This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/rXAKYgvNCxNYHLVUiPKumhUgFdA.roa File: rXAKYgvNCxNYHLVUiPKumhUgFdA.roa (raw, json) Hash identifier: QwI/CURdPgAcJ5pZC863YtCdDvn1JRCVbK5OYuNsc/o= Subject key identifier: AD:70:0A:62:0B:CD:0B:13:58:1C:B5:54:88:F2:AE:9A:15:20:15:D0 Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Certificate serial: 019B7B35B5CAC48E29D085903D3EBD2ADCD8 Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/rXAKYgvNCxNYHLVUiPKumhUgFdA.roa Signing time: Thu 01 Jan 2026 20:17:55 +0000 ROA not before: Thu 01 Jan 2026 20:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 31.164.0.0/15 maxlen: 16 62.167.0.0/16 maxlen: 16 62.167.0.0/17 maxlen: 17 62.167.128.0/17 maxlen: 17 84.226.0.0/15 maxlen: 16 89.217.0.0/16 maxlen: 16 89.217.0.0/17 maxlen: 17 89.217.128.0/17 maxlen: 17 178.38.0.0/15 maxlen: 16 188.154.0.0/15 maxlen: 16 193.192.224.0/19 maxlen: 19 194.158.224.0/19 maxlen: 19 194.230.0.0/16 maxlen: 16 194.230.0.0/17 maxlen: 17 194.230.128.0/17 maxlen: 17 195.112.64.0/19 maxlen: 19 195.141.0.0/16 maxlen: 16 212.35.32.0/19 maxlen: 19 212.98.32.0/19 maxlen: 19 212.161.128.0/17 maxlen: 17 2001:1700::/27 maxlen: 27 2001:1700::/28 maxlen: 28 2001:1710::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:b5:ca:c4:8e:29:d0:85:90:3d:3e:bd:2a:dc:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Validity Not Before: Jan 1 20:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad700a620bcd0b13581cb55488f2ae9a152015d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:64:4b:f1:39:b5:a1:ea:e7:39:76:b2:98:d9: 62:cd:50:e5:f1:74:13:7e:77:b8:6e:06:2d:02:50: a5:f8:e5:f3:06:ae:f3:65:ff:48:0d:1b:59:ed:db: a7:3d:fb:6e:33:43:56:4a:c9:89:b0:fb:34:14:7d: 84:e5:8e:cf:9a:06:96:c1:f3:67:52:64:2b:23:39: 57:2f:32:e1:69:a6:12:9b:64:cc:41:41:61:d8:ba: 8a:a8:cf:00:b5:49:c9:70:60:a2:86:30:d3:42:b0: c0:12:7d:ba:e5:a2:f5:43:df:28:ce:e0:94:c4:b2: 6c:f5:1d:7c:6d:17:d0:3a:a5:14:3e:64:6b:8b:7d: 33:db:66:3d:b4:ae:65:69:2e:41:f5:f5:d9:3b:a9: 1e:a4:98:56:d5:04:35:f7:06:e8:39:65:26:dd:1c: bc:6c:0d:98:97:06:c0:0c:9a:39:06:00:79:b3:3e: e1:31:bd:b7:a5:06:5c:98:fe:b2:d7:f0:5e:13:f5: 46:9f:c7:bb:76:45:6b:c4:d3:0e:fc:00:d5:24:4f: 33:ad:bd:62:70:be:b2:97:68:58:be:c5:46:47:33: 46:13:a9:9b:33:52:00:95:90:26:db:41:37:07:ee: 62:17:a8:76:5c:f2:95:c4:70:a9:4d:b0:95:23:6d: 07:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:70:0A:62:0B:CD:0B:13:58:1C:B5:54:88:F2:AE:9A:15:20:15:D0 X509v3 Authority Key Identifier: keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/rXAKYgvNCxNYHLVUiPKumhUgFdA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.164.0.0/15 62.167.0.0/16 84.226.0.0/15 89.217.0.0/16 178.38.0.0/15 