This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/0pS0ka-H_pjf8zmsDhi1S6g_SD0.roa File: 0pS0ka-H_pjf8zmsDhi1S6g_SD0.roa (raw, json) Hash identifier: 3pwjPiGqhzZ7Y/680vy9pG+yzhMOL9IwvcISv966MT0= Subject key identifier: D2:94:B4:91:AF:87:FE:98:DF:F3:39:AC:0E:18:B5:4B:A8:3F:48:3D Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 019B7A5B126C491E58D8BC2D18C0959A7D55 Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/0pS0ka-H_pjf8zmsDhi1S6g_SD0.roa Signing time: Thu 01 Jan 2026 16:19:07 +0000 ROA not before: Thu 01 Jan 2026 16:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3301 IP address blocks: 79.170.16.0/24 maxlen: 24 79.170.17.0/24 maxlen: 24 79.170.18.0/24 maxlen: 24 79.170.19.0/24 maxlen: 24 79.170.20.0/24 maxlen: 24 79.170.21.0/24 maxlen: 24 79.170.22.0/24 maxlen: 24 79.170.23.0/24 maxlen: 24 153.112.132.0/24 maxlen: 24 153.112.133.0/24 maxlen: 24 153.112.134.0/24 maxlen: 24 153.112.135.0/24 maxlen: 24 153.112.139.0/24 maxlen: 24 153.112.149.0/24 maxlen: 24 153.112.150.0/24 maxlen: 24 153.112.151.0/24 maxlen: 24 153.112.160.0/24 maxlen: 24 153.112.161.0/24 maxlen: 24 153.112.162.0/24 maxlen: 24 153.112.163.0/24 maxlen: 24 153.112.164.0/24 maxlen: 24 153.112.165.0/24 maxlen: 24 153.112.166.0/24 maxlen: 24 153.112.167.0/24 maxlen: 24 153.112.173.0/24 maxlen: 24 153.112.176.0/24 maxlen: 24 153.112.177.0/24 maxlen: 24 153.112.178.0/24 maxlen: 24 153.112.179.0/24 maxlen: 24 153.112.180.0/24 maxlen: 24 153.112.181.0/24 maxlen: 24 153.112.182.0/24 maxlen: 24 153.112.183.0/24 maxlen: 24 153.112.184.0/24 maxlen: 24 153.112.185.0/24 maxlen: 24 153.112.186.0/24 maxlen: 24 153.112.187.0/24 maxlen: 24 153.112.188.0/24 maxlen: 24 153.112.189.0/24 maxlen: 24 153.112.190.0/24 maxlen: 24 153.112.191.0/24 maxlen: 24 153.112.208.0/24 maxlen: 24 153.112.209.0/24 maxlen: 24 153.112.240.0/24 maxlen: 24 153.112.241.0/24 maxlen: 24 192.138.109.0/24 maxlen: 24 192.138.110.0/24 maxlen: 24 192.138.111.0/24 maxlen: 24 192.138.116.0/24 maxlen: 24 192.138.117.0/24 maxlen: 24 192.157.8.0/24 maxlen: 24 192.157.9.0/24 maxlen: 24 192.157.10.0/24 maxlen: 24 192.157.11.0/24 maxlen: 24 2a02:f784:20::/48 maxlen: 48 2a02:f784:30::/48 maxlen: 48 2a02:f784:8000::/48 maxlen: 48 2a02:f784:8001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:12:6c:49:1e:58:d8:bc:2d:18:c0:95:9a:7d:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: Jan 1 16:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d294b491af87fe98dff339ac0e18b54ba83f483d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:81:0d:72:52:92:d5:47:21:91:ba:b9:18:1d: 51:41:83:e3:3d:13:24:f0:d7:7b:bf:80:3b:93:6f: e8:b0:f1:4d:27:7d:2f:4c:23:fe:87:5b:92:ef:8b: 9f:23:d1:96:61:5a:5c:ad:41:3a:55:67:45:23:1c: 79:86:39:1f:cd:45:50:9c:cc:85:9d:9a:8c:d6:bd: 94:0d:24:ec:61:0d:ec:be:02:af:e0:83:ed:b0:67: 66:b6:dc:c9:3a:57:6c:1a:d4:e5:9c:fc:0b:ad:40: 6c:75:23:6c:cb:18:e1:c7:c8:d0:8b:78:1a:35:dc: 51:cd:2c:1c:15:15:3d:65:14:f1:6e:42:2c:51:36: 4a:e1:5a:62:20:6b:97:ce:07:42:5c:e6:8b:78:db: a7:c3:2e:a0:c5:71:e0:64:14:2a:62:12:3d:35:fe: 7a:e5:7e:83:6b:20:43:83:91:07:06:6a:96:5b:5b: 