This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/kTugKPhITaFf7mp5fWR7-aOXrkA.roa File: kTugKPhITaFf7mp5fWR7-aOXrkA.roa (raw, json) Hash identifier: l8CrwZojfPB1M451vPNdWXygjwRLShCLXOaRpDMLsjE= Subject key identifier: 91:3B:A0:28:F8:48:4D:A1:5F:EE:6A:79:7D:64:7B:F9:A3:97:AE:40 Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Certificate serial: 019B7A5B691CB45B69B3C500387EA09C741A Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/kTugKPhITaFf7mp5fWR7-aOXrkA.roa Signing time: Thu 01 Jan 2026 16:19:29 +0000 ROA not before: Thu 01 Jan 2026 16:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21286 IP address blocks: 80.79.96.0/20 maxlen: 20 145.13.0.0/16 maxlen: 16 145.222.0.0/16 maxlen: 16 192.33.235.0/24 maxlen: 24 192.33.238.0/24 maxlen: 24 192.33.239.0/24 maxlen: 24 192.35.133.0/24 maxlen: 24 192.58.226.0/24 maxlen: 24 192.58.227.0/24 maxlen: 24 192.58.228.0/24 maxlen: 24 192.101.111.0/24 maxlen: 24 192.101.112.0/24 maxlen: 24 192.101.113.0/24 maxlen: 24 193.202.32.0/23 maxlen: 23 194.104.32.0/24 maxlen: 24 194.104.59.0/24 maxlen: 24 199.88.208.0/24 maxlen: 24 199.88.209.0/24 maxlen: 24 2a02:2b50:ffff::/48 maxlen: 48 2a03:4800::/40 maxlen: 40 2a03:4800:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:69:1c:b4:5b:69:b3:c5:00:38:7e:a0:9c:74:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Validity Not Before: Jan 1 16:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=913ba028f8484da15fee6a797d647bf9a397ae40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:73:1a:ad:ee:fa:de:e2:1d:23:fe:5f:bb:d5: a0:23:52:48:f7:0f:c7:31:eb:9e:f1:41:c1:18:49: 4d:53:43:c0:e6:c4:37:90:fb:73:bb:a5:27:be:70: e9:b6:fe:4e:35:cb:c1:48:72:47:83:ad:19:a6:e6: 1c:b6:4b:5c:cf:00:0c:b0:6f:3e:7b:bd:5a:20:b2: f7:b6:81:6e:b2:69:e4:81:85:91:1e:e3:c5:5b:da: 33:22:24:70:48:bc:96:58:92:34:fd:2d:49:63:5f: 9e:f0:5f:75:ad:1e:c6:2c:52:67:2e:ac:2d:75:05: cc:5c:28:1d:5b:9c:73:ba:83:ac:b8:c7:0e:ae:2d: 27:6c:ec:d9:31:ae:cd:d8:c2:a4:62:93:ae:37:6b: 1b:6c:8e:f8:71:49:a8:6f:75:fd:40:82:e7:c1:b9: 6b:dd:93:75:df:4a:6e:29:28:6d:dd:45:5b:7a:20: f0:9b:ff:4f:4c:c7:06:93:6e:74:69:64:d1:d1:1c: 25:75:1f:3c:51:2d:a6:d0:19:d5:e6:4a:b1:b0:ee: b7:7b:50:fa:5a:9f:0e:dc:97:0e:0f:91:89:9e:ba: 5f:13:63:f0:69:12:25:02:43:c7:7e:8f:eb:84:c1: 0d:7b:55:08:ee:23:e0:13:f5:0a:94:a4:9a:7e:d3: 1a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3B:A0:28:F8:48:4D:A1:5F:EE:6A:79:7D:64:7B:F9:A3:97:AE:40 X509v3 Authority Key Identifier: keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/kTugKPhITaFf7mp5fWR7-aOXrkA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.79.96.0/20 145.13.0.0/16 145.222.0.0/16 192.33.235.0/24 192.33.238.0/23 192.35.133.0/24 