This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/C_fEnv_eRtdfHOrTALK5_eLV5ok.roa File: C_fEnv_eRtdfHOrTALK5_eLV5ok.roa (raw, json) Hash identifier: /2vtpruz4Kd8ELtmIOpyqLwlHo0YencLVWVxE/Dnmjs= Subject key identifier: 0B:F7:C4:9E:FF:DE:46:D7:5F:1C:EA:D3:00:B2:B9:FD:E2:D5:E6:89 Certificate issuer: /CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352 Certificate serial: 019B7B3578D70A1F00CC0DC68ECBC8CD45EB Authority key identifier: 3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/C_fEnv_eRtdfHOrTALK5_eLV5ok.roa Signing time: Thu 01 Jan 2026 20:17:40 +0000 ROA not before: Thu 01 Jan 2026 20:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34879 IP address blocks: 37.220.160.0/24 maxlen: 24 37.220.161.0/24 maxlen: 24 37.220.162.0/23 maxlen: 24 37.220.165.0/24 maxlen: 24 37.220.166.0/24 maxlen: 24 37.220.167.0/24 maxlen: 24 46.235.184.0/23 maxlen: 24 46.235.186.0/24 maxlen: 24 46.235.187.0/24 maxlen: 24 46.235.188.0/23 maxlen: 23 46.235.188.0/24 maxlen: 24 46.235.189.0/24 maxlen: 24 46.235.190.0/23 maxlen: 23 78.41.104.0/23 maxlen: 24 78.41.106.0/24 maxlen: 24 78.41.107.0/24 maxlen: 24 78.41.108.0/24 maxlen: 24 78.41.109.0/24 maxlen: 24 78.41.110.0/23 maxlen: 24 93.93.88.0/23 maxlen: 24 93.93.90.0/24 maxlen: 24 93.93.91.0/24 maxlen: 24 93.93.92.0/23 maxlen: 24 93.93.94.0/24 maxlen: 24 93.93.95.0/24 maxlen: 24 185.17.168.0/24 maxlen: 24 185.17.169.0/24 maxlen: 24 185.17.170.0/23 maxlen: 24 2a03:e040::/48 maxlen: 48 2a03:e040:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:78:d7:0a:1f:00:cc:0d:c6:8e:cb:c8:cd:45:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352 Validity Not Before: Jan 1 20:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bf7c49effde46d75f1cead300b2b9fde2d5e689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ae:da:a3:8e:c6:07:e0:ad:06:80:a9:a6:70: a4:30:db:d8:45:d1:6a:80:ed:06:b2:36:64:64:d3: d5:a8:9f:2a:78:49:23:59:5c:bb:e0:3e:d7:46:2d: b5:1a:f4:3c:cc:69:cb:bd:58:a4:84:80:fd:eb:23: 93:76:ce:bb:a8:79:26:00:09:dd:2d:2f:3d:8e:8a: e4:68:57:9d:19:04:3b:a5:13:84:3f:81:77:86:f9: fe:25:ee:c5:96:78:12:a7:09:92:d9:1a:93:a2:b9: 5d:e7:fc:f4:66:bd:be:cb:73:d0:a5:b0:b0:1e:8d: 7b:97:b1:b5:f2:83:b0:1b:c8:df:36:ac:ff:3e:50: d7:e7:f4:71:6d:53:4b:0b:96:7b:c3:01:e6:84:6f: 52:80:a7:8a:87:e9:5e:11:06:d9:83:0f:85:0c:78: c8:ce:0b:81:74:47:f6:8e:18:f9:d0:36:ea:e7:c3: 95:7d:e3:e9:76:28:dd:70:26:4e:6c:e9:1b:c8:3a: 0f:3f:ed:e2:6f:83:5b:2d:90:73:1b:dc:ac:77:59: f1:5c:8c:60:dd:c8:ea:e4:c5:43:a6:8f:df:4e:68: a3:34:fa:8e:20:4f:82:89:54:1c:35:31:64:10:7f: a0:55:3c:2c:ea:4f:05:f4:02:7b:ad:b9:e9:45:06: 08:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F7:C4:9E:FF:DE:46:D7:5F:1C:EA:D3:00:B2:B9:FD:E2:D5:E6:89 X509v3 Authority Key Identifier: keyid:3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/C_fEnv_eRtdfHOrTALK5_eLV5ok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.220.160.0/22 