This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/fKoGmparJHlozAcZTA3yAU4ZJcg.roa File: fKoGmparJHlozAcZTA3yAU4ZJcg.roa (raw, json) Hash identifier: 60cR3HY+vUpddXNenTUdu1Z2bcSowrKZj1dsz2XqYPY= Subject key identifier: 7C:AA:06:9A:96:AB:24:79:68:CC:07:19:4C:0D:F2:01:4E:19:25:C8 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019B76EB0CAEDCA2FAE2EEA63393190DD51D Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/fKoGmparJHlozAcZTA3yAU4ZJcg.roa Signing time: Thu 01 Jan 2026 00:17:54 +0000 ROA not before: Thu 01 Jan 2026 00:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62235 IP address blocks: 5.183.56.0/22 maxlen: 24 5.183.56.0/23 maxlen: 24 5.183.58.0/23 maxlen: 24 37.156.76.0/22 maxlen: 24 37.156.108.0/22 maxlen: 24 37.156.108.0/23 maxlen: 24 37.156.110.0/23 maxlen: 24 45.14.204.0/22 maxlen: 24 45.14.204.0/23 maxlen: 24 45.14.206.0/24 maxlen: 24 45.14.207.0/24 maxlen: 24 45.86.184.0/23 maxlen: 24 45.86.186.0/23 maxlen: 24 85.204.200.0/21 maxlen: 24 85.204.200.0/22 maxlen: 24 85.204.204.0/22 maxlen: 24 87.247.128.0/22 maxlen: 24 87.247.128.0/23 maxlen: 24 87.247.130.0/23 maxlen: 24 89.35.231.0/24 maxlen: 24 89.39.167.0/24 maxlen: 24 89.44.82.0/24 maxlen: 24 89.45.220.0/22 maxlen: 24 89.45.220.0/23 maxlen: 24 89.45.222.0/23 maxlen: 24 89.46.35.0/24 maxlen: 24 89.46.37.0/24 maxlen: 24 89.46.39.0/24 maxlen: 24 89.46.247.0/24 maxlen: 24 92.119.0.0/22 maxlen: 24 92.119.0.0/23 maxlen: 24 92.119.2.0/23 maxlen: 24 94.177.0.0/22 maxlen: 24 94.177.0.0/23 maxlen: 24 94.177.2.0/23 maxlen: 24 185.41.244.0/22 maxlen: 24 185.41.244.0/23 maxlen: 24 185.41.246.0/23 maxlen: 24 185.56.76.0/22 maxlen: 24 185.56.76.0/23 maxlen: 24 185.56.78.0/23 maxlen: 24 185.87.128.0/22 maxlen: 24 185.87.128.0/23 maxlen: 24 185.87.130.0/23 maxlen: 24 188.212.16.0/22 maxlen: 24 188.212.16.0/23 maxlen: 24 188.212.18.0/23 maxlen: 24 188.213.80.0/22 maxlen: 24 188.213.80.0/23 maxlen: 24 188.213.82.0/23 maxlen: 24 188.213.83.0/24 maxlen: 24 188.214.112.0/21 maxlen: 24 188.214.112.0/22 maxlen: 24 188.214.116.0/22 maxlen: 24 188.214.118.0/24 maxlen: 24 194.124.56.0/22 maxlen: 24 194.124.56.0/23 maxlen: 24 194.124.58.0/23 maxlen: 24 195.82.98.0/23 maxlen: 24 195.82.98.0/24 maxlen: 24 195.82.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0c:ae:dc:a2:fa:e2:ee:a6:33:93:19:0d:d5:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jan 1 00:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7caa069a96ab247968cc07194c0df2014e1925c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4c:c4:df:25:49:12:aa:9f:03:0b:4f:fa:4e: 93:d3:e0:4d:a7:f1:de:00:b2:77:6e:cc:c9:d5:b0: 46:42:1d:8d:90:30:74:79:40:90:a7:dc:68:46:b3: ca:1b:6f:66:bc:ea:19:da:c8:63:d4:ea:d4:0b:11: 46:a8:85:3c:f7:61:21:9b:e0:f2:28:e4:6d:9c:ef: c9:1e:38:ed:92:fc:7a:c3:17:78:75:8d:5a:b7:d4: 99:45:ff:b0:6a:fb:4a:4c:e2:5f:8e:86:cc:55:f2: 30:fc:bb:95:fc:ed:13:49:01:ad:45:88:9a:5b:a8: ea:2e:5f:53:b3:61:a2:76:c9:33:0e:f8:6a:25:a3: 82:3b:57:03:46:d8:bb:69:b7:6b:fd:d9:b6:f4:5d: 6d:0f:8b:9c:a1:95:ee:c4:33:67:b9:42:b4:91:b7: 44:76:3e:a9:2f:52:12:9d:7b:78:01:cb:ea:a8:d6: 15:60:c6:45:9a:70:53:35:62:4e:d6:c9:e2:43:a4: 