This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/q4aWYTu2Vcs2y5zyssVw-uBIsy8.roa
File: q4aWYTu2Vcs2y5zyssVw-uBIsy8.roa (raw, json)
Hash identifier: Z2ATniNFuzKSrm6AaRuDSbbnCSlCJQr2korwEY9ufig=
Subject key identifier: AB:86:96:61:3B:B6:55:CB:36:CB:9C:F2:B2:C5:70:FA:E0:48:B3:2F
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019B77C76ACE958F3C92B220B13B0E54ED69
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/q4aWYTu2Vcs2y5zyssVw-uBIsy8.roa
Signing time: Thu 01 Jan 2026 04:18:36 +0000
ROA not before: Thu 01 Jan 2026 04:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20804
IP address blocks: 81.15.128.0/17 maxlen: 17
81.15.136.0/23 maxlen: 23
81.15.156.0/24 maxlen: 24
81.15.174.0/24 maxlen: 24
81.15.175.0/24 maxlen: 24
81.15.182.0/23 maxlen: 23
81.15.187.0/24 maxlen: 24
81.15.191.0/24 maxlen: 24
81.15.194.0/24 maxlen: 24
81.15.195.0/24 maxlen: 24
81.15.198.0/23 maxlen: 23
81.15.198.0/24 maxlen: 24
81.15.199.0/24 maxlen: 24
81.15.201.0/24 maxlen: 24
81.15.202.0/24 maxlen: 24
81.15.203.0/24 maxlen: 24
81.15.204.0/23 maxlen: 23
81.15.209.0/24 maxlen: 24
81.15.214.0/23 maxlen: 23
81.15.216.0/24 maxlen: 24
81.15.217.0/24 maxlen: 24
81.15.218.0/23 maxlen: 23
81.15.218.0/24 maxlen: 24
81.15.222.0/23 maxlen: 23
81.15.222.0/24 maxlen: 24
81.15.224.0/22 maxlen: 22
81.15.225.0/24 maxlen: 24
81.15.227.0/24 maxlen: 24
81.15.230.0/24 maxlen: 24
81.15.232.0/22 maxlen: 22
81.15.232.0/24 maxlen: 24
81.15.236.0/24 maxlen: 24
81.15.237.0/24 maxlen: 24
81.15.238.0/24 maxlen: 24
81.15.239.0/24 maxlen: 24
81.15.240.0/23 maxlen: 23
81.15.242.0/24 maxlen: 24
81.15.244.0/23 maxlen: 23
81.15.254.0/23 maxlen: 23
81.15.254.0/24 maxlen: 24
81.15.255.0/24 maxlen: 24
82.177.0.0/16 maxlen: 16
82.177.0.0/23 maxlen: 23
82.177.2.0/24 maxlen: 24
82.177.4.0/22 maxlen: 22
82.177.9.0/24 maxlen: 24
82.177.10.0/23 maxlen: 23
82.177.14.0/23 maxlen: 23
82.177.16.0/24 maxlen: 24
82.177.27.0/24 maxlen: 24
82.177.35.0/24 maxlen: 24
82.177.37.0/24 maxlen: 24
82.177.48.0/21 maxlen: 21
82.177.48.0/24 maxlen: 24
82.177.50.0/24 maxlen: 24
82.177.52.0/23 maxlen: 23
82.177.54.0/24 maxlen: 24
82.177.59.0/24 maxlen: 24
82.177.68.0/22 maxlen: 22
82.177.72.0/21 maxlen: 21
82.177.80.0/21 maxlen: 21
82.177.102.0/23 maxlen: 24
82.177.108.0/23 maxlen: 23
82.177.112.0/22 maxlen: 22
82.177.140.0/23 maxlen: 23
82.177.164.0/24 maxlen: 24
82.177.192.0/24 maxlen: 24
82.177.194.0/24 maxlen: 24
82.177.195.0/24 maxlen: 24
82.177.196.0/22 maxlen: 22
82.177.196.0/24 maxlen: 24
82.177.199.0/24 maxlen: 24
82.177.206.0/24 maxlen: 24
82.177.249.0/24 maxlen: 24
82.177.252.0/24 maxlen: 24
88.220.0.0/17 maxlen: 17
88.220.60.0/23 maxlen: 23
88.220.81.0/24 maxlen: 24
88.220.84.0/24 maxlen: 24
88.220.107.0/24 maxlen: 24
88.220.113.0/24 maxlen: 24
88.220.114.0/24 maxlen: 24
88.220.116.0/24 maxlen: 24
88.220.117.0/24 maxlen: 24
88.220.120.0/22 maxlen: 22
88.220.128.0/18 maxlen: 18
88.220.132.0/23 maxlen: 23
88.220.152.0/23 maxlen: 23
88.220.165.0/24 maxlen: 24
88.220.181.0/24 maxlen: 24
88.220.185.0/24 maxlen: 24
88.220.192.0/20 maxlen: 20
88.220.208.0/20 maxlen: 20
88.220.224.0/19 maxlen: 19
88.220.252.0/24 maxlen: 24
