This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IJJk4NV0RO-6xLt4rAN_7GJCfL0.roa File: IJJk4NV0RO-6xLt4rAN_7GJCfL0.roa (raw, json) Hash identifier: MLtZFIMJoUI0xHkdhHD06udUJwVPXQidwgQKTl9XBIY= Subject key identifier: 20:92:64:E0:D5:74:44:EF:BA:C4:BB:78:AC:03:7F:EC:62:42:7C:BD Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2F6A6A101BABD5AE130590DC8D40D Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IJJk4NV0RO-6xLt4rAN_7GJCfL0.roa Signing time: Thu 01 Jan 2026 08:18:24 +0000 ROA not before: Thu 01 Jan 2026 08:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41745 IP address blocks: 31.169.124.0/24 maxlen: 24 31.169.125.0/24 maxlen: 24 31.169.126.0/24 maxlen: 24 31.169.127.0/24 maxlen: 24 45.12.254.0/24 maxlen: 24 45.14.165.0/24 maxlen: 24 45.81.243.0/24 maxlen: 24 45.88.67.0/24 maxlen: 24 45.95.2.0/24 maxlen: 24 84.21.172.0/24 maxlen: 24 85.31.45.0/24 maxlen: 24 85.209.132.0/24 maxlen: 24 85.209.134.0/24 maxlen: 24 87.121.217.0/24 maxlen: 24 93.123.30.0/24 maxlen: 24 94.125.100.0/24 maxlen: 24 94.125.101.0/24 maxlen: 24 94.156.177.0/24 maxlen: 24 94.156.236.0/24 maxlen: 24 109.206.241.0/24 maxlen: 24 171.22.30.0/24 maxlen: 24 185.246.220.0/24 maxlen: 24 192.145.28.0/24 maxlen: 24 192.145.29.0/24 maxlen: 24 192.145.30.0/24 maxlen: 24 192.145.31.0/24 maxlen: 24 193.8.184.0/24 maxlen: 24 193.47.60.0/24 maxlen: 24 193.148.58.0/24 maxlen: 24 193.148.59.0/24 maxlen: 24 193.168.196.0/24 maxlen: 24 193.168.197.0/24 maxlen: 24 193.168.198.0/24 maxlen: 24 193.168.199.0/24 maxlen: 24 212.87.220.0/24 maxlen: 24 212.87.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f6:a6:a1:01:ba:bd:5a:e1:30:59:0d:c8:d4:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=209264e0d57444efbac4bb78ac037fec62427cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c1:34:68:82:75:b8:21:4a:a5:64:18:be:b6: 07:a6:79:40:7d:40:07:69:84:04:0b:d9:b8:b9:00: 28:36:ba:bb:78:46:68:5f:9d:5f:cc:42:5e:71:8f: 54:43:d4:5e:ff:22:a0:c0:1a:0f:01:fb:64:d2:ff: 77:77:be:0e:a0:23:c9:eb:f6:b0:ff:55:4a:89:15: 3c:74:31:8d:64:74:08:e1:85:58:13:b5:dc:e3:51: c4:90:ee:04:25:79:17:e2:04:89:f9:a6:68:47:6e: 68:00:c0:2f:8b:a8:80:af:0e:78:c3:73:ff:7c:2e: 98:65:fa:d7:30:24:01:f1:8a:41:71:9a:37:43:ad: 98:05:6a:30:3b:b6:46:18:cc:1a:2b:94:b2:99:68: 83:4f:1d:22:f3:94:79:c6:b6:87:17:34:37:24:3f: 3e:f6:12:1d:97:23:b5:39:88:5c:66:0d:17:a2:a6: 3a:01:14:0f:de:4e:08:34:1a:73:71:71:aa:e9:f6: 96:a8:53:b8:ed:4a:47:e4:ca:40:72:d5:48:9e:d3: 6c:5a:ff:e6:14:fd:94:0f:bb:ea:c5:85:6d:a4:da: 96:fd:a1:65:84:2d:cd:db:72:50:00:b5:f2:99:92: 5b:cd:32:f7:e8:7a:35:6b:16:af:8a:f0:78:06:34: cf:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:92:64:E0:D5:74:44:EF:BA:C4:BB:78:AC:03:7F:EC:62:42:7C:BD