This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/o4XRIYaubJYsaKle7Mq2zp2yQPU.roa File: o4XRIYaubJYsaKle7Mq2zp2yQPU.roa (raw, json) Hash identifier: /2hj0m+hPdpMrzwdZKFg60yCkkhQ3QugnRJdjSqOsJc= Subject key identifier: A3:85:D1:21:86:AE:6C:96:2C:68:A9:5E:EC:CA:B6:CE:9D:B2:40:F5 Certificate issuer: /CN=a952d0d266557385836aab7ae3fdced4ca74ad89 Certificate serial: 019B7E3914EBA0AD6B99D4FA63825A9EE7E6 Authority key identifier: A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/o4XRIYaubJYsaKle7Mq2zp2yQPU.roa Signing time: Fri 02 Jan 2026 10:20:28 +0000 ROA not before: Fri 02 Jan 2026 10:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210079 IP address blocks: 5.35.100.0/24 maxlen: 24 5.35.101.0/24 maxlen: 24 5.35.102.0/24 maxlen: 24 37.143.8.0/23 maxlen: 23 37.143.10.0/23 maxlen: 23 37.143.12.0/23 maxlen: 23 37.143.14.0/23 maxlen: 23 46.254.16.0/23 maxlen: 23 46.254.18.0/23 maxlen: 23 46.254.20.0/23 maxlen: 23 46.254.22.0/24 maxlen: 24 46.254.23.0/24 maxlen: 24 91.201.40.0/22 maxlen: 22 91.218.228.0/23 maxlen: 23 91.218.230.0/23 maxlen: 23 95.181.224.0/24 maxlen: 24 95.181.225.0/24 maxlen: 24 95.181.226.0/24 maxlen: 24 95.181.227.0/24 maxlen: 24 95.181.228.0/24 maxlen: 24 95.181.229.0/24 maxlen: 24 95.181.230.0/24 maxlen: 24 95.181.231.0/24 maxlen: 24 95.183.8.0/23 maxlen: 23 95.183.10.0/24 maxlen: 24 95.183.11.0/24 maxlen: 24 95.183.12.0/24 maxlen: 24 95.183.13.0/24 maxlen: 24 95.183.14.0/24 maxlen: 24 95.183.15.0/24 maxlen: 24 130.49.172.0/22 maxlen: 24 130.49.172.0/24 maxlen: 24 178.57.216.0/23 maxlen: 24 178.57.218.0/23 maxlen: 24 178.57.220.0/23 maxlen: 23 178.57.220.0/24 maxlen: 24 178.57.221.0/24 maxlen: 24 178.57.222.0/23 maxlen: 24 178.217.100.0/24 maxlen: 24 178.217.101.0/24 maxlen: 24 185.11.246.0/23 maxlen: 23 185.12.92.0/22 maxlen: 22 185.12.92.0/24 maxlen: 24 185.12.93.0/24 maxlen: 24 185.12.94.0/24 maxlen: 24 185.12.95.0/24 maxlen: 24 185.22.232.0/23 maxlen: 23 185.22.234.0/23 maxlen: 23 185.87.192.0/24 maxlen: 24 185.87.193.0/24 maxlen: 24 185.87.194.0/24 maxlen: 24 185.87.195.0/24 maxlen: 24 185.87.196.0/24 maxlen: 24 185.87.197.0/24 maxlen: 24 185.87.198.0/24 maxlen: 24 185.87.199.0/24 maxlen: 24 185.221.152.0/22 maxlen: 24 185.221.154.0/24 maxlen: 24 185.221.155.0/24 maxlen: 24 212.8.247.0/24 maxlen: 24 217.144.96.0/24 maxlen: 24 217.144.97.0/24 maxlen: 24 217.144.98.0/24 maxlen: 24 217.144.99.0/24 maxlen: 24 217.144.100.0/24 maxlen: 24 217.144.101.0/24 maxlen: 24 217.144.103.0/24 maxlen: 24 2a03:80c0::/48 maxlen: 48 