This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/gF4iUNMjCX6YP857V9CNjLm-AIg.roa File: gF4iUNMjCX6YP857V9CNjLm-AIg.roa (raw, json) Hash identifier: FhDwHm21Q6QTRo/sfldBISr1alr6N55dx1Ou14/lEJg= Subject key identifier: 80:5E:22:50:D3:23:09:7E:98:3F:CE:7B:57:D0:8D:8C:B9:BE:00:88 Certificate issuer: /CN=2f814adc1d5209e098f078adbc856bad83b749c2 Certificate serial: 019B7EA52633E01928ED311CB1C1A0DA7910 Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/gF4iUNMjCX6YP857V9CNjLm-AIg.roa Signing time: Fri 02 Jan 2026 12:18:31 +0000 ROA not before: Fri 02 Jan 2026 12:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16322 IP address blocks: 31.214.132.0/23 maxlen: 23 31.214.146.0/23 maxlen: 23 31.214.146.0/24 maxlen: 24 31.214.147.0/24 maxlen: 24 31.214.154.0/24 maxlen: 24 31.214.200.0/23 maxlen: 23 31.214.228.0/22 maxlen: 22 31.214.248.0/21 maxlen: 21 37.10.64.0/22 maxlen: 22 37.10.109.0/24 maxlen: 24 37.10.117.0/24 maxlen: 24 37.228.131.0/24 maxlen: 24 37.228.133.0/24 maxlen: 24 37.228.135.0/24 maxlen: 24 37.228.136.0/22 maxlen: 22 46.41.192.0/18 maxlen: 18 46.41.192.0/19 maxlen: 19 46.41.192.0/20 maxlen: 20 46.41.224.0/19 maxlen: 19 46.41.224.0/20 maxlen: 20 46.251.224.0/24 maxlen: 24 46.251.226.0/24 maxlen: 24 46.251.237.0/24 maxlen: 24 82.99.192.0/18 maxlen: 18 82.99.192.0/19 maxlen: 22 82.99.192.0/24 maxlen: 24 82.99.193.0/24 maxlen: 24 82.99.195.0/24 maxlen: 24 82.99.196.0/24 maxlen: 24 82.99.198.0/24 maxlen: 24 82.99.199.0/24 maxlen: 24 82.99.200.0/24 maxlen: 24 82.99.201.0/24 maxlen: 24 82.99.204.0/24 maxlen: 24 82.99.205.0/24 maxlen: 24 82.99.206.0/24 maxlen: 24 82.99.209.0/24 maxlen: 24 82.99.210.0/24 maxlen: 24 82.99.212.0/24 maxlen: 24 82.99.214.0/24 maxlen: 24 82.99.216.0/22 maxlen: 22 82.99.224.0/19 maxlen: 19 82.99.224.0/20 maxlen: 20 82.99.225.0/24 maxlen: 24 82.99.228.0/24 maxlen: 24 82.99.229.0/24 maxlen: 24 82.99.230.0/24 maxlen: 24 82.99.231.0/24 maxlen: 24 82.99.232.0/24 maxlen: 24 82.99.233.0/24 maxlen: 24 82.99.234.0/24 maxlen: 24 82.99.235.0/24 maxlen: 24 82.99.240.0/24 maxlen: 24 82.99.249.0/24 maxlen: 24 82.99.250.0/24 maxlen: 24 82.99.251.0/24 maxlen: 24 82.99.252.0/24 maxlen: 24 82.99.254.0/24 maxlen: 24 82.99.255.0/24 maxlen: 24 95.156.222.0/23 maxlen: 23 95.156.233.0/24 maxlen: 24 95.156.234.0/23 maxlen: 23 95.156.236.0/23 maxlen: 23 95.156.248.0/23 maxlen: 23 109.230.192.0/23 maxlen: 23 109.230.200.0/24 maxlen: 24 109.230.204.0/22 maxlen: 22 109.230.221.0/24 maxlen: 24 109.230.223.0/24 maxlen: 24 109.230.242.0/24 maxlen: 24 