This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/IebEbuAN9nRUPZFdRs-e4w7Fg5E.roa File: IebEbuAN9nRUPZFdRs-e4w7Fg5E.roa (raw, json) Hash identifier: jIR1b9upXq/6crre8hwOSTG4cOP8nIdGvBsMPe2V/Ko= Subject key identifier: 21:E6:C4:6E:E0:0D:F6:74:54:3D:91:5D:46:CF:9E:E3:0E:C5:83:91 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 019B775883BEEE44AA2C8057585D2247EBD7 Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/IebEbuAN9nRUPZFdRs-e4w7Fg5E.roa Signing time: Thu 01 Jan 2026 02:17:28 +0000 ROA not before: Thu 01 Jan 2026 02:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2072 IP address blocks: 193.49.22.0/24 maxlen: 24 193.49.163.0/24 maxlen: 24 193.50.0.0/24 maxlen: 24 193.50.1.0/24 maxlen: 24 193.50.2.0/24 maxlen: 24 193.50.67.0/24 maxlen: 24 193.50.68.0/24 maxlen: 24 193.50.201.0/24 maxlen: 24 193.51.65.0/24 maxlen: 24 193.51.66.0/24 maxlen: 24 193.51.128.48/29 maxlen: 29 193.51.128.56/29 maxlen: 29 193.51.128.128/25 maxlen: 25 193.51.165.0/24 maxlen: 24 193.54.195.0/24 maxlen: 24 193.54.225.0/24 maxlen: 24 194.57.183.0/24 maxlen: 24 194.57.241.0/24 maxlen: 24 194.57.241.0/26 maxlen: 26 194.199.83.0/24 maxlen: 24 194.199.84.0/24 maxlen: 24 194.199.85.0/24 maxlen: 24 194.199.86.0/24 maxlen: 24 194.199.87.0/24 maxlen: 24 194.199.88.0/24 maxlen: 24 194.199.89.0/24 maxlen: 24 194.199.90.0/24 maxlen: 24 195.83.166.0/24 maxlen: 24 195.83.221.0/24 maxlen: 24 195.83.222.0/24 maxlen: 24 195.83.223.0/24 maxlen: 24 195.221.157.0/24 maxlen: 24 195.221.158.0/24 maxlen: 24 195.221.159.0/24 maxlen: 24 195.221.160.0/24 maxlen: 24 195.221.161.0/24 maxlen: 24 195.221.162.0/24 maxlen: 24 2001:660:3020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:83:be:ee:44:aa:2c:80:57:58:5d:22:47:eb:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Jan 1 02:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21e6c46ee00df674543d915d46cf9ee30ec58391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:41:de:a4:12:9d:79:bc:f0:2b:b3:9a:b7:fa: e9:44:03:02:e7:72:98:54:57:84:43:24:bc:32:41: 71:c6:b9:f2:65:5b:b5:c2:a1:a9:77:48:a9:0d:84: 47:87:61:0b:7a:7d:46:95:e3:d0:4e:5a:14:4d:7f: 5e:ce:fe:38:8c:bd:00:23:26:8b:f0:ae:e2:7c:9a: 07:0b:b6:d2:6f:7b:3b:93:ce:b7:3d:97:41:33:fe: 1b:3e:b4:a2:e4:a5:90:58:ea:99:ed:0b:11:60:ca: 91:ea:e6:2b:fb:60:39:a4:1d:65:f0:8f:90:ae:3f: 92:1f:91:3e:54:7c:8e:2d:ea:d1:34:95:5e:84:cf: 82:66:e8:8e:ec:9b:e5:fb:77:24:3a:a7:08:41:0a: bd:ed:66:a3:a8:75:0f:b3:79:b4:d8:bd:58:0c:41: 5a:3a:3c:17:c8:58:15:dc:5b:11:d1:1d:b6:f9:c5: 09:aa:a0:47:95:f9:98:90:87:f9:f1:d6:54:1a:90: 56:8c:7c:53:fe:73:df:36:d0:3b:3e:ce:a8:c6:ef: dd:04:07:10:9f:43:fa:bf:64:e8:6f:a8:68:0f:7d: 17:e1:a3:ec:53:51:bb:cb:54:76:83:d0:dd:86:98: b9:31:d0:28:37:f8:ad:0f:ac:ad:44:88:08:89:bd: ef:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E6:C4:6E:E0:0D:F6:74:54:3D:91:5D:46:CF:9E:E3:0E:C5:83:91 