This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/arLL-dX7EezUxnhpPmYA6Z1bdh0.roa File: arLL-dX7EezUxnhpPmYA6Z1bdh0.roa (raw, json) Hash identifier: /QmgKDALaBJxjzH0fH/pX9bzBt4U5Cyo5O5w9+AYU6U= Subject key identifier: 6A:B2:CB:F9:D5:FB:11:EC:D4:C6:78:69:3E:66:00:E9:9D:5B:76:1D Certificate issuer: /CN=4200982284a050d941dbebbd04b5d0c914f635b7 Certificate serial: 019B7E382736C4F8044CC0D09D4DA3CEA673 Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/arLL-dX7EezUxnhpPmYA6Z1bdh0.roa Signing time: Fri 02 Jan 2026 10:19:27 +0000 ROA not before: Fri 02 Jan 2026 10:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200651 IP address blocks: 37.156.68.0/24 maxlen: 24 37.228.128.0/24 maxlen: 24 37.228.129.0/24 maxlen: 24 185.10.68.0/24 maxlen: 24 185.100.84.0/23 maxlen: 23 185.100.86.0/24 maxlen: 24 185.100.87.0/24 maxlen: 24 185.146.232.0/24 maxlen: 24 185.146.233.0/24 maxlen: 24 185.146.234.0/24 maxlen: 24 185.165.168.0/24 maxlen: 24 185.165.169.0/24 maxlen: 24 185.165.170.0/24 maxlen: 24 185.165.171.0/24 maxlen: 24 185.246.188.0/24 maxlen: 24 185.246.189.0/24 maxlen: 24 185.246.190.0/24 maxlen: 24 185.246.191.0/24 maxlen: 24 185.247.224.0/24 maxlen: 24 185.247.225.0/24 maxlen: 24 185.247.226.0/24 maxlen: 24 2a06:1700::/48 maxlen: 48 2a06:1700:1::/48 maxlen: 48 2a06:1700:2::/48 maxlen: 48 2a06:1700:3::/48 maxlen: 48 2a06:1700:4::/48 maxlen: 48 2a06:1700:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:27:36:c4:f8:04:4c:c0:d0:9d:4d:a3:ce:a6:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7 Validity Not Before: Jan 2 10:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ab2cbf9d5fb11ecd4c678693e6600e99d5b761d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:89:0f:28:c4:25:69:6e:cd:ad:de:55:86:2b: 5e:60:04:f7:03:80:45:7a:6b:6d:a8:12:3c:53:a6: 8a:a2:d6:58:e1:8b:a3:2d:7c:15:f2:4d:39:77:a3: a8:d8:70:6d:52:e5:72:3d:47:8e:73:f4:0c:db:8e: 7a:1e:f1:a5:5e:47:52:23:8e:7a:5f:a4:9c:e4:2c: 57:fb:10:a7:5b:c0:d7:3c:33:da:fd:f1:90:c1:c1: f8:98:e8:a0:f0:5f:e6:a4:33:83:57:bd:6b:e3:bd: d7:ac:87:5b:f4:9b:c5:48:55:0a:f4:44:bb:57:4b: b9:0f:09:10:f7:41:0b:68:42:10:94:a3:c6:84:bf: 57:f5:c4:af:0a:12:9d:d2:2c:98:e0:a6:d2:7f:a0: d4:fa:20:b4:1b:c1:cc:5e:9c:9b:a5:f8:7f:8d:6a: ed:c4:ed:ce:45:83:54:6f:03:0d:90:53:1d:cd:5a: e0:3e:ca:b7:80:fb:dc:90:da:6b:0e:17:01:c0:a0: f4:1b:07:e8:fa:1a:aa:d5:60:b5:5c:dc:63:01:10: 73:0f:2f:6b:82:8e:fd:25:6b:32:a6:60:cf:0d:16: e1:50:60:8b:91:3b:6d:a1:55:32:02:b1:ed:25:54: 96:1d:56:b3:c4:bf:5d:f5:ac:02:2a:09:a6:df:e4: 28:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B2:CB:F9:D5:FB:11:EC:D4:C6:78:69:3E:66:00:E9:9D:5B:76:1D X509v3 Authority Key Identifier: keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/arLL-dX7EezUxnhpPmYA6Z1bdh0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.156.68.0/24 37.228.128.0/23 185.10.68.0/24 185.100.84.0/22 