This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/vG4zf4gBfvqtcILrPLbA-wHSJso.roa File: vG4zf4gBfvqtcILrPLbA-wHSJso.roa (raw, json) Hash identifier: GuoYyttXZtfdHI3sLS6+ceDcyDmzz98nHEsNcf7mD9A= Subject key identifier: BC:6E:33:7F:88:01:7E:FA:AD:70:82:EB:3C:B6:C0:FB:01:D2:26:CA Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e Certificate serial: 019B7F15FD6EF077CE1775F3E8B805284F8E Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/vG4zf4gBfvqtcILrPLbA-wHSJso.roa Signing time: Fri 02 Jan 2026 14:21:46 +0000 ROA not before: Fri 02 Jan 2026 14:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34358 IP address blocks: 37.251.128.0/19 maxlen: 19 37.251.160.0/20 maxlen: 20 37.251.248.0/21 maxlen: 24 37.251.254.0/24 maxlen: 24 37.251.255.0/24 maxlen: 24 77.81.164.0/23 maxlen: 23 86.105.192.0/24 maxlen: 24 89.32.44.0/22 maxlen: 22 89.32.44.0/24 maxlen: 24 89.35.173.0/24 maxlen: 24 89.36.128.0/23 maxlen: 23 89.36.128.0/24 maxlen: 24 89.36.129.0/24 maxlen: 24 89.36.130.0/24 maxlen: 24 89.36.132.0/23 maxlen: 24 89.36.134.0/24 maxlen: 24 89.36.135.0/24 maxlen: 24 89.38.248.0/24 maxlen: 24 89.38.249.0/24 maxlen: 24 89.38.250.0/23 maxlen: 23 89.38.252.0/22 maxlen: 22 89.42.11.0/24 maxlen: 24 89.45.192.0/21 maxlen: 21 89.45.192.0/23 maxlen: 23 91.208.142.0/24 maxlen: 24 93.119.227.0/24 maxlen: 24 94.24.29.0/24 maxlen: 24 94.24.48.0/21 maxlen: 21 94.24.72.0/22 maxlen: 22 94.24.76.0/23 maxlen: 23 94.24.78.0/24 maxlen: 24 109.95.8.0/21 maxlen: 21 128.0.46.0/23 maxlen: 23 185.171.184.0/24 maxlen: 24 185.171.185.0/24 maxlen: 24 185.171.187.0/24 maxlen: 24 188.214.142.0/24 maxlen: 24 188.215.48.0/21 maxlen: 21 193.239.130.0/23 maxlen: 23 193.242.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:fd:6e:f0:77:ce:17:75:f3:e8:b8:05:28:4f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e Validity Not Before: Jan 2 14:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc6e337f88017efaad7082eb3cb6c0fb01d226ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:75:4c:69:37:b3:d0:7d:e0:b6:a7:19:f8:ed: df:a2:d7:ca:78:6b:c1:76:b8:8b:b2:c8:25:b0:95: a3:cc:e1:a2:9b:07:79:5b:62:f8:99:ee:67:ac:b2: 40:25:3c:c2:ce:99:be:45:02:d4:13:05:0a:5a:c7: 9a:1c:21:14:d0:39:6b:92:cc:61:1a:b5:96:07:8f: a8:6f:55:04:9b:57:92:b4:43:aa:1c:a2:54:ef:21: df:45:ce:e2:a8:a6:09:43:b3:e9:e1:8e:43:5c:8f: 50:e0:e7:0a:2a:68:8b:5c:f9:4d:70:c9:12:8b:71: a6:43:50:d6:c8:d9:89:76:9f:c3:9a:bf:51:5f:2a: 3c:91:f3:10:58:0c:ed:f8:0c:e7:c0:67:d9:33:24: e4:9e:66:73:79:36:ab:9a:10:7d:fe:28:76:92:58: e4:ac:88:28:4a:66:41:f9:ef:5f:72:37:7f:f1:66: 26:06:2a:c0:20:28:ce:78:46:ba:34:b7:3e:81:7d: 82:87:85:68:5c:af:04:ac:33:30:b2:bc:b9:23:d6: 57:05:9f:24:e1:f8:70:a9:e7:e3:0e:14:c5:13:1d: ba:34:40:b5:ba:39:6d:5b:bc:25:a2:29:88:aa:e5: 1b:50:d6:f9:5e:3a:26:e8:97:49:98:2c:dc:e4:6f: 2d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6E:33:7F:88:01:7E:FA:AD:70:82:EB:3C:B6:C0:FB:01:D2:26:CA X509v3 Authority Key Identifier: keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/vG4zf4gBfvqtcILrPLbA-wHSJso.