This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/C53oCg7kRoBXocgajR_ZpGWJqn4.roa File: C53oCg7kRoBXocgajR_ZpGWJqn4.roa (raw, json) Hash identifier: PkakGt0bbQY/2tn/r6YJVwwmAKETiXnq03+IjFLAZQs= Subject key identifier: 0B:9D:E8:0A:0E:E4:46:80:57:A1:C8:1A:8D:1F:D9:A4:65:89:AA:7E Certificate issuer: /CN=3b230442feae9fc26b8bd887faa0ed0275827a58 Certificate serial: 019B7E37FFD914341836AD0EE5EBFBC2986B Authority key identifier: 3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/C53oCg7kRoBXocgajR_ZpGWJqn4.roa Signing time: Fri 02 Jan 2026 10:19:17 +0000 ROA not before: Fri 02 Jan 2026 10:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48951 IP address blocks: 78.140.64.0/18 maxlen: 18 78.140.64.0/21 maxlen: 21 78.140.64.0/24 maxlen: 24 78.140.65.0/24 maxlen: 24 78.140.66.0/24 maxlen: 24 78.140.67.0/24 maxlen: 24 78.140.68.0/24 maxlen: 24 78.140.72.0/22 maxlen: 22 78.140.72.0/24 maxlen: 24 78.140.76.0/22 maxlen: 22 78.140.76.0/24 maxlen: 24 78.140.80.0/23 maxlen: 23 78.140.80.0/24 maxlen: 24 78.140.81.0/24 maxlen: 24 81.7.192.0/19 maxlen: 19 81.7.208.0/21 maxlen: 21 81.7.208.0/22 maxlen: 22 81.7.216.0/21 maxlen: 21 81.7.216.0/22 maxlen: 22 81.7.220.0/22 maxlen: 22 82.210.192.0/18 maxlen: 18 82.210.224.0/19 maxlen: 19 82.210.254.0/24 maxlen: 24 82.210.255.0/24 maxlen: 24 93.122.0.0/17 maxlen: 17 93.122.40.0/22 maxlen: 22 93.122.44.0/22 maxlen: 22 93.122.48.0/22 maxlen: 22 93.122.52.0/22 maxlen: 22 93.122.56.0/22 maxlen: 22 93.122.60.0/22 maxlen: 22 93.122.64.0/22 maxlen: 22 93.122.68.0/22 maxlen: 22 93.122.72.0/21 maxlen: 21 93.122.80.0/22 maxlen: 22 93.122.84.0/22 maxlen: 22 93.122.88.0/22 maxlen: 22 93.122.92.0/22 maxlen: 22 185.149.164.0/22 maxlen: 22 194.41.39.0/24 maxlen: 24 2a01:660::/29 maxlen: 29 2a01:664::/38 maxlen: 38 2a01:664:800::/38 maxlen: 38 2a01:664:1200::/39 maxlen: 39 2a01:664:1200::/40 maxlen: 40 2a01:664:1300::/40 maxlen: 40 2a01:664:1600::/40 maxlen: 40 2a01:664:1700::/40 maxlen: 40 2a01:664:1800::/40 maxlen: 40 2a01:664:1900::/40 maxlen: 40 2a01:664:1a00::/40 maxlen: 40 2a01:666::/32 maxlen: 32 2a01:666::/40 maxlen: 40 2a01:666:400::/40 maxlen: 40 2a01:667::/32 maxlen: 32 2a01:667::/40 maxlen: 40 2a01:667:400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ff:d9:14:34:18:36:ad:0e:e5:eb:fb:c2:98:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b230442feae9fc26b8bd887faa0ed0275827a58 Validity Not Before: Jan 2 10:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b9de80a0ee4468057a1c81a8d1fd9a46589aa7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d8:6b:88:30:d0:58:fe:a2:a5:4f:04:f2:5a: cc:a6:c6:9e:24:76:2a:69:47:c2:b1:17:db:cc:5b: 52:30:2b:48:3a:0a:ab:11:3f:6c:71:4d:61:4e:e3: c3:3e:01:00:7a:85:d1:48:13:27:d4:6a:56:f5:99: 3c:fe:78:4d:01:5a:ac:7d:e4:f6:16:82:38:67:0f: 44:c1:13:28:a0:10:0f:e5:7e:73:77:39:0a:93:c2: c4:8f:12:b1:38:1b:25:95:2c:4b:63:34:0f:b7:0f: f7:82:4e:34:88:31:f6:bd:8b:c3:1b:10:d5:7a:f1: 8a:37:1f:63:7c:49:af:9f:4d:2a:29:9d:35:ca:28: d7:37:69:00:5f:e2:44:12:ee:4d:cd:e7:68:1c:97: 20:12:cd:63:99:1b:f4:1b:21:f7:ef:59:9a:45:1a: 0d:05:bd:e8:b2:6c:05:44:5c:49:67:10:cd:08:4e: 2a:42:be:5e:33:93:fd:c0:97:98:5a:11:40:2e:1b: c0:16:80:c1:c5:00:9a:27:0b:5d:0f:4b:43:06:91: 7b:05:f2:bd:be:51:66:52:19:5b:5c:ad:32:1a:a7: 94:af:88:05:e7:f5:5d:0c:27:ee:e7:f9:f5:76:68: 26:8b:d0:39:08:95:9e:0f:77:34:5c:98:37:aa:e0: 0f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:9D:E8:0A:0E:E4:46:80:57:A1:C8:1A:8D:1F:D9:A4:65:89:AA:7E X509v3 Authority Key Identifier: keyid:3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/C53oCg7kRoBXocgajR_ZpGWJqn4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.140.64.0/18 81.7.192.0/19 82.210.192.0/18 93.122.0.0/17 185.149.164.0/22 194.41.39.0/24 IPv6: 2a01:660::/29 Signature Algorithm: sha256WithRSAEncryption 20:0c:a8:ae:a6:e7:41:12:cb:c2:2b:12:ce:9e:8f:41:98:77: cc:ae:f9:da:3c:4c:7e:07:a0:c8:be:8c:d4:5b:14:1a:da:e3: 2b:c9:b4:cf:ac:d6:e5:a3:40:2f:fd:fc:3a:42:ca:4e:11:1c: 35:d1:0a:b8:59:ee:c5:1f:68:1d:d3:c0:40:f4:ef:af:c6:38: 53:3c:d6:80:9c:b4:71:ec:e2:ba:dc:ea:b9:39:25:0b:1a:53: e8:a1:73:af:4e:e2:48:d0:9f:18:56:c1:cc:da:c8:78:c7:e0: c6:e0:f0:df:f2:42:59:21:27:bf:b8:3d:e1:bd:3e:23:f8:31: 1e:81:90:cf:09:11:92:6e:28:6d:a9:3b:a3:0a:30:4f:34:ef: 42:b2:d2:45:b2:94:26:62:bf:ee:e9:22:0d:2f:24:b3:8f:aa: da:88:56:94:6e:0e:fe:04:1e:e4:16:ae:34:a2:2b:64:95:67: 9b:5f:0a:42:70:9e:03:64:c0:9e:62:f0:73:5a:0c:d4:b6:c3: 57:b7:04:f3:e3:69:c9:db:29:a5:30:9c:70:a0:5e:48:3e:cc: e2:42:4c:a9:b6:a7:66:04:66:53:6a:a3:aa:65:95:6d:c4:6c: 5f:fa:7d:e9:41:87:75:67:87:14:43:8b:8c:e1:4d:00:af:1e: d7:de:85:e8 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt+N//ZFDQYNq0O5ev7wphrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMjMwNDQyZmVhZTlmYzI2YjhiZDg4N2ZhYTBlZDAyNzU4 MjdhNTgwHhcNMjYwMTAyMTAxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjlkZTgwYTBlZTQ0NjgwNTdhMWM4MWE4ZDFmZDlhNDY1ODlhYTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdhriDDQWP6ipU8E8lrMpsaeJHYq aUfCsRfbzFtSMCtIOgqrET9scU1hTuPDPgEAeoXRSBMn1GpW9Zk8/nhNAVqsfeT2 FoI4Zw9EwRMooBAP5X5zdzkKk8LEjxKxOBsllSxLYzQPtw/3gk40iDH2vYvDGxDV evGKNx9jfEmvn00qKZ01yijXN2kAX+JEEu5NzedoHJcgEs1jmRv0GyH371maRRoN Bb3osmwFRFxJZxDNCE4qQr5eM5P9wJeYWhFALhvAFoDBxQCaJwtdD0tDBpF7BfK9 vlFmUhlbXK0yGqeUr4gF5/VdDCfu5/n1dmgmi9A5CJWeD3c0XJg3quAPfQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFAud6AoO5EaAV6HIGo0f2aRliap+MB8GA1UdIwQY MBaAFDsjBEL+rp/Ca4vYh/qg7QJ1gnpYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3lNRVF2NnVuOEpyaTlpSC1xRHRBbldDZWxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8zYTEwOTQtOWI3MC00MjUxLWI2OGYt NzI2NzA3Mzc2MWQ0LzEvQzUzb0NnN2tSb0JYb2NnYWpSX1pwR1dKcW40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8zYTEwOTQtOWI3MC00MjUxLWI2OGYtNzI2NzA3Mzc2MWQ0 LzEvT3lNRVF2NnVuOEpyaTlpSC1xRHRBbldDZWxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQGToxAAwQF UQfAAwQGUtLAAwQHXXoAAwQCuZWkAwQAwiknMA0EAgACMAcDBQMqAQZgMA0GCSqG SIb3DQEBCwUAA4IBAQAgDKiupudBEsvCKxLOno9BmHfMrvnaPEx+B6DIvozUWxQa 2uMrybTPrNblo0Av/fw6QspOERw10Qq4We7FH2gd08BA9O+vxjhTPNaAnLRx7OK6 3Oq5OSULGlPooXOvTuJI0J8YVsHM2sh4x+DG4PDf8kJZISe/uD3hvT4j+DEegZDP CRGSbihtqTujCjBPNO9CstJFspQmYr/u6SINLySzj6raiFaUbg7+BB7kFq40oitk lWebXwpCcJ4DZMCeYvBzWgzUtsNXtwTz42nJ2ymlMJxwoF5IPsziQkyptqdmBGZT aqOqZZVtxGxf+n3pQYd1Z4cUQ4uM4U0Arx7X3oXo -----END CERTIFICATE-----Generated at Tue Feb 10 00:10:04 2026 by rpki-client