This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/iBC7FwhAoY4sCdG11O7Dv2YEsfI.roa File: iBC7FwhAoY4sCdG11O7Dv2YEsfI.roa (raw, json) Hash identifier: +CQ9cSlWk2hoJW+Pv1/StWyf8H8JiZBkAeQB6L1HCX0= Subject key identifier: 88:10:BB:17:08:40:A1:8E:2C:09:D1:B5:D4:EE:C3:BF:66:04:B1:F2 Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654 Certificate serial: 019B7CEDE2C0D580BAF47218388BBFE81889 Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/iBC7FwhAoY4sCdG11O7Dv2YEsfI.roa Signing time: Fri 02 Jan 2026 04:18:43 +0000 ROA not before: Fri 02 Jan 2026 04:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 62.209.32.0/19 maxlen: 19 62.216.224.0/21 maxlen: 21 62.216.233.0/24 maxlen: 24 62.216.234.0/23 maxlen: 23 62.216.236.0/22 maxlen: 22 62.216.240.0/20 maxlen: 20 62.216.244.0/22 maxlen: 22 62.216.246.0/24 maxlen: 24 80.85.64.0/20 maxlen: 20 80.85.80.0/23 maxlen: 23 80.85.82.0/23 maxlen: 23 80.85.88.0/21 maxlen: 21 80.252.80.0/20 maxlen: 20 81.29.192.0/19 maxlen: 19 81.29.208.0/20 maxlen: 20 81.201.96.0/22 maxlen: 22 81.201.100.0/23 maxlen: 23 81.201.104.0/24 maxlen: 24 81.201.108.0/22 maxlen: 22 81.201.112.0/22 maxlen: 22 81.201.118.0/23 maxlen: 23 81.201.124.0/22 maxlen: 22 82.199.64.0/19 maxlen: 19 85.90.224.0/20 maxlen: 20 85.90.240.0/22 maxlen: 22 85.90.248.0/21 maxlen: 21 85.90.252.0/22 maxlen: 22 85.233.192.0/19 maxlen: 19 85.233.194.0/24 maxlen: 24 85.233.196.0/24 maxlen: 24 85.233.205.0/24 maxlen: 24 87.237.184.0/21 maxlen: 21 87.252.192.0/20 maxlen: 20 87.252.208.0/20 maxlen: 20 88.80.160.0/20 maxlen: 20 88.80.176.0/21 maxlen: 21 89.21.0.0/19 maxlen: 19 89.107.16.0/21 maxlen: 21 109.237.16.0/21 maxlen: 21 109.237.28.0/24 maxlen: 24 188.95.96.0/21 maxlen: 21 212.71.224.0/21 maxlen: 21 212.71.240.0/22 maxlen: 22 212.111.32.0/21 maxlen: 21 212.111.44.0/22 maxlen: 22 212.111.48.0/20 maxlen: 20 213.52.132.0/22 maxlen: 22 213.52.136.0/21 maxlen: 21 213.52.144.0/20 maxlen: 20 213.52.160.0/20 maxlen: 20 213.52.172.0/22 maxlen: 22 213.52.176.0/22 maxlen: 22 213.52.180.0/23 maxlen: 23 213.52.184.0/22 maxlen: 22 213.52.188.0/23 maxlen: 23 213.52.190.0/23 maxlen: 23 213.52.192.0/18 maxlen: 18 213.168.224.0/20 maxlen: 20 213.168.240.0/21 maxlen: 21 213.168.252.0/22 maxlen: 22 213.219.0.0/19 maxlen: 19 213.219.32.0/22 maxlen: 22 213.219.40.0/21 maxlen: 21 213.219.48.0/20 maxlen: 20 217.20.32.0/20 maxlen: 20 217.20.32.0/21 maxlen: 21 217.20.40.0/23 maxlen: 23 217.20.42.0/23 maxlen: 23 217.20.44.0/22 maxlen: 22 217.68.16.0/20 maxlen: 20 217.68.16.0/22 maxlen: 22 217.68.20.0/22 maxlen: 22 217.68.24.0/21 maxlen: 21 217.114.160.0/20 maxlen: 20 217.117.144.0/20 maxlen: 20 