This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/RD-lUB4Ei36QxtI-FiOM6NM_U2Y.roa File: RD-lUB4Ei36QxtI-FiOM6NM_U2Y.roa (raw, json) Hash identifier: A93vzTs8DQd1xXreJpQ+GUKXK5PpHkGlwVbRSd1LD8Y= Subject key identifier: 44:3F:A5:50:1E:04:8B:7E:90:C6:D2:3E:16:23:8C:E8:D3:3F:53:66 Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Certificate serial: 019B7C807A0291F5F5FCE7920ADB4724D312 Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/RD-lUB4Ei36QxtI-FiOM6NM_U2Y.roa Signing time: Fri 02 Jan 2026 02:19:13 +0000 ROA not before: Fri 02 Jan 2026 02:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12541 IP address blocks: 77.72.104.0/21 maxlen: 24 84.18.0.0/19 maxlen: 24 92.60.160.0/20 maxlen: 24 176.98.220.0/22 maxlen: 24 185.66.60.0/22 maxlen: 24 185.145.224.0/22 maxlen: 24 185.155.64.0/22 maxlen: 24 185.173.44.0/22 maxlen: 24 185.187.180.0/22 maxlen: 24 185.224.76.0/22 maxlen: 24 193.34.240.0/22 maxlen: 24 195.5.64.0/19 maxlen: 24 212.49.128.0/18 maxlen: 24 212.49.189.0/24 maxlen: 24 212.66.161.0/24 maxlen: 24 212.66.162.0/23 maxlen: 23 212.66.163.0/24 maxlen: 24 212.66.164.0/22 maxlen: 22 212.66.168.0/21 maxlen: 21 212.66.176.0/20 maxlen: 24 212.163.0.0/16 maxlen: 24 213.9.128.0/17 maxlen: 24 213.192.192.0/18 maxlen: 24 213.192.193.0/24 maxlen: 24 213.192.200.0/22 maxlen: 22 213.192.203.0/24 maxlen: 24 213.192.206.0/23 maxlen: 23 213.192.212.0/22 maxlen: 22 213.192.213.0/24 maxlen: 24 213.192.216.0/21 maxlen: 21 213.192.224.0/22 maxlen: 22 213.192.228.0/23 maxlen: 23 213.192.232.0/22 maxlen: 22 213.192.238.0/24 maxlen: 24 213.192.239.0/24 maxlen: 24 213.192.240.0/24 maxlen: 24 213.192.241.0/24 maxlen: 24 213.192.242.0/23 maxlen: 23 213.192.244.0/23 maxlen: 23 213.192.246.0/24 maxlen: 24 213.192.247.0/24 maxlen: 24 213.192.248.0/21 maxlen: 21 213.192.249.0/24 maxlen: 24 213.192.251.0/24 maxlen: 24 213.192.252.0/23 maxlen: 23 213.192.253.0/24 maxlen: 24 213.192.254.0/24 maxlen: 24 213.192.255.0/24 maxlen: 24 2001:ac0::/29 maxlen: 29 2001:ac0::/32 maxlen: 48 2001:ac0:30fd::/48 maxlen: 48 2001:ac0:c0c0::/44 maxlen: 44 2001:ac0:c880::/44 maxlen: 44 2a0d:59c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7a:02:91:f5:f5:fc:e7:92:0a:db:47:24:d3:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Validity Not Before: Jan 2 02:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=443fa5501e048b7e90c6d23e16238ce8d33f5366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:69:5b:91:2c:09:74:ff:34:72:b7:fa:fe:20: 49:d6:af:36:df:a3:1b:36:96:63:df:c3:e8:8f:19: d6:34:8d:87:83:f9:3e:13:e7:9a:fd:91:d0:b2:0a: 20:7b:2b:85:b0:d5:1d:94:ac:1c:08:de:be:93:6f: 6d:1f:14:88:55:fc:94:77:f6:ef:1b:20:d6:9d:9e: 9a:86:47:06:ce:94:f8:01:0b:e5:05:b0:07:8b:73: 7c:cf:ca:7d:66:99:1c:13:5e:aa:24:3c:32:3a:be: 8c:68:1a:6d:a1:14:c1:6f:a1:be:f1:c4:58:f5:e0: 0c:75:e1:ca:a0:e0:02:62:c2:8d:2d:60:d6:e3:4f: 60:1f:53:34:7d:a5:1d:b3:33:d4:d2:62:23:fd:98: 45:a8:47:81:15:0f:1a:4c:7e:11:26:a5:ae:6b:b0: ec:52:f8:81:7a:1d:02:2b:01:66:6d:3a:48:7f:a9: bc:87:87:21:38:3c:68:f8:97:07:cf:4b:34:45:19: e8:b1:ac:02:75:63:3b:09:7d:6b:0b:a8:21:1f:10: 8e:e7:df:75:4d:2f:d7:85:27:24:06:fb:6a:02:da: ec:e5:a0:44:d1:15:c8:17:d8:00:a0:d5:bc:d3:66: 4e:ee:0c:28:7d:28:f4:1c:ca:7f:45:bc:69:3b:a6: e4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3F:A5:50:1E:04:8B:7E:90:C6:D2:3E:16:23:8C:E8:D3:3F:53:66 X509v3 Authority Key Identifier: keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/RD-lUB4Ei36QxtI-FiOM6NM_U2Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.72.104.0/21 84.18.0.0/19 92.60.160.0/20 176.98.220.0/22 185.66.60.0/22 185.145.224.0/22 185.155.64.0/22 185.173.44.0/22 185.187.180.0/22 185.224.76.0/22 193.34.240.0/22 195.5.64.0/19 212.49.128.0/18 212.66.161.0-212.66.191.255 212.163.0.0/16 213.9.128.0/17 213.192.192.0/18 IPv6: 2001:ac0::/29 2a0d:59c0::/29 Signature Algorithm: sha256WithRSAEncryption ba:ac:b3:58:6c:fe:0d:61:b7:28:ed:01:d6:ea:fc:f8:d4:72: c0:64:f5:cf:3a:d4:b2:74:80:d6:39:15:a9:7c:57:3c:04:c2: 98:f2:8a:41:2d:57:c5:53:5f:16:3d:e8:66:27:d0:59:df:e8: b1:3a:0c:9d:56:bd:52:6a:b9:0e:98:bc:cb:fc:43:37:9b:50: 36:a3:75:b3:14:24:c1:fd:3b:00:58:da:7d:52:82:7d:e9:f6: 4d:ce:db:7a:d2:30:78:7d:b2:87:f1:b1:b9:13:eb:54:b4:ff: 8d:68:b3:44:17:47:04:bd:14:41:0d:fa:42:43:1e:52:d3:bf: 37:73:dd:ce:96:ec:35:ba:ef:25:9e:a3:5f:06:66:98:be:d6: 1f:72:89:05:2e:bb:a6:b2:20:cd:86:d5:21:f7:87:4a:50:6b: 6f:ab:f1:b7:3e:ce:bf:ab:48:ea:7c:4a:64:1a:ae:84:6d:30: 87:a9:d4:3f:9c:a7:c7:83:b7:28:92:26:08:ed:4e:16:e1:1e: ad:6f:89:7b:c7:ce:37:d8:1f:15:c4:12:63:53:e6:fa:de:03: 81:48:5f:79:53:a8:c2:3d:d6:ef:7a:75:cc:21:93:0b:36:1b: b8:34:a4:a1:50:ef:57:20:32:ab:77:82:c7:64:f9:60:db:55: 70:3b:00:bb -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgISAZt8gHoCkfX1/OeSCttHJNMSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx ZDA5OWIwHhcNMjYwMTAyMDIxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDNmYTU1MDFlMDQ4YjdlOTBjNmQyM2UxNjIzOGNlOGQzM2Y1MzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GlbkSwJdP80crf6/iBJ1q8236Mb NpZj38PojxnWNI2Hg/k+E+ea/ZHQsgogeyuFsNUdlKwcCN6+k29tHxSIVfyUd/bv GyDWnZ6ahkcGzpT4AQvlBbAHi3N8z8p9ZpkcE16qJDwyOr6MaBptoRTBb6G+8cRY 9eAMdeHKoOACYsKNLWDW409gH1M0faUdszPU0mIj/ZhFqEeBFQ8aTH4RJqWua7Ds UviBeh0CKwFmbTpIf6m8h4chODxo+JcHz0s0RRnosawCdWM7CX1rC6ghHxCO5991 TS/XhSckBvtqAtrs5aBE0RXIF9gAoNW802ZO7gwofSj0HMp/RbxpO6bkQwIDAQAB o4ICiTCCAoUwHQYDVR0OBBYEFEQ/pVAeBIt+kMbSPhYjjOjTP1NmMB8GA1UdIwQY MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt Mjc0NzNjYTYxMmRlLzEvUkQtbFVCNEVpMzZReHRJLUZpT002Tk1fVTJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGeBggrBgEFBQcBBwEB/wSBjjCBizBzBAIAATBtAwQDTUho AwQFVBIAAwQEXDygAwQCsGLcAwQCuUI8AwQCuZHgAwQCuZtAAwQCua0sAwQCubu0 AwQCueBMAwQCwSLwAwQFwwVAAwQG1DGAMAwDBADUQqEDBAbUQoADAwDUowMEB9UJ gAMEBtXAwDAUBAIAAjAOAwUDIAEKwAMFAyoNWcAwDQYJKoZIhvcNAQELBQADggEB ALqss1hs/g1htyjtAdbq/PjUcsBk9c861LJ0gNY5Fal8VzwEwpjyikEtV8VTXxY9 6GYn0Fnf6LE6DJ1WvVJquQ6YvMv8QzebUDajdbMUJMH9OwBY2n1Sgn3p9k3O23rS MHh9sofxsbkT61S0/41os0QXRwS9FEEN+kJDHlLTvzdz3c6W7DW67yWeo18GZpi+ 1h9yiQUuu6ayIM2G1SH3h0pQa2+r8bc+zr+rSOp8SmQaroRtMIep1D+cp8eDtyiS JgjtThbhHq1viXvHzjfYHxXEEmNT5vreA4FIX3lTqMI91u96dcwhkws2G7g0pKFQ 71cgMqt3gsdk+WDbVXA7ALs= -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:32 2026 by rpki-client