This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/dyDacYG9aeiRlaiQgtNvE4ErVUI.roa File: dyDacYG9aeiRlaiQgtNvE4ErVUI.roa (raw, json) Hash identifier: PdpYlK5IJJ0ruhbi5o/udgWox1/LLP1tGzCkyDFpfcI= Subject key identifier: 77:20:DA:71:81:BD:69:E8:91:95:A8:90:82:D3:6F:13:81:2B:55:42 Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641 Certificate serial: 019B7910F834CF50E05F67C11E434A1009BB Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/dyDacYG9aeiRlaiQgtNvE4ErVUI.roa Signing time: Thu 01 Jan 2026 10:18:33 +0000 ROA not before: Thu 01 Jan 2026 10:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47172 IP address blocks: 37.218.240.0/21 maxlen: 24 37.218.240.0/24 maxlen: 24 37.218.241.0/24 maxlen: 24 37.218.242.0/24 maxlen: 24 37.218.243.0/24 maxlen: 24 37.218.244.0/24 maxlen: 24 37.218.245.0/24 maxlen: 24 37.218.246.0/24 maxlen: 24 37.218.247.0/24 maxlen: 24 185.88.140.0/22 maxlen: 24 185.200.104.0/22 maxlen: 24 185.200.104.0/24 maxlen: 24 185.200.106.0/24 maxlen: 24 185.200.107.0/24 maxlen: 24 193.29.139.0/24 maxlen: 24 195.190.28.0/24 maxlen: 24 213.108.104.0/21 maxlen: 24 2a00:c6c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f8:34:cf:50:e0:5f:67:c1:1e:43:4a:10:09:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641 Validity Not Before: Jan 1 10:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7720da7181bd69e89195a89082d36f13812b5542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e6:e3:0a:a1:e4:42:15:65:9c:8c:7f:57:a2: 40:31:b0:e3:21:6f:51:84:f5:16:a1:f4:00:bf:95: 16:e2:47:62:6f:9e:30:fa:96:9d:6f:6f:97:e9:f0: 81:3b:6b:92:46:15:58:75:43:78:43:ce:6b:78:db: ba:9d:86:30:37:6c:2f:18:2c:b3:bf:b4:57:8b:4f: fc:45:42:f1:7b:71:05:72:b6:7a:e0:f9:d6:24:4b: 3b:f7:60:d6:50:ee:bb:1e:36:d0:c1:2b:ca:13:88: e7:37:fe:13:12:ae:74:3c:5b:64:de:bf:eb:37:f1: ea:2a:64:24:16:5f:9b:31:4e:6c:8a:f2:55:63:a0: a4:2b:f9:16:94:62:14:9f:0a:9d:20:a0:06:b9:56: c5:67:a1:80:2b:54:a9:ac:0a:ec:92:11:13:6a:eb: 22:ed:7a:64:4e:69:1a:c6:af:90:2b:40:e5:c4:1b: 75:af:1f:97:ab:07:96:27:77:9a:48:ee:f8:79:e6: c4:ad:9d:f5:5d:51:cd:62:11:21:f3:f0:ad:07:1e: 99:c3:14:2a:28:c6:9d:51:ac:ec:6b:06:36:b2:b6: bb:f2:ab:ee:0e:27:10:68:ba:e6:c5:7d:06:a9:e7: 71:72:9b:0d:17:07:85:26:b4:6e:19:43:9a:7a:0f: 11:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:20:DA:71:81:BD:69:E8:91:95:A8:90:82:D3:6F:13:81:2B:55:42 X509v3 Authority Key Identifier: keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/dyDacYG9aeiRlaiQgtNvE4ErVUI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.218.240.0/21 185.88.140.0/22 185.200.104.0/22 