This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/lTZKaZdtmALrgg30d96Um4kPOmw.roa File: lTZKaZdtmALrgg30d96Um4kPOmw.roa (raw, json) Hash identifier: wc0aB7Ni4EKk0dSQ3idcDTvKajeMiNgmVf3XdjlXW34= Subject key identifier: 95:36:4A:69:97:6D:98:02:EB:82:0D:F4:77:DE:94:9B:89:0F:3A:6C Certificate issuer: /CN=4a409555105040578cb296070074f45107252eeb Certificate serial: 019B7EA5AA618B11E76A62F1D2755FA753EF Authority key identifier: 4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/lTZKaZdtmALrgg30d96Um4kPOmw.roa Signing time: Fri 02 Jan 2026 12:19:04 +0000 ROA not before: Fri 02 Jan 2026 12:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21211 IP address blocks: 31.44.96.0/20 maxlen: 20 31.44.96.0/21 maxlen: 21 31.44.104.0/21 maxlen: 21 78.157.64.0/19 maxlen: 19 84.240.0.0/18 maxlen: 18 84.240.0.0/22 maxlen: 22 84.240.4.0/22 maxlen: 22 84.240.8.0/21 maxlen: 21 84.240.16.0/20 maxlen: 20 185.25.0.0/22 maxlen: 22 212.122.64.0/19 maxlen: 19 212.122.65.0/24 maxlen: 24 212.122.68.0/22 maxlen: 22 212.122.72.0/24 maxlen: 24 212.122.73.0/24 maxlen: 24 212.122.79.0/24 maxlen: 24 212.122.80.0/23 maxlen: 23 212.122.88.0/22 maxlen: 22 212.122.92.0/23 maxlen: 23 212.122.95.0/24 maxlen: 24 213.159.32.0/19 maxlen: 19 213.159.32.0/20 maxlen: 20 213.159.33.0/24 maxlen: 24 213.159.48.0/20 maxlen: 20 2a03:280::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:aa:61:8b:11:e7:6a:62:f1:d2:75:5f:a7:53:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a409555105040578cb296070074f45107252eeb Validity Not Before: Jan 2 12:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95364a69976d9802eb820df477de949b890f3a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:63:dd:37:4d:94:ab:55:b9:75:df:52:00:ac: 14:77:d0:5c:9d:f3:6d:f4:51:1b:ea:84:a5:21:ef: ab:2c:ea:62:9c:cf:df:38:15:bb:81:4c:90:c9:44: bb:eb:b4:5f:40:ed:4d:10:88:f2:cc:fd:5c:c6:89: 9a:f8:78:fd:56:af:30:6e:c6:f3:b2:16:70:15:0a: 96:26:08:ef:0a:6a:c8:6f:3d:82:0c:b2:0e:dd:3f: 0f:01:db:83:41:11:8e:13:5b:b9:7d:79:5b:72:e1: d0:94:05:af:a2:1a:97:a6:84:9f:a0:32:b5:60:ab: f2:b2:13:62:a7:d4:a6:09:fd:a5:65:8f:cb:a8:57: e1:cc:11:81:24:40:bf:73:18:ec:6f:60:01:f1:2d: 46:39:c1:2b:c2:38:06:a9:2d:d4:88:fd:ed:fc:d1: a6:5f:ae:ff:1e:e2:1f:45:3a:b2:b2:8c:c8:de:8a: 0f:b3:75:49:b8:ee:b5:cd:58:2e:18:b5:d7:46:90: e9:7e:d1:ba:9c:df:a4:0b:e6:a9:44:5a:7f:fa:e1: cb:4b:4a:5d:69:de:91:90:af:bc:f6:5c:40:4e:a6: d7:c1:0f:8a:24:95:66:95:69:cf:c6:3a:2a:29:1e: c0:69:49:85:a0:94:c1:50:bc:f9:d3:21:e2:44:c2: 9a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:36:4A:69:97:6D:98:02:EB:82:0D:F4:77:DE:94:9B:89:0F:3A:6C X509v3 Authority Key Identifier: keyid:4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/lTZKaZdtmALrgg30d96Um4kPOmw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.44.96.0/20 