This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/cHipO0ykcZDYg_rO8pQ36AxyYRA.roa File: cHipO0ykcZDYg_rO8pQ36AxyYRA.roa (raw, json) Hash identifier: bYVelKb1jQHkHg0QcPms7xP188tdK9Dob2vXSMT9ksk= Subject key identifier: 70:78:A9:3B:4C:A4:71:90:D8:83:FA:CE:F2:94:37:E8:0C:72:61:10 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C67B4E744EE31C1B0A002601EB3540 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/cHipO0ykcZDYg_rO8pQ36AxyYRA.roa Signing time: Thu 01 Jan 2026 04:17:34 +0000 ROA not before: Thu 01 Jan 2026 04:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7342 IP address blocks: 81.19.192.0/24 maxlen: 24 81.19.193.0/24 maxlen: 24 81.19.196.0/24 maxlen: 24 81.19.197.0/24 maxlen: 24 81.19.198.0/24 maxlen: 24 81.19.199.0/24 maxlen: 24 81.19.200.0/24 maxlen: 24 81.19.201.0/24 maxlen: 24 81.19.202.0/24 maxlen: 24 81.19.203.0/24 maxlen: 24 81.19.204.0/24 maxlen: 24 81.19.205.0/24 maxlen: 24 81.19.206.0/24 maxlen: 24 81.19.207.0/24 maxlen: 24 185.100.3.0/24 maxlen: 24 193.109.220.0/24 maxlen: 24 194.110.75.0/24 maxlen: 24 217.30.80.0/24 maxlen: 24 217.30.80.7/32 maxlen: 32 217.30.81.0/24 maxlen: 24 217.30.82.0/24 maxlen: 24 217.30.83.0/24 maxlen: 24 217.30.84.0/24 maxlen: 24 217.30.85.0/24 maxlen: 24 217.30.87.0/24 maxlen: 24 217.30.92.0/24 maxlen: 24 217.30.94.0/24 maxlen: 24 217.30.95.0/24 maxlen: 24 2a10:eec0::/48 maxlen: 48 2a10:eec0:1::/48 maxlen: 48 2a10:eec0:2::/48 maxlen: 48 2a10:eec0:2:101::7/128 maxlen: 128 2a10:eec0:3::/48 maxlen: 48 2a10:eec0:4::/48 maxlen: 48 2a10:eec0:5::/48 maxlen: 48 2a10:eec0:6::/48 maxlen: 48 2a10:eec0:7::/48 maxlen: 48 2a10:eec0:8::/48 maxlen: 48 2a10:eec0:9::/48 maxlen: 48 2a10:eec0:a::/48 maxlen: 48 2a10:eec0:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7b:4e:74:4e:e3:1c:1b:0a:00:26:01:eb:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7078a93b4ca47190d883facef29437e80c726110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:da:42:0f:7c:65:c3:12:54:a0:0d:db:8d:d9: a2:76:10:b0:50:af:8c:40:37:e0:2f:da:ae:96:f3: f0:91:87:13:79:e6:93:10:20:5b:9b:a9:28:90:14: a2:64:05:08:3a:fa:64:53:1e:40:14:d6:37:e8:e5: 5a:07:02:67:92:c3:a7:01:f4:dd:c3:8f:e7:02:92: d2:e1:d0:34:0e:33:50:f8:5e:e5:38:86:25:57:28: fa:0c:4d:5c:d1:46:1d:08:9e:ae:c3:a2:cb:13:19: 40:7c:35:35:ce:da:d8:d6:a8:dd:a0:b6:f5:fe:28: 2f:f9:bc:f6:41:fe:3e:b0:21:3d:2f:75:4d:ef:f7: 0f:17:0f:7b:63:06:92:f3:b8:4e:87:d6:8f:75:81: a4:0a:2f:4b:94:44:28:91:76:7c:20:c2:36:ad:82: 64:c8:38:e6:93:b7:bc:a4:c3:20:ed:d8:a3:e1:2c: 85:c5:15:0e:68:44:27:5c:ff:5a:9e:da:f3:b8:da: 58:fc:85:6a:e0:a8:3c:0c:40:05:0f:7e:1c:87:55: 22:d3:68:32:75:3e:7d:64:aa:f1:8c:85:7f:c9:44: 5d:d0:4f:27:1c:6a:c7:f1:4c:7b:78:a9:51:f7:48: c4:0f:83:bf:30:05:86:d1:ba:39:97:aa:d6:76:d8: 