This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/DSNdKFy2lJZTElrkr1CT78IoHhA.roa File: DSNdKFy2lJZTElrkr1CT78IoHhA.roa (raw, json) Hash identifier: tO7SJshvN0dMXN0HLWLnqvO3CSU22x0MTTkNed+s0+0= Subject key identifier: 0D:23:5D:28:5C:B6:94:96:53:12:5A:E4:AF:50:93:EF:C2:28:1E:10 Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31 Certificate serial: 019B791073899C970B5744B406DE917118CE Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/DSNdKFy2lJZTElrkr1CT78IoHhA.roa Signing time: Thu 01 Jan 2026 10:17:59 +0000 ROA not before: Thu 01 Jan 2026 10:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204035 IP address blocks: 37.228.132.0/24 maxlen: 24 37.228.134.0/24 maxlen: 24 146.19.118.0/24 maxlen: 24 185.101.92.0/22 maxlen: 22 185.101.92.0/24 maxlen: 24 185.101.93.0/24 maxlen: 24 185.101.94.0/24 maxlen: 24 185.101.95.0/24 maxlen: 24 185.107.192.0/22 maxlen: 22 185.107.192.0/23 maxlen: 23 185.107.192.0/24 maxlen: 24 185.107.193.0/24 maxlen: 24 185.107.194.0/24 maxlen: 24 185.116.156.0/22 maxlen: 22 185.116.156.0/24 maxlen: 24 185.116.157.0/24 maxlen: 24 185.116.158.0/24 maxlen: 24 185.116.159.0/24 maxlen: 24 185.245.168.0/22 maxlen: 22 193.46.24.0/22 maxlen: 22 193.56.126.0/24 maxlen: 24 193.56.129.0/24 maxlen: 24 193.56.156.0/24 maxlen: 24 193.56.173.0/24 maxlen: 24 194.125.248.0/22 maxlen: 22 194.125.248.0/24 maxlen: 24 194.125.249.0/24 maxlen: 24 194.125.250.0/24 maxlen: 24 194.125.251.0/24 maxlen: 24 2a06:1c40::/32 maxlen: 32 2a06:1c41::/32 maxlen: 32 2a06:7f80::/29 maxlen: 29 2a06:7f80:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:73:89:9c:97:0b:57:44:b4:06:de:91:71:18:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31 Validity Not Before: Jan 1 10:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d235d285cb6949653125ae4af5093efc2281e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d9:50:34:17:b3:f8:04:51:95:1e:2c:92:37: 66:1c:f7:a9:f2:b9:aa:cb:de:3c:bd:a0:af:a7:a5: bc:41:a2:43:db:27:a3:50:d7:de:c7:af:d3:72:10: c5:0e:e7:ae:f7:ad:68:a8:b8:e5:a5:3b:bf:b4:87: 26:11:b3:c3:e7:a9:02:b9:7b:94:97:8e:18:c7:83: fc:af:2b:41:ff:5a:12:ab:9d:a0:72:6f:a3:58:b0: 65:b3:6f:04:8a:8b:89:65:4b:5d:a0:12:42:03:7e: d8:07:df:52:bc:f7:46:56:a7:f5:5a:b1:0d:08:d0: 8f:74:39:54:f3:6e:d4:58:94:cf:76:84:a1:c0:03: 9f:17:ce:ab:7d:6d:3a:a5:db:42:ca:b6:b7:56:59: 80:88:2f:a2:71:36:4f:de:30:a2:6c:ae:8e:ef:65: 28:b0:c1:fe:e4:e4:b6:57:4b:67:7e:81:08:d7:e2: 3b:0d:51:85:cf:b7:10:9f:47:ff:e9:fa:ec:03:2c: 8e:93:90:20:28:f5:69:be:17:d8:d3:a1:2f:77:3b: 63:93:95:a5:c3:a4:35:c8:ae:0a:ef:e6:2b:7a:5e: dd:e4:51:b5:b7:bc:df:71:56:d6:28:fc:a3:6b:42: 2e:36:e2:cf:1a:be:fb:fc:aa:55:ed:56:c7:2e:60: 00:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:23:5D:28:5C:B6:94:96:53:12:5A:E4:AF:50:93:EF:C2:28:1E:10 X509v3 Authority Key Identifier: keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/DSNdKFy2lJZTElrkr1CT78IoHhA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.228.132.0/24 