2a03:80c0:1::/48 maxlen: 48 2a03:c980:db::/48 maxlen: 48 2a03:c980:e5::/48 maxlen: 48 2a03:c980:5fb5::/48 maxlen: 48 2a03:c980:5fb7::/48 maxlen: 48 2a03:c980:b239::/48 maxlen: 48 2a03:c980:b916::/48 maxlen: 48 2a03:c980:b957::/48 maxlen: 48 2a03:c980:beef::/48 maxlen: 48 2a03:c980:d990::/48 maxlen: 48 2a03:c980:dead::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:14:eb:a0:ad:6b:99:d4:fa:63:82:5a:9e:e7:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a952d0d266557385836aab7ae3fdced4ca74ad89 Validity Not Before: Jan 2 10:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a385d12186ae6c962c68a95eeccab6ce9db240f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c3:cb:0e:e7:8b:6d:54:c4:82:e3:e5:a2:d8: 67:0a:af:75:98:42:03:2e:18:97:73:c2:a6:67:ce: 95:d9:c6:07:67:8c:50:8c:04:22:70:90:ff:87:eb: 7e:07:41:89:66:d2:0c:a5:b3:4f:41:92:84:6e:98: 67:d2:9b:f9:44:12:94:26:f5:31:77:55:f3:0b:e3: 93:ab:38:18:7a:e3:4e:b3:86:af:e3:b2:14:78:66: 5a:5a:3f:28:68:88:d5:86:09:f5:43:87:35:26:23: 6c:2f:29:9f:d9:03:46:d1:8f:f3:7f:6c:9b:18:83: ee:fd:0d:0f:57:67:45:b5:a2:9b:b9:3e:a3:79:dc: b8:54:d3:c6:53:92:dc:e2:18:e0:fe:90:11:ff:09: 72:9e:b4:95:59:11:3e:b8:e3:43:94:0b:dc:53:68: 73:38:96:09:a0:dc:ae:f6:47:78:63:ad:ff:14:7f: f2:05:89:07:53:fd:8d:3e:84:74:65:cb:63:a7:24: e6:87:fd:fa:e8:0d:7a:a5:15:dc:10:74:0a:9f:9b: fc:a1:26:85:76:11:fc:5b:1b:87:88:3b:ac:de:11: 69:0f:57:48:db:0e:56:10:94:7d:55:69:35:4d:2b: f5:7d:c5:66:35:74:15:84:34:22:4f:51:c0:92:c0: 86:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:85:D1:21:86:AE:6C:96:2C:68:A9:5E:EC:CA:B6:CE:9D:B2:40:F5 X509v3 Authority Key Identifier: keyid:A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/o4XRIYaubJYsaKle7Mq2zp2yQPU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.35.100.0-5.35.102.255 37.143.8.0/21 46.254.16.0/21 91.201.40.0/22 91.218.228.0/22 95.181.224.0/21 95.183.8.0/21 130.49.172.0/22 178.57.216.0/21 178.217.100.0/23 185.11.246.0/23 185.12.92.0/22 185.22.232.0/22 185.87.192.0/21 185.221.152.0/22 212.8.247.0/24 217.144.96.0-217.144.101.255 217.144.103.0/24 IPv6: 2a03:80c0::/47 2a03:c980:db::/48 2a03:c980:e5::/48 2a03:c980:5fb5::/48 2a03:c980:5fb7::/48 2a03:c980:b239::/48 2a03:c980:b916::/48 2a03:c980:b957::/48 2a03:c980:beef::/48 2a03:c980:d990::/48 2a03:c980:dead::/48 Signature Algorithm: sha256WithRSAEncryption 5d:e7:db:c0:44:43:00:4c:0f:4c:ac:ef:fd:a9:28:ec:3a:47: dc:68:6c:9f:ce:ca:72:34:64:e4:ac:8b:92:8f:f3:a5:63:0b: e4:38:06:95:5f:b1:70:08:f3:9d:37:bb:b7:ee:83:a6:66:90: 