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.251.128.0-37.251.175.255 37.251.248.0/21 77.81.164.0/23 86.105.192.0/24 89.32.44.0/22 89.35.173.0/24 89.36.128.0-89.36.130.255 89.36.132.0/22 89.38.248.0/21 89.42.11.0/24 89.45.192.0/21 91.208.142.0/24 93.119.227.0/24 94.24.29.0/24 94.24.48.0/21 94.24.72.0-94.24.78.255 109.95.8.0/21 128.0.46.0/23 185.171.184.0/23 185.171.187.0/24 188.214.142.0/24 188.215.48.0/21 193.239.130.0/23 193.242.120.0/24 Signature Algorithm: sha256WithRSAEncryption 74:74:83:18:c1:99:4f:41:f9:55:1f:fc:36:58:d1:f5:02:2b: d8:6c:4c:ce:b8:81:2d:19:90:31:13:8d:dc:02:22:25:88:e8: bc:5e:82:b0:30:71:2e:6f:b3:8d:c5:21:cb:1e:68:08:58:70: e2:7c:9f:0b:18:2f:b6:7a:4a:65:08:78:bd:62:09:26:0d:49: 5b:ec:c9:0a:90:b2:92:c9:c0:ba:30:52:1c:ac:62:f6:09:6b: 26:44:9b:c5:d0:36:fa:09:99:6a:7b:97:8e:5e:c3:1c:b4:a9: 98:89:67:8d:77:19:1a:c9:aa:6d:23:7f:bf:fd:6f:82:7e:0c: 67:d4:44:d1:90:87:da:1e:06:90:93:6f:3b:9a:2d:99:b8:8d: 57:73:0a:25:c3:8d:d0:ab:1d:ab:4c:df:ed:d3:f2:eb:58:ec: 32:56:ce:ea:f9:a5:b6:94:02:cd:45:ed:52:9c:1f:6c:5a:63: e1:74:cd:5b:a5:6a:e9:7b:62:b4:82:ce:eb:16:78:ed:c4:fd: 4c:70:b4:cb:cb:82:4f:1a:3b:b3:a9:f9:cf:af:51:1c:6b:51: e7:5a:3a:25:1d:4c:41:e5:93:61:5f:2a:1a:d2:41:fc:be:d3: fa:28:26:bf:31:00:85:bb:cf:87:b7:4b:1b:f7:f9:94:09:18: 46:30:39:70 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt/Ff1u8HfOF3Xz6LgFKE+OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwOGFmNDg1YjRmZDBmMDM3MTdjZDRhNzA5ZWYxMWM2MWQz ZWY0NmUwHhcNMjYwMTAyMTQyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzZlMzM3Zjg4MDE3ZWZhYWQ3MDgyZWIzY2I2YzBmYjAxZDIyNmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXVMaTez0H3gtqcZ+O3fotfKeGvB driLssglsJWjzOGimwd5W2L4me5nrLJAJTzCzpm+RQLUEwUKWseaHCEU0Dlrksxh GrWWB4+ob1UEm1eStEOqHKJU7yHfRc7iqKYJQ7Pp4Y5DXI9Q4OcKKmiLXPlNcMkS i3GmQ1DWyNmJdp/Dmr9RXyo8kfMQWAzt+AznwGfZMyTknmZzeTarmhB9/ih2kljk rIgoSmZB+e9fcjd/8WYmBirAICjOeEa6NLc+gX2Ch4VoXK8ErDMwsry5I9ZXBZ8k 4fhwqefjDhTFEx26NEC1ujltW7wloimIquUbUNb5Xjom6JdJmCzc5G8tvwIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFLxuM3+IAX76rXCC6zy2wPsB0ibKMB8GA1UdIwQY MBaAFECK9IW0/Q8DcXzUpwnvEcYdPvRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzkt Yjk1YjA4YTIzYWUxLzEvdkc0emY0Z0JmdnF0Y0lMclBMYkEtd0hTSnNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzktYjk1YjA4YTIzYWUx LzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHFBggrBgEFBQcBBwEB/wSBtTCBsjCBrwQCAAEwgagwDAME ByX7gAMEBCX7oAMEAyX7+AMEAU1RpAMEAFZpwAMEAlkgLAMEAFkjrTAMAwQHWSSA AwQAWSSCAwQCWSSEAwQDWSb4AwQAWSoLAwQDWS3AAwQAW9COAwQAXXfjAwQAXhgd AwQDXhgwMAwDBANeGEgDBABeGE4DBANtXwgDBAGAAC4DBAG5q7gDBAC5q7sDBAC8 1o4DBAO81zADBAHB74IDBADB8ngwDQYJKoZIhvcNAQELBQADggEBAHR0gxjBmU9B +VUf/DZY0fUCK9hsTM64gS0ZkDETjdwCIiWI6LxegrAwcS5vs43FIcseaAhYcOJ8 nwsYL7Z6SmUIeL1iCSYNSVvsyQqQspLJwLowUhysYvYJayZEm8XQNvoJmWp7l45e wxy0qZiJZ413GRrJqm0jf7/9b4J+DGfURNGQh9oeBpCTbzuaLZm4jVdzCiXDjdCr HatM3+3T8utY7DJWzur5pbaUAs1F7VKcH2xaY+F0zVulaul7YrSCzusWeO3E/Uxw tMvLgk8aO7Op+c+vURxrUedaOiUdTEHlk2FfKhrSQfy+0/ooJr8xAIW7z4e3Sxv3 +ZQJGEYwOXA= -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:46 2026 by rpki-client