This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/RubVNCawFmtSSykZF5XcDH3aXBc.roa File: RubVNCawFmtSSykZF5XcDH3aXBc.roa (raw, json) Hash identifier: pb4UIOlvmHSq695BiD6WHLwCWaB/NLP+RzVFb75tWfs= Subject key identifier: 46:E6:D5:34:26:B0:16:6B:52:4B:29:19:17:95:DC:0C:7D:DA:5C:17 Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad Certificate serial: 019B7D5BE3D894CB831361DFC3A6DB7B3086 Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/RubVNCawFmtSSykZF5XcDH3aXBc.roa Signing time: Fri 02 Jan 2026 06:18:52 +0000 ROA not before: Fri 02 Jan 2026 06:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21334 IP address blocks: 5.63.192.0/18 maxlen: 18 5.148.192.0/18 maxlen: 18 5.148.192.0/19 maxlen: 19 5.148.224.0/19 maxlen: 19 5.206.128.0/18 maxlen: 18 37.188.80.0/21 maxlen: 21 37.188.80.0/22 maxlen: 22 37.188.84.0/22 maxlen: 22 37.191.0.0/18 maxlen: 18 37.191.0.0/19 maxlen: 19 37.191.32.0/19 maxlen: 19 37.220.192.0/18 maxlen: 18 78.139.0.0/18 maxlen: 18 78.139.0.0/19 maxlen: 19 78.139.32.0/19 maxlen: 19 80.98.0.0/15 maxlen: 15 80.98.0.0/16 maxlen: 16 80.99.0.0/16 maxlen: 16 80.244.96.0/20 maxlen: 20 86.101.0.0/16 maxlen: 16 86.101.0.0/17 maxlen: 17 86.101.128.0/17 maxlen: 17 88.87.240.0/21 maxlen: 21 88.87.240.0/22 maxlen: 22 88.87.244.0/22 maxlen: 22 89.132.0.0/14 maxlen: 14 89.132.0.0/15 maxlen: 15 89.134.0.0/15 maxlen: 15 89.134.0.0/20 maxlen: 20 89.134.16.0/20 maxlen: 20 89.135.60.0/24 maxlen: 24 89.223.128.0/17 maxlen: 17 89.223.128.0/18 maxlen: 18 89.223.192.0/18 maxlen: 18 94.44.0.0/16 maxlen: 16 94.44.0.0/17 maxlen: 17 94.44.128.0/17 maxlen: 17 130.43.192.0/18 maxlen: 18 151.0.64.0/18 maxlen: 18 176.63.0.0/16 maxlen: 16 176.63.0.0/17 maxlen: 17 176.63.0.0/20 maxlen: 20 176.63.16.0/20 maxlen: 20 176.63.128.0/17 maxlen: 17 178.48.0.0/16 maxlen: 16 178.48.0.0/17 maxlen: 17 178.48.128.0/17 maxlen: 17 185.10.124.0/22 maxlen: 22 185.10.124.0/23 maxlen: 23 185.10.126.0/23 maxlen: 23 185.33.80.0/23 maxlen: 23 185.33.80.0/24 maxlen: 24 185.33.81.0/24 maxlen: 24 185.123.28.0/22 maxlen: 23 188.142.160.0/19 maxlen: 19 188.142.160.0/20 maxlen: 20 188.142.176.0/20 maxlen: 20 188.142.192.0/18 maxlen: 18 188.142.192.0/19 maxlen: 19 188.142.224.0/19 maxlen: 19 195.184.160.0/19 maxlen: 19 195.184.160.0/20 maxlen: 20 195.184.176.0/20 maxlen: 20 212.48.240.0/20 maxlen: 20 212.48.240.0/21 maxlen: 21 212.48.248.0/21 maxlen: 21 212.96.32.0/19 