This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/R0oaDs1XodJ5RSlUz4BeMp-Mmk0.roa File: R0oaDs1XodJ5RSlUz4BeMp-Mmk0.roa (raw, json) Hash identifier: WiHznDgeNFVdBotry4lRjoNnlHBhTRyd+7kSNIzXWog= Subject key identifier: 47:4A:1A:0E:CD:57:A1:D2:79:45:29:54:CF:80:5E:32:9F:8C:9A:4D Certificate issuer: /CN=c1d710d8ac31b1f6daf7046c45374ae8e405f18e Certificate serial: 019B7910DD22CFA2F20F212AE11F3EF2B07D Authority key identifier: C1:D7:10:D8:AC:31:B1:F6:DA:F7:04:6C:45:37:4A:E8:E4:05:F1:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/R0oaDs1XodJ5RSlUz4BeMp-Mmk0.roa Signing time: Thu 01 Jan 2026 10:18:26 +0000 ROA not before: Thu 01 Jan 2026 10:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3249 IP address blocks: 37.157.64.0/18 maxlen: 18 46.131.0.0/16 maxlen: 16 62.65.32.0/19 maxlen: 19 78.110.36.0/22 maxlen: 22 78.110.40.0/22 maxlen: 22 80.235.0.0/17 maxlen: 17 81.20.144.0/20 maxlen: 20 83.166.32.0/19 maxlen: 19 84.50.0.0/16 maxlen: 16 85.29.192.0/18 maxlen: 18 88.196.0.0/16 maxlen: 16 89.221.64.0/21 maxlen: 21 90.190.0.0/15 maxlen: 15 91.236.222.0/24 maxlen: 24 94.246.192.0/20 maxlen: 20 94.246.208.0/21 maxlen: 21 176.46.0.0/17 maxlen: 17 185.20.56.0/22 maxlen: 22 185.40.236.0/22 maxlen: 22 185.43.104.0/22 maxlen: 22 194.106.96.0/19 maxlen: 19 194.126.96.0/19 maxlen: 19 195.50.192.0/19 maxlen: 19 195.50.224.0/19 maxlen: 19 195.250.160.0/19 maxlen: 19 213.35.128.0/17 maxlen: 17 213.168.0.0/19 maxlen: 19 213.180.0.0/19 maxlen: 19 213.219.64.0/18 maxlen: 18 217.71.32.0/20 maxlen: 20 217.159.128.0/17 maxlen: 17 2001:7d0::/32 maxlen: 32 2a00:16e0::/32 maxlen: 32 2a01:158::/32 maxlen: 32 2a01:6da0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:dd:22:cf:a2:f2:0f:21:2a:e1:1f:3e:f2:b0:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1d710d8ac31b1f6daf7046c45374ae8e405f18e Validity Not Before: Jan 1 10:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=474a1a0ecd57a1d279452954cf805e329f8c9a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:fa:0a:51:15:45:74:94:ea:d0:04:5e:80:63: 44:fb:98:28:bd:c6:ea:73:d1:3a:0f:49:ab:63:0e: 13:b5:89:4d:c2:89:0a:96:5b:63:c5:01:83:7e:a4: 21:54:c9:4c:b9:24:5f:68:78:f8:58:4f:7d:d3:14: 47:91:50:dd:34:c0:6d:c2:8e:c2:41:08:b8:6f:b4: 76:23:d2:7c:86:21:67:53:66:8f:67:af:74:b0:a9: 43:a8:95:5b:e6:1c:2a:f2:aa:82:08:c7:c0:21:31: bf:cf:59:e8:95:55:83:0c:14:69:0f:82:cd:dc:fc: 62:04:b4:26:8d:92:e1:3f:8f:db:84:6f:f7:3e:18: 48:ae:c6:d6:0a:83:aa:1a:73:89:13:98:f9:4a:d2: e2:bc:2b:2f:c9:48:65:56:62:a5:df:97:1a:da:da: 9f:86:e9:3c:29:c9:0e:89:a2:48:93:a3:9e:81:05: da:07:03:3a:81:0b:60:28:7f:89:da:e7:73:88:da: cb:c3:b5:d3:a0:a1:52:e4:f8:37:02:f2:b5:69:63: b5:ba:66:53:f6:56:ac:eb:40:c5:32:4a:11:5b:43: c5:1b:40:95:de:fc:c5:3a:04:ea:1c:ab:d8:ec:a9: 57:36:59:69:0e:ae:44:c2:51:fb:7e:e5:4d:68:51: b9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4A:1A:0E:CD:57:A1:D2:79:45:29:54:CF:80:5E:32:9F:8C:9A:4D X509v3 Authority Key Identifier: keyid:C1:D7:10:D8:AC:31:B1:F6:DA:F7:04:6C:45:37:4A:E8:E4:05:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/R0oaDs1XodJ5RSlUz4BeMp-Mmk0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.157.64.0/18 46.131.0.0/16 62.65.32.0/19 78.110.36.0-78.110.43.255 80.235.0.0/17 81.20.144.0/20 83.166.32.0/19 84.50.0.0/16 