This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/cIdkjRc0JvHWTaaO3mTRRgEBkoU.roa File: cIdkjRc0JvHWTaaO3mTRRgEBkoU.roa (raw, json) Hash identifier: ptn5S1Yuf3bTojyRJRd81I1o+BdvHo6hZHXrG2ciiWg= Subject key identifier: 70:87:64:8D:17:34:26:F1:D6:4D:A6:8E:DE:64:D1:46:01:01:92:85 Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b Certificate serial: 019B79104EA3B4D84D1969AA4494214F420B Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/cIdkjRc0JvHWTaaO3mTRRgEBkoU.roa Signing time: Thu 01 Jan 2026 10:17:50 +0000 ROA not before: Thu 01 Jan 2026 10:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5504 IP address blocks: 82.114.32.0/19 maxlen: 22 82.114.51.0/24 maxlen: 24 194.30.128.0/23 maxlen: 23 194.30.130.0/24 maxlen: 24 194.30.131.0/24 maxlen: 24 194.30.132.0/23 maxlen: 23 194.30.134.0/24 maxlen: 24 194.30.135.0/24 maxlen: 24 194.30.136.0/22 maxlen: 22 194.30.140.0/23 maxlen: 23 194.30.143.0/24 maxlen: 24 194.30.144.0/23 maxlen: 23 194.30.146.0/23 maxlen: 23 194.30.148.0/22 maxlen: 22 194.30.152.0/23 maxlen: 23 194.30.154.0/23 maxlen: 23 194.30.156.0/23 maxlen: 23 213.169.128.0/20 maxlen: 20 213.169.128.0/21 maxlen: 24 213.169.136.0/22 maxlen: 24 213.169.140.0/22 maxlen: 22 213.169.144.0/22 maxlen: 22 213.169.152.0/23 maxlen: 23 213.169.157.0/24 maxlen: 24 213.169.158.0/23 maxlen: 23 2a01:6700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:4e:a3:b4:d8:4d:19:69:aa:44:94:21:4f:42:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b Validity Not Before: Jan 1 10:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7087648d173426f1d64da68ede64d14601019285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:89:66:2a:71:ce:64:97:ce:14:f5:2c:08:11: eb:86:52:b8:76:37:99:0a:db:68:3d:fc:74:0a:b3: b4:cd:33:d4:60:60:f3:03:de:c8:c9:10:a5:70:63: a1:94:b2:c1:a8:11:57:50:35:7a:d5:83:2d:29:7f: 32:b8:e5:2f:49:60:ea:a6:42:a2:35:f3:2a:4f:04: e4:50:40:7c:7d:af:75:7d:45:70:bb:fa:14:ed:78: 78:d6:f8:c1:20:99:86:c7:8c:da:f9:9e:b0:b4:9c: be:67:17:cb:fc:58:a0:f5:1b:1a:ef:2f:a6:83:dc: 79:5f:5c:5e:8a:5d:80:6a:57:7b:72:3c:03:c8:1c: 6a:2b:75:24:27:4e:d7:58:5b:fe:52:a8:20:11:15: f3:65:a2:5c:ff:0f:d2:9c:e6:b6:ad:d0:c3:66:4e: 03:1b:e4:0c:48:0b:7b:df:7e:db:0a:b8:b1:28:27: 86:9a:ea:e9:d4:d9:5d:ef:3b:28:dc:33:fd:a6:83: a2:7d:02:68:db:b8:20:1f:b9:e7:97:26:e2:4b:e9: 58:19:d1:6e:97:6f:f6:4c:3b:00:4f:6a:98:b7:6c: e3:0d:1e:ca:6d:c8:cd:62:45:bb:73:96:53:72:58: 9d:32:fb:4a:b1:ae:66:d2:96:3c:0b:9e:42:96:70: 83:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:87:64:8D:17:34:26:F1:D6:4D:A6:8E:DE:64:D1:46:01:01:92:85 X509v3 Authority Key Identifier: keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/cIdkjRc0JvHWTaaO3mTRRgEBkoU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.114.32.0/19 