109.230.246.0/23 maxlen: 23 109.230.246.0/24 maxlen: 24 109.230.247.0/24 maxlen: 24 109.230.251.0/24 maxlen: 24 134.255.196.0/23 maxlen: 23 134.255.245.0/24 maxlen: 24 134.255.246.0/24 maxlen: 24 134.255.249.0/24 maxlen: 24 185.10.71.0/24 maxlen: 24 185.13.228.0/22 maxlen: 22 2a00:1a88::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:26:33:e0:19:28:ed:31:1c:b1:c1:a0:da:79:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2 Validity Not Before: Jan 2 12:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=805e2250d323097e983fce7b57d08d8cb9be0088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a2:81:ad:00:88:14:69:92:12:ed:c0:6d:c8: 35:54:d4:ea:7a:7d:b2:d8:e0:8e:58:19:58:66:47: 39:92:b9:0b:6b:d1:c5:f4:1a:5c:74:22:35:b0:84: b5:00:5f:a5:83:76:12:ef:b4:4d:73:a7:30:c6:9c: 67:3b:44:11:f2:7f:16:e3:7a:c3:92:32:6a:ac:97: 77:50:c0:6a:d0:df:f5:0c:d9:ce:1a:0d:ae:be:3c: 00:fa:6f:10:6d:21:22:14:a2:92:48:ea:d2:ca:a8: 6f:63:8e:c6:17:84:93:1b:fd:e1:10:d8:10:25:10: 78:7e:94:1b:b1:d0:40:e8:1a:20:67:dc:8e:4b:0d: 62:71:55:ba:b3:e0:35:d9:5a:97:d9:b3:9c:04:35: 63:72:74:4e:46:41:8e:22:f7:4c:0b:16:78:f5:3a: f4:b4:a4:29:c1:54:6b:61:f8:3f:83:11:d0:63:6e: 45:27:dc:4d:cd:60:63:04:0a:8c:83:0f:2e:d2:d6: 06:28:6c:5e:0f:c2:b9:47:74:19:d6:8b:c8:5f:63: ea:5d:7a:cd:0a:42:8b:87:fd:18:08:37:fc:1f:d2: 89:b2:48:91:82:b9:c5:3d:7f:22:10:c4:32:d6:57: c1:29:b8:0f:27:76:cc:74:f5:66:79:95:f1:bd:33: d6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5E:22:50:D3:23:09:7E:98:3F:CE:7B:57:D0:8D:8C:B9:BE:00:88 X509v3 Authority Key Identifier: keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/gF4iUNMjCX6YP857V9CNjLm-AIg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.214.132.0/23 31.214.146.0/23 31.214.154.0/24 31.214.200.0/23 31.214.228.0/22 31.214.248.0/21 37.10.64.0/22 37.10.109.0/24 37.10.117.0/24 37.228.131.0/24 37.228.133.0/24 37.228.135.0-37.228.139.255 46.41.192.0/18 46.251.224.0/24 46.251.226.0/24 46.251.237.0/24 82.99.192.0/18 95.156.222.0/23 95.156.233.0-95.156.237.255 95.156.248.0/23 109.230.192.0/23 109.230.200.0/24 109.230.204.0/22 109.230.221.0/24 109.230.223.0/24 109.230.242.0/24 109.230.246.0/23 109.230.251.0/24 134.255.196.0/23 134.255.245.0-134.255.246.255 134.255.249.0/24 185.10.71.0/24 185.13.228.0/22 IPv6: 2a00:1a88::/32 Signature Algorithm: sha256WithRSAEncryption 3b:0d:74:18:06:22:8f:a9:54:28:e4:4b:2e:18:15:76:72:ac: 9b:99:0b:58:ae:bf:2b:06:56:b2:b7:32:e2:5f:bb:61:e4:8a: b2:7a:49:c6:24:0b:46:c1:b4:6e:24:59:0d:d6:a7:bd:13:d3: b4:5f:f3:36:e7:8f:7d:46:e1:77:b3:0a:7d:3d:2d:07:c1:fb: bd:18:93:60:b8:de:8b:99:0c:87:56:79:be:f2:90:38:73:1f: f0:87:d9:ef:7c:c0:c3:45:cd:86:55:b9:ac:0c:22:6f:64:61: 31:7a:bf:14:06:be:1a:bd:e5:8a:2d:d5:2a:b1:ff:a5:0e:b8: 3f:a9:6e:1b:7c:84:2c:4a:36:c7:50:7b:2b:2d:0f:11:64:d7: 54:01:b2:1d:10:e6:0c:b2:11:29:4e:42:16:c6:38:27:c5:c6: c4:31:fb:e0:cf:b8:8e:1d:74:b0:c6:5e:5f:30:9e:ba:10:a6: b3:62:09:33:a1:1a:a0:df:74:0b:cb:50:7e:83:ac:22:04:22: 98:9f:be:82:7d:11:c2:49:07:85:86:bc:a8:f8:5d:d2:ee:12: 2d:66:0d:53:88:7c:14:5d:3e:6c:e1:25:ca:31:92:76:5e:f4: 8c:21:d8:4e:8a:55:50:1d:10:72:cd:77:ee:ca:f7:1d:d6:f9: 42:72:30:c5 -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgISAZt+pSYz4Bko7TEcscGg2nkQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmODE0YWRjMWQ1MjA5ZTA5OGYwNzhhZGJjODU2YmFkODNi NzQ5YzIwHhcNMjYwMTAyMTIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDVlMjI1MGQzMjMwOTdlOTgzZmNlN2I1N2QwOGQ4Y2I5YmUwMDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aKBrQCIFGmSEu3Abcg1VNTqen2y 2OCOWBlYZkc5krkLa9HF9BpcdCI1sIS1AF+lg3YS77RNc6cwxpxnO0QR8n8W43rD kjJqrJd3UMBq0N/1DNnOGg2uvjwA+m8QbSEiFKKSSOrSyqhvY47GF4STG/3hENgQ JRB4fpQbsdBA6BogZ9yOSw1icVW6s+A12VqX2bOcBDVjcnRORkGOIvdMCxZ49Tr0 tKQpwVRrYfg/gxHQY25FJ9xNzWBjBAqMgw8u0tYGKGxeD8K5R3QZ1ovIX2PqXXrN CkKLh/0YCDf8H9KJskiRgrnFPX8iEMQy1lfBKbgPJ3bMdPVmeZXxvTPW9wIDAQAB o4IC9jCCAvIwHQYDVR0OBBYEFIBeIlDTIwl+mD/Oe1fQjYy5vgCIMB8GA1UdIwQY MBaAFC+BStwdUgngmPB4rbyFa62Dt0nCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8xM2UxMmEtMmJhYy00NzUyLTk5N2Qt ZGY4NmI2ZGQ5OTdjLzEvZ0Y0aVVOTWpDWDZZUDg1N1Y5Q05qTG0tQUlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8xM2UxMmEtMmJhYy00NzUyLTk5N2QtZGY4NmI2ZGQ5OTdj LzEvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBCgYIKwYBBQUHAQcBAf8EgfowgfcwgeUEAgABMIHeAwQB H9aEAwQBH9aSAwQAH9aaAwQBH9bIAwQCH9bkAwQDH9b4AwQCJQpAAwQAJQptAwQA JQp1AwQAJeSDAwQAJeSFMAwDBAAl5IcDBAIl5IgDBAYuKcADBAAu++ADBAAu++ID BAAu++0DBAZSY8ADBAFfnN4wDAMEAF+c6QMEAV+c7AMEAV+c+AMEAW3mwAMEAG3m yAMEAm3mzAMEAG3m3QMEAG3m3wMEAG3m8gMEAW3m9gMEAG3m+wMEAYb/xDAMAwQA hv/1AwQAhv/2AwQAhv/5AwQAuQpHAwQCuQ3kMA0EAgACMAcDBQAqABqIMA0GCSqG SIb3DQEBCwUAA4IBAQA7DXQYBiKPqVQo5EsuGBV2cqybmQtYrr8rBlaytzLiX7th 5IqyeknGJAtGwbRuJFkN1qe9E9O0X/M25499RuF3swp9PS0Hwfu9GJNguN6LmQyH Vnm+8pA4cx/wh9nvfMDDRc2GVbmsDCJvZGExer8UBr4aveWKLdUqsf+lDrg/qW4b fIQsSjbHUHsrLQ8RZNdUAbIdEOYMshEpTkIWxjgnxcbEMfvgz7iOHXSwxl5fMJ66 EKazYgkzoRqg33QLy1B+g6wiBCKYn76CfRHCSQeFhryo+F3S7hItZg1TiHwUXT5s 4SXKMZJ2XvSMIdhOilVQHRByzXfuyvcd1vlCcjDF -----END CERTIFICATE-----Generated at Mon Jan 26 13:44:40 2026 by rpki-client