This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/33GSrldWWk3Y0zJgykFgXMqOFKQ.roa File: 33GSrldWWk3Y0zJgykFgXMqOFKQ.roa (raw, json) Hash identifier: Vx7Lsmyrdo4DClh/Ecx+QsM7m1e5mNGcZKBAQoQZRYU= Subject key identifier: DF:71:92:AE:57:56:5A:4D:D8:D3:32:60:CA:41:60:5C:CA:8E:14:A4 Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4 Certificate serial: 019B783470C74D763E092D5823AEE79E47E7 Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/33GSrldWWk3Y0zJgykFgXMqOFKQ.roa Signing time: Thu 01 Jan 2026 06:17:41 +0000 ROA not before: Thu 01 Jan 2026 06:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 95.131.152.0/24 maxlen: 24 95.131.153.0/24 maxlen: 24 95.131.154.0/24 maxlen: 24 95.131.155.0/24 maxlen: 24 95.131.156.0/24 maxlen: 24 95.131.157.0/24 maxlen: 24 95.131.158.0/24 maxlen: 24 95.131.159.0/24 maxlen: 24 195.14.64.0/24 maxlen: 24 195.14.65.0/24 maxlen: 24 195.14.66.0/24 maxlen: 24 195.14.67.0/24 maxlen: 24 195.14.68.0/24 maxlen: 24 195.14.69.0/24 maxlen: 24 195.14.70.0/24 maxlen: 24 195.14.71.0/24 maxlen: 24 195.14.72.0/24 maxlen: 24 195.14.73.0/24 maxlen: 24 195.14.74.0/24 maxlen: 24 195.14.75.0/24 maxlen: 24 195.14.76.0/24 maxlen: 24 195.14.77.0/24 maxlen: 24 195.14.78.0/24 maxlen: 24 195.14.79.0/24 maxlen: 24 195.14.80.0/24 maxlen: 24 195.14.81.0/24 maxlen: 24 195.14.82.0/24 maxlen: 24 195.14.83.0/24 maxlen: 24 195.14.84.0/24 maxlen: 24 195.14.85.0/24 maxlen: 24 195.14.86.0/24 maxlen: 24 195.14.87.0/24 maxlen: 24 195.14.88.0/24 maxlen: 24 195.14.89.0/24 maxlen: 24 195.14.90.0/24 maxlen: 24 195.14.91.0/24 maxlen: 24 195.14.92.0/24 maxlen: 24 195.14.93.0/24 maxlen: 24 195.14.94.0/24 maxlen: 24 195.14.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:70:c7:4d:76:3e:09:2d:58:23:ae:e7:9e:47:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4 Validity Not Before: Jan 1 06:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df7192ae57565a4dd8d33260ca41605cca8e14a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cf:6d:b2:1e:b1:59:f2:1c:85:00:5d:c3:ff: 1b:28:4b:8b:19:a7:83:e4:59:7a:11:9b:af:ff:45: dd:a2:3f:dc:a2:13:48:45:94:04:27:4c:45:58:c9: 4d:50:d5:6b:46:50:2b:36:2d:d8:d0:94:d9:86:10: 8d:66:1c:76:67:a5:aa:18:6d:00:5d:0f:5d:bd:00: 7f:6a:6a:2f:5c:f3:c9:24:89:0a:2a:ca:27:6d:85: 0f:1b:41:ed:f5:08:3c:31:32:11:8e:be:80:56:41: 5c:16:49:cc:c5:88:ae:d7:a4:f9:17:fe:b6:74:d5: 6f:17:70:59:e4:28:79:da:75:e3:9a:30:cf:54:48: 4b:4e:48:13:b3:4f:15:bb:3a:34:63:1a:af:0a:4d: a2:4d:13:81:a9:64:20:6a:97:63:08:dc:3a:d2:77: e5:e6:64:6c:ba:66:5e:85:46:ee:47:15:9e:2c:6d: 8d:48:90:3f:b2:99:d1:e9:22:70:ea:1d:ab:c3:6b: 19:56:5a:d4:2a:a1:6b:e4:b8:35:c5:2a:13:e7:6d: b9:79:6d:4f:2e:27:dd:b9:9b:96:71:37:16:51:48: 22:e7:f8:27:e4:e6:e4:c1:b9:32:72:91:25:5f:73: 67:a5:ba:89:43:98:36:6e:70:df:8f:bc:7c:04:bf: