This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/dNleK7oqqS4JYOVbb6S3XLVUiBA.roa File: dNleK7oqqS4JYOVbb6S3XLVUiBA.roa (raw, json) Hash identifier: eOgBYtYMR3J+l0721Hpv5YsWUbXa/qSUakud5H58TI8= Subject key identifier: 74:D9:5E:2B:BA:2A:A9:2E:09:60:E5:5B:6F:A4:B7:5C:B5:54:88:10 Certificate issuer: /CN=ae501827144a3188bea1ccee58656fd6429d8f95 Certificate serial: 019B7F1478F765E63A5C26E117B5B2BB205A Authority key identifier: AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/dNleK7oqqS4JYOVbb6S3XLVUiBA.roa Signing time: Fri 02 Jan 2026 14:20:06 +0000 ROA not before: Fri 02 Jan 2026 14:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48152 IP address blocks: 137.221.32.0/19 maxlen: 24 149.137.212.0/22 maxlen: 22 149.137.214.0/24 maxlen: 24 149.137.215.0/24 maxlen: 24 185.173.76.0/22 maxlen: 24 2a0b:3d00::/30 maxlen: 48 2a0b:3d04::/30 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:78:f7:65:e6:3a:5c:26:e1:17:b5:b2:bb:20:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae501827144a3188bea1ccee58656fd6429d8f95 Validity Not Before: Jan 2 14:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74d95e2bba2aa92e0960e55b6fa4b75cb5548810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e6:04:28:8e:70:83:d9:7f:f6:d9:8e:92:e1: 4c:47:1e:02:3f:f6:08:c1:54:77:ed:ae:99:02:50: 40:5f:62:61:87:5b:1d:7e:0a:77:24:19:f4:74:04: 22:3c:4b:23:0e:4a:69:76:6b:f3:8a:20:75:52:c8: 1a:f7:fa:e7:7e:dd:09:fc:32:7d:1c:e0:fb:f6:d6: bf:46:ac:72:ab:b4:45:27:30:17:fd:27:67:70:13: d7:d7:ac:d3:c6:5d:26:64:4b:55:f5:55:9b:f7:8e: b5:38:60:84:34:6c:68:f6:64:ad:98:b3:3b:b0:1e: db:f7:1e:e7:70:b8:f9:d6:2d:76:e7:92:fc:4c:23: 39:7f:e8:71:83:45:85:b4:28:7d:32:0d:c4:f6:cb: 4a:8b:c8:2a:a5:ee:d8:a6:c6:40:a3:4f:76:3e:16: eb:f9:81:3a:4e:34:b2:09:e6:5f:98:f8:6f:af:c7: 65:26:ab:6b:d5:c8:44:15:5c:7a:69:14:ab:e5:cd: 66:c9:09:8f:3b:45:2b:3a:87:d2:51:a3:ca:88:5e: b0:93:b8:ef:35:62:8d:f9:fe:9f:04:18:b9:20:7d: 52:53:43:da:ce:36:e9:f4:88:74:e1:da:d8:be:ef: a3:d3:4b:d0:c4:fd:6d:38:d3:9e:b6:bb:d5:03:0f: a7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D9:5E:2B:BA:2A:A9:2E:09:60:E5:5B:6F:A4:B7:5C:B5:54:88:10 X509v3 Authority Key Identifier: keyid:AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/dNleK7oqqS4JYOVbb6S3XLVUiBA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 137.221.32.0/19 149.137.212.0/22 185.173.76.0/22 IPv6: 2a0b:3d00::/29 Signature Algorithm: sha256WithRSAEncryption b5:ac:04:ac:57:00:48:79:35:e0:da:39:9c:bd:1f:86:0a:4e: 