This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/INU4IhQdA3I64nfOMs3M07ApBVg.roa File: INU4IhQdA3I64nfOMs3M07ApBVg.roa (raw, json) Hash identifier: fPvKXjy0z+MbzXxFB2wActV92uNgLTmulsDE8gFm+mw= Subject key identifier: 20:D5:38:22:14:1D:03:72:3A:E2:77:CE:32:CD:CC:D3:B0:29:05:58 Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46 Certificate serial: 019B77C71E84038926C8D044859FA7E58430 Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/INU4IhQdA3I64nfOMs3M07ApBVg.roa Signing time: Thu 01 Jan 2026 04:18:16 +0000 ROA not before: Thu 01 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35237 IP address blocks: 84.252.144.0/23 maxlen: 24 84.252.144.0/24 maxlen: 24 84.252.145.0/24 maxlen: 24 84.252.146.0/24 maxlen: 24 84.252.147.0/24 maxlen: 24 84.252.149.0/24 maxlen: 24 84.252.150.0/24 maxlen: 24 84.252.151.0/24 maxlen: 24 84.252.152.0/24 maxlen: 24 91.217.194.0/24 maxlen: 24 185.157.96.0/23 maxlen: 23 185.157.96.0/24 maxlen: 24 185.157.97.0/24 maxlen: 24 185.157.99.0/24 maxlen: 24 194.54.14.0/24 maxlen: 24 194.54.15.0/24 maxlen: 24 2a07:a600::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1e:84:03:89:26:c8:d0:44:85:9f:a7:e5:84:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46 Validity Not Before: Jan 1 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20d53822141d03723ae277ce32cdccd3b0290558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e0:4a:c0:5b:3b:c7:53:67:0c:1e:c6:1d:59: 33:dd:b9:d7:6a:fa:ce:20:b1:33:a3:c3:a8:ed:03: 98:7d:a4:0f:1f:37:c6:0c:1e:f0:48:41:42:2b:d9: f8:1e:f2:b4:fa:96:d5:6b:e0:a3:06:0a:92:e3:8e: 17:3f:4e:48:76:c4:6c:2e:bd:27:39:13:1e:d9:03: 47:08:bd:35:80:c4:72:f4:1b:9c:17:65:a6:e7:bc: c4:af:0d:22:15:9e:b3:a1:77:db:22:7c:b9:c4:53: 89:2b:7f:ce:7d:d6:d9:f3:74:0d:f8:6e:76:8c:b7: 78:d6:aa:a2:c8:8e:6b:9a:a3:e9:8b:e2:2b:d3:57: 98:0a:21:63:87:3a:6d:69:2f:06:44:a8:10:be:42: 50:07:23:27:02:e8:07:25:23:3b:2f:4b:6a:d1:cb: c0:e2:71:46:79:8c:d9:c4:7c:d1:5a:bb:d1:f7:19: 98:32:39:ed:e0:08:74:fd:dd:19:67:39:4c:b5:8c: 9a:e1:2f:b3:b4:4a:81:2a:9f:85:70:f6:60:65:33: 2c:8e:35:52:22:e9:aa:d4:5d:76:dc:12:5b:c3:a5: 5a:82:29:3b:2f:e5:0d:d7:3b:80:f2:27:db:b6:bd: ef:55:39:ea:55:65:38:60:49:f2:8d:ec:ec:fd:7f: 99:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D5:38:22:14:1D:03:72:3A:E2:77:CE:32:CD:CC:D3:B0:29:05:58 X509v3 Authority Key Identifier: keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/INU4IhQdA3I64nfOMs3M07ApBVg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.252.144.0/22 84.252.149.0-84.252.152.255 91.217.194.0/24 185.157.96.0/23 185.157.99.0/24 194.54.14.0/23 IPv6: 2a07:a600::/29 Signature