This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/1JE2gqwt1IaboqXvZAeVkCj3HLc.roa File: 1JE2gqwt1IaboqXvZAeVkCj3HLc.roa (raw, json) Hash identifier: efBD3TPF4KkvacuSvnxo11+leOr+M3pBz89qGtEwZtU= Subject key identifier: D4:91:36:82:AC:2D:D4:86:9B:A2:A5:EF:64:07:95:90:28:F7:1C:B7 Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d Certificate serial: 019B7DCB1394D515E95ED0D6B551FB1EA301 Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/1JE2gqwt1IaboqXvZAeVkCj3HLc.roa Signing time: Fri 02 Jan 2026 08:20:19 +0000 ROA not before: Fri 02 Jan 2026 08:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42910 IP address blocks: 31.210.32.0/24 maxlen: 24 31.210.33.0/24 maxlen: 24 31.210.56.0/24 maxlen: 24 31.210.57.0/24 maxlen: 24 31.210.58.0/24 maxlen: 24 31.210.59.0/24 maxlen: 24 31.210.60.0/24 maxlen: 24 31.210.61.0/24 maxlen: 32 77.92.128.0/24 maxlen: 24 77.92.129.0/24 maxlen: 24 77.92.132.0/24 maxlen: 24 77.92.133.0/24 maxlen: 32 77.92.134.0/24 maxlen: 24 77.92.135.0/24 maxlen: 24 77.92.136.0/24 maxlen: 24 77.92.137.0/24 maxlen: 24 77.92.138.0/24 maxlen: 24 77.92.139.0/24 maxlen: 24 77.92.140.0/24 maxlen: 32 77.92.141.0/24 maxlen: 24 77.92.149.0/24 maxlen: 24 77.92.155.0/24 maxlen: 32 77.92.156.0/24 maxlen: 24 77.92.157.0/24 maxlen: 32 77.92.158.0/24 maxlen: 24 77.92.159.0/24 maxlen: 24 78.135.79.0/24 maxlen: 24 78.135.108.0/24 maxlen: 32 78.135.113.0/24 maxlen: 32 78.135.114.0/24 maxlen: 32 78.135.116.0/24 maxlen: 24 188.132.134.0/24 maxlen: 24 188.132.135.0/24 maxlen: 32 188.132.142.0/24 maxlen: 24 188.132.147.0/24 maxlen: 32 188.132.148.0/24 maxlen: 24 188.132.157.0/24 maxlen: 24 188.132.158.0/24 maxlen: 32 188.132.172.0/24 maxlen: 24 188.132.175.0/24 maxlen: 24 188.132.176.0/24 maxlen: 32 188.132.180.0/24 maxlen: 24 188.132.194.0/24 maxlen: 24 188.132.195.0/24 maxlen: 24 188.132.204.0/24 maxlen: 32 188.132.205.0/24 maxlen: 32 188.132.244.0/24 maxlen: 32 188.132.245.0/24 maxlen: 24 188.132.246.0/24 maxlen: 24 188.132.252.0/24 maxlen: 24 188.132.253.0/24 maxlen: 24 188.132.254.0/24 maxlen: 24 188.132.255.0/24 maxlen: 24 212.68.32.0/24 maxlen: 24 212.68.33.0/24 maxlen: 32 212.68.40.0/24 maxlen: 32 212.68.41.0/24 maxlen: 32 212.68.42.0/24 maxlen: 32 212.68.43.0/24 maxlen: 32 212.68.44.0/24 maxlen: 24 212.68.45.0/24 maxlen: 32 212.68.46.0/24 maxlen: 32 212.68.50.0/24 maxlen: 32 212.68.51.0/24 maxlen: 24 212.68.57.0/24 maxlen: 32 212.68.61.0/24 maxlen: 32 2a02:26b0::/32 maxlen: 32 