This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/0HsNFbCt7xZFbqyj4qagZ4GN8Fc.roa File: 0HsNFbCt7xZFbqyj4qagZ4GN8Fc.roa (raw, json) Hash identifier: D7nFDm9EOZl0pfPr5lH68t3xze3XAzaunrVKUeY1iY0= Subject key identifier: D0:7B:0D:15:B0:AD:EF:16:45:6E:AC:A3:E2:A6:A0:67:81:8D:F0:57 Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Certificate serial: 019C37FFBD7A4E65B8222DF6684B8C151834 Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/0HsNFbCt7xZFbqyj4qagZ4GN8Fc.roa Signing time: Sat 07 Feb 2026 12:07:12 +0000 ROA not before: Sat 07 Feb 2026 12:07:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50261 IP address blocks: 37.220.128.0/20 maxlen: 20 77.111.112.0/22 maxlen: 22 77.111.124.0/22 maxlen: 22 77.111.124.0/24 maxlen: 24 77.111.127.0/24 maxlen: 24 80.64.64.0/21 maxlen: 21 80.64.72.0/21 maxlen: 21 109.74.48.0/20 maxlen: 20 194.152.131.0/24 maxlen: 24 194.152.134.0/24 maxlen: 24 194.152.135.0/24 maxlen: 24 194.152.149.0/24 maxlen: 24 194.152.152.0/24 maxlen: 24 2a02:d400::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:37:ff:bd:7a:4e:65:b8:22:2d:f6:68:4b:8c:15:18:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Validity Not Before: Feb 7 12:07:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d07b0d15b0adef16456eaca3e2a6a067818df057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8d:f6:23:f5:fd:06:5a:39:6d:54:b6:ec:8b: a3:6a:2b:8a:9e:1b:ec:af:aa:93:81:03:79:14:0e: 70:9c:a1:e2:e1:a0:ef:cc:51:ea:f1:a0:ca:ba:cc: 38:88:b8:9c:0d:b8:9d:e6:72:0d:f0:2a:56:64:46: 37:df:0b:27:70:68:87:84:2a:7d:ac:fe:59:75:37: f0:d2:3e:66:00:cd:80:f2:a1:d7:17:dd:55:16:1c: b8:a1:e2:c0:dc:e0:9e:4e:42:82:2e:94:58:60:c5: 3b:34:17:e7:fa:09:25:69:0c:dd:40:fa:65:94:12: a8:94:ac:de:ea:68:aa:1f:ad:23:aa:8d:dd:b9:92: 9c:1d:f1:13:06:ea:fd:c3:02:4b:ac:e5:49:58:17: f6:93:de:53:83:93:5e:62:58:65:2b:49:ec:05:35: f1:78:d7:c7:59:a2:97:93:57:21:e6:e0:ed:f5:90: 3b:dd:76:e0:d5:6d:d7:0b:d1:15:a6:5f:b0:26:5e: e7:b2:e2:b5:ec:ff:18:b6:b1:28:f5:24:dd:21:b7: 9e:fb:3f:b6:16:42:ea:3e:41:3e:00:9b:f0:b1:5e: ff:9e:f4:2d:69:24:05:bc:82:99:19:3a:ec:13:ea: 32:da:df:2c:b8:63:72:d8:83:02:1c:1a:30:cc:1a: 60:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7B:0D:15:B0:AD:EF:16:45:6E:AC:A3:E2:A6:A0:67:81:8D:F0:57 X509v3 Authority Key Identifier: keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/0HsNFbCt7xZFbqyj4qagZ4GN8Fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.220.128.0/20 77.111.112.0/22 