This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/CvdJK5OT8GtA-xh7l9tdYncfRDc.roa File: CvdJK5OT8GtA-xh7l9tdYncfRDc.roa (raw, json) Hash identifier: 3p6vjzHMzoQ2xfV5P6Ow9qn/DbQ1xG3hoqj2RJOaMPk= Subject key identifier: 0A:F7:49:2B:93:93:F0:6B:40:FB:18:7B:97:DB:5D:62:77:1F:44:37 Certificate issuer: /CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6 Certificate serial: 019B7C7F433192478170CF44B77B6E494ACC Authority key identifier: B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/CvdJK5OT8GtA-xh7l9tdYncfRDc.roa Signing time: Fri 02 Jan 2026 02:17:53 +0000 ROA not before: Fri 02 Jan 2026 02:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200590 IP address blocks: 5.188.64.0/22 maxlen: 24 5.188.152.0/22 maxlen: 24 77.240.33.0/24 maxlen: 24 77.240.35.0/24 maxlen: 24 77.240.44.0/22 maxlen: 24 79.143.20.0/22 maxlen: 24 82.115.60.0/24 maxlen: 24 82.115.61.0/24 maxlen: 24 82.115.62.0/24 maxlen: 24 84.252.156.0/22 maxlen: 24 87.255.194.0/23 maxlen: 24 87.255.196.0/22 maxlen: 24 87.255.200.0/23 maxlen: 24 89.223.0.0/24 maxlen: 24 89.223.2.0/24 maxlen: 24 91.147.88.0/24 maxlen: 24 91.147.89.0/24 maxlen: 24 91.147.90.0/24 maxlen: 24 91.147.91.0/24 maxlen: 24 91.147.100.0/22 maxlen: 24 91.231.67.0/24 maxlen: 24 93.190.240.0/22 maxlen: 24 94.126.201.0/24 maxlen: 24 178.238.78.0/23 maxlen: 24 185.97.112.0/22 maxlen: 24 185.182.216.0/24 maxlen: 24 185.182.217.0/24 maxlen: 24 188.94.152.0/23 maxlen: 24 193.106.98.0/24 maxlen: 24 194.76.124.0/22 maxlen: 24 2a06:580::/29 maxlen: 40 2a06:580:4::/48 maxlen: 48 2a06:580:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:43:31:92:47:81:70:cf:44:b7:7b:6e:49:4a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6 Validity Not Before: Jan 2 02:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0af7492b9393f06b40fb187b97db5d62771f4437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d1:76:a4:4c:81:71:c7:d1:28:1b:0b:2a:f7: 88:cc:6e:c4:9d:61:61:3a:0b:e9:f6:88:fc:76:ca: c8:66:eb:66:db:11:c5:7a:19:85:4f:04:60:0f:22: e4:ff:c3:8e:fb:cf:83:c6:8a:0e:80:a1:38:70:64: 5a:9c:7a:41:68:ae:37:19:6e:ea:e9:25:83:74:5d: 53:4c:5b:26:4f:2a:59:8f:c2:97:ee:ff:46:be:2c: f6:f1:90:aa:04:ce:73:e7:30:a8:a4:07:6f:f7:35: cc:75:19:04:d3:c9:31:d9:e3:76:18:8d:85:71:ba: 10:83:77:be:65:b4:77:a1:15:6a:fa:d0:a6:5d:2d: bb:46:8e:e8:7c:ec:7f:21:d9:a6:1c:d4:5a:6a:ad: 0c:5c:b3:8f:0a:91:b4:64:23:a6:6e:0b:ae:92:69: f3:8e:50:4e:7b:54:b1:1d:75:66:91:c0:8c:ce:98: 6b:45:0b:0c:7c:d2:5f:07:49:64:a5:52:98:9c:49: fe:45:68:5d:65:00:39:34:bf:a7:d0:6d:03:49:21: 24:64:82:94:7f:a9:83:e7:86:c7:6f:65:19:d0:98: 80:de:38:63:4e:cc:4f:1c:8f:1b:51:dc:0e:d3:3a: 4a:8a:ed:f2:52:ba:22:8d:86:3e:a4:af:06:89:11: 81:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F7:49:2B:93:93:F0:6B:40:FB:18:7B:97:DB:5D:62:77:1F:44:37 X509v3 Authority Key Identifier: keyid:B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/CvdJK5OT8GtA-xh7l9tdYncfRDc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.188.64.0/22 5.188.152.0/22 77.240.33.0/24 77.240.35.0/24 77.240.44.0/22 79.143.20.0/22 82.115.60.0-82.115.62.255 