This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/IRtOc9xNuHtN4zmsWWnKZRqgKMs.roa File: IRtOc9xNuHtN4zmsWWnKZRqgKMs.roa (raw, json) Hash identifier: jkPYQDPHDAj2YZTZO0wQGRdV29/MSC+GrpeiHVDq/M4= Subject key identifier: 21:1B:4E:73:DC:4D:B8:7B:4D:E3:39:AC:59:69:CA:65:1A:A0:28:CB Certificate issuer: /CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037 Certificate serial: 019B7C1202CDEBB735B3DEF386C597571357 Authority key identifier: F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/IRtOc9xNuHtN4zmsWWnKZRqgKMs.roa Signing time: Fri 02 Jan 2026 00:18:33 +0000 ROA not before: Fri 02 Jan 2026 00:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42961 IP address blocks: 31.203.0.0/18 maxlen: 19 31.203.0.0/19 maxlen: 19 31.203.32.0/19 maxlen: 19 31.203.64.0/18 maxlen: 18 31.203.64.0/19 maxlen: 19 31.203.96.0/19 maxlen: 19 31.203.128.0/18 maxlen: 18 31.203.128.0/19 maxlen: 19 31.203.160.0/19 maxlen: 19 31.203.192.0/18 maxlen: 19 31.203.192.0/19 maxlen: 19 31.203.224.0/19 maxlen: 19 31.214.0.0/17 maxlen: 17 31.214.0.0/18 maxlen: 18 31.214.0.0/19 maxlen: 19 31.214.0.0/20 maxlen: 20 31.214.16.0/20 maxlen: 20 31.214.32.0/19 maxlen: 19 31.214.64.0/18 maxlen: 18 31.214.64.0/19 maxlen: 19 31.214.96.0/19 maxlen: 19 37.34.128.0/18 maxlen: 18 37.34.128.0/19 maxlen: 19 37.34.128.0/20 maxlen: 20 37.34.144.0/20 maxlen: 20 37.34.145.0/24 maxlen: 24 37.34.152.0/22 maxlen: 22 37.34.160.0/19 maxlen: 19 37.34.160.0/20 maxlen: 20 37.34.166.0/24 maxlen: 24 37.34.167.0/24 maxlen: 24 37.34.168.0/22 maxlen: 22 37.34.168.0/24 maxlen: 24 37.34.176.0/20 maxlen: 20 37.34.192.0/18 maxlen: 22 37.34.192.0/20 maxlen: 22 37.34.208.0/20 maxlen: 20 37.34.224.0/20 maxlen: 20 37.34.240.0/20 maxlen: 20 37.36.0.0/18 maxlen: 18 37.36.0.0/20 maxlen: 20 37.36.16.0/20 maxlen: 20 37.36.32.0/20 maxlen: 20 37.36.48.0/20 maxlen: 20 37.36.64.0/18 maxlen: 18 37.36.64.0/20 maxlen: 20 37.36.80.0/20 maxlen: 20 37.36.96.0/20 maxlen: 20 37.36.112.0/20 maxlen: 20 37.36.128.0/18 maxlen: 18 37.36.128.0/20 maxlen: 20 37.36.144.0/20 maxlen: 20 37.36.160.0/20 maxlen: 20 37.36.176.0/20 maxlen: 20 37.36.192.0/18 maxlen: 18 37.36.192.0/20 maxlen: 20 37.36.208.0/20 maxlen: 20 37.36.224.0/20 maxlen: 20 37.36.240.0/20 maxlen: 20 37.37.0.0/18 maxlen: 18 37.37.0.0/20 maxlen: 20 37.37.16.0/20 maxlen: 20 37.37.32.0/20 maxlen: 20 37.37.48.0/20 maxlen: 20 37.37.64.0/18 maxlen: 18 37.37.64.0/20 maxlen: 20 37.37.80.0/20 maxlen: 20 37.37.96.0/20 maxlen: 20 37.37.112.0/20 maxlen: 20 37.37.128.0/18 maxlen: 18 37.37.128.0/20 maxlen: 20 37.37.144.0/20 maxlen: 20 37.37.160.0/20 maxlen: 20 37.37.176.0/20 maxlen: 20 