This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/iYbozmAhuZXekfOxptVTlOnvYkY.roa File: iYbozmAhuZXekfOxptVTlOnvYkY.roa (raw, json) Hash identifier: /WhAE5gig6ZNzm82pZ7dm3ZCXNI4YTK2pP/V1Kuxu6Q= Subject key identifier: 89:86:E8:CE:60:21:B9:95:DE:91:F3:B1:A6:D5:53:94:E9:EF:62:46 Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019BE0CE8963203415C79B0FCD43E9EDD7C9 Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/iYbozmAhuZXekfOxptVTlOnvYkY.roa Signing time: Wed 21 Jan 2026 13:46:30 +0000 ROA not before: Wed 21 Jan 2026 13:46:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59651 IP address blocks: 31.40.195.0/24 maxlen: 24 37.72.141.0/24 maxlen: 24 45.141.128.0/24 maxlen: 24 45.159.21.0/24 maxlen: 24 45.159.22.0/24 maxlen: 24 46.253.131.0/24 maxlen: 24 62.204.49.0/24 maxlen: 24 77.83.24.0/22 maxlen: 24 83.97.116.0/22 maxlen: 24 88.218.45.0/24 maxlen: 24 88.218.47.0/24 maxlen: 24 91.246.51.0/24 maxlen: 24 91.247.163.0/24 maxlen: 24 94.154.113.0/24 maxlen: 24 146.19.44.0/24 maxlen: 24 176.126.104.0/24 maxlen: 24 178.20.28.0/22 maxlen: 24 185.202.108.0/24 maxlen: 24 185.212.115.0/24 maxlen: 24 193.31.126.0/24 maxlen: 24 193.42.245.0/24 maxlen: 24 193.151.189.0/24 maxlen: 24 193.151.190.0/24 maxlen: 24 193.151.191.0/24 maxlen: 24 193.163.89.0/24 maxlen: 24 193.163.92.0/24 maxlen: 24 193.163.207.0/24 maxlen: 24 194.70.234.0/24 maxlen: 24 194.99.24.0/24 maxlen: 24 194.99.26.0/24 maxlen: 24 212.18.113.0/24 maxlen: 24 212.18.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:ce:89:63:20:34:15:c7:9b:0f:cd:43:e9:ed:d7:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Jan 21 13:46:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8986e8ce6021b995de91f3b1a6d55394e9ef6246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0b:3d:6b:9d:9d:81:ec:81:6b:1d:48:16:3e: 55:97:fd:ed:ca:32:14:cb:37:7f:a5:58:77:44:90: 84:a8:6b:61:49:37:42:40:4c:84:2e:dd:9c:e3:4d: 11:56:a3:95:40:3d:76:26:3d:48:41:35:eb:9c:c4: 63:9e:a1:ad:1a:cf:cf:6d:6f:dd:be:f5:c7:51:68: 5a:be:94:e9:a9:cc:a5:3b:0f:d4:8f:62:aa:67:d1: fb:11:3c:18:67:1e:a8:f5:7b:59:47:27:ab:c7:19: df:82:18:28:7f:68:1e:6e:f7:7a:77:c8:5f:3b:57: f9:fe:fa:95:5d:5c:a3:64:65:67:ed:4f:3f:94:a7: 28:ca:8a:35:ed:fd:2a:9c:3d:29:aa:25:b4:c2:ac: 3f:00:c7:f1:8e:08:7b:f1:15:0a:df:a3:e0:23:f6: ab:bf:38:98:cf:e6:03:35:59:ee:2e:f4:3d:eb:f2: 7a:81:26:fd:a7:d8:3a:59:cf:4a:47:0f:9c:e0:58: 4a:09:0b:0a:b4:3e:6b:71:30:c8:9b:04:d2:b9:c2: 22:c7:e1:f3:6f:e6:f7:48:d5:b0:ce:15:8f:e3:c2: c4:30:dd:cc:66:c8:cc:92:90:38:da:f7:f3:cc:5d: 03:4e:8e:1f:2e:aa:a8:54:28:9a:07:8a:a4:25:4f: 88:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:86:E8:CE:60:21:B9:95:DE:91:F3:B1:A6:D5:53:94:E9:EF:62:46 X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/iYbozmAhuZXekfOxptVTlOnvYkY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.195.0/24 37.72.141.0/24 45.141.128.0/24 45.159.21.0-45.159.22.255 