This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/fdT3b0j9xYycMnNUDTWzmF8Bb7g.roa File: fdT3b0j9xYycMnNUDTWzmF8Bb7g.roa (raw, json) Hash identifier: LfSnPghhevtLy1MM7rtPbsVSYd2mOLD+4FPcdvQvTwU= Subject key identifier: 7D:D4:F7:6F:48:FD:C5:8C:9C:32:73:54:0D:35:B3:98:5F:01:6F:B8 Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9 Certificate serial: 019B7C80BA9CD36CA6FE0411ACF29DCC4850 Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/fdT3b0j9xYycMnNUDTWzmF8Bb7g.roa Signing time: Fri 02 Jan 2026 02:19:29 +0000 ROA not before: Fri 02 Jan 2026 02:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21245 IP address blocks: 31.3.0.0/24 maxlen: 24 31.3.1.0/24 maxlen: 24 31.3.2.0/24 maxlen: 24 31.3.3.0/24 maxlen: 24 31.3.4.0/24 maxlen: 24 31.3.5.0/24 maxlen: 24 31.3.6.0/24 maxlen: 24 31.3.7.0/24 maxlen: 24 80.91.216.0/24 maxlen: 24 91.208.32.0/24 maxlen: 24 103.199.232.0/24 maxlen: 24 103.199.233.0/24 maxlen: 24 103.199.234.0/24 maxlen: 24 103.199.235.0/24 maxlen: 24 146.19.176.0/24 maxlen: 24 185.21.180.0/24 maxlen: 24 185.21.181.0/24 maxlen: 24 185.21.182.0/24 maxlen: 24 185.21.183.0/24 maxlen: 24 185.22.160.0/24 maxlen: 24 185.22.161.0/24 maxlen: 24 185.22.162.0/24 maxlen: 24 185.22.163.0/24 maxlen: 24 185.87.172.0/24 maxlen: 24 185.87.173.0/24 maxlen: 24 185.87.174.0/24 maxlen: 24 185.87.175.0/24 maxlen: 24 185.155.102.0/24 maxlen: 24 185.201.196.0/24 maxlen: 24 185.201.197.0/24 maxlen: 24 185.201.198.0/24 maxlen: 24 185.201.199.0/24 maxlen: 24 185.230.16.0/24 maxlen: 24 185.230.17.0/24 maxlen: 24 185.230.19.0/24 maxlen: 24 185.235.10.0/24 maxlen: 24 185.241.63.0/24 maxlen: 24 2a03:3f00::/48 maxlen: 48 2a03:3f00:1::/48 maxlen: 48 2a03:3f00:2::/48 maxlen: 48 2a03:3f00:3::/48 maxlen: 48 2a03:3f00:4::/48 maxlen: 48 2a03:3f00:5::/48 maxlen: 48 2a03:3f00:6::/48 maxlen: 48 2a03:3f00:7::/48 maxlen: 48 2a03:3f00:10::/48 maxlen: 48 2a03:3f00:17::/48 maxlen: 48 2a03:3f00:19::/48 maxlen: 48 2a03:3f00:31::/48 maxlen: 48 2a03:3f00:d8::/48 maxlen: 48 2a03:3f00:160::/48 maxlen: 48 2a03:3f00:161::/48 maxlen: 48 2a03:3f00:162::/48 maxlen: 48 2a03:3f00:163::/48 maxlen: 48 2a03:3f00:172::/48 maxlen: 48 2a03:3f00:174::/48 maxlen: 48 2a03:3f00:175::/48 maxlen: 48 2a03:3f00:180::/48 maxlen: 48 2a03:3f00:181::/48 maxlen: 48 2a03:3f00:182::/48 maxlen: 48 2a03:3f00:183::/48 maxlen: 48 2a03:3f00:3e7::/48 