fe:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:71:92:AE:57:56:5A:4D:D8:D3:32:60:CA:41:60:5C:CA:8E:14:A4 X509v3 Authority Key Identifier: keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/33GSrldWWk3Y0zJgykFgXMqOFKQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.131.152.0/21 195.14.64.0/19 Signature Algorithm: sha256WithRSAEncryption 25:28:fc:41:a1:5b:3f:e3:37:4a:0a:87:d4:28:f0:f6:22:34: c4:15:db:41:d6:2e:22:a8:23:99:85:0f:f1:7c:cf:ab:b7:85: 83:51:72:0c:0d:d8:21:81:2a:15:9a:30:50:0b:4c:83:c1:f8: f1:3d:f1:75:f4:ec:8f:ff:19:f2:d3:83:e7:4e:0c:ca:3f:65: 6f:47:2f:eb:de:fe:fe:20:b5:b2:0d:13:61:39:39:c5:8c:a8: 4d:59:c5:49:a1:48:d7:b1:c8:db:54:f7:a0:23:f8:71:1f:66: 19:fd:67:48:c9:e7:df:d8:e2:1d:1c:68:fc:d8:c6:f0:12:6d: 3a:fd:92:59:71:89:c8:80:c4:37:cd:52:b7:2a:4c:9d:2f:7e: 7b:75:0d:04:9f:c3:e4:97:5b:08:d6:61:72:ed:ba:fa:4a:6b: 42:2a:25:5f:aa:2d:e7:89:3b:26:cf:5d:46:49:5e:a4:3a:96: 0b:6a:df:20:1c:83:89:9c:af:c4:a9:91:b9:7f:62:77:15:37: fc:16:75:03:f4:68:dc:3f:dc:e2:ca:3b:03:f2:a1:76:42:2a: f5:28:6a:0e:32:70:9f:00:e5:3b:b2:51:7c:8d:bb:23:79:83: f8:70:eb:ea:4f:08:7e:ec:78:d1:2c:fb:8b:53:05:60:56:83: 11:4b:d7:f0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NHDHTXY+CS1YI67nnkfnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMjRlNDUwZWFmZWQ0YzI1OWI2ZGMwYTM0ZTMwNmYxYWQy ODRiYzQwHhcNMjYwMTAxMDYxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjcxOTJhZTU3NTY1YTRkZDhkMzMyNjBjYTQxNjA1Y2NhOGUxNGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM9tsh6xWfIchQBdw/8bKEuLGaeD 5Fl6EZuv/0Xdoj/cohNIRZQEJ0xFWMlNUNVrRlArNi3Y0JTZhhCNZhx2Z6WqGG0A XQ9dvQB/amovXPPJJIkKKsonbYUPG0Ht9Qg8MTIRjr6AVkFcFknMxYiu16T5F/62 dNVvF3BZ5Ch52nXjmjDPVEhLTkgTs08Vuzo0YxqvCk2iTROBqWQgapdjCNw60nfl 5mRsumZehUbuRxWeLG2NSJA/spnR6SJw6h2rw2sZVlrUKqFr5Lg1xSoT5225eW1P LifduZuWcTcWUUgi5/gn5ObkwbkycpElX3NnpbqJQ5g2bnDfj7x8BL/+6QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN9xkq5XVlpN2NMyYMpBYFzKjhSkMB8GA1UdIwQY MBaAFOIk5FDq/tTCWbbcCjTjBvGtKEvEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGlUa1VPci0xTUpadHR3S05PTUc4YTBvUzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iOTE3OGItYzdiYS00ZDRlLWFmOWUt NmFjZDIxZDRiYWY4LzEvMzNHU3JsZFdXazNZMHpKZ3lrRmdYTXFPRktRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9iOTE3OGItYzdiYS00ZDRlLWFmOWUtNmFjZDIxZDRiYWY4 LzEvNGlUa1VPci0xTUpadHR3S05PTUc4YTBvUzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDX4OYAwQF ww5AMA0GCSqGSIb3DQEBCwUAA4IBAQAlKPxBoVs/4zdKCofUKPD2IjTEFdtB1i4i qCOZhQ/xfM+rt4WDUXIMDdghgSoVmjBQC0yDwfjxPfF19OyP/xny04PnTgzKP2Vv Ry/r3v7+ILWyDRNhOTnFjKhNWcVJoUjXscjbVPegI/hxH2YZ/WdIyeff2OIdHGj8 2MbwEm06/ZJZcYnIgMQ3zVK3KkydL357dQ0En8Pkl1sI1mFy7br6SmtCKiVfqi3n iTsmz11GSV6kOpYLat8gHIOJnK/EqZG5f2J3FTf8FnUD9GjcP9ziyjsD8qF2Qir1 KGoOMnCfAOU7slF8jbsjeYP4cOvqTwh+7HjRLPuLUwVgVoMRS9fw -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:51 2026 by rpki-client