2a02:26b0:8000::/48 maxlen: 48 2a02:26b0:8001::/48 maxlen: 48 2a02:26b0:800e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:13:94:d5:15:e9:5e:d0:d6:b5:51:fb:1e:a3:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d Validity Not Before: Jan 2 08:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4913682ac2dd4869ba2a5ef6407959028f71cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1d:b9:01:fe:5e:67:f8:05:c6:83:3f:ee:91: ef:ce:f0:08:83:f9:e9:97:28:2e:fb:e4:e6:d3:97: fc:a4:b5:e3:45:dd:9c:52:51:0d:90:26:01:65:24: b5:a5:fd:84:df:e8:eb:d1:b5:b2:71:42:c8:46:05: fc:b1:86:67:94:87:c2:a8:c1:dd:16:8a:ba:4b:5b: de:81:60:1e:32:13:36:bf:13:ce:97:64:b8:aa:72: b6:b1:64:1c:db:31:b3:cc:f5:a0:bc:81:37:62:6f: 51:34:e6:9b:cb:f9:6a:ee:99:f2:18:44:ca:a1:83: 5b:f7:40:d3:f4:8b:17:d6:08:14:78:f4:a9:73:1d: 09:f5:4a:75:f4:bf:96:7b:5d:3c:fc:cd:7b:ac:f1: be:a3:4d:1d:dd:ab:e1:6c:2e:41:60:7a:92:12:8b: 95:57:1d:d4:b3:83:58:a0:5d:31:9e:b6:64:9f:af: e1:ce:66:01:2e:6c:c8:94:e9:c6:f9:9e:df:67:fb: 99:d0:b9:59:41:ec:12:8a:68:8c:01:a6:cc:5f:7f: 8c:c0:e0:ac:37:b1:1b:90:2b:aa:15:9c:a3:77:50: 6e:86:db:d3:1c:98:1a:56:0b:41:7c:a8:36:a3:f8: e6:a0:f9:34:30:1c:cb:94:2b:8b:89:12:61:41:c1: c3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:91:36:82:AC:2D:D4:86:9B:A2:A5:EF:64:07:95:90:28:F7:1C:B7 X509v3 Authority Key Identifier: keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/1JE2gqwt1IaboqXvZAeVkCj3HLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.32.0/23 31.210.56.0-31.210.61.255 77.92.128.0/23 77.92.132.0-77.92.141.255 77.92.149.0/24 77.92.155.0-77.92.159.255 78.135.79.0/24 78.135.108.0/24 78.135.113.0-78.135.114.255 78.135.116.0/24 188.132.134.0/23 188.132.142.0/24 188.132.147.0-188.132.148.255 188.132.157.0-188.132.158.255 188.132.172.0/24 188.132.175.0-188.132.176.255 188.132.180.0/24 188.132.194.0/23 188.132.204.0/23 188.132.244.0-188.132.246.255 188.132.252.0/22 212.68.32.0/23 212.68.40.0-212.68.46.255 212.68.50.0/23 212.68.57.0/24 212.68.61.0/24 IPv6: 2a02:26b0::/32 Signature Algorithm: sha256WithRSAEncryption 3e:a9:33:59:06:ca:b9:24:57:b7:5f:3d:9f:91:41:65:0c:1c: e7:a4:a3:4b:27:46:1a:c6:d1:d0:f9:e3:c9:e0:89:ac:20:03: 1b:21:40:3b:87:b8:64:68:69:c8:fb:e0:33:2a:67:47:b7:94: 61:a2:54:67:d8:f0:70:b4:ad:79:4e:fe:14:f8:49:b5:2a:b2: 40:96:db:f8:43:66:41:cc:15:22:99:89:6b:00:8b:bf:d0:1a: 22:d4:20:a1:0b:21:ec:06:95:53:83:9c:78:84:f3:af:dd:b0: 21:f4:c8:70:8a:4c:83:05:b8:db:62:1d:19:1a:76:1d:a4:5a: 