This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/40JcYIqunxDmA9B_6mBk9o5jeUM.roa File: 40JcYIqunxDmA9B_6mBk9o5jeUM.roa (raw, json) Hash identifier: d/8AU3RR65AzamdBuUlvIPIHeRBNB9dCgWFNlGxNpUw= Subject key identifier: E3:42:5C:60:8A:AE:9F:10:E6:03:D0:7F:EA:60:64:F6:8E:63:79:43 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 019B79101838EF80D4963670AE6E579B4E48 Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/40JcYIqunxDmA9B_6mBk9o5jeUM.roa Signing time: Thu 01 Jan 2026 10:17:36 +0000 ROA not before: Thu 01 Jan 2026 10:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44285 IP address blocks: 5.1.43.0/24 maxlen: 24 37.32.32.0/21 maxlen: 21 37.32.32.0/22 maxlen: 22 37.32.32.0/24 maxlen: 24 37.32.33.0/24 maxlen: 24 37.32.34.0/24 maxlen: 24 37.32.35.0/24 maxlen: 24 37.32.37.0/24 maxlen: 24 37.32.38.0/24 maxlen: 24 37.32.39.0/24 maxlen: 24 37.75.243.0/24 maxlen: 24 37.75.244.0/22 maxlen: 22 37.75.244.0/24 maxlen: 24 37.75.245.0/24 maxlen: 24 37.75.246.0/24 maxlen: 24 37.75.247.0/24 maxlen: 24 45.9.252.0/22 maxlen: 24 45.9.252.0/24 maxlen: 24 45.9.253.0/24 maxlen: 24 45.9.254.0/24 maxlen: 24 45.87.4.0/23 maxlen: 24 45.140.224.0/22 maxlen: 22 46.28.72.0/21 maxlen: 24 46.28.72.0/24 maxlen: 24 46.28.73.0/24 maxlen: 24 46.28.74.0/24 maxlen: 24 78.110.120.0/22 maxlen: 24 84.47.224.0/21 maxlen: 21 84.47.224.0/22 maxlen: 22 84.47.224.0/24 maxlen: 24 84.47.225.0/24 maxlen: 24 84.47.226.0/24 maxlen: 24 84.47.227.0/24 maxlen: 24 84.47.228.0/22 maxlen: 22 84.47.228.0/24 maxlen: 24 84.47.229.0/24 maxlen: 24 84.47.230.0/23 maxlen: 24 84.47.231.0/24 maxlen: 24 85.198.24.0/22 maxlen: 24 88.135.37.0/24 maxlen: 24 88.135.38.0/24 maxlen: 24 88.135.39.0/24 maxlen: 24 91.236.168.0/23 maxlen: 23 91.236.168.0/24 maxlen: 24 91.236.169.0/24 maxlen: 24 185.18.212.0/22 maxlen: 22 185.18.212.0/24 maxlen: 24 185.18.213.0/24 maxlen: 24 185.18.214.0/24 maxlen: 24 185.18.215.0/24 maxlen: 24 185.51.200.0/24 maxlen: 24 185.51.201.0/24 maxlen: 24 185.51.202.0/24 maxlen: 24 185.51.203.0/24 maxlen: 24 185.121.128.0/22 maxlen: 24 185.121.128.0/24 maxlen: 24 185.121.129.0/24 maxlen: 24 185.121.130.0/24 maxlen: 24 185.121.131.0/24 maxlen: 24 185.128.136.0/24 maxlen: 24 185.128.137.0/24 maxlen: 24 185.128.138.0/24 maxlen: 24 185.128.139.0/24 maxlen: 24 185.141.132.0/24 maxlen: 24 185.141.133.0/24 maxlen: 24 185.141.134.0/24 maxlen: 24 185.141.135.0/24 maxlen: 24 