This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/n149pV6YzpfmUFYDEF8Zv2819ak.roa File: n149pV6YzpfmUFYDEF8Zv2819ak.roa (raw, json) Hash identifier: HIRhwpgdeu7PD7ku5LyNlYKbvqN+PW+zocaMcV3HnPg= Subject key identifier: 9F:5E:3D:A5:5E:98:CE:97:E6:50:56:03:10:5F:19:BF:6F:35:F5:A9 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 019B7758874BCD3BFFD523429E29478516F2 Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/n149pV6YzpfmUFYDEF8Zv2819ak.roa Signing time: Thu 01 Jan 2026 02:17:29 +0000 ROA not before: Thu 01 Jan 2026 02:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2259 IP address blocks: 193.48.86.0/24 maxlen: 24 193.48.87.0/24 maxlen: 24 193.48.89.0/24 maxlen: 24 193.48.90.0/24 maxlen: 24 193.49.5.0/27 maxlen: 27 193.49.5.64/27 maxlen: 27 193.49.237.0/24 maxlen: 24 193.50.8.0/24 maxlen: 24 193.50.153.0/24 maxlen: 24 193.50.251.0/24 maxlen: 24 193.51.107.0/24 maxlen: 24 193.54.148.0/24 maxlen: 24 193.54.209.0/24 maxlen: 24 193.54.210.0/24 maxlen: 24 193.54.211.0/24 maxlen: 24 193.54.214.0/24 maxlen: 24 193.54.229.0/24 maxlen: 24 193.54.230.0/24 maxlen: 24 194.167.107.0/24 maxlen: 24 194.167.108.0/24 maxlen: 24 194.167.188.0/24 maxlen: 24 194.199.214.0/24 maxlen: 24 194.199.215.0/24 maxlen: 24 194.254.1.0/24 maxlen: 24 194.254.2.0/24 maxlen: 24 194.254.3.0/24 maxlen: 24 194.254.4.0/24 maxlen: 24 194.254.11.0/24 maxlen: 24 194.254.12.0/24 maxlen: 24 194.254.52.0/23 maxlen: 23 194.254.54.0/23 maxlen: 23 194.254.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:87:4b:cd:3b:ff:d5:23:42:9e:29:47:85:16:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Jan 1 02:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f5e3da55e98ce97e6505603105f19bf6f35f5a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:65:a0:f1:89:4a:1f:a4:1b:e2:f1:32:67:e5: 0c:f9:1d:38:54:b4:0a:f9:85:71:9e:44:e4:0d:e5: 8b:e5:66:83:d4:2c:ba:29:36:0c:7d:8d:e7:5f:d2: 54:04:d8:c0:b9:0b:1e:72:2a:99:af:2b:f1:f9:73: 9f:a3:9c:01:53:96:a2:a3:00:14:98:02:a5:41:a5: 78:78:59:47:9f:03:b0:3a:5c:78:66:ac:4f:8a:d8: ce:35:bf:61:71:71:50:0a:50:eb:24:2e:57:bd:6c: a2:a0:96:23:8b:35:de:1e:01:0a:b4:4d:ec:f0:e0: f6:a7:4c:da:d3:0d:96:a8:8c:50:a0:65:9a:09:3a: 01:e2:da:a6:43:5f:d7:1e:63:25:fa:c9:a8:6b:43: 19:3a:93:19:61:7e:e4:88:04:9b:d2:58:aa:8e:e7: da:99:44:7d:f3:97:db:df:f2:64:17:a4:37:a2:b6: 54:c4:23:98:4e:3e:e4:48:d9:f5:4f:eb:66:c3:06: 79:38:fc:36:21:10:eb:27:04:24:27:33:1f:06:81: 18:61:36:41:18:b9:31:16:a9:91:3d:e0:2d:1f:a2: dc:c3:a3:f7:9f:18:13:15:1a:b2:90:5b:45:b1:c0: c0:f2:1d:9a:e1:ef:df:c9:55:d3:ba:89:e0:d3:76: 04:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5E:3D:A5:5E:98:CE:97:E6:50:56:03:10:5F:19:BF:6F:35:F5:A9 X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/n149pV6YzpfmUFYDEF8Zv2819ak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.48.86.0/23 