This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/VzRDRUhOPTiPlaXOeGXg7YkPjGY.roa File: VzRDRUhOPTiPlaXOeGXg7YkPjGY.roa (raw, json) Hash identifier: ZiS8xAZ8WIWo3rD54IGCFbmBSzYShJeiuytFXk2sEEo= Subject key identifier: 57:34:43:45:48:4E:3D:38:8F:95:A5:CE:78:65:E0:ED:89:0F:8C:66 Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Certificate serial: 019B7E37D7C72DF31E70583DF4B8FC70DF41 Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/VzRDRUhOPTiPlaXOeGXg7YkPjGY.roa Signing time: Fri 02 Jan 2026 10:19:07 +0000 ROA not before: Fri 02 Jan 2026 10:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42337 IP address blocks: 95.38.96.0/21 maxlen: 21 95.38.96.0/24 maxlen: 24 95.38.97.0/24 maxlen: 24 95.38.98.0/24 maxlen: 24 95.38.99.0/24 maxlen: 24 95.38.100.0/24 maxlen: 24 95.38.101.0/24 maxlen: 24 95.38.102.0/24 maxlen: 24 95.38.103.0/24 maxlen: 24 95.38.104.0/22 maxlen: 22 95.38.104.0/24 maxlen: 24 95.38.105.0/24 maxlen: 24 95.38.106.0/24 maxlen: 24 95.38.107.0/24 maxlen: 24 95.38.130.0/23 maxlen: 23 95.38.130.0/24 maxlen: 24 95.38.131.0/24 maxlen: 24 95.38.132.0/22 maxlen: 22 95.38.132.0/24 maxlen: 24 95.38.133.0/24 maxlen: 24 95.38.134.0/24 maxlen: 24 95.38.135.0/24 maxlen: 24 95.38.136.0/22 maxlen: 22 95.38.136.0/24 maxlen: 24 95.38.137.0/24 maxlen: 24 95.38.138.0/24 maxlen: 24 95.38.139.0/24 maxlen: 24 95.38.140.0/22 maxlen: 22 95.38.140.0/24 maxlen: 24 95.38.141.0/24 maxlen: 24 95.38.142.0/24 maxlen: 24 95.38.143.0/24 maxlen: 24 95.38.152.0/21 maxlen: 21 95.38.152.0/24 maxlen: 24 95.38.153.0/24 maxlen: 24 95.38.154.0/24 maxlen: 24 95.38.155.0/24 maxlen: 24 95.38.156.0/24 maxlen: 24 95.38.157.0/24 maxlen: 24 95.38.158.0/24 maxlen: 24 95.38.159.0/24 maxlen: 24 95.38.168.0/22 maxlen: 22 95.38.168.0/24 maxlen: 24 95.38.169.0/24 maxlen: 24 95.38.170.0/24 maxlen: 24 95.38.171.0/24 maxlen: 24 95.38.174.0/24 maxlen: 24 95.38.200.0/22 maxlen: 22 95.38.200.0/24 maxlen: 24 95.38.201.0/24 maxlen: 24 95.38.202.0/24 maxlen: 24 95.38.203.0/24 maxlen: 24 95.38.208.0/22 maxlen: 22 95.38.208.0/24 maxlen: 24 95.38.209.0/24 maxlen: 24 95.38.210.0/24 maxlen: 24 95.38.211.0/24 maxlen: 24 95.38.240.0/21 maxlen: 21 95.38.240.0/24 maxlen: 24 95.38.241.0/24 maxlen: 24 95.38.242.0/24 maxlen: 24 95.38.243.0/24 maxlen: 24 95.38.244.0/24 maxlen: 24 95.38.245.0/24 maxlen: 24 95.38.246.0/24 maxlen: 24 95.38.247.0/24 maxlen: 24 95.38.248.0/22 maxlen: 22 95.38.248.0/24 maxlen: 24 95.38.249.0/24 maxlen: 24 95.38.250.0/24 maxlen: 24 95.38.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:d7:c7:2d:f3:1e:70:58:3d:f4:b8:fc:70:df:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Validity Not Before: Jan 2 10:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57344345484e3d388f95a5ce7865e0ed890f8c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d4:3e:e8:f9:74:83:e9:e1:80:0b:9c:28:af: b5:a9:74:ab:c2:f2:2a:42:b2:ab:55:42:49:ef:05: 58:3d:93:f9:53:58:3c:51:c5:44:1e:99:64:01:ef: 61:ab:fb:90:ab:72:0e:bd:1c:e7:62:93:42:33:27: c6:e5:4e:0a:16:2f:ac:c3:97:4d:5b:22:75:c3:15: 13:a4:3e:60:d3:71:ab:e8:20:f2:22:b7:af:2a:58: 15:2b:9e:c5:fb:f3:72:83:8e:db:fe:36:81:1e:ce: b3:25:ce:99:34:39:33:f6:ca:c2:cd:c8:4a:7b:41: c4:13:3c:0b:28:99:46:f0:6b:e4:a2:69:75:a3:d9: 