7b:62:0f:81:84:b2:0c:8b:4a:41:40:ac:17:62:76: 41:cd:d9:9f:70:b8:54:de:c9:b8:d8:5e:1a:bf:71: fa:9d:11:c0:1b:07:6c:57:ac:c8:21:77:d8:c1:f2: a6:fe:01:bb:7d:dd:c8:b9:3e:94:24:75:b1:04:aa: 4f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:AA:06:9A:96:AB:24:79:68:CC:07:19:4C:0D:F2:01:4E:19:25:C8 X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/fKoGmparJHlozAcZTA3yAU4ZJcg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.56.0/22 37.156.76.0/22 37.156.108.0/22 45.14.204.0/22 45.86.184.0/22 85.204.200.0/21 87.247.128.0/22 89.35.231.0/24 89.39.167.0/24 89.44.82.0/24 89.45.220.0/22 89.46.35.0/24 89.46.37.0/24 89.46.39.0/24 89.46.247.0/24 92.119.0.0/22 94.177.0.0/22 185.41.244.0/22 185.56.76.0/22 185.87.128.0/22 188.212.16.0/22 188.213.80.0/22 188.214.112.0/21 194.124.56.0/22 195.82.98.0/23 Signature Algorithm: sha256WithRSAEncryption 38:23:46:10:70:cb:17:0c:ce:da:e8:d0:8f:7b:2f:15:c6:44: 03:ae:d7:42:4f:14:b0:1a:35:80:3f:87:e6:fa:67:d7:ab:97: fc:c7:ec:9f:f1:9d:20:ce:d6:ab:26:02:0d:99:23:67:e8:0b: 58:f4:20:c9:05:11:99:c7:b5:4f:c7:89:a6:62:7b:6d:a7:62: 54:1e:b8:a2:5c:9a:e8:8b:67:46:21:07:3e:b0:d2:f2:ea:db: 3e:e3:a3:38:9a:88:c8:72:12:f1:4c:5f:89:29:39:c3:27:01: bf:fa:d5:d5:c1:69:25:b3:17:b8:8a:31:93:9e:9e:8c:cd:75: 90:ea:64:7a:3f:b8:df:7b:ab:75:58:2d:53:37:3c:b8:60:3f: ba:2c:a6:85:50:1b:82:06:d9:6d:0f:d5:66:a7:cf:c4:bb:47: 47:4d:4b:02:39:09:1e:e7:10:2d:aa:82:29:43:53:4e:7a:ce: 8b:3d:5d:42:33:40:fb:16:46:bc:59:52:35:c0:da:85:02:45: cb:1d:57:6e:4f:1a:56:fd:cc:6e:05:ce:5f:de:02:58:ac:d2: 6b:ae:e3:6a:2d:87:ed:9d:32:e8:cb:b1:34:76:eb:d7:cb:09: 84:c0:7d:24:0b:1e:43:3d:22:57:d9:a2:12:27:7d:b9:f5:72: 4e:42:dc:4b -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISAZt26wyu3KL64u6mM5MZDdUdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwMTAxMDAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2FhMDY5YTk2YWIyNDc5NjhjYzA3MTk0YzBkZjIwMTRlMTkyNWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkzE3yVJEqqfAwtP+k6T0+BNp/He ALJ3bszJ1bBGQh2NkDB0eUCQp9xoRrPKG29mvOoZ2shj1OrUCxFGqIU892Ehm+Dy KORtnO/JHjjtkvx6wxd4dY1at9SZRf+wavtKTOJfjobMVfIw/LuV/O0TSQGtRYia W6jqLl9Ts2GidskzDvhqJaOCO1cDRti7abdr/dm29F1tD4ucoZXuxDNnuUK0kbdE dj6pL1ISnXt4AcvqqNYVYMZFmnBTNWJO1sniQ6R7Yg+BhLIMi0pBQKwXYnZBzdmf cLhU3sm42F4av3H6nRHAGwdsV6zIIXfYwfKm/gG7fd3IuT6UJHWxBKpPMwIDAQAB o4ICnjCCApowHQYDVR0OBBYEFHyqBpqWqyR5aMwHGUwN8gFOGSXIMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvZktvR21wYXJKSGxvekFjWlRBM3lBVTRaSmNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBAIF tzgDBAIlnEwDBAIlnGwDBAItDswDBAItVrgDBANVzMgDBAJX94ADBABZI+cDBABZ J6cDBABZLFIDBAJZLdwDBABZLiMDBABZLiUDBABZLicDBABZLvcDBAJcdwADBAJe sQADBAK5KfQDBAK5OEwDBAK5V4ADBAK81BADBAK81VADBAO81nADBALCfDgDBAHD UmIwDQYJKoZIhvcNAQELBQADggEBADgjRhBwyxcMztro0I97LxXGRAOu10JPFLAa NYA/h+b6Z9erl/zH7J/xnSDO1qsmAg2ZI2foC1j0IMkFEZnHtU/HiaZie22nYlQe uKJcmuiLZ0YhBz6w0vLq2z7joziaiMhyEvFMX4kpOcMnAb/61dXBaSWzF7iKMZOe nozNdZDqZHo/uN97q3VYLVM3PLhgP7ospoVQG4IG2W0P1Wanz8S7R0dNSwI5CR7n EC2qgilDU056zos9XUIzQPsWRrxZUjXA2oUCRcsdV25PGlb9zG4Fzl/eAlis0muu 42oth+2dMujLsTR269fLCYTAfSQLHkM9IlfZohInfbn1ck5C3Es= -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:40 2026 by rpki-client