This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/p4odwBPCjK_f_cbe3suhJpjfBd4.roa File: p4odwBPCjK_f_cbe3suhJpjfBd4.roa (raw, json) Hash identifier: BbTKrvDIk3p4mxNlC+Mfbr4gEXADSPPB2996OHBG8d0= Subject key identifier: A7:8A:1D:C0:13:C2:8C:AF:DF:FD:C6:DE:DE:CB:A1:26:98:DF:05:DE Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680 Certificate serial: 019BB6CB48016BD2BD544238B73A382CE694 Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/p4odwBPCjK_f_cbe3suhJpjfBd4.roa Signing time: Tue 13 Jan 2026 09:58:54 +0000 ROA not before: Tue 13 Jan 2026 09:58:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6848 IP address blocks: 5.23.128.0/17 maxlen: 17 46.253.160.0/20 maxlen: 20 62.205.64.0/18 maxlen: 18 78.20.0.0/14 maxlen: 14 78.29.192.0/18 maxlen: 18 81.82.0.0/15 maxlen: 15 81.164.0.0/15 maxlen: 15 82.143.64.0/18 maxlen: 18 82.210.64.0/19 maxlen: 19 83.217.128.0/19 maxlen: 19 84.192.0.0/13 maxlen: 13 85.28.64.0/18 maxlen: 18 85.255.192.0/24 maxlen: 24 85.255.193.0/24 maxlen: 24 85.255.194.0/24 maxlen: 24 85.255.195.0/24 maxlen: 24 85.255.196.0/24 maxlen: 24 85.255.197.0/24 maxlen: 24 85.255.198.0/24 maxlen: 24 85.255.199.0/24 maxlen: 24 85.255.200.0/24 maxlen: 24 85.255.201.0/24 maxlen: 24 85.255.202.0/24 maxlen: 24 85.255.203.0/24 maxlen: 24 85.255.204.0/24 maxlen: 24 85.255.205.0/24 maxlen: 24 85.255.206.0/24 maxlen: 24 85.255.207.0/24 maxlen: 24 94.72.64.0/19 maxlen: 19 94.224.0.0/14 maxlen: 14 141.134.0.0/15 maxlen: 15 157.173.128.0/18 maxlen: 18 178.116.0.0/14 maxlen: 14 185.23.244.0/22 maxlen: 22 185.30.52.0/22 maxlen: 22 185.35.52.0/24 maxlen: 24 185.35.53.0/24 maxlen: 24 185.35.54.0/24 maxlen: 24 185.35.55.0/24 maxlen: 24 185.152.56.0/24 maxlen: 24 185.152.57.0/24 maxlen: 24 185.152.58.0/24 maxlen: 24 185.152.59.0/24 maxlen: 24 185.248.40.0/22 maxlen: 22 188.44.64.0/19 maxlen: 19 188.95.146.0/23 maxlen: 23 188.137.192.0/19 maxlen: 19 188.188.0.0/15 maxlen: 15 195.16.0.0/19 maxlen: 19 195.130.128.0/19 maxlen: 19 195.162.192.0/19 maxlen: 19 212.76.224.0/19 maxlen: 19 212.88.224.0/19 maxlen: 19 212.123.0.0/19 maxlen: 19 213.118.0.0/15 maxlen: 15 213.132.128.0/19 maxlen: 19 213.214.32.0/19 maxlen: 19 213.224.0.0/16 maxlen: 16 213.251.64.0/18 maxlen: 18 217.72.224.0/20 maxlen: 20 217.168.120.0/21 maxlen: 21 2a00:1cf8::/32 maxlen: 32 2a01:498::/32 maxlen: 32 2a01:498:200::/40 maxlen: 40 2a01:498:500::/40 maxlen: 40 2a01:498:8100::/40 maxlen: 40 2a01:498:8500::/40 