This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pibVUt6USHgVzEUeH5maQT1k2ts.roa File: pibVUt6USHgVzEUeH5maQT1k2ts.roa (raw, json) Hash identifier: 8TlnJBVhmZVC+8I2QYjiT6Cr4HH1Y9B/wQr18bJL114= Subject key identifier: A6:26:D5:52:DE:94:48:78:15:CC:45:1E:1F:99:9A:41:3D:64:DA:DB Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019BB269C4AC66EFEF945D2AF1454C70B405 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pibVUt6USHgVzEUeH5maQT1k2ts.roa Signing time: Mon 12 Jan 2026 13:33:54 +0000 ROA not before: Mon 12 Jan 2026 13:33:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30058 IP address blocks: 2.56.101.0/24 maxlen: 24 45.85.160.0/24 maxlen: 24 45.86.12.0/24 maxlen: 24 45.151.106.0/24 maxlen: 24 93.190.245.0/24 maxlen: 24 103.114.42.0/24 maxlen: 24 185.242.244.0/24 maxlen: 24 193.23.253.0/24 maxlen: 24 193.27.10.0/24 maxlen: 24 194.33.29.0/24 maxlen: 24 194.62.31.0/24 maxlen: 24 213.139.217.0/24 maxlen: 24 213.139.218.0/24 maxlen: 24 2a0a:2d06:104::/48 maxlen: 48 2a10:7500::/29 maxlen: 29 2a11:efc0::/29 maxlen: 29 2a12:ef00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:69:c4:ac:66:ef:ef:94:5d:2a:f1:45:4c:70:b4:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 12 13:33:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a626d552de94487815cc451e1f999a413d64dadb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:69:98:c5:14:97:2c:44:fb:52:2c:66:44:16: 3b:cb:df:24:8b:cf:8e:b9:b4:77:04:29:b3:41:b2: dc:18:fc:a0:35:37:47:4f:e5:d3:0e:e9:27:ff:94: ec:d9:91:e4:89:52:10:ee:2e:84:3a:15:09:cd:10: f9:ff:04:30:8b:68:04:6a:48:1a:fd:be:cd:c6:8b: 64:b9:e8:55:96:4b:79:5d:5d:11:23:44:39:81:7e: 6c:01:22:ff:69:32:78:09:f4:92:ac:f6:3a:49:84: 02:47:81:6d:65:79:2e:66:06:1f:44:da:0f:1c:38: c9:4d:73:df:18:5a:64:ab:0b:30:56:f3:b1:dc:47: db:07:b6:06:69:db:5a:70:73:1b:9c:60:83:b2:be: d9:c1:b9:42:27:0d:0d:bd:8f:41:26:4b:61:22:80: 91:72:a9:e3:23:0b:81:b6:12:1e:c6:6e:3d:21:29: 54:b4:1c:fd:2e:c3:94:0d:30:fa:bd:9d:aa:65:fc: e0:8f:e8:a9:d0:1f:3d:7f:36:21:73:37:8d:38:94: 13:04:74:e9:f1:fa:e4:75:03:2a:ac:e1:ac:96:36: 53:ef:ad:8e:8c:ad:d9:a3:48:1b:70:57:32:0c:70: 60:e6:40:00:cd:ef:f3:4c:b2:94:65:b3:ca:60:30: 2c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:26:D5:52:DE:94:48:78:15:CC:45:1E:1F:99:9A:41:3D:64:DA:DB X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pibVUt6USHgVzEUeH5maQT1k2ts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.101.0/24 45.85.160.0/24 45.86.12.0/24 45.151.106.0/24 93.190.245.0/24 103.114.42.0/24 