X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IJJk4NV0RO-6xLt4rAN_7GJCfL0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.169.124.0/22 45.12.254.0/24 45.14.165.0/24 45.81.243.0/24 45.88.67.0/24 45.95.2.0/24 84.21.172.0/24 85.31.45.0/24 85.209.132.0/24 85.209.134.0/24 87.121.217.0/24 93.123.30.0/24 94.125.100.0/23 94.156.177.0/24 94.156.236.0/24 109.206.241.0/24 171.22.30.0/24 185.246.220.0/24 192.145.28.0/22 193.8.184.0/24 193.47.60.0/24 193.148.58.0/23 193.168.196.0/22 212.87.220.0/24 212.87.223.0/24 Signature Algorithm: sha256WithRSAEncryption 08:84:5d:61:64:8a:e1:8f:52:ba:03:db:72:b6:13:a1:bd:be: fc:a9:23:82:58:e5:23:e0:47:c6:8a:c8:96:87:7d:5b:22:b4: 67:7d:e4:bf:4e:71:34:59:9e:85:f0:bf:9b:a6:9d:48:d8:57: ba:9d:8c:41:42:a1:eb:47:ba:de:cb:5b:06:5c:5e:6b:83:64: ce:cf:40:3b:5a:51:ff:02:21:d8:1c:b2:7a:9c:5e:9f:b2:50: 4a:34:90:2e:61:13:02:43:80:c7:96:2c:ba:50:79:8c:86:80: b8:b5:3e:65:ce:86:a5:e4:54:d6:77:6d:b1:6c:90:a4:f6:12: ed:b0:3b:b6:db:ef:64:b1:b7:90:d5:3e:27:c6:45:46:c6:6b: 22:f9:5b:4c:b6:89:4e:18:ea:69:02:05:97:49:1a:80:4b:1c: d4:ff:bf:b3:c6:40:17:ce:06:e1:c2:7a:89:df:f4:be:9a:d1: bf:37:b5:ab:90:2e:5b:eb:c2:ed:12:be:21:ec:b9:5b:79:cc: 8f:34:ac:ce:85:1e:19:b8:68:e2:ce:0c:0c:16:cd:ad:81:94: bd:7d:96:6c:45:32:17:7b:6b:dd:c9:44:04:88:48:90:20:bf: a5:04:4f:3d:0c:f3:50:01:96:a5:46:47:e8:d8:b8:2c:c2:ae: 6d:5e:37:57 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISAZt4ovamoQG6vVrhMFkNyNQNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDkyNjRlMGQ1NzQ0NGVmYmFjNGJiNzhhYzAzN2ZlYzYyNDI3Y2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8E0aIJ1uCFKpWQYvrYHpnlAfUAH aYQEC9m4uQAoNrq7eEZoX51fzEJecY9UQ9Re/yKgwBoPAftk0v93d74OoCPJ6/aw /1VKiRU8dDGNZHQI4YVYE7Xc41HEkO4EJXkX4gSJ+aZoR25oAMAvi6iArw54w3P/ fC6YZfrXMCQB8YpBcZo3Q62YBWowO7ZGGMwaK5SymWiDTx0i85R5xraHFzQ3JD8+ 9hIdlyO1OYhcZg0XoqY6ARQP3k4INBpzcXGq6faWqFO47UpH5MpActVIntNsWv/m FP2UD7vqxYVtpNqW/aFlhC3N23JQALXymZJbzTL36Ho1axavivB4BjTPfwIDAQAB o4ICnjCCApowHQYDVR0OBBYEFCCSZODVdETvusS7eKwDf+xiQny9MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvSUpKazROVjBSTy02eEx0NHJBTl83R0pDZkwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBAIf qXwDBAAtDP4DBAAtDqUDBAAtUfMDBAAtWEMDBAAtXwIDBABUFawDBABVHy0DBABV 0YQDBABV0YYDBABXedkDBABdex4DBAFefWQDBABenLEDBABenOwDBABtzvEDBACr Fh4DBAC59twDBALAkRwDBADBCLgDBADBLzwDBAHBlDoDBALBqMQDBADUV9wDBADU V98wDQYJKoZIhvcNAQELBQADggEBAAiEXWFkiuGPUroD23K2E6G9vvypI4JY5SPg R8aKyJaHfVsitGd95L9OcTRZnoXwv5umnUjYV7qdjEFCoetHut7LWwZcXmuDZM7P QDtaUf8CIdgcsnqcXp+yUEo0kC5hEwJDgMeWLLpQeYyGgLi1PmXOhqXkVNZ3bbFs kKT2Eu2wO7bb72Sxt5DVPifGRUbGayL5W0y2iU4Y6mkCBZdJGoBLHNT/v7PGQBfO BuHCeonf9L6a0b83tauQLlvrwu0SviHsuVt5zI80rM6FHhm4aOLODAwWza2BlL19 lmxFMhd7a93JRASISJAgv6UETz0M81ABlqVGR+jYuCzCrm1eN1c= -----END CERTIFICATE-----Generated at Fri Jan 2 12:06:32 2026 by rpki-client