27:3a:b3:4a:0b:58:bc:75:c0:28:d0:4c:8d:29:b1:92:9b:df: c0:66:6d:fa:cf:8b:9f:04:f4:2b:15:b3:f1:30:40:75:2f:6e: 94:fe:e1:3f:c2:50:bc:ec:e3:35:5d:e9:ae:be:d2:3f:79:65: db:e9:cd:4f:4d:80:68:39:67:f0:10:e7:90:e6:32:03:56:ef: 08:d8:a5:d1:4b:9a:77:98:e3:5f:a5:18:fb:db:fb:77:80:63: 6b:54:13:58:c4:c3:b9:1e:fb:20:da:ee:58:ed:a5:4c:ea:4a: 97:2b:25:db:7e:b8:1b:18:73:a0:09:84:e6:39:5e:1e:95:6e: 3a:a1:15:59:11:d9:b8:cd:a9:11:c0:f9:9f:a3:2b:1f:56:87: 68:b8:82:f2:cb:e1:ad:85:b6:23:78:f0:b7:1d:28:bb:de:f8: ae:d3:86:34:70:70:55:ae:47:41:ca:e5:6b:9c:a4:94:10:a1: 79:4a:a5:dd:2b:31:ba:a3:1a:c4:7f:83:f6:8a:4d:98:b1:77: cb:c8:17:7a -----BEGIN CERTIFICATE----- MIIF4zCCBMugAwIBAgISAZt+ORTroK1rmdT6Y4JanufmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NTJkMGQyNjY1NTczODU4MzZhYWI3YWUzZmRjZWQ0Y2E3 NGFkODkwHhcNMjYwMTAyMTAyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzg1ZDEyMTg2YWU2Yzk2MmM2OGE5NWVlY2NhYjZjZTlkYjI0MGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcPLDueLbVTEguPlothnCq91mEID LhiXc8KmZ86V2cYHZ4xQjAQicJD/h+t+B0GJZtIMpbNPQZKEbphn0pv5RBKUJvUx d1XzC+OTqzgYeuNOs4av47IUeGZaWj8oaIjVhgn1Q4c1JiNsLymf2QNG0Y/zf2yb GIPu/Q0PV2dFtaKbuT6jedy4VNPGU5Lc4hjg/pAR/wlynrSVWRE+uONDlAvcU2hz OJYJoNyu9kd4Y63/FH/yBYkHU/2NPoR0ZctjpyTmh/366A16pRXcEHQKn5v8oSaF dhH8WxuHiDus3hFpD1dI2w5WEJR9VWk1TSv1fcVmNXQVhDQiT1HAksCGjQIDAQAB o4IC7zCCAuswHQYDVR0OBBYEFKOF0SGGrmyWLGipXuzKts6dskD1MB8GA1UdIwQY MBaAFKlS0NJmVXOFg2qreuP9ztTKdK2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yNzBhOTEtY2JmZC00NTAzLWI5NjAt NGMyMWE1MDVmMzQ2LzEvbzRYUklZYXViSllzYUtsZTdNcTJ6cDJ5UVBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8yNzBhOTEtY2JmZC00NTAzLWI5NjAtNGMyMWE1MDVmMzQ2 LzEvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBAwYIKwYBBQUHAQcBAf8EgfMwgfAwgYIEAgABMHwwDAME AgUjZAMEAAUjZgMEAyWPCAMEAy7+EAMEAlvJKAMEAlva5AMEA1+14AMEA1+3CAME AoIxrAMEA7I52AMEAbLZZAMEAbkL9gMEArkMXAMEArkW6AMEA7lXwAMEArndmAME ANQI9zAMAwQF2ZBgAwQB2ZBkAwQA2ZBnMGkEAgACMGMDBwEqA4DAAAADBwAqA8mA ANsDBwAqA8mAAOUDBwAqA8mAX7UDBwAqA8mAX7cDBwAqA8mAsjkDBwAqA8mAuRYD BwAqA8mAuVcDBwAqA8mAvu8DBwAqA8mA2ZADBwAqA8mA3q0wDQYJKoZIhvcNAQEL BQADggEBAF3n28BEQwBMD0ys7/2pKOw6R9xobJ/OynI0ZOSsi5KP86VjC+Q4BpVf sXAI8503u7fug6ZmkCc6s0oLWLx1wCjQTI0psZKb38BmbfrPi58E9CsVs/EwQHUv bpT+4T/CULzs4zVd6a6+0j95ZdvpzU9NgGg5Z/AQ55DmMgNW7wjYpdFLmneY41+l GPvb+3eAY2tUE1jEw7ke+yDa7ljtpUzqSpcrJdt+uBsYc6AJhOY5Xh6VbjqhFVkR 2bjNqRHA+Z+jKx9Wh2i4gvLL4a2FtiN48LcdKLve+K7ThjRwcFWuR0HK5WucpJQQ oXlKpd0rMbqjGsR/g/aKTZixd8vIF3o= -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:40 2026 by rpki-client