This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/e4qPjYtVZNjFgNgoQb6aifisJTs.roa File: e4qPjYtVZNjFgNgoQb6aifisJTs.roa (raw, json) Hash identifier: 1M+oNLSG3cS6v1C1UyKbtqc0oXSkYgVWMgvB/761VUE= Subject key identifier: 7B:8A:8F:8D:8B:55:64:D8:C5:80:D8:28:41:BE:9A:89:F8:AC:25:3B Certificate issuer: /CN=3a936d2f298e6cfd56604573d1ef9e0e8299b529 Certificate serial: 019B79103C942BDB52C2D81324A72CB74922 Authority key identifier: 3A:93:6D:2F:29:8E:6C:FD:56:60:45:73:D1:EF:9E:0E:82:99:B5:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/e4qPjYtVZNjFgNgoQb6aifisJTs.roa Signing time: Thu 01 Jan 2026 10:17:45 +0000 ROA not before: Thu 01 Jan 2026 10:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60855 IP address blocks: 164.131.80.0/24 maxlen: 24 164.131.124.0/23 maxlen: 23 164.131.124.0/24 maxlen: 24 164.131.125.0/24 maxlen: 24 164.131.126.0/23 maxlen: 23 164.131.126.0/24 maxlen: 24 164.131.127.0/24 maxlen: 24 164.131.130.0/23 maxlen: 23 164.131.130.0/24 maxlen: 24 164.131.131.0/24 maxlen: 24 164.131.132.0/23 maxlen: 23 164.131.132.0/24 maxlen: 24 164.131.133.0/24 maxlen: 24 164.131.142.0/23 maxlen: 23 164.131.142.0/24 maxlen: 24 164.131.143.0/24 maxlen: 24 164.131.160.0/24 maxlen: 24 164.131.197.0/24 maxlen: 24 164.131.198.0/23 maxlen: 23 164.131.198.0/24 maxlen: 24 164.131.199.0/24 maxlen: 24 164.131.212.0/23 maxlen: 24 164.131.214.0/23 maxlen: 24 164.131.224.0/24 maxlen: 24 164.131.226.0/23 maxlen: 24 164.131.232.0/23 maxlen: 23 164.131.232.0/24 maxlen: 24 164.131.233.0/24 maxlen: 24 164.131.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:3c:94:2b:db:52:c2:d8:13:24:a7:2c:b7:49:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a936d2f298e6cfd56604573d1ef9e0e8299b529 Validity Not Before: Jan 1 10:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b8a8f8d8b5564d8c580d82841be9a89f8ac253b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6a:1b:99:cb:10:be:e7:76:e8:3c:12:60:6d: e9:7d:ff:8d:bd:b0:b0:be:f3:c7:62:17:10:39:14: 0e:1a:59:4e:b1:3d:5c:c3:31:17:87:39:f5:12:80: 0d:c3:d6:11:ad:cf:26:68:ce:20:16:6f:dd:55:74: 31:f7:27:4a:19:86:15:00:70:0b:a6:27:10:ee:ca: fd:f0:a0:f2:1c:84:73:d0:28:e7:53:66:ec:30:21: 54:6c:b4:85:72:d2:2c:d5:e3:26:9c:3a:9f:da:78: 94:23:6d:fa:58:97:86:fa:31:c4:07:1f:a0:68:03: 33:f4:95:38:50:b3:b9:56:c1:a2:c8:f2:ac:23:10: 28:16:9c:d0:23:a2:37:1a:88:c1:9d:67:93:a0:d6: 14:14:28:50:a1:36:a9:d7:e6:74:ed:c4:1a:71:ee: 62:75:22:eb:1b:b6:29:70:1d:5f:7b:34:71:4b:f1: 83:8c:fc:ac:2c:bb:8b:89:1a:52:21:0b:8b:00:e3: 61:95:a3:13:a7:15:5f:d7:9b:be:79:cc:00:e9:20: 22:dd:e1:23:a9:2d:3d:13:26:c6:5a:50:0b:92:cc: c5:ab:cf:ce:c5:be:c9:a6:6e:83:f1:c9:69:f0:d1: b3:ae:1d:ac:da:5e:91:7a:ff:39:b3:2c:05:42:41: 23:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:8A:8F:8D:8B:55:64:D8:C5:80:D8:28:41:BE:9A:89:F8:AC:25:3B X509v3 Authority Key Identifier: keyid:3A:93:6D:2F:29:8E:6C:FD:56:60:45:73:D1:EF:9E:0E:82:99:B5:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/e4qPjYtVZNjFgNgoQb6aifisJTs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.131.80.0/24 