This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/uLVt8T3d78JYSpR4LeS6qWguKcM.roa File: uLVt8T3d78JYSpR4LeS6qWguKcM.roa (raw, json) Hash identifier: rBNYvMK4p3Mahw6EVTteREy0VbAJzYePOU2yB1g4AWk= Subject key identifier: B8:B5:6D:F1:3D:DD:EF:C2:58:4A:94:78:2D:E4:BA:A9:68:2E:29:C3 Certificate issuer: /CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46 Certificate serial: 019B7EA7065F735709965E7E0198318D3C5A Authority key identifier: A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/uLVt8T3d78JYSpR4LeS6qWguKcM.roa Signing time: Fri 02 Jan 2026 12:20:33 +0000 ROA not before: Fri 02 Jan 2026 12:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39507 IP address blocks: 46.253.208.0/20 maxlen: 20 91.221.158.0/23 maxlen: 23 91.222.72.0/22 maxlen: 22 91.224.196.0/23 maxlen: 23 91.231.32.0/23 maxlen: 23 91.234.100.0/22 maxlen: 22 91.237.219.0/24 maxlen: 24 91.237.224.0/22 maxlen: 22 91.237.228.0/23 maxlen: 23 95.171.192.0/19 maxlen: 19 176.101.80.0/21 maxlen: 21 176.101.128.0/20 maxlen: 20 185.3.60.0/22 maxlen: 22 185.23.44.0/22 maxlen: 22 185.41.80.0/22 maxlen: 22 185.95.196.0/22 maxlen: 22 185.107.140.0/22 maxlen: 22 185.234.232.0/22 maxlen: 22 185.245.44.0/22 maxlen: 22 185.253.64.0/22 maxlen: 22 188.191.216.0/21 maxlen: 21 194.180.220.0/22 maxlen: 22 2a07:f080::/32 maxlen: 32 2a0c:3540::/32 maxlen: 32 2a0d:3100::/29 maxlen: 29 2a0d:4a80::/32 maxlen: 32 2a0d:9180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:06:5f:73:57:09:96:5e:7e:01:98:31:8d:3c:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46 Validity Not Before: Jan 2 12:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8b56df13dddefc2584a94782de4baa9682e29c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a8:df:78:f8:2a:eb:ae:63:d1:b7:79:37:0e: 2e:dc:d7:f0:19:50:2c:fc:d7:73:21:73:7c:43:66: c0:63:c6:f6:fc:bf:40:12:73:7e:8d:ba:d5:6b:a4: 5e:c5:1d:2e:c5:d2:07:a6:10:6b:7f:9d:c9:94:d1: 13:ec:a6:a7:f8:61:0b:17:a5:99:d4:96:7d:f7:6d: 8b:e6:0b:c2:60:7c:6f:eb:e5:ad:37:6b:18:f8:64: 1f:8c:00:58:73:64:9f:ef:ae:15:8f:34:50:7c:c1: 3e:be:a6:6b:10:96:53:b4:bc:69:e7:b9:5d:ec:64: 49:9f:3b:e5:2d:6d:fc:e2:ff:b9:55:a6:a6:8b:10: b4:58:c6:a6:dc:15:07:9c:40:bd:93:2e:5e:6c:64: 6c:0c:96:22:05:a0:61:f8:74:c1:99:cc:72:6b:53: f5:94:a1:00:e6:38:98:77:df:72:98:8c:b6:c4:06: f6:fc:c0:ba:31:5a:68:89:61:73:62:c3:23:2d:b9: a6:a1:30:dc:ff:64:a4:c2:2c:80:8d:07:37:cf:0d: ef:61:a9:36:58:76:9d:3c:4b:c9:88:e0:70:da:c2: 7d:ac:e9:3d:e4:90:66:6d:a4:4d:55:ab:7c:4d:fd: d5:6a:2b:c0:bd:ab:25:2d:ec:85:d6:ee:f1:8e:be: 92:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B5:6D:F1:3D:DD:EF:C2:58:4A:94:78:2D:E4:BA:A9:68:2E:29:C3 X509v3 Authority Key Identifier: keyid:A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/uLVt8T3d78JYSpR4LeS6qWguKcM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.253.208.0/20 91.221.158.0/23 91.222.72.0/22 91.224.196.0/23 91.231.32.0/23 91.234.100.0/22 91.237.219.0/24 91.237.224.0-91.237.229.255 95.171.192.0/19 176.101.80.0/21 176.101.128.0/20 185.3.60.0/22 185.23.44.0/22 