84.252.156.0/22 87.255.194.0-87.255.201.255 89.223.0.0/24 89.223.2.0/24 91.147.88.0/22 91.147.100.0/22 91.231.67.0/24 93.190.240.0/22 94.126.201.0/24 178.238.78.0/23 185.97.112.0/22 185.182.216.0/23 188.94.152.0/23 193.106.98.0/24 194.76.124.0/22 IPv6: 2a06:580::/29 Signature Algorithm: sha256WithRSAEncryption 0b:7a:d6:63:d3:37:93:76:f9:36:b9:a4:56:ab:19:75:4a:e7: 10:6f:6d:7d:67:95:38:6c:d8:91:cb:aa:74:56:19:1e:62:de: 6f:91:70:05:49:6d:a1:1f:70:5a:b8:4c:ae:5e:be:51:b8:c3: 19:b8:90:3b:dd:74:c2:60:07:6a:5e:33:84:3e:74:e6:0c:79: cf:a1:ed:7c:e3:88:a3:4a:76:d3:08:8a:6a:2d:2f:80:dd:73: 80:d9:8f:d5:1d:51:9f:a5:8d:90:e0:f2:d0:75:cd:22:c4:01: 28:9c:cf:78:fb:4b:c9:c1:74:28:7d:22:8f:cc:4b:c4:0c:03: bd:82:75:0a:44:79:d5:fe:54:c1:66:58:8c:82:dd:ea:3f:cb: 14:ae:d4:47:fc:a3:b8:a6:93:a5:cb:95:84:69:c6:e3:0a:0b: 15:4b:81:9d:eb:c6:5b:4c:dd:5c:9d:5c:70:63:73:89:8d:c8: f1:e4:08:37:ac:d9:6b:ec:82:a9:9b:2d:40:5b:21:3a:14:88: 40:bb:9e:7c:dd:8c:83:6c:39:ec:d0:5e:70:1a:52:33:76:55: e9:95:e0:25:58:73:af:fe:29:bb:5b:39:2c:70:2b:51:0d:6e: 8f:b1:f1:5f:6e:1e:1b:02:6a:2d:a9:fc:99:f9:ac:fc:cb:69: 39:ca:09:8e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt8f0MxkkeBcM9Et3tuSUrMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwOWZmZjhlOGZmZDhmOGU3ZDlhN2I2NmQxY2M3M2RjMzky ODFlZjYwHhcNMjYwMTAyMDIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWY3NDkyYjkzOTNmMDZiNDBmYjE4N2I5N2RiNWQ2Mjc3MWY0NDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09F2pEyBccfRKBsLKveIzG7EnWFh Ogvp9oj8dsrIZutm2xHFehmFTwRgDyLk/8OO+8+DxooOgKE4cGRanHpBaK43GW7q 6SWDdF1TTFsmTypZj8KX7v9Gviz28ZCqBM5z5zCopAdv9zXMdRkE08kx2eN2GI2F cboQg3e+ZbR3oRVq+tCmXS27Ro7ofOx/IdmmHNRaaq0MXLOPCpG0ZCOmbguukmnz jlBOe1SxHXVmkcCMzphrRQsMfNJfB0lkpVKYnEn+RWhdZQA5NL+n0G0DSSEkZIKU f6mD54bHb2UZ0JiA3jhjTsxPHI8bUdwO0zpKiu3yUroijYY+pK8GiRGB7QIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFAr3SSuTk/BrQPsYe5fbXWJ3H0Q3MB8GA1UdIwQY MBaAFLCf/46P/Y+OfZp7ZtHMc9w5KB72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0pfX2pvXzlqNDU5bW50bTBjeHozRGtvSHZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy84ZmJjN2UtMWY0Ny00ODdjLTgyOTIt ZTVhNzdmN2E3YWEyLzEvQ3ZkSks1T1Q4R3RBLXhoN2w5dGRZbmNmUkRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy84ZmJjN2UtMWY0Ny00ODdjLTgyOTItZTVhNzdmN2E3YWEy LzEvc0pfX2pvXzlqNDU5bW50bTBjeHozRGtvSHZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHABggrBgEFBQcBBwEB/wSBsDCBrTCBmwQCAAEwgZQDBAIF vEADBAIFvJgDBABN8CEDBABN8CMDBAJN8CwDBAJPjxQwDAMEAlJzPAMEAFJzPgME AlT8nDAMAwQBV//CAwQBV//IAwQAWd8AAwQAWd8CAwQCW5NYAwQCW5NkAwQAW+dD AwQCXb7wAwQAXn7JAwQBsu5OAwQCuWFwAwQBubbYAwQBvF6YAwQAwWpiAwQCwkx8 MA0EAgACMAcDBQMqBgWAMA0GCSqGSIb3DQEBCwUAA4IBAQALetZj0zeTdvk2uaRW qxl1SucQb219Z5U4bNiRy6p0VhkeYt5vkXAFSW2hH3BauEyuXr5RuMMZuJA73XTC YAdqXjOEPnTmDHnPoe1844ijSnbTCIpqLS+A3XOA2Y/VHVGfpY2Q4PLQdc0ixAEo nM94+0vJwXQofSKPzEvEDAO9gnUKRHnV/lTBZliMgt3qP8sUrtRH/KO4ppOly5WE acbjCgsVS4Gd68ZbTN1cnVxwY3OJjcjx5Ag3rNlr7IKpmy1AWyE6FIhAu5583YyD bDns0F5wGlIzdlXpleAlWHOv/im7WzkscCtRDW6PsfFfbh4bAmotqfyZ+az8y2k5 ygmO -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:45 2026 by rpki-client