This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/hUSppmm3TUDUe9c3zKVYGDhp5FI.roa File: hUSppmm3TUDUe9c3zKVYGDhp5FI.roa (raw, json) Hash identifier: wajskwcklMoTdKJT16kOKBQL/f8FpnT58RrghPxKbEc= Subject key identifier: 85:44:A9:A6:69:B7:4D:40:D4:7B:D7:37:CC:A5:58:18:38:69:E4:52 Certificate issuer: /CN=574cca899ef5bf4237f0f6bdd1779221b20052f3 Certificate serial: 019B79ED44695D7FB4765569A013363B505B Authority key identifier: 57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/hUSppmm3TUDUe9c3zKVYGDhp5FI.roa Signing time: Thu 01 Jan 2026 14:19:11 +0000 ROA not before: Thu 01 Jan 2026 14:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12365 IP address blocks: 81.95.224.0/20 maxlen: 20 81.95.224.96/27 maxlen: 27 81.95.224.192/26 maxlen: 26 81.95.234.128/28 maxlen: 28 81.95.234.192/26 maxlen: 26 82.215.66.0/23 maxlen: 23 82.215.68.0/23 maxlen: 23 82.215.72.0/22 maxlen: 22 82.215.77.0/24 maxlen: 24 82.215.78.0/23 maxlen: 23 82.215.80.0/22 maxlen: 22 82.215.86.0/23 maxlen: 23 82.215.88.0/21 maxlen: 21 82.215.88.0/22 maxlen: 22 82.215.92.0/22 maxlen: 22 82.215.112.0/22 maxlen: 22 82.215.116.0/22 maxlen: 22 82.215.120.0/22 maxlen: 22 82.215.124.0/22 maxlen: 22 89.146.64.0/18 maxlen: 18 89.146.64.0/22 maxlen: 22 89.146.68.0/22 maxlen: 22 89.146.72.0/22 maxlen: 22 89.146.76.0/22 maxlen: 22 89.146.80.0/22 maxlen: 22 89.146.84.0/22 maxlen: 22 89.146.88.0/22 maxlen: 22 89.146.92.0/22 maxlen: 22 89.146.96.0/22 maxlen: 22 89.146.100.0/22 maxlen: 22 89.146.104.0/22 maxlen: 22 89.146.108.0/22 maxlen: 22 89.146.112.0/22 maxlen: 22 89.146.116.0/22 maxlen: 22 89.146.120.0/22 maxlen: 22 89.146.124.0/22 maxlen: 22 185.78.136.0/22 maxlen: 22 2a00:8840::/32 maxlen: 32 2a00:8840:c000::/36 maxlen: 36 2a00:8840:d000::/36 maxlen: 36 2a00:8840:e000::/36 maxlen: 36 2a00:8840:f000::/36 maxlen: 36 2a00:8841::/32 maxlen: 32 2a00:8842::/32 maxlen: 32 2a00:8843::/32 maxlen: 32 2a00:8844::/32 maxlen: 32 2a00:8845::/32 maxlen: 32 2a00:8846::/32 maxlen: 32 2a00:8847::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:44:69:5d:7f:b4:76:55:69:a0:13:36:3b:50:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=574cca899ef5bf4237f0f6bdd1779221b20052f3 Validity Not Before: Jan 1 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8544a9a669b74d40d47bd737cca558183869e452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:73:6f:11:5a:5e:a6:f6:08:23:49:bb:d6:90: 54:60:0d:ba:94:ea:98:12:48:a7:37:da:30:eb:fb: 7d:23:07:65:ed:5e:9e:16:bd:17:30:e2:b1:5e:63: 48:e8:7b:9d:8d:fa:0e:79:13:80:d6:a2:d5:97:18: c3:25:bb:93:d1:8c:8a:1d:00:3b:01:fd:02:89:16: 9e:60:18:61:53:14:30:a4:47:f2:19:c3:aa:3d:d7: 0b:03:84:93:37:a0:39:13:05:bb:43:f4:46:d4:f5: e5:df:6e:46:67:be:d5:49:27:00:2a:a6:73:52:f6: b3:63:24:4e:9e:cc:bf:4f:ad:bd:7c:5d:3a:b6:b0: 39:8c:a0:f8:d2:21:2e:09:75:77:ad:0b:8e:b0:b0: 67:b6:32:5a:be:ed:ef:c0:2b:25:ad:0c:8d:36:7b: 34:ca:73:b5:b3:7a:54:9c:b2:b8:75:64:62:2b:92: dc:fc:ed:55:2e:6b:aa:d5:1f:3d:a0:f1:b3:f6:84: 82:09:c5:c8:71:05:8b:03:0b:4e:33:51:5b:7c:15: e5:8a:27:52:3d:3e:27:7c:75:51:d7:3c:ae:bf:66: b0:a4:98:43:7b:44:9f:f1:93:47:0d:5e:ab:62:59: 68:2f:6d:a6:be:6c:e6:4b:76:9e:0d:27:1a:c8:6e: 