This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/35XNJH4DSb19i8o6WUk8AizWXlw.roa File: 35XNJH4DSb19i8o6WUk8AizWXlw.roa (raw, json) Hash identifier: bNnlRUj215HLo7MgAukw3lU1c5wmBEx5iCiaR7HqQk8= Subject key identifier: DF:95:CD:24:7E:03:49:BD:7D:8B:CA:3A:59:49:3C:02:2C:D6:5E:5C Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 019B7F823B751DD45696DF7DF55CD5B8A194 Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/35XNJH4DSb19i8o6WUk8AizWXlw.roa Signing time: Fri 02 Jan 2026 16:19:59 +0000 ROA not before: Fri 02 Jan 2026 16:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9050 IP address blocks: 84.243.64.0/18 maxlen: 18 86.34.0.0/15 maxlen: 15 86.34.0.0/16 maxlen: 16 86.35.0.0/16 maxlen: 16 86.35.0.0/21 maxlen: 21 86.35.9.0/24 maxlen: 24 86.35.10.0/24 maxlen: 24 86.35.12.0/24 maxlen: 24 86.35.13.0/24 maxlen: 24 86.35.14.0/24 maxlen: 24 86.35.15.0/24 maxlen: 24 86.35.16.0/20 maxlen: 20 86.35.32.0/19 maxlen: 19 86.35.64.0/18 maxlen: 18 86.35.128.0/17 maxlen: 17 89.120.0.0/16 maxlen: 16 89.121.0.0/16 maxlen: 16 89.121.0.0/18 maxlen: 18 89.121.64.0/18 maxlen: 18 89.121.128.0/17 maxlen: 17 89.122.0.0/16 maxlen: 16 89.123.0.0/16 maxlen: 16 89.123.0.0/17 maxlen: 17 89.123.128.0/17 maxlen: 17 92.80.0.0/16 maxlen: 16 92.81.0.0/16 maxlen: 16 92.81.128.0/17 maxlen: 17 92.82.0.0/16 maxlen: 16 92.82.0.0/18 maxlen: 18 92.83.0.0/16 maxlen: 16 92.83.0.0/19 maxlen: 19 92.84.0.0/16 maxlen: 16 92.85.0.0/16 maxlen: 16 92.86.0.0/16 maxlen: 16 92.86.36.0/24 maxlen: 24 92.86.38.0/24 maxlen: 24 92.86.48.0/24 maxlen: 24 92.86.50.0/24 maxlen: 24 92.86.90.0/24 maxlen: 24 92.87.0.0/16 maxlen: 16 92.87.11.0/24 maxlen: 24 92.87.54.0/24 maxlen: 24 92.87.118.0/24 maxlen: 24 92.87.128.0/23 maxlen: 23 92.87.133.0/24 maxlen: 24 92.87.170.0/24 maxlen: 24 92.87.173.0/24 maxlen: 24 92.87.174.0/24 maxlen: 24 92.87.175.0/24 maxlen: 24 92.87.214.0/24 maxlen: 24 92.87.232.0/24 maxlen: 24 92.87.244.0/24 maxlen: 24 92.87.245.0/24 maxlen: 24 109.96.0.0/16 maxlen: 16 109.97.0.0/16 maxlen: 16 109.98.0.0/16 maxlen: 16 109.98.113.0/24 maxlen: 24 109.98.115.0/24 maxlen: 24 109.98.117.0/24 maxlen: 24 109.98.119.0/24 maxlen: 24 109.98.121.0/24 maxlen: 24 109.98.123.0/24 maxlen: 24 109.98.126.0/24 maxlen: 24 109.98.192.0/23 maxlen: 23 109.98.192.0/24 maxlen: 24 109.98.193.0/24 maxlen: 24 109.99.0.0/16 maxlen: 16 109.99.158.0/24 maxlen: 24 109.99.184.0/24 maxlen: 24 109.99.185.0/24 maxlen: 24 109.99.189.0/24 maxlen: 24 109.99.192.0/24 maxlen: 24 109.99.214.0/24 maxlen: 24 109.99.216.0/24 maxlen: 24 109.100.0.0/16 maxlen: 16 109.101.0.0/16 maxlen: 16 109.102.0.0/16 maxlen: 16 109.102.161.0/24 maxlen: 24 109.102.163.0/24 maxlen: 24 109.103.0.0/16 maxlen: 16 185.133.64.0/22 maxlen: 22 185.133.64.0/24 maxlen: 24 217.115.208.0/20 maxlen: 20 2a02:d10::/32 maxlen: 32 2a02:d10:800:1::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:3b:75:1d:d4:56:96:df:7d:f5:5c:d5:b8:a1:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Jan 2 16:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df95cd247e0349bd7d8bca3a59493c022cd65e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:69:6d:6a:4a:15:34:93:40:59:ad:40:a1:e1: 04:07:bb:e6:7d:b1:a4:b0:59:0d:60:35:87:df:6d: d5:4f:8f:dd:7a:d2:ef:e7:51:ae:b9:da:b4:69:1e: