This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/dAe3HPTGugiWeZyg7mjQe7JB42Q.roa File: dAe3HPTGugiWeZyg7mjQe7JB42Q.roa (raw, json) Hash identifier: 5l0sP1hOQxhlGzCJfn6QQfk0vrbk6qBCDCkNS+AsWRo= Subject key identifier: 74:07:B7:1C:F4:C6:BA:08:96:79:9C:A0:EE:68:D0:7B:B2:41:E3:64 Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5 Certificate serial: 019B791119F7D3C6E15C91381052E06BF0F9 Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/dAe3HPTGugiWeZyg7mjQe7JB42Q.roa Signing time: Thu 01 Jan 2026 10:18:42 +0000 ROA not before: Thu 01 Jan 2026 10:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210976 IP address blocks: 78.40.216.0/24 maxlen: 24 85.193.92.0/24 maxlen: 24 85.193.93.0/24 maxlen: 24 85.193.95.0/24 maxlen: 24 87.249.50.0/24 maxlen: 24 89.191.228.0/24 maxlen: 24 90.156.228.0/24 maxlen: 24 90.156.231.0/24 maxlen: 24 94.228.122.0/24 maxlen: 24 176.57.212.0/24 maxlen: 24 176.57.221.0/24 maxlen: 24 185.104.112.0/24 maxlen: 24 185.104.115.0/24 maxlen: 24 185.247.18.0/24 maxlen: 24 185.247.19.0/24 maxlen: 24 188.225.14.0/24 maxlen: 24 194.35.116.0/24 maxlen: 24 194.35.117.0/24 maxlen: 24 194.35.118.0/24 maxlen: 24 194.35.119.0/24 maxlen: 24 217.25.91.0/24 maxlen: 24 217.25.95.0/24 maxlen: 24 217.151.229.0/24 maxlen: 24 217.151.231.0/24 maxlen: 24 2a03:6f02::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:19:f7:d3:c6:e1:5c:91:38:10:52:e0:6b:f0:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5 Validity Not Before: Jan 1 10:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7407b71cf4c6ba0896799ca0ee68d07bb241e364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5c:e2:e7:8d:d3:15:5c:67:37:5c:22:17:04: 0d:7f:c9:8f:c1:0b:06:69:d6:48:9e:b8:3e:f4:e2: 11:2c:0f:52:75:dc:d1:00:64:70:ff:73:24:61:1d: 27:99:a7:db:0b:cb:67:79:57:d3:58:ed:4a:94:b9: aa:16:dc:09:6b:b0:27:b2:ef:8e:bc:b1:b3:37:cc: cf:d5:44:d7:c6:a1:d3:e7:1a:0f:be:c3:04:b6:ef: 7b:1c:dd:e6:9c:44:d3:c8:92:67:e8:87:f1:c6:bd: af:55:10:5a:fa:0a:05:28:6e:b7:4e:c7:77:a0:fe: cc:ee:85:d7:07:10:b1:c8:e8:b0:08:13:d2:5e:d2: e8:9d:13:95:30:42:bc:12:db:41:0a:f2:c4:db:36: 72:97:e6:8d:6c:fa:23:9c:6d:98:0b:86:92:60:01: 5a:9d:9a:1e:fe:30:d6:11:b7:1a:09:6f:ff:1f:e5: 83:9e:b7:0d:b6:aa:d7:d9:f6:2b:b5:b7:84:23:7e: 06:6e:67:e0:8f:8f:d0:de:f4:51:ef:1c:98:01:29: bb:56:db:78:b9:16:60:78:a6:48:42:39:7a:bd:0f: f8:c2:0f:f7:bf:bb:9e:9d:72:13:b4:3e:25:8f:cd: e5:1e:70:7e:2c:f7:c8:56:06:d0:fa:72:c3:d1:67: a6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:07:B7:1C:F4:C6:BA:08:96:79:9C:A0:EE:68:D0:7B:B2:41:E3:64 X509v3 Authority Key Identifier: keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/dAe3HPTGugiWeZyg7mjQe7JB42Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.40.216.0/24 85.193.92.0/23 85.193.95.0/24 87.249.50.0/24 89.191.228.0/24 90.156.228.0/24 90.156.231.0/24 94.228.122.0/24 176.57.212.0/24 176.57.221.0/24 185.104.112.0/24 185.104.115.0/24 