This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/pI-v5uJ1SgQhhfO7bCx9EJHVnoY.roa File: pI-v5uJ1SgQhhfO7bCx9EJHVnoY.roa (raw, json) Hash identifier: QNyQpokvQqLnIzlnj95bhIcxCT1zZNKDcQ4ODnYC8DE= Subject key identifier: A4:8F:AF:E6:E2:75:4A:04:21:85:F3:BB:6C:2C:7D:10:91:D5:9E:86 Certificate issuer: /CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb Certificate serial: 019B7BA4EF20560D5CEF7AB37C5FDA1D32DD Authority key identifier: D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/pI-v5uJ1SgQhhfO7bCx9EJHVnoY.roa Signing time: Thu 01 Jan 2026 22:19:25 +0000 ROA not before: Thu 01 Jan 2026 22:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20771 IP address blocks: 37.233.128.0/17 maxlen: 17 78.139.128.0/18 maxlen: 18 80.241.184.0/24 maxlen: 24 80.241.244.0/22 maxlen: 22 80.241.252.0/24 maxlen: 24 85.117.32.0/19 maxlen: 19 85.117.32.0/20 maxlen: 20 85.117.48.0/20 maxlen: 20 88.210.192.0/18 maxlen: 18 89.232.0.0/19 maxlen: 19 89.232.2.0/24 maxlen: 24 134.90.0.0/17 maxlen: 17 176.73.0.0/16 maxlen: 16 185.19.96.0/22 maxlen: 22 185.19.96.0/23 maxlen: 23 185.19.98.0/23 maxlen: 23 212.72.130.0/24 maxlen: 24 2a02:23f0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 10:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ef:20:56:0d:5c:ef:7a:b3:7c:5f:da:1d:32:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb Validity Not Before: Jan 1 22:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a48fafe6e2754a042185f3bb6c2c7d1091d59e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9a:55:d7:3b:16:07:08:9c:eb:3d:46:b6:34: 70:00:18:48:d2:5e:78:3c:0e:cc:09:87:65:8e:8e: 08:a0:a5:be:be:38:b4:87:b8:99:4e:1f:48:0f:ce: e9:82:78:9b:39:fc:ff:02:05:1b:93:8a:c9:a3:e7: 35:18:f5:d1:5b:5e:5c:bd:51:39:9b:18:ff:c6:86: 92:ab:05:0d:23:29:2e:48:fd:92:28:ce:e5:f2:3f: fa:07:11:ce:ef:6b:d6:27:9d:f5:be:ce:2c:f1:22: 92:73:57:f7:29:65:95:4a:42:f0:3f:ce:63:39:2f: 9a:59:69:78:5a:f1:60:d3:13:bc:f9:a5:e7:a8:f7: 4b:d0:4d:c4:3b:49:fb:9f:82:13:b8:57:71:f9:06: 33:b0:97:f3:35:c5:23:a2:4f:b3:c8:79:3f:28:c6: f7:08:ed:7d:56:c5:3d:77:30:aa:b2:5a:4e:04:bc: 5a:a8:0b:c3:a0:25:b1:85:00:42:18:16:6e:90:29: 60:1e:3d:47:ab:6a:12:6d:b2:f5:38:7e:7f:83:94: 51:f8:58:f0:60:45:7c:62:d3:fd:b6:7d:e2:47:5b: eb:94:2b:c1:13:03:98:59:cc:ee:a9:5d:d4:b7:b8: 82:c8:4d:87:85:83:d7:67:d0:12:20:18:5f:c2:63: 8b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8F:AF:E6:E2:75:4A:04:21:85:F3:BB:6C:2C:7D:10:91:D5:9E:86 X509v3 Authority Key Identifier: keyid:D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/pI-v5uJ1SgQhhfO7bCx9EJHVnoY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.233.128.0/17 78.139.128.0/18 80.241.184.0/24 80.241.244.0/22 80.241.252.0/24 85.117.32.0/19 88.210.192.0/18 89.232.0.0/19 