This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/V35GfWnaB7P9WFAGfej3egVtdLc.roa File: V35GfWnaB7P9WFAGfej3egVtdLc.roa (raw, json) Hash identifier: jVs3XnWjkIkaNHtOAb33xGPFvncaOX/lvX3i2amHLDQ= Subject key identifier: 57:7E:46:7D:69:DA:07:B3:FD:58:50:06:7D:E8:F7:7A:05:6D:74:B7 Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df Certificate serial: 019BDB42B951C74136C8D1973C83C0B36EC8 Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/V35GfWnaB7P9WFAGfej3egVtdLc.roa Signing time: Tue 20 Jan 2026 11:55:41 +0000 ROA not before: Tue 20 Jan 2026 11:55:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 84.246.64.0/21 maxlen: 21 129.26.0.0/16 maxlen: 16 129.233.128.0/18 maxlen: 18 129.233.210.0/24 maxlen: 24 129.233.224.0/20 maxlen: 20 153.96.0.0/15 maxlen: 15 153.96.0.0/16 maxlen: 16 192.35.149.0/24 maxlen: 24 192.35.150.0/23 maxlen: 23 192.35.150.0/24 maxlen: 24 192.35.151.0/24 maxlen: 24 192.35.152.0/23 maxlen: 23 192.35.152.0/24 maxlen: 24 192.35.153.0/24 maxlen: 24 192.44.5.0/24 maxlen: 24 192.44.6.0/24 maxlen: 24 192.44.8.0/24 maxlen: 24 192.44.12.0/24 maxlen: 24 192.44.15.0/24 maxlen: 24 192.44.18.0/24 maxlen: 24 192.44.20.0/23 maxlen: 23 192.44.23.0/24 maxlen: 24 192.44.25.0/24 maxlen: 24 192.44.26.0/24 maxlen: 24 192.44.28.0/24 maxlen: 24 192.44.29.0/24 maxlen: 24 192.44.30.0/23 maxlen: 23 192.44.36.0/24 maxlen: 24 192.44.37.0/24 maxlen: 24 192.44.38.0/23 maxlen: 23 192.44.38.0/24 maxlen: 24 192.44.39.0/24 maxlen: 24 192.44.40.0/24 maxlen: 24 192.54.34.0/23 maxlen: 23 192.76.148.0/24 maxlen: 24 192.76.241.0/24 maxlen: 24 192.76.245.0/24 maxlen: 24 192.76.246.0/23 maxlen: 23 192.76.248.0/24 maxlen: 24 192.88.108.0/24 maxlen: 24 192.102.150.0/23 maxlen: 23 192.102.152.0/23 maxlen: 23 192.102.156.0/24 maxlen: 24 192.102.158.0/23 maxlen: 23 192.102.160.0/24 maxlen: 24 192.102.161.0/24 maxlen: 24 192.102.162.0/23 maxlen: 23 192.102.164.0/24 maxlen: 24 192.102.167.0/24 maxlen: 24 192.102.168.0/24 maxlen: 24 192.102.169.0/24 maxlen: 24 192.102.170.0/24 maxlen: 24 192.102.172.0/24 maxlen: 24 192.102.174.0/24 maxlen: 24 192.102.175.0/24 maxlen: 24 192.102.176.0/23 maxlen: 23 192.109.177.0/24 maxlen: 24 212.44.192.0/19 maxlen: 19 2a03:db80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:42:b9:51:c7:41:36:c8:d1:97:3c:83:c0:b3:6e:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df