77.111.124.0/22 80.64.64.0/20 109.74.48.0/20 194.152.131.0/24 194.152.134.0/23 194.152.149.0/24 194.152.152.0/24 IPv6: 2a02:d400::/29 Signature Algorithm: sha256WithRSAEncryption 60:e8:8d:37:d5:85:8c:15:e2:6c:c1:39:13:a6:6b:b0:17:de: 85:30:cd:ed:48:49:88:f9:92:ef:e7:10:5f:92:4e:ab:fe:9f: 42:81:69:a6:e5:e2:16:74:9c:21:40:5b:e9:50:56:d9:55:36: 69:27:22:45:76:b5:54:a9:e9:64:cc:ee:c9:72:c5:c4:76:62: 41:4c:ac:b2:81:32:49:56:4e:ca:8b:1a:06:48:e3:df:81:cd: 10:2a:a6:d0:a1:00:5c:bf:bd:2f:d3:c8:bf:48:6b:3f:5c:17: e9:ff:06:65:61:74:4e:25:1e:e2:51:b4:e8:25:2a:ff:f9:93: be:b5:9f:96:83:b7:87:c6:cd:8f:f4:25:77:ba:34:ae:c6:16: 87:57:c5:e0:1d:d6:db:d5:d6:93:ad:65:06:e1:52:ec:6b:6c: f9:80:12:59:85:d4:2a:80:58:52:66:d0:e9:61:0a:10:2d:80: 71:3b:36:48:02:b0:92:4c:9a:16:0e:40:d9:f0:d0:9e:f0:b7: f6:8b:da:bb:43:b8:a8:ab:31:13:26:1e:9e:27:11:02:33:7e: e8:ab:5a:27:17:0a:17:70:f3:0a:d8:a1:53:d2:69:ab:43:64: c8:bd:eb:c1:57:d3:2c:cf:99:cf:ed:9a:49:7f:34:6b:c2:9f: 6d:6b:7e:c0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZw3/716TmW4Ii32aEuMFRg0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw YzZmYzMwHhcNMjYwMjA3MTIwNzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDdiMGQxNWIwYWRlZjE2NDU2ZWFjYTNlMmE2YTA2NzgxOGRmMDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY32I/X9Blo5bVS27IujaiuKnhvs r6qTgQN5FA5wnKHi4aDvzFHq8aDKusw4iLicDbid5nIN8CpWZEY33wsncGiHhCp9 rP5ZdTfw0j5mAM2A8qHXF91VFhy4oeLA3OCeTkKCLpRYYMU7NBfn+gklaQzdQPpl lBKolKze6miqH60jqo3duZKcHfETBur9wwJLrOVJWBf2k95Tg5NeYlhlK0nsBTXx eNfHWaKXk1ch5uDt9ZA73Xbg1W3XC9EVpl+wJl7nsuK17P8YtrEo9STdIbee+z+2 FkLqPkE+AJvwsV7/nvQtaSQFvIKZGTrsE+oy2t8suGNy2IMCHBowzBpgGQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFNB7DRWwre8WRW6so+KmoGeBjfBXMB8GA1UdIwQY MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt ZjFjMzNhYTJmZDUwLzEvMEhzTkZiQ3Q3eFpGYnF5ajRxYWdaNEdOOEZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQEJdyAAwQC TW9wAwQCTW98AwQEUEBAAwQEbUowAwQAwpiDAwQBwpiGAwQAwpiVAwQAwpiYMA0E AgACMAcDBQMqAtQAMA0GCSqGSIb3DQEBCwUAA4IBAQBg6I031YWMFeJswTkTpmuw F96FMM3tSEmI+ZLv5xBfkk6r/p9CgWmm5eIWdJwhQFvpUFbZVTZpJyJFdrVUqelk zO7JcsXEdmJBTKyygTJJVk7KixoGSOPfgc0QKqbQoQBcv70v08i/SGs/XBfp/wZl YXROJR7iUbToJSr/+ZO+tZ+Wg7eHxs2P9CV3ujSuxhaHV8XgHdbb1daTrWUG4VLs a2z5gBJZhdQqgFhSZtDpYQoQLYBxOzZIArCSTJoWDkDZ8NCe8Lf2i9q7Q7ioqzET Jh6eJxECM37oq1onFwoXcPMK2KFT0mmrQ2TIvevBV9Msz5nP7ZpJfzRrwp9ta37A -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:48 2026 by rpki-client