This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/V78nEVrkCr-6qVq2YThSOW0v9hQ.roa File: V78nEVrkCr-6qVq2YThSOW0v9hQ.roa (raw, json) Hash identifier: xNhsyzIzttzlPtpbDSsbaMS/afTumd4QgcW09/sybCo= Subject key identifier: 57:BF:27:11:5A:E4:0A:BF:BA:A9:5A:B6:61:38:52:39:6D:2F:F6:14 Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe Certificate serial: 019B797EF61665FF5E1F9E5C3FC7E299C29A Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/V78nEVrkCr-6qVq2YThSOW0v9hQ.roa Signing time: Thu 01 Jan 2026 12:18:42 +0000 ROA not before: Thu 01 Jan 2026 12:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 82.199.208.0/24 maxlen: 24 82.199.209.0/24 maxlen: 24 82.199.210.0/24 maxlen: 24 82.199.211.0/24 maxlen: 24 82.199.212.0/24 maxlen: 24 82.199.213.0/24 maxlen: 24 82.199.214.0/24 maxlen: 24 82.199.215.0/24 maxlen: 24 82.199.216.0/24 maxlen: 24 82.199.217.0/24 maxlen: 24 82.199.218.0/24 maxlen: 24 82.199.219.0/24 maxlen: 24 82.199.220.0/24 maxlen: 24 82.199.221.0/24 maxlen: 24 89.46.200.0/24 maxlen: 24 89.46.201.0/24 maxlen: 24 89.46.202.0/24 maxlen: 24 89.46.203.0/24 maxlen: 24 89.46.204.0/24 maxlen: 24 89.46.205.0/24 maxlen: 24 89.46.206.0/24 maxlen: 24 89.46.207.0/24 maxlen: 24 185.16.26.0/24 maxlen: 24 185.95.204.0/24 maxlen: 24 185.95.205.0/24 maxlen: 24 185.247.36.0/24 maxlen: 24 185.247.37.0/24 maxlen: 24 185.247.38.0/24 maxlen: 24 185.247.39.0/24 maxlen: 24 185.254.200.0/24 maxlen: 24 185.254.201.0/24 maxlen: 24 185.254.203.0/24 maxlen: 24 212.95.128.0/24 maxlen: 24 212.95.129.0/24 maxlen: 24 212.95.130.0/24 maxlen: 24 212.95.131.0/24 maxlen: 24 212.95.132.0/24 maxlen: 24 212.95.133.0/24 maxlen: 24 212.95.134.0/24 maxlen: 24 212.95.135.0/24 maxlen: 24 212.95.136.0/24 maxlen: 24 212.95.137.0/24 maxlen: 24 212.95.138.0/24 maxlen: 24 212.95.139.0/24 maxlen: 24 212.95.140.0/24 maxlen: 24 212.95.141.0/24 maxlen: 24 212.95.143.0/24 maxlen: 24 212.95.144.0/24 maxlen: 24 212.95.145.0/24 maxlen: 24 212.95.146.0/24 maxlen: 24 212.95.147.0/24 maxlen: 24 212.95.151.0/24 maxlen: 24 212.95.152.0/24 maxlen: 24 212.95.153.0/24 maxlen: 24 212.95.154.0/24 maxlen: 24 212.95.155.0/24 maxlen: 24 212.95.157.0/24 maxlen: 24 223.25.120.0/24 maxlen: 24 223.25.121.0/24 maxlen: 24 223.25.122.0/24 maxlen: 24 223.25.123.0/24 maxlen: 24 223.25.124.0/24 maxlen: 24 223.25.125.0/24 maxlen: 24 223.25.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f6:16:65:ff:5e:1f:9e:5c:3f:c7:e2:99:c2:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe Validity Not Before: Jan 1 12:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57bf27115ae40abfbaa95ab6613852396d2ff614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e4:ce:01:bb:ab:51:65:cd:ed:6b:75:99:6d: 61:71:fd:ba:cd:63:dd:97:18:67:f3:3a:13:0a:bd: c5:83:6a:e8:d8:b5:ff:2b:01:82:2d:eb:f1:df:76: 15:e7:3a:c7:e7:1d:ea:ca:0f:b8:1b:a5:d7:b2:ee: ba:e2:da:5a:a3:a0:55:df:7c:86:6d:30:64:31:9d: 8c:21:00:3d:f1:05:28:5e:34:76:aa:e3:71:fe:36: 49:69:f1:91:64:78:62:09:50:6c:22:8a:f8:6b:45: 72:c3:66:5c:93:ba:20:cf:6e:77:ef:72:80:8a:bd: 8b:f3:7a:f5:8c:0a:b9:a1:70:91:ac:e0:5f:c1:0b: 66:00:c1:fa:93:30:4f:70:75:be:00:b6:1e:00:a6: 6d:bc:a2:b5:e0:e8:47:f9:ba:cf:8e:d2:a5:28:92: fb:42:c3:de:39:05:2e:1b:f6:24:69:4f:db:ef:5f: 75:30:32:7c:45:60:ad:65:7c:50:cc:f1:1c:ee:57: 