4c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:44:A9:A6:69:B7:4D:40:D4:7B:D7:37:CC:A5:58:18:38:69:E4:52 X509v3 Authority Key Identifier: keyid:57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/hUSppmm3TUDUe9c3zKVYGDhp5FI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.95.224.0/20 82.215.66.0-82.215.69.255 82.215.72.0/22 82.215.77.0-82.215.83.255 82.215.86.0-82.215.95.255 82.215.112.0/20 89.146.64.0/18 185.78.136.0/22 IPv6: 2a00:8840::/29 Signature Algorithm: sha256WithRSAEncryption 93:39:60:44:50:1a:62:f8:06:a2:3f:79:b2:29:86:84:9c:c3: e7:b2:af:0f:aa:20:09:2f:f7:30:6f:4f:d1:ba:42:b2:3b:e5: 9a:77:c9:e2:ad:e1:1f:8b:34:35:93:bf:3e:a3:f2:31:36:7b: 74:b1:69:46:5a:cf:e0:c7:79:25:06:07:93:32:8d:1c:d7:37: 78:f7:f3:58:8b:8e:83:26:1f:6d:62:9f:de:ad:07:88:4f:31: 99:1c:5d:56:63:9e:40:99:df:df:4c:a4:48:94:73:96:3d:7d: 0e:77:93:b6:da:4d:f7:02:5f:96:70:49:e5:c8:33:0d:70:62: d7:8a:76:de:74:b0:5a:94:c2:05:87:f9:41:c1:8b:43:08:8e: c9:ff:01:d0:cb:e5:b2:e0:95:14:38:e9:8c:2e:d0:9e:60:43: 46:d6:4e:be:cc:f6:98:04:6c:14:70:81:af:e8:5f:d5:9c:52: ac:16:96:51:c2:d2:68:14:a3:f4:1d:11:b4:ff:f2:e6:44:b1: 16:f2:a5:73:01:43:27:43:52:1c:76:6a:50:eb:12:3f:04:db: 73:f0:ce:df:1a:7b:39:d6:ee:20:8a:79:99:dd:8d:6a:2e:5d: 98:71:bb:a9:cd:b1:63:08:95:e2:81:a0:fd:8b:a1:eb:36:0b: be:05:31:5d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgISAZt57URpXX+0dlVpoBM2O1BbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NGNjYTg5OWVmNWJmNDIzN2YwZjZiZGQxNzc5MjIxYjIw MDUyZjMwHhcNMjYwMTAxMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTQ0YTlhNjY5Yjc0ZDQwZDQ3YmQ3MzdjY2E1NTgxODM4NjllNDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHNvEVpepvYII0m71pBUYA26lOqY EkinN9ow6/t9Iwdl7V6eFr0XMOKxXmNI6HudjfoOeROA1qLVlxjDJbuT0YyKHQA7 Af0CiRaeYBhhUxQwpEfyGcOqPdcLA4STN6A5EwW7Q/RG1PXl325GZ77VSScAKqZz UvazYyROnsy/T629fF06trA5jKD40iEuCXV3rQuOsLBntjJavu3vwCslrQyNNns0 ynO1s3pUnLK4dWRiK5Lc/O1VLmuq1R89oPGz9oSCCcXIcQWLAwtOM1FbfBXliidS PT4nfHVR1zyuv2awpJhDe0Sf8ZNHDV6rYlloL22mvmzmS3aeDScayG5MjQIDAQAB o4ICWjCCAlYwHQYDVR0OBBYEFIVEqaZpt01A1HvXN8ylWBg4aeRSMB8GA1UdIwQY MBaAFFdMyome9b9CN/D2vdF3kiGyAFLzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjB6S2laNzF2MEkzOFBhOTBYZVNJYklBVXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC85MzhhYmQtMTAxOS00ZTdhLWFhODIt ZWUxMTI2YTI4MTk1LzEvaFVTcHBtbTNUVURVZTljM3pLVllHRGhwNUZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC85MzhhYmQtMTAxOS00ZTdhLWFhODItZWUxMTI2YTI4MTk1 LzEvVjB6S2laNzF2MEkzOFBhOTBYZVNJYklBVXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQEUV/gMAwD BAFS10IDBAFS10QDBAJS10gwDAMEAFLXTQMEAlLXUDAMAwQBUtdWAwQFUtdAAwQE UtdwAwQGWZJAAwQCuU6IMA0EAgACMAcDBQMqAIhAMA0GCSqGSIb3DQEBCwUAA4IB AQCTOWBEUBpi+AaiP3myKYaEnMPnsq8PqiAJL/cwb0/RukKyO+Wad8nireEfizQ1 k78+o/IxNnt0sWlGWs/gx3klBgeTMo0c1zd49/NYi46DJh9tYp/erQeITzGZHF1W Y55Amd/fTKRIlHOWPX0Od5O22k33Al+WcEnlyDMNcGLXinbedLBalMIFh/lBwYtD CI7J/wHQy+Wy4JUUOOmMLtCeYENG1k6+zPaYBGwUcIGv6F/VnFKsFpZRwtJoFKP0 HRG0//LmRLEW8qVzAUMnQ1IcdmpQ6xI/BNtz8M7fGns51u4ginmZ3Y1qLl2Ycbup zbFjCJXigaD9i6HrNgu+BTFd -----END CERTIFICATE-----Generated at Tue Feb 10 00:01:53 2026 by rpki-client