This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/aC-0qMnNJPV_TiyXYsxxG9xVSHo.roa File: aC-0qMnNJPV_TiyXYsxxG9xVSHo.roa (raw, json) Hash identifier: n9z01CtYSRoc9SGP6+lo/QFv1c0m3P2h703Xhp6YDAQ= Subject key identifier: 68:2F:B4:A8:C9:CD:24:F5:7F:4E:2C:97:62:CC:71:1B:DC:55:48:7A Certificate issuer: /CN=7af57dd52c75fce39ffe2915469d9e656dbcb873 Certificate serial: 019B78A2B00E97995D62DD516C4C1DDA34B0 Authority key identifier: 7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/aC-0qMnNJPV_TiyXYsxxG9xVSHo.roa Signing time: Thu 01 Jan 2026 08:18:06 +0000 ROA not before: Thu 01 Jan 2026 08:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211261 IP address blocks: 92.246.82.0/24 maxlen: 24 92.246.83.0/24 maxlen: 24 103.226.192.0/24 maxlen: 24 103.226.194.0/23 maxlen: 23 103.229.168.0/24 maxlen: 24 103.229.170.0/24 maxlen: 24 103.229.171.0/24 maxlen: 24 185.117.46.0/24 maxlen: 24 185.117.47.0/24 maxlen: 24 185.145.68.0/24 maxlen: 24 185.145.69.0/24 maxlen: 24 185.145.70.0/24 maxlen: 24 185.145.71.0/24 maxlen: 24 185.167.181.0/24 maxlen: 24 185.201.4.0/24 maxlen: 24 185.204.200.0/24 maxlen: 24 185.204.201.0/24 maxlen: 24 185.204.203.0/24 maxlen: 24 185.223.176.0/24 maxlen: 24 185.223.177.0/24 maxlen: 24 185.223.179.0/24 maxlen: 24 185.237.212.0/24 maxlen: 24 185.237.213.0/24 maxlen: 24 185.237.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:b0:0e:97:99:5d:62:dd:51:6c:4c:1d:da:34:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7af57dd52c75fce39ffe2915469d9e656dbcb873 Validity Not Before: Jan 1 08:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=682fb4a8c9cd24f57f4e2c9762cc711bdc55487a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e9:34:fd:76:e6:03:5d:c6:64:71:88:7c:ed: 0a:30:c5:2c:88:70:8b:5b:02:40:22:c7:e3:b2:83: 24:53:49:cc:72:43:b2:f8:fe:57:87:6c:ad:50:99: f1:5e:12:06:03:d1:0a:a9:43:07:b4:8b:6b:58:50: 2c:7a:9b:ec:0a:92:7b:9a:59:0b:0e:d7:a5:5b:fe: 7a:83:b2:80:0b:0c:3f:94:1c:b8:58:49:04:97:c0: aa:a6:8e:f7:ac:5d:ec:e8:31:bc:f7:39:15:7f:07: 66:71:ed:c4:77:27:fb:e0:46:a2:fe:9d:56:99:a4: 85:d3:55:0c:33:89:77:78:63:49:95:b4:90:69:3a: 9d:b2:51:29:22:51:45:bb:46:3c:39:e3:a7:3d:e2: f5:b1:d6:99:a4:ec:19:c9:43:2e:9c:1c:00:c4:91: 8b:f5:9a:d5:2b:1c:52:6c:20:f7:95:83:55:bd:5a: 2d:31:25:36:21:5d:06:96:e6:d0:a2:cb:92:ba:4a: 0b:fa:bd:18:f0:e8:ab:fd:65:46:21:8d:d1:ba:9b: aa:65:7e:b4:79:27:37:fd:9c:22:86:16:ea:de:7b: 14:3d:56:b4:a1:cb:90:7c:74:17:97:3b:70:ac:1e: 11:9f:db:68:f0:8d:d0:51:46:09:c0:e3:f1:fe:51: 0b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2F:B4:A8:C9:CD:24:F5:7F:4E:2C:97:62:CC:71:1B:DC:55:48:7A X509v3 Authority Key Identifier: keyid:7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/aC-0qMnNJPV_TiyXYsxxG9xVSHo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.246.82.0/23 103.226.192.0/24 103.226.194.0/23 103.229.168.0/24 