185.41.80.0/22 185.95.196.0/22 185.107.140.0/22 185.234.232.0/22 185.245.44.0/22 185.253.64.0/22 188.191.216.0/21 194.180.220.0/22 IPv6: 2a07:f080::/32 2a0c:3540::/32 2a0d:3100::/29 2a0d:4a80::/32 2a0d:9180::/32 Signature Algorithm: sha256WithRSAEncryption 1c:03:7c:49:71:80:db:b1:91:1d:2b:62:6c:b7:f2:5d:a0:bc: 37:ed:ba:01:7f:45:1b:f5:f2:05:e0:43:42:13:b9:89:19:41: 80:65:bc:d1:26:32:71:d0:4f:50:68:94:bd:f1:bb:88:01:e7: 19:ac:94:d2:2c:a8:9c:61:5f:05:c0:dd:3c:9c:a6:64:25:7d: 31:b0:67:63:c6:15:e3:5c:40:ba:ad:e2:f6:b8:c8:32:bc:ab: a3:07:73:0c:8f:7d:ad:29:a3:61:47:48:d6:c5:ae:ff:b3:48: aa:b0:11:9b:69:51:18:50:cb:d6:23:ed:bb:ac:26:eb:61:a6: 55:99:7d:0e:ca:13:32:dc:d4:12:c0:62:f7:3b:22:ce:63:30: f3:c7:96:fd:d7:0c:fa:d3:70:bc:dc:1b:96:58:50:7d:7c:e9: 59:c5:c0:c2:60:d5:b3:f3:7c:be:52:7b:3c:33:aa:16:01:05: ff:18:19:d1:f7:fb:28:4b:25:2c:5f:ca:5f:7d:48:b9:a2:60: 26:8f:84:7a:2a:60:45:10:d4:e7:ff:d3:32:ea:13:1e:c4:5c: 1c:f4:9b:d7:74:5f:ba:11:3a:ff:03:44:44:5c:a7:4d:4a:8a: 05:cd:e4:01:3e:8d:3d:d8:68:81:7e:b5:47:b2:8c:eb:f3:1b: 12:7e:5e:38 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgISAZt+pwZfc1cJll5+AZgxjTxaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NjhhZGYxMjBhNzRhNWQxMDgwOWNmZDNjYjY4MTRmYzg5 YjFmNDYwHhcNMjYwMTAyMTIyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGI1NmRmMTNkZGRlZmMyNTg0YTk0NzgyZGU0YmFhOTY4MmUyOWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsajfePgq665j0bd5Nw4u3NfwGVAs /NdzIXN8Q2bAY8b2/L9AEnN+jbrVa6RexR0uxdIHphBrf53JlNET7Kan+GELF6WZ 1JZ9922L5gvCYHxv6+WtN2sY+GQfjABYc2Sf764VjzRQfME+vqZrEJZTtLxp57ld 7GRJnzvlLW384v+5VaamixC0WMam3BUHnEC9ky5ebGRsDJYiBaBh+HTBmcxya1P1 lKEA5jiYd99ymIy2xAb2/MC6MVpoiWFzYsMjLbmmoTDc/2SkwiyAjQc3zw3vYak2 WHadPEvJiOBw2sJ9rOk95JBmbaRNVat8Tf3VaivAvaslLeyF1u7xjr6SLwIDAQAB o4ICuTCCArUwHQYDVR0OBBYEFLi1bfE93e/CWEqUeC3kuqloLinDMB8GA1UdIwQY MBaAFKlorfEgp0pdEICc/Ty2gU/Imx9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVdpdDhTQ25TbDBRZ0p6OVBMYUJUOGliSDBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jNGIyMTEtYzA4OS00YzA1LTgwM2It ODBjZTQ1ODYxMjM5LzEvdUxWdDhUM2Q3OEpZU3BSNExlUzZxV2d1S2NNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jNGIyMTEtYzA4OS00YzA1LTgwM2ItODBjZTQ1ODYxMjM5 LzEvcVdpdDhTQ25TbDBRZ0p6OVBMYUJUOGliSDBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHOBggrBgEFBQcBBwEB/wSBvjCBuzCBjQQCAAEwgYYDBAQu /dADBAFb3Z4DBAJb3kgDBAFb4MQDBAFb5yADBAJb6mQDBABb7dswDAMEBVvt4AME AVvt5AMEBV+rwAMEA7BlUAMEBLBlgAMEArkDPAMEArkXLAMEArkpUAMEArlfxAME ArlrjAMEArnq6AMEArn1LAMEArn9QAMEA7y/2AMEAsK03DApBAIAAjAjAwUAKgfw gAMFACoMNUADBQMqDTEAAwUAKg1KgAMFACoNkYAwDQYJKoZIhvcNAQELBQADggEB ABwDfElxgNuxkR0rYmy38l2gvDftugF/RRv18gXgQ0ITuYkZQYBlvNEmMnHQT1Bo lL3xu4gB5xmslNIsqJxhXwXA3TycpmQlfTGwZ2PGFeNcQLqt4va4yDK8q6MHcwyP fa0po2FHSNbFrv+zSKqwEZtpURhQy9Yj7busJuthplWZfQ7KEzLc1BLAYvc7Is5j MPPHlv3XDPrTcLzcG5ZYUH186VnFwMJg1bPzfL5SezwzqhYBBf8YGdH3+yhLJSxf yl99SLmiYCaPhHoqYEUQ1Of/0zLqEx7EXBz0m9d0X7oROv8DRERcp01KigXN5AE+ jT3YaIF+tUeyjOvzGxJ+Xjg= -----END CERTIFICATE-----Generated at Tue Jan 27 03:05:48 2026 by rpki-client