134.90.0.0/17 176.73.0.0/16 185.19.96.0/22 212.72.130.0/24 IPv6: 2a02:23f0::/32 Signature Algorithm: sha256WithRSAEncryption 76:4b:56:9e:74:56:fc:dc:d9:1f:13:2d:51:a4:25:42:30:b5: 3c:22:7f:c1:8b:d5:20:1f:c4:19:96:be:a5:01:ca:16:ab:81: 2b:a9:a2:2d:cb:30:0e:44:5c:cb:64:0d:57:bd:8c:b2:94:7c: 39:27:a2:0c:70:41:bb:83:de:81:22:68:29:73:3f:38:e0:be: f7:70:09:6a:db:c1:13:1d:06:74:62:b4:d7:11:71:2e:09:67: 92:79:5e:0b:8e:48:08:d2:36:66:d0:6c:c2:da:92:fd:c8:52: 5c:c6:09:f2:bf:5a:6b:c0:9c:85:7d:19:56:c0:ad:1e:65:34: 16:e0:65:a4:89:e0:4f:c5:76:4b:da:ab:3e:04:f5:f3:e6:07: 4b:42:a4:d0:e3:b5:1d:e6:4d:ce:d4:d8:ea:64:fb:81:d5:c0: 64:c6:02:31:93:cb:31:e9:65:d2:cc:2f:2e:67:60:67:8e:5b: 70:99:d7:56:14:ac:1f:44:19:12:93:a8:74:56:1a:78:b6:ba: 18:4c:9e:05:f3:53:ce:c5:82:fc:73:2d:4d:b9:96:99:ec:45: 89:0d:a5:0f:01:d5:98:4c:59:55:3b:d5:b6:49:cc:54:c3:03: c1:5c:a2:2b:62:35:39:0f:4c:e3:54:cd:e4:1e:2d:b2:d3:5c: 2e:99:cd:68 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgISAZt7pO8gVg1c73qzfF/aHTLdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NjczOGE4ZGFkYWMyZDBkM2FlZGRiOTM0ZjgyMDA2NmI5 ZjVmZWIwHhcNMjYwMTAxMjIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDhmYWZlNmUyNzU0YTA0MjE4NWYzYmI2YzJjN2QxMDkxZDU5ZTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJpV1zsWBwic6z1GtjRwABhI0l54 PA7MCYdljo4IoKW+vji0h7iZTh9ID87pgnibOfz/AgUbk4rJo+c1GPXRW15cvVE5 mxj/xoaSqwUNIykuSP2SKM7l8j/6BxHO72vWJ531vs4s8SKSc1f3KWWVSkLwP85j OS+aWWl4WvFg0xO8+aXnqPdL0E3EO0n7n4ITuFdx+QYzsJfzNcUjok+zyHk/KMb3 CO19VsU9dzCqslpOBLxaqAvDoCWxhQBCGBZukClgHj1Hq2oSbbL1OH5/g5RR+Fjw YEV8YtP9tn3iR1vrlCvBEwOYWczuqV3Ut7iCyE2HhYPXZ9ASIBhfwmOLGwIDAQAB o4ICWTCCAlUwHQYDVR0OBBYEFKSPr+bidUoEIYXzu2wsfRCR1Z6GMB8GA1UdIwQY MBaAFNZnOKja2sLQ067duTT4IAZrn1/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW1jNHFOcmF3dERUcnQyNU5QZ2dCbXVmWC1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jNTc3MjctOTM5Ni00YmY4LWIyNWQt NmExZTBlYzcxZGE4LzEvcEktdjV1SjFTZ1FoaGZPN2JDeDlFSkhWbm9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jNTc3MjctOTM5Ni00YmY4LWIyNWQtNmExZTBlYzcxZGE4 LzEvMW1jNHFOcmF3dERUcnQyNU5QZ2dCbXVmWC1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBNBAIAATBHAwQHJemAAwQG TouAAwQAUPG4AwQCUPH0AwQAUPH8AwQFVXUgAwQGWNLAAwQFWegAAwQHhloAAwMA sEkDBAK5E2ADBADUSIIwDQQCAAIwBwMFACoCI/AwDQYJKoZIhvcNAQELBQADggEB AHZLVp50Vvzc2R8TLVGkJUIwtTwif8GL1SAfxBmWvqUByhargSupoi3LMA5EXMtk DVe9jLKUfDknogxwQbuD3oEiaClzPzjgvvdwCWrbwRMdBnRitNcRcS4JZ5J5XguO SAjSNmbQbMLakv3IUlzGCfK/WmvAnIV9GVbArR5lNBbgZaSJ4E/Fdkvaqz4E9fPm B0tCpNDjtR3mTc7U2Opk+4HVwGTGAjGTyzHpZdLMLy5nYGeOW3CZ11YUrB9EGRKT qHRWGni2uhhMngXzU87FgvxzLU25lpnsRYkNpQ8B1ZhMWVU71bZJzFTDA8Fcoiti NTkPTONUzeQeLbLTXC6ZzWg= -----END CERTIFICATE-----Generated at Thu Jan 15 18:45:28 2026 by rpki-client