Algorithm: sha256WithRSAEncryption 43:36:7d:1e:f9:1a:4a:d1:86:03:ae:45:24:a2:7a:75:ad:d2: 76:e7:ab:78:35:01:62:35:c7:ca:c5:ee:ea:50:f8:76:9a:f9: ef:54:60:10:3a:03:f7:07:7e:70:81:cf:43:90:8a:73:69:f4: 58:82:31:49:01:2e:e9:09:0d:b1:b1:57:62:fc:ca:d0:d2:97: e5:45:94:9c:28:b4:a3:3b:c8:9c:35:f3:70:ce:dd:b5:d9:45: a1:78:77:f2:00:fa:b2:0d:22:42:e6:49:6a:18:ce:27:91:0d: b1:ba:e8:0f:e4:e1:f2:3a:fc:5a:91:b8:a2:11:b2:5a:11:63: 36:52:ac:ad:9e:d9:4a:35:56:2e:a4:e5:c6:16:8d:b0:e4:78: 56:a6:75:dd:51:f6:16:b0:3c:83:88:2e:21:2f:fe:77:aa:03: 84:33:26:48:c2:fb:00:7f:f2:35:6e:cb:39:27:cf:11:fc:46: 43:c9:ff:cf:dc:08:3e:76:de:2b:0b:8f:2d:2a:f7:63:bd:be: 79:ba:ac:5d:cc:08:0a:de:75:4a:26:3b:74:f8:27:4a:62:48: 49:37:8e:65:a7:5b:2e:83:33:0d:4f:1a:0a:66:20:b9:f3:a7: e3:8f:20:f9:5d:3f:07:c2:89:ab:fd:de:67:78:e3:bb:72:a7: 23:be:1b:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgISAZt3xx6EA4kmyNBEhZ+n5YQwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNTI2YTczY2U4ZjlmNjJjMTRhMTFhMmVhOTEzZWMyNzNk NThjNDYwHhcNMjYwMTAxMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGQ1MzgyMjE0MWQwMzcyM2FlMjc3Y2UzMmNkY2NkM2IwMjkwNTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueBKwFs7x1NnDB7GHVkz3bnXavrO ILEzo8Oo7QOYfaQPHzfGDB7wSEFCK9n4HvK0+pbVa+CjBgqS444XP05IdsRsLr0n ORMe2QNHCL01gMRy9BucF2Wm57zErw0iFZ6zoXfbIny5xFOJK3/OfdbZ83QN+G52 jLd41qqiyI5rmqPpi+Ir01eYCiFjhzptaS8GRKgQvkJQByMnAugHJSM7L0tq0cvA 4nFGeYzZxHzRWrvR9xmYMjnt4Ah0/d0ZZzlMtYya4S+ztEqBKp+FcPZgZTMsjjVS Iumq1F123BJbw6Vagik7L+UN1zuA8ifbtr3vVTnqVWU4YEnyjezs/X+ZYQIDAQAB o4ICPjCCAjowHQYDVR0OBBYEFCDVOCIUHQNyOuJ3zjLNzNOwKQVYMB8GA1UdIwQY MBaAFJpSanPOj59iwUoRouqRPsJz1YxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWxKcWM4NlBuMkxCU2hHaTZwRS13blBWakVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82ZmNkY2EtZDEyMS00MzkxLTljZmMt N2QxNmI5MGRiZTcyLzEvSU5VNEloUWRBM0k2NG5mT01zM00wN0FwQlZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82ZmNkY2EtZDEyMS00MzkxLTljZmMtN2QxNmI5MGRiZTcy LzEvbWxKcWM4NlBuMkxCU2hHaTZwRS13blBWakVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAyBAIAATAsAwQCVPyQMAwD BABU/JUDBABU/JgDBABb2cIDBAG5nWADBAC5nWMDBAHCNg4wDQQCAAIwBwMFAyoH pgAwDQYJKoZIhvcNAQELBQADggEBAEM2fR75GkrRhgOuRSSienWt0nbnq3g1AWI1 x8rF7upQ+Haa+e9UYBA6A/cHfnCBz0OQinNp9FiCMUkBLukJDbGxV2L8ytDSl+VF lJwotKM7yJw183DO3bXZRaF4d/IA+rINIkLmSWoYzieRDbG66A/k4fI6/FqRuKIR sloRYzZSrK2e2Uo1Vi6k5cYWjbDkeFamdd1R9hawPIOILiEv/neqA4QzJkjC+wB/ 8jVuyzknzxH8RkPJ/8/cCD523isLjy0q92O9vnm6rF3MCAredUomO3T4J0piSEk3 jmWnWy6DMw1PGgpmILnzp+OPIPldPwfCiav93md447typyO+G+8= -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:43 2026 by rpki-client