42:17:ff:ee:c4:39:99:27:d8:fc:f1:71:cc:4d:46: 67:91:05:8b:d8:d7:82:ce:da:15:56:8a:5c:01:e2: 96:9f:3e:96:60:c8:42:97:40:d2:3b:f5:76:86:b5: c6:95:a7:27:58:ee:4f:9d:c6:33:f0:9c:36:31:59: 0f:ad:72:4d:35:79:53:93:e4:5a:e9:69:43:7e:4c: 41:6d:35:68:a2:72:ff:99:6b:06:40:4f:77:cd:1d: 33:0f:3d:3a:67:48:2f:5c:e8:32:76:09:d8:8e:08: eb:86:55:9c:09:f2:be:e7:b3:c1:69:8b:a6:fd:36: bc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:34:43:45:48:4E:3D:38:8F:95:A5:CE:78:65:E0:ED:89:0F:8C:66 X509v3 Authority Key Identifier: keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/VzRDRUhOPTiPlaXOeGXg7YkPjGY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.38.96.0-95.38.107.255 95.38.130.0-95.38.143.255 95.38.152.0/21 95.38.168.0/22 95.38.174.0/24 95.38.200.0/22 95.38.208.0/22 95.38.240.0-95.38.251.255 Signature Algorithm: sha256WithRSAEncryption 19:36:cd:32:7e:a7:a3:5e:be:1a:a3:5c:d9:14:02:fb:ec:a7: 30:ed:da:70:53:70:83:d7:b0:8b:f9:e2:49:1e:7b:cb:9f:95: e6:bb:84:d1:ee:9d:c9:93:04:dc:42:eb:a1:c0:fd:f7:72:35: e8:36:77:60:72:28:bd:42:3b:2c:72:86:69:47:61:d3:fe:b4: 79:5c:2e:80:af:47:58:cc:95:86:35:76:50:4b:69:e8:30:34: b8:d6:85:50:5d:83:e9:42:dc:0b:54:74:6b:f4:4a:23:32:72: 3b:78:f0:07:d9:e4:2e:9a:8f:46:aa:1a:61:ff:5a:a4:77:61: 95:74:ee:cf:fb:1a:0d:4a:a0:12:85:95:63:57:b2:76:24:e6: e9:aa:a8:33:9d:3d:c7:0c:db:e0:ee:ac:23:31:95:61:65:2e: 01:97:33:34:e1:da:39:d5:00:70:90:f0:eb:fc:90:80:59:80: fb:8b:32:11:61:e6:36:39:97:aa:66:65:a9:32:8d:37:74:7e: 88:1b:ee:52:fa:e9:a7:3b:53:d1:e4:b0:29:18:67:13:33:64: ef:59:db:f4:72:02:d6:fb:bc:2f:59:c6:77:a0:1b:70:2b:0b: b6:bd:53:61:53:00:97:52:ba:6f:24:73:4d:e0:ef:64:58:2b: eb:e9:f2:13 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt+N9fHLfMecFg99Lj8cN9BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl YTZkYWYwHhcNMjYwMTAyMTAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzM0NDM0NTQ4NGUzZDM4OGY5NWE1Y2U3ODY1ZTBlZDg5MGY4YzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNQ+6Pl0g+nhgAucKK+1qXSrwvIq QrKrVUJJ7wVYPZP5U1g8UcVEHplkAe9hq/uQq3IOvRznYpNCMyfG5U4KFi+sw5dN WyJ1wxUTpD5g03Gr6CDyIrevKlgVK57F+/Nyg47b/jaBHs6zJc6ZNDkz9srCzchK e0HEEzwLKJlG8Gvkoml1o9lCF//uxDmZJ9j88XHMTUZnkQWL2NeCztoVVopcAeKW nz6WYMhCl0DSO/V2hrXGlacnWO5PncYz8Jw2MVkPrXJNNXlTk+Ra6WlDfkxBbTVo onL/mWsGQE93zR0zDz06Z0gvXOgydgnYjgjrhlWcCfK+57PBaYum/Ta8jQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFc0Q0VITj04j5Wlznhl4O2JD4xmMB8GA1UdIwQY MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt NjkxNDIyMzExNzI5LzEvVnpSRFJVaE9QVGlQbGFYT2VHWGc3WWtQakdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5 LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIMAwDBAVfJmAD BAJfJmgwDAMEAV8mggMEBF8mgAMEA18mmAMEAl8mqAMEAF8mrgMEAl8myAMEAl8m 0DAMAwQEXybwAwQCXyb4MA0GCSqGSIb3DQEBCwUAA4IBAQAZNs0yfqejXr4ao1zZ FAL77Kcw7dpwU3CD17CL+eJJHnvLn5Xmu4TR7p3JkwTcQuuhwP33cjXoNndgcii9 QjsscoZpR2HT/rR5XC6Ar0dYzJWGNXZQS2noMDS41oVQXYPpQtwLVHRr9EojMnI7 ePAH2eQumo9Gqhph/1qkd2GVdO7P+xoNSqAShZVjV7J2JObpqqgznT3HDNvg7qwj MZVhZS4BlzM04do51QBwkPDr/JCAWYD7izIRYeY2OZeqZmWpMo03dH6IG+5S+umn O1PR5LApGGcTM2TvWdv0cgLW+7wvWcZ3oBtwKwu2vVNhUwCXUrpvJHNN4O9kWCvr 6fIT -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:19 2026 by rpki-client