This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qC0TmrJUzN1w5sAoCCWmF-DuVBg.roa File: qC0TmrJUzN1w5sAoCCWmF-DuVBg.roa (raw, json) Hash identifier: heG4nZQWe+8RTVaEO3Jttd6DJ0lyl2QWjNdyC5wgxuE= Subject key identifier: A8:2D:13:9A:B2:54:CC:DD:70:E6:C0:28:08:25:A6:17:E0:EE:54:18 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019BFF4E28E260B72F4CDDCDE4ED0DBB1931 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qC0TmrJUzN1w5sAoCCWmF-DuVBg.roa Signing time: Tue 27 Jan 2026 11:54:30 +0000 ROA not before: Tue 27 Jan 2026 11:54:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 37.252.26.0/24 maxlen: 24 82.152.8.0/24 maxlen: 24 82.152.57.0/24 maxlen: 24 82.152.58.0/24 maxlen: 24 82.152.68.0/24 maxlen: 24 82.152.73.0/24 maxlen: 24 82.152.75.0/24 maxlen: 24 82.152.98.0/24 maxlen: 24 82.152.109.0/24 maxlen: 24 82.152.226.0/24 maxlen: 24 82.152.240.0/24 maxlen: 24 82.152.243.0/24 maxlen: 24 82.153.205.0/24 maxlen: 24 82.153.217.0/24 maxlen: 24 82.163.23.0/24 maxlen: 24 89.213.105.0/24 maxlen: 24 109.176.40.0/21 maxlen: 24 109.176.48.0/21 maxlen: 24 109.176.153.0/24 maxlen: 24 213.130.130.0/24 maxlen: 24 213.130.149.0/24 maxlen: 24 213.210.54.0/24 maxlen: 24 213.218.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 20:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:4e:28:e2:60:b7:2f:4c:dd:cd:e4:ed:0d:bb:19:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 27 11:54:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a82d139ab254ccdd70e6c0280825a617e0ee5418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5b:67:7c:4c:34:25:44:0a:d7:5b:17:7e:91: bf:d8:15:c6:3f:bd:c3:f7:5c:a6:5d:be:a5:cc:82: 46:45:d2:30:23:05:9f:97:03:fb:dc:3b:98:ad:b6: dc:0b:f3:e8:17:11:03:98:c8:c8:e9:8f:19:ba:9f: 9f:df:83:bf:d9:d9:c9:4e:ab:d1:76:b4:13:83:1d: 5a:d3:45:4d:54:8e:7b:5a:49:2c:46:82:71:fd:6d: 0c:3a:62:d5:56:86:d3:36:a8:20:88:12:ef:ff:f8: a7:86:66:5f:04:57:d3:6c:96:80:ba:e0:87:38:6a: fc:3a:44:aa:a3:dd:f7:3d:4e:f6:d8:34:c5:63:42: 21:8f:a5:0e:55:27:6a:f7:6c:6b:9b:4b:cd:af:3c: 47:3f:28:6e:30:a5:a8:35:44:e8:ec:9b:e8:6f:bf: a8:ce:e2:81:9c:a7:f6:db:a1:ee:81:ca:6f:c1:70: 76:1f:38:36:1a:e7:44:e3:ed:43:9a:1f:4b:65:9f: f4:66:2c:1c:f4:28:ab:85:d8:b4:e9:30:9d:8a:25: bc:47:ce:cf:65:3c:1b:e3:ba:b4:6f:2e:00:b1:f3: 5c:8c:2d:99:a5:85:cc:28:63:46:5f:c8:3e:9a:4e: 09:dd:f8:49:5d:2c:12:4c:58:f2:46:25:d8:ae:4b: bc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2D:13:9A:B2:54:CC:DD:70:E6:C0:28:08:25:A6:17:E0:EE:54:18 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qC0TmrJUzN1w5sAoCCWmF-DuVBg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.252.26.0/24 82.152.8.0/24 82.152.57.0-82.152.58.255 82.152.68.0/24 82.152.73.0/24 82.152.75.0/24 82.152.98.0/24 82.152.109.0/24 82.152.226.0/24 82.152.240.0/24 82.152.243.0/24 82.153.205.0/24 82.153.217.0/24 82.163.23.0/24 89.213.105.0/24 109.176.40.0-109.176.55.255 109.176.153.0/24 213.130.130.0/24 213.130.149.0/24 213.210.54.0/24 213.218.214.