37.37.192.0/18 maxlen: 18 37.37.192.0/20 maxlen: 20 37.37.208.0/20 maxlen: 20 37.37.224.0/20 maxlen: 20 37.37.240.0/20 maxlen: 20 37.38.0.0/18 maxlen: 18 37.38.0.0/20 maxlen: 20 37.38.16.0/20 maxlen: 20 37.38.32.0/20 maxlen: 20 37.38.48.0/20 maxlen: 20 37.38.64.0/18 maxlen: 18 37.38.64.0/20 maxlen: 20 37.38.80.0/20 maxlen: 20 37.38.96.0/20 maxlen: 20 37.38.112.0/20 maxlen: 20 37.38.128.0/18 maxlen: 18 37.38.128.0/20 maxlen: 20 37.38.144.0/20 maxlen: 20 37.38.160.0/20 maxlen: 20 37.38.176.0/20 maxlen: 20 37.38.192.0/18 maxlen: 18 37.38.192.0/20 maxlen: 20 37.38.208.0/20 maxlen: 20 37.38.224.0/20 maxlen: 20 37.38.240.0/20 maxlen: 20 37.39.0.0/18 maxlen: 18 37.39.0.0/20 maxlen: 20 37.39.16.0/20 maxlen: 20 37.39.32.0/20 maxlen: 20 37.39.48.0/20 maxlen: 20 37.39.64.0/18 maxlen: 18 37.39.64.0/20 maxlen: 20 37.39.80.0/20 maxlen: 20 37.39.96.0/20 maxlen: 20 37.39.112.0/20 maxlen: 20 37.39.128.0/18 maxlen: 18 37.39.128.0/20 maxlen: 20 37.39.144.0/20 maxlen: 20 37.39.160.0/20 maxlen: 20 37.39.176.0/20 maxlen: 20 37.39.192.0/18 maxlen: 18 37.39.192.0/20 maxlen: 20 37.39.208.0/20 maxlen: 20 37.39.224.0/20 maxlen: 20 37.39.240.0/20 maxlen: 20 46.186.128.0/18 maxlen: 18 46.186.128.0/19 maxlen: 19 46.186.160.0/19 maxlen: 19 46.186.192.0/18 maxlen: 18 46.186.192.0/19 maxlen: 19 46.186.224.0/19 maxlen: 19 95.66.0.0/18 maxlen: 19 95.66.0.0/19 maxlen: 19 95.66.17.0/24 maxlen: 24 95.66.32.0/19 maxlen: 19 95.66.64.0/18 maxlen: 23 95.66.64.0/19 maxlen: 19 95.66.78.0/23 maxlen: 23 95.66.96.0/19 maxlen: 19 95.66.122.0/23 maxlen: 23 95.66.124.0/22 maxlen: 22 95.66.124.0/23 maxlen: 23 95.66.126.0/23 maxlen: 23 149.147.0.0/18 maxlen: 18 149.147.0.0/20 maxlen: 20 149.147.16.0/20 maxlen: 20 149.147.32.0/20 maxlen: 20 149.147.48.0/20 maxlen: 20 149.147.64.0/18 maxlen: 20 149.147.64.0/20 maxlen: 20 149.147.80.0/20 maxlen: 20 149.147.96.0/20 maxlen: 20 149.147.112.0/20 maxlen: 20 149.147.128.0/18 maxlen: 18 149.147.128.0/20 maxlen: 20 149.147.144.0/20 maxlen: 20 149.147.160.0/20 maxlen: 20 149.147.176.0/20 maxlen: 20 149.147.192.0/18 maxlen: 18 149.147.192.0/20 maxlen: 20 149.147.208.0/20 maxlen: 20 149.147.224.0/20 maxlen: 20 149.147.240.0/20 maxlen: 20 178.161.0.0/17 maxlen: 18 178.161.0.0/18 maxlen: 18 178.161.0.0/19 maxlen: 19 178.161.32.0/19 maxlen: 19 178.161.64.0/18 maxlen: 18 178.161.64.0/19 maxlen: 19 178.161.96.0/19 maxlen: 19 185.19.76.0/22 maxlen: 22 185.19.76.0/23 maxlen: 23 185.19.78.0/23 maxlen: 23 188.236.0.0/18 maxlen: 18 188.236.0.0/20 maxlen: 20 188.236.16.0/20 maxlen: 20 188.236.32.0/20 maxlen: 20 188.236.48.0/20 maxlen: 20 188.236.64.0/18 maxlen: 18 188.236.64.0/20 