This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/SeUVAtbk1hrN2JyKOxE8q4V1UTY.roa File: SeUVAtbk1hrN2JyKOxE8q4V1UTY.roa (raw, json) Hash identifier: lPG+lMbFgVTXYsR4V2gK2L1a28JoQEgQzgLbi/Qank4= Subject key identifier: 49:E5:15:02:D6:E4:D6:1A:CD:D8:9C:8A:3B:11:3C:AB:85:75:51:36 Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Certificate serial: 019B7F842C4EB6DC9B5CFB3105D914D2071D Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/SeUVAtbk1hrN2JyKOxE8q4V1UTY.roa Signing time: Fri 02 Jan 2026 16:22:07 +0000 ROA not before: Fri 02 Jan 2026 16:22:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49549 IP address blocks: 89.107.10.0/24 maxlen: 24 146.19.128.0/24 maxlen: 24 146.19.207.0/24 maxlen: 24 176.126.103.0/24 maxlen: 24 178.250.187.0/24 maxlen: 24 178.250.188.0/24 maxlen: 24 178.250.191.0/24 maxlen: 24 193.0.227.0/24 maxlen: 24 193.0.229.0/24 maxlen: 24 193.0.230.0/24 maxlen: 24 193.0.239.0/24 maxlen: 24 217.114.43.0/24 maxlen: 24 217.119.129.0/24 maxlen: 24 2a0f:cdc2::/32 maxlen: 32 2a0f:cdc4::/32 maxlen: 32 2a0f:cdc5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:2c:4e:b6:dc:9b:5c:fb:31:05:d9:14:d2:07:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Validity Not Before: Jan 2 16:22:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49e51502d6e4d61acdd89c8a3b113cab85755136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:83:76:ea:53:6b:30:f4:92:d7:ea:53:88:26: b4:4d:f0:55:a1:ca:b0:38:39:80:f9:ea:36:d8:39: b8:e4:6c:38:52:a9:71:8d:93:9d:09:eb:98:53:27: 08:08:39:a4:ac:35:65:8e:f3:70:af:7a:c3:4e:eb: 09:e4:bf:34:45:a1:8d:55:b0:d8:61:cc:09:a6:b8: 71:79:a5:70:7e:70:7a:ca:a1:5a:d1:17:e5:d5:45: f8:08:0d:47:ca:c1:46:bb:ad:72:cd:f3:1c:b0:7e: b6:f8:65:06:79:70:47:df:47:62:19:8d:73:8b:44: 7b:d2:7d:d6:7c:65:ad:51:e8:38:23:04:99:da:84: 73:1c:b5:6f:f1:5d:25:be:99:ad:8c:ce:cd:09:4f: 86:04:09:9b:b5:cc:47:30:06:02:e3:02:a4:97:b3: c4:ad:16:71:9a:10:8c:21:de:a3:2d:e8:da:4b:c1: f1:41:c0:d5:ef:2d:23:33:3f:c1:fc:0d:0f:fd:4b: 12:72:f8:70:6f:7b:df:2b:eb:80:fe:25:2e:0d:1f: b6:82:eb:55:79:ae:78:5c:91:02:00:7c:3a:72:96: e6:30:5f:98:8d:4a:cb:e5:ca:84:3e:dc:2b:24:cc: fd:8c:76:ef:03:f8:a5:3c:74:5f:24:b5:6c:94:9f: 25:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E5:15:02:D6:E4:D6:1A:CD:D8:9C:8A:3B:11:3C:AB:85:75:51:36 X509v3 Authority Key Identifier: keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/SeUVAtbk1hrN2JyKOxE8q4V1UTY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.107.10.0/24 146.19.128.0/24 146.19.207.0/24 176.126.103.0/24 178.250.187.0-178.250.188.255 