37.220.165.0-37.220.167.255 46.235.184.0/21 78.41.104.0/21 93.93.88.0/21 185.17.168.0/22 IPv6: 2a03:e040::/48 2a03:e040:10::/48 Signature Algorithm: sha256WithRSAEncryption ca:df:3a:59:39:0b:3a:eb:7f:96:90:12:a3:39:11:98:97:ba: 74:1e:b0:0b:9a:0a:e1:69:f9:32:77:fa:cd:f9:ab:72:e5:63: d8:fc:7c:08:7e:43:6f:60:d5:4b:03:a3:57:95:0f:97:a0:97: 8c:40:da:51:b5:49:23:af:13:92:d5:57:b9:c6:0d:2e:50:78: f5:8c:bc:67:a3:12:de:70:48:f1:7a:98:6d:91:dd:cb:74:bf: 06:56:1e:f2:46:80:69:ea:c9:ac:20:d3:a9:10:34:bd:44:8e: 2e:b2:33:a1:3e:c8:8b:0e:42:25:3e:c9:4b:2c:7d:20:b2:f1: f9:e6:8c:af:04:6b:5b:86:46:ec:8e:46:4c:92:05:47:93:20: 97:4d:f0:a8:1f:16:01:5d:06:ee:a6:03:09:b7:90:43:40:a9: aa:05:c8:cb:45:cb:f1:a9:c2:19:ce:85:e5:c6:80:29:34:da: 7c:0c:ef:38:e6:e5:2b:bc:2a:c8:96:a2:6a:78:63:3e:44:0e: fe:43:f7:0c:ff:9e:3a:86:a9:3d:d7:92:3f:e0:63:ca:84:29: 38:80:a4:e1:a6:a5:8e:78:df:e1:e0:da:4e:a0:60:b7:57:f4: ce:d8:d9:00:ee:3a:d1:9d:5b:d7:79:f8:76:a1:66:dd:5a:85: ec:39:99:fc -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt7NXjXCh8AzA3GjsvIzUXrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiYTE3ODJiNmFmYmE3YzZiY2YwNzBiOTNmZWQ0Y2M4NGFm NDEzNTIwHhcNMjYwMTAxMjAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmY3YzQ5ZWZmZGU0NmQ3NWYxY2VhZDMwMGIyYjlmZGUyZDVlNjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK7ao47GB+CtBoCppnCkMNvYRdFq gO0GsjZkZNPVqJ8qeEkjWVy74D7XRi21GvQ8zGnLvVikhID96yOTds67qHkmAAnd LS89jorkaFedGQQ7pROEP4F3hvn+Je7FlngSpwmS2RqTorld5/z0Zr2+y3PQpbCw Ho17l7G18oOwG8jfNqz/PlDX5/RxbVNLC5Z7wwHmhG9SgKeKh+leEQbZgw+FDHjI zguBdEf2jhj50Dbq58OVfePpdijdcCZObOkbyDoPP+3ib4NbLZBzG9ysd1nxXIxg 3cjq5MVDpo/fTmijNPqOIE+CiVQcNTFkEH+gVTws6k8F9AJ7rbnpRQYI2QIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFAv3xJ7/3kbXXxzq0wCyuf3i1eaJMB8GA1UdIwQY MBaAFDuheCtq+6fGvPBwuT/tTMhK9BNSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzZGNEsycjdwOGE4OEhDNVAtMU15RXIwRTFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZDdhYzMtYjhhZC00MmIwLWFkMmEt YWU5NjdkNzM5ZGQzLzEvQ19mRW52X2VSdGRmSE9yVEFMSzVfZUxWNW9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9hZDdhYzMtYjhhZC00MmIwLWFkMmEtYWU5NjdkNzM5ZGQz LzEvTzZGNEsycjdwOGE4OEhDNVAtMU15RXIwRTFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjAyBAIAATAsAwQCJdygMAwD BAAl3KUDBAMl3KADBAMu67gDBANOKWgDBANdXVgDBAK5EagwGAQCAAIwEgMHACoD 4EAAAAMHACoD4EAAEDANBgkqhkiG9w0BAQsFAAOCAQEAyt86WTkLOut/lpASozkR mJe6dB6wC5oK4Wn5Mnf6zfmrcuVj2Px8CH5Db2DVSwOjV5UPl6CXjEDaUbVJI68T ktVXucYNLlB49Yy8Z6MS3nBI8XqYbZHdy3S/BlYe8kaAaerJrCDTqRA0vUSOLrIz oT7Iiw5CJT7JSyx9ILLx+eaMrwRrW4ZG7I5GTJIFR5Mgl03wqB8WAV0G7qYDCbeQ Q0CpqgXIy0XL8anCGc6F5caAKTTafAzvOOblK7wqyJaianhjPkQO/kP3DP+eOoap PdeSP+BjyoQpOICk4aaljnjf4eDaTqBgt1f0ztjZAO460Z1b13n4dqFm3VqF7DmZ /A== -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:13 2026 by rpki-client