This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/sIMXhU48nRnJhtkFS0ovznJIg5Q.roa File: sIMXhU48nRnJhtkFS0ovznJIg5Q.roa (raw, json) Hash identifier: BCAw434iZ2D2AbMltSpB4NTSwE7tv654mLk+khObkaw= Subject key identifier: B0:83:17:85:4E:3C:9D:19:C9:86:D9:05:4B:4A:2F:CE:72:48:83:94 Certificate issuer: /CN=79646b38c3d87d33145b634b4e1dcc2145f6416c Certificate serial: 019B7D5AE3D70B09BA48117B302A5ABD6C5D Authority key identifier: 79:64:6B:38:C3:D8:7D:33:14:5B:63:4B:4E:1D:CC:21:45:F6:41:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWRrOMPYfTMUW2NLTh3MIUX2QWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/sIMXhU48nRnJhtkFS0ovznJIg5Q.roa Signing time: Fri 02 Jan 2026 06:17:47 +0000 ROA not before: Fri 02 Jan 2026 06:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48424 IP address blocks: 77.32.240.0/24 maxlen: 24 77.32.242.0/24 maxlen: 24 77.32.244.0/24 maxlen: 24 77.32.245.0/24 maxlen: 24 77.32.246.0/24 maxlen: 24 91.210.240.0/24 maxlen: 24 91.210.241.0/24 maxlen: 24 91.210.242.0/24 maxlen: 24 91.210.243.0/24 maxlen: 24 95.182.25.0/24 maxlen: 24 95.182.27.0/24 maxlen: 24 95.182.28.0/24 maxlen: 24 95.182.29.0/24 maxlen: 24 95.182.31.0/24 maxlen: 24 185.48.176.0/24 maxlen: 24 185.48.177.0/24 maxlen: 24 185.48.178.0/24 maxlen: 24 185.48.179.0/24 maxlen: 24 188.95.24.0/24 maxlen: 24 188.95.25.0/24 maxlen: 24 188.95.26.0/24 maxlen: 24 188.95.27.0/24 maxlen: 24 188.95.28.0/24 maxlen: 24 188.95.29.0/24 maxlen: 24 188.95.30.0/24 maxlen: 24 188.95.31.0/24 maxlen: 24 188.164.240.0/24 maxlen: 24 188.164.241.0/24 maxlen: 24 188.164.242.0/24 maxlen: 24 188.164.243.0/24 maxlen: 24 188.164.244.0/24 maxlen: 24 188.164.245.0/24 maxlen: 24 188.164.246.0/24 maxlen: 24 188.164.247.0/24 maxlen: 24 2a02:5ac0::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft rsync://rpki.ripe.net/repository/DEFAULT/eWRrOMPYfTMUW2NLTh3MIUX2QWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:e3:d7:0b:09:ba:48:11:7b:30:2a:5a:bd:6c:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79646b38c3d87d33145b634b4e1dcc2145f6416c Validity Not Before: Jan 2 06:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b08317854e3c9d19c986d9054b4a2fce72488394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:36:33:db:95:46:73:16:22:2d:cc:8c:b1:77: 7a:83:b7:07:96:8e:47:6d:6b:6a:96:84:ca:93:43: 93:2e:9a:0f:de:92:8f:6c:a3:9d:18:71:fc:7c:ec: b0:4d:1d:9c:9c:cf:a4:fb:28:26:ed:a1:ce:7f:33: 80:9d:08:ce:2a:0e:4d:e5:c6:86:b3:4a:d7:2a:5f: c3:d1:d4:69:6e:2a:96:66:e0:67:9c:b6:e3:a0:f6: 0d:aa:b7:ce:40:c6:85:c4:5d:41:c9:7b:ac:87:5f: cc:aa:0a:d8:dd:79:dd:96:df:90:47:99:68:d4:e9: 0c:ba:4e:af:3f:c3:97:8e:c2:58:dc:3d:ee:52:40: 24:5c:7b:3b:6e:4a:61:20:c8:c2:e5:d7:3a:66:df: 5b:fb:aa:91:a4:c4:77:a7:8e:d4:cc:1d:ab:d9:8f: 4a:d2:b7:c6:ea:46:e9:71:85:ba:22:91:27:54:e5: 19:d3:58:0e:f5:c2:b8:06:d6:b5:6f:ea:b4:51:a2: e2:1c:d1:c6:12:72:09:3f:fe:50:17:e6:c6:aa:53: 90:3c:80:0b:00:bb:9d:4f:cb:2f:62:73:f1:3a:05: a4:d3:2d:c9:82:84:a2:6c:83:c3:9f:8f:6d:4f:68: 51:34:41:c3:a5:33:6f:49:bf:ad:34:2c:90:55:04: bc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:83:17:85:4E:3C:9D:19:C9:86:D9:05:4B:4A:2F:CE:72:48:83:94 X509v3 Authority