This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/DLumB3dr6jlfHoiS9Gw_fIJrHvk.roa File: DLumB3dr6jlfHoiS9Gw_fIJrHvk.roa (raw, json) Hash identifier: 5nKHF0MVunEP7PYJoKkfoQt8SYyn/TqTcUA4jgE0VRw= Subject key identifier: 0C:BB:A6:07:77:6B:EA:39:5F:1E:88:92:F4:6C:3F:7C:82:6B:1E:F9 Certificate issuer: /CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b Certificate serial: 019B7BA5086AD5D67B8831E6E6FD97FE8937 Authority key identifier: 84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/DLumB3dr6jlfHoiS9Gw_fIJrHvk.roa Signing time: Thu 01 Jan 2026 22:19:31 +0000 ROA not before: Thu 01 Jan 2026 22:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29684 IP address blocks: 46.235.88.0/21 maxlen: 24 46.235.88.0/23 maxlen: 23 46.235.90.0/23 maxlen: 23 46.235.91.0/24 maxlen: 24 46.235.92.0/23 maxlen: 23 46.235.94.0/23 maxlen: 23 46.235.94.0/24 maxlen: 24 62.204.48.0/24 maxlen: 24 77.75.224.0/24 maxlen: 24 79.110.229.0/24 maxlen: 24 88.85.224.0/19 maxlen: 24 88.85.224.0/21 maxlen: 21 88.85.224.0/23 maxlen: 23 88.85.226.0/23 maxlen: 23 88.85.228.0/23 maxlen: 23 88.85.228.0/24 maxlen: 24 88.85.230.0/23 maxlen: 23 88.85.231.0/24 maxlen: 24 88.85.232.0/21 maxlen: 21 88.85.232.0/24 maxlen: 24 88.85.235.0/24 maxlen: 24 88.85.236.0/24 maxlen: 24 88.85.237.0/24 maxlen: 24 88.85.238.0/23 maxlen: 23 88.85.238.0/24 maxlen: 24 88.85.239.0/24 maxlen: 24 88.85.240.0/21 maxlen: 21 88.85.240.0/23 maxlen: 23 88.85.242.0/24 maxlen: 24 88.85.244.0/24 maxlen: 24 88.85.245.0/24 maxlen: 24 88.85.246.0/23 maxlen: 23 88.85.247.0/24 maxlen: 24 88.85.248.0/21 maxlen: 21 88.85.248.0/23 maxlen: 23 88.85.250.0/23 maxlen: 23 88.85.250.0/24 maxlen: 24 88.85.252.0/23 maxlen: 23 88.85.254.0/24 maxlen: 24 88.85.255.0/24 maxlen: 24 146.19.71.0/24 maxlen: 24 158.94.222.0/24 maxlen: 24 176.97.216.0/24 maxlen: 24 176.98.32.0/22 maxlen: 22 176.98.32.0/24 maxlen: 24 176.98.33.0/24 maxlen: 24 176.98.34.0/23 maxlen: 23 176.98.34.0/24 maxlen: 24 176.98.35.0/24 maxlen: 24 176.241.184.0/21 maxlen: 24 176.241.184.0/23 maxlen: 23 176.241.186.0/23 maxlen: 23 176.241.188.0/24 maxlen: 24 176.241.189.0/24 maxlen: 24 176.241.190.0/24 maxlen: 24 176.241.191.0/24 maxlen: 24 178.20.144.0/21 maxlen: 24 178.20.144.0/23 maxlen: 23 178.20.146.0/23 maxlen: 23 178.20.148.0/23 maxlen: 23 178.20.150.0/23 maxlen: 23 185.10.112.0/22 maxlen: 24 185.10.112.0/24 maxlen: 24 185.10.113.0/24 maxlen: 24 185.10.114.0/23 maxlen: 23 185.10.114.0/24 maxlen: 24 185.10.115.0/24 maxlen: 24 185.72.102.0/24 maxlen: 24 185.149.193.0/24 maxlen: 24 185.224.252.0/22 maxlen: 24 185.224.252.0/23 maxlen: 23 185.224.252.0/24 maxlen: 24 185.224.253.0/24 maxlen: 24 185.224.254.0/23 maxlen: 23 185.224.254.0/24 maxlen: 24 185.224.255.0/24 maxlen: 24 193.105.25.0/24 maxlen: 24 193.242.127.0/24 maxlen: 24 194.104.226.0/24 maxlen: 24 212.12.160.0/19 maxlen: 24 212.12.160.0/20 maxlen: 20 212.12.160.0/23 maxlen: 23 