This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/h4EWMG2Dd54unrlyJO11e05TJek.roa File: h4EWMG2Dd54unrlyJO11e05TJek.roa (raw, json) Hash identifier: bmr5lQGgTSTyLvAWa1p7TSXtQmQWDBHJeY7C8CEpo9w= Subject key identifier: 87:81:16:30:6D:83:77:9E:2E:9E:B9:72:24:ED:75:7B:4E:53:25:E9 Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e Certificate serial: 019B7910D3710E568F89384F3766A126A27D Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/h4EWMG2Dd54unrlyJO11e05TJek.roa Signing time: Thu 01 Jan 2026 10:18:24 +0000 ROA not before: Thu 01 Jan 2026 10:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3356 IP address blocks: 149.250.0.0/16 maxlen: 16 192.109.236.0/24 maxlen: 24 195.203.0.0/17 maxlen: 17 195.203.128.0/17 maxlen: 17 195.203.152.0/23 maxlen: 23 195.203.156.0/22 maxlen: 22 217.27.0.0/23 maxlen: 23 217.27.2.0/23 maxlen: 23 217.27.4.0/24 maxlen: 24 217.27.6.0/24 maxlen: 24 217.27.7.0/24 maxlen: 24 2a03:5000:1::/48 maxlen: 48 2a03:5000:2::/48 maxlen: 48 2a03:5000:7::/48 maxlen: 48 2a03:5000:11::/48 maxlen: 48 2a03:5000:12::/48 maxlen: 48 2a03:5000:20::/48 maxlen: 48 2a03:5000:21::/48 maxlen: 48 2a03:5000:22::/48 maxlen: 48 2a03:5000:30::/48 maxlen: 48 2a03:5000:31::/48 maxlen: 48 2a03:5000:32::/48 maxlen: 48 2a03:5000:41::/48 maxlen: 48 2a03:5000:42::/48 maxlen: 48 2a03:5000:51::/48 maxlen: 48 2a03:5000:52::/48 maxlen: 48 2a03:5000:61::/48 maxlen: 48 2a03:5000:62::/48 maxlen: 48 2a03:5000:71::/48 maxlen: 48 2a03:5000:72::/48 maxlen: 48 2a03:5000:81::/48 maxlen: 48 2a03:5000:82::/48 maxlen: 48 2a03:5000:91::/48 maxlen: 48 2a03:5000:92::/48 maxlen: 48 2a03:5000:101::/48 maxlen: 48 2a03:5000:102::/48 maxlen: 48 2a03:5000:111::/48 maxlen: 48 2a03:5000:112::/48 maxlen: 48 2a03:5000:121::/48 maxlen: 48 2a03:5000:122::/48 maxlen: 48 2a03:5000:127::/48 maxlen: 48 2a03:5000:131::/48 maxlen: 48 2a03:5000:132::/48 maxlen: 48 2a03:5000:141::/48 maxlen: 48 2a03:5000:142::/48 maxlen: 48 2a03:5000:151::/48 maxlen: 48 2a03:5000:152::/48 maxlen: 48 2a03:5000:161::/48 maxlen: 48 2a03:5000:162::/48 maxlen: 48 2a03:5000:171::/48 maxlen: 48 2a03:5000:172::/48 maxlen: 48 2a03:5000:181::/48 maxlen: 48 2a03:5000:182::/48 maxlen: 48 2a03:5000:191::/48 maxlen: 48 2a03:5000:192::/48 maxlen: 48 2a03:5000:197::/48 maxlen: 48 2a03:5000:201::/48 maxlen: 48 2a03:5000:202::/48 maxlen: 48 2a03:5000:211::/48 maxlen: 48 2a03:5000:212::/48 maxlen: 48 2a03:5000:221::/48 maxlen: 48 2a03:5000:222::/48 maxlen: 48 2a03:5000:227::/48 maxlen: 48 2a03:5000:231::/48 maxlen: 48 2a03:5000:232::/48 maxlen: 48 2a03:5000:241::/48 maxlen: 48 2a03:5000:242::/48 maxlen: 48 2a03:5000:247::/48 maxlen: 48 2a03:5000:251::/48 maxlen: 48 2a03:5000:252::/48 maxlen: 48 2a03:5000:271::/48 maxlen: 48 2a03:5000:272::/48 maxlen: 48 2a03:5000:291::/48 maxlen: 48 2a03:5000:292::/48 maxlen: 48 2a03:5000:311::/48 maxlen: 48 2a03:5000:312::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d3:71:0e:56:8f:89:38:4f:37:66:a1:26:a2:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e Validity Not Before: Jan 1 10:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=878116306d83779e2e9eb97224ed757b4e5325e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f7:99:22:79:4a:c1:ed:27:12:c7:91:9f:61: d4:39:50:00:fd:9e:52:d9:d8:e1:34:15:d6:b0:06: 1f:22:66:fe:ce:6d:79:ec:6c:17:c1:17:cc:c4:0a: c5:45:cb:4a:f9:5d:59:f6:4f:a8:13:fb:06:68:bf: d3:c6:3b:a6:4c:76:50:7c:dd:56:a9:1e:85:50:ba: cd:05:95:95:bb:4f:00:f9:f4:78:02:d4:4b:be:ec: 79:28:b6:53:27:f8:28:0e:7f:11:81:3d:48:73:6f: d9:4f:30:ea:19:6f:b6:94:b1:c4:ea:38:1a:13:39: ff:f0:b6:f9:42:33:9b:8d:c1:20:53:7d:1c:fe:64: 90:ae:28:bd:82:8e:94:82:80:71:f0:6d:ff:dc:7d: 50:03:f8:d5:72:de:a3:ea:fa:9f:01:f0:16:a0:02: ef:db:c9:7f:3f:c6:5f:1f:f6:e0:f8:95:80:fa:19: d8:2d:3a:15:79:b8:db:0b:56:ed:46:c6:8c:27:24: 3b:b7:eb:61:35:d0:c3:a6:ba:f2:df:00:06:09:36: e9:c8:41:81:31:37:6c:06:c6:d9:4a:d4:c4:71:b4: 83:e4:fc:48:78:2e:f0:03:db:71:92:00:af:c2:d7: c9:11:12:c1:5f:8d:fc:17:1b:dc:02:6e:06:5b:af: 56:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:81:16:30:6D:83:77:9E:2E:9E:B9:72:24:ED:75:7B:4E:53:25:E9 X509v3 Authority Key Identifier: keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/h4EWMG2Dd54unrlyJO11e05TJek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.250.0.0/16 192.109.236.0/24 195.203.0.0/16 217.27.0.0-217.27.4.255 217.27.6.0/23 IPv6: 2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff 2a03:5000:7::/48 2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff 2a03:5000:20::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff 2a03:5000:30::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff 2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff 2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff 2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff 2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff 2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff 2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff 2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff 2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff 2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff 2a03:5000:127::/48 2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff 2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff 2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff 2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff 2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff 2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff 2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff 2a03:5000:197::/48 2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff 2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff 2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff 2a03:5000:227::/48 2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff 2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff 2a03:5000:247::/48 2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff 2a03:5000:271::-2a03:5000:272:ffff:ffff:ffff:ffff:ffff 2a03:5000:291::-2a03:5000:292:ffff:ffff:ffff:ffff:ffff 2a03:5000:311::-2a03:5000:312:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 3c:65:0a:06:86:97:42:99:6c:a9:a7:ea:34:67:d2:af:13:0f: c4:c3:c0:c0:a0:86:00:fc:ac:2c:2a:f0:e1:75:02:dd:14:71: 