192.58.226.0-192.58.228.255 192.101.111.0-192.101.113.255 193.202.32.0/23 194.104.32.0/24 194.104.59.0/24 199.88.208.0/23 IPv6: 2a02:2b50:ffff::/48 2a03:4800::/39 Signature Algorithm: sha256WithRSAEncryption 39:ae:c3:f0:c2:f7:12:b2:99:d5:97:ac:c3:c6:ba:21:d4:ec: a5:4e:06:4e:7d:8e:71:2e:aa:cd:78:85:57:c6:db:d3:47:f8: ee:0f:38:20:eb:d3:76:0e:4e:77:6c:43:e7:c8:22:e4:9e:ca: d1:08:ea:67:84:42:92:c3:4c:c3:de:c8:be:86:de:2c:e9:e0: 2a:d5:af:cc:71:4e:b9:d6:c8:33:d2:12:ce:d4:c9:1d:cf:52: 62:c2:82:93:2e:37:ed:7d:1e:9b:ed:d9:d4:4f:77:95:b2:6c: fd:fd:80:37:9c:89:d4:f5:33:ff:75:44:46:78:51:21:e7:89: 9a:19:d0:64:6b:01:0b:ea:f0:b6:92:6c:4e:2f:b1:17:04:c9: 06:6e:bd:40:98:3c:f7:a1:2e:bf:54:11:ef:95:92:43:8a:d4: 49:ac:25:18:f3:0a:25:1d:b2:aa:34:60:e0:9b:45:f0:ae:00: 25:f0:b4:e3:b5:c1:e0:d2:2c:54:8b:75:41:10:9e:85:dc:74: 91:07:d0:12:43:b4:68:41:62:b5:e3:c1:8c:ab:b6:97:fe:46: 12:0e:7a:45:07:1b:f9:43:c7:1a:2b:a8:35:ad:f9:11:a3:63: 26:b4:f5:da:53:83:c5:48:86:4e:4f:a2:f0:b4:83:06:13:75: 24:1c:05:0d -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgISAZt6W2kctFtps8UAOH6gnHQaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOTgwNjBmMWJmMjJmMDk5OWNiMDcxYjFiNDI2OTZkYmM0 M2UxMGMwHhcNMjYwMTAxMTYxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTNiYTAyOGY4NDg0ZGExNWZlZTZhNzk3ZDY0N2JmOWEzOTdhZTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HMare763uIdI/5fu9WgI1JI9w/H Meue8UHBGElNU0PA5sQ3kPtzu6UnvnDptv5ONcvBSHJHg60ZpuYctktczwAMsG8+ e71aILL3toFusmnkgYWRHuPFW9ozIiRwSLyWWJI0/S1JY1+e8F91rR7GLFJnLqwt dQXMXCgdW5xzuoOsuMcOri0nbOzZMa7N2MKkYpOuN2sbbI74cUmob3X9QILnwblr 3ZN130puKSht3UVbeiDwm/9PTMcGk250aWTR0RwldR88US2m0BnV5kqxsO63e1D6 Wp8O3JcOD5GJnrpfE2PwaRIlAkPHfo/rhMENe1UI7iPgE/UKlKSaftMa7QIDAQAB o4ICczCCAm8wHQYDVR0OBBYEFJE7oCj4SE2hX+5qeX1ke/mjl65AMB8GA1UdIwQY MBaAFMOYBg8b8i8JmcsHGxtCaW28Q+EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAt YzkyN2I4YzJjN2M0LzEva1R1Z0tQaElUYUZmN21wNWZXUjctYU9YcmtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAtYzkyN2I4YzJjN2M0 LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGIBggrBgEFBQcBBwEB/wR5MHcwXAQCAAEwVgMEBFBPYAMD AJENAwMAkd4DBADAIesDBAHAIe4DBADAI4UwDAMEAcA64gMEAMA65DAMAwQAwGVv AwQBwGVwAwQBwcogAwQAwmggAwQAwmg7AwQBx1jQMBcEAgACMBEDBwAqAitQ//8D BgEqA0gAADANBgkqhkiG9w0BAQsFAAOCAQEAOa7D8ML3ErKZ1Zesw8a6IdTspU4G Tn2OcS6qzXiFV8bb00f47g84IOvTdg5Od2xD58gi5J7K0QjqZ4RCksNMw97Ivobe LOngKtWvzHFOudbIM9ISztTJHc9SYsKCky437X0em+3Z1E93lbJs/f2AN5yJ1PUz /3VERnhRIeeJmhnQZGsBC+rwtpJsTi+xFwTJBm69QJg896Euv1QR75WSQ4rUSawl GPMKJR2yqjRg4JtF8K4AJfC047XB4NIsVIt1QRCehdx0kQfQEkO0aEFitePBjKu2 l/5GEg56RQcb+UPHGiuoNa35EaNjJrT12lODxUiGTk+i8LSDBhN1JBwFDQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:13 2026 by rpki-client