185.242.244.0/24 193.23.253.0/24 193.27.10.0/24 194.33.29.0/24 194.62.31.0/24 213.139.217.0-213.139.218.255 IPv6: 2a0a:2d06:104::/48 2a10:7500::/29 2a11:efc0::/29 2a12:ef00::/29 Signature Algorithm: sha256WithRSAEncryption 32:a5:27:e7:49:9e:72:5e:0d:90:23:fc:14:34:3a:db:d4:39: d0:04:9d:d8:0b:08:97:03:76:ec:38:0a:43:75:66:17:aa:52: 3e:65:7a:57:b5:5c:48:3e:47:b5:00:5e:c8:e1:58:7e:9b:14: b9:65:3a:ee:aa:54:96:55:d3:a1:d8:8d:e6:49:15:24:02:39: 0a:5c:ba:11:8c:e7:61:b5:03:b5:ab:40:f3:45:c9:80:13:5c: 70:1d:6d:52:82:1c:a3:35:36:29:92:cd:bc:40:8b:59:39:e3: 74:a5:ff:61:e8:b6:70:41:42:95:2c:56:68:4e:73:cc:a2:ea: 7a:67:ed:ad:99:72:8e:04:36:45:12:e8:75:ad:41:b2:51:e7: 69:f1:a5:69:4a:eb:fb:40:7c:5c:e7:79:02:87:ec:dd:d5:60: 1f:b1:65:17:7a:d7:61:02:29:36:a1:31:19:78:0c:30:27:17: 19:91:4c:8c:13:37:bd:c3:e7:06:73:43:59:47:e1:f3:82:a3: 72:8b:b4:50:96:cf:87:0c:d2:f8:fa:e0:8c:b7:68:a9:1b:a7: d9:4a:b5:84:40:39:84:86:1a:39:df:17:4a:7a:fa:3c:98:3d: 5e:dd:31:dc:a7:0a:45:6c:61:71:8d:87:00:e6:b4:bf:93:b6: 1a:5d:6d:0a -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgISAZuyacSsZu/vlF0q8UVMcLQFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTEyMTMzMzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjI2ZDU1MmRlOTQ0ODc4MTVjYzQ1MWUxZjk5OWE0MTNkNjRkYWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmmYxRSXLET7UixmRBY7y98ki8+O ubR3BCmzQbLcGPygNTdHT+XTDukn/5Ts2ZHkiVIQ7i6EOhUJzRD5/wQwi2gEakga /b7NxotkuehVlkt5XV0RI0Q5gX5sASL/aTJ4CfSSrPY6SYQCR4FtZXkuZgYfRNoP HDjJTXPfGFpkqwswVvOx3EfbB7YGadtacHMbnGCDsr7ZwblCJw0NvY9BJkthIoCR cqnjIwuBthIexm49ISlUtBz9LsOUDTD6vZ2qZfzgj+ip0B89fzYhczeNOJQTBHTp 8frkdQMqrOGsljZT762OjK3Zo0gbcFcyDHBg5kAAze/zTLKUZbPKYDAs8wIDAQAB o4ICezCCAncwHQYDVR0OBBYEFKYm1VLelEh4FcxFHh+ZmkE9ZNrbMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvcGliVlV0NlVTSGdWekVVZUg1bWFRVDFrMnRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MFYEAgABMFADBAACOGUD BAAtVaADBAAtVgwDBAAtl2oDBABdvvUDBABncioDBAC58vQDBADBF/0DBADBGwoD BADCIR0DBADCPh8wDAMEANWL2QMEANWL2jAkBAIAAjAeAwcAKgotBgEEAwUDKhB1 AAMFAyoR78ADBQMqEu8AMA0GCSqGSIb3DQEBCwUAA4IBAQAypSfnSZ5yXg2QI/wU NDrb1DnQBJ3YCwiXA3bsOApDdWYXqlI+ZXpXtVxIPke1AF7I4Vh+mxS5ZTruqlSW VdOh2I3mSRUkAjkKXLoRjOdhtQO1q0DzRcmAE1xwHW1SghyjNTYpks28QItZOeN0 pf9h6LZwQUKVLFZoTnPMoup6Z+2tmXKOBDZFEuh1rUGyUedp8aVpSuv7QHxc53kC h+zd1WAfsWUXetdhAik2oTEZeAwwJxcZkUyMEze9w+cGc0NZR+HzgqNyi7RQls+H DNL4+uCMt2ipG6fZSrWEQDmEhho53xdKevo8mD1e3THcpwpFbGFxjYcA5rS/k7Ya XW0K -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:18 2026 by rpki-client