2001:4d78::/32 maxlen: 48 2001:4d78:f200::/40 maxlen: 40 2a02:170::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e2:c0:d5:80:ba:f4:72:18:38:8b:bf:e8:18:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654 Validity Not Before: Jan 2 04:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8810bb170840a18e2c09d1b5d4eec3bf6604b1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a4:13:10:7e:51:ef:24:5b:cb:64:0e:8c:dd: cb:8d:c9:5c:6e:f4:2b:b0:6c:25:6d:2b:49:c9:da: d7:a1:2f:ea:91:9a:fd:c5:e4:8a:e2:64:04:55:96: 41:03:c2:4b:e6:b0:35:7c:5b:3d:be:14:10:20:a5: 3d:e5:1a:4f:99:ca:6d:2b:33:62:cd:3a:34:c5:11: 2f:be:da:4d:38:93:7b:aa:b2:cd:2d:b1:ea:26:45: d8:d9:b3:18:70:9e:99:4e:8a:c5:d6:9f:6f:5f:cc: 2d:86:30:20:d9:02:1c:e6:d4:98:43:5a:36:1b:97: b7:f8:c5:8e:35:fb:0d:80:6b:db:1b:e0:2e:ca:15: 8c:f2:5b:39:6b:b7:18:5c:20:b3:28:45:63:9d:b4: 41:43:89:05:d0:fe:09:61:4c:fb:b5:62:72:63:f7: fc:c7:82:3c:b9:1c:d5:eb:e3:de:44:51:66:2d:2a: f7:b4:e9:1c:bb:f4:0c:8a:3f:6c:f0:2a:19:ac:33: b4:af:3e:25:b7:77:23:84:8b:30:c1:40:67:45:6f: 7c:8c:cf:bb:95:e9:4e:29:7e:72:47:bb:0b:62:97: d1:a8:99:ff:6f:1a:0b:b0:e9:9b:e2:26:98:22:2a: c0:40:36:7d:77:11:16:58:ee:1c:58:84:0d:2a:df: 32:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:10:BB:17:08:40:A1:8E:2C:09:D1:B5:D4:EE:C3:BF:66:04:B1:F2 X509v3 Authority Key Identifier: keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/iBC7FwhAoY4sCdG11O7Dv2YEsfI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.209.32.0/19 62.216.224.0/21 62.216.233.0-62.216.255.255 80.85.64.0-80.85.83.255 80.85.88.0/21 80.252.80.0/20 81.29.192.0/19 81.201.96.0-81.201.101.255 81.201.104.0/24 81.201.108.0-81.201.115.255 81.201.118.0/23 81.201.124.0/22 82.199.64.0/19 85.90.224.0-85.90.243.255 85.90.248.0/21 85.233.192.0/19 87.237.184.0/21 87.252.192.0/19 88.80.160.0-88.80.183.255 89.21.0.0/19 89.107.16.0/21 109.237.16.0/21 109.237.28.0/24 188.95.96.0/21 212.71.224.0/21 212.71.240.0/22 212.111.32.0/21 212.111.44.0-212.111.63.255 213.52.132.0-213.52.181.255 213.52.184.0-213.52.255.255 213.168.224.0-213.168.247.255 213.168.252.0/22 213.219.0.0-213.219.35.255 213.219.40.0-213.219.63.255 217.20.32.0/20 217.68.16.0/20 217.114.160.0/20 217.117.144.0/20 IPv6: 2001:4d78::/32 2a02:170::/32 Signature Algorithm: sha256WithRSAEncryption 83:51:4a:52:a4:6d:e2:53:0a:12:59:34:be:7c:5a:cc:79:d9: d4:50:f3:11:70:9f:36:a5:ec:9b:46:ff:74:2c:1d:8f:e5:50: f9:fd:64:23:64:5a:4b:81:35:0f:9b:7a:33:96:4a:b3:3a:90: 35:6a:11:87:58:e9:c1:7e:25:10:88:10:27:ae:e6:70:10:1f: 07:65:10:08:a4:f2:0c:5c:06:1a:d0:f6:fc:9e:f3:d8:1a:ee: 37:3d:83:4e:48:2a:6e:35:aa:91:52:6c:0f:0b:b3:91:a3:f8: 