This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/1-33kt8TP8RMK4Q81VHiCWjfj2FA.roa File: 1-33kt8TP8RMK4Q81VHiCWjfj2FA.roa (raw, json) Hash identifier: LhYvcVjCIISc50vO0k0gnn7omuUTmjGvhFlj3brlswE= Subject key identifier: FB:7D:E4:B7:C4:CF:F1:13:0A:E1:0F:35:54:78:82:5A:37:E3:D8:50 Certificate issuer: /CN=eebe79d147882422ec275417dfd2affa93a02757 Certificate serial: 019B9CAC44C91BB9B7498612FFC81D2F73C1 Authority key identifier: EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/1-33kt8TP8RMK4Q81VHiCWjfj2FA.roa Signing time: Thu 08 Jan 2026 08:14:54 +0000 ROA not before: Thu 08 Jan 2026 08:14:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34876 IP address blocks: 95.86.128.0/24 maxlen: 24 95.86.129.0/24 maxlen: 24 95.86.130.0/24 maxlen: 24 95.86.131.0/24 maxlen: 24 95.86.132.0/24 maxlen: 24 95.86.133.0/24 maxlen: 24 95.86.134.0/24 maxlen: 24 95.86.135.0/24 maxlen: 24 95.86.137.0/24 maxlen: 24 95.86.138.0/24 maxlen: 24 95.86.139.0/24 maxlen: 24 95.86.140.0/24 maxlen: 24 95.86.141.0/24 maxlen: 24 95.86.142.0/24 maxlen: 24 95.86.143.0/24 maxlen: 24 95.86.144.0/21 maxlen: 21 95.86.152.0/24 maxlen: 24 95.86.153.0/24 maxlen: 24 95.86.154.0/24 maxlen: 24 95.86.155.0/24 maxlen: 24 95.86.156.0/24 maxlen: 24 95.86.157.0/24 maxlen: 24 95.86.158.0/24 maxlen: 24 95.86.159.0/24 maxlen: 24 95.86.160.0/24 maxlen: 24 95.86.161.0/24 maxlen: 24 95.86.162.0/24 maxlen: 24 95.86.163.0/24 maxlen: 24 95.86.172.0/24 maxlen: 24 95.86.173.0/24 maxlen: 24 95.86.174.0/24 maxlen: 24 95.86.175.0/24 maxlen: 24 95.86.176.0/24 maxlen: 24 95.86.177.0/24 maxlen: 24 95.86.178.0/24 maxlen: 24 95.86.179.0/24 maxlen: 24 95.86.180.0/24 maxlen: 24 95.86.181.0/24 maxlen: 24 95.86.182.0/24 maxlen: 24 95.86.183.0/24 maxlen: 24 95.86.184.0/22 maxlen: 22 95.86.184.0/24 maxlen: 24 95.86.185.0/24 maxlen: 24 95.86.186.0/24 maxlen: 24 95.86.187.0/24 maxlen: 24 95.86.188.0/24 maxlen: 24 95.86.189.0/24 maxlen: 24 95.86.190.0/24 maxlen: 24 95.86.191.0/24 maxlen: 24 193.8.62.0/23 maxlen: 23 193.8.62.0/24 maxlen: 24 193.8.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 15:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9c:ac:44:c9:1b:b9:b7:49:86:12:ff:c8:1d:2f:73:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebe79d147882422ec275417dfd2affa93a02757 Validity Not Before: Jan 8 08:14:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb7de4b7c4cff1130ae10f355478825a37e3d850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8e:7d:e6:d8:3c:85:d8:cd:cc:c7:7c:d5:7d: b8:15:3f:b4:04:24:40:07:b6:3a:8f:cc:4b:70:e2: 3e:9e:3d:ab:f3:84:56:07:07:c9:ac:25:5e:02:5a: 98:4f:7c:6d:69:7a:70:af:d6:9a:f9:06:45:f1:9c: 28:4e:86:51:56:2e:a8:80:46:5f:72:92:95:4d:83: 1d:14:e5:a8:56:e7:c6:91:fb:39:47:81:37:bf:95: 31:20:2d:57:4d:2e:38:97:96:f1:44:ba:86:07:ac: 6d:c5:0c:a1:c1:f0:37:95:fb:90:23:79:9c:fc:f0: 51:df:8b:c2:bf:f2:e3:73:9c:62:0e:db:3e:9f:13: 38:6c:b7:a3:3c:b0:83:6c:e6:11:f5:23:ae:21:a9: f6:7c:4b:1d:6f:38:e8:92:cc:24:5a:b9:6e:02:43: 4e:6a:3c:e6:ef:ef:9a:5a:bf:ca:db:13:cb:ec:20: 95:78:91:82:40:4d:64:76:92:77:73:ab:a2:a5:4f: dd:cd:1f:a7:8d:88:88:d8:5f:1c:57:47:c0:1b:50: 79:66:07:9c:64:9f:07:59:9f:ab:71:8e:96:ee:30: 