Key Identifier: keyid:79:64:6B:38:C3:D8:7D:33:14:5B:63:4B:4E:1D:CC:21:45:F6:41:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWRrOMPYfTMUW2NLTh3MIUX2QWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/sIMXhU48nRnJhtkFS0ovznJIg5Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.32.240.0/24 77.32.242.0/24 77.32.244.0-77.32.246.255 91.210.240.0/22 95.182.25.0/24 95.182.27.0-95.182.29.255 95.182.31.0/24 185.48.176.0/22 188.95.24.0/21 188.164.240.0/21 IPv6: 2a02:5ac0::/33 Signature Algorithm: sha256WithRSAEncryption 2c:74:a5:64:f7:d1:ff:3a:c3:2b:10:a3:8e:30:70:2c:fc:99: c2:75:c3:da:ba:92:d1:65:6e:94:5e:db:94:0c:63:02:1e:5b: 8d:c4:e6:5e:1b:c0:3e:6b:40:34:1c:4f:a9:56:23:7b:55:4b: 56:8e:4d:4a:e4:79:0c:3d:5e:76:ae:b0:91:cf:4a:5f:3e:f9: 3e:2d:aa:5b:a2:da:4c:9d:27:60:f0:3a:82:e2:af:03:77:c0: 5e:07:75:2f:8c:aa:d6:65:e3:50:51:9a:3c:97:0c:c2:4d:e0: 12:0e:fc:e1:cb:1e:74:a3:4e:65:bd:72:cf:1b:f1:3a:ec:72: aa:11:8c:8a:44:89:e5:4f:81:61:a2:26:df:82:ed:2c:5d:4c: 62:3c:7d:1e:dc:e5:16:1c:6b:e8:47:fe:55:72:d7:3b:b7:f2: bc:d0:32:86:22:34:d7:39:ff:e5:a4:9c:27:6e:09:da:9a:30: 7e:ea:de:cf:a7:2f:82:d6:3c:ed:9b:59:77:d9:43:09:91:90: 0a:90:21:69:e5:f4:72:13:a4:cc:35:7c:db:1b:81:88:4a:49: f2:17:e8:3d:d8:aa:fe:c4:c9:34:07:5c:89:62:2f:57:b7:01: 9d:60:76:60:bc:44:ee:5e:e8:67:61:64:6a:61:5d:53:cd:54: 0b:0a:2b:99 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgISAZt9WuPXCwm6SBF7MCpavWxdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NjQ2YjM4YzNkODdkMzMxNDViNjM0YjRlMWRjYzIxNDVm NjQxNmMwHhcNMjYwMTAyMDYxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDgzMTc4NTRlM2M5ZDE5Yzk4NmQ5MDU0YjRhMmZjZTcyNDg4Mzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TYz25VGcxYiLcyMsXd6g7cHlo5H bWtqloTKk0OTLpoP3pKPbKOdGHH8fOywTR2cnM+k+ygm7aHOfzOAnQjOKg5N5caG s0rXKl/D0dRpbiqWZuBnnLbjoPYNqrfOQMaFxF1ByXush1/MqgrY3Xndlt+QR5lo 1OkMuk6vP8OXjsJY3D3uUkAkXHs7bkphIMjC5dc6Zt9b+6qRpMR3p47UzB2r2Y9K 0rfG6kbpcYW6IpEnVOUZ01gO9cK4Bta1b+q0UaLiHNHGEnIJP/5QF+bGqlOQPIAL ALudT8svYnPxOgWk0y3JgoSibIPDn49tT2hRNEHDpTNvSb+tNCyQVQS8xQIDAQAB o4ICXzCCAlswHQYDVR0OBBYEFLCDF4VOPJ0ZyYbZBUtKL85ySIOUMB8GA1UdIwQY MBaAFHlkazjD2H0zFFtjS04dzCFF9kFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVdSck9NUFlmVE1VVzJOTFRoM01JVVgyUVd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iMzc4ZTAtY2Y5OS00MWIxLWEzOGEt ZTEzNmM5ODliZTMzLzEvc0lNWGhVNDhuUm5KaHRrRlMwb3Z6bkpJZzVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9iMzc4ZTAtY2Y5OS00MWIxLWEzOGEtZTEzNmM5ODliZTMz LzEvZVdSck9NUFlmVE1VVzJOTFRoM01JVVgyUVd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBSBAIAATBMAwQATSDwAwQA TSDyMAwDBAJNIPQDBABNIPYDBAJb0vADBABfthkwDAMEAF+2GwMEAV+2HAMEAF+2 HwMEArkwsAMEA7xfGAMEA7yk8DAOBAIAAjAIAwYHKgJawAAwDQYJKoZIhvcNAQEL BQADggEBACx0pWT30f86wysQo44wcCz8mcJ1w9q6ktFlbpRe25QMYwIeW43E5l4b wD5rQDQcT6lWI3tVS1aOTUrkeQw9XnausJHPSl8++T4tqlui2kydJ2DwOoLirwN3 wF4HdS+MqtZl41BRmjyXDMJN4BIO/OHLHnSjTmW9cs8b8TrscqoRjIpEieVPgWGi Jt+C7SxdTGI8fR7c5RYca+hH/lVy1zu38rzQMoYiNNc5/+WknCduCdqaMH7q3s+n L4LWPO2bWXfZQwmRkAqQIWnl9HITpMw1fNsbgYhKSfIX6D3Yqv7EyTQHXIliL1e3 AZ1gdmC8RO5e6GdhZGphXVPNVAsKK5k= -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:20 2026 by rpki-client