0c:64:5a:b1:1e:9a:48:f9:7e:75:88:20:6c:84:52:1b:22:ba: a1:d2:65:c3:29:18:ef:3f:08:bb:f2:24:ef:56:ce:a4:dd:11: f4:9a:a8:ec:82:f4:6b:74:f2:5c:90:56:19:f8:37:1d:df:09: a2:3d:c8:11:ae:02:23:93:af:ea:e0:a2:8c:89:8f:9c:58:96: d7:36:5b:a5:b3:89:a2:30:3a:b6:43:5e:74:33:6a:83:64:ce: 9e:5c:3c:be:b0:64:73:89:4e:3c:c0:4e:af:0b:50:de:56:02: 88:47:2f:4c:81:99:f7:7b:33:9f:19:e1:81:81:09:24:50:46: 5d:7b:18:f2:b5:83:ef:c4:33:68:1a:34:9f:40:98:9b:72:7c: 48:5b:fe:4b -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgISAZt87eLA1YC69HIYOIu/6BiJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjODY0ODEzYzA4NjJlNmI0NzU2ZjhkZmRhODk1N2M2YWVh YzY2NTQwHhcNMjYwMTAyMDQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODEwYmIxNzA4NDBhMThlMmMwOWQxYjVkNGVlYzNiZjY2MDRiMWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaQTEH5R7yRby2QOjN3LjclcbvQr sGwlbStJydrXoS/qkZr9xeSK4mQEVZZBA8JL5rA1fFs9vhQQIKU95RpPmcptKzNi zTo0xREvvtpNOJN7qrLNLbHqJkXY2bMYcJ6ZTorF1p9vX8wthjAg2QIc5tSYQ1o2 G5e3+MWONfsNgGvbG+AuyhWM8ls5a7cYXCCzKEVjnbRBQ4kF0P4JYUz7tWJyY/f8 x4I8uRzV6+PeRFFmLSr3tOkcu/QMij9s8CoZrDO0rz4lt3cjhIswwUBnRW98jM+7 lelOKX5yR7sLYpfRqJn/bxoLsOmb4iaYIirAQDZ9dxEWWO4cWIQNKt8yvwIDAQAB o4IDZDCCA2AwHQYDVR0OBBYEFIgQuxcIQKGOLAnRtdTuw79mBLHyMB8GA1UdIwQY MBaAFByGSBPAhi5rR1b439qJV8aurGZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSElaSUU4Q0dMbXRIVnZqZjJvbFh4cTZzWmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xMDM5M2QtYTAzMC00YWY1LTg5OTUt OGYyZDY2ODRjODE0LzEvaUJDN0Z3aEFvWTRzQ2RHMTFPN0R2MllFc2ZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8xMDM5M2QtYTAzMC00YWY1LTg5OTUtOGYyZDY2ODRjODE0 LzEvSElaSUU4Q0dMbXRIVnZqZjJvbFh4cTZzWmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBeAYIKwYBBQUHAQcBAf8EggFnMIIBYzCCAUkEAgABMIIB QQMEBT7RIAMEAz7Y4DALAwQAPtjpAwMAPtgwDAMEBlBVQAMEAlBVUAMEA1BVWAME BFD8UAMEBVEdwDAMAwQFUclgAwQBUclkAwQAUcloMAwDBAJRyWwDBAJRyXADBAFR yXYDBAJRyXwDBAVSx0AwDAMEBVVa4AMEAlVa8AMEA1Va+AMEBVXpwAMEA1ftuAME BVf8wDAMAwQFWFCgAwQDWFCwAwQFWRUAAwQDWWsQAwQDbe0QAwQAbe0cAwQDvF9g AwQD1EfgAwQC1EfwAwQD1G8gMAwDBALUbywDBAbUbwAwDAMEAtU0hAMEAdU0tDAL AwQD1TS4AwMA1TQwDAMEBdWo4AMEA9Wo8AMEAtWo/DALAwMA1dsDBALV2yAwDAME A9XbKAMEBtXbAAMEBNkUIAMEBNlEEAMEBNlyoAMEBNl1kDAUBAIAAjAOAwUAIAFN eAMFACoCAXAwDQYJKoZIhvcNAQELBQADggEBAINRSlKkbeJTChJZNL58Wsx52dRQ 8xFwnzal7JtG/3QsHY/lUPn9ZCNkWkuBNQ+bejOWSrM6kDVqEYdY6cF+JRCIECeu 5nAQHwdlEAik8gxcBhrQ9vye89ga7jc9g05IKm41qpFSbA8Ls5Gj+AxkWrEemkj5 fnWIIGyEUhsiuqHSZcMpGO8/CLvyJO9WzqTdEfSaqOyC9Gt08lyQVhn4Nx3fCaI9 yBGuAiOTr+rgooyJj5xYltc2W6WziaIwOrZDXnQzaoNkzp5cPL6wZHOJTjzATq8L UN5WAohHL0yBmfd7M58Z4YGBCSRQRl17GPK1g+/EM2gaNJ9AmJtyfEhb/ks= -----END CERTIFICATE-----Generated at Sat Jan 3 04:59:31 2026 by rpki-client