193.48.89.0-193.48.90.255 193.49.5.0/27 193.49.5.64/27 193.49.237.0/24 193.50.8.0/24 193.50.153.0/24 193.50.251.0/24 193.51.107.0/24 193.54.148.0/24 193.54.209.0-193.54.211.255 193.54.214.0/24 193.54.229.0-193.54.230.255 194.167.107.0-194.167.108.255 194.167.188.0/24 194.199.214.0/23 194.254.1.0-194.254.4.255 194.254.11.0-194.254.12.255 194.254.52.0-194.254.57.255 Signature Algorithm: sha256WithRSAEncryption 46:d0:3a:a0:d9:e7:e4:5b:07:39:e2:af:21:3f:87:f9:58:be: 8d:19:fb:e8:56:68:8a:62:96:5e:4c:d5:77:19:a2:da:9e:1c: 2a:7c:7c:91:22:32:37:54:bf:a4:35:2a:9f:64:33:9a:f3:f9: 30:a9:02:d0:7b:96:f8:6d:0d:23:13:65:37:32:ce:b3:72:7c: 4a:fa:7c:0a:49:25:32:82:fb:16:a3:f5:24:7b:28:81:f3:fc: c1:90:7e:3d:7e:03:ef:f5:e2:12:96:b9:c7:c4:28:b7:9f:1b: 33:d4:3e:25:8f:ce:dc:ac:c4:1e:8c:11:d2:fc:91:d2:ec:83: 4c:44:04:0a:13:20:5e:0f:05:b9:3c:28:31:fe:0f:0d:f4:e9: 87:48:29:ae:ed:9a:5b:9f:59:b3:2d:b6:0b:4d:97:93:07:6d: a6:d3:9c:b8:f1:db:ff:3f:51:73:37:53:c2:69:d0:8f:1e:da: b9:b3:d0:7a:da:59:ec:7e:9d:bc:3f:c7:b5:b0:93:28:13:37: 11:3b:0e:5c:50:af:3c:bf:5e:89:7c:6d:5b:5a:27:b5:48:80: 25:02:d9:6b:e5:f4:6f:81:b3:2d:7e:15:9c:ea:41:87:8d:87: 56:02:0d:55:27:09:a9:1b:1a:f4:ab:eb:8a:5b:b2:4a:7a:be: d0:56:ec:7f -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt3WIdLzTv/1SNCnilHhRbyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjYwMTAxMDIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjVlM2RhNTVlOThjZTk3ZTY1MDU2MDMxMDVmMTliZjZmMzVmNWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GWg8YlKH6Qb4vEyZ+UM+R04VLQK +YVxnkTkDeWL5WaD1Cy6KTYMfY3nX9JUBNjAuQseciqZryvx+XOfo5wBU5aiowAU mAKlQaV4eFlHnwOwOlx4ZqxPitjONb9hcXFQClDrJC5XvWyioJYjizXeHgEKtE3s 8OD2p0za0w2WqIxQoGWaCToB4tqmQ1/XHmMl+smoa0MZOpMZYX7kiASb0liqjufa mUR985fb3/JkF6Q3orZUxCOYTj7kSNn1T+tmwwZ5OPw2IRDrJwQkJzMfBoEYYTZB GLkxFqmRPeAtH6Lcw6P3nxgTFRqykFtFscDA8h2a4e/fyVXTuong03YEPwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFJ9ePaVemM6X5lBWAxBfGb9vNfWpMB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvbjE0OXBWNll6cGZtVUZZREVGOFp2MjgxOWFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHJBggrBgEFBQcBBwEB/wSBuTCBtjCBswQCAAEwgawDBAHB MFYwDAMEAMEwWQMEAMEwWgMFBcExBQADBQXBMQVAAwQAwTHtAwQAwTIIAwQAwTKZ AwQAwTL7AwQAwTNrAwQAwTaUMAwDBADBNtEDBALBNtADBADBNtYwDAMEAME25QME AME25jAMAwQAwqdrAwQAwqdsAwQAwqe8AwQBwsfWMAwDBADC/gEDBADC/gQwDAME AML+CwMEAML+DDAMAwQCwv40AwQBwv44MA0GCSqGSIb3DQEBCwUAA4IBAQBG0Dqg 2efkWwc54q8hP4f5WL6NGfvoVmiKYpZeTNV3GaLanhwqfHyRIjI3VL+kNSqfZDOa 8/kwqQLQe5b4bQ0jE2U3Ms6zcnxK+nwKSSUygvsWo/UkeyiB8/zBkH49fgPv9eIS lrnHxCi3nxsz1D4lj87crMQejBHS/JHS7INMRAQKEyBeDwW5PCgx/g8N9OmHSCmu 7Zpbn1mzLbYLTZeTB22m05y48dv/P1FzN1PCadCPHtq5s9B62lnsfp28P8e1sJMo EzcROw5cUK88v16JfG1bWie1SIAlAtlr5fRvgbMtfhWc6kGHjYdWAg1VJwmpGxr0 q+uKW7JKer7QVux/ -----END CERTIFICATE-----Generated at Sun Jan 25 23:04:41 2026 by rpki-client