This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/4GPF89WAgnUGZriA9ptZSO-T4Cw.roa File: 4GPF89WAgnUGZriA9ptZSO-T4Cw.roa (raw, json) Hash identifier: XFSu2XLv7vsDUbhfxd0ND/Cuvi1jJWGEcqXPPJPZ9So= Subject key identifier: E0:63:C5:F3:D5:80:82:75:06:66:B8:80:F6:9B:59:48:EF:93:E0:2C Certificate issuer: /CN=a3513d288dabde7dee069bdb636573ce9c3ecb60 Certificate serial: 019B7BA460CD74E2361607B237A9C985EA7C Authority key identifier: A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/4GPF89WAgnUGZriA9ptZSO-T4Cw.roa Signing time: Thu 01 Jan 2026 22:18:48 +0000 ROA not before: Thu 01 Jan 2026 22:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206996 IP address blocks: 5.249.160.0/24 maxlen: 24 5.249.161.0/24 maxlen: 24 5.249.162.0/24 maxlen: 24 5.249.163.0/24 maxlen: 24 5.249.164.0/24 maxlen: 24 5.249.165.0/24 maxlen: 24 5.249.166.0/24 maxlen: 24 45.141.36.0/24 maxlen: 24 45.141.37.0/24 maxlen: 24 45.146.252.0/24 maxlen: 24 45.146.253.0/24 maxlen: 24 45.146.254.0/24 maxlen: 24 45.146.255.0/24 maxlen: 24 88.214.56.0/24 maxlen: 24 88.214.57.0/24 maxlen: 24 88.214.58.0/24 maxlen: 24 88.214.59.0/24 maxlen: 24 92.42.44.0/24 maxlen: 24 92.42.45.0/24 maxlen: 24 92.42.46.0/24 maxlen: 24 92.42.47.0/24 maxlen: 24 134.255.216.0/24 maxlen: 24 134.255.217.0/24 maxlen: 24 134.255.218.0/24 maxlen: 24 134.255.219.0/24 maxlen: 24 134.255.231.0/24 maxlen: 24 134.255.232.0/24 maxlen: 24 134.255.233.0/24 maxlen: 24 134.255.234.0/24 maxlen: 24 147.189.168.0/24 maxlen: 24 147.189.169.0/24 maxlen: 24 147.189.170.0/24 maxlen: 24 147.189.171.0/24 maxlen: 24 147.189.172.0/24 maxlen: 24 147.189.173.0/24 maxlen: 24 147.189.174.0/24 maxlen: 24 147.189.175.0/24 maxlen: 24 185.223.28.0/24 maxlen: 24 185.223.29.0/24 maxlen: 24 185.223.30.0/24 maxlen: 24 185.223.31.0/24 maxlen: 24 185.239.236.0/24 maxlen: 24 185.239.237.0/24 maxlen: 24 185.239.238.0/24 maxlen: 24 185.239.239.0/24 maxlen: 24 185.249.196.0/24 maxlen: 24 185.249.197.0/24 maxlen: 24 185.249.198.0/24 maxlen: 24 185.249.199.0/24 maxlen: 24 193.23.126.0/24 maxlen: 24 193.23.127.0/24 maxlen: 24 193.23.160.0/24 maxlen: 24 193.23.161.0/24 maxlen: 24 193.34.69.0/24 maxlen: 24 193.203.238.0/24 maxlen: 24 194.156.88.0/24 maxlen: 24 194.156.89.0/24 maxlen: 24 194.156.90.0/24 maxlen: 24 194.156.91.0/24 maxlen: 24 2a0c:3580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:60:cd:74:e2:36:16:07:b2:37:a9:c9:85:ea:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3513d288dabde7dee069bdb636573ce9c3ecb60 Validity Not Before: Jan 1 22:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e063c5f3d58082750666b880f69b5948ef93e02c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a6:fd:bd:bf:7f:08:73:88:11:75:72:d3:ab: 54:1f:a2:fc:da:cf:14:f6:cc:cd:37:de:8f:07:7d: 5f:67:51:0d:4f:9d:96:18:2c:38:64:4a:ba:9f:14: 53:64:0b:0e:55:15:e7:6e:e9:f1:0a:9c:74:b2:2a: 02:96:ea:96:2e:8a:64:53:90:bb:7b:d6:81:9a:9c: ae:fe:fd:b2:bf:58:b0:e6:7f:63:2a:bf:71:30:1d: 6d:00:d6:d7:74:cf:2d:dc:67:df:c8:15:82:f2:cd: 9a:a1:23:bb:e9:32:ca:54:5e:48:e7:cd:bf:40:cc: fc:f1:a3:4b:52:9d:7b:0a:0e:50:4a:26:fc:08:2b: 14:09:2e:5b:06:45:7d:d8:51:e0:f1:6a:14:48:b8: 2d:db:2d:11:de:be:14:30:f4:fd:c5:c7:e2:77:c1: 53:c8:c4:72:b4:7b:b8:61:29:2b:69:aa:58:1f:91: 0c:52:2f:5f:ef:77:92:a3:40:51:f2:1d:0d:f7:33: ba:cf:84:86:44:10:c1:79:a9:f4:e3:ed:4e:48:40: a2:69:ba:25:9b:05:2a:6b:49:5e:5d:c2:1a:eb:3b: 35:51:34:55:ac:25:2e:af:31:fe:a1:e4:f1:95:de: 2a:97:c2:75:29:57:7c:5e:23:4f:70:71:2c:ac:e0: 8e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:63:C5:F3:D5:80:82:75:06:66:B8:80:F6:9B:59:48:EF:93:E0:2C X509v3 Authority Key Identifier: keyid:A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/4GPF89WAgnUGZriA9ptZSO-T4Cw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.249.160.0-5.249.166.255 45.141.36.0/23 45.146.252.0/22 88.214.56.0/22 92.42.44.0/22 134.255.216.0/22 134.255.231.0-134.255.234.255 147.189.168.0/21 185.223.28.0/22 185.239.236.0/22 185.249.196.0/22 193.23.126.0/23 193.23.160.0/23 193.34.69.0/24 193.203.238.0/24 194.156.88.0/22 IPv6: 2a0c:3580::/29 Signature Algorithm: sha256WithRSAEncryption 52:4b:ed:7b:d3:83:67:d7:a3:c6:f7:07:89:d2:70:f7:38:8d: 52:a7:c0:66:e6:3d:08:40:cb:09:e4:a6:0e:b6:ed:6d:82:59: ab:d3:74:4d:91:df:25:df:fd:b3:91:96:c0:da:b0:c2:4c:b2: 13:a2:33:7b:a1:07:ce:e6:8d:12:d0:25:b5:06:6f:ec:5c:36: 60:40:14:3e:56:68:2e:d6:d1:87:15:64:f4:06:05:30:ad:db: 45:3f:7a:6e:49:63:37:14:50:52:ad:34:ff:27:ba:12:4f:0d: a0:d5:fb:cb:c4:d9:be:38:bc:af:bd:17:32:a4:e8:c1:4e:0d: f5:87:8a:12:89:bd:ee:0a:f2:2f:be:73:7e:d1:01:9a:eb:a3: 08:63:4f:c3:a1:42:58:4a:ee:02:2a:63:64:a1:3c:3a:b7:a0: c6:af:f2:d9:67:68:b1:43:d9:d6:32:73:6d:f7:41:5c:c5:29: 5f:ab:18:42:1e:e4:8e:66:12:ca:7b:65:fb:ef:58:e4:73:a3: d1:e6:cd:dd:c1:28:9c:80:7c:a2:61:cb:99:59:2e:8a:52:7f: 83:34:82:38:f7:af:20:0b:04:45:40:17:91:7b:27:fc:b2:89: 71:f1:86:87:00:e7:f1:55:64:1a:02:ed:2a:21:cf:38:f9:47: 14:65:75:e9 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt7pGDNdOI2FgeyN6nJhep8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNTEzZDI4OGRhYmRlN2RlZTA2OWJkYjYzNjU3M2NlOWMz ZWNiNjAwHhcNMjYwMTAxMjIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDYzYzVmM2Q1ODA4Mjc1MDY2NmI4ODBmNjliNTk0OGVmOTNlMDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6b9vb9/CHOIEXVy06tUH6L82s8U 9szNN96PB31fZ1ENT52WGCw4ZEq6nxRTZAsOVRXnbunxCpx0sioCluqWLopkU5C7 e9aBmpyu/v2yv1iw5n9jKr9xMB1tANbXdM8t3GffyBWC8s2aoSO76TLKVF5I582/ QMz88aNLUp17Cg5QSib8CCsUCS5bBkV92FHg8WoUSLgt2y0R3r4UMPT9xcfid8FT yMRytHu4YSkraapYH5EMUi9f73eSo0BR8h0N9zO6z4SGRBDBean04+1OSECiabol mwUqa0leXcIa6zs1UTRVrCUurzH+oeTxld4ql8J1KVd8XiNPcHEsrOCOuQIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFOBjxfPVgIJ1Bma4gPabWUjvk+AsMB8GA1UdIwQY MBaAFKNRPSiNq9597gab22Nlc86cPstgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83OTIxMTMtZTEzYy00M2VlLTg0ZDct ZTBkN2RkNWUyZTZmLzEvNEdQRjg5V0FnblVHWnJpQTlwdFpTTy1UNEN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83OTIxMTMtZTEzYy00M2VlLTg0ZDctZTBkN2RkNWUyZTZm LzEvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzB2BAIAATBwMAwDBAUF +aADBAAF+aYDBAEtjSQDBAItkvwDBAJY1jgDBAJcKiwDBAKG/9gwDAMEAIb/5wME AIb/6gMEA5O9qAMEArnfHAMEArnv7AMEArn5xAMEAcEXfgMEAcEXoAMEAMEiRQME AMHL7gMEAsKcWDANBAIAAjAHAwUDKgw1gDANBgkqhkiG9w0BAQsFAAOCAQEAUkvt e9ODZ9ejxvcHidJw9ziNUqfAZuY9CEDLCeSmDrbtbYJZq9N0TZHfJd/9s5GWwNqw wkyyE6Ize6EHzuaNEtAltQZv7Fw2YEAUPlZoLtbRhxVk9AYFMK3bRT96bkljNxRQ Uq00/ye6Ek8NoNX7y8TZvji8r70XMqTowU4N9YeKEom97gryL75zftEBmuujCGNP w6FCWEruAipjZKE8Oregxq/y2WdosUPZ1jJzbfdBXMUpX6sYQh7kjmYSyntl++9Y 5HOj0ebN3cEonIB8omHLmVkuilJ/gzSCOPevIAsERUAXkXsn/LKJcfGGhwDn8VVk GgLtKiHPOPlHFGV16Q== -----END CERTIFICATE-----Generated at Sun Jan 25 16:10:02 2026 by rpki-client