This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/1rd6tjUGFwBUGvZMK1_ySaJ2hzI.roa File: 1rd6tjUGFwBUGvZMK1_ySaJ2hzI.roa (raw, json) Hash identifier: QHkpYhpXjOcWjkew6ZIuhefy1Q8/VWsRdSkOyvp4lH4= Subject key identifier: D6:B7:7A:B6:35:06:17:00:54:1A:F6:4C:2B:5F:F2:49:A2:76:87:32 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019B78A272DD6AE29438B206C61DC1F62CAE Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/1rd6tjUGFwBUGvZMK1_ySaJ2hzI.roa Signing time: Thu 01 Jan 2026 08:17:50 +0000 ROA not before: Thu 01 Jan 2026 08:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7015 IP address blocks: 5.182.187.0/24 maxlen: 24 5.182.192.0/24 maxlen: 24 5.182.198.0/24 maxlen: 24 31.132.52.0/24 maxlen: 24 31.132.53.0/24 maxlen: 24 36.255.213.0/24 maxlen: 24 36.255.214.0/24 maxlen: 24 45.248.52.0/24 maxlen: 24 63.246.130.0/24 maxlen: 24 63.246.131.0/24 maxlen: 24 63.246.132.0/24 maxlen: 24 63.246.133.0/24 maxlen: 24 63.246.137.0/24 maxlen: 24 63.246.151.0/24 maxlen: 24 63.246.158.0/24 maxlen: 24 78.31.204.0/24 maxlen: 24 92.249.31.0/24 maxlen: 24 94.154.170.0/24 maxlen: 24 94.154.182.0/24 maxlen: 24 103.130.178.0/24 maxlen: 24 103.210.12.0/24 maxlen: 24 147.78.205.0/24 maxlen: 24 147.78.206.0/24 maxlen: 24 162.218.90.0/24 maxlen: 24 185.52.137.0/24 maxlen: 24 185.187.212.0/24 maxlen: 24 185.201.40.0/24 maxlen: 24 185.205.205.0/24 maxlen: 24 212.60.15.0/24 maxlen: 24 217.197.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:72:dd:6a:e2:94:38:b2:06:c6:1d:c1:f6:2c:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Jan 1 08:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6b77ab635061700541af64c2b5ff249a2768732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b2:b0:c9:41:85:8d:c4:b8:49:24:f9:de:6d: e0:c0:e5:b6:36:fb:ea:94:39:b1:6c:f0:8e:be:15: 6c:10:56:ef:3f:4a:00:f2:d2:07:a6:2e:82:88:c5: 8b:7e:48:b6:de:65:45:29:7d:d4:ee:19:e1:c9:88: d6:00:a0:34:48:91:88:80:37:7b:a9:c3:f2:cc:56: b4:d4:40:39:fb:d0:cb:ab:bc:21:12:3a:b7:ea:a4: 01:46:37:8d:92:e5:34:83:fe:4a:00:8c:27:cf:04: 21:57:51:14:04:f3:1b:ea:27:d8:75:ab:17:e5:12: db:9b:fb:42:b7:bc:e9:71:24:c3:19:8d:5b:13:5d: e1:1c:97:f9:2c:d7:e4:86:42:10:b0:29:87:dc:25: 41:db:60:a3:f6:5f:45:d0:a6:0e:b3:72:ad:43:9d: da:7f:df:93:69:2c:01:69:65:1f:7b:15:57:fc:cc: 01:4c:7f:ba:06:1a:a7:2a:31:74:cb:4c:42:9a:e7: 89:61:63:74:a4:1d:ff:d2:18:ff:cd:d8:98:18:0b: e0:ec:cc:a0:32:e6:7f:4b:4d:af:e2:17:d4:7a:40: 48:f8:42:ea:7b:e8:13:5d:7b:df:89:4b:9f:c3:39: 7e:10:1c:e1:b9:db:eb:81:69:70:8d:1a:64:e5:22: df:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B7:7A:B6:35:06:17:00:54:1A:F6:4C:2B:5F:F2:49:A2:76:87:32 X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/1rd6tjUGFwBUGvZMK1_ySaJ2hzI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.187.0/24 5.182.192.0/24 5.182.198.0/24 31.132.52.0/23 