This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/tOwIr5rqRiWWbnHNQWqLpKUZs_Y.roa File: tOwIr5rqRiWWbnHNQWqLpKUZs_Y.roa (raw, json) Hash identifier: PXSR8LG7lbRGUnDBil2ppymSleNTy4CJ0xpLtZzhfjo= Subject key identifier: B4:EC:08:AF:9A:EA:46:25:96:6E:71:CD:41:6A:8B:A4:A5:19:B3:F6 Certificate issuer: /CN=9821e37eab6ef6326933e5fa3748d07d83026db0 Certificate serial: 019B7DCB25CA50F0EFB9D492FE5ECA654E84 Authority key identifier: 98:21:E3:7E:AB:6E:F6:32:69:33:E5:FA:37:48:D0:7D:83:02:6D:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/tOwIr5rqRiWWbnHNQWqLpKUZs_Y.roa Signing time: Fri 02 Jan 2026 08:20:24 +0000 ROA not before: Fri 02 Jan 2026 08:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35370 IP address blocks: 78.152.64.0/19 maxlen: 24 78.152.64.0/21 maxlen: 21 78.152.68.0/24 maxlen: 24 78.152.72.0/21 maxlen: 21 78.152.80.0/21 maxlen: 21 78.152.88.0/21 maxlen: 24 78.152.88.0/22 maxlen: 22 78.152.92.0/22 maxlen: 22 78.152.95.0/24 maxlen: 24 87.243.128.0/18 maxlen: 18 87.243.128.0/22 maxlen: 22 87.243.132.0/22 maxlen: 22 87.243.136.0/22 maxlen: 22 87.243.140.0/22 maxlen: 22 87.243.144.0/23 maxlen: 23 87.243.144.0/24 maxlen: 24 87.243.145.0/24 maxlen: 24 87.243.146.0/23 maxlen: 23 87.243.148.0/23 maxlen: 23 87.243.150.0/23 maxlen: 23 87.243.152.0/22 maxlen: 22 87.243.154.0/24 maxlen: 24 87.243.156.0/23 maxlen: 23 87.243.156.0/24 maxlen: 24 87.243.157.0/24 maxlen: 24 87.243.158.0/23 maxlen: 23 87.243.158.0/24 maxlen: 24 87.243.160.0/22 maxlen: 22 87.243.160.0/23 maxlen: 23 87.243.164.0/22 maxlen: 22 87.243.168.0/23 maxlen: 23 87.243.171.0/24 maxlen: 24 87.243.172.0/22 maxlen: 22 87.243.177.0/24 maxlen: 24 87.243.178.0/24 maxlen: 24 87.243.180.0/22 maxlen: 22 87.243.184.0/21 maxlen: 21 87.243.184.0/24 maxlen: 24 2a0b:9e00::/29 maxlen: 29 2a0b:9e00::/32 maxlen: 32 2a0b:9e01::/32 maxlen: 32 2a0b:9e02::/32 maxlen: 32 2a0b:9e03::/32 maxlen: 32 2a0b:9e04::/32 maxlen: 32 2a0b:9e05::/32 maxlen: 32 2a0b:9e06::/32 maxlen: 32 2a0b:9e07::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:25:ca:50:f0:ef:b9:d4:92:fe:5e:ca:65:4e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9821e37eab6ef6326933e5fa3748d07d83026db0 Validity Not Before: Jan 2 08:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4ec08af9aea4625966e71cd416a8ba4a519b3f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f3:12:4c:1d:7c:54:f6:22:dc:5f:de:91:05: 6b:2b:44:19:db:48:82:40:0b:ae:c5:93:7c:20:9d: 43:3d:73:e2:b4:0f:8b:bc:72:21:ed:83:db:5f:5e: a3:3d:f0:a8:c1:b2:23:41:17:77:5d:9c:b4:f2:96: 8e:1d:9f:59:86:83:30:b0:d7:72:6f:02:b1:13:0b: 06:00:29:c0:f5:53:52:b6:77:43:d5:90:54:8e:e0: b7:c2:cd:8b:72:64:a8:71:c8:99:b5:42:fe:31:cd: c5:d6:9d:f7:e1:f4:d9:2c:45:43:53:4f:8f:dd:4e: 64:c4:0e:81:df:78:53:ed:63:f0:34:9a:bb:23:4f: 23:c1:a9:f6:f2:6b:06:3d:1d:96:56:5e:56:2d:ce: f5:bf:26:e5:c7:80:ac:84:d4:11:ba:f6:d6:7c:9b: ca:b8:f4:ca:79:c4:a6:4b:a1:e5:cf:ea:76:82:06: 18:3a:2f:d5:ad:dc:45:39:96:77:da:aa:fd:f3:9f: aa:2f:cd:e5:a8:5d:b0:62:dd:19:86:f4:14:6e:d0: 94:a1:fc:94:b1:dd:53:8b:9b:32:1c:3c:72:0a:0c: 