maxlen: 19 212.96.32.0/20 maxlen: 20 212.96.48.0/20 maxlen: 20 213.222.128.0/18 maxlen: 18 213.222.128.0/19 maxlen: 19 213.222.160.0/19 maxlen: 19 2a02:ab80::/28 maxlen: 28 2a02:ab80::/29 maxlen: 29 2a02:ab86:a04::/47 maxlen: 47 2a02:ab86:a06::/47 maxlen: 47 2a02:ab88::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:e3:d8:94:cb:83:13:61:df:c3:a6:db:7b:30:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad Validity Not Before: Jan 2 06:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46e6d53426b0166b524b29191795dc0c7dda5c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:da:94:0a:b2:6b:c1:20:54:88:3a:be:eb:11: dd:5c:da:64:56:b1:52:87:8c:c1:d5:68:92:b3:8d: b7:6c:77:71:89:d2:54:78:cd:df:42:4d:45:ab:0a: 5f:9a:a5:f3:12:91:aa:ab:d2:86:51:1e:a3:1d:4e: 84:95:16:db:8b:35:1a:4d:a6:9c:bc:6f:93:a6:65: bd:bc:d7:8e:e2:c2:35:e9:e5:58:d4:23:d5:71:bd: 6a:86:ae:b5:b4:09:d8:f4:f3:7d:d8:8e:c9:a0:c4: 27:ac:63:f4:b9:98:cb:94:4a:b2:e5:51:c6:5d:8c: 1c:24:bf:e0:a5:04:eb:e9:89:e3:24:f0:8c:99:0a: 46:bb:e2:92:db:9b:e3:77:b9:3d:b3:77:d9:79:29: 1f:c1:56:12:ff:00:25:aa:9d:17:ce:4b:68:66:20: 8c:41:a0:01:2f:57:3c:6c:de:d8:75:cc:dd:58:e8: db:20:96:06:ac:6f:00:65:68:5d:3e:f7:83:11:55: ab:27:5e:5f:37:c5:23:94:f1:04:61:f7:35:e1:b6: c4:67:4b:5b:e9:3e:be:76:6e:80:8d:77:4e:42:74: 1e:a5:37:8f:7d:91:a5:80:72:f5:f4:13:bd:19:0d: e3:2a:5e:9c:a7:7d:6c:35:ea:3b:c7:ab:b8:b4:b2: 00:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E6:D5:34:26:B0:16:6B:52:4B:29:19:17:95:DC:0C:7D:DA:5C:17 X509v3 Authority Key Identifier: keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/RubVNCawFmtSSykZF5XcDH3aXBc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.63.192.0/18 5.148.192.0/18 5.206.128.0/18 37.188.80.0/21 37.191.0.0/18 37.220.192.0/18 78.139.0.0/18 80.98.0.0/15 80.244.96.0/20 86.101.0.0/16 88.87.240.0/21 89.132.0.0/14 89.223.128.0/17 94.44.0.0/16 130.43.192.0/18 151.0.64.0/18 176.63.0.0/16 178.48.0.0/16 185.10.124.0/22 185.33.80.0/23 185.123.28.0/22 188.142.160.0-188.142.255.255 195.184.160.0/19 212.48.240.0/20 212.96.32.0/19 213.222.128.0/18 IPv6: 2a02:ab80::/28 Signature Algorithm: sha256WithRSAEncryption 0f:d6:1d:1f:35:53:b3:a8:43:d4:24:7f:c1:bf:97:15:ba:b4: 72:7c:52:18:d8:78:26:49:0c:22:59:91:20:bb:5b:95:8d:c6: a0:fa:11:9d:72:50:44:ef:88:6f:7e:ea:59:c7:2e:3a:81:23: 36:7f:12:36:ef:fa:bc:7e:73:d6:fd:4b:38:a1:60:dc:5f:a3: e0:70:2a:16:56:5b:d8:a1:5d:6b:ce:8a:ab:80:dc:91:39:71: 