This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/u3tBTHFA6uA1xiho6mlx2A99Pkg.roa File: u3tBTHFA6uA1xiho6mlx2A99Pkg.roa (raw, json) Hash identifier: FgLJ+SuCyCEVccEPsDGFLFFI0Fpbheu8wLy47VogJN8= Subject key identifier: BB:7B:41:4C:71:40:EA:E0:35:C6:28:68:EA:69:71:D8:0F:7D:3E:48 Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20 Certificate serial: 019B77C6C0F2843087D9C44EBEF4F5DD801A Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/u3tBTHFA6uA1xiho6mlx2A99Pkg.roa Signing time: Thu 01 Jan 2026 04:17:52 +0000 ROA not before: Thu 01 Jan 2026 04:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39651 IP address blocks: 77.218.32.0/19 maxlen: 20 80.216.0.0/15 maxlen: 15 83.177.160.0/19 maxlen: 19 83.177.192.0/19 maxlen: 19 83.177.200.0/21 maxlen: 21 83.177.224.0/19 maxlen: 19 83.177.232.0/21 maxlen: 21 83.180.224.0/19 maxlen: 19 83.181.0.0/19 maxlen: 19 83.182.32.0/19 maxlen: 19 83.188.0.0/18 maxlen: 18 83.188.224.0/19 maxlen: 19 83.190.64.0/18 maxlen: 18 83.191.160.0/19 maxlen: 19 83.248.0.0/13 maxlen: 13 85.194.0.0/18 maxlen: 18 87.227.0.0/17 maxlen: 17 90.129.224.0/19 maxlen: 19 90.133.128.0/19 maxlen: 19 90.133.160.0/19 maxlen: 19 90.141.0.0/19 maxlen: 19 90.141.40.0/21 maxlen: 21 90.141.48.0/20 maxlen: 20 90.142.32.0/19 maxlen: 19 90.142.48.0/20 maxlen: 20 90.143.0.0/19 maxlen: 19 90.143.128.0/17 maxlen: 17 90.144.64.0/19 maxlen: 19 91.128.128.0/19 maxlen: 19 91.128.160.0/19 maxlen: 19 91.128.192.0/19 maxlen: 19 91.130.0.0/18 maxlen: 18 151.177.0.0/16 maxlen: 16 178.218.152.0/22 maxlen: 22 188.148.0.0/14 maxlen: 14 193.13.160.0/20 maxlen: 20 193.14.192.0/20 maxlen: 20 193.150.192.0/18 maxlen: 18 213.89.0.0/16 maxlen: 16 213.100.192.0/19 maxlen: 19 213.102.64.0/19 maxlen: 19 213.102.80.0/20 maxlen: 20 213.103.128.0/19 maxlen: 19 213.200.128.0/18 maxlen: 18 2a04:ae00::/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c0:f2:84:30:87:d9:c4:4e:be:f4:f5:dd:80:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20 Validity Not Before: Jan 1 04:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb7b414c7140eae035c62868ea6971d80f7d3e48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b2:8a:20:c8:98:9f:4f:08:a1:04:a6:f2:28: af:27:c0:3c:78:2b:76:ef:45:cd:83:61:47:8a:80: 27:08:5e:d6:44:d6:f8:9b:d9:6b:11:1b:4d:a7:2b: 15:27:7e:69:d3:a5:b0:19:e7:cf:23:a3:44:cb:79: 02:b3:fd:96:c4:80:4f:7e:74:ff:11:a6:6b:3e:d2: c3:24:bf:5c:53:aa:6f:6e:61:cf:7a:d8:7c:10:c5: 8f:71:91:eb:35:bc:1e:ae:a8:4d:b4:4c:de:c1:03: 1a:5f:c3:99:39:fd:7e:a1:ab:77:cf:d5:f5:62:d3: be:1e:89:87:fc:a3:18:14:10:90:02:d7:f2:a1:4b: d2:89:e0:49:50:24:b5:32:dd:3d:28:8f:5f:08:f2: de:47:39:a4:26:b3:0c:41:c4:c8:4f:22:5d:e8:52: 7b:00:9b:5c:45:c3:55:58:78:21:6a:6a:39:82:1a: dc:93:9b:6e:f7:b3:99:b3:2d:b9:be:94:c3:ce:77: d0:16:16:3b:dc:25:3c:4e:9a:d4:66:44:f0:b0:af: 7a:94:c3:c0:e3:8f:55:aa:96:12:d4:c3:9e:98:ab: ac:14:bc:6e:23:b7:71:f6:00:d5:05:ec:cc:b0:30: 63:b8:e6:04:4e:35:51:15:37:09:65:30:e9:91:2f: 47:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:7B:41:4C:71:40:EA:E0:35:C6:28:68:EA:69:71:D8:0F:7D:3E:48 X509v3 Authority Key Identifier: keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/u3tBTHFA6uA1xiho6mlx2A99Pkg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.218.32.0/19 80.216.0.0/15 