54:ac:fa:c6:75:d8:2f:8f:c7:7a:d1:39:3d:fb:66: 79:21:84:55:81:cc:d9:b7:29:af:38:0b:d9:e4:fe: 58:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:EC:08:AF:9A:EA:46:25:96:6E:71:CD:41:6A:8B:A4:A5:19:B3:F6 X509v3 Authority Key Identifier: keyid:98:21:E3:7E:AB:6E:F6:32:69:33:E5:FA:37:48:D0:7D:83:02:6D:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/tOwIr5rqRiWWbnHNQWqLpKUZs_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.152.64.0/19 87.243.128.0/18 IPv6: 2a0b:9e00::/29 Signature Algorithm: sha256WithRSAEncryption 37:ca:c4:17:22:02:d1:4d:62:0d:1f:10:49:d5:49:4f:59:b5: b1:39:21:f5:4a:8f:19:80:75:f3:4e:6d:c4:32:f6:6d:1d:ae: 9f:7b:d8:23:a1:66:e1:ba:e7:56:cb:c2:3c:b5:fe:82:1f:b7: 01:9d:07:7a:62:f0:ec:b6:73:12:2c:f0:9e:94:95:dc:be:32: ec:b6:88:27:1d:36:70:6b:82:ba:94:0c:7a:f0:87:20:04:50: e6:2e:ae:80:99:67:98:38:67:31:ca:78:0e:c2:80:f4:fc:1b: eb:2a:99:da:cc:18:80:4a:91:c1:ca:be:61:3a:62:1a:be:63: ba:9d:be:83:cd:0c:15:f5:0f:eb:d7:f3:59:4b:5e:61:a8:c8: 9e:5a:fd:18:ba:bf:cf:15:e5:70:ec:e7:bf:e4:a1:0f:3d:fe: 14:a0:44:af:4f:e1:60:df:74:2c:75:f7:cb:f7:21:ba:87:50: 63:53:d8:d5:e5:10:b2:02:cc:44:16:62:ed:8b:e3:f9:e7:3d: 43:94:ac:c1:c6:cb:c1:32:d5:17:89:80:b1:d7:46:c9:da:0c: 32:f0:b8:63:fc:66:1e:34:b9:75:6e:ed:4e:54:d4:a9:9a:a6: 38:29:00:ab:77:a4:36:bb:b1:ce:3e:63:2d:24:ba:4d:3c:05: ca:48:d2:cc -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9yyXKUPDvudSS/l7KZU6EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MjFlMzdlYWI2ZWY2MzI2OTMzZTVmYTM3NDhkMDdkODMw MjZkYjAwHhcNMjYwMTAyMDgyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGVjMDhhZjlhZWE0NjI1OTY2ZTcxY2Q0MTZhOGJhNGE1MTliM2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPMSTB18VPYi3F/ekQVrK0QZ20iC QAuuxZN8IJ1DPXPitA+LvHIh7YPbX16jPfCowbIjQRd3XZy08paOHZ9ZhoMwsNdy bwKxEwsGACnA9VNStndD1ZBUjuC3ws2LcmSocciZtUL+Mc3F1p334fTZLEVDU0+P 3U5kxA6B33hT7WPwNJq7I08jwan28msGPR2WVl5WLc71vyblx4CshNQRuvbWfJvK uPTKecSmS6Hlz+p2ggYYOi/VrdxFOZZ32qr985+qL83lqF2wYt0ZhvQUbtCUofyU sd1Ti5syHDxyCgxUrPrGddgvj8d60Tk9+2Z5IYRVgczZtymvOAvZ5P5Y1wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLTsCK+a6kYllm5xzUFqi6SlGbP2MB8GA1UdIwQY MBaAFJgh436rbvYyaTPl+jdI0H2DAm2wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUNIamZxdHU5akpwTS1YNk4walFmWU1DYmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jMTVkZGItZTFlZi00MzA4LTk4OGQt YWVmYTc1N2UwYzM4LzEvdE93SXI1cnFSaVdXYm5ITlFXcUxwS1Vac19ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jMTVkZGItZTFlZi00MzA4LTk4OGQtYWVmYTc1N2UwYzM4 LzEvbUNIamZxdHU5akpwTS1YNk4walFmWU1DYmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFTphAAwQG V/OAMA0EAgACMAcDBQMqC54AMA0GCSqGSIb3DQEBCwUAA4IBAQA3ysQXIgLRTWIN HxBJ1UlPWbWxOSH1So8ZgHXzTm3EMvZtHa6fe9gjoWbhuudWy8I8tf6CH7cBnQd6 YvDstnMSLPCelJXcvjLstognHTZwa4K6lAx68IcgBFDmLq6AmWeYOGcxyngOwoD0 /BvrKpnazBiASpHByr5hOmIavmO6nb6DzQwV9Q/r1/NZS15hqMieWv0Yur/PFeVw 7Oe/5KEPPf4UoESvT+Fg33QsdffL9yG6h1BjU9jV5RCyAsxEFmLti+P55z1DlKzB xsvBMtUXiYCx10bJ2gwy8Lhj/GYeNLl1bu1OVNSpmqY4KQCrd6Q2u7HOPmMtJLpN PAXKSNLM -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:49 2026 by rpki-client