This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/VMwkQbgZsaD1modLD1OCZoOdaP0.roa File: VMwkQbgZsaD1modLD1OCZoOdaP0.roa (raw, json) Hash identifier: hFT/2DxMA5YwrG6LBI7zWfiz+2OyUaLWWeHm7RJ0nXg= Subject key identifier: 54:CC:24:41:B8:19:B1:A0:F5:9A:87:4B:0F:53:82:66:83:9D:68:FD Certificate issuer: /CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b Certificate serial: 019B7BA5082EB5D046DDC8564CCD4372333E Authority key identifier: 84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/VMwkQbgZsaD1modLD1OCZoOdaP0.roa Signing time: Thu 01 Jan 2026 22:19:31 +0000 ROA not before: Thu 01 Jan 2026 22:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6453 IP address blocks: 46.235.88.0/21 maxlen: 24 62.204.48.0/24 maxlen: 24 77.75.224.0/24 maxlen: 24 79.110.229.0/24 maxlen: 24 88.85.224.0/19 maxlen: 24 146.19.71.0/24 maxlen: 24 176.98.32.0/22 maxlen: 24 176.241.184.0/21 maxlen: 24 178.20.144.0/21 maxlen: 24 185.10.112.0/22 maxlen: 24 185.72.102.0/24 maxlen: 24 185.224.252.0/24 maxlen: 24 185.224.253.0/24 maxlen: 24 185.224.254.0/24 maxlen: 24 185.224.255.0/24 maxlen: 24 193.105.25.0/24 maxlen: 24 193.242.127.0/24 maxlen: 24 194.104.226.0/24 maxlen: 24 212.12.160.0/19 maxlen: 24 212.12.160.0/24 maxlen: 24 212.12.182.0/24 maxlen: 24 212.108.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:08:2e:b5:d0:46:dd:c8:56:4c:cd:43:72:33:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b Validity Not Before: Jan 1 22:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54cc2441b819b1a0f59a874b0f538266839d68fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:72:cc:4c:43:28:45:41:78:fd:17:07:7d:0f: 3e:ff:7c:14:a2:e9:79:13:0f:a0:43:04:8e:53:f6: 00:37:27:9b:b1:57:8e:5c:65:fa:14:37:00:69:ee: 5d:6d:ab:86:5f:99:37:c2:06:9d:61:fd:d0:fd:c5: e5:ac:5a:5a:a8:e0:3e:d1:ce:40:8e:74:3b:ad:01: b3:d5:85:13:77:b9:2d:db:76:3c:a8:af:e3:c7:c2: 81:38:bc:82:ef:17:0a:a2:54:08:4b:0a:88:8d:78: 4a:34:76:e5:57:b8:b7:7e:4e:a2:99:62:1d:cc:44: 1c:34:bd:cf:a4:9c:d2:1b:52:6b:0d:bd:59:0b:68: 3f:0b:fa:f6:9e:c7:de:52:f2:b8:a0:48:e2:ba:03: ee:00:37:13:3e:ce:1e:5b:74:66:be:44:28:89:27: 5b:ca:69:85:37:1a:3d:df:ef:5c:76:85:0f:49:e8: 36:90:b9:8c:07:14:5c:c0:4b:1f:6e:32:5e:16:6b: 10:fc:e0:f4:e4:2c:93:9f:a4:d5:4c:40:4a:00:d8: d9:c8:60:1f:c6:e6:7e:78:87:0f:f6:0a:0a:70:25: 38:96:30:36:dc:63:a4:c8:f4:27:4f:6a:34:ff:4b: db:48:c9:85:b1:e8:e3:f4:8f:20:97:00:ad:0b:75: c8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CC:24:41:B8:19:B1:A0:F5:9A:87:4B:0F:53:82:66:83:9D:68:FD X509v3 Authority Key Identifier: keyid:84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/VMwkQbgZsaD1modLD1OCZoOdaP0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.88.0/21 62.204.48.0/24 77.75.224.0/24 79.110.229.0/24 88.85.224.0/19 146.19.71.0/24 176.98.32.0/22 176.241.184.0/21 