83.177.160.0-83.177.255.255 83.180.224.0-83.181.31.255 83.182.32.0/19 83.188.0.0/18 83.188.224.0/19 83.190.64.0/18 83.191.160.0/19 83.248.0.0/13 85.194.0.0/18 87.227.0.0/17 90.129.224.0/19 90.133.128.0/18 90.141.0.0/19 90.141.40.0-90.141.63.255 90.142.32.0/19 90.143.0.0/19 90.143.128.0/17 90.144.64.0/19 91.128.128.0-91.128.223.255 91.130.0.0/18 151.177.0.0/16 178.218.152.0/22 188.148.0.0/14 193.13.160.0/20 193.14.192.0/20 193.150.192.0/18 213.89.0.0/16 213.100.192.0/19 213.102.64.0/19 213.103.128.0/19 213.200.128.0/18 IPv6: 2a04:ae00::/26 Signature Algorithm: sha256WithRSAEncryption 2e:1b:3f:61:2e:dd:20:41:99:79:93:02:ce:c5:be:c9:6e:4f: 1e:c6:f6:80:10:6c:94:b7:b1:08:38:be:25:1f:09:01:1b:57: d0:a9:28:7b:b1:9f:8e:6d:bb:3b:27:94:91:e0:f5:4c:61:f5: 9b:44:a5:6a:25:ff:a9:1e:96:37:fa:5c:be:f0:30:2a:bb:33: 76:fc:3b:af:46:08:16:7e:51:6e:56:ff:20:ba:5b:c1:45:d0: 84:99:ba:2d:15:08:4b:43:f4:39:4b:42:3e:b7:c1:39:0d:04: fb:aa:9a:c8:bd:93:7c:49:81:cb:59:42:da:48:9f:43:6f:c5: c3:31:46:1e:df:59:a9:4c:57:cf:92:bb:f0:d0:69:58:85:1b: 76:c9:2c:e4:d9:c9:31:34:e8:78:14:ce:6d:40:29:84:00:fb: b7:f9:ba:c0:c5:38:27:6a:43:53:58:0f:9d:db:32:5d:d1:87: 84:b8:8f:2d:4a:f7:8e:13:37:96:c6:8f:23:57:dc:ed:0e:17: 48:fe:fc:a3:0b:e1:75:55:db:6a:52:69:2c:33:80:c2:a3:90: 7a:62:d8:b1:d9:ce:76:49:57:de:d0:09:0b:3f:e8:99:47:d9: 88:42:b4:0d:e2:b0:16:ff:c7:65:18:b7:ce:d2:04:37:36:26: 2e:0d:fa:f4 -----BEGIN CERTIFICATE----- MIIF7DCCBNSgAwIBAgISAZt3xsDyhDCH2cROvvT13YAaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNWUwMjMwYmU3OTllNDQ4MjljODcyMGNhMzgzNDcwNDU0 OTRlMjAwHhcNMjYwMTAxMDQxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjdiNDE0YzcxNDBlYWUwMzVjNjI4NjhlYTY5NzFkODBmN2QzZTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLKKIMiYn08IoQSm8iivJ8A8eCt2 70XNg2FHioAnCF7WRNb4m9lrERtNpysVJ35p06WwGefPI6NEy3kCs/2WxIBPfnT/ EaZrPtLDJL9cU6pvbmHPeth8EMWPcZHrNbwerqhNtEzewQMaX8OZOf1+oat3z9X1 YtO+HomH/KMYFBCQAtfyoUvSieBJUCS1Mt09KI9fCPLeRzmkJrMMQcTITyJd6FJ7 AJtcRcNVWHghamo5ghrck5tu97OZsy25vpTDznfQFhY73CU8TprUZkTwsK96lMPA 449VqpYS1MOemKusFLxuI7dx9gDVBezMsDBjuOYETjVRFTcJZTDpkS9HywIDAQAB o4IC+DCCAvQwHQYDVR0OBBYEFLt7QUxxQOrgNcYoaOppcdgPfT5IMB8GA1UdIwQY MBaAFG9eAjC+eZ5EgpyHIMo4NHBFSU4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGIt YmE3YzdkODE5MGNhLzEvdTN0QlRIRkE2dUExeGlobzZtbHgyQTk5UGtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGItYmE3YzdkODE5MGNh LzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBDAYIKwYBBQUHAQcBAf8EgfwwgfkwgecEAgABMIHgAwQF TdogAwMBUNgwCwMEBVOxoAMDAVOwMAwDBAVTtOADBAVTtQADBAVTtiADBAZTvAAD BAVTvOADBAZTvkADBAVTv6ADAwNT+AMEBlXCAAMEB1fjAAMEBVqB4AMEBlqFgAME BVqNADAMAwQDWo0oAwQGWo0AAwQFWo4gAwQFWo8AAwQHWo+AAwQFWpBAMAwDBAdb gIADBAVbgMADBAZbggADAwCXsQMEArLamAMDAryUAwQEwQ2gAwQEwQ7AAwQGwZbA AwMA1VkDBAXVZMADBAXVZkADBAXVZ4ADBAbVyIAwDQQCAAIwBwMFBioErgAwDQYJ KoZIhvcNAQELBQADggEBAC4bP2Eu3SBBmXmTAs7FvsluTx7G9oAQbJS3sQg4viUf CQEbV9CpKHuxn45tuzsnlJHg9Uxh9ZtEpWol/6keljf6XL7wMCq7M3b8O69GCBZ+ UW5W/yC6W8FF0ISZui0VCEtD9DlLQj63wTkNBPuqmsi9k3xJgctZQtpIn0NvxcMx Rh7fWalMV8+Su/DQaViFG3bJLOTZyTE06HgUzm1AKYQA+7f5usDFOCdqQ1NYD53b Ml3Rh4S4jy1K944TN5bGjyNX3O0OF0j+/KML4XVV22pSaSwzgMKjkHpi2LHZznZJ V97QCQs/6JlH2YhCtA3isBb/x2UYt87SBDc2Ji4N+vQ= -----END CERTIFICATE-----Generated at Sun Jan 25 18:09:17 2026 by rpki-client