This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/3hmmFfAkaIr3Xc9gq50WV7B77zQ.roa File: 3hmmFfAkaIr3Xc9gq50WV7B77zQ.roa (raw, json) Hash identifier: TgVTzYdGFCqlHMqgg6AtuqEuLwbjRjyy8jaNrkkXEao= Subject key identifier: DE:19:A6:15:F0:24:68:8A:F7:5D:CF:60:AB:9D:16:57:B0:7B:EF:34 Certificate issuer: /CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f Certificate serial: 019B7BA532FABA00AA2BB9FF7589C1248776 Authority key identifier: F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/3hmmFfAkaIr3Xc9gq50WV7B77zQ.roa Signing time: Thu 01 Jan 2026 22:19:42 +0000 ROA not before: Thu 01 Jan 2026 22:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206262 IP address blocks: 5.206.232.0/21 maxlen: 21 5.206.232.0/24 maxlen: 24 5.206.233.0/24 maxlen: 24 5.206.234.0/24 maxlen: 24 5.206.235.0/24 maxlen: 24 5.206.236.0/24 maxlen: 24 5.206.237.0/24 maxlen: 24 5.206.238.0/24 maxlen: 24 5.206.239.0/24 maxlen: 24 37.26.64.0/21 maxlen: 21 37.26.64.0/24 maxlen: 24 37.26.65.0/24 maxlen: 24 37.26.66.0/24 maxlen: 24 37.26.67.0/24 maxlen: 24 37.26.68.0/24 maxlen: 24 37.26.69.0/24 maxlen: 24 37.26.70.0/24 maxlen: 24 37.26.71.0/24 maxlen: 24 87.238.208.0/21 maxlen: 21 87.238.208.0/24 maxlen: 24 87.238.209.0/24 maxlen: 24 87.238.210.0/24 maxlen: 24 87.238.211.0/24 maxlen: 24 87.238.212.0/24 maxlen: 24 87.238.213.0/24 maxlen: 24 87.238.214.0/24 maxlen: 24 87.238.215.0/24 maxlen: 24 95.86.40.0/22 maxlen: 22 95.86.40.0/24 maxlen: 24 95.86.41.0/24 maxlen: 24 95.86.42.0/24 maxlen: 24 95.86.43.0/24 maxlen: 24 95.86.56.0/22 maxlen: 24 95.86.56.0/24 maxlen: 24 95.86.57.0/24 maxlen: 24 95.86.58.0/24 maxlen: 24 95.86.59.0/24 maxlen: 24 147.78.160.0/22 maxlen: 22 147.78.160.0/24 maxlen: 24 147.78.161.0/24 maxlen: 24 147.78.162.0/24 maxlen: 24 147.78.163.0/24 maxlen: 24 185.171.60.0/22 maxlen: 22 185.171.60.0/24 maxlen: 24 185.171.61.0/24 maxlen: 24 185.171.62.0/24 maxlen: 24 185.171.63.0/24 maxlen: 24 185.174.208.0/22 maxlen: 22 185.174.208.0/24 maxlen: 24 185.174.209.0/24 maxlen: 24 185.174.210.0/24 maxlen: 24 185.174.211.0/24 maxlen: 24 185.179.28.0/22 maxlen: 22 185.179.28.0/24 maxlen: 24 185.179.29.0/24 maxlen: 24 185.179.30.0/24 maxlen: 24 185.179.31.0/24 maxlen: 24 185.186.80.0/22 maxlen: 22 185.186.80.0/24 maxlen: 24 185.186.81.0/24 maxlen: 24 185.186.82.0/24 maxlen: 24 185.186.83.0/24 maxlen: 24 185.191.164.0/22 maxlen: 22 185.191.164.0/24 maxlen: 24 185.191.165.0/24 maxlen: 24 185.191.166.0/24 maxlen: 24 185.191.167.0/24 maxlen: 24 2a0c:b340::/29 maxlen: 29 2a0c:b340::/32 maxlen: 32 2a0c:b340::/48 maxlen: 48 2a0c:b340:1::/48 maxlen: 48 2a0c:b341::/32 maxlen: 32 2a0c:b342::/32 maxlen: 32 2a0c:b343::/32 maxlen: 32 2a0c:b344::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:32:fa:ba:00:aa:2b:b9:ff:75:89:c1:24:87:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f Validity Not Before: Jan 1 22:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de19a615f024688af75dcf60ab9d1657b07bef34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f6:77:17:07:ba:71:aa:14:61:b4:c2:42:55: 05:1e:67:20:cb:72:a5:21:a9:0e:21:5a:21:9b:e6: d1:df:10:bd:32:28:c9:75:96:67:0e:83:33:f9:12: dd:03:6f:fd:6b:ab:1c:c3:53:29:6a:7a:28:7a:5e: 77:e2:bf:0c:41:14:98:dc:55:34:0a:c2:eb:74:a3: 1f:dc:dd:77:44:d5:9c:8f:d2:15:57:ca:55:a0:c3: 9d:68:7d:e3:19:de:3a:0f:fc:df:63:12:8f:79:e2: 3b:fd:b8:29:6b:65:b7:a8:f6:d3:7b:24:e9:6f:2f: c7:55:2d:d5:ca:10:24:1d:97:98:ab:a1:93:de:e0: 08:81:cc:5f:59:d3:91:a0:da:b6:06:8b:52:80:bb: 