178.250.191.0/24 193.0.227.0/24 193.0.229.0-193.0.230.255 193.0.239.0/24 217.114.43.0/24 217.119.129.0/24 IPv6: 2a0f:cdc2::/32 2a0f:cdc4::/31 Signature Algorithm: sha256WithRSAEncryption 09:d5:a6:37:58:77:59:0b:11:b8:04:72:0b:55:76:89:af:81: 69:67:d5:d7:c9:47:82:5f:4c:e5:6f:f6:89:f6:f5:bc:35:05: 78:4c:44:da:c9:e1:39:24:3f:d6:40:7d:df:d5:58:60:b2:24: ff:b2:a2:0f:87:51:2d:15:23:b1:1a:8c:31:4c:93:2e:4b:8c: 17:1d:5d:67:07:20:8c:c4:b6:c3:b4:0e:f8:54:b5:c3:1f:d6: 87:ba:59:cb:26:c8:61:c5:0a:bd:a7:f1:b5:85:ab:c3:54:d9: 0b:e1:1a:f3:1e:39:49:25:e1:39:c7:11:3e:87:32:fe:4b:a8: ef:84:fe:e9:59:b1:20:d9:ed:0f:dc:4e:a0:fa:8c:b5:01:74: 62:55:23:a4:24:99:f0:bb:8a:80:f5:d8:ce:d5:4c:f0:d5:6a: c6:8d:8f:a1:04:7c:3f:e7:30:32:02:e7:41:56:5d:28:bc:7b: 1f:01:2e:1b:77:73:5f:be:45:48:2d:ba:30:a7:8c:81:e5:41: 0e:7b:78:f4:c3:2c:c8:e1:c5:b2:66:b0:14:f7:b8:ad:00:24: e9:b7:f2:24:d0:d2:9d:17:72:e3:0f:a6:a6:6d:14:12:1a:1f: a3:ec:4b:bd:75:b4:9e:6d:ae:05:f6:32:0a:c3:35:47:a0:fa: d1:54:3a:22 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgISAZt/hCxOttybXPsxBdkU0gcdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi ZjA2OTIwHhcNMjYwMTAyMTYyMjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWU1MTUwMmQ2ZTRkNjFhY2RkODljOGEzYjExM2NhYjg1NzU1MTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYN26lNrMPSS1+pTiCa0TfBVocqw ODmA+eo22Dm45Gw4UqlxjZOdCeuYUycICDmkrDVljvNwr3rDTusJ5L80RaGNVbDY YcwJprhxeaVwfnB6yqFa0Rfl1UX4CA1HysFGu61yzfMcsH62+GUGeXBH30diGY1z i0R70n3WfGWtUeg4IwSZ2oRzHLVv8V0lvpmtjM7NCU+GBAmbtcxHMAYC4wKkl7PE rRZxmhCMId6jLejaS8HxQcDV7y0jMz/B/A0P/UsScvhwb3vfK+uA/iUuDR+2gutV ea54XJECAHw6cpbmMF+YjUrL5cqEPtwrJMz9jHbvA/ilPHRfJLVslJ8lXQIDAQAB o4ICbDCCAmgwHQYDVR0OBBYEFEnlFQLW5NYazdicijsRPKuFdVE2MB8GA1UdIwQY MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt YWE5ZDY5MTgxMWU3LzEvU2VVVkF0YmsxaHJOMkp5S094RThxNFYxVVRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3 LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwWAQCAAEwUgMEAFlrCgME AJITgAMEAJITzwMEALB+ZzAMAwQAsvq7AwQAsvq8AwQAsvq/AwQAwQDjMAwDBADB AOUDBADBAOYDBADBAO8DBADZcisDBADZd4EwFAQCAAIwDgMFACoPzcIDBQEqD83E MA0GCSqGSIb3DQEBCwUAA4IBAQAJ1aY3WHdZCxG4BHILVXaJr4FpZ9XXyUeCX0zl b/aJ9vW8NQV4TETayeE5JD/WQH3f1VhgsiT/sqIPh1EtFSOxGowxTJMuS4wXHV1n ByCMxLbDtA74VLXDH9aHulnLJshhxQq9p/G1havDVNkL4RrzHjlJJeE5xxE+hzL+ S6jvhP7pWbEg2e0P3E6g+oy1AXRiVSOkJJnwu4qA9djO1Uzw1WrGjY+hBHw/5zAy AudBVl0ovHsfAS4bd3NfvkVILbowp4yB5UEOe3j0wyzI4cWyZrAU97itACTpt/Ik 0NKdF3LjD6ambRQSGh+j7Eu9dbSeba4F9jIKwzVHoPrRVDoi -----END CERTIFICATE-----Generated at Sun Jan 25 21:15:15 2026 by rpki-client