185.146.232.0-185.146.234.255 185.165.168.0/22 185.246.188.0/22 185.247.224.0-185.247.226.255 IPv6: 2a06:1700::-2a06:1700:4:ffff:ffff:ffff:ffff:ffff 2a06:1700:100::/48 Signature Algorithm: sha256WithRSAEncryption 47:ce:60:7a:de:88:55:11:b9:e8:c5:d4:43:60:cb:c3:a7:05: bb:86:b0:20:47:c0:ac:cf:50:21:8d:ee:bd:83:2e:1c:c9:52: d0:5c:95:d9:17:5a:dc:1d:59:72:b8:35:04:5b:f7:0e:6a:02: 35:27:62:15:fb:b4:a4:d9:17:da:dc:48:dd:f8:50:1b:b0:52: 6f:9e:b1:71:36:7e:b3:5d:f4:45:39:bd:33:a9:3e:f1:f7:2d: 70:34:c1:bf:48:2a:07:df:0e:9e:53:05:56:46:d2:72:f9:03: 9e:15:4b:e6:e3:a0:41:b0:25:f5:2c:a9:9e:55:ed:31:98:8b: 51:fb:14:48:57:68:45:0e:10:86:8a:28:13:18:5a:a5:63:84: 01:3f:53:43:b1:ec:fb:47:1a:c4:ea:db:5d:b9:a0:40:93:ee: 55:2f:17:7e:b5:f8:1f:49:4b:2d:ef:ac:54:12:eb:15:ac:1f: 1d:cb:95:e5:8c:ee:8a:2a:38:ca:59:49:c1:50:bb:b9:1a:62: 1e:d6:32:7c:75:9f:cc:70:94:68:27:38:01:b6:8c:18:2e:e7: ad:6b:16:aa:41:ed:7d:62:35:72:96:44:4f:c4:d2:48:d9:71: 35:d4:77:de:8f:3a:94:f2:95:9b:39:e4:fd:c4:85:7b:f3:15: 08:bd:5a:54 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgISAZt+OCc2xPgETMDQnU2jzqZzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMDA5ODIyODRhMDUwZDk0MWRiZWJiZDA0YjVkMGM5MTRm NjM1YjcwHhcNMjYwMTAyMTAxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWIyY2JmOWQ1ZmIxMWVjZDRjNjc4NjkzZTY2MDBlOTlkNWI3NjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6okPKMQlaW7Nrd5VhiteYAT3A4BF emttqBI8U6aKotZY4YujLXwV8k05d6Oo2HBtUuVyPUeOc/QM2456HvGlXkdSI456 X6Sc5CxX+xCnW8DXPDPa/fGQwcH4mOig8F/mpDODV71r473XrIdb9JvFSFUK9ES7 V0u5DwkQ90ELaEIQlKPGhL9X9cSvChKd0iyY4KbSf6DU+iC0G8HMXpybpfh/jWrt xO3ORYNUbwMNkFMdzVrgPsq3gPvckNprDhcBwKD0Gwfo+hqq1WC1XNxjARBzDy9r go79JWsypmDPDRbhUGCLkTttoVUyArHtJVSWHVazxL9d9awCKgmm3+QogQIDAQAB o4ICZTCCAmEwHQYDVR0OBBYEFGqyy/nV+xHs1MZ4aT5mAOmdW3YdMB8GA1UdIwQY MBaAFEIAmCKEoFDZQdvrvQS10MkU9jW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWdDWUlvU2dVTmxCMi11OUJMWFF5UlQyTmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9jNjg4MTktMmY5ZS00NGNlLTg4MTAt NTFkYzJiMDk2ZGVmLzEvYXJMTC1kWDdFZXpVeG5ocFBtWUE2WjFiZGgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9jNjg4MTktMmY5ZS00NGNlLTg4MTAtNTFkYzJiMDk2ZGVm LzEvUWdDWUlvU2dVTmxCMi11OUJMWFF5UlQyTmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBGBAIAATBAAwQAJZxEAwQB JeSAAwQAuQpEAwQCuWRUMAwDBAO5kugDBAC5kuoDBAK5pagDBAK59rwwDAMEBbn3 4AMEALn34jAgBAIAAjAaMA8DBAAqBhcDBwAqBhcAAAQDBwAqBhcAAQAwDQYJKoZI hvcNAQELBQADggEBAEfOYHreiFURuejF1ENgy8OnBbuGsCBHwKzPUCGN7r2DLhzJ UtBcldkXWtwdWXK4NQRb9w5qAjUnYhX7tKTZF9rcSN34UBuwUm+esXE2frNd9EU5 vTOpPvH3LXA0wb9IKgffDp5TBVZG0nL5A54VS+bjoEGwJfUsqZ5V7TGYi1H7FEhX aEUOEIaKKBMYWqVjhAE/U0Ox7PtHGsTq2125oECT7lUvF361+B9JSy3vrFQS6xWs Hx3LleWM7ooqOMpZScFQu7kaYh7WMnx1n8xwlGgnOAG2jBgu561rFqpB7X1iNXKW RE/E0kjZcTXUd96POpTylZs55P3EhXvzFQi9WlQ= -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:09 2026 by rpki-client