93:8a:0a:f3:9a:a1:5b:15:e1:61:86:d6:d1:83:e6: 54:14:a6:cf:08:1b:76:18:1b:99:24:b0:b3:03:0f: 42:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:7D:E4:B7:C4:CF:F1:13:0A:E1:0F:35:54:78:82:5A:37:E3:D8:50 X509v3 Authority Key Identifier: keyid:EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/1-33kt8TP8RMK4Q81VHiCWjfj2FA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.86.128.0/21 95.86.137.0-95.86.163.255 95.86.172.0-95.86.191.255 193.8.62.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:74:10:93:e3:86:eb:2f:45:be:2e:21:13:df:80:bb:06:c2: 45:d7:b1:8f:1f:1c:b2:3b:11:4f:21:ef:62:d4:48:45:74:f7: 8c:1a:27:36:59:9d:ec:f4:d4:e0:a6:46:b7:6d:ff:e5:01:dc: 6e:ac:21:db:96:71:b3:a8:49:64:b3:96:52:ad:eb:55:fa:df: f2:bd:6a:8d:97:a6:61:23:d2:da:e8:57:75:32:de:d3:40:5a: 5b:5d:9f:d4:ac:30:b3:f3:94:61:3a:2a:91:fa:88:b0:52:64: 10:84:cc:48:8a:a1:67:1a:be:43:bb:b2:90:51:a6:94:83:d8: 83:64:58:4d:0f:ce:60:e6:52:1a:33:f4:26:65:7b:91:c3:37: ab:48:57:f6:ac:02:ad:63:01:fa:6b:50:11:85:e9:1d:54:23: 27:f5:c3:f5:01:9b:0b:2b:1f:d0:bd:0c:3f:06:19:2e:2d:a7: 95:f8:21:4f:7e:6a:27:45:87:6d:91:c2:ff:ef:e8:ce:7d:6a: cd:96:91:c9:c6:4b:fe:b4:50:4f:0f:e6:62:e1:1d:e1:2c:df: b3:f0:fb:9c:f1:be:e6:ec:bb:1f:55:5c:78:82:cb:db:10:62: 2d:13:da:78:b7:72:ba:bd:01:ac:ea:01:48:6c:a2:d9:e9:d5: 3a:f7:2b:a1 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZucrETJG7m3SYYS/8gdL3PBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmU3OWQxNDc4ODI0MjJlYzI3NTQxN2RmZDJhZmZhOTNh MDI3NTcwHhcNMjYwMTA4MDgxNDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjdkZTRiN2M0Y2ZmMTEzMGFlMTBmMzU1NDc4ODI1YTM3ZTNkODUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY595tg8hdjNzMd81X24FT+0BCRA B7Y6j8xLcOI+nj2r84RWBwfJrCVeAlqYT3xtaXpwr9aa+QZF8ZwoToZRVi6ogEZf cpKVTYMdFOWoVufGkfs5R4E3v5UxIC1XTS44l5bxRLqGB6xtxQyhwfA3lfuQI3mc /PBR34vCv/Ljc5xiDts+nxM4bLejPLCDbOYR9SOuIan2fEsdbzjokswkWrluAkNO ajzm7++aWr/K2xPL7CCVeJGCQE1kdpJ3c6uipU/dzR+njYiI2F8cV0fAG1B5Zgec ZJ8HWZ+rcY6W7jCTigrzmqFbFeFhhtbRg+ZUFKbPCBt2GBuZJLCzAw9CLwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFPt95LfEz/ETCuEPNVR4glo349hQMB8GA1UdIwQY MBaAFO6+edFHiCQi7CdUF9/Sr/qToCdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3I1NTBVZUlKQ0xzSjFRWDM5S3YtcE9nSjFjLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jNDRiN2YtNWJjZC00ZWU3LTg3MTIt Mzg4MjNjMTQ0OWFmLzEvMS0zM2t0OFRQOFJNSzRRODFWSGlDV2pmajJGQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZDkvYzQ0YjdmLTViY2QtNGVlNy04NzEyLTM4ODIzYzE0NDlh Zi8xLzdyNTUwVWVJSkNMc0oxUVgzOUt2LXBPZ0oxYy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBBBggrBgEFBQcBBwEB/wQyMDAwLgQCAAEwKAMEA19WgDAM AwQAX1aJAwQCX1agMAwDBAJfVqwDBAZfVoADBAHBCD4wDQYJKoZIhvcNAQELBQAD ggEBAJp0EJPjhusvRb4uIRPfgLsGwkXXsY8fHLI7EU8h72LUSEV094waJzZZnez0 1OCmRrdt/+UB3G6sIduWcbOoSWSzllKt61X63/K9ao2XpmEj0troV3Uy3tNAWltd n9SsMLPzlGE6KpH6iLBSZBCEzEiKoWcavkO7spBRppSD2INkWE0PzmDmUhoz9CZl e5HDN6tIV/asAq1jAfprUBGF6R1UIyf1w/UBmwsrH9C9DD8GGS4tp5X4IU9+aidF h22Rwv/v6M59as2WkcnGS/60UE8P5mLhHeEs37Pw+5zxvubsux9VXHiCy9sQYi0T 2ni3crq9AazqAUhsotnp1Tr3K6E= -----END CERTIFICATE-----Generated at Tue Feb 3 22:50:29 2026 by rpki-client