6e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:78:A9:3B:4C:A4:71:90:D8:83:FA:CE:F2:94:37:E8:0C:72:61:10 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/cHipO0ykcZDYg_rO8pQ36AxyYRA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.192.0/23 81.19.196.0-81.19.207.255 185.100.3.0/24 193.109.220.0/24 194.110.75.0/24 217.30.80.0-217.30.85.255 217.30.87.0/24 217.30.92.0/24 217.30.94.0/23 IPv6: 2a10:eec0::-2a10:eec0:a:ffff:ffff:ffff:ffff:ffff 2a10:eec0:c::/48 Signature Algorithm: sha256WithRSAEncryption 50:a7:72:20:fe:70:a7:7c:0a:c6:fe:af:f3:56:87:63:24:5e: 39:d2:cf:3a:3c:11:60:7b:34:25:0b:69:a3:93:71:97:a9:e9: 33:f8:2a:d0:6a:c9:10:3d:83:ab:be:5c:f0:7d:bc:93:c2:c2: 4e:68:a3:3c:49:61:89:0d:82:e7:c1:64:c1:f8:d0:ee:51:88: 77:fc:3c:57:1b:8b:46:b8:08:36:ed:5e:40:4d:1e:b0:7b:89: dd:cc:a6:5d:d0:72:d4:0d:96:5a:ea:3d:42:d4:3d:61:95:92: e9:16:b7:3d:11:5e:7d:08:5d:a8:1e:1a:9c:41:a6:31:7a:41: b4:8b:c3:c7:12:db:cf:00:46:ad:38:2f:ff:1e:b6:c9:96:4b: 38:b8:60:07:84:0a:17:e6:0f:c6:64:53:14:e0:60:be:6d:1d: be:2c:fe:70:99:c1:8a:b7:55:da:12:81:23:65:eb:e0:80:31: d2:fd:bd:20:7b:6d:34:ad:34:11:4a:87:79:ec:e5:98:33:c6: 5b:b9:d4:64:55:6c:77:1b:71:34:4a:86:06:c2:c8:9e:46:93: ea:c8:4a:99:a2:89:8f:1c:17:fd:63:8c:53:5f:6d:38:f5:5c: 88:14:b4:7f:43:69:46:76:16:ca:74:81:97:b2:d5:28:82:3b: 66:a4:17:49 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgISAZt3xntOdE7jHBsKACYB6zVAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDc4YTkzYjRjYTQ3MTkwZDg4M2ZhY2VmMjk0MzdlODBjNzI2MTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9pCD3xlwxJUoA3bjdmidhCwUK+M QDfgL9qulvPwkYcTeeaTECBbm6kokBSiZAUIOvpkUx5AFNY36OVaBwJnksOnAfTd w4/nApLS4dA0DjNQ+F7lOIYlVyj6DE1c0UYdCJ6uw6LLExlAfDU1ztrY1qjdoLb1 /igv+bz2Qf4+sCE9L3VN7/cPFw97YwaS87hOh9aPdYGkCi9LlEQokXZ8IMI2rYJk yDjmk7e8pMMg7dij4SyFxRUOaEQnXP9antrzuNpY/IVq4Kg8DEAFD34ch1Ui02gy dT59ZKrxjIV/yURd0E8nHGrH8Ux7eKlR90jED4O/MAWG0bo5l6rWdthuKwIDAQAB o4ICbTCCAmkwHQYDVR0OBBYEFHB4qTtMpHGQ2IP6zvKUN+gMcmEQMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvY0hpcE8weWtjWkRZZ19yTzhwUTM2QXh5WVJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwTAQCAAEwRgMEAVETwDAM AwQCURPEAwQEURPAAwQAuWQDAwQAwW3cAwQAwm5LMAwDBATZHlADBAHZHlQDBADZ HlcDBADZHlwDBAHZHl4wIQQCAAIwGzAQAwUGKhDuwAMHACoQ7sAACgMHACoQ7sAA DDANBgkqhkiG9w0BAQsFAAOCAQEAUKdyIP5wp3wKxv6v81aHYyReOdLPOjwRYHs0 JQtpo5Nxl6npM/gq0GrJED2Dq75c8H28k8LCTmijPElhiQ2C58FkwfjQ7lGId/w8 VxuLRrgINu1eQE0esHuJ3cymXdBy1A2WWuo9QtQ9YZWS6Ra3PRFefQhdqB4anEGm MXpBtIvDxxLbzwBGrTgv/x62yZZLOLhgB4QKF+YPxmRTFOBgvm0dviz+cJnBirdV 2hKBI2Xr4IAx0v29IHttNK00EUqHeezlmDPGW7nUZFVsdxtxNEqGBsLInkaT6shK maKJjxwX/WOMU19tOPVciBS0f0NpRnYWynSBl7LVKII7ZqQXSQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:26:00 2026 by rpki-client