen: 23 188.170.244.0/24 maxlen: 24 188.170.245.0/24 maxlen: 24 188.170.248.0/24 maxlen: 24 188.170.249.0/24 maxlen: 24 188.170.250.0/24 maxlen: 24 188.170.251.0/24 maxlen: 24 188.170.252.0/24 maxlen: 24 2a00:9780::/40 maxlen: 40 2a00:9780:100::/40 maxlen: 40 2a00:9780:200::/40 maxlen: 40 2a00:9780:300::/40 maxlen: 40 2a00:9780:400::/40 maxlen: 40 2a00:9780:500::/40 maxlen: 40 2a00:9780:600::/40 maxlen: 40 2a00:9780:700::/40 maxlen: 40 2a00:9780:800::/40 maxlen: 40 2a00:9780:900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6d:d7:55:d1:39:d1:08:d7:dc:92:0e:8b:d7:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00cda59bd77fa13365ca8df351cc6206c665405d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c5:f1:ed:2c:e7:97:eb:6f:28:7d:57:db:20: d7:e7:ec:59:ae:56:9f:63:d0:1c:7e:eb:cd:e7:cd: 57:4c:b8:a7:d4:64:47:1a:f9:d5:9b:29:54:14:ec: 25:72:79:8a:cc:c5:39:10:7f:36:9e:38:5b:e4:5f: 17:e5:a2:34:a7:06:73:32:3b:c2:20:a5:f1:97:00: a5:a4:15:f1:ba:c6:c7:1d:bb:17:1c:91:9f:0b:8b: 4d:fe:46:02:7c:64:90:93:10:dc:af:c8:01:6c:e1: 34:a5:b0:84:ad:7c:58:63:3c:0e:90:f8:53:fa:0c: 3f:4c:00:65:96:6c:fb:af:fa:b7:a9:72:fb:69:f1: fe:60:09:35:ae:f7:5e:ca:62:60:58:85:e0:f4:3a: ea:87:0e:b7:19:f4:d8:07:82:23:4f:24:18:5e:85: 0f:67:38:aa:f5:c7:21:ee:07:60:c7:e8:a8:30:41: f7:76:0f:17:47:d2:a8:fe:2a:24:1d:be:02:5e:4f: c9:cb:4b:ac:14:8c:54:21:13:62:1b:e6:bd:a4:66: 87:0d:f4:df:08:bf:03:31:85:eb:04:df:52:c5:c4: 2b:65:3a:34:f9:04:bd:19:dc:72:30:3e:54:cd:c4: 05:85:d1:57:86:f1:3a:ee:e8:3c:35:d4:3c:a1:30: 54:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CD:A5:9B:D7:7F:A1:33:65:CA:8D:F3:51:CC:62:06:C6:65:40:5D X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/AM2lm9d_oTNlyo3zUcxiBsZlQF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.173.248.0/21 37.29.80.0/22 46.29.192.0/21 178.23.144.0/21 178.176.248.0-178.176.254.255 188.170.244.0/23 188.170.248.0-188.170.252.255 IPv6: 2a00:9780::-2a00:9780:9ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 4f:78:dc:50:a0:48:70:66:39:00:a7:b4:f4:4d:c6:ab:c1:2d: d2:7d:fd:b4:07:d9:f5:18:6d:7b:c8:f1:c5:45:3e:cf:3e:a8: bc:6a:e1:b6:5a:9a:30:9d:b4:8e:df:73:7a:84:67:fb:46:b7: 36:9c:39:3b:ad:ad:1d:57:14:e9:f0:43:b7:fe:dc:0a:10:57: 82:13:fa:05:3f:f0:32:36:53:85:af:78:9c:7d:d7:82:5a:d3: 3a:c7:1e:f0:1b:26:12:1d:d8:aa:3e:fa:4c:3a:73:58:67:49: b3:2e:d5:f2:9e:93:20:67:4d:d5:d5:6b:2e:cb:8d:51:84:c6: 61:af:2f:e3:06:93:ed:42:f0:5a:db:66:cd:ff:ce:96:23:e0: ec:24:28:b3:8d:95:bd:05:64:1b:a7:0e:70:65:80:63:e7:bb: 52:6d:a7:10:b8:4b:c6:88:80:1c:16:3d:1a:d0:99:74:cd:33: d2:49:39:ce:b8:9e:00:69:39:ac:3f:01:fd:e1:2d:05:f6:51: ca:8d:29:24:43:8c:6e:82:74:95:de:0a:ac:62:aa:e0:dd:8a: f0:e7:a0:0c:08:3f:86:11:d8:5f:b5:2e:a1:51:df:12:0e:46: d2:24:34:4f:a9:2d:40:b7:11:4d:94:d8:56:07:9d:c5:d0:f4: a1:41:1a:c4 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgISAZt3x23XVdE50QjX3JIOi9f/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGNkYTU5YmQ3N2ZhMTMzNjVjYThkZjM1MWNjNjIwNmM2NjU0MDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcXx7Sznl+tvKH1X2yDX5+xZrlaf Y9AcfuvN581XTLin1GRHGvnVmylUFOwlcnmKzMU5EH82njhb5F8X5aI0pwZzMjvC IKXxlwClpBXxusbHHbsXHJGfC4tN/kYCfGSQkxDcr8gBbOE0pbCErXxYYzwOkPhT +gw/TABllmz7r/q3qXL7afH+YAk1rvdeymJgWIXg9Drqhw63GfTYB4IjTyQYXoUP Zziq9cch7gdgx+ioMEH3dg8XR9Ko/iokHb4CXk/Jy0usFIxUIRNiG+a9pGaHDfTf CL8DMYXrBN9SxcQrZTo0+QS9GdxyMD5UzcQFhdFXhvE67ug8NdQ8oTBUQwIDAQAB o4ICVjCCAlIwHQYDVR0OBBYEFADNpZvXf6EzZcqN81HMYgbGZUBdMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvQU0ybG05ZF9vVE5seW8zelVjeGlCc1psUUYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzBABAIAATA6AwQDH634AwQC JR1QAwQDLh3AAwQDsheQMAwDBAOysPgDBACysP4DBAG8qvQwDAMEA7yq+AMEALyq /DAXBAIAAjARMA8DBQcqAJeAAwYBKgCXgAgwDQYJKoZIhvcNAQELBQADggEBAE94 3FCgSHBmOQCntPRNxqvBLdJ9/bQH2fUYbXvI8cVFPs8+qLxq4bZamjCdtI7fc3qE Z/tGtzacOTutrR1XFOnwQ7f+3AoQV4IT+gU/8DI2U4WveJx914Ja0zrHHvAbJhId 2Ko++kw6c1hnSbMu1fKekyBnTdXVay7LjVGExmGvL+MGk+1C8FrbZs3/zpYj4Owk KLONlb0FZBunDnBlgGPnu1JtpxC4S8aIgBwWPRrQmXTNM9JJOc64ngBpOaw/Af3h LQX2UcqNKSRDjG6CdJXeCqxiquDdivDnoAwIP4YR2F+1LqFR3xIORtIkNE+pLUC3 EU2U2FYHncXQ9KFBGsQ= -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:44 2026 by rpki-client