164.131.124.0/22 164.131.130.0-164.131.133.255 164.131.142.0/23 164.131.160.0/24 164.131.197.0-164.131.199.255 164.131.212.0/22 164.131.224.0/24 164.131.226.0/23 164.131.232.0/23 164.131.244.0/24 Signature Algorithm: sha256WithRSAEncryption 31:f5:d9:6e:16:05:33:3d:fa:1e:80:ca:63:1a:b1:33:19:05: 34:d8:2f:64:3d:00:a3:ef:5c:cb:45:10:6a:62:54:38:ff:c8: 18:eb:41:3e:e0:3b:2c:34:48:7f:a1:f5:9d:e1:ba:67:9e:57: cc:cd:16:9f:66:b3:d7:92:a6:79:0f:dd:e4:d8:d2:a9:e7:e3: 43:f0:6c:ce:c5:9d:ed:d7:91:fe:3e:d9:0b:d1:13:cd:9f:7f: 2b:89:94:f7:8c:32:0f:30:01:e3:d0:2f:5a:c6:df:6e:f2:cb: 54:2a:10:53:90:88:07:a4:62:47:61:65:e3:ec:3e:e4:74:f8: b9:35:8b:97:e9:e3:6e:7f:8b:65:db:df:06:4b:49:1a:0c:e2: dd:31:50:65:3a:80:11:44:bc:0b:ff:b4:ac:9a:15:c3:74:48: 08:75:21:24:ca:35:a4:c4:65:84:27:de:a7:1a:91:7c:f5:67: 2d:43:7b:cd:25:ac:92:b6:b7:96:ac:8e:09:da:b4:2f:d4:4e: 17:7b:53:11:45:f1:6a:2d:aa:e0:a5:1d:98:4a:05:40:5d:e1: ae:06:40:e5:d9:f8:27:93:d3:9b:21:ce:ee:56:da:6e:8b:a6: a9:5b:7a:fd:9e:29:1e:00:a8:b3:08:76:ae:d7:48:68:a7:ba: ef:7b:4e:52 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZt5EDyUK9tSwtgTJKcst0kiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhOTM2ZDJmMjk4ZTZjZmQ1NjYwNDU3M2QxZWY5ZTBlODI5 OWI1MjkwHhcNMjYwMTAxMTAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjhhOGY4ZDhiNTU2NGQ4YzU4MGQ4Mjg0MWJlOWE4OWY4YWMyNTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2obmcsQvud26DwSYG3pff+NvbCw vvPHYhcQORQOGllOsT1cwzEXhzn1EoANw9YRrc8maM4gFm/dVXQx9ydKGYYVAHAL picQ7sr98KDyHIRz0CjnU2bsMCFUbLSFctIs1eMmnDqf2niUI236WJeG+jHEBx+g aAMz9JU4ULO5VsGiyPKsIxAoFpzQI6I3GojBnWeToNYUFChQoTap1+Z07cQace5i dSLrG7YpcB1fezRxS/GDjPysLLuLiRpSIQuLAONhlaMTpxVf15u+ecwA6SAi3eEj qS09EybGWlALkszFq8/Oxb7Jpm6D8clp8NGzrh2s2l6Rev85sywFQkEjOwIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFHuKj42LVWTYxYDYKEG+mon4rCU7MB8GA1UdIwQY MBaAFDqTbS8pjmz9VmBFc9Hvng6CmbUpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3BOdEx5bU9iUDFXWUVWejBlLWVEb0tadFNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy83MDQ5NzMtMTg2Ni00MGQxLTlhMWQt YjVmOGVjMGFhZDdjLzEvZTRxUGpZdFZaTmpGZ05nb1FiNmFpZmlzSlRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy83MDQ5NzMtMTg2Ni00MGQxLTlhMWQtYjVmOGVjMGFhZDdj LzEvT3BOdEx5bU9iUDFXWUVWejBlLWVEb0tadFNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSAwQApINQAwQC pIN8MAwDBAGkg4IDBAGkg4QDBAGkg44DBACkg6AwDAMEAKSDxQMEA6SDwAMEAqSD 1AMEAKSD4AMEAaSD4gMEAaSD6AMEAKSD9DANBgkqhkiG9w0BAQsFAAOCAQEAMfXZ bhYFMz36HoDKYxqxMxkFNNgvZD0Ao+9cy0UQamJUOP/IGOtBPuA7LDRIf6H1neG6 Z55XzM0Wn2az15KmeQ/d5NjSqefjQ/BszsWd7deR/j7ZC9ETzZ9/K4mU94wyDzAB 49AvWsbfbvLLVCoQU5CIB6RiR2Fl4+w+5HT4uTWLl+njbn+LZdvfBktJGgzi3TFQ ZTqAEUS8C/+0rJoVw3RICHUhJMo1pMRlhCfepxqRfPVnLUN7zSWskra3lqyOCdq0 L9ROF3tTEUXxai2q4KUdmEoFQF3hrgZA5dn4J5PTmyHO7lbaboumqVt6/Z4pHgCo swh2rtdIaKe673tOUg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:41:58 2026 by rpki-client