This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/4DB0vccVjfoUjQfveiXJhpnSOUM.roa File: 4DB0vccVjfoUjQfveiXJhpnSOUM.roa (raw, json) Hash identifier: 3T1tRCR1ciZc+zXi+bfe1bkJ2o9rpXgaX91zFNkyvSM= Subject key identifier: E0:30:74:BD:C7:15:8D:FA:14:8D:07:EF:7A:25:C9:86:99:D2:39:43 Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019BEA173F1EFF5796472FED62487E17A576 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/4DB0vccVjfoUjQfveiXJhpnSOUM.roa Signing time: Fri 23 Jan 2026 09:02:30 +0000 ROA not before: Fri 23 Jan 2026 09:02:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24589 IP address blocks: 31.42.80.0/20 maxlen: 20 83.243.88.0/21 maxlen: 21 84.38.136.0/21 maxlen: 21 87.99.64.0/19 maxlen: 19 87.99.64.0/24 maxlen: 24 87.99.65.0/24 maxlen: 24 87.99.66.0/24 maxlen: 24 87.99.67.0/24 maxlen: 24 87.99.95.0/24 maxlen: 24 88.135.128.0/19 maxlen: 19 91.90.224.0/19 maxlen: 29 91.90.225.0/24 maxlen: 24 91.90.230.0/24 maxlen: 24 91.90.231.0/24 maxlen: 24 91.90.236.0/24 maxlen: 24 91.90.237.0/25 maxlen: 25 91.90.238.0/24 maxlen: 24 91.90.252.64/29 maxlen: 29 91.90.255.0/24 maxlen: 24 91.233.214.0/23 maxlen: 23 109.197.208.0/21 maxlen: 21 109.197.208.0/24 maxlen: 24 109.229.192.0/19 maxlen: 19 109.229.192.0/20 maxlen: 20 109.229.208.0/21 maxlen: 21 171.25.218.0/23 maxlen: 23 176.103.176.0/22 maxlen: 22 176.103.184.0/24 maxlen: 24 176.106.48.0/20 maxlen: 20 176.106.100.0/23 maxlen: 23 176.106.160.0/20 maxlen: 20 176.106.176.0/21 maxlen: 21 185.47.10.0/24 maxlen: 24 185.47.11.0/24 maxlen: 24 193.111.244.0/22 maxlen: 22 193.238.212.0/22 maxlen: 22 193.238.212.128/25 maxlen: 25 193.238.216.0/21 maxlen: 21 194.9.212.0/22 maxlen: 22 194.9.212.0/24 maxlen: 24 195.69.88.0/22 maxlen: 22 213.110.64.0/23 maxlen: 23 213.110.76.0/22 maxlen: 22 213.110.80.0/20 maxlen: 20 2a01:8ca0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:17:3f:1e:ff:57:96:47:2f:ed:62:48:7e:17:a5:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jan 23 09:02:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e03074bdc7158dfa148d07ef7a25c98699d23943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:71:e2:2f:7f:55:a0:c1:d5:67:54:16:7d:42: 9a:b0:83:85:4e:ea:5c:ec:48:51:06:3f:70:81:45: a6:25:f0:dc:bc:79:8d:f9:32:6b:5d:ba:15:38:b8: 42:95:95:d1:9e:3b:e1:72:1c:6c:c6:c2:59:51:49: ec:12:82:5b:2c:0d:8d:d7:4b:78:7b:7c:4b:0b:bb: a1:11:6e:71:f0:ff:73:ef:28:7a:28:61:88:6e:56: 7f:f1:90:e0:77:21:03:d5:44:9d:1a:b9:e2:53:26: 19:32:dc:4a:4a:57:80:ee:01:7e:9a:60:e1:e7:b5: 6a:bc:db:b7:4b:cc:7c:c3:60:5e:93:21:48:6d:ba: 35:02:a1:c0:a2:0f:5e:4b:28:3b:6d:f2:f1:a5:5c: 1a:46:a9:eb:db:26:4c:2e:ad:2e:9f:8e:d1:6f:28: 73:7d:a9:e6:d0:b5:2c:ad:ac:72:8c:cc:21:b2:82: 1a:f1:95:e3:94:00:e7:96:2c:d3:fa:5a:23:08:d4: 2a:b9:e6:eb:95:9b:a7:f1:09:e7:e0:77:36:c4:13: ed:e9:56:d4:5e:63:1e:df:af:a2:4b:22:0c:fa:b3: ba:bb:0a:01:f3:c2:bd:c4:f0:87:46:1e:43:47:8b: 18:15:7f:c7:65:81:a6:6d:9e:ea:97:a5:ef:9a:d6: 31:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:30:74:BD:C7:15:8D:FA:14:8D:07:EF:7A:25:C9:86:99:D2:39:43 