9f:0d:a9:68:2a:5b:9f:0f:43:87:20:f4:14:10:c0:e1:e8:87: 5e:ba:a5:29:45:70:c8:f6:04:0d:a0:3f:1f:e5:d2:39:35:ac: 8c:95:a9:e3:86:6a:63:a7:7f:03:43:d8:96:bd:e3:1d:f1:4c: ab:a0:de:94:02:97:90:4b:38:b0:28:7d:66:1e:a2:db:78:36: 31:6e:83:69:0a:6c:cb:96:58:20:f6:a6:b4:d8:8e:57:50:08: 0d:bd:fc:88:73:16:82:9f:7a:ac:89:fa:66:fe:eb:06:88:f2: 19:4d:dc:49:3e:47:96:1d:7a:cb:86:e5:81:4b:44:eb:3e:30: d9:20:b8:5a -----BEGIN CERTIFICATE----- MIIF8TCCBNmgAwIBAgISAZt9yxOU1RXpXtDWtVH7HqMBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YTJiOGU5MGQxNTdlYTAyMmY4ZTcwMDAyNGE5M2RjMzU2 YTUxNGQwHhcNMjYwMTAyMDgyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDkxMzY4MmFjMmRkNDg2OWJhMmE1ZWY2NDA3OTU5MDI4ZjcxY2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1h25Af5eZ/gFxoM/7pHvzvAIg/np lygu++Tm05f8pLXjRd2cUlENkCYBZSS1pf2E3+jr0bWycULIRgX8sYZnlIfCqMHd Foq6S1vegWAeMhM2vxPOl2S4qnK2sWQc2zGzzPWgvIE3Ym9RNOaby/lq7pnyGETK oYNb90DT9IsX1ggUePSpcx0J9Up19L+We108/M17rPG+o00d3avhbC5BYHqSEouV Vx3Us4NYoF0xnrZkn6/hzmYBLmzIlOnG+Z7fZ/uZ0LlZQewSimiMAabMX3+MwOCs N7EbkCuqFZyjd1BuhtvTHJgaVgtBfKg2o/jmoPk0MBzLlCuLiRJhQcHDqQIDAQAB o4IC/TCCAvkwHQYDVR0OBBYEFNSRNoKsLdSGm6Kl72QHlZAo9xy3MB8GA1UdIwQY MBaAFOSiuOkNFX6gIvjnAAJKk9w1alFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUtLNDZRMFZmcUFpLU9jQUFrcVQzRFZxVVUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny82OTllODUtMTAyNy00YzdlLThhZTct ZGY0YTJlNzYwY2NiLzEvMUpFMmdxd3QxSWFib3FYdlpBZVZrQ2ozSExjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny82OTllODUtMTAyNy00YzdlLThhZTctZGY0YTJlNzYwY2Ni LzEvNUtLNDZRMFZmcUFpLU9jQUFrcVQzRFZxVVUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBEQYIKwYBBQUHAQcBAf8EggEAMIH9MIHrBAIAATCB5AME AR/SIDAMAwQDH9I4AwQBH9I8AwQBTVyAMAwDBAJNXIQDBAFNXIwDBABNXJUwDAME AE1cmwMEBU1cgAMEAE6HTwMEAE6HbDAMAwQATodxAwQATodyAwQATod0AwQBvISG AwQAvISOMAwDBAC8hJMDBAC8hJQwDAMEALyEnQMEALyEngMEALyErDAMAwQAvISv AwQAvISwAwQAvIS0AwQBvITCAwQBvITMMAwDBAK8hPQDBAC8hPYDBAK8hPwDBAHU RCAwDAMEA9REKAMEANRELgMEAdREMgMEANREOQMEANREPTANBAIAAjAHAwUAKgIm sDANBgkqhkiG9w0BAQsFAAOCAQEAPqkzWQbKuSRXt189n5FBZQwc56SjSydGGsbR 0PnjyeCJrCADGyFAO4e4ZGhpyPvgMypnR7eUYaJUZ9jwcLSteU7+FPhJtSqyQJbb +ENmQcwVIpmJawCLv9AaItQgoQsh7AaVU4OceITzr92wIfTIcIpMgwW422IdGRp2 HaRanw2paCpbnw9DhyD0FBDA4eiHXrqlKUVwyPYEDaA/H+XSOTWsjJWp44ZqY6d/ A0PYlr3jHfFMq6DelAKXkEs4sCh9Zh6i23g2MW6DaQpsy5ZYIPamtNiOV1AIDb38 iHMWgp96rIn6Zv7rBojyGU3cST5Hlh16y4blgUtE6z4w2SC4Wg== -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:07 2026 by rpki-client