This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/T6201kaKz2wAhM6zPCN8a023mG8.roa File: T6201kaKz2wAhM6zPCN8a023mG8.roa (raw, json) Hash identifier: ahv8z1IDEiRyXew3YyCL7x/GOhwD7Uqtn910nunK2U4= Subject key identifier: 4F:AD:B4:D6:46:8A:CF:6C:00:84:CE:B3:3C:23:7C:6B:4D:B7:98:6F Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 019B7758882D1BF64114CB456629AD326CA7 Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/T6201kaKz2wAhM6zPCN8a023mG8.roa Signing time: Thu 01 Jan 2026 02:17:29 +0000 ROA not before: Thu 01 Jan 2026 02:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2471 IP address blocks: 193.51.134.0/24 maxlen: 24 193.51.135.0/24 maxlen: 24 193.52.35.0/24 maxlen: 24 193.54.56.0/24 maxlen: 24 194.57.236.0/24 maxlen: 24 194.57.237.0/24 maxlen: 24 194.199.93.0/24 maxlen: 24 194.199.94.0/24 maxlen: 24 194.199.96.0/24 maxlen: 24 194.254.98.0/24 maxlen: 24 194.254.197.0/24 maxlen: 24 195.83.189.0/24 maxlen: 24 195.221.169.0/24 maxlen: 24 195.221.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:88:2d:1b:f6:41:14:cb:45:66:29:ad:32:6c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Jan 1 02:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fadb4d6468acf6c0084ceb33c237c6b4db7986f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:15:51:fb:41:7f:40:37:83:a4:88:d2:f5:db: cb:cf:4d:63:61:cf:89:87:00:8e:3c:54:e4:6a:44: 95:ff:a9:87:a3:65:c5:9d:71:1a:51:0f:cb:7f:8b: bf:9a:7b:19:a0:47:d6:7b:02:c6:69:28:86:9f:42: 07:47:33:bc:4b:1b:41:34:5a:6f:0b:49:08:25:42: b8:4d:9c:b6:d3:0e:85:29:b9:58:97:55:1c:3b:79: f4:fb:31:10:43:d9:4c:76:80:0f:62:92:7b:07:6d: eb:c4:31:55:65:08:e9:2e:2d:19:93:de:ce:99:0b: a2:b9:cd:e2:90:44:58:3f:c7:77:19:1f:33:df:ce: 7b:06:41:fc:06:64:3e:a6:5e:d0:ea:5c:0e:da:03: 56:e1:f7:ac:64:c2:8f:09:f4:8e:b4:02:46:e2:12: 33:7f:ae:70:bc:80:44:34:38:8f:10:69:34:bd:63: af:5a:db:ff:28:52:4f:62:60:91:f1:9f:fe:18:30: 51:f4:66:6f:e1:37:e5:27:e7:fa:36:cc:c5:ff:60: 73:4d:d3:2a:5c:a9:fb:2e:5b:53:58:1a:3d:17:66: 8a:dc:84:22:a4:4b:0a:f8:7d:92:2d:77:fb:fe:45: ef:db:76:b2:cf:60:6e:30:a6:17:a4:05:7e:18:7b: 34:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AD:B4:D6:46:8A:CF:6C:00:84:CE:B3:3C:23:7C:6B:4D:B7:98:6F X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/T6201kaKz2wAhM6zPCN8a023mG8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.51.134.0/23 193.52.35.0/24 193.54.56.0/24 194.57.236.0/23 