This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/981-IU8JMcW6m9Nh63ckXiipbzs.roa File: 981-IU8JMcW6m9Nh63ckXiipbzs.roa (raw, json) Hash identifier: iGoH79/4bB2scbnnWvfi3JLsETMk5GFiaBNf+QFz4A4= Subject key identifier: F7:CD:7E:21:4F:09:31:C5:BA:9B:D3:61:EB:77:24:5E:28:A9:6F:3B Certificate issuer: /CN=aef1eefaa757d38eb104fa4cba4d962b72e52b52 Certificate serial: 019B791025F1FEF982C21C0DBE0186F77975 Authority key identifier: AE:F1:EE:FA:A7:57:D3:8E:B1:04:FA:4C:BA:4D:96:2B:72:E5:2B:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/981-IU8JMcW6m9Nh63ckXiipbzs.roa Signing time: Thu 01 Jan 2026 10:17:39 +0000 ROA not before: Thu 01 Jan 2026 10:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29222 IP address blocks: 37.156.40.0/21 maxlen: 24 45.157.188.0/22 maxlen: 24 83.166.128.0/19 maxlen: 24 83.228.192.0/18 maxlen: 24 84.16.64.0/19 maxlen: 24 84.234.16.0/20 maxlen: 24 89.47.48.0/22 maxlen: 24 91.214.188.0/22 maxlen: 24 93.88.240.0/20 maxlen: 24 128.65.192.0/21 maxlen: 24 185.74.68.0/22 maxlen: 24 185.125.24.0/22 maxlen: 24 185.143.100.0/22 maxlen: 24 185.172.100.0/22 maxlen: 24 185.176.224.0/22 maxlen: 24 185.177.60.0/22 maxlen: 24 185.181.160.0/22 maxlen: 24 188.213.128.0/22 maxlen: 24 193.108.52.0/22 maxlen: 24 193.111.233.0/24 maxlen: 24 193.128.7.0/24 maxlen: 24 193.134.93.0/24 maxlen: 24 193.134.250.0/24 maxlen: 24 195.15.192.0/18 maxlen: 24 2001:1600::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.crl rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:25:f1:fe:f9:82:c2:1c:0d:be:01:86:f7:79:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aef1eefaa757d38eb104fa4cba4d962b72e52b52 Validity Not Before: Jan 1 10:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7cd7e214f0931c5ba9bd361eb77245e28a96f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cc:d4:66:fa:58:e6:17:86:ee:dc:5b:2c:11: 8e:66:5d:5d:9b:81:45:52:17:09:f4:a2:0f:c4:da: 80:5c:a7:94:01:37:f3:00:bd:bb:2b:94:8e:e3:73: 66:ae:dd:08:ba:56:89:77:90:e4:27:a5:ed:ca:a4: 04:b7:4a:d9:46:b2:fc:83:86:35:fd:47:a2:f0:1c: b6:ff:61:fa:20:82:ef:99:73:6f:e7:6b:38:2a:52: bd:71:61:96:c3:fa:64:74:bb:71:cf:2c:f8:3d:6e: 82:a8:20:f8:85:fe:f9:2f:77:af:da:57:69:ec:7c: 5c:97:0a:b2:f9:21:ed:c4:79:d1:19:a4:99:c8:6e: 77:f9:74:7a:90:0c:ba:99:c5:9e:8e:7c:e1:9e:85: b0:1d:29:d7:39:74:8c:63:8a:b4:fd:3e:df:cb:ad: ca:9d:c9:c6:4e:d3:0f:fb:02:5b:e2:58:d8:66:49: 19:c1:dc:18:09:1e:96:1d:1e:1c:34:b8:e7:f5:51: aa:46:c6:7c:00:c8:98:44:1b:bd:25:b2:59:17:71: ee:a7:fd:34:15:f7:75:ba:9f:8c:7a:7b:70:8e:0c: 8d:55:27:46:7b:db:ee:fc:10:e8:29:c4:77:c6:a9: 00:d6:3d:c1:1b:24:f2:82:32:5b:be:21:49:7b:59: 94:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CD:7E:21:4F:09:31:C5:BA:9B:D3:61:EB:77:24:5E:28:A9:6F:3B X509v3 Authority Key Identifier: keyid:AE:F1:EE:FA:A7:57:D3:8E:B1:04:FA:4C:BA:4D:96:2B:72:E5:2B:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/981-IU8JMcW6m9Nh63ckXiipbzs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.156.40.0/21 45.157.188.0/22 83.166.128.0/19 83.228.192.0/18 84.16.64.0/19 84.234.16.0/20 89.47.48.0/22 91.214.188.0/22 