This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/ABjUtAr6F5T9eON0Qozl-Ssio-4.roa File: ABjUtAr6F5T9eON0Qozl-Ssio-4.roa (raw, json) Hash identifier: /+Fm6ag2Bip2wlQrf9R39pMECxtJgKwQlKX+U4z0ou4= Subject key identifier: 00:18:D4:B4:0A:FA:17:94:FD:78:E3:74:42:8C:E5:F9:2B:22:A3:EE Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777 Certificate serial: 019BDF825E750CEEEBBF4418944A2CAE0875 Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/ABjUtAr6F5T9eON0Qozl-Ssio-4.roa Signing time: Wed 21 Jan 2026 07:43:41 +0000 ROA not before: Wed 21 Jan 2026 07:43:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13150 IP address blocks: 85.255.16.0/24 maxlen: 24 85.255.17.0/24 maxlen: 24 85.255.19.0/24 maxlen: 24 85.255.20.0/24 maxlen: 24 85.255.21.0/24 maxlen: 24 85.255.22.0/24 maxlen: 24 85.255.23.0/24 maxlen: 24 85.255.24.0/24 maxlen: 24 85.255.25.0/24 maxlen: 24 85.255.26.0/24 maxlen: 24 85.255.27.0/24 maxlen: 24 85.255.28.0/24 maxlen: 24 85.255.29.0/24 maxlen: 24 85.255.30.0/24 maxlen: 24 85.255.31.0/24 maxlen: 24 159.117.224.0/24 maxlen: 24 159.117.225.0/24 maxlen: 24 159.117.226.0/24 maxlen: 24 159.117.227.0/24 maxlen: 24 159.117.228.0/24 maxlen: 24 159.117.229.0/24 maxlen: 24 159.117.230.0/24 maxlen: 24 159.117.231.0/24 maxlen: 24 159.117.232.0/24 maxlen: 24 159.117.233.0/24 maxlen: 24 159.117.234.0/24 maxlen: 24 159.117.236.0/24 maxlen: 24 159.117.237.0/24 maxlen: 24 185.114.120.0/24 maxlen: 24 185.114.121.0/24 maxlen: 24 185.114.122.0/24 maxlen: 24 185.114.123.0/24 maxlen: 24 209.206.0.0/24 maxlen: 24 209.206.1.0/24 maxlen: 24 209.206.2.0/24 maxlen: 24 209.206.3.0/24 maxlen: 24 209.206.4.0/24 maxlen: 24 209.206.5.0/24 maxlen: 24 209.206.6.0/24 maxlen: 24 209.206.7.0/24 maxlen: 24 209.206.8.0/24 maxlen: 24 209.206.9.0/24 maxlen: 24 209.206.10.0/24 maxlen: 24 209.206.11.0/24 maxlen: 24 209.206.12.0/24 maxlen: 24 209.206.13.0/24 maxlen: 24 209.206.14.0/24 maxlen: 24 209.206.15.0/24 maxlen: 24 209.206.16.0/24 maxlen: 24 209.206.17.0/24 maxlen: 24 209.206.18.0/24 maxlen: 24 209.206.19.0/24 maxlen: 24 209.206.20.0/24 maxlen: 24 209.206.21.0/24 maxlen: 24 209.206.22.0/24 maxlen: 24 209.206.23.0/24 maxlen: 24 209.206.24.0/24 maxlen: 24 209.206.25.0/24 maxlen: 24 209.206.26.0/24 maxlen: 24 209.206.27.0/24 maxlen: 24 209.206.28.0/24 maxlen: 24 209.206.29.0/24 maxlen: 24 209.206.30.0/24 maxlen: 24 209.206.31.0/24 maxlen: 24 216.252.176.0/24 maxlen: 24 216.252.177.0/24 maxlen: 24 216.252.178.0/24 maxlen: 24 216.252.179.0/24 maxlen: 24 216.252.180.0/24 maxlen: 24 216.252.181.0/24 maxlen: 24 216.252.182.0/24 maxlen: 24 216.252.183.0/24 maxlen: 24 216.252.184.0/24 maxlen: 24 216.252.185.0/24 maxlen: 24 216.252.186.0/24 maxlen: 24 216.252.187.0/24 maxlen: 24 216.252.189.0/24 maxlen: 24 216.252.190.0/24 maxlen: 24 216.252.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:82:5e:75:0c:ee:eb:bf:44:18:94:4a:2c:ae:08:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777 Validity Not Before: Jan 21 07:43:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0018d4b40afa1794fd78e374428ce5f92b22a3ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:51:42:24:cf:bb:f3:34:32:a3:9b:5e:54:a5: 03:3f:90:f8:db:65:30:56:4a:c3:f7:47:80:10:6a: e7:df:b0:40:65:32:dd:98:e8:0f:e1:a2:7e:a2:a1: 5e:bc:f5:d1:7f:cc:dd:73:ed:dc:c0:69:85:b0:19: 55:1f:f5:2f:74:7b:82:9e:48:16:3e:80:83:17:1c: c4:bc:74:8d:e7:39:60:7c:ef:73:fe:a5:8f:77:80: b2:c1:cc:ff:86:0b:8b:3e:d4:3b:95:dd:a4:33:87: 