188.154.0.0/15 193.192.224.0/19 194.158.224.0/19 194.230.0.0/16 195.112.64.0/19 195.141.0.0/16 212.35.32.0/19 212.98.32.0/19 212.161.128.0/17 IPv6: 2001:1700::/27 Signature Algorithm: sha256WithRSAEncryption 7f:e4:08:22:6d:24:31:d0:30:2e:c6:8e:fb:03:d9:4b:02:0e: d7:71:1d:ab:3f:83:55:ff:9e:19:78:dc:1f:78:b3:c7:08:96: 65:bd:9c:02:b8:b1:fb:e7:44:b0:c0:45:6d:7f:25:2a:f4:4b: c6:ac:5c:c9:84:f2:bc:9e:78:90:be:66:17:65:fc:27:03:b1: 93:cc:f5:75:82:39:3e:a2:51:96:0c:59:bb:d8:88:71:ef:72: ea:51:a0:fb:11:1c:cd:5f:c6:c5:6a:ce:7a:eb:6b:5c:65:4b: f5:b2:10:96:64:d6:c1:7c:34:8e:57:d5:86:6d:20:7b:13:50: 31:39:42:bb:46:81:e4:b7:77:eb:7d:a2:18:54:25:5d:e2:af: 91:dc:d4:22:63:0e:1c:44:42:bf:49:1f:18:97:06:1c:ea:99: 46:d5:71:43:5e:82:50:ff:2a:4b:f7:f2:c5:83:18:ce:7f:c7: 00:2b:f4:91:6c:8c:d6:37:de:2a:b7:0b:a1:83:cd:bb:c2:a9: 30:99:00:d9:87:03:3d:61:b2:21:61:fe:54:24:cf:78:03:44: 6e:63:88:73:bc:35:2e:bd:81:75:7e:e5:a4:4a:12:12:c9:b7: 12:be:2f:4f:b5:66:81:8c:b6:2f:1b:8e:a5:6e:11:a5:d1:c0: 12:96:34:1e -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgISAZt7NbXKxI4p0IWQPT69KtzYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNWRiYzAwNDMzZTI5ZjJhZGViMDM4ZmVhMmZiZDcwNDhm YjYzMmYwHhcNMjYwMTAxMjAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDcwMGE2MjBiY2QwYjEzNTgxY2I1NTQ4OGYyYWU5YTE1MjAxNWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2RL8Tm1oernOXaymNlizVDl8XQT fne4bgYtAlCl+OXzBq7zZf9IDRtZ7dunPftuM0NWSsmJsPs0FH2E5Y7PmgaWwfNn UmQrIzlXLzLhaaYSm2TMQUFh2LqKqM8AtUnJcGCihjDTQrDAEn265aL1Q98ozuCU xLJs9R18bRfQOqUUPmRri30z22Y9tK5laS5B9fXZO6kepJhW1QQ19wboOWUm3Ry8 bA2YlwbADJo5BgB5sz7hMb23pQZcmP6y1/BeE/VGn8e7dkVrxNMO/ADVJE8zrb1i cL6yl2hYvsVGRzNGE6mbM1IAlZAm20E3B+5iF6h2XPKVxHCpTbCVI20HGwIDAQAB o4ICXjCCAlowHQYDVR0OBBYEFK1wCmILzQsTWBy1VIjyrpoVIBXQMB8GA1UdIwQY MBaAFBFdvABDPinyresDj+ovvXBI+2MvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTkt MjI5YjRhZTc0MmRlLzEvclhBS1lndk5DeE5ZSExWVWlQS3VtaFVnRmRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTktMjI5YjRhZTc0MmRl LzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHQGCCsGAQUFBwEHAQH/BGUwYzBSBAIAATBMAwMBH6QDAwA+ pwMDAVTiAwMAWdkDAwGyJgMDAbyaAwQFwcDgAwQFwp7gAwMAwuYDBAXDcEADAwDD jQMEBdQjIAMEBdRiIAMEB9ShgDANBAIAAjAHAwUFIAEXADANBgkqhkiG9w0BAQsF AAOCAQEAf+QIIm0kMdAwLsaO+wPZSwIO13Edqz+DVf+eGXjcH3izxwiWZb2cArix ++dEsMBFbX8lKvRLxqxcyYTyvJ54kL5mF2X8JwOxk8z1dYI5PqJRlgxZu9iIce9y 6lGg+xEczV/GxWrOeutrXGVL9bIQlmTWwXw0jlfVhm0gexNQMTlCu0aB5Ld3632i GFQlXeKvkdzUImMOHERCv0kfGJcGHOqZRtVxQ16CUP8qS/fyxYMYzn/HACv0kWyM 1jfeKrcLoYPNu8KpMJkA2YcDPWGyIWH+VCTPeANEbmOIc7w1Lr2BdX7lpEoSEsm3 Er4vT7VmgYy2LxuOpW4RpdHAEpY0Hg== -----END CERTIFICATE-----Generated at Sat Jan 3 00:54:49 2026 by rpki-client