This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/ARvHC35mwQKQSHNS1J2UcxIOXhk.roa File: ARvHC35mwQKQSHNS1J2UcxIOXhk.roa (raw, json) Hash identifier: I+P0+0NUkpAeizIJ4ocanrSBj4ovLyBDmtkFNJ1PWfg= Subject key identifier: 01:1B:C7:0B:7E:66:C1:02:90:48:73:52:D4:9D:94:73:12:0E:5E:19 Certificate issuer: /CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca Certificate serial: 019B790FFBB20347A5952A2C3BD931849131 Authority key identifier: 9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/ARvHC35mwQKQSHNS1J2UcxIOXhk.roa Signing time: Thu 01 Jan 2026 10:17:29 +0000 ROA not before: Thu 01 Jan 2026 10:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39431 IP address blocks: 176.108.96.0/20 maxlen: 24 176.108.96.0/21 maxlen: 24 176.108.100.0/22 maxlen: 24 176.108.102.0/24 maxlen: 24 176.108.103.0/24 maxlen: 24 176.108.104.0/21 maxlen: 24 176.108.104.0/22 maxlen: 24 176.108.104.0/24 maxlen: 24 176.108.106.0/23 maxlen: 24 176.108.106.0/24 maxlen: 24 176.108.108.0/22 maxlen: 24 176.108.108.0/24 maxlen: 24 176.108.109.0/24 maxlen: 24 176.108.111.0/24 maxlen: 24 176.108.112.0/21 maxlen: 24 176.108.112.0/22 maxlen: 24 176.108.112.0/24 maxlen: 24 176.108.116.0/22 maxlen: 24 176.108.116.0/24 maxlen: 24 176.108.117.0/24 maxlen: 24 176.108.118.0/24 maxlen: 24 176.108.119.0/24 maxlen: 24 176.108.120.0/22 maxlen: 24 193.93.16.0/22 maxlen: 24 193.93.16.0/23 maxlen: 24 193.93.16.0/24 maxlen: 24 193.93.17.0/24 maxlen: 24 193.93.18.0/23 maxlen: 24 193.93.18.0/24 maxlen: 24 193.93.19.0/24 maxlen: 24 2001:678:468::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:fb:b2:03:47:a5:95:2a:2c:3b:d9:31:84:91:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca Validity Not Before: Jan 1 10:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=011bc70b7e66c10290487352d49d9473120e5e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:38:32:95:a2:f5:98:9c:00:c4:59:d5:1e:2f: d1:94:05:7e:78:33:48:70:e2:7b:20:3a:55:ec:0d: b2:a3:76:3a:cf:99:a3:47:d3:e3:94:0f:3d:51:fc: f8:c0:91:53:33:14:40:21:a9:ce:27:e7:e2:1c:9d: 47:3c:a0:c6:37:0a:ec:a8:b6:e3:dd:1b:8c:e8:5e: 5f:0d:e4:c1:8a:61:a5:aa:21:a9:9f:b4:31:ab:a4: 67:2c:5c:52:48:03:ab:a5:dd:91:ed:3b:bb:88:90: af:3d:06:f6:58:51:2c:b5:e1:4a:72:0c:ca:cb:f9: 35:2c:f6:ab:28:55:76:83:48:d1:65:7a:68:88:0d: 02:b6:92:2d:4d:4b:bd:ff:98:c3:bf:9a:7c:6b:58: 4b:36:98:80:78:0b:c0:aa:f7:90:fc:71:56:87:1d: df:e4:d0:4b:88:0c:56:4b:49:8b:65:a7:72:97:eb: 59:66:e4:ab:c1:cd:7f:1a:3b:1e:d4:cd:f4:f5:e4: 08:06:a4:52:18:70:7e:ee:6d:89:76:35:24:d3:91: 56:41:4e:45:ff:ea:0a:8c:48:e6:34:bb:32:e5:9b: 5d:19:ab:57:14:78:96:a7:47:40:0b:5c:9f:8b:82: d1:6e:3f:27:5d:f6:cf:db:33:6c:c0:c6:6d:22:10: e6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1B:C7:0B:7E:66:C1:02:90:48:73:52:D4:9D:94:73:12:0E:5E:19 X509v3 Authority Key Identifier: keyid:9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/ARvHC35mwQKQSHNS1J2UcxIOXhk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.108.96.0-176.108.123.255 193.93.16.0/22 IPv6: 2001:678:468::/48 Signature Algorithm: sha256WithRSAEncryption 59:b9:e1:68:d8:9e:5e:14:5d:ef:5f:9f:14:b0:66:75:3f:8f: 6a:52:d7:f8:d8:b1:c6:5e:d8:79:2f:80:42:5b:ca:d0:0d:6a: aa:60:92:94:20:3b:f6:0a:5e:0b:e6:e8:7e:56:67:db:c2:26: ac:67:10:74:b1:06:26:22:55:a2:94:79:6c:a6:2a:33:d3:9c: df:16:7a:d8:62:3e:c2:d7:d4:57:58:d6:35:ca:9e:e4:3e:d4: bf:a2:4a:df:a8:88:e3:a9:05:1c:bd:f3:1d:4f:e6:15:e4:ec: 18:3f:c2:64:fc:6c:66:62:df:02:48:48:72:85:df:14:8d:a4: 55:97:03:4f:a2:3f:6f:79:0a:74:d0:4d:d6:01:fa:af:e9:6a: dc:d3:5b:ee:56:b5:c5:dc:7e:e5:ae:26:41:05:49:ba:85:1f: 24:f3:d7:72:3b:f9:dd:e9:d7:f1:95:16:26:84:bc:95:84:a6: 5f:3b:28:2d:2d:fe:08:a5:b1:5f:3b:55:98:39:9d:d6:f3:5b: 0b:de:91:1f:58:9a:85:6a:18:76:e7:09:dd:61:70:a3:0b:d8: 0a:fc:38:34:b3:cf:b1:2e:30:91:c5:a3:0a:cc:9b:76:96:dc: 27:f9:cf:11:ed:77:e0:5d:d1:96:99:8d:26:7d:70:9f:2c:a3: 7d:e1:52:32 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt5D/uyA0ellSosO9kxhJExMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNWZmM2RlMTBhMzFiYmY1NzAxYzBiZGIyNmM2NTA4MDE3 ZGEyY2EwHhcNMjYwMTAxMTAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTFiYzcwYjdlNjZjMTAyOTA0ODczNTJkNDlkOTQ3MzEyMGU1ZTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zgylaL1mJwAxFnVHi/RlAV+eDNI cOJ7IDpV7A2yo3Y6z5mjR9PjlA89Ufz4wJFTMxRAIanOJ+fiHJ1HPKDGNwrsqLbj 3RuM6F5fDeTBimGlqiGpn7Qxq6RnLFxSSAOrpd2R7Tu7iJCvPQb2WFEsteFKcgzK y/k1LParKFV2g0jRZXpoiA0CtpItTUu9/5jDv5p8a1hLNpiAeAvAqveQ/HFWhx3f 5NBLiAxWS0mLZadyl+tZZuSrwc1/Gjse1M309eQIBqRSGHB+7m2JdjUk05FWQU5F /+oKjEjmNLsy5ZtdGatXFHiWp0dAC1yfi4LRbj8nXfbP2zNswMZtIhDmRwIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFAEbxwt+ZsECkEhzUtSdlHMSDl4ZMB8GA1UdIwQY MBaAFJ9f894Qoxu/VwHAvbJsZQgBfaLKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjFfejNoQ2pHNzlYQWNDOXNteGxDQUY5b3NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi80Y2FlMTAtMzdhNS00MGVmLTg5ZDUt NTcwMWQwMWMxZTg3LzEvQVJ2SEMzNW13UUtRU0hOUzFKMlVjeElPWGhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi80Y2FlMTAtMzdhNS00MGVmLTg5ZDUtNTcwMWQwMWMxZTg3 LzEvbjFfejNoQ2pHNzlYQWNDOXNteGxDQUY5b3NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUMAwDBAWwbGAD BAKwbHgDBALBXRAwDwQCAAIwCQMHACABBngEaDANBgkqhkiG9w0BAQsFAAOCAQEA WbnhaNieXhRd71+fFLBmdT+PalLX+Nixxl7YeS+AQlvK0A1qqmCSlCA79gpeC+bo flZn28ImrGcQdLEGJiJVopR5bKYqM9Oc3xZ62GI+wtfUV1jWNcqe5D7Uv6JK36iI 46kFHL3zHU/mFeTsGD/CZPxsZmLfAkhIcoXfFI2kVZcDT6I/b3kKdNBN1gH6r+lq 3NNb7la1xdx+5a4mQQVJuoUfJPPXcjv53enX8ZUWJoS8lYSmXzsoLS3+CKWxXztV mDmd1vNbC96RH1iahWoYducJ3WFwowvYCvw4NLPPsS4wkcWjCsybdpbcJ/nPEe13 4F3RlpmNJn1wnyyjfeFSMg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:36 2026 by rpki-client