This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/1s31seMfoWQl1ELcm_5mqDh1Z90.roa File: 1s31seMfoWQl1ELcm_5mqDh1Z90.roa (raw, json) Hash identifier: GOo0PaE/ai35w4Kouvbse/lunvdG3uVi9XLPoyTYJ6s= Subject key identifier: D6:CD:F5:B1:E3:1F:A1:64:25:D4:42:DC:9B:FE:66:A8:38:75:67:DD Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA5332E5803540610ECBE3729D47122 Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/1s31seMfoWQl1ELcm_5mqDh1Z90.roa Signing time: Thu 01 Jan 2026 22:19:42 +0000 ROA not before: Thu 01 Jan 2026 22:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34754 IP address blocks: 87.254.160.0/19 maxlen: 24 87.254.160.0/23 maxlen: 24 87.254.162.0/23 maxlen: 24 87.254.162.0/24 maxlen: 24 87.254.163.0/24 maxlen: 24 87.254.164.0/23 maxlen: 24 87.254.164.0/24 maxlen: 24 87.254.165.0/24 maxlen: 24 87.254.166.0/23 maxlen: 24 87.254.168.0/24 maxlen: 24 87.254.169.0/24 maxlen: 24 87.254.170.0/23 maxlen: 24 87.254.172.0/23 maxlen: 24 87.254.172.0/24 maxlen: 24 87.254.173.0/24 maxlen: 24 88.87.0.0/19 maxlen: 24 88.87.0.0/24 maxlen: 24 88.87.1.0/24 maxlen: 24 88.87.2.0/24 maxlen: 24 88.87.3.0/24 maxlen: 24 88.87.4.0/24 maxlen: 24 88.87.5.0/24 maxlen: 24 88.87.6.0/23 maxlen: 24 88.87.8.0/23 maxlen: 24 88.87.8.0/24 maxlen: 24 88.87.10.0/23 maxlen: 24 88.87.10.0/24 maxlen: 24 88.87.12.0/23 maxlen: 24 88.87.14.0/24 maxlen: 24 88.87.15.0/24 maxlen: 24 88.87.16.0/23 maxlen: 24 88.87.18.0/23 maxlen: 24 88.87.20.0/23 maxlen: 24 88.87.22.0/23 maxlen: 24 88.87.22.0/24 maxlen: 24 88.87.23.0/24 maxlen: 24 88.87.24.0/22 maxlen: 24 88.87.28.0/23 maxlen: 24 88.87.30.0/24 maxlen: 24 88.87.31.0/24 maxlen: 24 109.199.128.0/19 maxlen: 24 193.228.172.0/23 maxlen: 24 193.228.182.0/23 maxlen: 24 212.50.64.0/19 maxlen: 24 212.50.64.0/22 maxlen: 24 212.50.68.0/22 maxlen: 24 212.50.70.0/24 maxlen: 24 212.50.72.0/22 maxlen: 24 212.50.76.0/22 maxlen: 24 212.50.76.0/24 maxlen: 24 212.50.77.0/24 maxlen: 24 212.50.78.0/24 maxlen: 24 212.50.79.0/24 maxlen: 24 212.50.80.0/23 maxlen: 24 212.50.82.0/23 maxlen: 24 212.50.84.0/23 maxlen: 24 212.50.86.0/23 maxlen: 24 212.50.88.0/23 maxlen: 24 212.50.90.0/23 maxlen: 24 212.50.91.0/24 maxlen: 24 212.50.92.0/24 maxlen: 24 212.50.93.0/24 maxlen: 24 212.50.94.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 16:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:33:2e:58:03:54:06:10:ec:be:37:29:d4:71:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6cdf5b1e31fa16425d442dc9bfe66a8387567dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7a:d8:66:64:ec:c6:8f:32:2e:0d:aa:d3:45: 35:6e:16:a3:05:b0:2b:4d:57:13:46:33:f0:33:10: 92:f7:51:8d:6e:43:58:4b:cc:d8:0c:f7:80:8b:89: 13:73:34:2d:8c:5a:0a:25:6e:76:e2:db:78:4f:19: ff:1f:4e:17:a8:32:e6:70:f0:9b:53:ac:9c:05:f4: 91:66:ba:02:0d:8d:2c:cd:97:d2:5f:da:6c:ec:91: 18:a6:74:3e:e6:7c:96:43:52:9d:78:cf:7a:e5:94: 21:41:b9:3e:0d:ec:3f:78:d1:4d:85:cb:36:73:20: 