Validity Not Before: Jan 20 11:55:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=577e467d69da07b3fd5850067de8f77a056d74b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:75:50:8d:ee:81:8f:c4:d6:21:8e:a4:8e:16: 32:18:da:85:ed:d5:93:f9:4c:24:d0:2e:2f:1f:01: 1c:93:1d:54:06:03:2b:1f:dc:ff:78:12:20:9b:56: 28:d6:01:aa:ec:72:06:49:1b:ca:f4:e7:33:64:9b: 66:b4:8d:e5:69:c1:ed:91:09:24:00:f0:0b:8e:f5: ab:39:c5:8a:db:20:11:2e:2e:a4:92:be:f4:08:f6: 30:7b:a4:93:e3:48:b1:d4:21:1d:8b:a9:d6:94:a5: b8:7f:65:be:6b:68:ac:1f:6f:55:78:d8:87:20:7e: 9d:cc:5a:7b:46:00:2d:32:34:53:cd:de:93:3b:31: ac:2c:f3:a2:34:12:82:e4:21:99:e2:fb:26:61:39: 69:01:0e:e0:58:62:f8:52:5d:ed:93:96:20:00:1e: 9f:c6:99:51:47:4b:83:96:57:9f:7e:3f:61:43:63: 59:f3:4b:1e:28:e9:49:81:fb:84:e3:16:3a:f6:7d: 43:c0:ea:9b:30:b5:34:a6:d1:3d:0c:1e:eb:18:fc: bd:d7:2f:85:e5:03:2a:b9:d5:e1:12:97:66:39:96: 8c:ed:89:cd:28:fa:41:f2:a9:98:e7:fb:e1:51:23: 90:4a:f4:19:5f:b2:51:6c:d8:88:05:4e:f0:7e:5c: fb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7E:46:7D:69:DA:07:B3:FD:58:50:06:7D:E8:F7:7A:05:6D:74:B7 X509v3 Authority Key Identifier: keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/V35GfWnaB7P9WFAGfej3egVtdLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.246.64.0/21 129.26.0.0/16 129.233.128.0/18 129.233.210.0/24 129.233.224.0/20 153.96.0.0/15 192.35.149.0-192.35.153.255 192.44.5.0-192.44.6.255 192.44.8.0/24 192.44.12.0/24 192.44.15.0/24 192.44.18.0/24 192.44.20.0/23 192.44.23.0/24 192.44.25.0-192.44.26.255 192.44.28.0/22 192.44.36.0-192.44.40.255 192.54.34.0/23 192.76.148.0/24 192.76.241.0/24 192.76.245.0-192.76.248.255 192.88.108.0/24 192.102.150.0-192.102.153.255 192.102.156.0/24 192.102.158.0-192.102.164.255 192.102.167.0-192.102.170.255 192.102.172.0/24 192.102.174.0-192.102.177.255 192.109.177.0/24 212.44.192.0/19 IPv6: 2a03:db80::/32 Signature Algorithm: sha256WithRSAEncryption 53:dc:47:81:c6:8e:be:e9:00:9d:48:7c:61:53:9e:c8:a5:e6: 6c:75:06:8f:75:5b:6a:80:c9:19:89:24:ca:85:84:e7:7c:30: 66:d4:7c:71:a0:ef:c0:43:1e:a3:4c:c2:5b:1d:83:cf:b5:45: e7:5e:1c:c6:f1:76:22:a8:a8:1a:61:c7:eb:ba:cc:b3:72:d5: 9b:e3:8c:03:8c:7e:64:09:a0:be:a8:71:c0:df:43:1f:8a:1e: 1f:af:b6:30:7f:62:72:60:fd:fd:19:78:14:5f:bb:96:a5:f8: a4:f1:1b:77:ca:e8:c2:b6:59:4d:eb:ce:d5:07:02:68:ec:8d: 