This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/4WiiFb7SpGQeZVC2n3MrfOPqNzc.roa File: 4WiiFb7SpGQeZVC2n3MrfOPqNzc.roa (raw, json) Hash identifier: 62rrLyHxu3FWWfUcOvkJJ5Vd53nVehjwHYHOgE++3rc= Subject key identifier: E1:68:A2:15:BE:D2:A4:64:1E:65:50:B6:9F:73:2B:7C:E3:EA:37:37 Certificate issuer: /CN=63444210ea08ac529878d51917e3b30054d620d1 Certificate serial: 019B7F809891D4415434D36B8B7D3CDC6C6F Authority key identifier: 63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/4WiiFb7SpGQeZVC2n3MrfOPqNzc.roa Signing time: Fri 02 Jan 2026 16:18:12 +0000 ROA not before: Fri 02 Jan 2026 16:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30722 IP address blocks: 2.32.0.0/16 maxlen: 20 2.33.0.0/17 maxlen: 17 2.33.128.0/17 maxlen: 17 2.33.176.0/20 maxlen: 20 2.34.0.0/15 maxlen: 20 2.36.0.0/14 maxlen: 18 2.40.0.0/16 maxlen: 20 2.41.0.0/16 maxlen: 16 2.42.0.0/16 maxlen: 20 2.43.0.0/16 maxlen: 16 2.44.0.0/16 maxlen: 19 2.45.0.0/16 maxlen: 20 2.46.0.0/15 maxlen: 20 5.88.0.0/13 maxlen: 20 31.26.0.0/16 maxlen: 16 31.27.0.0/18 maxlen: 18 31.27.96.0/20 maxlen: 20 31.27.128.0/17 maxlen: 19 31.27.192.0/19 maxlen: 19 31.27.224.0/19 maxlen: 19 31.156.0.0/14 maxlen: 19 37.116.0.0/16 maxlen: 19 37.117.0.0/16 maxlen: 19 37.118.0.0/16 maxlen: 16 37.119.0.0/17 maxlen: 19 37.119.128.0/17 maxlen: 20 37.159.0.0/17 maxlen: 17 37.159.128.0/17 maxlen: 20 37.176.0.0/13 maxlen: 20 47.53.0.0/16 maxlen: 16 47.53.32.0/19 maxlen: 19 47.53.64.0/19 maxlen: 19 47.53.128.0/19 maxlen: 19 47.53.160.0/19 maxlen: 19 47.53.208.0/20 maxlen: 20 83.224.64.0/20 maxlen: 20 83.224.80.0/24 maxlen: 24 83.224.81.0/24 maxlen: 24 83.224.86.0/23 maxlen: 23 83.224.128.0/17 maxlen: 17 83.225.0.0/16 maxlen: 16 91.80.0.0/19 maxlen: 19 91.80.32.0/21 maxlen: 21 91.80.46.0/24 maxlen: 24 91.80.48.0/20 maxlen: 24 91.80.64.0/18 maxlen: 18 91.80.128.0/17 maxlen: 17 91.81.0.0/17 maxlen: 19 91.81.128.0/17 maxlen: 24 93.64.0.0/16 maxlen: 18 93.65.0.0/16 maxlen: 18 93.66.0.0/15 maxlen: 17 93.68.0.0/16 maxlen: 16 93.69.0.0/16 maxlen: 16 93.70.0.0/16 maxlen: 18 93.71.0.0/16 maxlen: 18 93.144.0.0/16 maxlen: 20 93.145.0.0/16 maxlen: 20 93.146.0.0/16 maxlen: 20 93.147.0.0/16 maxlen: 20 93.148.0.0/16 maxlen: 20 93.149.0.0/16 maxlen: 20 93.150.0.0/16 maxlen: 20 93.151.24.0/22 maxlen: 22 93.151.128.0/17 maxlen: 20 109.112.0.0/15 maxlen: 15 109.114.0.0/15 maxlen: 19 109.115.96.0/19 maxlen: 19 109.115.192.0/19 maxlen: 19 109.115.224.0/19 maxlen: 19 109.116.0.0/15 maxlen: 20 109.118.0.0/16 