8a:0e:91:60:57:9b:2a:d4:82:af:8e:55:8a:bb:32: bf:8d:29:16:c6:06:72:94:ee:32:e7:8e:4b:18:35: ad:00:6b:4d:cd:c8:51:5b:91:e9:88:f1:39:98:1d: 41:75:53:aa:b9:09:db:4b:fc:97:49:2e:2d:a2:f4: a3:f8:f3:34:05:27:45:73:66:6e:93:0f:62:c5:fa: da:51:e5:7a:80:27:31:7f:30:08:54:a7:35:a8:ef: 8e:f9:69:44:4c:c8:1f:00:6e:ca:4d:4c:d1:c5:ea: e5:b8:01:b7:3b:3f:04:2e:1a:64:62:79:f4:1a:ca: 0c:af:db:d8:b0:f2:97:e2:d4:4b:b9:74:b8:f2:9c: a6:61:f5:6c:c7:f0:aa:61:8a:41:e8:90:30:d9:39: 74:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:18:D4:B4:0A:FA:17:94:FD:78:E3:74:42:8C:E5:F9:2B:22:A3:EE X509v3 Authority Key Identifier: keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/ABjUtAr6F5T9eON0Qozl-Ssio-4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.255.16.0/23 85.255.19.0-85.255.31.255 159.117.224.0-159.117.234.255 159.117.236.0/23 185.114.120.0/22 209.206.0.0/19 216.252.176.0-216.252.187.255 216.252.189.0-216.252.191.255 Signature Algorithm: sha256WithRSAEncryption 88:75:41:9a:e0:ed:30:0e:c8:bc:83:de:d0:fe:c4:07:ea:5d: 9b:2b:bb:56:39:e9:ee:37:9d:c2:a7:44:f3:8f:ce:cd:89:90: 81:6a:32:03:03:b3:89:e1:ff:d5:d2:28:f6:1d:e5:9c:c5:8a: 29:94:bc:e4:92:5c:bb:73:1f:a3:83:1c:ae:b3:68:f0:76:6f: d5:98:ca:8f:01:ed:1a:87:66:d6:ba:1d:4b:4c:7d:7d:52:13: 27:6c:de:43:88:c2:81:84:98:05:a2:b3:ea:06:58:81:a5:66: ec:68:c0:84:53:a0:11:e7:bb:8b:95:03:a9:55:db:1b:52:e6: 43:a9:f8:03:65:4a:8c:76:5e:5b:70:09:93:7a:42:4c:de:9c: df:f9:1c:f6:fe:c9:ab:a7:62:6b:6b:53:05:26:f6:08:e1:b4: c8:d0:52:c6:80:c8:6f:3a:21:92:cd:6f:97:92:c7:98:32:c6: d1:55:37:ae:a3:27:d9:a8:61:2e:3b:c6:a9:dc:20:33:32:f3: 0c:12:9d:d9:07:3f:80:59:f1:13:e8:b8:b7:18:43:bf:6f:4f: 7c:c7:35:23:66:50:c0:ef:6a:c7:10:09:e5:2a:b0:08:f9:d9: 47:80:7c:88:14:72:e1:e4:9c:d1:bd:6a:de:ee:9d:9c:6f:58: ab:1d:74:f1 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgISAZvfgl51DO7rv0QYlEosrgh1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYjc1MTkxOTc4ODY2ZjFmYzk3ZjUyM2M3ZGRhNDBhODhm N2U3NzcwHhcNMjYwMTIxMDc0MzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDE4ZDRiNDBhZmExNzk0ZmQ3OGUzNzQ0MjhjZTVmOTJiMjJhM2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1FCJM+78zQyo5teVKUDP5D422Uw VkrD90eAEGrn37BAZTLdmOgP4aJ+oqFevPXRf8zdc+3cwGmFsBlVH/UvdHuCnkgW PoCDFxzEvHSN5zlgfO9z/qWPd4Cywcz/hguLPtQ7ld2kM4eKDpFgV5sq1IKvjlWK uzK/jSkWxgZylO4y545LGDWtAGtNzchRW5HpiPE5mB1BdVOquQnbS/yXSS4tovSj +PM0BSdFc2Zukw9ixfraUeV6gCcxfzAIVKc1qO+O+WlETMgfAG7KTUzRxerluAG3 Oz8ELhpkYnn0GsoMr9vYsPKX4tRLuXS48pymYfVsx/CqYYpB6JAw2Tl0gQIDAQAB o4ICUzCCAk8wHQYDVR0OBBYEFAAY1LQK+heU/XjjdEKM5fkrIqPuMB8GA1UdIwQY MBaAFM+3UZGXiGbx/Jf1I8fdpAqI9+d3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOTU3NWItYjdjMS00YzVjLTlkYWIt YzE5OWM3YjRjYWMyLzEvQUJqVXRBcjZGNVQ5ZU9OMFFvemwtU3Npby00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iOTU3NWItYjdjMS00YzVjLTlkYWItYzE5OWM3YjRjYWMy LzEvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQBVf8QMAwD BABV/xMDBAVV/wAwDAMEBZ914AMEAJ916gMEAZ917AMEArlyeAMEBdHOADAMAwQE 2PywAwQC2Py4MAwDBADY/L0DBAbY/IAwDQYJKoZIhvcNAQELBQADggEBAIh1QZrg 7TAOyLyD3tD+xAfqXZsru1Y56e43ncKnRPOPzs2JkIFqMgMDs4nh/9XSKPYd5ZzF iimUvOSSXLtzH6ODHK6zaPB2b9WYyo8B7RqHZta6HUtMfX1SEyds3kOIwoGEmAWi s+oGWIGlZuxowIRToBHnu4uVA6lV2xtS5kOp+ANlSox2XltwCZN6QkzenN/5HPb+ yaunYmtrUwUm9gjhtMjQUsaAyG86IZLNb5eSx5gyxtFVN66jJ9moYS47xqncIDMy 8wwSndkHP4BZ8RPouLcYQ79vT3zHNSNmUMDvascQCeUqsAj52UeAfIgUcuHknNG9 at7unZxvWKsddPE= -----END CERTIFICATE-----Generated at Mon Jan 26 01:02:11 2026 by rpki-client