59:51:7a:97:aa:e6:0c:5f:fd:07:85:a3:77:33:81:be:4e:f6: e0:dd:80:92:d6:55:40:e6:ca:66:40:9f:ba:5c:f7:e2:74:78: 92:50:d0:58:71:9c:aa:da:b7:a8:22:cb:f4:02:73:15:95:7f: 6d:db:f2:72:c3:97:ca:a8:77:42:04:f4:95:c7:ca:64:fa:d0: 60:4a:7a:64:c7:28:7e:4e:94:e2:14:14:4f:78:ae:bf:fa:a9: ca:3c:10:3d:ec:e9:73:35:d4:88:09:a2:ef:60:c6:37:d1:e4: 6d:6e:bc:06:39:f0:f6:c5:04:33:5f:09:9e:f0:44:32:05:1a: a6:fa:2a:16:02:4a:4a:2d:de:00:d6:fb:fb:b7:33:96:c3:82: 4a:9c:ce:ff:7b:66:77:d3:32:65:75:21:84:1c:bf:c2:ca:48: a1:0b:01:d4:40:47:d9:2c:d7:95:3b:bc:4b:31:8a:45:49:84: cb:d5:ff:8f:93:88:ee:b7:88:c8:55:30:a6:b5:cb:22:bf:e2: 3a:15:0d:0c:f4:35:35:30:8d:d7:36:44:9a:ae:d0:4b:df:90: 4e:73:9a:e6 -----BEGIN CERTIFICATE----- MIIHnTCCBoWgAwIBAgISAZt5ENNxDlaPiThPN2ahJqJ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0Y2M2YjljMzdmYWEwZGEzYjQxMjAwN2MwYjEwYjJjNWJm MmNmNGUwHhcNMjYwMTAxMTAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzgxMTYzMDZkODM3NzllMmU5ZWI5NzIyNGVkNzU3YjRlNTMyNWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfeZInlKwe0nEseRn2HUOVAA/Z5S 2djhNBXWsAYfImb+zm157GwXwRfMxArFRctK+V1Z9k+oE/sGaL/TxjumTHZQfN1W qR6FULrNBZWVu08A+fR4AtRLvux5KLZTJ/goDn8RgT1Ic2/ZTzDqGW+2lLHE6jga Ezn/8Lb5QjObjcEgU30c/mSQrii9go6UgoBx8G3/3H1QA/jVct6j6vqfAfAWoALv 28l/P8ZfH/bg+JWA+hnYLToVebjbC1btRsaMJyQ7t+thNdDDprry3wAGCTbpyEGB MTdsBsbZStTEcbSD5PxIeC7wA9txkgCvwtfJERLBX438FxvcAm4GW69W9QIDAQAB o4IEqTCCBKUwHQYDVR0OBBYEFIeBFjBtg3eeLp65ciTtdXtOUyXpMB8GA1UdIwQY MBaAFCTMa5w3+qDaO0EgB8CxCyxb8s9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUt ODY0MjM4YmMwNDliLzEvaDRFV01HMkRkNTR1bnJseUpPMTFlMDVUSmVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUtODY0MjM4YmMwNDli LzEvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICvQYIKwYBBQUHAQcBAf8EggKsMIICqDApBAIAATAjAwMA lfoDBADAbewDAwDDyzALAwMA2RsDBADZGwQDBAHZGwYwggJ5BAIAAjCCAnEwEgMH ACoDUAAAAQMHACoDUAAAAgMHACoDUAAABzASAwcAKgNQAAARAwcAKgNQAAASMBID BwUqA1AAACADBwAqA1AAACIwEgMHBCoDUAAAMAMHACoDUAAAMjASAwcAKgNQAABB AwcAKgNQAABCMBIDBwAqA1AAAFEDBwAqA1AAAFIwEgMHACoDUAAAYQMHACoDUAAA YjASAwcAKgNQAABxAwcAKgNQAAByMBIDBwAqA1AAAIEDBwAqA1AAAIIwEgMHACoD UAAAkQMHACoDUAAAkjASAwcAKgNQAAEBAwcAKgNQAAECMBIDBwAqA1AAAREDBwAq A1AAARIwEgMHACoDUAABIQMHACoDUAABIgMHACoDUAABJzASAwcAKgNQAAExAwcA KgNQAAEyMBIDBwAqA1AAAUEDBwAqA1AAAUIwEgMHACoDUAABUQMHACoDUAABUjAS AwcAKgNQAAFhAwcAKgNQAAFiMBIDBwAqA1AAAXEDBwAqA1AAAXIwEgMHACoDUAAB gQMHACoDUAABgjASAwcAKgNQAAGRAwcAKgNQAAGSAwcAKgNQAAGXMBIDBwAqA1AA AgEDBwAqA1AAAgIwEgMHACoDUAACEQMHACoDUAACEjASAwcAKgNQAAIhAwcAKgNQ AAIiAwcAKgNQAAInMBIDBwAqA1AAAjEDBwAqA1AAAjIwEgMHACoDUAACQQMHACoD UAACQgMHACoDUAACRzASAwcAKgNQAAJRAwcAKgNQAAJSMBIDBwAqA1AAAnEDBwAq A1AAAnIwEgMHACoDUAACkQMHACoDUAACkjASAwcAKgNQAAMRAwcAKgNQAAMSMA0G CSqGSIb3DQEBCwUAA4IBAQA8ZQoGhpdCmWypp+o0Z9KvEw/Ew8DAoIYA/KwsKvDh dQLdFHFZUXqXquYMX/0HhaN3M4G+Tvbg3YCS1lVA5spmQJ+6XPfidHiSUNBYcZyq 2reoIsv0AnMVlX9t2/Jyw5fKqHdCBPSVx8pk+tBgSnpkxyh+TpTiFBRPeK6/+qnK PBA97OlzNdSICaLvYMY30eRtbrwGOfD2xQQzXwme8EQyBRqm+ioWAkpKLd4A1vv7 tzOWw4JKnM7/e2Z30zJldSGEHL/CykihCwHUQEfZLNeVO7xLMYpFSYTL1f+Pk4ju t4jIVTCmtcsiv+I6FQ0M9DU1MI3XNkSartBL35BOc5rm -----END CERTIFICATE-----Generated at Fri Jan 23 16:04:41 2026 by rpki-client