This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/tXwPHcD7KOQpl4ubBwGZXMLcNGc.roa File: tXwPHcD7KOQpl4ubBwGZXMLcNGc.roa (raw, json) Hash identifier: kHVmMcCLDSaK/L8IsfRUQoLqMYtr8aRP/Gpfi71r/IU= Subject key identifier: B5:7C:0F:1D:C0:FB:28:E4:29:97:8B:9B:07:01:99:5C:C2:DC:34:67 Certificate issuer: /CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720 Certificate serial: 019B7F83B032EBAAEF9B72F20F42D4B744D4 Authority key identifier: 1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/tXwPHcD7KOQpl4ubBwGZXMLcNGc.roa Signing time: Fri 02 Jan 2026 16:21:34 +0000 ROA not before: Fri 02 Jan 2026 16:21:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13101 IP address blocks: 80.66.192.0/22 maxlen: 22 113.30.180.0/22 maxlen: 22 113.30.220.0/22 maxlen: 22 185.152.144.0/22 maxlen: 22 185.181.128.0/22 maxlen: 22 207.22.56.0/21 maxlen: 21 217.26.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:b0:32:eb:aa:ef:9b:72:f2:0f:42:d4:b7:44:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720 Validity Not Before: Jan 2 16:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b57c0f1dc0fb28e429978b9b0701995cc2dc3467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6a:2f:86:ec:e1:d9:e4:8c:83:32:44:f5:a6: 9d:77:47:5a:49:75:91:0c:2b:1a:d5:70:c4:c4:0c: 44:a7:b4:92:e7:e3:ea:71:09:ae:5f:e8:0a:31:0a: a4:1f:2f:b5:a9:48:e0:c8:6c:e6:f8:8e:fb:ad:b8: ec:c2:51:63:72:ab:c1:6a:be:05:57:3c:b8:5a:41: 13:45:e3:0f:9e:b5:c3:b9:0b:65:1f:91:a6:c2:3c: 73:d7:e6:21:13:79:7b:68:38:07:b6:10:f5:de:8a: ac:9e:82:fd:17:84:cd:56:9d:37:c5:e4:4c:e1:4e: ae:c8:bc:ca:6d:ec:3d:1c:b8:94:40:14:29:f4:10: 4d:b1:09:4f:94:1e:4c:50:4e:0b:8b:d9:11:92:8a: ea:3d:98:4e:2b:db:da:df:24:45:54:cf:76:7c:fe: b7:d6:ca:88:ce:39:c2:65:b7:f7:e0:2b:b2:4a:46: 31:d3:38:b6:6a:f4:f1:37:e2:3e:5e:14:7f:d7:76: 44:46:12:67:53:e7:e9:e4:61:bd:a0:03:9d:49:9d: 0f:95:39:2a:ad:c0:6e:5d:1b:00:44:81:0a:88:46: c6:43:e6:a6:05:de:35:72:0f:8e:18:d2:58:6c:67: bc:f0:10:89:68:e2:35:7c:5d:75:3f:40:63:91:cf: d9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7C:0F:1D:C0:FB:28:E4:29:97:8B:9B:07:01:99:5C:C2:DC:34:67 X509v3 Authority Key Identifier: keyid:1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/tXwPHcD7KOQpl4ubBwGZXMLcNGc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.66.192.0/22 113.30.180.0/22 113.30.220.0/22 185.152.144.0/22 185.181.128.0/22 207.22.56.0/21 217.26.232.0/21 Signature Algorithm: sha256WithRSAEncryption 1a:0e:f3:b1:48:6a:2f:20:bd:29:da:d3:60:5b:e9:d8:5f:a9: 