98:df:32:04:b2:3e:42:77:8f:93:39:f5:00:4f:50: bf:68:9a:61:10:b4:d9:67:a9:06:9f:bf:79:a1:69: 5e:04:b8:d2:e8:c9:0d:d5:55:fe:86:ba:60:59:0f: 15:81:71:ea:c0:ab:2f:7f:cf:ca:63:e0:ce:16:a1: c4:80:d5:1d:06:b8:15:8f:e0:a2:c7:04:16:d6:46: 17:5f:02:76:ec:d3:2b:04:db:a3:e8:57:9d:9a:77: 2e:48:f2:0a:97:dc:4d:f8:56:14:df:8d:71:98:c9: e6:06:86:07:a5:eb:39:de:c1:45:63:eb:37:e5:4b: 95:06:d6:ae:7d:07:9d:bb:f0:91:5e:db:f1:05:9a: 72:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CD:F5:B1:E3:1F:A1:64:25:D4:42:DC:9B:FE:66:A8:38:75:67:DD X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/1s31seMfoWQl1ELcm_5mqDh1Z90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.254.160.0/19 88.87.0.0/19 109.199.128.0/19 193.228.172.0/23 193.228.182.0/23 212.50.64.0/19 Signature Algorithm: sha256WithRSAEncryption 32:d9:53:13:6f:b0:3f:22:f0:39:0c:7d:e0:40:87:04:1c:21: 1c:f1:d1:fe:31:37:41:39:40:52:ff:32:fe:5a:ee:c8:9e:8f: da:ec:b5:ee:1c:02:70:dd:82:f0:6b:b6:52:dd:25:4c:9a:e3: fb:5b:52:25:f7:2e:17:ce:09:08:ca:59:a9:9f:a8:c5:9d:0f: 6c:28:67:50:64:c2:0a:92:9f:3a:34:41:32:2e:03:a9:16:98: 87:b4:f2:7e:c6:57:d5:e2:e8:69:7f:45:36:73:d3:81:8e:d1: c5:56:26:d4:be:00:28:54:0b:aa:06:ae:ae:5e:b0:86:22:ea: 97:3d:5e:df:cb:78:95:e4:17:1e:27:f7:a1:c2:9b:cc:d8:f7: f3:fa:cd:18:00:a7:e3:7e:61:0a:2c:4d:d7:df:a4:1d:a4:88: 7f:de:53:47:e9:31:de:83:7d:14:bc:b4:3c:96:2e:d0:4f:8e: b1:06:d4:49:09:d1:ec:65:3c:cf:77:09:fa:dd:c7:39:54:95: e6:aa:b0:fe:27:36:6e:03:94:7e:40:d1:6f:15:31:a6:ac:36: f9:2f:00:92:c9:73:21:2d:ec:64:48:df:f1:57:f3:86:55:6d: cf:1f:45:d7:34:66:d1:98:e7:46:e9:37:a3:3d:85:2b:4c:19: 95:f0:40:17 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt7pTMuWANUBhDsvjcp1HEiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmNkZjViMWUzMWZhMTY0MjVkNDQyZGM5YmZlNjZhODM4NzU2N2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3rYZmTsxo8yLg2q00U1bhajBbAr TVcTRjPwMxCS91GNbkNYS8zYDPeAi4kTczQtjFoKJW524tt4Txn/H04XqDLmcPCb U6ycBfSRZroCDY0szZfSX9ps7JEYpnQ+5nyWQ1KdeM965ZQhQbk+Dew/eNFNhcs2 cyCY3zIEsj5Cd4+TOfUAT1C/aJphELTZZ6kGn795oWleBLjS6MkN1VX+hrpgWQ8V gXHqwKsvf8/KY+DOFqHEgNUdBrgVj+CixwQW1kYXXwJ27NMrBNuj6FedmncuSPIK l9xN+FYU341xmMnmBoYHpes53sFFY+s35UuVBtaufQedu/CRXtvxBZpyowIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFNbN9bHjH6FkJdRC3Jv+Zqg4dWfdMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvMXMzMXNlTWZvV1FsMUVMY21fNW1xRGgxWjkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQFV/6gAwQF WFcAAwQFbceAAwQBweSsAwQBweS2AwQF1DJAMA0GCSqGSIb3DQEBCwUAA4IBAQAy 2VMTb7A/IvA5DH3gQIcEHCEc8dH+MTdBOUBS/zL+Wu7Ino/a7LXuHAJw3YLwa7ZS 3SVMmuP7W1Il9y4XzgkIylmpn6jFnQ9sKGdQZMIKkp86NEEyLgOpFpiHtPJ+xlfV 4uhpf0U2c9OBjtHFVibUvgAoVAuqBq6uXrCGIuqXPV7fy3iV5BceJ/ehwpvM2Pfz +s0YAKfjfmEKLE3X36QdpIh/3lNH6THeg30UvLQ8li7QT46xBtRJCdHsZTzPdwn6 3cc5VJXmqrD+JzZuA5R+QNFvFTGmrDb5LwCSyXMhLexkSN/xV/OGVW3PH0XXNGbR mOdG6TejPYUrTBmV8EAX -----END CERTIFICATE-----Generated at Fri Jan 23 21:40:55 2026 by rpki-client