185.247.18.0/23 188.225.14.0/24 194.35.116.0/22 217.25.91.0/24 217.25.95.0/24 217.151.229.0/24 217.151.231.0/24 IPv6: 2a03:6f02::/64 Signature Algorithm: sha256WithRSAEncryption 5f:bd:40:e9:08:94:11:4c:be:38:48:58:c6:dd:b9:0b:19:c2: ab:4e:f5:74:fe:c5:81:d2:0c:f1:e6:07:f2:f9:3c:e6:1f:8b: 22:93:c1:61:16:9b:54:21:7b:77:46:10:01:4e:05:fc:bf:95: f8:de:29:2c:11:36:ca:31:fa:b0:06:6a:37:97:f7:58:42:cc: ea:68:9d:40:19:44:f8:e1:1f:aa:55:e6:b8:69:50:d8:a0:ad: f6:70:c0:c7:60:91:a3:c8:5d:a6:1b:43:cf:f7:b6:e2:ea:48: 21:c6:78:dd:6c:c4:3a:27:2c:0a:47:88:3f:2b:fc:1a:f7:fd: 4e:0c:d3:87:0a:f9:ae:e3:6e:86:dc:8d:45:aa:9b:77:4a:94: 96:32:06:20:2e:e4:dc:74:b7:5b:dc:f9:f7:c5:06:7f:21:82: df:05:70:2c:0f:48:13:47:8c:25:f8:d1:d1:1f:cd:eb:33:2b: ef:c2:3a:d5:5f:52:88:b2:aa:75:76:fe:5a:d5:81:24:03:e7: e4:24:73:7c:1f:1a:2e:80:08:74:5d:7b:eb:77:c2:32:27:43: 97:4a:13:04:17:9c:16:5c:85:d0:b8:16:ce:36:62:a7:d4:9e: 4e:d4:1f:1a:b5:62:69:4b:5b:c8:7c:35:d4:b5:bd:9d:bc:b4: af:8d:77:5b -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgISAZt5ERn308bhXJE4EFLga/D5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNjBiMmIxYzgyOWQ4ODkzNmIxYWRhZWVjOTdmZGQxYjQw ZDQxZTUwHhcNMjYwMTAxMTAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDA3YjcxY2Y0YzZiYTA4OTY3OTljYTBlZTY4ZDA3YmIyNDFlMzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFzi543TFVxnN1wiFwQNf8mPwQsG adZInrg+9OIRLA9SddzRAGRw/3MkYR0nmafbC8tneVfTWO1KlLmqFtwJa7Ansu+O vLGzN8zP1UTXxqHT5xoPvsMEtu97HN3mnETTyJJn6Ifxxr2vVRBa+goFKG63Tsd3 oP7M7oXXBxCxyOiwCBPSXtLonROVMEK8EttBCvLE2zZyl+aNbPojnG2YC4aSYAFa nZoe/jDWEbcaCW//H+WDnrcNtqrX2fYrtbeEI34Gbmfgj4/Q3vRR7xyYASm7Vtt4 uRZgeKZIQjl6vQ/4wg/3v7uenXITtD4lj83lHnB+LPfIVgbQ+nLD0WemBQIDAQAB o4ICizCCAocwHQYDVR0OBBYEFHQHtxz0xroIlnmcoO5o0HuyQeNkMB8GA1UdIwQY MBaAFCFgsrHIKdiJNrGtruyX/dG0DUHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVdDeXNjZ3AySWsyc2EydTdKZjkwYlFOUWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kYjFlMjAtZGMzNi00ODhkLTkxYTEt M2RmN2ZhZjM1MzVkLzEvZEFlM0hQVEd1Z2lXZVp5ZzdtalFlN0pCNDJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9kYjFlMjAtZGMzNi00ODhkLTkxYTEtM2RmN2ZhZjM1MzVk LzEvSVdDeXNjZ3AySWsyc2EydTdKZjkwYlFOUWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGgBggrBgEFBQcBBwEB/wSBkDCBjTB4BAIAATByAwQATijY AwQBVcFcAwQAVcFfAwQAV/kyAwQAWb/kAwQAWpzkAwQAWpznAwQAXuR6AwQAsDnU AwQAsDndAwQAuWhwAwQAuWhzAwQBufcSAwQAvOEOAwQCwiN0AwQA2RlbAwQA2Rlf AwQA2ZflAwQA2ZfnMBEEAgACMAsDCQAqA28CAAAAADANBgkqhkiG9w0BAQsFAAOC AQEAX71A6QiUEUy+OEhYxt25CxnCq071dP7FgdIM8eYH8vk85h+LIpPBYRabVCF7 d0YQAU4F/L+V+N4pLBE2yjH6sAZqN5f3WELM6midQBlE+OEfqlXmuGlQ2KCt9nDA x2CRo8hdphtDz/e24upIIcZ43WzEOicsCkeIPyv8Gvf9TgzThwr5ruNuhtyNRaqb d0qUljIGIC7k3HS3W9z598UGfyGC3wVwLA9IE0eMJfjR0R/N6zMr78I61V9SiLKq dXb+WtWBJAPn5CRzfB8aLoAIdF1763fCMidDl0oTBBecFlyF0LgWzjZip9SeTtQf GrViaUtbyHw11LW9nby0r413Ww== -----END CERTIFICATE-----Generated at Wed Jan 21 11:13:57 2026 by rpki-client