8e:39:d7:89:19:f6:33:8e:4f:8d:c1:05:30:53:19:16:37:78: 56:cd:cc:28:a1:a7:0e:83:41:d3:7d:c7:d8:52:aa:f4:6a:0d: 8c:94:51:c3:0c:49:78:4e:58:54:3e:3a:18:72:59:46:c0:a1: 06:16:ba:c7:78:8b:74:3c:fa:41:6d:e9:1e:ce:41:0e:d9:21: 31:57:7a:92:90:99:97:21:ba:2b:9a:ca:08:bc:6e:7c:fb:a4: 17:6b:5c:d7:32:a4:38:a8:7b:62:81:29:4d:1a:69:99:83:23: 61:e2:b1:bf:8a:80:59:88:2b:ce:30:69:a2:9e:f8:bc:cf:fa: bd:54:51:c4 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgISAZvbQrlRx0E2yNGXPIPAs27IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YTc1ODI2ZTk5MTIyNWE0MjlmZjhhMWU3ZmZkYzgwNDY2 NDIwZGYwHhcNMjYwMTIwMTE1NTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzdlNDY3ZDY5ZGEwN2IzZmQ1ODUwMDY3ZGU4Zjc3YTA1NmQ3NGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHVQje6Bj8TWIY6kjhYyGNqF7dWT +Uwk0C4vHwEckx1UBgMrH9z/eBIgm1Yo1gGq7HIGSRvK9OczZJtmtI3lacHtkQkk APALjvWrOcWK2yARLi6kkr70CPYwe6ST40ix1CEdi6nWlKW4f2W+a2isH29VeNiH IH6dzFp7RgAtMjRTzd6TOzGsLPOiNBKC5CGZ4vsmYTlpAQ7gWGL4Ul3tk5YgAB6f xplRR0uDlleffj9hQ2NZ80seKOlJgfuE4xY69n1DwOqbMLU0ptE9DB7rGPy91y+F 5QMqudXhEpdmOZaM7YnNKPpB8qmY5/vhUSOQSvQZX7JRbNiIBU7wflz7DwIDAQAB o4IDFTCCAxEwHQYDVR0OBBYEFFd+Rn1p2gez/VhQBn3o93oFbXS3MB8GA1UdIwQY MBaAFHanWCbpkSJaQp/4oef/3IBGZCDfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTct YWQ4ZmJlYWE4ZGQ5LzEvVjM1R2ZXbmFCN1A5V0ZBR2ZlajNlZ1Z0ZExjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTctYWQ4ZmJlYWE4ZGQ5 LzEvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBKQYIKwYBBQUHAQcBAf8EggEYMIIBFDCCAQEEAgABMIH6 AwQDVPZAAwMAgRoDBAaB6YADBACB6dIDBASB6eADAwGZYDAMAwQAwCOVAwQBwCOY MAwDBADALAUDBADALAYDBADALAgDBADALAwDBADALA8DBADALBIDBAHALBQDBADA LBcwDAMEAMAsGQMEAMAsGgMEAsAsHDAMAwQCwCwkAwQAwCwoAwQBwDYiAwQAwEyU AwQAwEzxMAwDBADATPUDBADATPgDBADAWGwwDAMEAcBmlgMEAcBmmAMEAMBmnDAM AwQBwGaeAwQAwGakMAwDBADAZqcDBADAZqoDBADAZqwwDAMEAcBmrgMEAcBmsAME AMBtsQMEBdQswDANBAIAAjAHAwUAKgPbgDANBgkqhkiG9w0BAQsFAAOCAQEAU9xH gcaOvukAnUh8YVOeyKXmbHUGj3VbaoDJGYkkyoWE53wwZtR8caDvwEMeo0zCWx2D z7VF514cxvF2IqioGmHH67rMs3LVm+OMA4x+ZAmgvqhxwN9DH4oeH6+2MH9icmD9 /Rl4FF+7lqX4pPEbd8rowrZZTevO1QcCaOyNjjnXiRn2M45PjcEFMFMZFjd4Vs3M KKGnDoNB033H2FKq9GoNjJRRwwxJeE5YVD46GHJZRsChBha6x3iLdDz6QW3pHs5B DtkhMVd6kpCZlyG6K5rKCLxufPukF2tc1zKkOKh7YoEpTRppmYMjYeKxv4qAWYgr zjBpop74vM/6vVRRxA== -----END CERTIFICATE-----Generated at Wed Jan 21 14:40:58 2026 by rpki-client