194.199.93.0-194.199.94.255 194.199.96.0/24 194.254.98.0/24 194.254.197.0/24 195.83.189.0/24 195.221.169.0/24 195.221.172.0/24 Signature Algorithm: sha256WithRSAEncryption 58:12:51:d6:a8:81:7d:71:95:e1:32:2f:8a:b1:ad:47:e7:25: 47:77:34:00:01:aa:21:99:68:ef:00:3a:d1:02:64:ec:81:b4: c5:78:55:a6:ee:c3:04:16:e2:48:a3:88:f1:c3:1b:7e:73:ed: 27:e5:85:d9:e3:5d:5c:d3:7e:f6:98:ac:32:d4:fc:1a:88:3f: 25:be:fb:68:3a:9f:30:f8:ff:aa:b9:88:ab:b1:9b:70:2b:97: 33:9f:d5:76:50:f2:3c:29:99:ea:b7:89:25:d3:26:b6:d1:45: 04:f9:ea:68:f4:00:c8:60:07:eb:fe:e4:b9:50:19:e0:17:8a: d9:e3:01:06:ec:9d:fb:c1:9e:76:d0:15:10:8f:91:f8:46:e8: 14:f1:4d:9c:3c:9b:90:d8:e7:91:80:22:28:b9:db:c9:b4:36: fc:69:8f:e3:3b:3c:11:9c:a2:36:da:b2:d5:a7:d2:93:b9:5c: b0:ae:49:df:8a:8d:56:e1:32:a7:bb:5a:2a:01:54:e6:d6:12: 64:82:82:0c:54:e6:95:07:8d:7c:e1:49:96:78:36:85:c1:c7: 95:46:b4:a0:02:cb:fc:22:e0:a8:3c:9c:4d:33:0c:cf:a9:a8: ae:36:a0:22:80:cd:67:5b:46:2d:8b:e6:bf:65:75:bc:6e:f4: bb:ca:4f:d3 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgISAZt3WIgtG/ZBFMtFZimtMmynMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjYwMTAxMDIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmFkYjRkNjQ2OGFjZjZjMDA4NGNlYjMzYzIzN2M2YjRkYjc5ODZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBVR+0F/QDeDpIjS9dvLz01jYc+J hwCOPFTkakSV/6mHo2XFnXEaUQ/Lf4u/mnsZoEfWewLGaSiGn0IHRzO8SxtBNFpv C0kIJUK4TZy20w6FKblYl1UcO3n0+zEQQ9lMdoAPYpJ7B23rxDFVZQjpLi0Zk97O mQuiuc3ikERYP8d3GR8z3857BkH8BmQ+pl7Q6lwO2gNW4fesZMKPCfSOtAJG4hIz f65wvIBENDiPEGk0vWOvWtv/KFJPYmCR8Z/+GDBR9GZv4TflJ+f6NszF/2BzTdMq XKn7LltTWBo9F2aK3IQipEsK+H2SLXf7/kXv23ayz2BuMKYXpAV+GHs0iQIDAQAB o4ICTTCCAkkwHQYDVR0OBBYEFE+ttNZGis9sAITOszwjfGtNt5hvMB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvVDYyMDFrYUt6MndBaE02elBDTjhhMDIzbUc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQBwTOGAwQA wTQjAwQAwTY4AwQBwjnsMAwDBADCx10DBADCx14DBADCx2ADBADC/mIDBADC/sUD BADDU70DBADD3akDBADD3awwDQYJKoZIhvcNAQELBQADggEBAFgSUdaogX1xleEy L4qxrUfnJUd3NAABqiGZaO8AOtECZOyBtMV4VabuwwQW4kijiPHDG35z7Sflhdnj XVzTfvaYrDLU/BqIPyW++2g6nzD4/6q5iKuxm3ArlzOf1XZQ8jwpmeq3iSXTJrbR RQT56mj0AMhgB+v+5LlQGeAXitnjAQbsnfvBnnbQFRCPkfhG6BTxTZw8m5DY55GA Iii528m0Nvxpj+M7PBGcojbastWn0pO5XLCuSd+KjVbhMqe7WioBVObWEmSCggxU 5pUHjXzhSZZ4NoXBx5VGtKACy/wi4Kg8nE0zDM+pqK42oCKAzWdbRi2L5r9ldbxu 9LvKT9M= -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:23 2026 by rpki-client