This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/9Pwo7Ca64AS5wuLjjYW5Bcx-2iY.roa File: 9Pwo7Ca64AS5wuLjjYW5Bcx-2iY.roa (raw, json) Hash identifier: KlGL1317ayBy6hNLxnwdnsLxt72PcQk4H81AKDRosfI= Subject key identifier: F4:FC:28:EC:26:BA:E0:04:B9:C2:E2:E3:8D:85:B9:05:CC:7E:DA:26 Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18 Certificate serial: 019B7AC815AB2592D601CE6DD0D7D4C7C769 Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/9Pwo7Ca64AS5wuLjjYW5Bcx-2iY.roa Signing time: Thu 01 Jan 2026 18:18:11 +0000 ROA not before: Thu 01 Jan 2026 18:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24768 IP address blocks: 5.253.181.0/24 maxlen: 24 5.253.182.0/24 maxlen: 24 5.253.183.0/24 maxlen: 24 82.102.7.0/24 maxlen: 24 94.46.12.0/22 maxlen: 22 94.46.12.0/24 maxlen: 24 94.46.13.0/24 maxlen: 24 94.46.14.0/24 maxlen: 24 94.46.15.0/24 maxlen: 24 94.46.16.0/22 maxlen: 22 94.46.16.0/24 maxlen: 24 94.46.20.0/22 maxlen: 22 94.46.20.0/24 maxlen: 24 94.46.21.0/24 maxlen: 24 94.46.22.0/24 maxlen: 24 94.46.23.0/24 maxlen: 24 94.46.25.0/24 maxlen: 24 94.46.26.0/24 maxlen: 24 94.46.27.0/24 maxlen: 24 94.46.28.0/22 maxlen: 22 94.46.28.0/24 maxlen: 24 94.46.29.0/24 maxlen: 24 94.46.30.0/24 maxlen: 24 94.46.128.0/21 maxlen: 21 94.46.132.0/24 maxlen: 24 94.46.133.0/24 maxlen: 24 94.46.160.0/20 maxlen: 24 94.46.176.0/21 maxlen: 21 109.71.40.0/21 maxlen: 21 109.71.40.0/24 maxlen: 24 109.71.41.0/24 maxlen: 24 109.71.42.0/24 maxlen: 24 109.71.43.0/24 maxlen: 24 109.71.44.0/24 maxlen: 24 109.71.45.0/24 maxlen: 24 109.71.46.0/24 maxlen: 24 109.71.47.0/24 maxlen: 24 130.185.80.0/21 maxlen: 21 130.185.81.0/24 maxlen: 24 130.185.82.0/24 maxlen: 24 130.185.83.0/24 maxlen: 24 130.185.84.0/24 maxlen: 24 130.185.85.0/24 maxlen: 24 130.185.86.0/24 maxlen: 24 130.185.87.0/24 maxlen: 24 185.15.20.0/22 maxlen: 22 185.15.20.0/24 maxlen: 24 185.15.22.0/24 maxlen: 24 185.15.23.0/24 maxlen: 24 2a00:1650::/33 maxlen: 33 2a00:1650:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:15:ab:25:92:d6:01:ce:6d:d0:d7:d4:c7:c7:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3545a7200164912041bb931efb1feac123b43a18 Validity Not Before: Jan 1 18:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4fc28ec26bae004b9c2e2e38d85b905cc7eda26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4e:fd:96:9f:2c:5d:16:f2:5e:fd:d1:50:b9: 65:98:32:53:2f:11:c1:1d:96:25:b7:d2:e9:2b:00: 03:bf:20:29:5d:e9:1d:f1:6d:2d:c8:e2:a0:92:1b: c6:cd:e9:87:41:46:02:87:8f:47:40:5b:fe:f4:cc: 42:60:f5:06:35:2a:36:6a:54:ef:bb:0a:19:9c:d2: af:15:76:a2:f1:b6:56:73:8e:fa:e8:36:87:4a:1d: c7:97:e0:96:74:89:f1:13:e1:fd:37:20:09:e3:21: b9:98:35:00:25:2b:d8:d5:7b:f1:e4:ba:7c:ad:46: a2:8f:71:ce:13:26:13:c2:19:62:6d:d6:3f:b5:6b: 70:38:4c:ac:9d:88:4c:c1:76:0f:41:17:41:04:7f: 6f:2a:be:dd:9f:a8:e8:29:21:f6:19:ab:0c:d5:ce: 05:d8:62:35:b9:61:50:c3:9a:c4:fb:81:7b:03:73: da:97:87:b8:d9:9a:80:52:a6:ba:59:72:28:4c:ea: 44:43:7e:8d:fc:d6:76:9f:d3:e7:69:0d:8e:76:92: 55:70:a8:d5:65:f7:64:19:26:38:44:04:05:dd:a6: 22:13:67:82:07:cb:d7:d4:11:7e:29:21:ef:84:cd: cb:43:11:bc:a9:ef:7f:77:cb:cd:17:f9:9a:85:8e: ca:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:FC:28:EC:26:BA:E0:04:B9:C2:E2:E3:8D:85:B9:05:CC:7E:DA:26 X509v3 Authority Key Identifier: keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/9Pwo7Ca64AS5wuLjjYW5Bcx-2iY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.181.0-5.253.183.255 82.102.7.0/24 94.46.12.0-94.46.23.255 94.46.25.0-94.46.31.255 94.46.128.0/21 94.46.160.0-94.46.183.255 109.71.40.0/21 130.185.80.0/21 185.15.20.0/22 IPv6: 2a00:1650::/32 Signature Algorithm: sha256WithRSAEncryption 85:1b:88:db:a8:16:0d:1f:d6:eb:da:ee:96:98:b0:96:84:a4: 0b:d2:6f:5c:6e:ac:e8:c5:c6:a0:44:86:de:00:4d:6a:c6:9a: 90:af:1d:62:06:6f:6b:f1:85:fa:50:f7:e9:41:cc:8f:e3:49: ba:21:7c:d6:45:83:61:8d:98:df:1a:ca:24:f7:14:76:4a:21: b3:5d:6a:51:a8:dd:20:1f:1c:92:04:a2:01:bc:0a:4d:01:fa: ab:69:65:f9:c3:68:2c:70:5b:ab:69:ea:11:d4:4f:4b:ca:9f: 9c:74:a0:08:af:61:31:36:9d:c5:fe:73:39:ed:21:02:45:d1: db:5c:97:a8:2f:54:30:48:6b:02:2d:21:6f:85:09:29:b4:1c: c0:70:c3:d1:15:81:df:65:54:a0:af:08:b5:da:b9:66:01:b0: 38:48:fd:46:68:70:eb:ea:6c:c9:22:c2:fe:13:2b:2e:87:5a: c5:cd:8f:3b:ad:1e:96:75:cb:ce:e6:92:09:97:09:49:4a:ad: 75:fd:dc:f7:97:6e:3b:38:c2:34:68:c7:6b:bd:c1:98:e6:01: 68:c7:26:fc:0f:27:fb:4f:be:2d:a6:cc:3f:03:c6:c5:aa:b9: d7:17:68:c8:fd:e3:4f:0a:85:a5:32:c6:9d:a1:6a:44:57:3f: 70:07:93:6d -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgISAZt6yBWrJZLWAc5t0NfUx8dpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NDVhNzIwMDE2NDkxMjA0MWJiOTMxZWZiMWZlYWMxMjNi NDNhMTgwHhcNMjYwMTAxMTgxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGZjMjhlYzI2YmFlMDA0YjljMmUyZTM4ZDg1YjkwNWNjN2VkYTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE79lp8sXRbyXv3RULllmDJTLxHB HZYlt9LpKwADvyApXekd8W0tyOKgkhvGzemHQUYCh49HQFv+9MxCYPUGNSo2alTv uwoZnNKvFXai8bZWc4766DaHSh3Hl+CWdInxE+H9NyAJ4yG5mDUAJSvY1Xvx5Lp8 rUaij3HOEyYTwhlibdY/tWtwOEysnYhMwXYPQRdBBH9vKr7dn6joKSH2GasM1c4F 2GI1uWFQw5rE+4F7A3Pal4e42ZqAUqa6WXIoTOpEQ36N/NZ2n9PnaQ2OdpJVcKjV ZfdkGSY4RAQF3aYiE2eCB8vX1BF+KSHvhM3LQxG8qe9/d8vNF/mahY7KvQIDAQAB o4ICaDCCAmQwHQYDVR0OBBYEFPT8KOwmuuAEucLi442FuQXMftomMB8GA1UdIwQY MBaAFDVFpyABZJEgQbuTHvsf6sEjtDoYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDkt YWFiYjA2MmU0MGRiLzEvOVB3bzdDYTY0QVM1d3VMampZVzVCY3gtMmlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDktYWFiYjA2MmU0MGRi LzEvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH4GCCsGAQUFBwEHAQH/BG8wbTBcBAIAATBWMAwDBAAF/bUD BAMF/bADBABSZgcwDAMEAl4uDAMEA14uEDAMAwQAXi4ZAwQFXi4AAwQDXi6AMAwD BAVeLqADBANeLrADBANtRygDBAOCuVADBAK5DxQwDQQCAAIwBwMFACoAFlAwDQYJ KoZIhvcNAQELBQADggEBAIUbiNuoFg0f1uva7paYsJaEpAvSb1xurOjFxqBEht4A TWrGmpCvHWIGb2vxhfpQ9+lBzI/jSbohfNZFg2GNmN8ayiT3FHZKIbNdalGo3SAf HJIEogG8Ck0B+qtpZfnDaCxwW6tp6hHUT0vKn5x0oAivYTE2ncX+czntIQJF0dtc l6gvVDBIawItIW+FCSm0HMBww9EVgd9lVKCvCLXauWYBsDhI/UZocOvqbMkiwv4T Ky6HWsXNjzutHpZ1y87mkgmXCUlKrXX93PeXbjs4wjRox2u9wZjmAWjHJvwPJ/tP vi2mzD8DxsWqudcXaMj9408KhaUyxp2hakRXP3AHk20= -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:13 2026 by rpki-client