34:98:cf:75:82:be:33:0e:ee:3f:8e:6b:58:0f:2c:60:fe:54: a3:54:8b:48:5d:77:cd:e5:69:83:0d:b3:4c:69:e5:ba:5f:68: d9:26:a3:23:ba:b5:a6:f4:3a:cd:6d:23:04:d1:4f:37:3e:6a: d3:cf:af:ce:63:77:72:e6:77:0e:17:0a:d7:04:da:c7:f4:53: b8:23:b8:1e:b2:48:56:9d:6e:9d:65:64:d1:4d:e7:2a:86:32: b2:52:3d:77:74:75:33:7b:85:f1:c5:08:56:6a:80:b2:8a:c4: 73:c8:79:54:02:96:2d:ea:44:af:8b:15:87:77:ad:e6:9d:e4: ec:57:f7:94:1d:d9:8a:0f:cf:b9:53:19:d9:ad:80:3f:40:36: da:6d:b1:9a:6d:5d:97:2f:bc:6c:55:54:9e:87:5f:31:ba:22: d1:fc:44:fe:ef:24:78:36:59:e6:b7:c9:b0:e5:ef:86:8c:43: b1:bd:0c:d2:a8:8e:42:7e:74:75:4c:36:d4:e4:b9:06:ee:2a: e0:ca:40:05:7e:b6:18:a6:e6:e4:d0:b5:0f:6b:00:d7:e2:48: 09:79:10:2b:cc:b0:6e:a3:75:10:4a:26:c8:2c:2f:87:b2:cb: 7a:af:97:04 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/FHj3ZeY6XCbhF7WyuyBaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNTAxODI3MTQ0YTMxODhiZWExY2NlZTU4NjU2ZmQ2NDI5 ZDhmOTUwHhcNMjYwMTAyMTQyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGQ5NWUyYmJhMmFhOTJlMDk2MGU1NWI2ZmE0Yjc1Y2I1NTQ4ODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueYEKI5wg9l/9tmOkuFMRx4CP/YI wVR37a6ZAlBAX2Jhh1sdfgp3JBn0dAQiPEsjDkppdmvziiB1Usga9/rnft0J/DJ9 HOD79ta/Rqxyq7RFJzAX/SdncBPX16zTxl0mZEtV9VWb9461OGCENGxo9mStmLM7 sB7b9x7ncLj51i1255L8TCM5f+hxg0WFtCh9Mg3E9stKi8gqpe7YpsZAo092Phbr +YE6TjSyCeZfmPhvr8dlJqtr1chEFVx6aRSr5c1myQmPO0UrOofSUaPKiF6wk7jv NWKN+f6fBBi5IH1SU0Pazjbp9Ih04drYvu+j00vQxP1tONOetrvVAw+nHQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFHTZXiu6KqkuCWDlW2+kt1y1VIgQMB8GA1UdIwQY MBaAFK5QGCcUSjGIvqHM7lhlb9ZCnY+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmxBWUp4UktNWWktb2N6dVdHVnYxa0tkajVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81ZjU2YWYtZWJmYi00Yzg4LWEwODIt MDk4NmQ4YjBjNmQ5LzEvZE5sZUs3b3FxUzRKWU9WYmI2UzNYTFZVaUJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC81ZjU2YWYtZWJmYi00Yzg4LWEwODItMDk4NmQ4YjBjNmQ5 LzEvcmxBWUp4UktNWWktb2N6dVdHVnYxa0tkajVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFid0gAwQC lYnUAwQCua1MMA0EAgACMAcDBQMqCz0AMA0GCSqGSIb3DQEBCwUAA4IBAQC1rASs VwBIeTXg2jmcvR+GCk40mM91gr4zDu4/jmtYDyxg/lSjVItIXXfN5WmDDbNMaeW6 X2jZJqMjurWm9DrNbSME0U83PmrTz6/OY3dy5ncOFwrXBNrH9FO4I7geskhWnW6d ZWTRTecqhjKyUj13dHUze4XxxQhWaoCyisRzyHlUApYt6kSvixWHd63mneTsV/eU HdmKD8+5UxnZrYA/QDbabbGabV2XL7xsVVSeh18xuiLR/ET+7yR4Nlnmt8mw5e+G jEOxvQzSqI5CfnR1TDbU5LkG7irgykAFfrYYpubk0LUPawDX4kgJeRArzLBuo3UQ SibILC+Hsst6r5cE -----END CERTIFICATE-----Generated at Mon Jan 26 16:23:27 2026 by rpki-client