This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/RvaTJRlt29ftCtqE0WpwZqGpE9g.roa File: RvaTJRlt29ftCtqE0WpwZqGpE9g.roa (raw, json) Hash identifier: StTKZA1GU7wGVFQWDEqlmDXT/zh0mjE1gXIOwpYnhZU= Subject key identifier: 46:F6:93:25:19:6D:DB:D7:ED:0A:DA:84:D1:6A:70:66:A1:A9:13:D8 Certificate issuer: /CN=a0d3216cccc863eca0c3dd189941b1b9ea37cacd Certificate serial: 019B7BA519B259F6D3C0FD382A6A180A4ED3 Authority key identifier: A0:D3:21:6C:CC:C8:63:EC:A0:C3:DD:18:99:41:B1:B9:EA:37:CA:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/RvaTJRlt29ftCtqE0WpwZqGpE9g.roa Signing time: Thu 01 Jan 2026 22:19:36 +0000 ROA not before: Thu 01 Jan 2026 22:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210403 IP address blocks: 31.207.32.0/24 maxlen: 24 31.207.33.0/24 maxlen: 24 31.207.34.0/24 maxlen: 24 31.207.35.0/24 maxlen: 24 31.207.36.0/24 maxlen: 24 31.207.37.0/24 maxlen: 24 31.207.38.0/24 maxlen: 24 31.207.39.0/24 maxlen: 24 78.24.248.0/21 maxlen: 24 78.138.45.0/24 maxlen: 24 78.138.58.0/24 maxlen: 24 83.229.19.0/24 maxlen: 24 91.199.179.0/24 maxlen: 24 91.216.107.0/24 maxlen: 24 91.234.194.0/24 maxlen: 24 91.234.195.0/24 maxlen: 24 180.149.196.0/24 maxlen: 24 180.149.197.0/24 maxlen: 24 180.149.198.0/24 maxlen: 24 180.149.199.0/24 maxlen: 24 185.98.128.0/24 maxlen: 24 185.98.129.0/24 maxlen: 24 185.98.131.0/24 maxlen: 24 185.98.136.0/24 maxlen: 24 185.98.137.0/24 maxlen: 24 185.98.138.0/24 maxlen: 24 185.98.139.0/24 maxlen: 24 185.135.132.0/24 maxlen: 24 185.170.12.0/22 maxlen: 22 185.238.116.0/24 maxlen: 24 192.162.68.0/24 maxlen: 24 192.162.69.0/24 maxlen: 24 192.162.70.0/24 maxlen: 24 192.162.71.0/24 maxlen: 24 193.37.145.0/24 maxlen: 24 193.203.239.0/24 maxlen: 24 194.126.193.0/24 maxlen: 24 195.110.34.0/24 maxlen: 24 195.110.35.0/24 maxlen: 24 213.156.132.0/22 maxlen: 24 213.156.132.0/24 maxlen: 24 213.156.133.0/24 maxlen: 24 213.156.134.0/24 maxlen: 24 213.156.135.0/24 maxlen: 24 213.255.195.0/24 maxlen: 24 2a00:7ee0::/48 maxlen: 48 2a00:7ee0:1::/48 maxlen: 48 2a00:7ee0:2::/48 maxlen: 48 2a00:7ee0:8::/48 maxlen: 48 2a00:7ee0:9::/48 maxlen: 48 2a00:7ee0:40::/44 maxlen: 48 2a00:7ee0:40::/48 maxlen: 48 2a00:7ee0:41::/48 maxlen: 48 2a00:7ee0:2000::/48 maxlen: 48 2a00:7ee0:3000::/36 maxlen: 48 2a00:7ee0:3000::/48 maxlen: 48 2a00:7ee0:4000::/36 maxlen: 36 