This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/Vs7BQ_LZ7tnxolhpvx8dREz5TnU.roa File: Vs7BQ_LZ7tnxolhpvx8dREz5TnU.roa (raw, json) Hash identifier: DTkKxG2OCn2HUjqRtTQ53+a8mSrOuYj/XPGf19kdObY= Subject key identifier: 56:CE:C1:43:F2:D9:EE:D9:F1:A2:58:69:BF:1F:1D:44:4C:F9:4E:75 Certificate issuer: /CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15 Certificate serial: 019B797ED85AF40B8DB597EB9DF0448FDE62 Authority key identifier: 84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/Vs7BQ_LZ7tnxolhpvx8dREz5TnU.roa Signing time: Thu 01 Jan 2026 12:18:34 +0000 ROA not before: Thu 01 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13036 IP address blocks: 37.48.0.0/18 maxlen: 18 46.13.0.0/16 maxlen: 16 62.77.64.0/18 maxlen: 18 62.84.128.0/19 maxlen: 19 62.141.0.0/19 maxlen: 19 62.168.0.0/18 maxlen: 18 62.209.192.0/18 maxlen: 18 78.80.0.0/16 maxlen: 16 89.24.0.0/16 maxlen: 16 91.139.0.0/17 maxlen: 17 193.85.0.0/16 maxlen: 16 193.86.0.0/16 maxlen: 16 193.179.0.0/16 maxlen: 16 194.108.0.0/16 maxlen: 16 194.149.96.0/19 maxlen: 19 194.212.0.0/16 maxlen: 16 194.213.32.0/19 maxlen: 19 194.213.192.0/19 maxlen: 19 195.22.32.0/19 maxlen: 19 195.39.0.0/17 maxlen: 17 195.47.0.0/17 maxlen: 17 195.70.128.0/19 maxlen: 19 195.144.96.0/19 maxlen: 19 212.47.0.0/19 maxlen: 19 212.65.192.0/18 maxlen: 18 213.29.0.0/16 maxlen: 16 213.210.128.0/18 maxlen: 18 2001:af0::/32 maxlen: 32 2001:1ae8::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d8:5a:f4:0b:8d:b5:97:eb:9d:f0:44:8f:de:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15 Validity Not Before: Jan 1 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56cec143f2d9eed9f1a25869bf1f1d444cf94e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4a:35:38:25:15:13:4d:5c:08:0a:13:c7:07: e7:45:a0:55:81:56:b3:33:1c:40:e6:fd:78:a1:1a: e2:3e:c2:3a:2b:e3:4f:2d:88:59:fa:23:a0:cc:46: 50:d2:18:d2:43:49:bc:2f:0d:a5:f5:fd:92:73:21: 23:9b:41:0e:58:b1:d7:17:ab:96:68:0a:41:81:da: 4e:78:be:91:86:33:ab:1d:54:b8:4a:cb:32:e1:3b: 94:25:35:82:5e:c7:e1:2d:37:7d:f7:0e:68:03:bc: 96:3e:af:90:01:ec:8d:29:e3:23:3a:41:c4:16:fa: 0c:12:ec:97:34:60:ea:5a:1a:4e:ab:cd:74:72:f8: 2c:55:8a:82:cb:f9:11:11:74:24:56:a2:c4:2a:02: 40:d8:25:0e:a7:25:53:2a:ef:4c:b5:7b:54:32:3c: f3:0c:92:df:53:78:85:4e:77:e1:53:70:ad:22:ff: 0f:b0:e0:fd:de:c7:bc:0b:0c:bd:09:37:96:84:4a: c3:c9:22:e7:06:2f:4c:11:88:b1:de:fa:61:ec:63: 06:e7:48:0b:fe:bc:b7:6d:a6:67:9f:9f:04:0c:f5: a7:9c:2d:e3:19:ee:bf:c2:e9:42:b9:dc:49:4a:5b: 1c:bb:59:4e:c8:91:44:5b:b9:0f:8d:d6:76:79:66: 67:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:CE:C1:43:F2:D9:EE:D9:F1:A2:58:69:BF:1F:1D:44:4C:F9:4E:75 X509v3 Authority Key Identifier: keyid:84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/Vs7BQ_LZ7tnxolhpvx8dREz5TnU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.48.0.0/18 46.13.0.0/16 62.77.64.0/18 62.84.128.0/19 62.141.0.0/19 62.168.0.0/18 62.209.192.0/18 78.80.0.0/16 89.24.0.0/16 91.139.0.0/17 193.85.0.0-193.86.255.255 193.179.0.0/16 194.108.0.0/16 194.149.96.0/19 