This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/adzoREFInhl8FjmgvHTz0qVeVfY.roa File: adzoREFInhl8FjmgvHTz0qVeVfY.roa (raw, json) Hash identifier: F2EQINWN8W6q9+2DD+3oTE1LSrvuSuwcoWJxaeRkHIk= Subject key identifier: 69:DC:E8:44:41:48:9E:19:7C:16:39:A0:BC:74:F3:D2:A5:5E:55:F6 Certificate issuer: /CN=b1267a51acb66f2991bea5243fe388068971a1f1 Certificate serial: 019B7C130E90DC5D3AD40252AA803BEE85DE Authority key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/adzoREFInhl8FjmgvHTz0qVeVfY.roa Signing time: Fri 02 Jan 2026 00:19:42 +0000 ROA not before: Fri 02 Jan 2026 00:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47764 IP address blocks: 5.61.232.0/21 maxlen: 21 5.181.61.0/24 maxlen: 24 5.188.140.0/22 maxlen: 22 37.139.32.0/22 maxlen: 22 37.139.40.0/22 maxlen: 22 45.84.128.0/22 maxlen: 22 62.217.160.0/20 maxlen: 20 83.166.232.0/21 maxlen: 21 83.166.248.0/21 maxlen: 21 83.217.216.0/22 maxlen: 22 84.23.52.0/22 maxlen: 22 85.192.32.0/22 maxlen: 22 87.239.104.0/21 maxlen: 21 89.208.196.0/22 maxlen: 22 89.208.208.0/22 maxlen: 22 89.208.216.0/23 maxlen: 23 89.208.218.0/23 maxlen: 23 89.208.220.0/22 maxlen: 22 89.208.228.0/22 maxlen: 22 89.221.235.0/24 maxlen: 24 90.156.148.0/22 maxlen: 22 90.156.151.0/24 maxlen: 24 90.156.212.0/22 maxlen: 22 90.156.216.0/22 maxlen: 22 90.156.232.0/21 maxlen: 21 94.100.176.0/20 maxlen: 20 95.163.32.0/19 maxlen: 19 95.163.180.0/22 maxlen: 22 95.163.208.0/21 maxlen: 21 95.163.216.0/22 maxlen: 22 146.185.208.0/22 maxlen: 22 146.185.240.0/22 maxlen: 22 176.112.168.0/21 maxlen: 21 178.22.88.0/21 maxlen: 21 178.237.16.0/20 maxlen: 20 178.237.29.0/24 maxlen: 24 185.86.144.0/22 maxlen: 22 185.180.200.0/22 maxlen: 22 185.187.63.0/24 maxlen: 24 188.93.56.0/21 maxlen: 21 213.219.212.0/22 maxlen: 22 2a00:1148::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:0e:90:dc:5d:3a:d4:02:52:aa:80:3b:ee:85:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1267a51acb66f2991bea5243fe388068971a1f1 Validity Not Before: Jan 2 00:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69dce84441489e197c1639a0bc74f3d2a55e55f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a8:c9:23:97:66:a7:20:bc:06:c2:1f:5e:e7: b7:85:98:5c:21:db:92:0a:d3:df:ad:76:bc:17:85: 1e:08:07:4c:9c:0d:b7:e2:59:42:34:a1:b1:f8:8d: f8:6d:fb:ad:23:1d:21:ca:5d:85:13:f5:70:27:e0: 36:5b:eb:31:4d:8d:34:5b:36:7a:de:a9:4a:cf:c1: a1:03:a3:dd:f7:1a:38:44:84:73:82:23:c2:79:59: 5a:76:9c:cb:bb:08:fa:35:f8:5d:88:fd:db:78:96: ae:09:3f:13:cf:57:ef:a2:a3:fa:78:8c:63:de:b8: 11:d8:db:e8:61:6c:10:64:ce:12:bc:6f:e8:2d:2b: 43:b9:00:c7:b5:72:8d:9d:80:0f:f8:f1:33:46:66: 0b:a5:49:61:22:82:a2:f0:38:5d:2b:44:3a:f6:80: 98:81:69:2c:7e:e2:6f:a6:34:94:88:8a:a0:2f:c2: 61:94:c5:f3:3e:a1:85:32:c0:b2:a3:07:ca:a7:62: 26:56:76:50:d7:b6:e6:c0:d8:67:e1:64:f1:b8:16: 3e:c0:c2:8b:23:c2:99:c4:a6:83:b2:22:f1:4d:70: d8:8c:d2:c0:b4:96:9e:88:a2:e6:a5:47:6f:02:96: 8d:72:2a:a5:55:cd:8c:56:fe:18:5c:c7:3d:7a:dc: 18:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DC:E8:44:41:48:9E:19:7C:16:39:A0:BC:74:F3:D2:A5:5E:55:F6 X509v3 Authority Key Identifier: keyid:B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/adzoREFInhl8FjmgvHTz0qVeVfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.61.232.0/21 5.181.61.0/24 5.188.140.0/22 37.139.32.0/22 37.139.40.0/22 45.84.128.0/22 62.217.160.0/20 83.166.232.0/21 83.166.248.0/21 