This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/X255VhllDIxi6UkIGeijaY1pOxA.roa File: X255VhllDIxi6UkIGeijaY1pOxA.roa (raw, json) Hash identifier: 0y5gXryUFu22EjGfVxOsikE7Ptk5HOAO1qTK6LedGMo= Subject key identifier: 5F:6E:79:56:19:65:0C:8C:62:E9:49:08:19:E8:A3:69:8D:69:3B:10 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5A95F08F2B2809B04D1F1805329C9E Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/X255VhllDIxi6UkIGeijaY1pOxA.roa Signing time: Thu 01 Jan 2026 16:18:35 +0000 ROA not before: Thu 01 Jan 2026 16:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 81.5.156.0/24 maxlen: 24 81.168.41.0/24 maxlen: 24 82.152.111.0/24 maxlen: 24 82.153.67.0/24 maxlen: 24 82.153.73.0/24 maxlen: 24 82.153.78.0/24 maxlen: 24 82.153.137.0/24 maxlen: 24 82.153.139.0/24 maxlen: 24 82.153.140.0/24 maxlen: 24 82.153.221.0/24 maxlen: 24 82.153.223.0/24 maxlen: 24 82.153.240.0/24 maxlen: 24 82.153.250.0/24 maxlen: 24 89.213.153.0/24 maxlen: 24 109.176.209.0/24 maxlen: 24 109.176.211.0/24 maxlen: 24 109.176.216.0/24 maxlen: 24 109.176.217.0/24 maxlen: 24 109.176.218.0/24 maxlen: 24 109.176.219.0/24 maxlen: 24 109.176.220.0/24 maxlen: 24 109.176.221.0/24 maxlen: 24 109.176.222.0/24 maxlen: 24 109.176.223.0/24 maxlen: 24 109.176.249.0/24 maxlen: 24 213.152.61.0/24 maxlen: 24 213.152.62.0/24 maxlen: 24 213.218.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:95:f0:8f:2b:28:09:b0:4d:1f:18:05:32:9c:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f6e795619650c8c62e9490819e8a3698d693b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e0:d7:69:b6:c2:78:5b:72:47:ae:00:ad:33: 45:75:4b:ef:5c:58:63:d3:80:22:52:32:a7:c4:ec: 61:88:a8:44:51:73:81:16:d8:72:0c:be:f4:92:05: 6c:ea:02:eb:3b:9e:22:d1:d8:34:74:76:e1:05:2a: 27:d5:96:f6:07:27:37:0e:36:3f:8b:a8:a8:1d:06: 9a:64:4a:71:ae:63:cf:c4:f1:d3:8b:cb:72:b0:7c: 53:b2:64:f8:56:ef:6b:14:89:c8:13:00:63:53:3b: c7:f9:eb:54:3b:50:71:41:de:93:1e:71:42:15:4f: ff:a1:71:94:3a:ea:ea:6a:f8:8b:d5:0c:26:e1:65: 5e:a4:ea:da:25:36:09:e3:3e:b0:6b:c8:66:c6:80: 06:fa:c1:7d:0e:9c:9e:08:23:cc:63:2b:7d:c7:b6: c0:53:04:c2:39:ec:4e:bf:5b:3c:63:e2:22:d6:d0: c9:68:3f:b3:ba:24:cd:f8:3c:1d:39:f3:53:56:01: ad:17:a2:d2:88:6a:bb:ba:e4:9f:4a:6d:c4:94:2d: ca:51:d7:0f:a8:4b:dd:79:ee:de:30:01:09:84:d0: 83:94:5b:02:26:8d:1d:96:9c:1a:5f:58:46:3e:b2: bc:82:a3:1f:05:8e:9a:ec:0d:63:a5:4c:c4:73:8d: 78:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:6E:79:56:19:65:0C:8C:62:E9:49:08:19:E8:A3:69:8D:69:3B:10 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/X255VhllDIxi6UkIGeijaY1pOxA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.5.156.0/24 81.168.41.0/24 82.152.111.0/24 82.153.67.0/24 82.153.73.0/24 82.153.78.0/24 82.153.137.0/24 82.153.139.0-82.153.140.255 82.153.221.0/24 82.153.223.0/24 82.153.240.0/24 82.153.250.0/24 89.213.153.0/24 109.176.209.0/24 109.176.211.0/24 109.176.216.0/21 109.176.249.0/24 213.152.61.0-213.152.62.255 213.218.216.