185.182.248.0/22 maxlen: 22 185.182.248.0/23 maxlen: 23 185.182.250.0/23 maxlen: 23 185.182.250.0/24 maxlen: 24 185.182.251.0/24 maxlen: 24 185.233.131.0/24 maxlen: 24 188.209.152.0/23 maxlen: 23 195.110.38.0/23 maxlen: 23 195.110.38.0/24 maxlen: 24 195.110.39.0/24 maxlen: 24 217.172.120.0/21 maxlen: 24 217.172.124.0/23 maxlen: 23 217.172.126.0/23 maxlen: 23 217.172.127.0/24 maxlen: 24 2a02:828::/29 maxlen: 29 2a02:828::/32 maxlen: 32 2a02:828::/48 maxlen: 48 2a02:828::/64 maxlen: 64 2a02:828:1::/48 maxlen: 48 2a02:829::/32 maxlen: 32 2a02:82a::/32 maxlen: 32 2a02:82b::/32 maxlen: 32 2a02:82c::/32 maxlen: 32 2a02:82d::/32 maxlen: 32 2a02:82e::/32 maxlen: 32 2a02:82f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:18:38:ef:80:d4:96:36:70:ae:6e:57:9b:4e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Jan 1 10:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3425c608aae9f10e603d07fea6064f68e637943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b5:14:4a:4f:67:57:a0:d9:51:fe:30:b2:e0: 93:eb:17:64:a6:5a:ba:bb:b1:df:36:ab:41:4d:30: a8:a9:4f:c6:5b:76:b3:04:76:54:d5:be:84:da:e3: 4f:b8:99:47:03:59:eb:f7:11:8d:ea:3a:95:26:83: 00:76:43:3d:1d:77:1b:2e:95:74:0a:98:f8:f1:1d: cc:a6:1b:03:04:87:54:e6:98:72:e4:54:e4:ba:7a: b9:d7:01:1e:f5:73:ff:30:a8:cf:6d:d9:9b:d5:e2: 26:20:f6:98:e5:8d:f8:d2:a3:b7:03:ac:a8:e3:e5: fa:c0:67:b2:a0:6c:3e:5f:84:6e:58:e6:31:34:a9: fa:46:ea:2a:c4:1a:28:e8:c7:fc:90:ac:88:eb:4b: ec:43:86:3e:69:63:00:2c:d8:ee:b8:12:3d:ee:57: 1d:7e:43:96:97:ba:59:2f:d8:5d:d7:9e:35:b5:2d: ae:10:6f:91:8e:bb:61:7d:be:78:c4:3d:03:d3:98: 10:52:9d:01:ef:f2:73:96:80:a7:20:16:99:47:12: 93:e7:a6:ff:71:42:95:04:91:64:60:dd:1e:8e:f2: 3c:a6:78:88:d9:34:63:c3:17:9c:49:9f:06:95:c2: 76:51:dc:5e:85:73:4c:e4:47:43:be:c9:b4:a0:ff: bc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:42:5C:60:8A:AE:9F:10:E6:03:D0:7F:EA:60:64:F6:8E:63:79:43 X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/40JcYIqunxDmA9B_6mBk9o5jeUM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.43.0/24 37.32.32.0/21 37.75.243.0-37.75.247.255 45.9.252.0/22 45.87.4.0/23 45.140.224.0/22 46.28.72.0/21 78.110.120.0/22 84.47.224.0/21 85.198.24.0/22 88.135.37.0-88.135.39.255 91.236.168.0/23 185.18.212.0/22 185.51.200.0/22 185.121.128.0/22 185.128.136.0/22 185.141.132.0/22 185.182.248.0/22 185.233.131.0/24 188.209.152.0/23 195.110.38.0/23 217.172.120.0/21 IPv6: 2a02:828::/29 Signature Algorithm: sha256WithRSAEncryption 9e:94:15:fe:07:a2:2f:98:a8:22:fb:c0:c2:5f:6f:7a:23:fa: f0:24:ee:5a:ef:85:f4:64:9f:3f:95:fd:bc:dc:39:2a:a9:c2: ce:ae:3b:0f:86:e7:88:73:d7:34:2c:c4:20:0b:45:df:99:6c: 15:4a:8e:11:fb:93:3b:a4:40:81:79:0d:b1:bc:c7:9c:ba:95: a0:4a:34:86:b0:58:c6:24:c4:63:45:64:0b:b1:34:02:fd:73: 09:ce:1d:1d:c9:bc:eb:a3:17:26:ff:8a:7f:95:f7:77:c0:35: 8f:20:09:8d:a6:c7:cf:ae:d4:7b:b1:6c:6e:a0:8a:8e:a9:43: 2e:a7:e0:f5:d2:22:87:15:bf:dc:e0:3b:58:f9:87:89:53:e3: 6a:f2:b6:7b:e6:64:67:b6:dc:1b:7e:f7:f3:ad:66:7e:b8:b4: 56:96:81:79:67:ed:41:5e:4c:9a:a3:c1:aa:51:37:80:4b:c6: b2:78:5c:26:fe:ab:ae:28:ce:5d:d9:21:f5:03:bf:ba:7b:6c: 02:fa:73:a3:70:76:5a:61:cb:f9:9c:78:e8:c4:51:c1:77:0b: ac:70:b8:b4:be:a2:d0:ed:dc:d6:cf:6d:b6:f6:67:88:41:e3: 93:62:cc:f3:c1:c7:5c:67:aa:97:0b:40:52:87:f9:78:33:ee: 4f:40:44:23 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt5EBg474DUljZwrm5Xm05IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjYwMTAxMTAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzQyNWM2MDhhYWU5ZjEwZTYwM2QwN2ZlYTYwNjRmNjhlNjM3OTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrUUSk9nV6DZUf4wsuCT6xdkplq6 u7HfNqtBTTCoqU/GW3azBHZU1b6E2uNPuJlHA1nr9xGN6jqVJoMAdkM9HXcbLpV0 Cpj48R3MphsDBIdU5phy5FTkunq51wEe9XP/MKjPbdmb1eImIPaY5Y340qO3A6yo 4+X6wGeyoGw+X4RuWOYxNKn6RuoqxBoo6Mf8kKyI60vsQ4Y+aWMALNjuuBI97lcd fkOWl7pZL9hd1541tS2uEG+Rjrthfb54xD0D05gQUp0B7/JzloCnIBaZRxKT56b/ cUKVBJFkYN0ejvI8pniI2TRjwxecSZ8GlcJ2UdxehXNM5EdDvsm0oP+88wIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFONCXGCKrp8Q5gPQf+pgZPaOY3lDMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvNDBKY1lJcXVueERtQTlCXzZtQms5bzVqZVVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHABggrBgEFBQcBBwEB/wSBsDCBrTCBmwQCAAEwgZQDBAAF ASsDBAMlICAwDAMEACVL8wMEAyVL8AMEAi0J/AMEAS1XBAMEAi2M4AMEAy4cSAME Ak5ueAMEA1Qv4AMEAlXGGDAMAwQAWIclAwQDWIcgAwQBW+yoAwQCuRLUAwQCuTPI AwQCuXmAAwQCuYCIAwQCuY2EAwQCubb4AwQAuemDAwQBvNGYAwQBw24mAwQD2ax4 MA0EAgACMAcDBQMqAggoMA0GCSqGSIb3DQEBCwUAA4IBAQCelBX+B6IvmKgi+8DC X296I/rwJO5a74X0ZJ8/lf283DkqqcLOrjsPhueIc9c0LMQgC0XfmWwVSo4R+5M7 pECBeQ2xvMecupWgSjSGsFjGJMRjRWQLsTQC/XMJzh0dybzroxcm/4p/lfd3wDWP IAmNpsfPrtR7sWxuoIqOqUMup+D10iKHFb/c4DtY+YeJU+Nq8rZ75mRnttwbfvfz rWZ+uLRWloF5Z+1BXkyao8GqUTeAS8ayeFwm/quuKM5d2SH1A7+6e2wC+nOjcHZa Ycv5nHjoxFHBdwuscLi0vqLQ7dzWz2229meIQeOTYszzwcdcZ6qXC0BSh/l4M+5P QEQj -----END CERTIFICATE-----Generated at Mon Jan 26 04:40:26 2026 by rpki-client