6a:b2:f9:00:fb:9e:3e:23:c0:20:f8:95:7c:34:81: f2:a0:a9:de:7f:78:b7:43:d4:06:02:77:88:1c:83: 49:39:86:39:77:b4:35:82:bd:c6:48:18:c5:31:09: 33:ab:ab:22:58:d3:1d:98:6c:2c:87:20:ee:bd:49: 46:f4:b8:a3:bc:41:e9:98:d6:02:0f:74:bd:2a:4b: 36:55:15:63:41:66:10:30:26:ee:bc:2e:5a:98:07: 4c:2a:bc:d7:65:d6:77:d3:90:6a:1a:fc:a1:d2:ee: d4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:19:A6:15:F0:24:68:8A:F7:5D:CF:60:AB:9D:16:57:B0:7B:EF:34 X509v3 Authority Key Identifier: keyid:F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/3hmmFfAkaIr3Xc9gq50WV7B77zQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.206.232.0/21 37.26.64.0/21 87.238.208.0/21 95.86.40.0/22 95.86.56.0/22 147.78.160.0/22 185.171.60.0/22 185.174.208.0/22 185.179.28.0/22 185.186.80.0/22 185.191.164.0/22 IPv6: 2a0c:b340::/29 Signature Algorithm: sha256WithRSAEncryption 4c:4b:72:c3:db:df:9a:37:92:cd:00:2a:be:c4:16:d9:74:5d: 32:93:64:29:aa:2e:8c:b4:c1:ec:a0:3e:bf:ea:19:e8:d3:e5: 17:0e:28:68:25:e1:f5:64:82:98:a1:b7:59:2f:43:af:e3:92: c2:ce:20:67:cd:d0:24:c0:c4:07:f8:f4:b7:b6:02:3c:da:ff: 29:60:b5:93:45:27:98:06:be:fa:c6:ac:9f:bb:be:ca:41:ac: c8:62:cd:06:60:c4:32:1c:d1:ff:26:d1:3b:17:d7:4b:ac:54: 06:10:cd:65:8d:fd:c3:cc:52:42:a6:e1:00:f1:fe:07:3c:8b: 20:87:cd:7f:35:da:ad:55:65:60:ee:09:63:8f:35:92:91:bd: 4b:b4:fc:d1:d8:97:65:c0:be:85:b3:1d:ea:6c:bf:06:77:4e: 53:99:50:25:58:2d:02:50:84:59:26:10:20:cc:0c:8f:5d:9f: 1b:17:8e:0a:8f:9f:8c:f4:03:a9:e8:96:a6:19:78:27:0d:79: 64:0a:9a:8d:e9:8f:6d:80:fd:22:d4:71:a9:92:aa:73:7c:fe: b7:87:b9:df:90:a6:81:35:40:21:f0:f9:d3:c9:34:7d:e8:00: ef:e4:87:ba:bc:1b:8d:d0:f6:c4:88:d9:e5:32:bf:e1:f1:25: 6d:5e:78:5a -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZt7pTL6ugCqK7n/dYnBJId2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZGFmMGJhMjFlOTAyMDI1OTdlZTQ3ZTA5ZjY4NzdmZTIz YzJhOWYwHhcNMjYwMTAxMjIxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTE5YTYxNWYwMjQ2ODhhZjc1ZGNmNjBhYjlkMTY1N2IwN2JlZjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/Z3Fwe6caoUYbTCQlUFHmcgy3Kl IakOIVohm+bR3xC9MijJdZZnDoMz+RLdA2/9a6scw1Mpanooel534r8MQRSY3FU0 CsLrdKMf3N13RNWcj9IVV8pVoMOdaH3jGd46D/zfYxKPeeI7/bgpa2W3qPbTeyTp by/HVS3VyhAkHZeYq6GT3uAIgcxfWdORoNq2BotSgLtqsvkA+54+I8Ag+JV8NIHy oKnef3i3Q9QGAneIHINJOYY5d7Q1gr3GSBjFMQkzq6siWNMdmGwshyDuvUlG9Lij vEHpmNYCD3S9Kks2VRVjQWYQMCbuvC5amAdMKrzXZdZ305BqGvyh0u7U9wIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFN4ZphXwJGiK913PYKudFlewe+80MB8GA1UdIwQY MBaAFPXa8Loh6QICWX7kfgn2h3/iPCqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWRyd3VpSHBBZ0paZnVSLUNmYUhmLUk4S3A4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85MDY4YTUtNzk3OS00ZjhjLWJmODIt Y2ZlMmE5NjU3YzI2LzEvM2htbUZmQWthSXIzWGM5Z3E1MFdWN0I3N3pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS85MDY4YTUtNzk3OS00ZjhjLWJmODItY2ZlMmE5NjU3YzI2 LzEvOWRyd3VpSHBBZ0paZnVSLUNmYUhmLUk4S3A4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQDBc7oAwQD JRpAAwQDV+7QAwQCX1YoAwQCX1Y4AwQCk06gAwQCuas8AwQCua7QAwQCubMcAwQC ubpQAwQCub+kMA0EAgACMAcDBQMqDLNAMA0GCSqGSIb3DQEBCwUAA4IBAQBMS3LD 29+aN5LNACq+xBbZdF0yk2Qpqi6MtMHsoD6/6hno0+UXDihoJeH1ZIKYobdZL0Ov 45LCziBnzdAkwMQH+PS3tgI82v8pYLWTRSeYBr76xqyfu77KQazIYs0GYMQyHNH/ JtE7F9dLrFQGEM1ljf3DzFJCpuEA8f4HPIsgh81/NdqtVWVg7gljjzWSkb1LtPzR 2JdlwL6Fsx3qbL8Gd05TmVAlWC0CUIRZJhAgzAyPXZ8bF44Kj5+M9AOp6JamGXgn DXlkCpqN6Y9tgP0i1HGpkqpzfP63h7nfkKaBNUAh8PnTyTR96ADv5Ie6vBuN0PbE iNnlMr/h8SVtXnha -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:30 2026 by rpki-client