5b:f0:3d:ce:7e:bb:7d:9c:32:e8:1f:e3:69:77:70:97:f3:8a: ca:3c:8c:7f:b9:1b:cc:ed:7b:10:de:ca:1a:59:38:d4:d1:40: e5:6d:de:d7:0b:f0:39:5d:6d:34:21:71:24:89:a8:d0:07:0e: 59:12:fb:79:0a:a1:82:be:62:6a:77:49:06:44:40:53:e6:0b: b7:fe:07:47:d8:ff:03:1a:fe:a0:60:cf:ec:16:13:a4:83:6b: 67:91:80:46:ab:08:1f:de:3f:ea:57:80:bb:e1:93:18:9f:e3: 74:fe:8d:06:c1:ed:41:33:8e:30:a7:84:f1:6c:7f:8b:e6:6c: b0:e5:80:13:06:a8:11:dd:13:43:02:38:8b:d1:b0:c0:6c:1a: 55:44:f3:a1:79:18:e1:3e:63:14:40:3b:34:15:33:07:e2:88: 3a:6c:1a:0c -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt9W+PYlMuDE2Hfw6bbezCGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMDE5OGE3YjNhZmRjZGQ3MDAzNTYyYTA4NzE4NzhlMjM4 NzYwYWQwHhcNMjYwMTAyMDYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmU2ZDUzNDI2YjAxNjZiNTI0YjI5MTkxNzk1ZGMwYzdkZGE1YzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9qUCrJrwSBUiDq+6xHdXNpkVrFS h4zB1WiSs423bHdxidJUeM3fQk1FqwpfmqXzEpGqq9KGUR6jHU6ElRbbizUaTaac vG+TpmW9vNeO4sI16eVY1CPVcb1qhq61tAnY9PN92I7JoMQnrGP0uZjLlEqy5VHG XYwcJL/gpQTr6YnjJPCMmQpGu+KS25vjd7k9s3fZeSkfwVYS/wAlqp0XzktoZiCM QaABL1c8bN7YdczdWOjbIJYGrG8AZWhdPveDEVWrJ15fN8UjlPEEYfc14bbEZ0tb 6T6+dm6AjXdOQnQepTePfZGlgHL19BO9GQ3jKl6cp31sNeo7x6u4tLIAQQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFEbm1TQmsBZrUkspGReV3Ax92lwXMB8GA1UdIwQY MBaAFN8BmKezr9zdcANWKghxh44jh2CtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kM2ZjYTYtZWNiNS00M2FhLThjOWQt MGZjYzZjMzAxMWZjLzEvUnViVk5DYXdGbXRTU3lrWkY1WGNESDNhWEJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9kM2ZjYTYtZWNiNS00M2FhLThjOWQtMGZjYzZjMzAxMWZj LzEvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHJBggrBgEFBQcBBwEB/wSBuTCBtjCBpAQCAAEwgZ0DBAYF P8ADBAYFlMADBAYFzoADBAMlvFADBAYlvwADBAYl3MADBAZOiwADAwFQYgMEBFD0 YAMDAFZlAwQDWFfwAwMCWYQDBAdZ34ADAwBeLAMEBoIrwAMEBpcAQAMDALA/AwMA sjADBAK5CnwDBAG5IVADBAK5exwwCwMEBbyOoAMDALyOAwQFw7igAwQE1DDwAwQF 1GAgAwQG1d6AMA0EAgACMAcDBQQqAquAMA0GCSqGSIb3DQEBCwUAA4IBAQAP1h0f NVOzqEPUJH/Bv5cVurRyfFIY2HgmSQwiWZEgu1uVjcag+hGdclBE74hvfupZxy46 gSM2fxI27/q8fnPW/Us4oWDcX6PgcCoWVlvYoV1rzoqrgNyROXFb8D3Ofrt9nDLo H+Npd3CX84rKPIx/uRvM7XsQ3soaWTjU0UDlbd7XC/A5XW00IXEkiajQBw5ZEvt5 CqGCvmJqd0kGREBT5gu3/gdH2P8DGv6gYM/sFhOkg2tnkYBGqwgf3j/qV4C74ZMY n+N0/o0Gwe1BM44wp4TxbH+L5myw5YATBqgR3RNDAjiL0bDAbBpVRPOheRjhPmMU QDs0FTMH4og6bBoM -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:40 2026 by rpki-client