178.20.144.0/21 185.10.112.0/22 185.72.102.0/24 185.224.252.0/22 193.105.25.0/24 193.242.127.0/24 194.104.226.0/24 212.12.160.0/19 212.108.85.0/24 Signature Algorithm: sha256WithRSAEncryption cf:80:30:bd:6a:e0:ea:e8:dd:d9:f5:e6:17:79:f4:d1:90:6a: a9:4a:38:fc:1f:f4:1e:79:9b:c5:a4:b1:cb:8a:14:96:62:60: a0:71:20:4f:aa:4a:5b:69:38:82:c5:d3:87:a3:de:f9:67:85: da:2f:e2:d6:68:79:b3:27:3d:9a:96:5f:f2:c9:c1:fb:b2:44: c2:7f:e2:0b:a7:53:23:ac:44:2a:aa:c8:15:6f:f5:45:3c:8a: 4b:65:b2:60:a6:11:c5:84:be:d4:d2:85:cd:94:5b:2a:bc:dc: e1:19:3c:09:67:88:96:15:80:78:2a:55:81:5a:a2:b9:89:b1: 48:4a:a2:8e:b5:ad:70:b7:6d:3f:95:b5:9f:5f:ad:56:43:7d: e8:04:96:19:21:84:75:d4:15:d3:5d:6d:f9:4b:a2:ee:d4:3b: cf:8a:0d:10:80:b7:97:c5:d4:ba:ab:60:fd:3c:8d:c6:ad:99: 58:64:c2:79:4b:70:31:11:86:2c:94:4a:0c:f9:2a:f7:63:4c: 13:f0:a0:71:a5:c3:55:4d:0a:5a:48:cb:05:01:09:5f:2d:93: 9b:83:de:9c:f9:28:bf:39:86:e8:e2:30:a4:05:a1:9e:b7:e2: f2:01:b1:7f:38:36:a7:68:98:68:3c:0e:55:68:ba:b2:df:64: fc:8c:26:90 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAZt7pQgutdBG3chWTM1DcjM+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NDQ5MmRiOWNiYjBhMGViNmJmNjljMjVjODY5NjFmNDkx ODNjOWIwHhcNMjYwMTAxMjIxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGNjMjQ0MWI4MTliMWEwZjU5YTg3NGIwZjUzODI2NjgzOWQ2OGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXLMTEMoRUF4/RcHfQ8+/3wUoul5 Ew+gQwSOU/YANyebsVeOXGX6FDcAae5dbauGX5k3wgadYf3Q/cXlrFpaqOA+0c5A jnQ7rQGz1YUTd7kt23Y8qK/jx8KBOLyC7xcKolQISwqIjXhKNHblV7i3fk6imWId zEQcNL3PpJzSG1JrDb1ZC2g/C/r2nsfeUvK4oEjiugPuADcTPs4eW3RmvkQoiSdb ymmFNxo93+9cdoUPSeg2kLmMBxRcwEsfbjJeFmsQ/OD05CyTn6TVTEBKANjZyGAf xuZ+eIcP9goKcCU4ljA23GOkyPQnT2o0/0vbSMmFsejj9I8glwCtC3XIwwIDAQAB o4ICaTCCAmUwHQYDVR0OBBYEFFTMJEG4GbGg9ZqHSw9TgmaDnWj9MB8GA1UdIwQY MBaAFIREktucuwoOtr9pwlyGlh9JGDybMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEVTUzI1eTdDZzYydjJuQ1hJYVdIMGtZUEpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8zM2E4ODgtNGNmMy00YThjLTkyOTct YTFlMGRiMWExN2RmLzEvVk13a1FiZ1pzYUQxbW9kTEQxT0Nab09kYVAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8zM2E4ODgtNGNmMy00YThjLTkyOTctYTFlMGRiMWExN2Rm LzEvaEVTUzI1eTdDZzYydjJuQ1hJYVdIMGtZUEpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQDLutYAwQA PswwAwQATUvgAwQAT27lAwQFWFXgAwQAkhNHAwQCsGIgAwQDsPG4AwQDshSQAwQC uQpwAwQAuUhmAwQCueD8AwQAwWkZAwQAwfJ/AwQAwmjiAwQF1AygAwQA1GxVMA0G CSqGSIb3DQEBCwUAA4IBAQDPgDC9auDq6N3Z9eYXefTRkGqpSjj8H/QeeZvFpLHL ihSWYmCgcSBPqkpbaTiCxdOHo975Z4XaL+LWaHmzJz2all/yycH7skTCf+ILp1Mj rEQqqsgVb/VFPIpLZbJgphHFhL7U0oXNlFsqvNzhGTwJZ4iWFYB4KlWBWqK5ibFI SqKOta1wt20/lbWfX61WQ33oBJYZIYR11BXTXW35S6Lu1DvPig0QgLeXxdS6q2D9 PI3GrZlYZMJ5S3AxEYYslEoM+Sr3Y0wT8KBxpcNVTQpaSMsFAQlfLZObg96c+Si/ OYbo4jCkBaGet+LyAbF/ODanaJhoPA5VaLqy32T8jCaQ -----END CERTIFICATE-----Generated at Wed Jan 21 14:30:37 2026 by rpki-client