37.228.134.0/24 146.19.118.0/24 185.101.92.0/22 185.107.192.0/22 185.116.156.0/22 185.245.168.0/22 193.46.24.0/22 193.56.126.0/24 193.56.129.0/24 193.56.156.0/24 193.56.173.0/24 194.125.248.0/22 IPv6: 2a06:1c40::/31 2a06:7f80::/29 Signature Algorithm: sha256WithRSAEncryption 47:80:11:60:57:fc:04:d9:29:90:ec:cd:01:18:93:a7:c3:e0: 04:1e:e8:45:24:46:80:3c:04:d9:a1:e5:4a:f9:8c:da:15:59: c1:70:a7:d5:5c:89:9d:f8:2e:dd:88:7c:40:d3:07:ed:4a:6e: 25:0d:68:6e:d6:47:fb:70:33:6e:31:d3:fc:d7:50:1e:3d:cd: 05:6d:8c:fc:b1:f7:4c:90:03:91:2e:44:fc:9f:52:8f:5c:fc: 3c:f1:b3:74:48:a5:d5:99:5a:bc:8a:61:77:62:d4:7f:23:6b: 1e:6f:98:be:3c:c3:75:9f:fe:0d:b8:ba:da:16:eb:3e:44:c8: 23:2f:e3:1b:7a:54:19:78:89:02:b1:06:9c:5e:56:f3:36:44: 4b:bf:73:36:3d:cb:e0:da:22:54:af:3c:32:70:7f:f9:30:68: a5:51:60:39:46:14:1b:c9:73:83:f6:0a:7e:ad:d2:6f:c0:30: 54:c1:59:7e:d1:f2:2a:04:13:a3:b6:2f:85:5f:64:1f:72:46: 4a:82:fc:ce:8b:fc:11:1b:b0:0e:d2:93:83:6d:30:02:38:a4: b2:08:38:ce:07:b2:36:f1:ba:07:bd:fe:ff:2d:c2:08:1c:c9: f8:ec:8a:25:3f:9e:91:f3:8e:e0:1d:d7:0a:2f:8b:fa:a8:9a: 06:d6:e7:0b -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgISAZt5EHOJnJcLV0S0Bt6RcRjOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwZDE4MTk2YjI5ZjYwZTg1ZDg3MTJkZTQwMzlhNTMxY2Zj MWFiMzEwHhcNMjYwMTAxMTAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDIzNWQyODVjYjY5NDk2NTMxMjVhZTRhZjUwOTNlZmMyMjgxZTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNlQNBez+ARRlR4skjdmHPep8rmq y948vaCvp6W8QaJD2yejUNfex6/TchDFDueu961oqLjlpTu/tIcmEbPD56kCuXuU l44Yx4P8rytB/1oSq52gcm+jWLBls28EiouJZUtdoBJCA37YB99SvPdGVqf1WrEN CNCPdDlU827UWJTPdoShwAOfF86rfW06pdtCyra3VlmAiC+icTZP3jCibK6O72Uo sMH+5OS2V0tnfoEI1+I7DVGFz7cQn0f/6frsAyyOk5AgKPVpvhfY06Evdztjk5Wl w6Q1yK4K7+Yrel7d5FG1t7zfcVbWKPyja0IuNuLPGr77/KpV7VbHLmAAEQIDAQAB o4ICZzCCAmMwHQYDVR0OBBYEFA0jXShctpSWUxJa5K9Qk+/CKB4QMB8GA1UdIwQY MBaAFFDRgZayn2DoXYcS3kA5pTHPwasxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU5HQmxyS2ZZT2hkaHhMZVFEbWxNY19CcXpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9jYmVjZjQtYmNlZC00ZDgzLWJmY2Et YjRhMTgxY2Q0MGY2LzEvRFNOZEtGeTJsSlpURWxya3IxQ1Q3OElvSGhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9jYmVjZjQtYmNlZC00ZDgzLWJmY2EtYjRhMTgxY2Q0MGY2 LzEvVU5HQmxyS2ZZT2hkaHhMZVFEbWxNY19CcXpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH0GCCsGAQUFBwEHAQH/BG4wbDBUBAIAATBOAwQAJeSEAwQA JeSGAwQAkhN2AwQCuWVcAwQCuWvAAwQCuXScAwQCufWoAwQCwS4YAwQAwTh+AwQA wTiBAwQAwTicAwQAwTitAwQCwn34MBQEAgACMA4DBQEqBhxAAwUDKgZ/gDANBgkq hkiG9w0BAQsFAAOCAQEAR4ARYFf8BNkpkOzNARiTp8PgBB7oRSRGgDwE2aHlSvmM 2hVZwXCn1VyJnfgu3Yh8QNMH7UpuJQ1obtZH+3AzbjHT/NdQHj3NBW2M/LH3TJAD kS5E/J9Sj1z8PPGzdEil1ZlavIphd2LUfyNrHm+YvjzDdZ/+Dbi62hbrPkTIIy/j G3pUGXiJArEGnF5W8zZES79zNj3L4NoiVK88MnB/+TBopVFgOUYUG8lzg/YKfq3S b8AwVMFZftHyKgQTo7YvhV9kH3JGSoL8zov8ERuwDtKTg20wAjiksgg4zgeyNvG6 B73+/y3CCBzJ+OyKJT+ekfOO4B3XCi+L+qiaBtbnCw== -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:11 2026 by rpki-client