This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/ajZvyc1TZO3sN3JzZ4xIlekYW3A.roa File: ajZvyc1TZO3sN3JzZ4xIlekYW3A.roa (raw, json) Hash identifier: KoTZ28q/3XFXaDAUF+RkPrxNb4KFBcBG2YemXG25Ts8= Subject key identifier: 6A:36:6F:C9:CD:53:64:ED:EC:37:72:73:67:8C:48:95:E9:18:5B:70 Certificate issuer: /CN=bd7d8178cec5cd376548a9049117f469c0a7431c Certificate serial: 019BB28F4EB1BDC40487DF9F4A0ADD428A2F Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/ajZvyc1TZO3sN3JzZ4xIlekYW3A.roa Signing time: Mon 12 Jan 2026 14:14:54 +0000 ROA not before: Mon 12 Jan 2026 14:14:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43937 IP address blocks: 78.24.48.0/24 maxlen: 24 78.24.49.0/24 maxlen: 24 78.24.50.0/24 maxlen: 24 78.24.51.0/24 maxlen: 24 78.24.52.0/24 maxlen: 24 78.24.53.0/24 maxlen: 24 78.24.54.0/24 maxlen: 24 78.24.55.0/24 maxlen: 24 82.116.128.0/24 maxlen: 24 82.116.129.0/24 maxlen: 24 82.116.130.0/24 maxlen: 24 82.116.131.0/24 maxlen: 24 82.116.132.0/24 maxlen: 24 82.116.133.0/24 maxlen: 24 82.116.134.0/24 maxlen: 24 82.116.135.0/24 maxlen: 24 82.116.136.0/24 maxlen: 24 82.116.137.0/24 maxlen: 24 82.116.138.0/24 maxlen: 24 82.116.139.0/24 maxlen: 24 82.116.140.0/24 maxlen: 24 82.116.141.0/24 maxlen: 24 82.116.142.0/24 maxlen: 24 82.116.143.0/24 maxlen: 24 82.116.144.0/24 maxlen: 24 82.116.145.0/24 maxlen: 24 82.116.146.0/24 maxlen: 24 82.116.147.0/24 maxlen: 24 82.116.148.0/24 maxlen: 24 82.116.149.0/24 maxlen: 24 82.116.150.0/24 maxlen: 24 82.116.151.0/24 maxlen: 24 82.116.152.0/24 maxlen: 24 82.116.153.0/24 maxlen: 24 82.116.154.0/24 maxlen: 24 82.116.155.0/24 maxlen: 24 82.116.156.0/24 maxlen: 24 82.116.157.0/24 maxlen: 24 82.116.158.0/24 maxlen: 24 82.116.159.0/24 maxlen: 24 94.190.144.0/24 maxlen: 24 94.190.145.0/24 maxlen: 24 94.190.146.0/24 maxlen: 24 94.190.147.0/24 maxlen: 24 94.190.148.0/24 maxlen: 24 94.190.149.0/24 maxlen: 24 94.190.150.0/24 maxlen: 24 94.190.151.0/24 maxlen: 24 94.190.152.0/24 maxlen: 24 94.190.153.0/24 maxlen: 24 94.190.154.0/24 maxlen: 24 94.190.155.0/24 maxlen: 24 94.190.156.0/24 maxlen: 24 94.190.157.0/24 maxlen: 24 94.190.158.0/24 maxlen: 24 94.190.159.0/24 maxlen: 24 103.220.220.0/22 maxlen: 24 103.220.220.0/24 maxlen: 24 103.220.221.0/24 maxlen: 24 103.220.222.0/24 maxlen: 24 103.220.223.0/24 maxlen: 24 103.245.116.0/24 maxlen: 24 103.245.117.0/24 maxlen: 24 103.245.118.0/24 maxlen: 24 103.245.119.0/24 maxlen: 24 178.255.8.0/24 maxlen: 24 178.255.9.0/24 maxlen: 24 178.255.10.0/24 maxlen: 24 178.255.11.0/24 maxlen: 24 178.255.12.0/24 maxlen: 24 178.255.13.0/24 maxlen: 24 178.255.14.0/24 maxlen: 24 178.255.15.0/24 maxlen: 24 185.6.176.0/24 maxlen: 24 185.6.177.0/24 