3d:ef:11:05:26:31:5f:d8:54:b9:99:01:1d:9b:df: 7c:0a:29:f5:e6:e0:74:88:b5:51:27:ab:ba:54:2c: 34:ac:83:89:30:66:d8:a5:3e:4b:de:64:77:5a:0b: 21:88:09:5c:ec:40:84:00:02:a6:2c:dd:13:76:9b: 5b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BF:27:11:5A:E4:0A:BF:BA:A9:5A:B6:61:38:52:39:6D:2F:F6:14 X509v3 Authority Key Identifier: keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/V78nEVrkCr-6qVq2YThSOW0v9hQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.199.208.0-82.199.221.255 89.46.200.0/21 185.16.26.0/24 185.95.204.0/23 185.247.36.0/22 185.254.200.0/23 185.254.203.0/24 212.95.128.0-212.95.141.255 212.95.143.0-212.95.147.255 212.95.151.0-212.95.155.255 212.95.157.0/24 223.25.120.0-223.25.126.255 Signature Algorithm: sha256WithRSAEncryption b5:2b:1f:10:d7:04:ae:30:5a:76:f0:e9:78:5b:42:13:dc:f6: ce:a7:80:25:ab:ae:90:23:eb:dd:3a:29:5c:4d:51:07:98:85: bc:5b:66:fc:6b:e6:6d:28:ce:2b:95:fe:dc:ca:13:36:ba:f4: 05:07:6f:03:19:d4:48:a9:f7:ce:b1:85:61:9a:d8:db:2a:d4: fd:0c:51:1a:44:e8:20:da:ad:f0:2e:4b:76:a7:41:36:bb:cd: 80:d1:43:08:a6:ca:44:97:11:44:8f:72:f6:da:23:ce:72:11: 52:30:30:57:50:61:ee:36:c8:50:e7:b2:d4:d9:44:f8:bf:81: 9a:be:48:a7:36:92:f5:38:7a:ba:be:74:70:bb:d4:75:ff:7e: 19:0e:f2:d6:f6:47:aa:ca:61:16:54:a9:45:11:f0:48:c6:d5: b8:66:2f:32:d8:bd:19:30:09:7c:22:dc:ed:e5:8d:70:fe:71: e7:78:c0:86:f4:9b:98:35:af:65:77:a4:c8:b0:3e:17:6a:2b: 9e:dd:b2:54:ae:3a:d7:17:37:d3:25:36:39:b5:ba:88:75:f2: cc:fa:50:04:49:fa:94:e8:ab:7c:bc:ee:56:9e:21:fc:47:92: 5d:3d:6e:a8:f7:f2:2b:7a:21:2f:da:29:80:02:5e:de:39:1a: ad:e1:af:a2 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgISAZt5fvYWZf9eH55cP8fimcKaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZGQ4ZjFhNjJhNWQ3ZjgwMjEyZGUwZjNlZmU3NWIyZmEz MzhmZmUwHhcNMjYwMTAxMTIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2JmMjcxMTVhZTQwYWJmYmFhOTVhYjY2MTM4NTIzOTZkMmZmNjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouTOAburUWXN7Wt1mW1hcf26zWPd lxhn8zoTCr3Fg2ro2LX/KwGCLevx33YV5zrH5x3qyg+4G6XXsu664tpao6BV33yG bTBkMZ2MIQA98QUoXjR2quNx/jZJafGRZHhiCVBsIor4a0Vyw2Zck7ogz25373KA ir2L83r1jAq5oXCRrOBfwQtmAMH6kzBPcHW+ALYeAKZtvKK14OhH+brPjtKlKJL7 QsPeOQUuG/YkaU/b7191MDJ8RWCtZXxQzPEc7lc97xEFJjFf2FS5mQEdm998Cin1 5uB0iLVRJ6u6VCw0rIOJMGbYpT5L3mR3WgshiAlc7ECEAAKmLN0TdptbUwIDAQAB o4ICdDCCAnAwHQYDVR0OBBYEFFe/JxFa5Aq/uqlatmE4UjltL/YUMB8GA1UdIwQY MBaAFEndjxpipdf4AhLeDz7+dbL6M4/+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2Yt Y2VlYzQ5MTI0YzBmLzEvVjc4bkVWcmtDci02cVZxMllUaFNPVzB2OWhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2YtY2VlYzQ5MTI0YzBm LzEvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwdgQCAAEwcDAMAwQEUsfQ AwQBUsfcAwQDWS7IAwQAuRAaAwQBuV/MAwQCufckAwQBuf7IAwQAuf7LMAwDBAfU X4ADBAHUX4wwDAMEANRfjwMEAtRfkDAMAwQA1F+XAwQC1F+YAwQA1F+dMAwDBAPf GXgDBADfGX4wDQYJKoZIhvcNAQELBQADggEBALUrHxDXBK4wWnbw6XhbQhPc9s6n gCWrrpAj6906KVxNUQeYhbxbZvxr5m0oziuV/tzKEza69AUHbwMZ1Eip986xhWGa 2Nsq1P0MURpE6CDarfAuS3anQTa7zYDRQwimykSXEUSPcvbaI85yEVIwMFdQYe42 yFDnstTZRPi/gZq+SKc2kvU4erq+dHC71HX/fhkO8tb2R6rKYRZUqUUR8EjG1bhm LzLYvRkwCXwi3O3ljXD+ced4wIb0m5g1r2V3pMiwPhdqK57dslSuOtcXN9MlNjm1 uoh18sz6UARJ+pToq3y87laeIfxHkl09bqj38it6IS/aKYACXt45Gq3hr6I= -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:16 2026 by rpki-client