This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/iLwvUMhVfynA5xd6Et8gepqR46c.roa File: iLwvUMhVfynA5xd6Et8gepqR46c.roa (raw, json) Hash identifier: y86HIQxQ/85ZKsdLvkasHfGWoZD1Asr2cxN2bdn26cY= Subject key identifier: 88:BC:2F:50:C8:55:7F:29:C0:E7:17:7A:12:DF:20:7A:9A:91:E3:A7 Certificate issuer: /CN=ff711054a89446a76f493ce2c127a948eba4a8ff Certificate serial: 019B7DC9A02AB97A6AD8EC0CFC6FAA9F005F Authority key identifier: FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/iLwvUMhVfynA5xd6Et8gepqR46c.roa Signing time: Fri 02 Jan 2026 08:18:44 +0000 ROA not before: Fri 02 Jan 2026 08:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7488 IP address blocks: 46.33.14.0/24 maxlen: 24 77.73.8.0/24 maxlen: 24 77.73.13.0/24 maxlen: 24 77.73.14.0/24 maxlen: 24 78.109.24.0/24 maxlen: 24 78.109.25.0/24 maxlen: 24 78.109.26.0/24 maxlen: 24 78.109.27.0/24 maxlen: 24 158.94.172.0/23 maxlen: 23 185.13.108.0/22 maxlen: 22 185.34.144.0/22 maxlen: 22 185.61.208.0/24 maxlen: 24 185.61.209.0/24 maxlen: 24 185.61.210.0/24 maxlen: 24 185.61.211.0/24 maxlen: 24 185.92.188.0/22 maxlen: 22 185.93.148.0/22 maxlen: 22 185.170.76.0/22 maxlen: 22 195.34.70.0/24 maxlen: 24 195.34.71.0/24 maxlen: 24 195.242.177.0/24 maxlen: 24 195.242.178.0/24 maxlen: 24 2a14:7a40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:a0:2a:b9:7a:6a:d8:ec:0c:fc:6f:aa:9f:00:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff711054a89446a76f493ce2c127a948eba4a8ff Validity Not Before: Jan 2 08:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88bc2f50c8557f29c0e7177a12df207a9a91e3a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3b:bc:7c:f9:46:19:5c:6c:4c:08:ad:a3:92: e0:b1:35:cb:d6:db:e1:1e:c2:63:03:61:47:10:e2: 5a:ea:a4:39:80:a4:18:3a:3f:04:a0:fc:13:bc:5a: 8a:f4:82:a2:55:b4:6a:15:a5:d7:4e:06:1a:bd:41: 5c:d8:a6:43:39:60:90:61:b9:24:df:70:f7:9d:a5: ac:ba:d0:88:62:ca:34:d3:50:d6:dc:d6:96:69:c6: 12:1e:bf:71:33:e3:b5:8f:73:11:12:1d:be:56:f5: 3b:8d:07:11:ff:c5:01:ef:1f:75:a7:01:86:d4:a8: e1:e5:1f:fc:5f:ed:33:3b:b0:e2:01:02:be:1b:88: bf:d5:f8:99:45:fa:26:24:7a:7d:39:b8:89:7c:d1: df:63:54:9c:6c:b9:41:b5:fd:f2:39:1f:0d:9d:22: 4d:cd:73:b3:f6:b5:14:71:05:64:c8:ef:1c:ff:a4: f2:d4:c8:d6:e9:cc:7c:ba:1e:4c:54:88:c9:30:4b: 58:c3:1e:9f:cd:64:3f:25:e1:cc:e7:e8:ef:16:a5: b2:15:d3:85:52:a2:d2:e1:a3:79:1e:a5:00:80:16: 87:ca:47:91:9b:3e:0d:8d:ec:d6:ae:2a:e8:59:7e: bf:a1:47:2e:05:f9:fb:58:7e:ba:22:2a:2e:54:d2: 60:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:BC:2F:50:C8:55:7F:29:C0:E7:17:7A:12:DF:20:7A:9A:91:E3:A7 X509v3 Authority Key Identifier: keyid:FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/iLwvUMhVfynA5xd6Et8gepqR46c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.33.14.0/24 77.73.8.0/24 77.73.13.0-77.73.14.255 78.109.24.0/22 158.94.172.0/23 185.13.108.0/22 185.34.144.0/22 