67:77:e9:a4:f1:68:96:10:37:32:92:2d:28:b8:59:47:ba:6b: 9f:7b:d6:1f:88:ed:51:6f:6c:89:a6:35:f1:e3:c1:6d:ba:8e: 26:78:b2:12:85:98:f3:c7:96:b6:41:62:19:40:76:90:c0:73: 46:7c:42:bd:fa:b4:0b:54:f9:6f:9a:77:f5:a6:90:1b:dc:17: 6c:81:15:b4:c4:60:a0:04:9a:69:05:af:93:d0:85:dd:72:3f: 50:bc:7d:d6:d3:6d:a6:ac:41:f2:a0:17:70:e4:88:4e:db:bb: 8a:b0:a1:5b:31:58:6e:e8:77:4a:28:f4:35:28:08:8e:2a:36: f2:3c:cc:61:58:c8:80:65:cd:65:93:da:57:b1:27:cd:4a:31: 1c:46:b2:b2:66:4e:69:75:87:f8:61:f5:3e:a4:3c:cb:1c:0d: aa:3f:b9:10:93:8a:f1:54:98:ec:c1:85:8e:2f:cf:aa:dc:63: 6e:1c:b2:ab:fe:d3:af:d1:e5:1a:10:17:40:55:30:a8:7b:c2: e1:a3:f5:1c:8d:14:39:64:30:c0:a1:27:c7:2a:52:c2:9c:5a: e8:23:ab:e7:3e:4a:f6:c5:00:36:04:39:9d:f5:0f:66:08:4b: d8:c0:ae:5c -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt/g7Ay66rvm3LyD0LUt0TUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZGJjNDExNDQ0NDgwNjUzMTNlZjBiODJlMWNjZjdhZTZl YTU3MjAwHhcNMjYwMTAyMTYyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTdjMGYxZGMwZmIyOGU0Mjk5NzhiOWIwNzAxOTk1Y2MyZGMzNDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGovhuzh2eSMgzJE9aadd0daSXWR DCsa1XDExAxEp7SS5+PqcQmuX+gKMQqkHy+1qUjgyGzm+I77rbjswlFjcqvBar4F Vzy4WkETReMPnrXDuQtlH5Gmwjxz1+YhE3l7aDgHthD13oqsnoL9F4TNVp03xeRM 4U6uyLzKbew9HLiUQBQp9BBNsQlPlB5MUE4Li9kRkorqPZhOK9va3yRFVM92fP63 1sqIzjnCZbf34CuySkYx0zi2avTxN+I+XhR/13ZERhJnU+fp5GG9oAOdSZ0PlTkq rcBuXRsARIEKiEbGQ+amBd41cg+OGNJYbGe88BCJaOI1fF11P0Bjkc/ZkQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFLV8Dx3A+yjkKZeLmwcBmVzC3DRnMB8GA1UdIwQY MBaAFBvbxBFERIBlMT7wuC4cz3rm6lcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzl2RUVVUkVnR1V4UHZDNExoelBldWJxVnlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80YTI5M2ItNGM0MS00MjhjLTkyODct YmQ5OGIzZTkwZTQzLzEvdFh3UEhjRDdLT1FwbDR1YkJ3R1pYTUxjTkdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy80YTI5M2ItNGM0MS00MjhjLTkyODctYmQ5OGIzZTkwZTQz LzEvRzl2RUVVUkVnR1V4UHZDNExoelBldWJxVnlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCUELAAwQC cR60AwQCcR7cAwQCuZiQAwQCubWAAwQDzxY4AwQD2RroMA0GCSqGSIb3DQEBCwUA A4IBAQAaDvOxSGovIL0p2tNgW+nYX6lnd+mk8WiWEDcyki0ouFlHumufe9YfiO1R b2yJpjXx48Ftuo4meLIShZjzx5a2QWIZQHaQwHNGfEK9+rQLVPlvmnf1ppAb3Bds gRW0xGCgBJppBa+T0IXdcj9QvH3W022mrEHyoBdw5IhO27uKsKFbMVhu6HdKKPQ1 KAiOKjbyPMxhWMiAZc1lk9pXsSfNSjEcRrKyZk5pdYf4YfU+pDzLHA2qP7kQk4rx VJjswYWOL8+q3GNuHLKr/tOv0eUaEBdAVTCoe8Lho/UcjRQ5ZDDAoSfHKlLCnFro I6vnPkr2xQA2BDmd9Q9mCEvYwK5c -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:10 2026 by rpki-client