This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/IMC0JhT3CPr4PULzb0b2VZaM62w.roa File: IMC0JhT3CPr4PULzb0b2VZaM62w.roa (raw, json) Hash identifier: vnqL1BI8gdGA6/70Y7+bnJZNmD+VOE8s50wFo3pwRSQ= Subject key identifier: 20:C0:B4:26:14:F7:08:FA:F8:3D:42:F3:6F:46:F6:55:96:8C:EB:6C Certificate issuer: /CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311 Certificate serial: 019B7C12638A596A1EAFB62A1E00F42A4418 Authority key identifier: 50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/IMC0JhT3CPr4PULzb0b2VZaM62w.roa Signing time: Fri 02 Jan 2026 00:18:58 +0000 ROA not before: Fri 02 Jan 2026 00:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41722 IP address blocks: 91.142.80.0/24 maxlen: 24 91.142.81.0/24 maxlen: 24 91.142.82.0/24 maxlen: 24 91.142.83.0/24 maxlen: 24 91.142.84.0/24 maxlen: 24 91.142.85.0/24 maxlen: 24 91.142.86.0/24 maxlen: 24 91.142.87.0/24 maxlen: 24 91.142.88.0/24 maxlen: 24 91.142.89.0/24 maxlen: 24 91.142.90.0/24 maxlen: 24 91.142.91.0/24 maxlen: 24 91.142.92.0/24 maxlen: 24 91.142.93.0/24 maxlen: 24 91.142.94.0/24 maxlen: 24 91.142.95.0/24 maxlen: 24 178.249.68.0/24 maxlen: 24 178.249.69.0/24 maxlen: 24 178.249.70.0/24 maxlen: 24 178.249.71.0/24 maxlen: 24 178.250.152.0/24 maxlen: 24 178.250.153.0/24 maxlen: 24 178.250.154.0/24 maxlen: 24 178.250.155.0/24 maxlen: 24 185.53.20.0/24 maxlen: 24 185.53.21.0/24 maxlen: 24 185.53.22.0/24 maxlen: 24 185.53.23.0/24 maxlen: 24 185.73.212.0/24 maxlen: 24 185.73.213.0/24 maxlen: 24 185.73.214.0/24 maxlen: 24 185.73.215.0/24 maxlen: 24 185.147.80.0/24 maxlen: 24 185.147.81.0/24 maxlen: 24 185.147.82.0/24 maxlen: 24 185.147.83.0/24 maxlen: 24 185.162.92.0/24 maxlen: 24 185.162.93.0/24 maxlen: 24 185.162.94.0/24 maxlen: 24 185.162.95.0/24 maxlen: 24 185.174.164.0/24 maxlen: 24 185.174.165.0/24 maxlen: 24 2a03:21c0::/32 maxlen: 32 2a07:a500::/32 maxlen: 32 2a07:a501::/32 maxlen: 32 2a07:a502::/32 maxlen: 32 2a07:a503::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:63:8a:59:6a:1e:af:b6:2a:1e:00:f4:2a:44:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311 Validity Not Before: Jan 2 00:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20c0b42614f708faf83d42f36f46f655968ceb6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:77:3b:81:73:11:83:95:a1:67:21:92:5b:4a: 90:e4:be:45:8f:22:91:9f:59:05:c5:2e:14:3e:1f: 6c:b8:75:e7:13:1b:bb:0c:d5:55:92:95:14:92:ad: 5b:53:4b:6a:79:63:f6:01:6c:b7:f0:a3:1c:c3:9f: 9c:4a:14:79:ec:f0:16:f4:87:71:26:8b:95:17:5f: 20:7c:48:82:c9:d9:8d:bc:82:1f:a7:45:35:c0:1d: 9c:d3:5b:d7:03:0a:26:ce:0c:0e:11:54:0f:04:91: a3:9f:8c:77:92:8a:00:0b:ce:30:64:d9:11:22:52: ae:a6:82:b8:15:f9:8e:b6:8f:98:fd:59:9e:3c:09: 60:4e:6e:3c:c5:72:b7:37:73:87:3b:21:cf:05:ae: a9:cc:2c:83:3e:10:77:b5:ce:c4:b3:47:32:08:0b: 71:d7:49:b2:0f:3c:31:f3:65:d8:7c:c5:6c:3e:79: 3d:df:58:31:88:4d:95:df:7b:e6:d5:b2:68:ce:93: 29:d8:de:fc:92:5d:99:94:e5:38:90:93:e8:5d:e8: 37:88:d1:d1:a0:30:21:2f:12:64:34:8e:a6:07:b4: 74:6e:e8:61:14:23:b0:08:f6:c8:cd:67:44:d5:38: 6c:97:1a:74:03:d2:c0:b3:74:74:b6:bf:3f:96:29: 14:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C0:B4:26:14:F7:08:FA:F8:3D:42:F3:6F:46:F6:55:96:8C:EB:6C X509v3 Authority Key Identifier: keyid:50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/IMC0JhT3CPr4PULzb0b2VZaM62w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.142.80.0/20 178.249.68.0/22 178.250.152.0/22 185.53.20.0/22 185.73.212.0/22 185.147.80.0/22 185.162.92.0/22 185.174.164.0/23 IPv6: 2a03:21c0::/32 2a07:a500::/30 Signature Algorithm: sha256WithRSAEncryption 96:d6:1e:ae:5d:15:b9:f7:73:82:d7:a3:1f:1a:ad:a5:72:a5: 99:b4:dd:ce:56:ed:5f:22:b1:6b:b1:04:bb:88:a3:64:b6:11: e4:d7:98:59:86:00:f8:37:04:dc:ed:59:dd:de:f1:36:d3:b8: 26:e8:5e:7e:c3:90:3c:98:d7:38:ab:00:c4:25:5a:8e:dc:49: a0:11:22:bb:15:79:7f:ac:71:f1:d0:1a:79:03:27:6f:69:4e: 95:e2:39:88:31:5a:a1:56:e9:10:3b:8c:94:3d:12:2b:82:84: ed:75:d8:0d:f9:fd:c7:d0:34:5b:b8:6e:ab:ed:ad:4f:25:af: 4e:07:51:f2:94:51:65:67:a9:c0:6d:5a:61:4f:f9:bb:f8:99: e7:ad:ec:f6:a7:cb:5c:dd:49:c6:a5:5b:a3:cf:65:95:94:f2: f6:90:c0:c4:35:ca:48:8c:d8:a5:df:81:74:0e:3a:cd:c7:e0: 8c:9c:f9:5f:0e:bb:90:7a:60:99:9f:12:aa:8c:3a:66:45:4e: 04:97:db:41:3a:71:af:6a:c7:6c:f5:0a:ea:51:59:fc:85:37: 11:c4:73:ba:0f:72:46:70:00:30:d0:68:4d:5d:59:70:56:4b: d4:13:da:da:0b:f5:c1:24:fa:31:a9:65:0d:10:15:66:24:81: 23:ea:04:25 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt8EmOKWWoer7YqHgD0KkQYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwZjJkNmIyMTY2MGZhZDFmNjBlMmRmOWQwYmQ3YzZjY2Y5 NWMzMTEwHhcNMjYwMTAyMDAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGMwYjQyNjE0ZjcwOGZhZjgzZDQyZjM2ZjQ2ZjY1NTk2OGNlYjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3c7gXMRg5WhZyGSW0qQ5L5FjyKR n1kFxS4UPh9suHXnExu7DNVVkpUUkq1bU0tqeWP2AWy38KMcw5+cShR57PAW9Idx JouVF18gfEiCydmNvIIfp0U1wB2c01vXAwomzgwOEVQPBJGjn4x3kooAC84wZNkR IlKupoK4FfmOto+Y/VmePAlgTm48xXK3N3OHOyHPBa6pzCyDPhB3tc7Es0cyCAtx 10myDzwx82XYfMVsPnk931gxiE2V33vm1bJozpMp2N78kl2ZlOU4kJPoXeg3iNHR oDAhLxJkNI6mB7R0buhhFCOwCPbIzWdE1Thslxp0A9LAs3R0tr8/likUKQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFCDAtCYU9wj6+D1C829G9lWWjOtsMB8GA1UdIwQY MBaAFFDy1rIWYPrR9g4t+dC9fGzPlcMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVBMV3NoWmctdEgyRGkzNTBMMThiTS1Wd3hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9kMGVkZDUtNjA4Ny00YmUxLWIzNmYt YWIzZGQ1ZGM2NzA5LzEvSU1DMEpoVDNDUHI0UFVMemIwYjJWWmFNNjJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9kMGVkZDUtNjA4Ny00YmUxLWIzNmYtYWIzZGQ1ZGM2NzA5 LzEvVVBMV3NoWmctdEgyRGkzNTBMMThiTS1Wd3hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA2BAIAATAwAwQEW45QAwQC svlEAwQCsvqYAwQCuTUUAwQCuUnUAwQCuZNQAwQCuaJcAwQBua6kMBQEAgACMA4D BQAqAyHAAwUCKgelADANBgkqhkiG9w0BAQsFAAOCAQEAltYerl0VufdzgtejHxqt pXKlmbTdzlbtXyKxa7EEu4ijZLYR5NeYWYYA+DcE3O1Z3d7xNtO4JuhefsOQPJjX OKsAxCVajtxJoBEiuxV5f6xx8dAaeQMnb2lOleI5iDFaoVbpEDuMlD0SK4KE7XXY Dfn9x9A0W7huq+2tTyWvTgdR8pRRZWepwG1aYU/5u/iZ563s9qfLXN1JxqVbo89l lZTy9pDAxDXKSIzYpd+BdA46zcfgjJz5Xw67kHpgmZ8Sqow6ZkVOBJfbQTpxr2rH bPUK6lFZ/IU3EcRzug9yRnAAMNBoTV1ZcFZL1BPa2gv1wST6MallDRAVZiSBI+oE JQ== -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:08 2026 by rpki-client