194.212.0.0/16 194.213.32.0/19 194.213.192.0/19 195.22.32.0/19 195.39.0.0/17 195.47.0.0/17 195.70.128.0/19 195.144.96.0/19 212.47.0.0/19 212.65.192.0/18 213.29.0.0/16 213.210.128.0/18 IPv6: 2001:af0::/32 2001:1ae8::/29 Signature Algorithm: sha256WithRSAEncryption 7f:58:11:e3:5e:8e:79:f7:b9:53:21:7f:51:9b:de:4c:d7:43: 53:a4:2d:02:f9:43:bc:56:9d:55:71:ef:2a:e1:21:76:7e:39: a4:24:79:c7:3d:04:ea:8f:b5:27:d9:e6:a3:64:0b:3c:be:27: c4:fb:12:c0:7d:1e:55:85:3e:e9:7b:d3:76:88:09:db:55:8d: 60:6c:aa:7d:2c:b6:94:4c:c5:4a:bc:26:c1:f1:d8:12:3a:e7: a6:a2:64:06:69:82:24:ef:ae:a2:23:28:21:39:24:d4:38:c8: 68:f4:60:f1:65:16:ec:c2:54:4b:a2:e8:53:94:26:36:51:bf: 8c:f6:de:fc:58:79:4e:6b:e5:8d:c3:06:1e:b4:c0:0b:bc:5c: 3d:d7:1d:40:00:2d:53:46:4c:a8:a4:ba:05:3a:d5:6d:7a:63: 22:ba:74:4b:61:22:3e:ba:c9:95:49:7e:4f:b8:51:50:50:24: 23:87:66:15:4c:89:10:dd:54:b6:1b:59:bb:d7:92:72:64:d0: 0f:d9:61:bd:09:43:11:87:ed:57:7f:dc:c5:8d:9b:d7:23:06: 28:0b:dc:58:02:e7:b8:5e:f3:71:51:0e:af:a4:3a:47:67:09: bb:7f:fe:78:0b:ce:10:a0:09:34:b1:62:24:26:72:fc:1d:96: 95:50:b6:df -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgISAZt5ftha9AuNtZfrnfBEj95iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZjJjZTcxYzZmZmNlODc1NjBkNTY1ZWU1Y2NkYTMxZTAx YjljMTUwHhcNMjYwMTAxMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmNlYzE0M2YyZDllZWQ5ZjFhMjU4NjliZjFmMWQ0NDRjZjk0ZTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0o1OCUVE01cCAoTxwfnRaBVgVaz MxxA5v14oRriPsI6K+NPLYhZ+iOgzEZQ0hjSQ0m8Lw2l9f2ScyEjm0EOWLHXF6uW aApBgdpOeL6RhjOrHVS4Sssy4TuUJTWCXsfhLTd99w5oA7yWPq+QAeyNKeMjOkHE FvoMEuyXNGDqWhpOq810cvgsVYqCy/kREXQkVqLEKgJA2CUOpyVTKu9MtXtUMjzz DJLfU3iFTnfhU3CtIv8PsOD93se8Cwy9CTeWhErDySLnBi9MEYix3vph7GMG50gL /ry3baZnn58EDPWnnC3jGe6/wulCudxJSlscu1lOyJFEW7kPjdZ2eWZn9wIDAQAB o4ICuTCCArUwHQYDVR0OBBYEFFbOwUPy2e7Z8aJYab8fHURM+U51MB8GA1UdIwQY MBaAFITyznHG/86HVg1WXuXM2jHgG5wVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFBMT2NjYl96b2RXRFZaZTVjemFNZUFibkJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yYWM5ODAtMjI1OS00NmZkLWE0Mjgt N2I5OGM3NDYyYTdlLzEvVnM3QlFfTFo3dG54b2xocHZ4OGRSRXo1VG5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8yYWM5ODAtMjI1OS00NmZkLWE0MjgtN2I5OGM3NDYyYTdl LzEvaFBMT2NjYl96b2RXRFZaZTVjemFNZUFibkJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHOBggrBgEFBQcBBwEB/wSBvjCBuzCBogQCAAEwgZsDBAYl MAADAwAuDQMEBj5NQAMEBT5UgAMEBT6NAAMEBj6oAAMEBj7RwAMDAE5QAwMAWRgD BAdbiwAwCgMDAMFVAwMAwVYDAwDBswMDAMJsAwQFwpVgAwMAwtQDBAXC1SADBAXC 1cADBAXDFiADBAfDJwADBAfDLwADBAXDRoADBAXDkGADBAXULwADBAbUQcADAwDV HQMEBtXSgDAUBAIAAjAOAwUAIAEK8AMFAyABGugwDQYJKoZIhvcNAQELBQADggEB AH9YEeNejnn3uVMhf1Gb3kzXQ1OkLQL5Q7xWnVVx7yrhIXZ+OaQkecc9BOqPtSfZ 5qNkCzy+J8T7EsB9HlWFPul703aICdtVjWBsqn0stpRMxUq8JsHx2BI656aiZAZp giTvrqIjKCE5JNQ4yGj0YPFlFuzCVEui6FOUJjZRv4z23vxYeU5r5Y3DBh60wAu8 XD3XHUAALVNGTKikugU61W16YyK6dEthIj66yZVJfk+4UVBQJCOHZhVMiRDdVLYb WbvXknJk0A/ZYb0JQxGH7Vd/3MWNm9cjBigL3FgC57he83FRDq+kOkdnCbt//ngL zhCgCTSxYiQmcvwdlpVQtt8= -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:59 2026 by rpki-client