36.255.213.0-36.255.214.255 45.248.52.0/24 63.246.130.0-63.246.133.255 63.246.137.0/24 63.246.151.0/24 63.246.158.0/24 78.31.204.0/24 92.249.31.0/24 94.154.170.0/24 94.154.182.0/24 103.130.178.0/24 103.210.12.0/24 147.78.205.0-147.78.206.255 162.218.90.0/24 185.52.137.0/24 185.187.212.0/24 185.201.40.0/24 185.205.205.0/24 212.60.15.0/24 217.197.169.0/24 Signature Algorithm: sha256WithRSAEncryption 05:76:71:e9:da:52:ae:5c:6f:4e:9f:c7:6f:4d:26:02:40:07: 7e:15:01:92:71:49:60:7d:83:08:01:16:24:fd:c9:7f:04:44: 13:e2:44:61:00:bf:90:c9:c4:a6:44:f0:e8:7b:97:d4:0c:f4: 79:29:80:94:79:64:79:d7:49:18:9e:88:d1:91:7c:09:3b:95: 95:44:2b:72:43:1a:93:6c:98:a9:cc:1e:50:0c:1f:5d:67:ca: 08:8e:bf:b8:28:1b:6b:68:a5:03:1c:99:9c:a6:8b:68:98:bb: f9:da:b6:c1:48:29:e1:7e:f4:36:d9:5f:e4:b2:70:cf:15:b0: 3f:08:a5:f4:a6:9b:5c:2f:ac:ec:03:ab:10:37:64:a9:be:2c: 12:fd:08:6b:3b:f5:8e:b8:d5:8a:92:e2:3a:d6:ff:a5:6c:ff: bd:1b:a1:c4:e5:7e:7d:d5:a3:6b:88:30:67:2b:1e:e0:be:5d: ed:54:c9:e3:6a:68:c2:7a:47:96:74:4d:17:d3:ba:e7:2d:b2: 80:8a:6c:3a:06:c8:29:cb:6c:dc:79:df:cb:e3:ab:11:5f:94: b9:72:58:62:9e:57:77:79:bf:1d:14:d1:27:ff:89:9c:e5:bf: b1:a2:de:6a:a1:9c:0f:03:dd:ef:c2:e7:26:7f:a4:9b:c6:3c: b0:46:1e:a7 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt4onLdauKUOLIGxh3B9iyuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwMTAxMDgxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmI3N2FiNjM1MDYxNzAwNTQxYWY2NGMyYjVmZjI0OWEyNzY4NzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bKwyUGFjcS4SST53m3gwOW2Nvvq lDmxbPCOvhVsEFbvP0oA8tIHpi6CiMWLfki23mVFKX3U7hnhyYjWAKA0SJGIgDd7 qcPyzFa01EA5+9DLq7whEjq36qQBRjeNkuU0g/5KAIwnzwQhV1EUBPMb6ifYdasX 5RLbm/tCt7zpcSTDGY1bE13hHJf5LNfkhkIQsCmH3CVB22Cj9l9F0KYOs3KtQ53a f9+TaSwBaWUfexVX/MwBTH+6BhqnKjF0y0xCmueJYWN0pB3/0hj/zdiYGAvg7Myg MuZ/S02v4hfUekBI+ELqe+gTXXvfiUufwzl+EBzhudvrgWlwjRpk5SLfdwIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFNa3erY1BhcAVBr2TCtf8kmidocyMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvMXJkNnRqVUdGd0JVR3ZaTUsxX3lTYUoyaHpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHFBggrBgEFBQcBBwEB/wSBtTCBsjCBrwQCAAEwgagDBAAF trsDBAAFtsADBAAFtsYDBAEfhDQwDAMEACT/1QMEACT/1gMEAC34NDAMAwQBP/aC AwQBP/aEAwQAP/aJAwQAP/aXAwQAP/aeAwQATh/MAwQAXPkfAwQAXpqqAwQAXpq2 AwQAZ4KyAwQAZ9IMMAwDBACTTs0DBACTTs4DBACi2loDBAC5NIkDBAC5u9QDBAC5 ySgDBAC5zc0DBADUPA8DBADZxakwDQYJKoZIhvcNAQELBQADggEBAAV2cenaUq5c b06fx29NJgJAB34VAZJxSWB9gwgBFiT9yX8ERBPiRGEAv5DJxKZE8Oh7l9QM9Hkp gJR5ZHnXSRieiNGRfAk7lZVEK3JDGpNsmKnMHlAMH11nygiOv7goG2topQMcmZym i2iYu/natsFIKeF+9DbZX+SycM8VsD8IpfSmm1wvrOwDqxA3ZKm+LBL9CGs79Y64 1YqS4jrW/6Vs/70bocTlfn3Vo2uIMGcrHuC+Xe1UyeNqaMJ6R5Z0TRfTuuctsoCK bDoGyCnLbNx538vjqxFflLlyWGKeV3d5vx0U0Sf/iZzlv7Gi3mqhnA8D3e/C5yZ/ pJvGPLBGHqc= -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:53 2026 by rpki-client