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/4DB0vccVjfoUjQfveiXJhpnSOUM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.42.80.0/20 83.243.88.0/21 84.38.136.0/21 87.99.64.0/19 88.135.128.0/19 91.90.224.0/19 91.233.214.0/23 109.197.208.0/21 109.229.192.0/19 171.25.218.0/23 176.103.176.0/22 176.103.184.0/24 176.106.48.0/20 176.106.100.0/23 176.106.160.0-176.106.183.255 185.47.10.0/23 193.111.244.0/22 193.238.212.0-193.238.223.255 194.9.212.0/22 195.69.88.0/22 213.110.64.0/23 213.110.76.0-213.110.95.255 IPv6: 2a01:8ca0::/32 Signature Algorithm: sha256WithRSAEncryption 35:75:58:67:07:56:2a:8a:f0:e0:d7:60:c8:1a:1a:d6:56:78: 1f:66:34:7e:36:6a:37:40:c3:79:52:df:34:e5:e6:68:16:38: 55:08:d7:d2:f1:8f:17:65:2d:ff:f3:7d:61:2a:c9:fd:ff:63: cc:9a:73:14:34:3b:38:1b:77:3f:e9:3a:9d:fd:ed:07:36:5f: 28:35:e9:9b:f7:01:ac:e7:ed:fe:f1:2b:99:4a:04:b2:82:b8: ab:8c:a6:84:3e:66:99:75:55:cb:05:2d:7d:92:34:2e:97:c6: 43:7e:29:fe:28:0d:a9:ea:18:90:15:9f:69:c7:20:ba:d4:f4: 45:93:c4:3a:7d:83:0a:29:97:89:65:a8:70:7c:07:69:2c:1a: 92:19:6e:d6:19:36:6c:01:40:5a:8c:5d:6b:87:69:8f:ad:c5: 8b:7b:e6:56:4e:65:d7:e1:4b:8b:63:35:1b:36:39:93:df:18: e0:75:51:f5:2c:28:8c:95:ab:b6:ae:8b:87:b2:27:43:3f:4b: 32:10:a7:58:1e:d5:cf:d8:69:8c:fc:9c:96:9c:79:8b:72:4c: 5a:59:df:a7:c0:e0:11:5a:0f:57:30:a2:7c:79:4e:a4:71:fe: f8:0b:c5:a6:7d:87:13:23:9a:99:f3:07:4f:8c:d1:b7:aa:f3: df:ed:b6:e0 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgISAZvqFz8e/1eWRy/tYkh+F6V2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwMTIzMDkwMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDMwNzRiZGM3MTU4ZGZhMTQ4ZDA3ZWY3YTI1Yzk4Njk5ZDIzOTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13HiL39VoMHVZ1QWfUKasIOFTupc 7EhRBj9wgUWmJfDcvHmN+TJrXboVOLhClZXRnjvhchxsxsJZUUnsEoJbLA2N10t4 e3xLC7uhEW5x8P9z7yh6KGGIblZ/8ZDgdyED1USdGrniUyYZMtxKSleA7gF+mmDh 57VqvNu3S8x8w2BekyFIbbo1AqHAog9eSyg7bfLxpVwaRqnr2yZMLq0un47Rbyhz fanm0LUsraxyjMwhsoIa8ZXjlADnlizT+lojCNQquebrlZun8Qnn4Hc2xBPt6VbU XmMe36+iSyIM+rO6uwoB88K9xPCHRh5DR4sYFX/HZYGmbZ7ql6XvmtYxowIDAQAB o4ICszCCAq8wHQYDVR0OBBYEFOAwdL3HFY36FI0H73olyYaZ0jlDMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvNERCMHZjY1ZqZm9ValFmdmVpWEpocG5TT1VNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHIBggrBgEFBQcBBwEB/wSBuDCBtTCBowQCAAEwgZwDBAQf KlADBANT81gDBANUJogDBAVXY0ADBAVYh4ADBAVbWuADBAFb6dYDBANtxdADBAVt 5cADBAGrGdoDBAKwZ7ADBACwZ7gDBASwajADBAGwamQwDAMEBbBqoAMEA7BqsAME AbkvCgMEAsFv9DAMAwQCwe7UAwQFwe7AAwQCwgnUAwQCw0VYAwQB1W5AMAwDBALV bkwDBAXVbkAwDQQCAAIwBwMFACoBjKAwDQYJKoZIhvcNAQELBQADggEBADV1WGcH ViqK8ODXYMgaGtZWeB9mNH42ajdAw3lS3zTl5mgWOFUI19LxjxdlLf/zfWEqyf3/ Y8yacxQ0Ozgbdz/pOp397Qc2Xyg16Zv3Aazn7f7xK5lKBLKCuKuMpoQ+Zpl1VcsF LX2SNC6XxkN+Kf4oDanqGJAVn2nHILrU9EWTxDp9gwopl4llqHB8B2ksGpIZbtYZ NmwBQFqMXWuHaY+txYt75lZOZdfhS4tjNRs2OZPfGOB1UfUsKIyVq7aui4eyJ0M/ SzIQp1ge1c/YaYz8nJaceYtyTFpZ36fA4BFaD1cwonx5TqRx/vgLxaZ9hxMjmpnz B0+M0beq89/ttuA= -----END CERTIFICATE-----Generated at Sun Jan 25 12:00:47 2026 by rpki-client