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:d2:93:90:6f:55:d9:ee:ff:fc:19:3c:45:bf:8c:ff:3e:7c: 8d:d5:2c:01:92:bb:dd:0d:b9:b1:c9:bf:c0:b6:15:f0:18:d7: 6c:db:a1:06:58:1f:1f:af:15:2a:81:97:59:58:6b:54:a0:b1: 5d:f1:90:72:2c:9f:79:91:16:ff:62:56:6a:41:d5:10:97:1c: 43:af:06:00:67:0a:99:99:b1:98:e7:b6:23:66:99:e6:85:c1: bd:94:a3:2b:3a:b4:6e:e4:0a:5b:39:3a:cb:9c:86:ca:c1:52: 40:47:54:e0:a4:cc:02:60:57:5e:f7:16:20:3e:15:c7:74:3a: f9:83:73:cf:c4:e5:19:1f:5e:f7:e1:d7:f1:fc:0f:69:9b:ec: 28:79:60:9e:94:98:83:4e:c5:fe:08:37:50:97:f6:22:c4:93: 5d:2a:5a:72:f5:e4:6b:06:c0:1a:0a:b1:41:a7:38:8b:37:d7: 6d:5f:ff:4c:e3:1c:88:e1:58:9b:ed:ca:96:56:ac:31:a5:a3: 58:89:9b:17:c4:b8:58:21:19:52:56:53:5c:05:a7:93:93:61: 76:3e:35:ec:b3:78:80:a9:f7:1d:57:53:f3:7a:b1:b0:f0:29: 2b:15:46:14:8a:56:c2:a6:9e:ef:ae:79:fe:70:0e:a5:a4:85: fd:7c:c6:5f -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt6WpXwjysoCbBNHxgFMpyeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjZlNzk1NjE5NjUwYzhjNjJlOTQ5MDgxOWU4YTM2OThkNjkzYjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+DXabbCeFtyR64ArTNFdUvvXFhj 04AiUjKnxOxhiKhEUXOBFthyDL70kgVs6gLrO54i0dg0dHbhBSon1Zb2Byc3DjY/ i6ioHQaaZEpxrmPPxPHTi8tysHxTsmT4Vu9rFInIEwBjUzvH+etUO1BxQd6THnFC FU//oXGUOurqaviL1Qwm4WVepOraJTYJ4z6wa8hmxoAG+sF9DpyeCCPMYyt9x7bA UwTCOexOv1s8Y+Ii1tDJaD+zuiTN+DwdOfNTVgGtF6LSiGq7uuSfSm3ElC3KUdcP qEvdee7eMAEJhNCDlFsCJo0dlpwaX1hGPrK8gqMfBY6a7A1jpUzEc414JQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFF9ueVYZZQyMYulJCBnoo2mNaTsQMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvWDI1NVZobGxESXhpNlVrSUdlaWphWTFwT3hBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGfBggrBgEFBQcBBwEB/wSBjzCBjDCBiQQCAAEwgYIDBABR BZwDBABRqCkDBABSmG8DBABSmUMDBABSmUkDBABSmU4DBABSmYkwDAMEAFKZiwME AFKZjAMEAFKZ3QMEAFKZ3wMEAFKZ8AMEAFKZ+gMEAFnVmQMEAG2w0QMEAG2w0wME A22w2AMEAG2w+TAMAwQA1Zg9AwQA1Zg+AwQA1drYMA0GCSqGSIb3DQEBCwUAA4IB AQAa0pOQb1XZ7v/8GTxFv4z/PnyN1SwBkrvdDbmxyb/AthXwGNds26EGWB8frxUq gZdZWGtUoLFd8ZByLJ95kRb/YlZqQdUQlxxDrwYAZwqZmbGY57YjZpnmhcG9lKMr OrRu5ApbOTrLnIbKwVJAR1TgpMwCYFde9xYgPhXHdDr5g3PPxOUZH1734dfx/A9p m+woeWCelJiDTsX+CDdQl/YixJNdKlpy9eRrBsAaCrFBpziLN9dtX/9M4xyI4Vib 7cqWVqwxpaNYiZsXxLhYIRlSVlNcBaeTk2F2PjXss3iAqfcdV1PzerGw8CkrFUYU ilbCpp7vrnn+cA6lpIX9fMZf -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:55 2026 by rpki-client