74:51:04:4e:49:f0:61:f1:5f:9a:47:8c:aa:d8:de: 8e:34:a1:66:6d:98:d0:3c:23:9a:f0:d0:fe:d2:e5: b5:1f:53:e3:00:fd:37:8e:b8:85:73:a1:a6:19:2e: 9c:c9:8e:58:da:28:09:49:5d:4c:ff:3d:bb:f5:f2: a6:1e:a7:57:75:a5:00:74:dd:12:fd:4d:ac:c1:0e: 32:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:94:B4:91:AF:87:FE:98:DF:F3:39:AC:0E:18:B5:4B:A8:3F:48:3D X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/0pS0ka-H_pjf8zmsDhi1S6g_SD0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.170.16.0/21 153.112.132.0/22 153.112.139.0/24 153.112.149.0-153.112.151.255 153.112.160.0/21 153.112.173.0/24 153.112.176.0/20 153.112.208.0/23 153.112.240.0/23 192.138.109.0-192.138.111.255 192.138.116.0/23 192.157.8.0/22 IPv6: 2a02:f784:20::/48 2a02:f784:30::/48 2a02:f784:8000::/47 Signature Algorithm: sha256WithRSAEncryption 23:fb:a2:68:76:27:8e:75:07:5b:c6:9f:77:b1:eb:89:b0:32: 68:a8:90:21:d2:a7:10:5a:ad:9d:31:46:b7:fe:2f:41:17:e2: d7:9f:85:3b:e1:37:28:3c:ee:06:84:e5:bb:d5:53:5e:48:e6: 7f:b8:ca:97:28:50:14:bc:aa:b0:9f:34:27:6e:a2:a2:34:d7: d0:1d:f2:f1:87:ba:f3:3f:8c:d8:03:d8:c1:49:05:10:c1:9b: e7:95:05:7d:36:a2:65:67:19:fc:b8:ae:24:0b:7e:f1:de:ad: d6:0b:34:63:bc:04:00:ca:34:0b:d5:ea:f2:a2:9c:cf:ba:ff: 09:fd:0c:e3:89:ea:8e:61:8c:b2:ee:83:77:b2:14:de:f1:60: 3a:50:e1:c9:97:83:3a:d1:df:37:20:f5:0a:55:31:a1:b5:60: 0b:d5:4e:ef:37:a4:33:63:16:25:cd:92:cc:28:73:54:42:96: 22:8a:53:27:39:59:2a:ee:96:28:44:fd:bb:f0:63:95:e2:c9: 15:fd:14:99:bf:85:e3:3d:78:f0:99:b2:62:4d:f1:4f:d9:23: 38:f4:93:9d:7a:5f:24:cd:7a:76:b3:bb:df:72:e6:08:62:b0: ec:db:cc:a5:e6:89:4d:92:83:ce:aa:8c:ad:dd:8c:51:44:24: 7c:45:f9:e6 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgISAZt6WxJsSR5Y2LwtGMCVmn1VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjYwMTAxMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjk0YjQ5MWFmODdmZTk4ZGZmMzM5YWMwZTE4YjU0YmE4M2Y0ODNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYENclKS1Uchkbq5GB1RQYPjPRMk 8Nd7v4A7k2/osPFNJ30vTCP+h1uS74ufI9GWYVpcrUE6VWdFIxx5hjkfzUVQnMyF nZqM1r2UDSTsYQ3svgKv4IPtsGdmttzJOldsGtTlnPwLrUBsdSNsyxjhx8jQi3ga NdxRzSwcFRU9ZRTxbkIsUTZK4VpiIGuXzgdCXOaLeNunwy6gxXHgZBQqYhI9Nf56 5X6DayBDg5EHBmqWW1t0UQROSfBh8V+aR4yq2N6ONKFmbZjQPCOa8ND+0uW1H1Pj AP03jriFc6GmGS6cyY5Y2igJSV1M/z279fKmHqdXdaUAdN0S/U2swQ4yMQIDAQAB o4ICgTCCAn0wHQYDVR0OBBYEFNKUtJGvh/6Y3/M5rA4YtUuoP0g9MB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvMHBTMGthLUhfcGpmOHptc0RoaTFTNmdfU0QwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzBeBAIAATBYAwQDT6oQ AwQCmXCEAwQAmXCLMAwDBACZcJUDBAOZcJADBAOZcKADBACZcK0DBASZcLADBAGZ cNADBAGZcPAwDAMEAMCKbQMEBMCKYAMEAcCKdAMEAsCdCDAhBAIAAjAbAwcAKgL3 hAAgAwcAKgL3hAAwAwcBKgL3hIAAMA0GCSqGSIb3DQEBCwUAA4IBAQAj+6JodieO dQdbxp93seuJsDJoqJAh0qcQWq2dMUa3/i9BF+LXn4U74TcoPO4GhOW71VNeSOZ/ uMqXKFAUvKqwnzQnbqKiNNfQHfLxh7rzP4zYA9jBSQUQwZvnlQV9NqJlZxn8uK4k C37x3q3WCzRjvAQAyjQL1eryopzPuv8J/QzjieqOYYyy7oN3shTe8WA6UOHJl4M6 0d83IPUKVTGhtWAL1U7vN6QzYxYlzZLMKHNUQpYiilMnOVkq7pYoRP278GOV4skV /RSZv4XjPXjwmbJiTfFP2SM49JOdel8kzXp2s7vfcuYIYrDs28yl5olNkoPOqoyt 3YxRRCR8Rfnm -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:58 2026 by rpki-client