This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/32FLh-2sl2eJtIOGk05i3sfElJU.roa File: 32FLh-2sl2eJtIOGk05i3sfElJU.roa (raw, json) Hash identifier: HsUbHhV9ZeMlUBS5nClbq2bfx/JXEoBIkb5zGIiCc2U= Subject key identifier: DF:61:4B:87:ED:AC:97:67:89:B4:83:86:93:4E:62:DE:C7:C4:94:95 Certificate issuer: /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71 Certificate serial: 019B7834ABD45BAA4EEE26B7A51162250BF2 Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/32FLh-2sl2eJtIOGk05i3sfElJU.roa Signing time: Thu 01 Jan 2026 06:17:56 +0000 ROA not before: Thu 01 Jan 2026 06:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202425 IP address blocks: 80.82.64.0/24 maxlen: 24 80.82.65.0/24 maxlen: 24 80.82.66.0/24 maxlen: 24 80.82.67.0/24 maxlen: 24 80.82.68.0/24 maxlen: 24 80.82.69.0/24 maxlen: 24 80.82.70.0/24 maxlen: 24 80.82.76.0/24 maxlen: 24 80.82.77.0/24 maxlen: 24 80.82.78.0/24 maxlen: 24 80.82.79.0/24 maxlen: 24 89.248.160.0/24 maxlen: 24 89.248.161.0/24 maxlen: 24 89.248.162.0/24 maxlen: 24 89.248.163.0/24 maxlen: 24 89.248.164.0/24 maxlen: 24 89.248.165.0/24 maxlen: 24 89.248.166.0/24 maxlen: 24 89.248.167.0/24 maxlen: 24 89.248.168.0/24 maxlen: 24 89.248.169.0/24 maxlen: 24 89.248.170.0/24 maxlen: 24 89.248.171.0/24 maxlen: 24 89.248.172.0/24 maxlen: 24 89.248.173.0/24 maxlen: 24 89.248.174.0/24 maxlen: 24 93.174.88.0/24 maxlen: 24 93.174.89.0/24 maxlen: 24 93.174.90.0/24 maxlen: 24 93.174.91.0/24 maxlen: 24 93.174.92.0/24 maxlen: 24 93.174.93.0/24 maxlen: 24 93.174.94.0/24 maxlen: 24 93.174.95.0/24 maxlen: 24 94.102.48.0/24 maxlen: 24 94.102.49.0/24 maxlen: 24 94.102.50.0/24 maxlen: 24 2a02:6c8:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ab:d4:5b:aa:4e:ee:26:b7:a5:11:62:25:0b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71 Validity Not Before: Jan 1 06:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df614b87edac976789b48386934e62dec7c49495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:29:9f:57:0d:a6:ae:a5:f5:56:cd:03:fd:d3: a0:a7:15:7a:70:23:82:6c:cd:ac:1b:ba:69:a6:6c: 74:71:9f:ad:f7:b8:3d:04:77:8e:59:2d:78:3f:28: 04:1f:35:7e:8f:4e:7e:57:27:1f:fe:4b:a4:c3:08: a9:75:bf:e0:2c:6c:8f:c4:4b:5d:c1:f0:da:67:ff: 62:a0:60:10:dc:0a:07:e5:56:c5:fb:9d:f8:e0:73: ce:70:bc:8f:1c:ea:86:08:e9:a3:f7:e2:57:41:3f: ae:68:a7:2f:1c:3b:14:54:7b:06:a5:51:c0:f9:d1: 5a:80:17:c5:48:41:e7:29:1a:8e:c3:f8:1f:ff:3e: e8:1a:13:f8:5c:1c:a2:ff:27:8c:c4:c9:fb:6c:c9: 11:f3:df:13:5a:cb:85:fb:d7:f8:62:2b:6d:8d:54: b8:2c:45:05:a3:86:f4:2f:d5:b6:ae:c6:bc:08:ec: a8:b3:e6:93:f5:5b:c5:b1:24:0b:f5:ac:1a:ee:6d: 09:31:ab:94:9d:fc:1a:3f:3d:08:8e:1d:94:09:5c: ac:5c:3c:a2:e7:b4:06:02:34:62:02:fd:ab:a9:48: 10:70:10:0e:95:e7:a9:60:20:e2:c9:0f:4f:cb:35: 90:34:8c:ba:8e:d2:98:c0:92:56:29:ea:f9:55:29: 26:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:61:4B:87:ED:AC:97:67:89:B4:83:86:93:4E:62:DE:C7:C4:94:95 X509v3 Authority Key Identifier: keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/32FLh-2sl2eJtIOGk05i3sfElJU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.82.64.0-80.82.70.255 80.82.76.0/22 89.248.160.0-89.248.174.255 93.174.88.0/21 94.102.48.0-94.102.50.255 IPv6: 2a02:6c8:8000::/33 Signature Algorithm: sha256WithRSAEncryption 63:d4:06:52:40:0d:12:9e:fb:e4:8a:96:d3:3c:fe:e6:3f:40: 27:bf:bb:80:b7:8e:25:d7:49:27:2e:46:8a:ca:d7:c4:4f:64: 22:18:15:14:40:90:4d:20:89:d7:ba:19:98:ba:8d:fe:05:50: 3c:a4:1b:c3:b3:e1:43:f2:dc:ef:2c:e7:2b:a9:80:79:5a:af: 9c:39:6b:76:d1:72:3d:e7:6a:c6:7a:0b:2a:e6:c8:cb:d9:47: f5:35:7b:cd:17:14:8f:54:d6:15:7e:82:7b:a8:a5:43:71:26: 01:8c:d6:54:9f:4b:d6:83:1c:99:fb:8d:cb:47:ba:c8:0b:ef: 79:6a:4a:23:21:86:1f:07:e3:79:cd:73:91:f7:24:3a:83:f4: 36:9f:95:7f:c1:a4:81:70:35:b6:0a:7e:7f:dc:d6:ba:62:fc: eb:a9:4e:9e:3b:4d:34:09:35:44:0a:63:ec:27:d7:40:29:89: 8c:35:d8:56:41:6b:b8:ed:f2:f0:cb:d3:d2:7f:a6:79:88:99: 28:97:a1:a5:57:af:f9:6e:76:62:8b:bf:60:17:c0:3d:cd:88: 5a:17:db:cb:7e:4d:ae:4a:ba:98:b3:0e:90:01:62:b1:1f:e8: da:1f:02:f7:6e:f3:d3:60:d5:ab:cc:51:57:e3:19:a9:6d:0a: ae:9a:f3:ab -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt4NKvUW6pO7ia3pRFiJQvyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZTVjNGU0YmUzYjhjYmRlMGVhZTk0NjBhMTEwMzJkNmE2 NGFiNzEwHhcNMjYwMTAxMDYxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjYxNGI4N2VkYWM5NzY3ODliNDgzODY5MzRlNjJkZWM3YzQ5NDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnymfVw2mrqX1Vs0D/dOgpxV6cCOC bM2sG7pppmx0cZ+t97g9BHeOWS14PygEHzV+j05+Vycf/kukwwipdb/gLGyPxEtd wfDaZ/9ioGAQ3AoH5VbF+5344HPOcLyPHOqGCOmj9+JXQT+uaKcvHDsUVHsGpVHA +dFagBfFSEHnKRqOw/gf/z7oGhP4XByi/yeMxMn7bMkR898TWsuF+9f4YittjVS4 LEUFo4b0L9W2rsa8COyos+aT9VvFsSQL9awa7m0JMauUnfwaPz0Ijh2UCVysXDyi 57QGAjRiAv2rqUgQcBAOleepYCDiyQ9PyzWQNIy6jtKYwJJWKer5VSkm+QIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFN9hS4ftrJdnibSDhpNOYt7HxJSVMB8GA1UdIwQY MBaAFAflxOS+O4y94OrpRgoRAy1qZKtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQi1YRTVMNDdqTDNnNnVsR0NoRURMV3BrcTNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNmIxNzMtOTEyYy00MTUxLWJhYzUt NGM4ODgzMzI3YTJhLzEvMzJGTGgtMnNsMmVKdElPR2swNWkzc2ZFbEpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9mNmIxNzMtOTEyYy00MTUxLWJhYzUtNGM4ODgzMzI3YTJh LzEvQi1YRTVMNDdqTDNnNnVsR0NoRURMV3BrcTNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA8BAIAATA2MAwDBAZQUkAD BABQUkYDBAJQUkwwDAMEBVn4oAMEAFn4rgMEA12uWDAMAwQEXmYwAwQAXmYyMA4E AgACMAgDBgcqAgbIgDANBgkqhkiG9w0BAQsFAAOCAQEAY9QGUkANEp775IqW0zz+ 5j9AJ7+7gLeOJddJJy5GisrXxE9kIhgVFECQTSCJ17oZmLqN/gVQPKQbw7PhQ/Lc 7yznK6mAeVqvnDlrdtFyPedqxnoLKubIy9lH9TV7zRcUj1TWFX6Ce6ilQ3EmAYzW VJ9L1oMcmfuNy0e6yAvveWpKIyGGHwfjec1zkfckOoP0Np+Vf8GkgXA1tgp+f9zW umL866lOnjtNNAk1RApj7CfXQCmJjDXYVkFruO3y8MvT0n+meYiZKJehpVev+W52 You/YBfAPc2IWhfby35Nrkq6mLMOkAFisR/o2h8C927z02DVq8xRV+MZqW0Krprz qw== -----END CERTIFICATE-----Generated at Mon Jan 26 19:19:23 2026 by rpki-client