212.12.160.0/24 maxlen: 24 212.12.161.0/24 maxlen: 24 212.12.162.0/23 maxlen: 23 212.12.162.0/24 maxlen: 24 212.12.163.0/24 maxlen: 24 212.12.164.0/23 maxlen: 23 212.12.164.0/24 maxlen: 24 212.12.166.0/23 maxlen: 23 212.12.166.0/24 maxlen: 24 212.12.167.0/24 maxlen: 24 212.12.168.0/23 maxlen: 23 212.12.168.0/24 maxlen: 24 212.12.169.0/24 maxlen: 24 212.12.170.0/23 maxlen: 23 212.12.170.0/24 maxlen: 24 212.12.171.0/24 maxlen: 24 212.12.172.0/23 maxlen: 23 212.12.174.0/23 maxlen: 23 212.12.175.0/24 maxlen: 24 212.12.176.0/20 maxlen: 20 212.12.176.0/23 maxlen: 23 212.12.178.0/23 maxlen: 23 212.12.180.0/23 maxlen: 23 212.12.182.0/23 maxlen: 23 212.12.182.0/24 maxlen: 24 212.12.183.0/24 maxlen: 24 212.12.184.0/23 maxlen: 23 212.12.185.0/24 maxlen: 24 212.12.186.0/23 maxlen: 23 212.12.187.0/24 maxlen: 24 212.12.188.0/23 maxlen: 23 212.12.189.0/24 maxlen: 24 212.12.190.0/23 maxlen: 23 212.108.85.0/24 maxlen: 24 2a00:1560::/32 maxlen: 32 2a00:1560:4::/47 maxlen: 47 2a00:1560:5::/48 maxlen: 48 2a00:1560:c::/48 maxlen: 48 2a00:1560:10::/48 maxlen: 48 2a00:1560:16::/48 maxlen: 48 2a00:1560:17::/48 maxlen: 48 2a00:1560:18::/48 maxlen: 48 2a00:1560:20::/48 maxlen: 48 2a00:1560:21::/48 maxlen: 48 2a00:1560:24::/48 maxlen: 48 2a00:1560:60::/48 maxlen: 48 2a00:1560:1111::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 22:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:08:6a:d5:d6:7b:88:31:e6:e6:fd:97:fe:89:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b Validity Not Before: Jan 1 22:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0cbba607776bea395f1e8892f46c3f7c826b1ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7e:54:cf:0c:31:63:b9:32:4f:e1:c0:64:46: 7e:33:ac:b9:17:39:1e:35:66:43:de:9b:b6:4c:7d: d0:df:3f:62:25:d6:9d:0a:15:d6:ce:b2:c8:6d:3e: 20:0a:cc:7f:cf:17:25:3e:93:92:b2:38:8a:ef:b4: 15:37:64:ec:08:6d:fa:27:65:b8:01:11:f3:0c:84: 2c:07:76:04:7e:51:86:12:fa:e2:0d:fa:45:cf:d6: 9a:8f:2f:2b:6e:c6:4d:21:0c:db:15:54:46:9f:67: 01:f9:7c:fd:e2:12:d0:4d:ad:6c:da:f8:bc:04:45: 17:17:8a:67:c6:e9:51:94:71:3c:03:e9:12:a7:12: f3:5e:b9:df:8b:fe:0a:14:66:1d:ec:98:cf:c3:77: 6b:da:08:93:b2:0b:c5:5c:1e:f0:65:42:43:48:36: b3:0b:70:7f:f8:ce:2a:f9:57:1c:8c:33:04:fa:0e: 0c:7f:ae:e8:eb:d0:ea:5e:84:2b:18:b1:24:77:2c: 8c:2d:0f:21:e5:e9:07:64:49:27:4f:de:7e:66:1a: 87:34:a9:4e:58:e0:18:51:69:20:2a:54:db:0e:3e: f7:c7:dc:7c:c7:9c:f4:d4:a5:ca:39:dd:2f:15:b8: 18:68:3d:e2:71:5e:84:52:e1:77:09:ed:52:2f:1f: 7e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:BB:A6:07:77:6B:EA:39:5F:1E:88:92:F4:6C:3F:7C:82:6B:1E:F9 X509v3 Authority Key Identifier: keyid:84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/DLumB3dr6jlfHoiS9Gw_fIJrHvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.88.0/21 62.204.48.0/24 77.75.224.0/24 79.110.229.0/24 88.85.224.0/19 146.19.71.0/24 158.94.222.0/24 176.97.216.0/24 176.98.32.0/22 176.241.184.0/21 178.20.144.0/21 185.10.112.0/22 