93.88.240.0/20 128.65.192.0/21 185.74.68.0/22 185.125.24.0/22 185.143.100.0/22 185.172.100.0/22 185.176.224.0/22 185.177.60.0/22 185.181.160.0/22 188.213.128.0/22 193.108.52.0/22 193.111.233.0/24 193.128.7.0/24 193.134.93.0/24 193.134.250.0/24 195.15.192.0/18 IPv6: 2001:1600::/29 Signature Algorithm: sha256WithRSAEncryption 1e:29:6f:5a:0d:36:0c:24:be:6f:f8:35:55:99:f9:d4:25:20: 4c:a0:61:57:3b:8e:fb:c3:6f:1c:fb:06:18:04:2c:b0:69:60: b8:75:2c:ff:be:d6:49:6c:b3:45:67:b4:c9:e3:11:fb:30:c9: 1c:0d:ee:16:57:53:45:f4:0f:b1:3f:0e:66:10:ad:c6:19:05: 36:af:bf:f8:25:31:17:80:13:dc:0c:c3:57:74:8f:a5:a4:e3: d7:e6:02:b4:f2:0e:51:42:ec:b4:8f:a1:eb:87:1c:bc:76:2a: e3:66:b6:a6:5c:80:59:5d:06:98:2b:15:0c:98:e3:5c:9c:40: b4:b8:a2:3d:ea:7b:c9:af:57:81:5f:8f:d8:63:c8:1f:d5:f2: 5a:ad:04:65:49:ca:5e:66:51:da:66:1c:6c:8e:24:bc:bc:e3: 8a:5c:d7:d9:6d:60:97:07:9a:e2:ce:dc:92:6b:c0:d4:c8:09: d8:96:93:d5:67:71:e0:48:7a:97:1a:5f:68:6c:5f:1b:de:9a: 1f:0a:8b:da:21:39:31:b7:2f:44:d3:cc:28:a1:fa:2e:7e:fe: 30:d2:3b:1b:e1:02:73:7c:06:58:01:fb:7a:c5:19:7d:9e:2e: 49:cd:ff:9e:db:ba:3c:d2:4c:89:d5:fe:b4:59:65:a7:c4:fc: c6:ac:09:64 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgISAZt5ECXx/vmCwhwNvgGG93l1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZjFlZWZhYTc1N2QzOGViMTA0ZmE0Y2JhNGQ5NjJiNzJl NTJiNTIwHhcNMjYwMTAxMTAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2NkN2UyMTRmMDkzMWM1YmE5YmQzNjFlYjc3MjQ1ZTI4YTk2ZjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoczUZvpY5heG7txbLBGOZl1dm4FF UhcJ9KIPxNqAXKeUATfzAL27K5SO43Nmrt0IulaJd5DkJ6XtyqQEt0rZRrL8g4Y1 /Uei8By2/2H6IILvmXNv52s4KlK9cWGWw/pkdLtxzyz4PW6CqCD4hf75L3ev2ldp 7Hxclwqy+SHtxHnRGaSZyG53+XR6kAy6mcWejnzhnoWwHSnXOXSMY4q0/T7fy63K ncnGTtMP+wJb4ljYZkkZwdwYCR6WHR4cNLjn9VGqRsZ8AMiYRBu9JbJZF3Hup/00 Ffd1up+MentwjgyNVSdGe9vu/BDoKcR3xqkA1j3BGyTygjJbviFJe1mUzwIDAQAB o4ICpzCCAqMwHQYDVR0OBBYEFPfNfiFPCTHFupvTYet3JF4oqW87MB8GA1UdIwQY MBaAFK7x7vqnV9OOsQT6TLpNlity5StSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnZIdS1xZFgwNDZ4QlBwTXVrMldLM0xsSzFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jOWYzM2ItMmYxYi00YTExLWEyMWQt OWE2YmQwMTFmOGY2LzEvOTgxLUlVOEpNY1c2bTlOaDYzY2tYaWlwYnpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9jOWYzM2ItMmYxYi00YTExLWEyMWQtOWE2YmQwMTFmOGY2 LzEvcnZIdS1xZFgwNDZ4QlBwTXVrMldLM0xsSzFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG8BggrBgEFBQcBBwEB/wSBrDCBqTCBlwQCAAEwgZADBAMl nCgDBAItnbwDBAVTpoADBAZT5MADBAVUEEADBARU6hADBAJZLzADBAJb1rwDBARd WPADBAOAQcADBAK5SkQDBAK5fRgDBAK5j2QDBAK5rGQDBAK5sOADBAK5sTwDBAK5 taADBAK81YADBALBbDQDBADBb+kDBADBgAcDBADBhl0DBADBhvoDBAbDD8AwDQQC AAIwBwMFAyABFgAwDQYJKoZIhvcNAQELBQADggEBAB4pb1oNNgwkvm/4NVWZ+dQl IEygYVc7jvvDbxz7BhgELLBpYLh1LP++1klss0VntMnjEfswyRwN7hZXU0X0D7E/ DmYQrcYZBTavv/glMReAE9wMw1d0j6Wk49fmArTyDlFC7LSPoeuHHLx2KuNmtqZc gFldBpgrFQyY41ycQLS4oj3qe8mvV4Ffj9hjyB/V8lqtBGVJyl5mUdpmHGyOJLy8 44pc19ltYJcHmuLO3JJrwNTICdiWk9VnceBIepcaX2hsXxvemh8Ki9ohOTG3L0TT zCih+i5+/jDSOxvhAnN8BlgB+3rFGX2eLknN/57bujzSTInV/rRZZafE/MasCWQ= -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:49 2026 by rpki-client