194.30.128.0-194.30.141.255 194.30.143.0-194.30.157.255 213.169.128.0-213.169.147.255 213.169.152.0/23 213.169.157.0-213.169.159.255 IPv6: 2a01:6700::/32 Signature Algorithm: sha256WithRSAEncryption c0:a7:01:24:a7:6c:fd:63:dc:3f:b8:5f:6d:f4:ad:0d:07:32: 8d:3f:89:94:a3:29:bd:d5:c0:94:fd:38:2b:01:f8:22:3a:ba: ea:89:97:6d:38:37:49:c5:ad:b9:19:79:d0:86:4d:26:ae:98: ed:d5:96:8f:c8:57:ed:53:69:e2:70:6b:7f:ae:87:97:f9:11: 98:e4:0e:52:ba:33:e5:44:76:5b:e5:2a:ba:0f:ab:44:c9:0a: 4e:83:0a:ff:5c:0d:1e:bf:05:56:6f:15:7d:e2:5e:4c:b5:47: fc:e5:09:8c:9c:ef:e7:f0:70:36:2b:15:fe:3f:d0:c5:cd:fe: e5:d0:11:7e:6a:e8:38:2c:fb:5e:41:e7:e5:e2:e6:e9:14:c2: 6a:c1:17:11:93:7d:da:ea:15:7e:ee:11:fa:d7:7d:4b:72:dc: ed:67:de:f0:14:a1:d9:22:74:fa:e1:79:c5:15:0e:99:3f:b8: c4:93:bc:00:2c:e4:c2:db:48:23:73:b6:1a:75:ba:d3:c8:26: 9d:33:44:03:1f:ef:a4:fe:61:1a:43:dc:45:54:d1:fd:76:17: c1:49:c4:b3:4a:f1:63:d3:97:f8:de:07:1f:85:a8:3e:52:19: dc:aa:48:8a:85:d0:b7:78:4c:7d:69:83:e5:4b:cd:c0:af:d6: 6f:f9:e1:4a -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgISAZt5EE6jtNhNGWmqRJQhT0ILMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNDQyOTdlOTI3MWM2ZWRmMDY0OTE1ZjYxODBhZTEyNjkw ZGRhOGIwHhcNMjYwMTAxMTAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDg3NjQ4ZDE3MzQyNmYxZDY0ZGE2OGVkZTY0ZDE0NjAxMDE5Mjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYlmKnHOZJfOFPUsCBHrhlK4djeZ CttoPfx0CrO0zTPUYGDzA97IyRClcGOhlLLBqBFXUDV61YMtKX8yuOUvSWDqpkKi NfMqTwTkUEB8fa91fUVwu/oU7Xh41vjBIJmGx4za+Z6wtJy+ZxfL/Fig9Rsa7y+m g9x5X1xeil2Aald7cjwDyBxqK3UkJ07XWFv+UqggERXzZaJc/w/SnOa2rdDDZk4D G+QMSAt7337bCrixKCeGmurp1Nld7zso3DP9poOifQJo27ggH7nnlybiS+lYGdFu l2/2TDsAT2qYt2zjDR7KbcjNYkW7c5ZTclidMvtKsa5m0pY8C55ClnCDjwIDAQAB o4ICVjCCAlIwHQYDVR0OBBYEFHCHZI0XNCbx1k2mjt5k0UYBAZKFMB8GA1UdIwQY MBaAFPxEKX6Sccbt8GSRX2GArhJpDdqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUt YWUwN2YzMmU0MTAyLzEvY0lka2pSYzBKdkhXVGFhTzNtVFJSZ0VCa29VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUtYWUwN2YzMmU0MTAy LzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzBKBAIAATBEAwQFUnIgMAwD BAfCHoADBAHCHowwDAMEAMIejwMEAcIenDAMAwQH1amAAwQC1amQAwQB1amYMAwD BADVqZ0DBAXVqYAwDQQCAAIwBwMFACoBZwAwDQYJKoZIhvcNAQELBQADggEBAMCn ASSnbP1j3D+4X230rQ0HMo0/iZSjKb3VwJT9OCsB+CI6uuqJl204N0nFrbkZedCG TSaumO3Vlo/IV+1TaeJwa3+uh5f5EZjkDlK6M+VEdlvlKroPq0TJCk6DCv9cDR6/ BVZvFX3iXky1R/zlCYyc7+fwcDYrFf4/0MXN/uXQEX5q6Dgs+15B5+Xi5ukUwmrB FxGTfdrqFX7uEfrXfUty3O1n3vAUodkidPrhecUVDpk/uMSTvAAs5MLbSCNzthp1 utPIJp0zRAMf76T+YRpD3EVU0f12F8FJxLNK8WPTl/jeBx+FqD5SGdyqSIqF0Ld4 TH1pg+VLzcCv1m/54Uo= -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:03 2026 by rpki-client