This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/i0Opx7elnQLrytJFk1gVJFatVmw.roa File: i0Opx7elnQLrytJFk1gVJFatVmw.roa (raw, json) Hash identifier: NjWTI7Ls1hzUuifszjZ9jtLVnxuLMN8Y2bX/MbcavFE= Subject key identifier: 8B:43:A9:C7:B7:A5:9D:02:EB:CA:D2:45:93:58:15:24:56:AD:56:6C Certificate issuer: /CN=a4f0bedb978e1928d1e970ca2ed96937118fff68 Certificate serial: 019B76EB9E3F378F3120F4F0940105200E21 Authority key identifier: A4:F0:BE:DB:97:8E:19:28:D1:E9:70:CA:2E:D9:69:37:11:8F:FF:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/i0Opx7elnQLrytJFk1gVJFatVmw.roa Signing time: Thu 01 Jan 2026 00:18:31 +0000 ROA not before: Thu 01 Jan 2026 00:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196752 IP address blocks: 37.252.120.0/21 maxlen: 24 46.19.32.0/21 maxlen: 24 46.19.36.0/22 maxlen: 24 84.22.96.0/19 maxlen: 24 84.22.96.0/22 maxlen: 24 84.22.100.0/23 maxlen: 24 84.22.118.0/23 maxlen: 24 84.22.122.0/24 maxlen: 24 91.213.195.0/24 maxlen: 24 164.138.24.0/21 maxlen: 24 164.138.30.0/23 maxlen: 24 185.24.220.0/22 maxlen: 24 2a02:2770::/32 maxlen: 32 2a02:2770::/48 maxlen: 48 2a02:2770:1::/48 maxlen: 48 2a02:2770:2::/48 maxlen: 48 2a02:2770:3::/48 maxlen: 48 2a02:2770:5::/48 maxlen: 48 2a02:2770:6::/48 maxlen: 48 2a02:2770:7::/48 maxlen: 48 2a02:2770:8::/48 maxlen: 48 2a02:2770:9::/48 maxlen: 48 2a02:2770:10::/48 maxlen: 48 2a02:2770:11::/48 maxlen: 48 2a02:2770:12::/48 maxlen: 48 2a02:2770:13::/48 maxlen: 48 2a02:2770:15::/48 maxlen: 48 2a02:2770:16::/48 maxlen: 48 2a02:2770:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.crl rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9e:3f:37:8f:31:20:f4:f0:94:01:05:20:0e:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f0bedb978e1928d1e970ca2ed96937118fff68 Validity Not Before: Jan 1 00:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b43a9c7b7a59d02ebcad2459358152456ad566c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e1:1e:1a:2c:40:93:55:39:f3:e2:62:56:e5: 62:02:59:63:f9:d4:55:6b:91:8b:24:ee:13:5b:01: 6d:e1:88:5d:dc:60:c0:3d:e4:53:32:72:cd:f9:f1: 82:03:e9:ba:ff:e9:dd:16:c0:10:69:0f:e5:fb:e2: 11:be:28:bd:1d:db:43:d3:cf:4e:03:94:44:07:30: 39:b3:d9:c8:07:61:9e:8b:3a:b2:c2:c9:40:af:ef: df:66:c5:ad:04:d1:07:6f:9c:67:2f:7c:06:c0:85: 51:ea:8b:de:b3:1a:2b:42:54:d6:f5:7d:6c:02:fb: b2:1e:0b:63:ad:3a:17:9a:d6:9d:87:b8:7d:a1:c5: dc:dd:96:b7:92:46:1c:96:6b:15:a1:28:53:10:c7: 7b:87:b8:13:d2:d7:59:e2:ea:16:58:7e:e7:f7:d6: 76:7c:cc:6a:ef:01:7b:e7:53:40:e1:de:0a:d7:20: 2f:40:8e:09:05:fd:e4:be:a9:69:bb:73:03:bc:76: b9:17:c2:0a:6c:ad:ad:74:78:06:71:d1:fe:9f:93: 3a:cc:eb:53:b2:8b:af:b9:e8:81:f3:32:8f:94:7a: cb:e1:59:b8:ea:2c:f2:ac:e8:4f:06:7c:54:f4:92: 6b:6d:9d:61:2d:66:76:59:2a:76:82:c4:ad:85:a1: 19:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:43:A9:C7:B7:A5:9D:02:EB:CA:D2:45:93:58:15:24:56:AD:56:6C X509v3 Authority Key Identifier: keyid:A4:F0:BE:DB:97:8E:19:28:D1:E9:70:CA:2E:D9:69:37:11:8F:FF:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/i0Opx7elnQLrytJFk1gVJFatVmw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.252.120.0/21 46.19.32.0/21 84.22.96.0/19 91.213.195.0/24 164.138.24.0/21 185.24.220.0/22 IPv6: 2a02:2770::/32 Signature Algorithm: sha256WithRSAEncryption 53:f9:1e:f8:7b:22:4d:47:d7:96:ca:d2:89:7e:7a:e0:d9:a7: 7f:14:e6:d4:6d:ae:62:fb:43:d0:08:20:af:85:e9:a8:fe:bc: 3b:b7:d4:02:a2:79:31:57:c0:80:0d:75:f6:85:0f:9f:84:60: fd:04:82:3e:b0:a1:fb:87:d4:e6:ba:59:5a:70:11:c6:51:03: 22:6b:d8:2b:b6:f0:5e:ef:bd:b0:1d:62:3f:6f:d4:e9:dc:8a: 02:db:bb:00:65:ab:a4:b7:dd:a3:36:29:e8:ff:c1:a4:10:19: 98:46:37:c3:37:82:8a:32:2c:82:8e:e0:ff:06:88:37:89:7f: 90:48:63:59:34:b9:9f:a8:07:f4:0c:d3:80:98:eb:a9:aa:41: a1:a1:a2:18:fa:70:d2:8c:b9:99:b0:d6:79:53:9a:6c:55:7e: 23:1d:21:19:29:b5:8b:81:9a:61:5e:7d:1b:b4:98:b3:b0:10: 82:13:2c:ce:d0:f3:bb:57:c5:4b:45:2f:cd:70:91:80:86:10: 7e:51:ca:a7:6f:ad:c7:e4:ac:50:67:00:87:67:a1:c1:bf:59: 0c:1f:1d:6d:5c:3e:8f:18:43:e1:e1:b1:cd:ba:5a:c7:38:5c: 88:eb:0d:1f:58:70:99:ac:1e:4a:94:eb:81:95:f0:9d:d1:66: 06:b8:18:d2 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt2654/N48xIPTwlAEFIA4hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZjBiZWRiOTc4ZTE5MjhkMWU5NzBjYTJlZDk2OTM3MTE4 ZmZmNjgwHhcNMjYwMTAxMDAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjQzYTljN2I3YTU5ZDAyZWJjYWQyNDU5MzU4MTUyNDU2YWQ1NjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeEeGixAk1U58+JiVuViAllj+dRV a5GLJO4TWwFt4Yhd3GDAPeRTMnLN+fGCA+m6/+ndFsAQaQ/l++IRvii9HdtD089O A5REBzA5s9nIB2GeizqywslAr+/fZsWtBNEHb5xnL3wGwIVR6ovesxorQlTW9X1s AvuyHgtjrToXmtadh7h9ocXc3Za3kkYclmsVoShTEMd7h7gT0tdZ4uoWWH7n99Z2 fMxq7wF751NA4d4K1yAvQI4JBf3kvqlpu3MDvHa5F8IKbK2tdHgGcdH+n5M6zOtT souvueiB8zKPlHrL4Vm46izyrOhPBnxU9JJrbZ1hLWZ2WSp2gsSthaEZ2wIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFItDqce3pZ0C68rSRZNYFSRWrVZsMB8GA1UdIwQY MBaAFKTwvtuXjhko0elwyi7ZaTcRj/9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBDLTI1ZU9HU2pSNlhES0x0bHBOeEdQXzJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kOGQ3MDUtNjJlZi00ZTY2LWI3ZTYt ZTgzZTVmZjYxOGRkLzEvaTBPcHg3ZWxuUUxyeXRKRmsxZ1ZKRmF0Vm13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9kOGQ3MDUtNjJlZi00ZTY2LWI3ZTYtZTgzZTVmZjYxOGRk LzEvcFBDLTI1ZU9HU2pSNlhES0x0bHBOeEdQXzJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDJfx4AwQD LhMgAwQFVBZgAwQAW9XDAwQDpIoYAwQCuRjcMA0EAgACMAcDBQAqAidwMA0GCSqG SIb3DQEBCwUAA4IBAQBT+R74eyJNR9eWytKJfnrg2ad/FObUba5i+0PQCCCvhemo /rw7t9QConkxV8CADXX2hQ+fhGD9BII+sKH7h9TmullacBHGUQMia9grtvBe772w HWI/b9Tp3IoC27sAZaukt92jNino/8GkEBmYRjfDN4KKMiyCjuD/Bog3iX+QSGNZ NLmfqAf0DNOAmOupqkGhoaIY+nDSjLmZsNZ5U5psVX4jHSEZKbWLgZphXn0btJiz sBCCEyzO0PO7V8VLRS/NcJGAhhB+Ucqnb63H5KxQZwCHZ6HBv1kMHx1tXD6PGEPh 4bHNulrHOFyI6w0fWHCZrB5KlOuBlfCd0WYGuBjS -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:21 2026 by rpki-client