185.61.208.0/22 185.92.188.0/22 185.93.148.0/22 185.170.76.0/22 195.34.70.0/23 195.242.177.0-195.242.178.255 IPv6: 2a14:7a40::/29 Signature Algorithm: sha256WithRSAEncryption 30:ba:fc:dc:35:2b:a9:46:13:83:6c:60:72:f9:46:d3:9c:b3: 8f:b0:56:72:1d:b3:6b:3f:ef:cb:fa:eb:56:76:e4:73:3c:84: 3f:2d:99:20:bb:b7:0a:e0:a5:88:4e:13:23:b5:20:d9:9c:86: ba:b6:99:d0:e0:58:1e:d6:19:ed:94:19:1d:4f:a4:7e:b1:cd: 77:2d:3d:19:43:42:d6:fb:ab:ce:b2:be:a3:52:4e:85:44:b5: 06:e4:f2:c2:fe:a6:a5:c8:6a:ec:82:6c:cc:a6:fb:91:7c:a1: 19:d2:96:6d:29:b5:55:22:ff:28:4d:64:27:67:b3:67:6c:d1: e6:8c:ba:f7:16:64:be:4d:bb:51:62:cb:83:af:df:a9:45:d5: f0:99:61:d2:27:ab:33:d9:a3:dc:fb:70:3f:8b:7d:ba:fb:c5: a1:89:8f:fa:3c:2c:da:ff:e6:9e:a2:98:52:94:3c:a4:68:c8: 84:29:51:08:aa:e8:38:d1:42:b3:ab:ef:13:eb:27:05:89:6c: 94:df:be:e4:60:c5:86:10:8b:61:ca:43:71:28:a6:ba:74:3c: d2:31:3b:35:5b:50:a2:05:4a:e3:c1:90:28:60:8e:5d:9d:45: 5a:8e:9b:ce:1c:ce:12:a6:df:98:a0:92:61:f7:59:05:8f:dc: 29:44:1e:08 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgISAZt9yaAquXpq2OwM/G+qnwBfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNzExMDU0YTg5NDQ2YTc2ZjQ5M2NlMmMxMjdhOTQ4ZWJh NGE4ZmYwHhcNMjYwMTAyMDgxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGJjMmY1MGM4NTU3ZjI5YzBlNzE3N2ExMmRmMjA3YTlhOTFlM2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtju8fPlGGVxsTAito5LgsTXL1tvh HsJjA2FHEOJa6qQ5gKQYOj8EoPwTvFqK9IKiVbRqFaXXTgYavUFc2KZDOWCQYbkk 33D3naWsutCIYso001DW3NaWacYSHr9xM+O1j3MREh2+VvU7jQcR/8UB7x91pwGG 1Kjh5R/8X+0zO7DiAQK+G4i/1fiZRfomJHp9ObiJfNHfY1ScbLlBtf3yOR8NnSJN zXOz9rUUcQVkyO8c/6Ty1MjW6cx8uh5MVIjJMEtYwx6fzWQ/JeHM5+jvFqWyFdOF UqLS4aN5HqUAgBaHykeRmz4NjezWriroWX6/oUcuBfn7WH66IiouVNJg4QIDAQAB o4ICcTCCAm0wHQYDVR0OBBYEFIi8L1DIVX8pwOcXehLfIHqakeOnMB8GA1UdIwQY MBaAFP9xEFSolEanb0k84sEnqUjrpKj/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzNFUVZLaVVScWR2U1R6aXdTZXBTT3VrcVA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iOGZjNTUtYjRjZC00ZDFmLTk5OTAt NDdhYzM4OWQzMjYxLzEvaUx3dlVNaFZmeW5BNXhkNkV0OGdlcHFSNDZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iOGZjNTUtYjRjZC00ZDFmLTk5OTAtNDdhYzM4OWQzMjYx LzEvXzNFUVZLaVVScWR2U1R6aXdTZXBTT3VrcVA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGGBggrBgEFBQcBBwEB/wR3MHUwZAQCAAEwXgMEAC4hDgME AE1JCDAMAwQATUkNAwQATUkOAwQCTm0YAwQBnl6sAwQCuQ1sAwQCuSKQAwQCuT3Q AwQCuVy8AwQCuV2UAwQCuapMAwQBwyJGMAwDBADD8rEDBADD8rIwDQQCAAIwBwMF AyoUekAwDQYJKoZIhvcNAQELBQADggEBADC6/Nw1K6lGE4NsYHL5RtOcs4+wVnId s2s/78v661Z25HM8hD8tmSC7twrgpYhOEyO1INmchrq2mdDgWB7WGe2UGR1PpH6x zXctPRlDQtb7q86yvqNSToVEtQbk8sL+pqXIauyCbMym+5F8oRnSlm0ptVUi/yhN ZCdns2ds0eaMuvcWZL5Nu1Fiy4Ov36lF1fCZYdInqzPZo9z7cD+Lfbr7xaGJj/o8 LNr/5p6imFKUPKRoyIQpUQiq6DjRQrOr7xPrJwWJbJTfvuRgxYYQi2HKQ3Eoprp0 PNIxOzVbUKIFSuPBkChgjl2dRVqOm84czhKm35igkmH3WQWP3ClEHgg= -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:57 2026 by rpki-client