78.157.64.0/19 84.240.0.0/18 185.25.0.0/22 212.122.64.0/19 213.159.32.0/19 IPv6: 2a03:280::/32 Signature Algorithm: sha256WithRSAEncryption 36:4e:2e:f5:31:37:29:71:df:0b:b2:1b:53:00:62:3e:0f:48: 83:7c:f2:54:af:9f:fe:29:25:bc:08:24:c0:0a:bb:1e:df:f2: 34:fb:9a:39:21:ae:85:ac:47:16:2b:4d:13:13:74:63:58:40: 6e:a6:8a:ea:de:db:d4:90:7e:bf:98:ec:67:8e:67:c2:52:79: df:df:86:ea:2d:c9:f3:f2:c0:de:d4:25:3d:95:11:dc:4b:a2: b7:30:b4:c4:f7:2a:67:b8:b6:b5:5b:e3:61:73:2f:fc:c1:7b: 75:03:61:55:5f:0f:a8:70:5f:40:5b:b8:b4:0b:66:69:2e:d9: fb:57:be:29:8c:55:27:f0:0e:6a:4d:f8:12:6b:26:06:7d:e2: 64:2a:c7:80:17:a0:be:04:bc:13:f2:ff:db:60:24:b9:96:5f: d9:b3:69:1a:b0:c6:de:8e:98:4f:93:ad:ba:cb:81:83:52:c0: cc:ad:b2:74:d1:4e:d6:12:08:22:ea:bb:a8:d0:3e:24:02:7a: 30:8a:b2:85:74:56:b7:75:93:cb:e0:0d:fc:af:05:7b:94:3e: 09:51:dc:09:e9:12:ce:cb:25:4a:f7:09:e6:2d:6a:a8:6e:bd: 00:96:f9:38:72:7f:f7:b5:6e:db:4b:78:6d:3a:ea:c2:91:0e: 7f:b6:a8:d3 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt+paphixHnamLx0nVfp1PvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNDA5NTU1MTA1MDQwNTc4Y2IyOTYwNzAwNzRmNDUxMDcy NTJlZWIwHhcNMjYwMTAyMTIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTM2NGE2OTk3NmQ5ODAyZWI4MjBkZjQ3N2RlOTQ5Yjg5MGYzYTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGPdN02Uq1W5dd9SAKwUd9BcnfNt 9FEb6oSlIe+rLOpinM/fOBW7gUyQyUS767RfQO1NEIjyzP1cxoma+Hj9Vq8wbsbz shZwFQqWJgjvCmrIbz2CDLIO3T8PAduDQRGOE1u5fXlbcuHQlAWvohqXpoSfoDK1 YKvyshNip9SmCf2lZY/LqFfhzBGBJEC/cxjsb2AB8S1GOcErwjgGqS3UiP3t/NGm X67/HuIfRTqysozI3ooPs3VJuO61zVguGLXXRpDpftG6nN+kC+apRFp/+uHLS0pd ad6RkK+89lxATqbXwQ+KJJVmlWnPxjoqKR7AaUmFoJTBULz50yHiRMKaFQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFJU2SmmXbZgC64IN9HfelJuJDzpsMB8GA1UdIwQY MBaAFEpAlVUQUEBXjLKWBwB09FEHJS7rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2tDVlZSQlFRRmVNc3BZSEFIVDBVUWNsTHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81NzMxZGEtNjY2NS00MTYxLTgwYzEt NWU3OWI0NDM1ZTJjLzEvbFRaS2FaZHRtQUxyZ2czMGQ5NlVtNGtQT213LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC81NzMxZGEtNjY2NS00MTYxLTgwYzEtNWU3OWI0NDM1ZTJj LzEvU2tDVlZSQlFRRmVNc3BZSEFIVDBVUWNsTHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQEHyxgAwQF Tp1AAwQGVPAAAwQCuRkAAwQF1HpAAwQF1Z8gMA0EAgACMAcDBQAqAwKAMA0GCSqG SIb3DQEBCwUAA4IBAQA2Ti71MTcpcd8LshtTAGI+D0iDfPJUr5/+KSW8CCTACrse 3/I0+5o5Ia6FrEcWK00TE3RjWEBuporq3tvUkH6/mOxnjmfCUnnf34bqLcnz8sDe 1CU9lRHcS6K3MLTE9ypnuLa1W+Nhcy/8wXt1A2FVXw+ocF9AW7i0C2ZpLtn7V74p jFUn8A5qTfgSayYGfeJkKseAF6C+BLwT8v/bYCS5ll/Zs2kasMbejphPk626y4GD UsDMrbJ00U7WEggi6ruo0D4kAnowirKFdFa3dZPL4A38rwV7lD4JUdwJ6RLOyyVK 9wnmLWqobr0Alvk4cn/3tW7bS3htOurCkQ5/tqjT -----END CERTIFICATE-----Generated at Sun Jan 25 15:14:44 2026 by rpki-client