X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/IebEbuAN9nRUPZFdRs-e4w7Fg5E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.49.22.0/24 193.49.163.0/24 193.50.0.0-193.50.2.255 193.50.67.0-193.50.68.255 193.50.201.0/24 193.51.65.0-193.51.66.255 193.51.128.48/28 193.51.128.128/25 193.51.165.0/24 193.54.195.0/24 193.54.225.0/24 194.57.183.0/24 194.57.241.0/24 194.199.83.0-194.199.90.255 195.83.166.0/24 195.83.221.0-195.83.223.255 195.221.157.0-195.221.162.255 IPv6: 2001:660:3020::/48 Signature Algorithm: sha256WithRSAEncryption 5a:47:12:07:ae:a1:87:93:4a:b7:5a:71:a4:f0:59:8b:c5:c4: c1:60:c0:d0:db:9b:c4:3f:83:c7:1d:5e:c2:90:7c:e7:9d:3d: bc:3d:51:05:cb:9e:20:3b:0d:dc:e3:4f:5c:31:d8:f4:a4:d1: 42:28:41:8b:03:f1:25:b2:91:26:92:53:57:12:1c:10:8e:36: e7:d1:bd:3e:75:e5:dc:65:24:6e:e1:1b:db:32:20:55:0d:5c: 67:b2:05:74:1d:1b:c3:8c:24:77:6e:f9:9b:18:55:16:d4:8a: 69:27:9d:7e:20:0d:c0:58:74:08:d4:d1:62:e4:70:41:53:86: d8:84:37:bb:62:15:52:8c:65:8e:23:50:e5:eb:ab:60:40:f9: 3e:d7:5e:77:b0:94:5b:f1:e8:80:ef:35:13:f6:32:47:f7:76: 7c:c2:a9:3c:76:1b:12:2f:5f:10:8e:eb:51:ea:41:cb:0e:c6: 6a:1d:65:a2:ab:70:7b:6c:23:46:66:d6:4c:d8:6c:de:20:b6: 58:ff:35:ee:7e:9e:c9:04:97:0c:0e:68:1e:a4:ba:fb:98:37: a1:1f:32:e3:60:a8:cc:5c:de:87:40:5d:90:46:2b:75:03:13: 61:e6:95:96:4a:5b:ab:82:0e:d8:c2:2e:bb:93:14:98:ab:ec: ac:7c:cd:ab -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt3WIO+7kSqLIBXWF0iR+vXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjYwMTAxMDIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWU2YzQ2ZWUwMGRmNjc0NTQzZDkxNWQ0NmNmOWVlMzBlYzU4MzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUHepBKdebzwK7Oat/rpRAMC53KY VFeEQyS8MkFxxrnyZVu1wqGpd0ipDYRHh2ELen1GlePQTloUTX9ezv44jL0AIyaL 8K7ifJoHC7bSb3s7k863PZdBM/4bPrSi5KWQWOqZ7QsRYMqR6uYr+2A5pB1l8I+Q rj+SH5E+VHyOLerRNJVehM+CZuiO7Jvl+3ckOqcIQQq97WajqHUPs3m02L1YDEFa OjwXyFgV3FsR0R22+cUJqqBHlfmYkIf58dZUGpBWjHxT/nPfNtA7Ps6oxu/dBAcQ n0P6v2Tob6hoD30X4aPsU1G7y1R2g9Ddhpi5MdAoN/itD6ytRIgIib3v6QIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFCHmxG7gDfZ0VD2RXUbPnuMOxYORMB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvSWViRWJ1QU45blJVUFpGZFJzLWU0dzdGZzVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHFBggrBgEFBQcBBwEB/wSBtTCBsjCBngQCAAEwgZcDBADB MRYDBADBMaMwCwMDAcEyAwQAwTICMAwDBADBMkMDBADBMkQDBADBMskwDAMEAMEz QQMEAMEzQgMFBMEzgDADBQfBM4CAAwQAwTOlAwQAwTbDAwQAwTbhAwQAwjm3AwQA wjnxMAwDBADCx1MDBADCx1oDBADDU6YwDAMEAMNT3QMEBcNTwDAMAwQAw92dAwQA w92iMA8EAgACMAkDBwAgAQZgMCAwDQYJKoZIhvcNAQELBQADggEBAFpHEgeuoYeT SrdacaTwWYvFxMFgwNDbm8Q/g8cdXsKQfOedPbw9UQXLniA7DdzjT1wx2PSk0UIo QYsD8SWykSaSU1cSHBCONufRvT515dxlJG7hG9syIFUNXGeyBXQdG8OMJHdu+ZsY VRbUimknnX4gDcBYdAjU0WLkcEFThtiEN7tiFVKMZY4jUOXrq2BA+T7XXnewlFvx 6IDvNRP2Mkf3dnzCqTx2GxIvXxCO61HqQcsOxmodZaKrcHtsI0Zm1kzYbN4gtlj/ Ne5+nskElwwOaB6kuvuYN6EfMuNgqMxc3odAXZBGK3UDE2HmlZZKW6uCDtjCLruT FJir7Kx8zas= -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:56 2026 by rpki-client