maxlen: 40 2a02:1800::/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:cb:48:01:6b:d2:bd:54:42:38:b7:3a:38:2c:e6:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680 Validity Not Before: Jan 13 09:58:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a78a1dc013c28cafdffdc6dedecba12698df05de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6b:8c:e9:07:45:1f:36:1d:61:4a:0e:46:c5: 83:c4:5a:33:28:cf:4e:80:a8:6d:c2:cf:ec:69:ad: 2c:95:9a:ba:18:2a:79:56:12:0e:7f:8e:02:d6:41: 1f:bd:95:85:68:7a:43:67:7c:3c:f1:46:5f:88:50: 3b:5a:7f:63:6b:5a:0d:2f:a9:fc:f2:7b:af:47:fc: eb:a0:3c:50:3b:5f:0a:36:87:09:ec:3e:96:4b:5a: 7d:fc:10:71:80:41:1a:e0:63:11:ea:37:a7:e3:b9: 25:1b:a7:13:c7:52:13:c2:49:56:be:85:c3:b3:2a: 83:17:02:bb:2d:64:21:4e:bf:6c:a6:ba:6c:41:1a: f2:dd:49:ba:1c:87:51:0d:92:8b:e7:b8:b8:67:10: b4:c7:df:41:5b:37:63:db:9c:8c:22:0c:1a:84:10: 58:4c:dc:c9:54:d6:a8:e4:f3:81:e0:00:99:9b:01: 8c:ab:3f:90:bc:5e:b7:24:f8:25:f6:22:99:19:8a: 21:a7:ec:48:69:e8:53:dc:77:4d:11:34:4d:e3:77: 33:20:8d:1c:88:8b:c9:a4:5d:f9:c3:a1:df:1e:a6: ba:e9:f8:91:fb:f7:40:97:95:dd:5c:40:74:42:84: 1b:53:15:29:71:ca:af:7a:f8:dd:db:47:91:10:ea: d3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8A:1D:C0:13:C2:8C:AF:DF:FD:C6:DE:DE:CB:A1:26:98:DF:05:DE X509v3 Authority Key Identifier: keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/p4odwBPCjK_f_cbe3suhJpjfBd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.23.128.0/17 46.253.160.0/20 62.205.64.0/18 78.20.0.0/14 78.29.192.0/18 81.82.0.0/15 81.164.0.0/15 82.143.64.0/18 82.210.64.0/19 83.217.128.0/19 84.192.0.0/13 85.28.64.0/18 85.255.192.0/20 94.72.64.0/19 94.224.0.0/14 141.134.0.0/15 157.173.128.0/18 178.116.0.0/14 185.23.244.0/22 185.30.52.0/22 185.35.52.0/22 185.152.56.0/22 185.248.40.0/22 188.44.64.0/19 188.95.146.0/23 188.137.192.0/19 188.188.0.0/15 195.16.0.0/19 195.130.128.0/19 195.162.192.0/19 212.76.224.0/19 212.88.224.0/19 212.123.0.0/19 213.118.0.0/15 213.132.128.0/19 213.214.32.0/19 213.224.0.0/16 213.251.64.0/18 217.72.224.0/20 217.168.120.0/21 IPv6: 2a00:1cf8::/32 2a01:498::/32 2a02:1800::/24 Signature Algorithm: sha256WithRSAEncryption 6f:a2:f0:af:25:70:c0:1c:fd:c4:46:b4:8b:6d:35:02:b5:ad: 57:90:81:0e:1c:e0:40:e3:72:c6:9a:5f:5d:96:bd:04:c4:ea: 36:be:0b:ce:4f:f2:a1:02:59:38:12:c4:82:76:d9:12:79:18: ed:30:ce:72:cb:25:a4:ba:5e:ca:c6:31:91:94:4d:f5:8a:20: 34:26:a3:94:c4:48:d3:77:26:94:9e:8b:48:b8:46:94:b7:c6: 49:ab:96:39:8a:f6:c8:ae:0f:9d:49:3a:e6:83:d7:13:bd:83: d4:1b:5b:4d:30:f7:20:07:7c:96:0c:63:de:ff:c6:64:bd:87: f8:6b:f6:3f:f1:a0:c8:c3:08:ac:ef:a7:a2:45:34:8c:14:6e: 3c:0f:24:68:13:c0:28:89:0c:29:db:77:38:a0:fc:71:6a:51: f2:69:5b:72:e3:c1:c3:74:98:37:ce:e6:ff:96:e0:bb:7e:88: da:e0:18:c8:03:e7:51:d4:69:f5:9b:3f:3f:25:f2:16:89:91: 22:ac:b3:aa:b5:1f:bb:d9:a5:b7:39:82:e7:31:fe:00:18:ba: e1:e3:3b:e5:12:0f:c2:01:35:39:79:f4:78:10:82:cc:3e:0a: 7b:44:55:9c:1c:39:4b:eb:83:25:f5:85:f2:65:aa:5a:7d:3c: 5c:de:c9:d7 -----BEGIN CERTIFICATE----- MIIGATCCBOmgAwIBAgISAZu2y0gBa9K9VEI4tzo4LOaUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5OWRmN2RjMGVkNTE4ZjFlYzY5OTc0Y2Y5OGNlY2FhZGEx YTg2ODAwHhcNMjYwMTEzMDk1ODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzhhMWRjMDEzYzI4Y2FmZGZmZGM2ZGVkZWNiYTEyNjk4ZGYwNWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2uM6QdFHzYdYUoORsWDxFozKM9O gKhtws/saa0slZq6GCp5VhIOf44C1kEfvZWFaHpDZ3w88UZfiFA7Wn9ja1oNL6n8 8nuvR/zroDxQO18KNocJ7D6WS1p9/BBxgEEa4GMR6jen47klG6cTx1ITwklWvoXD syqDFwK7LWQhTr9sprpsQRry3Um6HIdRDZKL57i4ZxC0x99BWzdj25yMIgwahBBY TNzJVNao5POB4ACZmwGMqz+QvF63JPgl9iKZGYohp+xIaehT3HdNETRN43czII0c iIvJpF35w6HfHqa66fiR+/dAl5XdXEB0QoQbUxUpccqvevjd20eREOrTWwIDAQAB o4IDDTCCAwkwHQYDVR0OBBYEFKeKHcATwoyv3/3G3t7LoSaY3wXeMB8GA1UdIwQY MBaAFJmd99wO1Rjx7GmXTPmM7KraGoaAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iYTg4ZjItMjE1Zi00Zjg5LWEzYWYt MTM4Yjc4N2RlM2UzLzEvcDRvZHdCUENqS19mX2NiZTNzdWhKcGpmQmQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iYTg4ZjItMjE1Zi00Zjg5LWEzYWYtMTM4Yjc4N2RlM2Uz LzEvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBIQYIKwYBBQUHAQcBAf8EggEQMIIBDDCB7QQCAAEwgeYD BAcFF4ADBAQu/aADBAY+zUADAwJOFAMEBk4dwAMDAVFSAwMBUaQDBAZSj0ADBAVS 0kADBAVT2YADAwNUwAMEBlUcQAMEBFX/wAMEBV5IQAMDAl7gAwMBjYYDBAadrYAD AwKydAMEArkX9AMEArkeNAMEArkjNAMEArmYOAMEArn4KAMEBbwsQAMEAbxfkgME BbyJwAMDAby8AwQFwxAAAwQFw4KAAwQFw6LAAwQF1EzgAwQF1FjgAwQF1HsAAwMB 1XYDBAXVhIADBAXV1iADAwDV4AMEBtX7QAMEBNlI4AMEA9moeDAaBAIAAjAUAwUA KgAc+AMFACoBBJgDBAAqAhgwDQYJKoZIhvcNAQELBQADggEBAG+i8K8lcMAc/cRG tIttNQK1rVeQgQ4c4EDjcsaaX12WvQTE6ja+C85P8qECWTgSxIJ22RJ5GO0wznLL JaS6XsrGMZGUTfWKIDQmo5TESNN3JpSei0i4RpS3xkmrljmK9siuD51JOuaD1xO9 g9QbW00w9yAHfJYMY97/xmS9h/hr9j/xoMjDCKzvp6JFNIwUbjwPJGgTwCiJDCnb dzig/HFqUfJpW3LjwcN0mDfO5v+W4Lt+iNrgGMgD51HUafWbPz8l8haJkSKss6q1 H7vZpbc5gucx/gAYuuHjO+USD8IBNTl59HgQgsw+CntEVZwcOUvrgyX1hfJlqlp9 PFzeydc= -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:34 2026 by rpki-client