185.72.102.0/24 185.149.193.0/24 185.224.252.0/22 193.105.25.0/24 193.242.127.0/24 194.104.226.0/24 212.12.160.0/19 212.108.85.0/24 IPv6: 2a00:1560::/32 Signature Algorithm: sha256WithRSAEncryption 0f:9b:32:2b:6b:97:83:6f:72:ea:67:f8:32:15:b3:10:02:fe: f9:e4:a1:c2:c0:36:b8:5f:01:a1:41:cb:e6:0f:9a:9b:56:2b: 77:d4:bb:2e:1b:19:47:ff:f6:ff:6c:73:ad:9f:ae:40:c6:92: aa:26:7b:0b:9d:10:81:d1:81:8d:36:07:bd:6a:e8:a9:7b:a4: eb:f6:37:90:90:e0:f1:8b:a1:5e:35:c0:91:5a:85:9c:de:18: 7d:9f:4c:9a:7c:84:5a:51:9d:41:cb:61:4f:7a:aa:78:d3:f1: 45:aa:d8:95:ae:ac:0a:a6:85:51:13:17:99:48:b2:4e:fd:43: c5:d2:d3:82:34:36:c6:af:3b:ac:72:d5:a0:a6:20:a7:89:81: c4:6a:72:5d:f3:27:4c:0a:ca:a9:ed:e1:54:90:56:69:1f:89: ea:5f:e9:8d:da:b3:5c:61:0c:c0:76:c9:a1:d9:fc:5a:32:19: 22:57:82:5c:c4:6f:96:c2:d1:73:47:e7:f9:98:e7:fc:ed:fb: 3a:74:55:dc:fb:02:8b:53:16:a9:f5:c9:f8:3f:40:f6:0f:22: 6d:09:74:0b:c8:a4:1a:3d:a3:5c:35:3f:bb:2d:7f:05:dd:36: 04:ee:e4:84:8e:5f:eb:70:fc:49:eb:21:aa:01:21:d2:23:1d: a6:0e:33:76 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgISAZt7pQhq1dZ7iDHm5v2X/ok3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NDQ5MmRiOWNiYjBhMGViNmJmNjljMjVjODY5NjFmNDkx ODNjOWIwHhcNMjYwMTAxMjIxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2JiYTYwNzc3NmJlYTM5NWYxZTg4OTJmNDZjM2Y3YzgyNmIxZWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1H5UzwwxY7kyT+HAZEZ+M6y5Fzke NWZD3pu2TH3Q3z9iJdadChXWzrLIbT4gCsx/zxclPpOSsjiK77QVN2TsCG36J2W4 ARHzDIQsB3YEflGGEvriDfpFz9aajy8rbsZNIQzbFVRGn2cB+Xz94hLQTa1s2vi8 BEUXF4pnxulRlHE8A+kSpxLzXrnfi/4KFGYd7JjPw3dr2giTsgvFXB7wZUJDSDaz C3B/+M4q+VccjDME+g4Mf67o69DqXoQrGLEkdyyMLQ8h5ekHZEknT95+ZhqHNKlO WOAYUWkgKlTbDj73x9x8x5z01KXKOd0vFbgYaD3icV6EUuF3Ce1SLx9+LwIDAQAB o4ICjTCCAokwHQYDVR0OBBYEFAy7pgd3a+o5Xx6IkvRsP3yCax75MB8GA1UdIwQY MBaAFIREktucuwoOtr9pwlyGlh9JGDybMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEVTUzI1eTdDZzYydjJuQ1hJYVdIMGtZUEpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8zM2E4ODgtNGNmMy00YThjLTkyOTct YTFlMGRiMWExN2RmLzEvREx1bUIzZHI2amxmSG9pUzlHd19mSUpySHZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8zM2E4ODgtNGNmMy00YThjLTkyOTctYTFlMGRiMWExN2Rm LzEvaEVTUzI1eTdDZzYydjJuQ1hJYVdIMGtZUEpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGiBggrBgEFBQcBBwEB/wSBkjCBjzB+BAIAATB4AwQDLutY AwQAPswwAwQATUvgAwQAT27lAwQFWFXgAwQAkhNHAwQAnl7eAwQAsGHYAwQCsGIg AwQDsPG4AwQDshSQAwQCuQpwAwQAuUhmAwQAuZXBAwQCueD8AwQAwWkZAwQAwfJ/ AwQAwmjiAwQF1AygAwQA1GxVMA0EAgACMAcDBQAqABVgMA0GCSqGSIb3DQEBCwUA A4IBAQAPmzIra5eDb3LqZ/gyFbMQAv755KHCwDa4XwGhQcvmD5qbVit31LsuGxlH //b/bHOtn65AxpKqJnsLnRCB0YGNNge9auipe6Tr9jeQkODxi6FeNcCRWoWc3hh9 n0yafIRaUZ1By2FPeqp40/FFqtiVrqwKpoVRExeZSLJO/UPF0tOCNDbGrzusctWg piCniYHEanJd8ydMCsqp7eFUkFZpH4nqX+mN2rNcYQzAdsmh2fxaMhkiV4JcxG+W wtFzR+f5mOf87fs6dFXc+wKLUxap9cn4P0D2DyJtCXQLyKQaPaNcNT+7LX8F3TYE 7uSEjl/rcPxJ6yGqASHSIx2mDjN2 -----END CERTIFICATE-----Generated at Tue Jan 20 07:47:13 2026 by rpki-client