193.29.139.0/24 195.190.28.0/24 213.108.104.0/21 IPv6: 2a00:c6c0::/48 Signature Algorithm: sha256WithRSAEncryption 98:68:c0:37:b2:8b:fd:fc:b4:13:b8:b9:26:ee:61:5d:53:b6: 36:4b:50:54:d1:62:2e:43:09:a5:f1:6a:51:d2:8c:3d:82:ef: f4:3a:04:fc:64:04:49:0c:85:b5:9f:23:33:36:c6:c2:ef:8d: 66:37:08:84:9c:19:fe:4f:5d:2c:6e:dd:d1:16:44:e7:9e:f7: 32:86:a3:62:8d:ca:54:fe:d6:aa:48:cd:a9:7f:42:61:dd:6a: 15:13:30:c7:b9:dd:b1:fb:d6:87:a3:93:db:86:87:e4:b3:ef: 5e:69:7a:c3:86:95:4a:d6:9d:7f:bf:09:cf:45:a0:ec:b3:2e: 06:f0:34:42:8e:1a:e7:a1:e2:9a:ed:75:b5:c6:ab:af:d2:d8: 46:91:e2:76:46:38:9e:c9:76:fa:98:a1:9b:8b:f7:f9:f8:34: 03:60:36:44:d0:9d:fd:a9:b2:19:8c:84:86:f5:83:75:36:77: 1f:ea:39:e2:ce:3a:c1:1e:b8:48:88:64:0a:94:86:e9:1a:7d: 39:39:e3:75:20:74:79:a0:39:8f:21:d5:32:ac:cb:58:44:1f: a5:33:a1:23:80:fa:60:44:69:82:00:5a:2c:c0:0b:6c:02:a3: b3:a3:b2:94:96:12:61:c1:8a:a8:7d:52:9a:44:61:bb:95:3c: 14:76:10:b9 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt5EPg0z1DgX2fBHkNKEAm7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOTBkNDMyOTNjZmViZjg3ZTdlYWIyYjBkNTUzZmQyMWE2 ZTk2NDEwHhcNMjYwMTAxMTAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzIwZGE3MTgxYmQ2OWU4OTE5NWE4OTA4MmQzNmYxMzgxMmI1NTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlubjCqHkQhVlnIx/V6JAMbDjIW9R hPUWofQAv5UW4kdib54w+padb2+X6fCBO2uSRhVYdUN4Q85reNu6nYYwN2wvGCyz v7RXi0/8RULxe3EFcrZ64PnWJEs792DWUO67HjbQwSvKE4jnN/4TEq50PFtk3r/r N/HqKmQkFl+bMU5sivJVY6CkK/kWlGIUnwqdIKAGuVbFZ6GAK1SprArskhETausi 7XpkTmkaxq+QK0DlxBt1rx+XqweWJ3eaSO74eebErZ31XVHNYhEh8/CtBx6ZwxQq KMadUazsawY2sra78qvuDicQaLrmxX0GqedxcpsNFweFJrRuGUOaeg8R1wIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFHcg2nGBvWnokZWokILTbxOBK1VCMB8GA1UdIwQY MBaAFN6Q1DKTz+v4fn6rKw1VP9IabpZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NDdlYmEtZDY2Ni00OWM3LWEwODkt NTNlZGM2MjZiMjg3LzEvZHlEYWNZRzlhZWlSbGFpUWd0TnZFNEVyVlVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82NDdlYmEtZDY2Ni00OWM3LWEwODktNTNlZGM2MjZiMjg3 LzEvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAqBAIAATAkAwQDJdrwAwQC uViMAwQCuchoAwQAwR2LAwQAw74cAwQD1WxoMA8EAgACMAkDBwAqAMbAAAAwDQYJ KoZIhvcNAQELBQADggEBAJhowDeyi/38tBO4uSbuYV1TtjZLUFTRYi5DCaXxalHS jD2C7/Q6BPxkBEkMhbWfIzM2xsLvjWY3CIScGf5PXSxu3dEWROee9zKGo2KNylT+ 1qpIzal/QmHdahUTMMe53bH71oejk9uGh+Sz715pesOGlUrWnX+/Cc9FoOyzLgbw NEKOGueh4prtdbXGq6/S2EaR4nZGOJ7JdvqYoZuL9/n4NANgNkTQnf2pshmMhIb1 g3U2dx/qOeLOOsEeuEiIZAqUhukafTk543UgdHmgOY8h1TKsy1hEH6UzoSOA+mBE aYIAWizAC2wCo7OjspSWEmHBiqh9UppEYbuVPBR2ELk= -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:38 2026 by rpki-client