2a00:7ee0:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:19:b2:59:f6:d3:c0:fd:38:2a:6a:18:0a:4e:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0d3216cccc863eca0c3dd189941b1b9ea37cacd Validity Not Before: Jan 1 22:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46f69325196ddbd7ed0ada84d16a7066a1a913d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:21:30:11:ad:e4:23:2d:48:57:9d:59:6a:5c: b0:78:80:5a:d2:3b:05:5e:73:cf:19:05:72:b9:08: 07:dd:e2:62:70:8c:60:3d:03:58:7e:aa:f9:86:cf: 0b:30:82:90:d3:c5:d8:5a:1b:cd:1e:02:dc:03:b3: 91:4d:bf:4a:c5:70:de:9c:27:9e:d9:26:15:5f:c9: 43:fa:09:4f:20:c2:19:41:78:85:fb:c1:83:0a:66: 4e:68:d6:9c:6d:df:e7:9c:68:b7:b7:0b:04:64:b7: c5:31:1d:36:3d:61:e9:34:b2:f3:5c:c5:be:e6:cf: 95:e5:d2:26:83:7c:02:15:82:57:4e:d8:ff:e8:98: 16:65:5a:bb:2d:fd:ce:73:f8:ea:e0:b2:0a:39:cc: e1:31:ce:72:4e:ee:99:40:5c:8b:c7:6c:3a:15:68: db:89:8c:ba:0c:f7:c3:0c:9d:3f:7e:db:08:5d:78: a1:d8:4f:b3:b5:c7:1b:ce:08:91:f8:47:b4:be:2b: c7:e8:c5:c9:4c:a6:ee:7e:06:a1:99:9c:a7:2c:4b: 31:8e:81:53:64:4d:34:4e:e8:c3:41:07:8c:75:33: db:00:25:03:69:07:c6:bc:c0:82:6e:24:44:05:ae: e2:55:85:90:75:22:23:89:49:d5:8a:00:cc:23:6a: f5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F6:93:25:19:6D:DB:D7:ED:0A:DA:84:D1:6A:70:66:A1:A9:13:D8 X509v3 Authority Key Identifier: keyid:A0:D3:21:6C:CC:C8:63:EC:A0:C3:DD:18:99:41:B1:B9:EA:37:CA:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/RvaTJRlt29ftCtqE0WpwZqGpE9g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.207.32.0/21 78.24.248.0/21 78.138.45.0/24 78.138.58.0/24 83.229.19.0/24 91.199.179.0/24 91.216.107.0/24 91.234.194.0/23 180.149.196.0/22 185.98.128.0/23 185.98.131.0/24 185.98.136.0/22 185.135.132.0/24 185.170.12.0/22 185.238.116.0/24 192.162.68.0/22 193.37.145.0/24 193.203.239.0/24 194.126.193.0/24 195.110.34.0/23 213.156.132.0/22 213.255.195.0/24 IPv6: 2a00:7ee0::-2a00:7ee0:2:ffff:ffff:ffff:ffff:ffff 2a00:7ee0:8::/47 2a00:7ee0:40::/44 2a00:7ee0:2000::/48 2a00:7ee0:3000::-2a00:7ee0:4fff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 62:15:3f:ee:8c:a3:dd:ed:80:b7:82:8a:b4:65:0e:fb:16:ae: 1e:b7:14:25:20:7f:35:92:46:47:11:6c:6b:8c:99:f6:5e:c7: 19:47:f6:65:72:ce:37:65:15:27:32:d2:5f:32:5e:f5:6e:d5: e9:d7:f8:72:5e:c0:09:0e:35:2d:f3:d9:67:d2:69:44:43:a4: df:66:9d:63:00:a1:b5:a9:78:14:36:83:53:19:5e:b5:6f:88: fb:7c:f5:9f:88:f0:48:57:80:54:58:c5:90:bc:0d:af:9e:f3: 99:81:94:0d:6d:44:58:6f:27:de:8c:65:09:14:90:dc:67:54: 66:43:73:49:1d:37:2f:d3:b8:82:6d:31:cb:da:3f:7f:14:08: ce:8b:2c:42:ed:a7:78:28:ef:82:b4:49:b4:ec:67:d5:7b:fb: 92:37:a7:dc:78:e3:bc:5c:04:1b:05:41:7b:01:d6:d4:d9:bb: 3f:e8:d4:44:8a:ef:a1:b0:04:ac:2f:58:ee:20:b9:9c:c1:26: e3:67:6a:dc:7f:d2:44:de:37:02:43:a0:b8:b4:a3:a8:14:8e: b2:77:9a:1d:3d:a6:0a:d5:69:7c:a4:60:27:29:39:30:dd:12: 10:da:9b:8a:85:21:ff:93:37:f7:77:28:70:4d:8c:7a:52:31: 4e:85:65:31 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt7pRmyWfbTwP04KmoYCk7TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZDMyMTZjY2NjODYzZWNhMGMzZGQxODk5NDFiMWI5ZWEz N2NhY2QwHhcNMjYwMTAxMjIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmY2OTMyNTE5NmRkYmQ3ZWQwYWRhODRkMTZhNzA2NmExYTkxM2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CEwEa3kIy1IV51ZalyweIBa0jsF XnPPGQVyuQgH3eJicIxgPQNYfqr5hs8LMIKQ08XYWhvNHgLcA7ORTb9KxXDenCee 2SYVX8lD+glPIMIZQXiF+8GDCmZOaNacbd/nnGi3twsEZLfFMR02PWHpNLLzXMW+ 5s+V5dImg3wCFYJXTtj/6JgWZVq7Lf3Oc/jq4LIKOczhMc5yTu6ZQFyLx2w6FWjb iYy6DPfDDJ0/ftsIXXih2E+ztccbzgiR+Ee0vivH6MXJTKbufgahmZynLEsxjoFT ZE00TujDQQeMdTPbACUDaQfGvMCCbiREBa7iVYWQdSIjiUnVigDMI2r13wIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFEb2kyUZbdvX7QrahNFqcGahqRPYMB8GA1UdIwQY MBaAFKDTIWzMyGPsoMPdGJlBsbnqN8rNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb05NaGJNeklZLXlndzkwWW1VR3h1ZW8zeXMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hNWIyZDEtY2JhMC00YTU0LWI0Mzgt MGQ0NGMwNGE4NDQ4LzEvUnZhVEpSbHQyOWZ0Q3RxRTBXcHdacUdwRTlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9hNWIyZDEtY2JhMC00YTU0LWI0MzgtMGQ0NGMwNGE4NDQ4 LzEvb05NaGJNeklZLXlndzkwWW1VR3h1ZW8zeXMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHoBggrBgEFBQcBBwEB/wSB2DCB1TCBiwQCAAEwgYQDBAMf zyADBANOGPgDBABOii0DBABOijoDBABT5RMDBABbx7MDBABb2GsDBAFb6sIDBAK0 lcQDBAG5YoADBAC5YoMDBAK5YogDBAC5h4QDBAK5qgwDBAC57nQDBALAokQDBADB JZEDBADBy+8DBADCfsEDBAHDbiIDBALVnIQDBADV/8MwRQQCAAIwPzAQAwUFKgB+ 4AMHACoAfuAAAgMHASoAfuAACAMHBCoAfuAAQAMHACoAfuAgADAQAwYEKgB+4DAD BgQqAH7gQDANBgkqhkiG9w0BAQsFAAOCAQEAYhU/7oyj3e2At4KKtGUO+xauHrcU JSB/NZJGRxFsa4yZ9l7HGUf2ZXLON2UVJzLSXzJe9W7V6df4cl7ACQ41LfPZZ9Jp REOk32adYwChtal4FDaDUxletW+I+3z1n4jwSFeAVFjFkLwNr57zmYGUDW1EWG8n 3oxlCRSQ3GdUZkNzSR03L9O4gm0xy9o/fxQIzossQu2neCjvgrRJtOxn1Xv7kjen 3HjjvFwEGwVBewHW1Nm7P+jURIrvobAErC9Y7iC5nMEm42dq3H/SRN43AkOguLSj qBSOsneaHT2mCtVpfKRgJyk5MN0SENqbioUh/5M393cocE2MelIxToVlMQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:46 2026 by rpki-client