This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/52xBodduqIwcsYy_iwGrav8wNPA.roa File: 52xBodduqIwcsYy_iwGrav8wNPA.roa (raw, json) Hash identifier: OeV7zUR0TM+VXjljKVbrtHhPSwRtjc0RboLlqaQmwFA= Subject key identifier: E7:6C:41:A1:D7:6E:A8:8C:1C:B1:8C:BF:8B:01:AB:6A:FF:30:34:F0 Certificate issuer: /CN=602dc2478a4bdde4c440bb58802410d2340a490e Certificate serial: 019B7D5CB1A16DE3123D18EB471A3AC27862 Authority key identifier: 60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/52xBodduqIwcsYy_iwGrav8wNPA.roa Signing time: Fri 02 Jan 2026 06:19:45 +0000 ROA not before: Fri 02 Jan 2026 06:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34426 IP address blocks: 82.118.160.0/19 maxlen: 19 82.118.161.0/24 maxlen: 24 82.118.162.0/24 maxlen: 24 82.118.163.0/24 maxlen: 24 82.118.164.0/24 maxlen: 24 82.118.165.0/24 maxlen: 24 82.118.166.0/24 maxlen: 24 82.118.167.0/24 maxlen: 24 82.118.168.0/24 maxlen: 24 82.118.169.0/24 maxlen: 24 82.118.170.0/24 maxlen: 24 82.118.171.0/24 maxlen: 24 82.118.172.0/24 maxlen: 24 82.118.176.0/20 maxlen: 20 89.144.64.0/19 maxlen: 19 89.144.96.0/19 maxlen: 19 89.144.102.0/24 maxlen: 24 89.144.103.0/24 maxlen: 24 89.144.106.0/24 maxlen: 24 89.144.107.0/24 maxlen: 24 89.144.110.0/24 maxlen: 24 89.144.111.0/24 maxlen: 24 212.102.0.0/19 maxlen: 19 212.102.13.0/24 maxlen: 24 212.102.18.0/24 maxlen: 24 212.102.23.0/24 maxlen: 24 212.102.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b1:a1:6d:e3:12:3d:18:eb:47:1a:3a:c2:78:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=602dc2478a4bdde4c440bb58802410d2340a490e Validity Not Before: Jan 2 06:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e76c41a1d76ea88c1cb18cbf8b01ab6aff3034f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:05:f9:bd:f3:c2:55:7f:f4:e0:21:42:74:2d: 77:33:04:b5:d3:5c:d8:fd:c1:bc:49:60:d1:45:25: ba:ef:d6:5f:6e:e3:c5:14:c7:98:b3:de:57:29:e0: c5:93:37:6e:0e:b4:1e:e3:fc:21:aa:2c:a6:b7:e6: 6f:f1:3d:d2:26:04:3d:c7:d6:9f:5f:39:18:7a:a2: 39:97:c7:21:dd:65:59:32:bd:e7:c6:48:e8:3c:9d: 5f:fb:6c:ae:11:7b:75:55:86:87:93:db:73:36:dd: 41:af:c0:cf:38:31:31:d1:6f:3d:79:39:f5:86:52: 0a:aa:fd:32:27:34:ff:f4:d6:ed:2f:6d:8a:43:60: 39:ba:93:a8:9c:9a:90:34:d4:c6:bc:3b:ac:ce:9a: 7b:ad:28:28:d0:0a:f0:fa:dd:91:7e:45:41:ad:ae: 0f:29:6d:6e:5f:95:17:7d:48:50:27:74:d4:76:48: 07:74:f3:7f:c9:6a:1e:3a:4a:7c:1a:4b:ca:7b:d7: af:14:08:c8:ab:75:89:f7:7c:70:d9:fd:5a:8e:32: 0e:50:e8:1c:16:08:aa:eb:0a:04:10:c2:2a:9b:e5: cd:ac:a5:eb:67:86:7a:75:a5:7a:85:fb:32:56:4b: 09:34:76:1b:71:85:4e:d5:81:c1:8e:7c:5c:dc:77: 72:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6C:41:A1:D7:6E:A8:8C:1C:B1:8C:BF:8B:01:AB:6A:FF:30:34:F0 X509v3 Authority Key Identifier: keyid:60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/52xBodduqIwcsYy_iwGrav8wNPA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.118.160.0/19 89.144.64.0/18 212.102.0.0/19 Signature Algorithm: sha256WithRSAEncryption 4d:a3:02:31:6f:3d:fe:9e:8b:d5:a7:60:ca:e1:05:3a:f5:ec: a5:4c:cc:e4:1c:91:73:3f:04:ac:41:6a:cf:49:fa:b9:3f:4e: 35:3e:54:48:2d:fb:4e:6d:e9:2a:27:e1:ee:44:e7:91:e0:0e: 8a:9f:04:83:2f:66:04:68:aa:72:93:3d:f9:53:d4:56:1a:e7: e0:ba:bc:ab:22:f1:fd:3d:46:c1:80:dc:a3:f8:de:09:fb:d9: bb:65:d0:1d:c9:62:ad:1f:6c:fa:d5:05:38:ff:79:08:92:25: 72:57:75:b8:a5:29:36:20:6d:c1:19:2e:10:0b:25:d5:8f:db: ca:ee:d4:fa:91:29:2c:c9:b1:50:f8:e5:db:fc:ff:0d:bf:31: 73:ec:29:b6:69:3f:d9:01:7b:0d:16:29:fd:1f:b0:b3:20:7d: 5b:54:80:6c:74:84:75:62:65:a8:79:b7:0a:c2:00:68:07:14: ce:f1:7d:0f:99:85:5d:2d:2e:2a:13:6c:c2:c6:61:0f:ea:d6: 3f:9d:27:d8:01:45:b9:19:e5:e2:30:c7:25:b5:51:dc:e8:06: 3a:91:be:23:dd:fc:4f:90:ac:e5:fb:7b:e8:13:b7:a8:e3:5a: 0d:d2:e2:ac:c7:00:10:0f:04:b8:4d:7e:9b:85:1e:1b:fa:2b: 6e:06:b6:b0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XLGhbeMSPRjrRxo6wnhiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMmRjMjQ3OGE0YmRkZTRjNDQwYmI1ODgwMjQxMGQyMzQw YTQ5MGUwHhcNMjYwMTAyMDYxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzZjNDFhMWQ3NmVhODhjMWNiMThjYmY4YjAxYWI2YWZmMzAzNGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAX5vfPCVX/04CFCdC13MwS101zY /cG8SWDRRSW679ZfbuPFFMeYs95XKeDFkzduDrQe4/whqiymt+Zv8T3SJgQ9x9af XzkYeqI5l8ch3WVZMr3nxkjoPJ1f+2yuEXt1VYaHk9tzNt1Br8DPODEx0W89eTn1 hlIKqv0yJzT/9NbtL22KQ2A5upOonJqQNNTGvDuszpp7rSgo0Arw+t2RfkVBra4P KW1uX5UXfUhQJ3TUdkgHdPN/yWoeOkp8GkvKe9evFAjIq3WJ93xw2f1ajjIOUOgc Fgiq6woEEMIqm+XNrKXrZ4Z6daV6hfsyVksJNHYbcYVO1YHBjnxc3HdymQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOdsQaHXbqiMHLGMv4sBq2r/MDTwMB8GA1UdIwQY MBaAFGAtwkeKS93kxEC7WIAkENI0CkkOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUMzQ1I0cEwzZVRFUUx0WWdDUVEwalFLU1E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9iODEzOTAtMTAyMy00NTBkLThhZDMt NWY3MTNkZmZmMTE0LzEvNTJ4Qm9kZHVxSXdjc1l5X2l3R3Jhdjh3TlBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9iODEzOTAtMTAyMy00NTBkLThhZDMtNWY3MTNkZmZmMTE0 LzEvWUMzQ1I0cEwzZVRFUUx0WWdDUVEwalFLU1E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFUnagAwQG WZBAAwQF1GYAMA0GCSqGSIb3DQEBCwUAA4IBAQBNowIxbz3+novVp2DK4QU69eyl TMzkHJFzPwSsQWrPSfq5P041PlRILftObekqJ+HuROeR4A6KnwSDL2YEaKpykz35 U9RWGufguryrIvH9PUbBgNyj+N4J+9m7ZdAdyWKtH2z61QU4/3kIkiVyV3W4pSk2 IG3BGS4QCyXVj9vK7tT6kSksybFQ+OXb/P8NvzFz7Cm2aT/ZAXsNFin9H7CzIH1b VIBsdIR1YmWoebcKwgBoBxTO8X0PmYVdLS4qE2zCxmEP6tY/nSfYAUW5GeXiMMcl tVHc6AY6kb4j3fxPkKzl+3voE7eo41oN0uKsxwAQDwS4TX6bhR4b+ituBraw -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:26 2026 by rpki-client