This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/z-ipP4PljIhi0s0enY2Fi4e2AtY.roa File: z-ipP4PljIhi0s0enY2Fi4e2AtY.roa (raw, json) Hash identifier: h/WDrCIQ8T04if8DUNRgKtWzsh/GN2hFSKu/XltNf1g= Subject key identifier: CF:E8:A9:3F:83:E5:8C:88:62:D2:CD:1E:9D:8D:85:8B:87:B6:02:D6 Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af Certificate serial: 019B7C1346FA1F43E453D1C0B9461FE5957B Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/z-ipP4PljIhi0s0enY2Fi4e2AtY.roa Signing time: Fri 02 Jan 2026 00:19:56 +0000 ROA not before: Fri 02 Jan 2026 00:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3209 IP address blocks: 24.134.0.0/16 maxlen: 16 31.16.0.0/14 maxlen: 24 37.4.0.0/15 maxlen: 23 77.20.0.0/14 maxlen: 24 77.24.0.0/16 maxlen: 16 77.25.0.0/17 maxlen: 23 83.169.128.0/18 maxlen: 18 88.134.0.0/16 maxlen: 24 90.187.0.0/16 maxlen: 16 91.64.0.0/14 maxlen: 14 95.88.0.0/14 maxlen: 24 109.47.0.0/16 maxlen: 16 109.84.0.0/15 maxlen: 15 146.52.0.0/16 maxlen: 24 178.24.0.0/14 maxlen: 24 185.19.196.0/22 maxlen: 22 188.192.0.0/14 maxlen: 24 2a02:8100::/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:46:fa:1f:43:e4:53:d1:c0:b9:46:1f:e5:95:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af Validity Not Before: Jan 2 00:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfe8a93f83e58c8862d2cd1e9d8d858b87b602d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9d:7b:51:ca:5b:09:98:ab:14:7f:4d:41:58: e1:3b:95:be:d6:a0:da:ac:ee:08:3e:59:4d:e8:cf: 38:b0:5e:d2:d7:75:14:d2:d1:6c:ed:fc:74:1d:eb: 2a:31:5a:13:04:31:09:19:65:a2:c8:ab:76:46:aa: 3a:a7:69:56:21:49:e3:f7:59:c1:86:2d:44:91:40: db:05:99:8a:b0:18:92:ee:12:b1:d9:cc:4c:5b:7e: 8e:e9:a3:00:42:5e:5c:45:d0:27:19:46:8d:66:77: 4a:cc:c8:5d:0f:71:1e:5f:5d:1f:16:de:a9:c9:5e: 62:ee:97:40:1a:65:fc:1b:a5:49:c2:93:b6:0c:df: 78:19:40:f0:b0:5e:04:08:91:17:b4:51:a8:53:42: 30:cb:05:b7:c7:59:58:12:3d:f2:7f:ba:18:08:3c: 9f:d6:e3:85:d0:30:1d:21:33:b7:08:65:a0:5e:50: 2e:89:f3:f2:e2:56:a8:be:be:ff:a5:09:5e:5e:13: 5b:e4:9d:fe:3c:94:01:df:88:5a:8e:7d:e9:b9:3d: 13:b9:0f:b9:d8:47:73:be:9c:6a:e4:e7:ff:dd:e6: 20:ae:f7:ff:54:56:44:0e:02:af:b3:65:66:28:21: dc:92:4b:a4:0e:f5:76:c6:24:8a:53:dc:7e:8c:bc: 03:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E8:A9:3F:83:E5:8C:88:62:D2:CD:1E:9D:8D:85:8B:87:B6:02:D6 X509v3 Authority Key Identifier: keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/z-ipP4PljIhi0s0enY2Fi4e2AtY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.134.0.0/16 31.16.0.0/14 37.4.0.0/15 77.20.0.0-77.25.127.255 83.169.128.0/18 88.134.0.0/16 90.187.0.0/16 91.64.0.0/14 95.88.0.0/14 109.47.0.0/16 