maxlen: 16 109.119.0.0/16 maxlen: 16 130.0.128.0/18 maxlen: 21 130.25.0.0/16 maxlen: 18 176.242.0.0/15 maxlen: 15 176.244.0.0/14 maxlen: 14 188.152.0.0/17 maxlen: 20 188.152.128.0/17 maxlen: 20 188.153.0.0/16 maxlen: 20 188.216.0.0/15 maxlen: 17 188.218.0.0/15 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:98:91:d4:41:54:34:d3:6b:8b:7d:3c:dc:6c:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63444210ea08ac529878d51917e3b30054d620d1 Validity Not Before: Jan 2 16:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e168a215bed2a4641e6550b69f732b7ce3ea3737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:da:bc:ad:a8:36:51:3b:c9:2e:50:6e:89:fd: 31:3b:dc:86:2a:b2:29:eb:d9:f3:be:25:0e:8f:62: 5f:69:ce:e5:c2:11:eb:2a:40:ee:ea:2e:e9:af:1b: 47:c5:b3:2d:6e:57:c5:e8:03:c4:16:33:01:df:72: a1:4f:0b:3c:6a:d9:43:8e:07:07:c7:4b:04:2b:2c: 26:29:67:7e:f6:67:58:18:81:10:1a:53:cf:f3:6e: 17:40:b6:40:c6:55:4a:c0:f8:91:c4:16:1e:60:8f: c1:df:69:9e:5c:fc:18:d7:12:7c:fb:1d:4a:7c:b2: fd:bb:1e:71:ad:4a:04:ec:dd:1b:c7:8a:67:14:f3: 66:32:98:5a:39:4f:05:d1:fc:5e:69:14:83:fb:2c: 67:df:7d:68:bf:0c:8b:fc:87:15:cf:43:ba:9f:60: f4:48:4a:2b:07:0d:fc:bd:fc:8f:cf:cc:7a:38:a1: 7d:53:ec:31:e1:76:5f:3e:f2:e3:6d:3a:02:91:ff: 66:7f:37:23:46:49:6c:4f:f4:70:18:1d:e9:c9:64: 46:12:c6:c4:d2:9e:28:fb:92:40:3e:10:81:e2:4c: ed:b3:dc:a9:77:90:bd:d9:8c:3c:00:f4:fe:87:f4: eb:d8:33:dd:a5:1b:b3:9e:05:1d:3b:0e:00:61:02: 5b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:68:A2:15:BE:D2:A4:64:1E:65:50:B6:9F:73:2B:7C:E3:EA:37:37 X509v3 Authority Key Identifier: keyid:63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/4WiiFb7SpGQeZVC2n3MrfOPqNzc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.32.0.0/12 5.88.0.0/13 31.26.0.0-31.27.63.255 31.27.96.0/20 31.27.128.0/17 31.156.0.0/14 37.116.0.0/14 37.159.0.0/16 37.176.0.0/13 47.53.0.0/16 83.224.64.0-83.224.81.255 83.224.86.0/23 83.224.128.0-83.225.255.255 91.80.0.0-91.80.39.255 91.80.46.0/24 91.80.48.0-91.81.255.255 93.64.0.0/13 93.144.0.0-93.150.255.255 93.151.24.0/22 93.151.128.0/17 109.112.0.0/13 130.0.128.0/18 130.25.0.0/16 176.242.0.0-176.247.255.255 188.152.0.0/15 188.216.0.0/14 Signature Algorithm: sha256WithRSAEncryption 04:18:64:e3:7c:8d:7d:e3:3e:b8:e0:3c:36:69:89:ea:22:d3: 3d:15:81:fa:29:bc:e3:bc:7f:a4:7d:1f:3c:62:64:46:4e:fc: 16:e7:2a:60:65:e9:84:f7:9b:b7:6d:37:36:f0:12:32:6b:54: 23:10:9c:f0:95:90:68:02:01:57:86:75:23:e5:aa:2b:48:56: c8:61:37:b8:83:73:df:75:6c:1f:8f:b1:c6:54:3d:43:65:f9: 