46.253.131.0/24 62.204.49.0/24 77.83.24.0/22 83.97.116.0/22 88.218.45.0/24 88.218.47.0/24 91.246.51.0/24 91.247.163.0/24 94.154.113.0/24 146.19.44.0/24 176.126.104.0/24 178.20.28.0/22 185.202.108.0/24 185.212.115.0/24 193.31.126.0/24 193.42.245.0/24 193.151.189.0-193.151.191.255 193.163.89.0/24 193.163.92.0/24 193.163.207.0/24 194.70.234.0/24 194.99.24.0/24 194.99.26.0/24 212.18.113.0/24 212.18.127.0/24 Signature Algorithm: sha256WithRSAEncryption aa:ee:de:d5:73:2c:84:a2:0b:0a:48:42:c3:8e:f2:96:05:b4: cb:91:b1:8b:97:4f:a9:c6:2d:16:89:25:ec:3d:d0:50:35:65: f4:2c:5c:47:cf:0f:40:3a:3d:03:f2:21:52:ac:08:7d:1e:ae: 88:8b:6d:a6:2a:30:39:01:da:e3:93:14:cb:bd:b0:f2:89:59: 1a:f1:57:5e:50:59:94:0d:f1:d6:70:46:1d:8d:7d:75:89:0a: 84:95:78:57:fd:49:f2:e1:e7:ae:dc:27:9e:be:42:1e:cd:46: 14:cc:15:4b:7b:3f:60:b9:53:25:0c:7f:30:09:94:9f:9c:40: 97:b8:11:d6:14:cd:b1:1d:1e:ce:e8:04:37:47:ef:7e:b1:5f: 46:38:3a:c8:6f:1c:28:c9:87:10:cf:f6:e7:65:67:86:6b:6b: 2d:ad:67:42:65:66:ac:ba:de:dc:20:b1:a0:2a:4d:c5:63:3d: 1a:8e:50:22:71:49:18:10:de:12:c1:64:c9:dd:5a:87:af:f7: 5c:e5:c6:77:56:0f:b1:3c:8b:ee:97:16:ca:18:ac:56:00:82: 5a:0e:7e:6f:3b:a5:9f:e8:3c:cd:15:dc:d8:9e:c8:b6:67:11: 84:d7:a7:d9:8a:71:41:de:c1:51:dd:d0:82:3e:d5:32:0c:a3: c8:7b:8a:12 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZvgzoljIDQVx5sPzUPp7dfJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjYwMTIxMTM0NjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTg2ZThjZTYwMjFiOTk1ZGU5MWYzYjFhNmQ1NTM5NGU5ZWY2MjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ws9a52dgeyBax1IFj5Vl/3tyjIU yzd/pVh3RJCEqGthSTdCQEyELt2c400RVqOVQD12Jj1IQTXrnMRjnqGtGs/PbW/d vvXHUWhavpTpqcylOw/Uj2KqZ9H7ETwYZx6o9XtZRyerxxnfghgof2gebvd6d8hf O1f5/vqVXVyjZGVn7U8/lKcoyoo17f0qnD0pqiW0wqw/AMfxjgh78RUK36PgI/ar vziYz+YDNVnuLvQ96/J6gSb9p9g6Wc9KRw+c4FhKCQsKtD5rcTDImwTSucIix+Hz b+b3SNWwzhWP48LEMN3MZsjMkpA42vfzzF0DTo4fLqqoVCiaB4qkJU+I5wIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFImG6M5gIbmV3pHzsabVU5Tp72JGMB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvaVlib3ptQWh1Wlhla2ZPeHB0VlRsT252WWtZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHbBggrBgEFBQcBBwEB/wSByzCByDCBxQQCAAEwgb4DBAAf KMMDBAAlSI0DBAAtjYAwDAMEAC2fFQMEAC2fFgMEAC79gwMEAD7MMQMEAk1TGAME AlNhdAMEAFjaLQMEAFjaLwMEAFv2MwMEAFv3owMEAF6acQMEAJITLAMEALB+aAME ArIUHAMEALnKbAMEALnUcwMEAMEffgMEAMEq9TAMAwQAwZe9AwQGwZeAAwQAwaNZ AwQAwaNcAwQAwaPPAwQAwkbqAwQAwmMYAwQAwmMaAwQA1BJxAwQA1BJ/MA0GCSqG SIb3DQEBCwUAA4IBAQCq7t7VcyyEogsKSELDjvKWBbTLkbGLl0+pxi0WiSXsPdBQ NWX0LFxHzw9AOj0D8iFSrAh9Hq6Ii22mKjA5AdrjkxTLvbDyiVka8VdeUFmUDfHW cEYdjX11iQqElXhX/Uny4eeu3CeevkIezUYUzBVLez9guVMlDH8wCZSfnECXuBHW FM2xHR7O6AQ3R+9+sV9GODrIbxwoyYcQz/bnZWeGa2strWdCZWasut7cILGgKk3F Yz0ajlAicUkYEN4SwWTJ3VqHr/dc5cZ3Vg+xPIvulxbKGKxWAIJaDn5vO6Wf6DzN FdzYnsi2ZxGE16fZinFB3sFR3dCCPtUyDKPIe4oS -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:58 2026 by rpki-client