maxlen: 48 2a03:3f00:3e8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:ba:9c:d3:6c:a6:fe:04:11:ac:f2:9d:cc:48:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9 Validity Not Before: Jan 2 02:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7dd4f76f48fdc58c9c3273540d35b3985f016fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:83:be:1b:17:31:e8:0a:a4:25:ac:8d:f2:b5: dc:02:7d:b2:ca:04:ef:80:60:b8:e0:23:71:dc:92: d3:9e:88:69:a6:69:d1:96:e8:9a:1d:5c:b1:80:dd: dc:83:fe:fe:7f:4e:69:14:ec:8d:79:87:4a:96:41: 3f:74:4e:eb:3c:f7:5c:46:c0:4e:32:3c:89:af:be: aa:b0:e0:81:04:90:c2:67:2b:db:09:4b:6f:eb:3d: 9b:ba:36:58:4a:6f:ec:18:a8:5d:87:4d:0a:88:2f: 94:eb:c0:60:88:5e:aa:99:80:35:78:19:13:92:28: a4:cf:cd:bf:11:2e:8c:62:d5:d6:bc:a2:27:29:4e: 8a:a1:88:4a:c2:65:5f:8a:5a:ca:09:a9:48:0a:62: 41:bc:78:83:e1:fd:ab:73:c2:bc:2d:28:ce:2b:5e: 40:b3:1e:60:c7:17:28:bb:8a:1f:11:55:d9:65:f7: ab:48:b3:5a:d0:7d:1d:23:1a:7b:53:59:28:1e:e8: cf:64:ab:99:fa:1f:6a:e6:58:83:57:73:ce:0e:1a: 4b:c0:e7:86:88:cf:ab:65:b9:ec:02:aa:1d:1f:61: d8:6d:e2:ca:3e:75:e7:33:ba:ec:8d:18:37:12:2e: d3:bf:c4:6e:14:b1:95:57:7c:2f:fe:8b:c7:33:da: 3c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D4:F7:6F:48:FD:C5:8C:9C:32:73:54:0D:35:B3:98:5F:01:6F:B8 X509v3 Authority Key Identifier: keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/fdT3b0j9xYycMnNUDTWzmF8Bb7g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.3.0.0/21 80.91.216.0/24 91.208.32.0/24 103.199.232.0/22 146.19.176.0/24 185.21.180.0/22 185.22.160.0/22 185.87.172.0/22 185.155.102.0/24 185.201.196.0/22 185.230.16.0/23 185.230.19.0/24 185.235.10.0/24 185.241.63.0/24 IPv6: 2a03:3f00::/45 2a03:3f00:10::/48 2a03:3f00:17::/48 2a03:3f00:19::/48 2a03:3f00:31::/48 2a03:3f00:d8::/48 2a03:3f00:160::/46 2a03:3f00:172::/48 2a03:3f00:174::/47 2a03:3f00:180::/46 2a03:3f00:3e7::-2a03:3f00:3e8:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 3b:83:72:e8:19:35:93:d2:71:5f:ec:5e:16:41:7b:29:8b:a7: 46:80:d6:26:e3:90:2a:ac:be:1b:ec:5a:9c:79:d4:93:41:3e: 6a:a5:65:a1:d6:08:0c:4c:50:c5:70:bb:75:fe:c8:6d:35:70: e6:b9:35:be:65:b4:35:1b:fe:51:9f:4a:1d:d3:1f:2d:b5:0f: d7:b1:5f:ed:13:8b:37:64:10:30:66:16:b8:09:f2:b9:30:9e: 1a:ce:2b:d7:50:ff:55:e8:45:3a:af:fa:43:3b:cf:90:d4:85: 32:70:8b:80:b6:98:29:b0:71:84:b3:6b:fb:86:cd:a0:fa:cf: bb:cb:80:2c:67:bf:4c:cc:2b:e5:10:83:99:16:84:05:a1:0a: ea:1a:4d:1f:27:f5:d9:30:3d:13:0c:6b:ab:1d:61:64:72:bb: ad:e3:83:3e:b8:6e:19:78:cf:03:40:0e:27:32:51:c2:bf:50: b5:06:6d:6a:e9:7e:5f:37:74:5f:d4:52:f2:9b:93:a2:e7:82: d5:93:68:bb:cd:2b:19:da:f0:44:0e:e9:9e:42:2a:14:43:4c: fb:fb:9e:f2:5e:ae:68:bf:4b:9a:4b:23:85:06:ce:6a:ea:ce: ee:26:a3:ef:87:9b:0f:16:e9:4b:8e:17:03:e1:71:16:87:41: 6a:ac:c0:47 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgISAZt8gLqc02ym/gQRrPKdzEhQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YjE4Zjk2YWFhMDM1NjdmMjJmYzAyYzQyYTY5MzU3MDg2 NTVhYTkwHhcNMjYwMTAyMDIxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGQ0Zjc2ZjQ4ZmRjNThjOWMzMjczNTQwZDM1YjM5ODVmMDE2ZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4O+Gxcx6AqkJayN8rXcAn2yygTv gGC44CNx3JLTnohppmnRluiaHVyxgN3cg/7+f05pFOyNeYdKlkE/dE7rPPdcRsBO MjyJr76qsOCBBJDCZyvbCUtv6z2bujZYSm/sGKhdh00KiC+U68BgiF6qmYA1eBkT kiikz82/ES6MYtXWvKInKU6KoYhKwmVfilrKCalICmJBvHiD4f2rc8K8LSjOK15A sx5gxxcou4ofEVXZZferSLNa0H0dIxp7U1koHujPZKuZ+h9q5liDV3PODhpLwOeG iM+rZbnsAqodH2HYbeLKPnXnM7rsjRg3Ei7Tv8RuFLGVV3wv/ovHM9o84QIDAQAB o4IC0DCCAswwHQYDVR0OBBYEFH3U929I/cWMnDJzVA01s5hfAW+4MB8GA1UdIwQY MBaAFKSxj5aqoDVn8i/ALEKmk1cIZVqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcExHUGxxcWdOV2Z5TDhBc1FxYVRWd2hsV3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82ODIwZjktNDQ1OS00ODU4LTk4Y2Ut YzY5NGYwZWFjYmE2LzEvZmRUM2Iwajl4WXljTW5OVURUV3ptRjhCYjdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC82ODIwZjktNDQ1OS00ODU4LTk4Y2UtYzY5NGYwZWFjYmE2 LzEvcExHUGxxcWdOV2Z5TDhBc1FxYVRWd2hsV3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHlBggrBgEFBQcBBwEB/wSB1TCB0jBaBAIAATBUAwQDHwMA AwQAUFvYAwQAW9AgAwQCZ8foAwQAkhOwAwQCuRW0AwQCuRagAwQCuVesAwQAuZtm AwQCucnEAwQBueYQAwQAueYTAwQAuesKAwQAufE/MHQEAgACMG4DBwMqAz8AAAAD BwAqAz8AABADBwAqAz8AABcDBwAqAz8AABkDBwAqAz8AADEDBwAqAz8AANgDBwIq Az8AAWADBwAqAz8AAXIDBwEqAz8AAXQDBwIqAz8AAYAwEgMHACoDPwAD5wMHACoD PwAD6DANBgkqhkiG9w0BAQsFAAOCAQEAO4Ny6Bk1k9JxX+xeFkF7KYunRoDWJuOQ Kqy+G+xanHnUk0E+aqVlodYIDExQxXC7df7IbTVw5rk1vmW0NRv+UZ9KHdMfLbUP 17Ff7ROLN2QQMGYWuAnyuTCeGs4r11D/VehFOq/6QzvPkNSFMnCLgLaYKbBxhLNr +4bNoPrPu8uALGe/TMwr5RCDmRaEBaEK6hpNHyf12TA9Ewxrqx1hZHK7reODPrhu GXjPA0AOJzJRwr9QtQZtaul+Xzd0X9RS8puToueC1ZNou80rGdrwRA7pnkIqFENM +/ue8l6uaL9LmksjhQbOaurO7iaj74ebDxbpS44XA+FxFodBaqzARw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:38:22 2026 by rpki-client