109.84.0.0/15 146.52.0.0/16 178.24.0.0/14 185.19.196.0/22 188.192.0.0/14 IPv6: 2a02:8100::/27 Signature Algorithm: sha256WithRSAEncryption 9e:ac:41:c3:70:9d:13:6c:15:64:6f:3d:f4:c7:78:ef:18:c1: 79:67:33:23:e7:ef:c5:ca:a2:50:cc:97:8f:14:ca:57:96:36: 0c:ee:e0:17:1c:be:c0:99:28:78:17:d6:44:fd:84:0f:ca:ff: ea:4e:2f:2e:ee:8e:0e:50:70:c8:25:3d:81:33:0b:59:78:8b: 37:02:46:b8:3f:30:75:48:c3:39:2c:c7:c3:a7:28:46:51:a7: 9b:2a:5c:47:ab:c0:d9:f7:5d:e4:85:69:39:61:0b:04:54:43: f6:c6:08:46:7f:5e:b6:98:0e:29:f1:23:af:80:77:46:e1:ee: dc:de:0b:3c:b7:7c:ec:3a:a4:a3:b1:f6:b2:96:6c:d0:41:27: c5:7b:27:b0:de:98:ab:c6:09:00:b7:29:6e:71:47:2d:7e:1d: 57:1e:3e:15:82:c3:91:a0:ef:ee:d5:d0:d4:d5:a8:0e:b1:bf: f7:7c:0e:54:30:d3:70:d7:42:63:6c:81:7e:c9:64:10:34:fb: f2:22:86:8c:81:0a:d6:96:7e:2a:d7:c8:83:97:b9:6c:94:f0: 53:e6:77:07:93:a0:31:01:1b:d6:b8:75:b4:fb:57:eb:2e:d5: 9a:30:c8:4f:6d:7f:fa:f0:4e:2c:23:5b:9e:f4:d3:63:cc:c8: 6e:71:24:25 -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgISAZt8E0b6H0PkU9HAuUYf5ZV7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0M2JhYWZjNjRiMzNlNDNkYjc4ZGM3YWVkNjA1ZWY3MDQw NmQ5YWYwHhcNMjYwMTAyMDAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmU4YTkzZjgzZTU4Yzg4NjJkMmNkMWU5ZDhkODU4Yjg3YjYwMmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp17UcpbCZirFH9NQVjhO5W+1qDa rO4IPllN6M84sF7S13UU0tFs7fx0HesqMVoTBDEJGWWiyKt2Rqo6p2lWIUnj91nB hi1EkUDbBZmKsBiS7hKx2cxMW36O6aMAQl5cRdAnGUaNZndKzMhdD3EeX10fFt6p yV5i7pdAGmX8G6VJwpO2DN94GUDwsF4ECJEXtFGoU0IwywW3x1lYEj3yf7oYCDyf 1uOF0DAdITO3CGWgXlAuifPy4laovr7/pQleXhNb5J3+PJQB34hajn3puT0TuQ+5 2Edzvpxq5Of/3eYgrvf/VFZEDgKvs2VmKCHckkukDvV2xiSKU9x+jLwDFQIDAQAB o4ICZzCCAmMwHQYDVR0OBBYEFM/oqT+D5YyIYtLNHp2NhYuHtgLWMB8GA1UdIwQY MBaAFOQ7qvxksz5D23jceu1gXvcEBtmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTIt ZTY4MTJkYWI2OTk5LzEvei1pcFA0UGxqSWhpMHMwZW5ZMkZpNGUyQXRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTItZTY4MTJkYWI2OTk5 LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH0GCCsGAQUFBwEHAQH/BG4wbDBbBAIAATBVAwMAGIYDAwIf EAMDASUEMAsDAwJNFAMEB00ZAAMEBlOpgAMDAFiGAwMAWrsDAwJbQAMDAl9YAwMA bS8DAwFtVAMDAJI0AwMCshgDBAK5E8QDAwK8wDANBAIAAjAHAwUFKgKBADANBgkq hkiG9w0BAQsFAAOCAQEAnqxBw3CdE2wVZG899Md47xjBeWczI+fvxcqiUMyXjxTK V5Y2DO7gFxy+wJkoeBfWRP2ED8r/6k4vLu6ODlBwyCU9gTMLWXiLNwJGuD8wdUjD OSzHw6coRlGnmypcR6vA2fdd5IVpOWELBFRD9sYIRn9etpgOKfEjr4B3RuHu3N4L PLd87Dqko7H2spZs0EEnxXsnsN6Yq8YJALcpbnFHLX4dVx4+FYLDkaDv7tXQ1NWo DrG/93wOVDDTcNdCY2yBfslkEDT78iKGjIEK1pZ+KtfIg5e5bJTwU+Z3B5OgMQEb 1rh1tPtX6y7VmjDIT21/+vBOLCNbnvTTY8zIbnEkJQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:20 2026 by rpki-client