maxlen: 20 188.236.80.0/20 maxlen: 20 188.236.96.0/20 maxlen: 20 188.236.112.0/20 maxlen: 20 188.236.128.0/18 maxlen: 18 188.236.128.0/20 maxlen: 20 188.236.144.0/20 maxlen: 20 188.236.160.0/20 maxlen: 20 188.236.176.0/20 maxlen: 20 188.236.192.0/18 maxlen: 18 188.236.192.0/20 maxlen: 20 188.236.208.0/20 maxlen: 20 188.236.224.0/20 maxlen: 20 188.236.240.0/20 maxlen: 20 188.236.240.0/24 maxlen: 24 188.236.241.0/24 maxlen: 24 188.236.242.0/24 maxlen: 24 212.43.0.0/19 maxlen: 19 212.43.0.0/20 maxlen: 20 212.43.0.0/21 maxlen: 21 212.43.8.0/21 maxlen: 21 212.43.16.0/21 maxlen: 21 2a00:4520::/32 maxlen: 32 2a00:4520:1::/48 maxlen: 48 2a00:4520:2::/48 maxlen: 48 2a00:4520:3::/48 maxlen: 48 2a00:4520:4::/48 maxlen: 48 2a00:4520:8::/48 maxlen: 48 2a00:4522::/32 maxlen: 32 2a00:4522::/34 maxlen: 34 2a00:4522:4000::/34 maxlen: 34 2a00:4522:8000::/34 maxlen: 34 2a00:4522:c000::/34 maxlen: 34 2a00:4523::/32 maxlen: 32 2a00:4523::/33 maxlen: 33 2a00:4523:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:02:cd:eb:b7:35:b3:de:f3:86:c5:97:57:13:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037 Validity Not Before: Jan 2 00:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=211b4e73dc4db87b4de339ac5969ca651aa028cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:61:25:fc:73:ab:19:56:f3:d1:f2:fb:c7:05: 35:23:f6:ba:b6:81:a2:04:ab:c4:d5:db:a7:66:1f: 7c:b1:36:72:d0:e7:75:a0:7d:38:ec:3a:40:a9:01: a3:40:cc:83:67:f7:72:a0:2d:65:88:5a:c1:5c:10: d1:c6:2d:3d:bb:b5:21:04:9c:ec:eb:a1:5e:fb:17: e6:a0:73:ef:cc:e2:34:e9:a6:63:79:66:b7:16:3e: b1:df:4d:aa:ac:22:75:3e:08:ce:e4:49:fc:f5:b0: 2a:b9:d7:13:ae:64:14:51:46:38:f1:cb:aa:82:9a: 21:f1:ab:b3:2e:7d:6c:9e:57:f9:b8:e1:c3:84:72: 30:4b:9c:06:72:6c:4e:ed:6a:da:c4:02:9d:2f:de: 9d:2a:d9:d7:77:6d:04:3c:63:c3:a2:72:26:78:7e: 42:32:a9:31:7f:cb:20:23:ae:f4:b4:e5:64:9f:18: e0:ee:db:de:1f:dd:c9:a9:82:98:03:13:10:a8:bc: bb:ee:04:ce:b6:08:bf:53:20:32:a7:73:6a:37:28: dc:9a:ed:bf:ef:98:da:51:bb:14:50:66:b1:bc:bb: 9b:cf:5c:d5:be:ce:44:a3:6f:e5:63:13:3d:ce:6f: a8:36:4a:3d:e8:91:4d:5f:ee:75:80:7a:32:44:77: 66:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:1B:4E:73:DC:4D:B8:7B:4D:E3:39:AC:59:69:CA:65:1A:A0:28:CB X509v3 Authority Key Identifier: keyid:F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/IRtOc9xNuHtN4zmsWWnKZRqgKMs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.203.0.0/16 31.214.0.0/17 37.34.128.0/17 37.36.0.0/14 46.186.128.0/17 95.66.0.0/17 149.147.0.0/16 178.161.0.0/17 185.19.76.0/22 188.236.0.0/16 212.43.0.0/19 IPv6: 2a00:4520::/32 2a00:4522::/31 Signature Algorithm: sha256WithRSAEncryption 