56:53:b6:0f:3c:cc:ba:15:34:04:44:59:4d:2e:ab:42:17:85: 95:14:1c:e1:58:fc:b9:f5:58:69:27:34:a4:fe:ff:2e:18:18: e5:34:5d:67:d5:09:6b:96:58:55:b1:d4:36:cd:74:a9:bf:12: 0a:31:2f:93:62:f5:c2:c9:72:17:08:a4:b2:4a:f2:bc:8f:46: 9b:5c:81:b7:fe:ee:7b:e9:84:c9:03:bc:92:b2:fc:6f:65:04: cd:0c:e5:da:4b:2c:8c:e1:2f:7f:4f:8d:67:46:a3:cf:e1:85: a2:27:af:38:b7:3b:6f:02:35:e3:85:c4:11:07:f5:b4:47:35: af:10:d3:5b:a1:bd:53:06:1d:a2:5d:4b:bd:27:fd:e9:cb:a7: 9f:94:2d:0b:69:9f:46:d1:b4:0c:95:bd:a5:ab:b0:76:ba:a6: a7:af:c3:8c -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgISAZt/gJiR1EFUNNNri3083GxvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNDQ0MjEwZWEwOGFjNTI5ODc4ZDUxOTE3ZTNiMzAwNTRk NjIwZDEwHhcNMjYwMTAyMTYxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTY4YTIxNWJlZDJhNDY0MWU2NTUwYjY5ZjczMmI3Y2UzZWEzNzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tq8rag2UTvJLlBuif0xO9yGKrIp 69nzviUOj2Jfac7lwhHrKkDu6i7prxtHxbMtblfF6APEFjMB33KhTws8atlDjgcH x0sEKywmKWd+9mdYGIEQGlPP824XQLZAxlVKwPiRxBYeYI/B32meXPwY1xJ8+x1K fLL9ux5xrUoE7N0bx4pnFPNmMphaOU8F0fxeaRSD+yxn331ovwyL/IcVz0O6n2D0 SEorBw38vfyPz8x6OKF9U+wx4XZfPvLjbToCkf9mfzcjRklsT/RwGB3pyWRGEsbE 0p4o+5JAPhCB4kzts9ypd5C92Yw8APT+h/Tr2DPdpRuzngUdOw4AYQJbVQIDAQAB o4ICyDCCAsQwHQYDVR0OBBYEFOFoohW+0qRkHmVQtp9zK3zj6jc3MB8GA1UdIwQY MBaAFGNEQhDqCKxSmHjVGRfjswBU1iDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTBSQ0VPb0lyRktZZU5VWkYtT3pBRlRXSU5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lZGVhNmUtNjZjYy00ZmIxLWE0NTQt ZmU4MzdmOThlMDI2LzEvNFdpaUZiN1NwR1FlWlZDMm4zTXJmT1BxTnpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lZGVhNmUtNjZjYy00ZmIxLWE0NTQtZmU4MzdmOThlMDI2 LzEvWTBSQ0VPb0lyRktZZU5VWkYtT3pBRlRXSU5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHdBggrBgEFBQcBBwEB/wSBzTCByjCBxwQCAAEwgcADAwQC IAMDAwVYMAsDAwEfGgMEBh8bAAMEBB8bYAMEBx8bgAMDAh+cAwMCJXQDAwAlnwMD AyWwAwMALzUwDAMEBlPgQAMEAVPgUAMEAVPgVjALAwQHU+CAAwMBU+AwCwMDBFtQ AwQDW1AgAwQAW1AuMAsDBARbUDADAwFbUAMDA11AMAoDAwRdkAMDAF2WAwQCXZcY AwQHXZeAAwMDbXADBAaCAIADAwCCGTAKAwMBsPIDAwOw8AMDAbyYAwMCvNgwDQYJ KoZIhvcNAQELBQADggEBAAQYZON8jX3jPrjgPDZpieoi0z0VgfopvOO8f6R9Hzxi ZEZO/BbnKmBl6YT3m7dtNzbwEjJrVCMQnPCVkGgCAVeGdSPlqitIVshhN7iDc991 bB+PscZUPUNl+VZTtg88zLoVNAREWU0uq0IXhZUUHOFY/Ln1WGknNKT+/y4YGOU0 XWfVCWuWWFWx1DbNdKm/EgoxL5Ni9cLJchcIpLJK8ryPRptcgbf+7nvphMkDvJKy /G9lBM0M5dpLLIzhL39PjWdGo8/hhaInrzi3O28CNeOFxBEH9bRHNa8Q01uhvVMG HaJdS70n/enLp5+ULQtpn0bRtAyVvaWrsHa6pqevw4w= -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:22 2026 by rpki-client