83.217.216.0/22 84.23.52.0/22 85.192.32.0/22 87.239.104.0/21 89.208.196.0/22 89.208.208.0/22 89.208.216.0/21 89.208.228.0/22 89.221.235.0/24 90.156.148.0/22 90.156.212.0-90.156.219.255 90.156.232.0/21 94.100.176.0/20 95.163.32.0/19 95.163.180.0/22 95.163.208.0-95.163.219.255 146.185.208.0/22 146.185.240.0/22 176.112.168.0/21 178.22.88.0/21 178.237.16.0/20 185.86.144.0/22 185.180.200.0/22 185.187.63.0/24 188.93.56.0/21 213.219.212.0/22 IPv6: 2a00:1148::/32 Signature Algorithm: sha256WithRSAEncryption 7f:23:54:59:bf:b4:4c:95:2f:75:85:ec:27:16:2c:27:0b:4b: 26:7d:10:40:f3:4b:90:60:fe:65:75:63:0a:41:d1:b1:34:4a: 14:aa:f2:01:28:03:69:f0:88:23:1d:35:11:16:4e:3d:20:10: d5:b3:c6:cf:82:5a:6a:67:58:f2:5d:0e:4e:11:82:d0:ac:13: e3:2a:34:19:b3:8a:65:74:78:22:c8:bf:61:93:78:82:1b:29: 0e:83:76:98:7a:b6:89:21:60:5e:46:1a:d7:6f:4d:41:5d:7c: 53:30:73:76:ff:9e:25:85:a0:ac:ae:9f:05:c7:69:5e:71:6f: cc:b2:f3:42:38:35:62:f1:c5:53:83:79:36:53:45:20:79:f3: a0:6f:a2:20:80:52:e9:c8:06:4d:f0:34:99:67:cd:f5:88:77: c5:9f:45:2d:b0:89:11:6b:61:75:b3:37:2c:db:96:73:39:54: 17:27:0b:67:b5:5a:70:fa:0d:78:b5:76:cc:f5:72:72:b3:66: d3:0d:28:4b:fc:17:0b:b9:75:13:be:d3:32:5a:15:fe:0a:cf: 8b:55:b4:c7:0c:37:b4:ed:6f:54:3b:92:38:95:7c:5d:2d:02: cf:f5:eb:29:5e:e9:3c:31:ea:28:ea:78:7d:a3:76:cd:0c:80: 83:db:ae:0f -----BEGIN CERTIFICATE----- MIIF7jCCBNagAwIBAgISAZt8Ew6Q3F061AJSqoA77oXeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMjY3YTUxYWNiNjZmMjk5MWJlYTUyNDNmZTM4ODA2ODk3 MWExZjEwHhcNMjYwMTAyMDAxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWRjZTg0NDQxNDg5ZTE5N2MxNjM5YTBiYzc0ZjNkMmE1NWU1NWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KjJI5dmpyC8BsIfXue3hZhcIduS CtPfrXa8F4UeCAdMnA234llCNKGx+I34bfutIx0hyl2FE/VwJ+A2W+sxTY00WzZ6 3qlKz8GhA6Pd9xo4RIRzgiPCeVladpzLuwj6NfhdiP3beJauCT8Tz1fvoqP6eIxj 3rgR2NvoYWwQZM4SvG/oLStDuQDHtXKNnYAP+PEzRmYLpUlhIoKi8DhdK0Q69oCY gWksfuJvpjSUiIqgL8JhlMXzPqGFMsCyowfKp2ImVnZQ17bmwNhn4WTxuBY+wMKL I8KZxKaDsiLxTXDYjNLAtJaeiKLmpUdvApaNciqlVc2MVv4YXMc9etwYPwIDAQAB o4IC+jCCAvYwHQYDVR0OBBYEFGnc6ERBSJ4ZfBY5oLx089KlXlX2MB8GA1UdIwQY MBaAFLEmelGstm8pkb6lJD/jiAaJcaHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1NaNlVheTJieW1SdnFVa1AtT0lCb2x4b2ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9kNzRjYTItM2RlNi00YjY5LWEwMDAt OTRkMWI4OWY4Y2IyLzEvYWR6b1JFRkluaGw4RmptZ3ZIVHowcVZlVmZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9kNzRjYTItM2RlNi00YjY5LWEwMDAtOTRkMWI4OWY4Y2Iy LzEvc1NaNlVheTJieW1SdnFVa1AtT0lCb2x4b2ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBDgYIKwYBBQUHAQcBAf8Egf4wgfswgekEAgABMIHiAwQD BT3oAwQABbU9AwQCBbyMAwQCJYsgAwQCJYsoAwQCLVSAAwQEPtmgAwQDU6boAwQD U6b4AwQCU9nYAwQCVBc0AwQCVcAgAwQDV+9oAwQCWdDEAwQCWdDQAwQDWdDYAwQC WdDkAwQAWd3rAwQCWpyUMAwDBAJanNQDBAJanNgDBANanOgDBAReZLADBAVfoyAD BAJfo7QwDAMEBF+j0AMEAl+j2AMEApK50AMEApK58AMEA7BwqAMEA7IWWAMEBLLt EAMEArlWkAMEArm0yAMEALm7PwMEA7xdOAMEAtXb1DANBAIAAjAHAwUAKgARSDAN BgkqhkiG9w0BAQsFAAOCAQEAfyNUWb+0TJUvdYXsJxYsJwtLJn0QQPNLkGD+ZXVj CkHRsTRKFKryASgDafCIIx01ERZOPSAQ1bPGz4JaamdY8l0OThGC0KwT4yo0GbOK ZXR4Isi/YZN4ghspDoN2mHq2iSFgXkYa129NQV18UzBzdv+eJYWgrK6fBcdpXnFv zLLzQjg1YvHFU4N5NlNFIHnzoG+iIIBS6cgGTfA0mWfN9Yh3xZ9FLbCJEWthdbM3 LNuWczlUFycLZ7VacPoNeLV2zPVycrNm0w0oS/wXC7l1E77TMloV/grPi1W0xww3 tO1vVDuSOJV8XS0Cz/XrKV7pPDHqKOp4faN2zQyAg9uuDw== -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:57 2026 by rpki-client