3e:b8:0c:8b:d4:6d:e3:2f:f8:4f:7b:3f:08:b9:40:ed:30:b7: 14:90:25:7a:da:40:a4:06:8d:e4:b5:44:f8:c7:0b:59:69:2d: 59:4b:de:4c:f9:75:ad:95:47:7f:38:33:fd:90:77:79:17:24: 48:a9:da:8d:fe:a0:b0:01:f4:02:01:fb:e0:68:7b:34:a7:49: c3:6a:96:c3:87:05:2d:1b:54:f2:35:b5:27:f5:ad:52:ce:62: ab:02:21:34:b5:f0:13:47:29:2d:43:5c:c6:7d:79:6f:fa:f9: 15:a0:02:23:27:38:ca:fd:ef:97:46:46:cd:d0:96:36:3b:91: f8:b2:b0:d6:d3:e0:c3:ed:bb:a4:e3:15:14:87:ab:fd:70:15: eb:a7:92:a3:fc:73:32:33:70:26:09:d5:48:8e:29:cb:26:1f: f8:2b:fc:33:d4:a0:65:51:b1:66:5a:5a:37:8d:07:2c:f6:3c: f2:bc:15:a4:25:73:36:9c:13:7a:75:2c:b0:68:2a:62:fc:9d: 45:d8:13:e6:48:96:10:71:ab:00:a6:c0:29:10:a5:ce:83:30: 72:39:35:ec:5f:86:5a:dd:d7:e8:2d:6b:89:63:89:f8:e6:cb: 7a:23:dc:15:35:e1:dd:e0:de:ef:28:6e:2a:f0:3f:96:3a:4f: a7:a4:a1:c2 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZt8EgLN67c1s97zhsWXVxNXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZmRmYzMzN2Q4Y2UwZTA1ZWY3ZjdiNzJhZjI3ZWI2MWNk NDcwMzcwHhcNMjYwMTAyMDAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTFiNGU3M2RjNGRiODdiNGRlMzM5YWM1OTY5Y2E2NTFhYTAyOGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GEl/HOrGVbz0fL7xwU1I/a6toGi BKvE1dunZh98sTZy0Od1oH047DpAqQGjQMyDZ/dyoC1liFrBXBDRxi09u7UhBJzs 66Fe+xfmoHPvzOI06aZjeWa3Fj6x302qrCJ1PgjO5En89bAqudcTrmQUUUY48cuq gpoh8auzLn1snlf5uOHDhHIwS5wGcmxO7WraxAKdL96dKtnXd20EPGPDonImeH5C Mqkxf8sgI670tOVknxjg7tveH93JqYKYAxMQqLy77gTOtgi/UyAyp3NqNyjcmu2/ 75jaUbsUUGaxvLubz1zVvs5Eo2/lYxM9zm+oNko96JFNX+51gHoyRHdm7wIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFCEbTnPcTbh7TeM5rFlpymUaoCjLMB8GA1UdIwQY MBaAFPf9/DN9jODgXvf3tyryfrYc1HA3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOV8zOE0zMk00T0JlOV9lM0t2Si10aHpVY0RjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jYTA2NmUtOGRjYS00ZDI4LTk0NGIt Zjk1OWQ0ZTFmMjg5LzEvSVJ0T2M5eE51SHRONHptc1dXbktaUnFnS01zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9jYTA2NmUtOGRjYS00ZDI4LTk0NGItZjk1OWQ0ZTFmMjg5 LzEvOV8zOE0zMk00T0JlOV9lM0t2Si10aHpVY0RjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBEBAIAATA+AwMAH8sDBAcf 1gADBAclIoADAwIlJAMEBy66gAMEB19CAAMDAJWTAwQHsqEAAwQCuRNMAwMAvOwD BAXUKwAwFAQCAAIwDgMFACoARSADBQEqAEUiMA0GCSqGSIb3DQEBCwUAA4IBAQA+ uAyL1G3jL/hPez8IuUDtMLcUkCV62kCkBo3ktUT4xwtZaS1ZS95M+XWtlUd/ODP9 kHd5FyRIqdqN/qCwAfQCAfvgaHs0p0nDapbDhwUtG1TyNbUn9a1SzmKrAiE0tfAT RyktQ1zGfXlv+vkVoAIjJzjK/e+XRkbN0JY2O5H4srDW0+DD7buk4xUUh6v9cBXr p5Kj/HMyM3AmCdVIjinLJh/4K/wz1KBlUbFmWlo3jQcs9jzyvBWkJXM2nBN6dSyw aCpi/J1F2BPmSJYQcasApsApEKXOgzByOTXsX4Za3dfoLWuJY4n45st6I9wVNeHd 4N7vKG4q8D+WOk+npKHC -----END CERTIFICATE-----Generated at Sun Jan 25 20:01:03 2026 by rpki-client