d7:a6:d4:19:86:8a:9f:7b:d2:bc:e6:9e:71:59:4f: b9:b0:5e:c2:05:e4:4b:ac:fc:53:e0:06:d4:4e:a3: 1e:90:c1:7a:92:84:65:ac:0f:e3:35:32:b5:12:04: 81:34:b9:5b:82:89:9d:65:94:76:88:cb:6e:ce:eb: 4e:a1:eb:0c:5e:e8:4e:5b:a1:97:e0:dd:03:23:8a: 13:4c:fd:21:3b:2d:4e:af:6d:33:fe:c1:2d:22:df: ab:35:83:83:5b:06:bb:16:42:fc:71:24:dd:1b:ab: 44:e1:a1:5f:59:bb:52:98:b8:3b:91:3d:a8:b8:42: 5c:d7:df:72:b7:5b:57:91:83:dd:ec:86:20:89:a8: 92:28:d4:5c:7c:ca:88:4d:27:2e:93:c5:6e:59:07: 40:70:0a:a9:6c:69:4b:11:4a:9c:5e:47:43:86:bb: 4a:f2:bb:5e:8d:b3:5d:19:f7:72:f9:e7:79:18:b3: 88:e8:99:80:9b:06:74:72:fd:41:d9:46:ea:1c:7f: 8f:7c:89:62:b6:71:ee:21:57:28:15:9f:2e:bc:ca: a1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:95:CD:24:7E:03:49:BD:7D:8B:CA:3A:59:49:3C:02:2C:D6:5E:5C X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/35XNJH4DSb19i8o6WUk8AizWXlw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.243.64.0/18 86.34.0.0/15 89.120.0.0/14 92.80.0.0/13 109.96.0.0/13 185.133.64.0/22 217.115.208.0/20 IPv6: 2a02:d10::/32 Signature Algorithm: sha256WithRSAEncryption a1:5e:03:d6:25:08:f9:a5:d3:ef:fb:f3:4f:58:20:84:6b:e7: 5e:44:0b:a6:77:87:c7:c7:6a:5a:dd:a4:86:87:ba:9e:c9:6b: a5:59:d5:d6:49:3d:52:ed:e5:6a:b2:d3:a9:f3:70:e8:a0:41: ee:62:c4:29:ad:3b:f2:cd:93:ad:32:da:be:9e:8e:0a:43:68: 14:b4:26:e3:cc:7e:a3:51:0b:3c:73:72:70:42:b0:78:93:db: 9a:83:c3:61:19:1e:af:a6:25:ec:f3:35:6a:b3:db:5b:57:82: 30:a2:5c:d8:7f:c0:a2:58:d1:7a:72:5f:87:04:d2:db:d6:b3: 3d:bd:32:9b:6b:ab:a1:7e:52:8e:3d:03:24:22:4a:ee:5c:09: 26:6b:4e:61:4b:9d:17:bf:c8:e4:1b:0f:64:4a:05:2b:18:b0: e9:79:d9:7b:f9:2f:00:50:4f:79:f7:3a:7a:65:07:17:06:51: c1:59:ea:71:12:f6:d1:ac:34:80:74:46:01:3c:16:9e:5f:80: 6f:be:68:39:06:de:17:30:39:0a:06:d7:f9:31:2e:4a:ec:f4: 7f:c0:a1:44:54:3d:6f:cb:45:b3:45:e1:c9:73:e5:d6:3e:d9: 55:96:fc:b1:62:86:2b:85:33:32:ff:f8:85:77:5c:a5:2d:38: 76:da:09:19 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt/gjt1HdRWlt999VzVuKGUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjYwMTAyMTYxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjk1Y2QyNDdlMDM0OWJkN2Q4YmNhM2E1OTQ5M2MwMjJjZDY1ZTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmltakoVNJNAWa1AoeEEB7vmfbGk sFkNYDWH323VT4/detLv51Guudq0aR7XptQZhoqfe9K85p5xWU+5sF7CBeRLrPxT 4AbUTqMekMF6koRlrA/jNTK1EgSBNLlbgomdZZR2iMtuzutOoesMXuhOW6GX4N0D I4oTTP0hOy1Or20z/sEtIt+rNYODWwa7FkL8cSTdG6tE4aFfWbtSmLg7kT2ouEJc 199yt1tXkYPd7IYgiaiSKNRcfMqITScuk8VuWQdAcAqpbGlLEUqcXkdDhrtK8rte jbNdGfdy+ed5GLOI6JmAmwZ0cv1B2UbqHH+PfIlitnHuIVcoFZ8uvMqhMQIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFN+VzSR+A0m9fYvKOllJPAIs1l5cMB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvMzVYTkpINERTYjE5aThvNldVazhBaXpXWGx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQGVPNAAwMB ViIDAwJZeAMDA1xQAwMDbWADBAK5hUADBATZc9AwDQQCAAIwBwMFACoCDRAwDQYJ KoZIhvcNAQELBQADggEBAKFeA9YlCPml0+/7809YIIRr515EC6Z3h8fHalrdpIaH up7Ja6VZ1dZJPVLt5Wqy06nzcOigQe5ixCmtO/LNk60y2r6ejgpDaBS0JuPMfqNR CzxzcnBCsHiT25qDw2EZHq+mJezzNWqz21tXgjCiXNh/wKJY0XpyX4cE0tvWsz29 Mptrq6F+Uo49AyQiSu5cCSZrTmFLnRe/yOQbD2RKBSsYsOl52Xv5LwBQT3n3Onpl BxcGUcFZ6nES9tGsNIB0RgE8Fp5fgG++aDkG3hcwOQoG1/kxLkrs9H/AoURUPW/L RbNF4clz5dY+2VWW/LFihiuFMzL/+IV3XKUtOHbaCRk= -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:49 2026 by rpki-client