maxlen: 24 185.6.178.0/24 maxlen: 24 185.6.179.0/24 maxlen: 24 185.249.222.0/24 maxlen: 24 185.249.223.0/24 maxlen: 24 213.187.224.0/24 maxlen: 24 213.187.225.0/24 maxlen: 24 213.187.226.0/24 maxlen: 24 213.187.227.0/24 maxlen: 24 213.187.228.0/22 maxlen: 24 213.187.228.0/24 maxlen: 24 213.187.229.0/24 maxlen: 24 213.187.230.0/24 maxlen: 24 213.187.231.0/24 maxlen: 24 213.187.232.0/24 maxlen: 24 213.187.233.0/24 maxlen: 24 213.187.235.0/24 maxlen: 24 213.187.236.0/24 maxlen: 24 213.187.237.0/24 maxlen: 24 213.187.238.0/24 maxlen: 24 213.187.239.0/24 maxlen: 24 213.187.248.0/21 maxlen: 21 213.187.248.0/24 maxlen: 24 213.187.249.0/24 maxlen: 24 213.187.250.0/24 maxlen: 24 213.187.251.0/24 maxlen: 24 213.187.252.0/24 maxlen: 24 213.187.253.0/24 maxlen: 24 213.187.254.0/24 maxlen: 24 213.187.255.0/24 maxlen: 24 2a02:7980::/32 maxlen: 32 2a02:7980:105::/48 maxlen: 48 2a02:7980:200::/45 maxlen: 48 2a02:7980:200::/48 maxlen: 48 2a02:7980:300::/46 maxlen: 48 2a02:7980:307::/48 maxlen: 48 2a02:7980:308::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:8f:4e:b1:bd:c4:04:87:df:9f:4a:0a:dd:42:8a:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c Validity Not Before: Jan 12 14:14:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a366fc9cd5364edec377273678c4895e9185b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f4:f9:1c:dd:19:b1:d0:a0:a4:f8:98:b5:50: 07:55:2e:8d:f3:d0:78:82:22:b3:45:47:9a:77:dc: e9:95:7f:70:86:8c:6a:7e:a2:7a:4e:72:d3:01:a6: ad:0d:0f:62:cd:98:bd:00:5f:d6:45:18:9e:db:23: aa:bd:9c:97:28:1f:45:5f:13:de:d6:5d:87:4c:3d: a5:18:61:40:55:3e:14:81:91:62:54:db:d8:10:1e: e1:55:58:d9:16:bc:bd:06:b9:b1:f5:d6:41:d2:0a: 9d:10:31:64:a5:86:32:2e:05:f2:ab:c6:8b:fe:98: e5:85:33:57:cb:c2:0d:02:a6:95:7d:d2:be:a2:92: 5f:63:2e:71:8c:9d:23:18:91:91:76:af:82:4d:01: 20:a7:6a:22:f1:30:9f:23:97:0e:36:0b:92:f0:ea: e1:65:a6:f4:eb:3c:46:6f:f1:86:be:24:bd:ca:89: 1d:0f:9c:0f:67:01:95:57:d9:05:4b:6a:ec:d8:86: 78:97:22:37:bd:0b:f8:a9:ff:1a:16:97:6d:d9:66: cc:1f:46:1c:da:ac:b4:9c:e0:28:eb:d6:d7:df:e5: cb:d0:7c:ce:e9:ab:7b:a9:4c:ab:f7:d3:b6:65:16: 0b:2b:37:c4:c2:c8:6c:ef:91:f2:ef:22:29:9d:ea: 8a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:36:6F:C9:CD:53:64:ED:EC:37:72:73:67:8C:48:95:E9:18:5B:70 X509v3 Authority Key Identifier: keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/ajZvyc1TZO3sN3JzZ4xIlekYW3A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.24.48.0/21 82.116.128.0/19 94.190.144.0/20 103.220.220.0/22 103.245.116.0/22 178.255.8.0/21 185.6.176.0/22 185.249.222.0/23 213.187.224.0-213.187.233.255 213.187.235.0-213.187.239.255 213.187.248.0/21 IPv6: 2a02:7980::/32 Signature Algorithm: sha256WithRSAEncryption 6e:0b:5a:77:1c:93:ca:92:f0:a6:45:e4:31:36:2c:71:be:db: ef:ac:db:dd:69:5c:7b:0c:6e:64:5e:e4:8f:5a:f5:ec:d9:98: 9d:6e:eb:5d:87:db:57:3d:2b:55:e0:7d:a1:d1:4c:a2:24:2c: 22:5c:f6:2b:a5:2c:1e:a4:ea:46:16:56:ab:c0:11:a1:83:cc: c3:0a:55:27:41:49:09:b7:57:cd:ed:20:6d:ab:19:a4:b2:9c: e6:a5:8a:f4:7b:36:bf:e6:18:8c:c1:ac:60:e3:ef:23:d6:f8: 17:ac:21:96:21:54:08:bc:66:32:9d:a3:92:b8:6e:20:ad:89: d5:61:93:d0:e7:d6:40:69:3c:b1:6d:74:ff:6b:7d:73:cb:85: f4:36:97:29:80:eb:4d:1d:c4:79:47:3d:c1:b7:a4:dc:80:5d: eb:06:36:63:7a:8b:cc:60:9b:ee:09:0e:bd:ab:96:c5:75:a9: 8c:77:03:52:91:9f:be:29:c2:63:b7:c4:00:24:fb:ce:92:38: 9c:5c:e2:18:88:a3:a6:ce:64:be:19:8b:8b:d7:52:87:b4:49: f1:42:43:63:a1:06:16:47:5d:70:a5:60:74:14:59:46:b7:d8: 86:b4:45:eb:96:b1:ec:77:9c:63:19:9f:29:71:4a:8d:60:62: 88:64:c1:4a -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgISAZuyj06xvcQEh9+fSgrdQoovMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkN2Q4MTc4Y2VjNWNkMzc2NTQ4YTkwNDkxMTdmNDY5YzBh NzQzMWMwHhcNMjYwMTEyMTQxNDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTM2NmZjOWNkNTM2NGVkZWMzNzcyNzM2NzhjNDg5NWU5MTg1YjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPT5HN0ZsdCgpPiYtVAHVS6N89B4 giKzRUead9zplX9whoxqfqJ6TnLTAaatDQ9izZi9AF/WRRie2yOqvZyXKB9FXxPe 1l2HTD2lGGFAVT4UgZFiVNvYEB7hVVjZFry9Brmx9dZB0gqdEDFkpYYyLgXyq8aL /pjlhTNXy8INAqaVfdK+opJfYy5xjJ0jGJGRdq+CTQEgp2oi8TCfI5cONguS8Orh Zab06zxGb/GGviS9yokdD5wPZwGVV9kFS2rs2IZ4lyI3vQv4qf8aFpdt2WbMH0Yc 2qy0nOAo69bX3+XL0HzO6at7qUyr99O2ZRYLKzfEwshs75Hy7yIpneqKSQIDAQAB o4ICZDCCAmAwHQYDVR0OBBYEFGo2b8nNU2Tt7Ddyc2eMSJXpGFtwMB8GA1UdIwQY MBaAFL19gXjOxc03ZUipBJEX9GnAp0McMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlgyQmVNN0Z6VGRsU0trRWtSZjBhY0NuUXh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mMzE3YjMtMDY2OC00ZTA0LTliNmQt NjE1YWNhNTFlMmY2LzEvYWpadnljMVRaTzNzTjNKelo0eElsZWtZVzNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9mMzE3YjMtMDY2OC00ZTA0LTliNmQtNjE1YWNhNTFlMmY2 LzEvdlgyQmVNN0Z6VGRsU0trRWtSZjBhY0NuUXh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHoGCCsGAQUFBwEHAQH/BGswaTBYBAIAATBSAwQDThgwAwQF UnSAAwQEXr6QAwQCZ9zcAwQCZ/V0AwQDsv8IAwQCuQawAwQBufneMAwDBAXVu+AD BAHVu+gwDAMEANW76wMEBNW74AMEA9W7+DANBAIAAjAHAwUAKgJ5gDANBgkqhkiG 9w0BAQsFAAOCAQEAbgtadxyTypLwpkXkMTYscb7b76zb3WlcewxuZF7kj1r17NmY nW7rXYfbVz0rVeB9odFMoiQsIlz2K6UsHqTqRhZWq8ARoYPMwwpVJ0FJCbdXze0g basZpLKc5qWK9Hs2v+YYjMGsYOPvI9b4F6whliFUCLxmMp2jkrhuIK2J1WGT0OfW QGk8sW10/2t9c8uF9DaXKYDrTR3EeUc9wbek3IBd6wY2Y3qLzGCb7gkOvauWxXWp jHcDUpGfvinCY7fEACT7zpI4nFziGIijps5kvhmLi9dSh7RJ8UJDY6EGFkddcKVg dBRZRrfYhrRF65ax7HecYxmfKXFKjWBiiGTBSg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:50 2026 by rpki-client