103.229.170.0/23 185.117.46.0/23 185.145.68.0/22 185.167.181.0/24 185.201.4.0/24 185.204.200.0/23 185.204.203.0/24 185.223.176.0/23 185.223.179.0/24 185.237.212.0-185.237.214.255 Signature Algorithm: sha256WithRSAEncryption c3:a4:1d:0f:f9:c9:17:a5:cd:32:dd:3d:14:ba:34:55:f5:58: 33:37:f7:06:2f:cc:e7:09:7d:d6:df:35:6c:e6:fc:20:17:60: aa:82:2e:6a:af:f6:64:3b:fc:e2:ce:ad:6c:bc:b2:d3:24:b9: aa:0d:9a:90:ab:cb:52:6c:50:cb:30:95:f1:89:6e:33:71:eb: 29:b3:d3:6a:86:70:dc:ca:aa:d4:c4:45:6c:3b:d6:7a:51:84: 26:c8:22:c3:d2:da:d2:38:5c:19:56:02:40:b9:e0:ef:43:82: 84:c3:55:81:8c:88:9f:e5:78:86:14:a1:6d:42:b0:5d:ca:1f: cf:47:94:4f:59:7f:11:f5:a1:32:81:5e:c4:18:bd:30:b8:21: 0c:c7:c9:5a:34:6b:bd:55:8e:5b:28:2e:df:09:bd:cd:bc:90: e0:e2:5f:fb:a5:48:75:ba:28:0f:db:cb:8b:c8:5c:b2:f9:f4: 88:f3:aa:0f:a9:a0:78:47:f5:7a:4f:15:52:19:65:ca:29:b6: 2e:dc:1b:a6:3a:87:0d:83:b4:7c:b7:2f:4a:d6:27:ec:1f:81: 1f:9e:ee:b2:9f:f9:23:73:98:b6:4a:f9:56:a2:ed:6d:76:2b: 55:e6:75:75:52:38:39:f1:22:7b:92:66:2b:22:cb:f6:8e:40: 9f:27:20:c1 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgISAZt4orAOl5ldYt1RbEwd2jSwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZjU3ZGQ1MmM3NWZjZTM5ZmZlMjkxNTQ2OWQ5ZTY1NmRi Y2I4NzMwHhcNMjYwMTAxMDgxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODJmYjRhOGM5Y2QyNGY1N2Y0ZTJjOTc2MmNjNzExYmRjNTU0ODdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOk0/XbmA13GZHGIfO0KMMUsiHCL WwJAIsfjsoMkU0nMckOy+P5Xh2ytUJnxXhIGA9EKqUMHtItrWFAsepvsCpJ7mlkL DtelW/56g7KACww/lBy4WEkEl8Cqpo73rF3s6DG89zkVfwdmce3Edyf74Eai/p1W maSF01UMM4l3eGNJlbSQaTqdslEpIlFFu0Y8OeOnPeL1sdaZpOwZyUMunBwAxJGL 9ZrVKxxSbCD3lYNVvVotMSU2IV0GlubQosuSukoL+r0Y8Oir/WVGIY3RupuqZX60 eSc3/Zwihhbq3nsUPVa0ocuQfHQXlztwrB4Rn9to8I3QUUYJwOPx/lELpQIDAQAB o4ICXzCCAlswHQYDVR0OBBYEFGgvtKjJzST1f04sl2LMcRvcVUh6MB8GA1UdIwQY MBaAFHr1fdUsdfzjn/4pFUadnmVtvLhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXZWOTFTeDFfT09mX2lrVlJwMmVaVzI4dUhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84Nzk3ZGUtM2FlOS00ZTA1LTgwZmYt YzI1MzQwOTZjNjBkLzEvYUMtMHFNbk5KUFZfVGl5WFlzeHhHOXhWU0hvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi84Nzk3ZGUtM2FlOS00ZTA1LTgwZmYtYzI1MzQwOTZjNjBk LzEvZXZWOTFTeDFfT09mX2lrVlJwMmVaVzI4dUhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcAwQBXPZSAwQA Z+LAAwQBZ+LCAwQAZ+WoAwQBZ+WqAwQBuXUuAwQCuZFEAwQAuae1AwQAuckEAwQB uczIAwQAuczLAwQBud+wAwQAud+zMAwDBAK57dQDBAC57dYwDQYJKoZIhvcNAQEL BQADggEBAMOkHQ/5yRelzTLdPRS6NFX1WDM39wYvzOcJfdbfNWzm/CAXYKqCLmqv 9mQ7/OLOrWy8stMkuaoNmpCry1JsUMswlfGJbjNx6ymz02qGcNzKqtTERWw71npR hCbIIsPS2tI4XBlWAkC54O9DgoTDVYGMiJ/leIYUoW1CsF3KH89HlE9ZfxH1oTKB XsQYvTC4IQzHyVo0a71VjlsoLt8Jvc28kODiX/ulSHW6KA/by4vIXLL59Ijzqg+p oHhH9XpPFVIZZcopti7cG6Y6hw2DtHy3L0rWJ+wfgR+e7rKf+SNzmLZK+Vai7W12 K1XmdXVSODnxInuSZisiy/aOQJ8nIME= -----END CERTIFICATE-----Generated at Sun Jan 25 13:06:54 2026 by rpki-client