85.29.192.0/18 88.196.0.0/16 89.221.64.0/21 90.190.0.0/15 91.236.222.0/24 94.246.192.0-94.246.215.255 176.46.0.0/17 185.20.56.0/22 185.40.236.0/22 185.43.104.0/22 194.106.96.0/19 194.126.96.0/19 195.50.192.0/18 195.250.160.0/19 213.35.128.0/17 213.168.0.0/19 213.180.0.0/19 213.219.64.0/18 217.71.32.0/20 217.159.128.0/17 IPv6: 2001:7d0::/32 2a00:16e0::/32 2a01:158::/32 2a01:6da0::/32 Signature Algorithm: sha256WithRSAEncryption 19:e7:10:b6:52:2f:62:be:d4:a1:b8:ba:b7:4d:49:02:88:41: 80:f0:b9:95:f3:04:38:a2:a3:ad:26:ea:5e:49:1e:e5:ad:ed: de:e9:5f:b4:22:71:4b:91:b3:ef:75:1d:84:44:ba:ed:fd:4c: 0c:67:b0:e9:e8:a6:26:cf:fd:4f:19:2b:0b:03:c3:db:7c:a6: f3:14:92:5d:b8:3e:d9:72:1d:9f:a7:75:d1:4b:5d:8d:d1:63: a1:4f:c3:bd:07:b7:65:a2:f5:67:5f:bd:0c:6c:28:5c:83:85: 63:de:66:80:7c:43:4c:ce:f4:d0:1f:45:66:2f:bc:7b:bf:bd: 87:69:98:3e:60:d2:f1:1d:e9:23:2c:77:cf:50:7e:47:1e:1f: 1d:73:e2:ad:22:07:73:fa:62:73:23:11:3b:ff:89:21:2b:34: 62:92:0c:3b:58:d9:bf:99:62:89:42:2b:4a:26:a5:35:3b:b2: d2:e7:53:1b:42:6a:4c:ed:7b:64:71:5a:80:00:e4:0d:39:83: a8:55:aa:88:fe:0b:f1:c5:c6:e3:d1:46:d0:83:80:df:47:7a: 58:e9:33:0c:79:52:15:2e:fd:79:b2:f1:39:6a:e6:a6:13:cc: 17:30:6a:f5:e7:7f:8f:76:ea:42:99:86:cc:19:92:24:ee:fc: 6c:ef:6b:b0 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgISAZt5EN0iz6LyDyEq4R8+8rB9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZDcxMGQ4YWMzMWIxZjZkYWY3MDQ2YzQ1Mzc0YWU4ZTQw NWYxOGUwHhcNMjYwMTAxMTAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzRhMWEwZWNkNTdhMWQyNzk0NTI5NTRjZjgwNWUzMjlmOGM5YTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7voKURVFdJTq0ARegGNE+5govcbq c9E6D0mrYw4TtYlNwokKlltjxQGDfqQhVMlMuSRfaHj4WE990xRHkVDdNMBtwo7C QQi4b7R2I9J8hiFnU2aPZ690sKlDqJVb5hwq8qqCCMfAITG/z1nolVWDDBRpD4LN 3PxiBLQmjZLhP4/bhG/3PhhIrsbWCoOqGnOJE5j5StLivCsvyUhlVmKl35ca2tqf huk8KckOiaJIk6OegQXaBwM6gQtgKH+J2udziNrLw7XToKFS5Pg3AvK1aWO1umZT 9las60DFMkoRW0PFG0CV3vzFOgTqHKvY7KlXNllpDq5EwlH7fuVNaFG5lwIDAQAB o4IC4DCCAtwwHQYDVR0OBBYEFEdKGg7NV6HSeUUpVM+AXjKfjJpNMB8GA1UdIwQY MBaAFMHXENisMbH22vcEbEU3SujkBfGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2RjUTJLd3hzZmJhOXdSc1JUZEs2T1FGOFk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kYjMzMDMtNzg3OS00YjY5LTg4NDgt MTE1ZjE1YjIwZGU3LzEvUjBvYURzMVhvZEo1UlNsVXo0QmVNcC1NbWswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9kYjMzMDMtNzg3OS00YjY5LTg4NDgtMTE1ZjE1YjIwZGU3 LzEvd2RjUTJLd3hzZmJhOXdSc1JUZEs2T1FGOFk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH1BggrBgEFBQcBBwEB/wSB5TCB4jCBuwQCAAEwgbQDBAYl nUADAwAugwMEBT5BIDAMAwQCTm4kAwQCTm4oAwQHUOsAAwQEURSQAwQFU6YgAwMA VDIDBAZVHcADAwBYxAMEA1ndQAMDAVq+AwQAW+zeMAwDBAZe9sADBANe9tADBAew LgADBAK5FDgDBAK5KOwDBAK5K2gDBAXCamADBAXCfmADBAbDMsADBAXD+qADBAfV I4ADBAXVqAADBAXVtAADBAbV20ADBATZRyADBAfZn4AwIgQCAAIwHAMFACABB9AD BQAqABbgAwUAKgEBWAMFACoBbaAwDQYJKoZIhvcNAQELBQADggEBABnnELZSL2K+ 1KG4urdNSQKIQYDwuZXzBDiio60m6l5JHuWt7d7pX7QicUuRs+91HYREuu39TAxn sOnopibP/U8ZKwsDw9t8pvMUkl24PtlyHZ+nddFLXY3RY6FPw70Ht2Wi9WdfvQxs KFyDhWPeZoB8Q0zO9NAfRWYvvHu/vYdpmD5g0vEd6SMsd89QfkceHx1z4q0iB3P6 YnMjETv/iSErNGKSDDtY2b+ZYolCK0ompTU7stLnUxtCakzte2RxWoAA5A05g6hV qoj+C/HFxuPRRtCDgN9HeljpMwx5UhUu/Xmy8Tlq5qYTzBcwavXnf4926kKZhswZ kiTu/Gzva7A= -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:19 2026 by rpki-client