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:8d:a5:d6:6e:5c:d5:82:e5:ef:68:95:31:39:92:e5:3f:94: 7f:6d:4e:40:e4:e9:65:77:05:0d:28:9d:ee:c0:d3:20:83:4d: 18:37:f1:89:57:d1:6e:bf:7f:b9:23:b8:fb:d0:71:53:86:b0: 18:b7:ef:f7:b7:bb:97:85:3f:45:00:10:ca:1f:62:ba:f3:04: 1d:37:59:42:32:3b:07:56:a5:91:02:4f:b5:2a:68:a8:d9:68: 0f:93:64:8d:cd:82:6e:ec:c2:5d:2b:a7:0e:a7:06:0f:84:ab: 12:cf:71:23:e2:72:2c:d7:a0:41:6b:bd:d3:10:ca:56:84:da: de:8e:39:76:e3:04:b1:2c:33:42:de:2a:0b:78:d7:12:e2:97: 3d:0b:2c:4e:48:17:07:33:f4:0d:5d:ed:7e:a8:9a:fd:45:92: 82:4d:b4:7b:66:8f:31:77:97:cf:01:13:72:14:47:8c:05:2f: fe:6d:ee:3b:ba:b6:a0:02:40:1a:bf:77:b6:ef:80:39:5f:a8: 00:25:7a:17:fa:9a:36:a9:c4:59:61:d1:92:c4:48:fb:d9:78: 49:18:aa:26:2e:a5:7f:17:22:ae:f6:be:79:16:eb:a7:b1:5a: b2:0d:d6:2f:4d:88:7e:74:d3:2b:a4:f4:ea:b7:8b:dc:00:ca: d2:8e:a9:49 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgISAZv/TijiYLcvTN3N5O0NuxkxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTI3MTE1NDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODJkMTM5YWIyNTRjY2RkNzBlNmMwMjgwODI1YTYxN2UwZWU1NDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVtnfEw0JUQK11sXfpG/2BXGP73D 91ymXb6lzIJGRdIwIwWflwP73DuYrbbcC/PoFxEDmMjI6Y8Zup+f34O/2dnJTqvR drQTgx1a00VNVI57WkksRoJx/W0MOmLVVobTNqggiBLv//inhmZfBFfTbJaAuuCH OGr8OkSqo933PU722DTFY0Ihj6UOVSdq92xrm0vNrzxHPyhuMKWoNUTo7Jvob7+o zuKBnKf226HugcpvwXB2Hzg2GudE4+1Dmh9LZZ/0Ziwc9Cirhdi06TCdiiW8R87P ZTwb47q0by4AsfNcjC2ZpYXMKGNGX8g+mk4J3fhJXSwSTFjyRiXYrku89QIDAQAB o4ICljCCApIwHQYDVR0OBBYEFKgtE5qyVMzdcObAKAglphfg7lQYMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvcUMwVG1ySlV6TjF3NXNBb0NDV21GLUR1VkJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGrBggrBgEFBQcBBwEB/wSBmzCBmDCBlQQCAAEwgY4DBAAl /BoDBABSmAgwDAMEAFKYOQMEAFKYOgMEAFKYRAMEAFKYSQMEAFKYSwMEAFKYYgME AFKYbQMEAFKY4gMEAFKY8AMEAFKY8wMEAFKZzQMEAFKZ2QMEAFKjFwMEAFnVaTAM AwQDbbAoAwQDbbAwAwQAbbCZAwQA1YKCAwQA1YKVAwQA1dI2AwQA1drWMA0GCSqG SIb3DQEBCwUAA4IBAQBMjaXWblzVguXvaJUxOZLlP5R/bU5A5OlldwUNKJ3uwNMg g00YN/GJV9Fuv3+5I7j70HFThrAYt+/3t7uXhT9FABDKH2K68wQdN1lCMjsHVqWR Ak+1Kmio2WgPk2SNzYJu7MJdK6cOpwYPhKsSz3Ej4nIs16BBa73TEMpWhNrejjl2 4wSxLDNC3ioLeNcS4pc9CyxOSBcHM/QNXe1+qJr9RZKCTbR7Zo8xd5fPARNyFEeM BS/+be47uragAkAav3e274A5X6gAJXoX+po2qcRZYdGSxEj72XhJGKomLqV/FyKu 9r55FuunsVqyDdYvTYh+dNMrpPTqt4vcAMrSjqlJ -----END CERTIFICATE-----Generated at Wed Jan 28 04:53:45 2026 by rpki-client