88.220.253.0/24 maxlen: 24
194.183.32.0/19 maxlen: 19
194.183.32.0/23 maxlen: 23
194.183.34.0/23 maxlen: 23
194.183.54.0/24 maxlen: 24
194.183.55.0/24 maxlen: 24
194.183.56.0/23 maxlen: 23
195.136.0.0/16 maxlen: 16
195.136.4.0/22 maxlen: 22
195.136.16.0/22 maxlen: 22
195.136.21.0/24 maxlen: 24
195.136.25.0/24 maxlen: 24
195.136.27.0/24 maxlen: 24
195.136.32.158/32 maxlen: 32
195.136.32.201/32 maxlen: 32
195.136.34.0/23 maxlen: 23
195.136.38.0/23 maxlen: 23
195.136.65.0/24 maxlen: 24
195.136.88.0/22 maxlen: 22
195.136.113.0/24 maxlen: 24
195.136.148.0/22 maxlen: 22
195.136.156.0/23 maxlen: 23
195.136.164.0/23 maxlen: 23
195.136.174.0/23 maxlen: 23
195.136.176.0/22 maxlen: 22
213.172.160.0/19 maxlen: 19
2a00:4120::/32 maxlen: 32
2a00:4120:8000:2::/64 maxlen: 64
2a00:4120:8000:4::/64 maxlen: 64
2a00:4120:8000:5::/64 maxlen: 64
2a00:4120:8000:70::/65 maxlen: 65
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:6a:ce:95:8f:3c:92:b2:20:b1:3b:0e:54:ed:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab8696613bb655cb36cb9cf2b2c570fae048b32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:d7:0a:ea:74:6e:22:77:cc:77:91:d9:d8:
37:df:88:6e:13:e2:da:ea:04:a3:5e:b7:f0:f5:f0:
37:bf:0d:b5:bb:5b:24:84:43:1e:f7:86:84:f8:36:
a9:96:60:82:14:24:15:86:26:ba:10:1e:a9:47:36:
e1:6b:6e:07:fe:70:21:87:da:f7:51:3c:87:8b:3d:
cc:16:bb:3f:7d:5d:1b:e6:7e:6a:6a:1c:e1:3c:b1:
88:bd:8e:cf:d0:03:61:5c:38:fa:fb:66:ee:3c:47:
99:3c:b9:33:a4:33:44:ee:b3:20:09:84:e5:97:e6:
58:b5:7a:05:ea:15:3f:d9:87:7c:52:3f:4d:6f:98:
1a:ae:1f:46:a7:af:a7:f8:f8:39:24:49:2a:2a:22:
45:de:91:f8:c0:03:b6:1e:d5:3c:56:da:7c:f6:27:
c8:9e:4e:d2:67:c6:29:0f:d7:26:27:de:e9:55:9a:
b8:99:da:a8:7b:79:0d:c0:58:7d:5d:5f:ff:9b:ed:
15:79:d9:e7:40:53:75:6d:4e:7e:68:1d:4a:d5:7f:
ae:2b:04:6f:da:72:a2:3c:ce:02:5d:3b:7e:00:83:
74:9e:3d:09:d1:88:6d:a6:4b:09:73:23:be:25:8e:
66:02:c9:23:ca:79:af:8c:05:7c:5a:83:15:b7:66:
88:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:86:96:61:3B:B6:55:CB:36:CB:9C:F2:B2:C5:70:FA:E0:48:B3:2F
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/q4aWYTu2Vcs2y5zyssVw-uBIsy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.128.0/17
82.177.0.0/16
88.220.0.0/16
194.183.32.0/19
195.136.0.0/16
213.172.160.0/19
IPv6:
2a00:4120::/32
Signature Algorithm: sha256WithRSAEncryption
4f:39:01:72:52:2f:42:83:7e:83:e2:e3:aa:c2:bc:d3:77:38:
5b:ec:8d:3e:f3:fa:18:28:dc:62:dd:9e:ca:24:11:a4:66:0b:
d8:d6:3c:15:e0:bd:c8:68:dd:2e:fe:50:14:04:b0:b6:0e:81:
e9:9e:0a:60:25:3f:7c:df:f5:a8:46:29:75:36:58:c2:43:3a:
d0:ae:e0:33:27:3c:03:4e:d8:5b:0c:ef:c2:81:32:fe:24:1b:
ce:19:86:34:82:84:8e:d0:0b:59:cc:96:47:7b:44:af:5c:69:
af:c2:e0:44:19:f7:e0:ef:63:67:08:35:e7:21:d1:54:04:51:
6a:56:7e:b3:da:5a:d5:6b:5c:9b:89:2c:00:a2:b6:d7:f5:98:
ab:ff:3d:f1:4d:04:f5:d6:52:19:5e:44:ba:be:93:d9:46:b6:
13:44:29:dd:19:cf:d8:a5:8f:ce:f9:dd:56:80:08:94:66:23:
94:e5:97:de:3a:28:bd:6c:a4:5f:ca:98:e1:b5:4f:e9:3e:d1:
ef:38:b1:8a:34:4f:06:e1:da:78:cd:0c:2d:ce:48:ea:1e:2e:
33:1d:57:60:3a:38:d2:27:5f:1a:b2:0d:49:40:92:e4:45:7c:
4a:fd:16:69:fa:46:88:f6:54:c6:21:c4:88:52:b1:09:cf:da:
62:73:8f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:48:21 2026 by rpki-client