This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Td2Vp5-WIUF1IWf5EzpcA9D44q8.roa File: Td2Vp5-WIUF1IWf5EzpcA9D44q8.roa (raw, json) Hash identifier: H9wcUUfrb5qRGK0eIVttx/de02ZmK8g5qasFGLLTG/A= Subject key identifier: 4D:DD:95:A7:9F:96:21:41:75:21:67:F9:13:3A:5C:03:D0:F8:E2:AF Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2EFAE51D47614D0C630F664C84267 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Td2Vp5-WIUF1IWf5EzpcA9D44q8.roa Signing time: Thu 01 Jan 2026 08:18:22 +0000 ROA not before: Thu 01 Jan 2026 08:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34224 IP address blocks: 31.13.195.0/24 maxlen: 32 31.13.197.0/24 maxlen: 32 31.13.216.0/21 maxlen: 32 31.13.217.0/24 maxlen: 32 31.13.221.0/24 maxlen: 32 31.13.223.0/24 maxlen: 32 31.13.230.0/24 maxlen: 32 31.13.236.0/22 maxlen: 32 31.13.241.0/24 maxlen: 32 31.13.245.0/24 maxlen: 32 37.60.138.0/24 maxlen: 32 37.60.139.0/24 maxlen: 32 45.81.38.0/24 maxlen: 32 45.139.123.0/24 maxlen: 24 82.115.210.0/24 maxlen: 32 83.143.115.0/24 maxlen: 32 87.120.6.0/23 maxlen: 32 87.120.6.0/24 maxlen: 32 87.120.8.0/24 maxlen: 32 87.120.13.0/24 maxlen: 32 87.120.33.0/24 maxlen: 24 87.120.37.0/24 maxlen: 32 87.120.39.0/24 maxlen: 32 87.120.43.0/24 maxlen: 32 87.120.61.0/24 maxlen: 32 87.120.109.0/24 maxlen: 32 87.120.128.0/23 maxlen: 32 87.120.133.0/24 maxlen: 32 87.120.134.0/24 maxlen: 32 87.120.135.0/24 maxlen: 32 87.120.176.0/24 maxlen: 32 87.120.195.0/24 maxlen: 32 87.120.199.0/24 maxlen: 32 87.120.200.0/24 maxlen: 32 87.120.201.0/24 maxlen: 32 87.120.206.0/23 maxlen: 32 87.120.206.0/24 maxlen: 32 87.120.207.0/24 maxlen: 32 87.120.217.0/24 maxlen: 32 87.120.223.0/24 maxlen: 32 87.120.253.0/24 maxlen: 32 87.120.254.0/24 maxlen: 32 87.120.255.0/24 maxlen: 32 87.121.0.0/23 maxlen: 32 87.121.0.0/24 maxlen: 32 87.121.1.0/24 maxlen: 32 87.121.2.0/24 maxlen: 24 87.121.6.0/23 maxlen: 32 87.121.32.0/24 maxlen: 24 87.121.42.0/24 maxlen: 32 87.121.52.0/24 maxlen: 32 87.121.64.0/24 maxlen: 32 87.121.83.0/24 maxlen: 32 87.121.90.0/23 maxlen: 32 87.121.110.0/24 maxlen: 32 87.121.111.0/24 maxlen: 32 87.121.112.0/24 maxlen: 32 87.121.113.0/24 maxlen: 32 87.121.118.0/24 maxlen: 32 87.121.150.0/23 maxlen: 32 87.121.150.0/24 maxlen: 32 87.121.151.0/24 maxlen: 32 87.121.161.0/24 maxlen: 32 91.92.0.0/24 maxlen: 32 91.92.1.0/24 maxlen: 32 91.92.2.0/24 maxlen: 32 91.92.65.0/24 maxlen: 32 91.92.66.0/24 maxlen: 32 91.92.105.0/24 maxlen: 32 91.92.109.0/24 maxlen: 32 91.92.139.0/24 maxlen: 32 91.92.198.0/23 maxlen: 32 91.92.219.0/24 maxlen: 32 91.212.233.0/24 maxlen: 32 92.249.49.0/24 maxlen: 32 93.123.8.0/24 maxlen: 32 93.123.12.0/24 maxlen: 32 93.123.18.0/24 maxlen: 32 93.123.28.0/23 maxlen: 32 93.123.32.0/22 maxlen: 32 93.123.36.0/24 maxlen: 32 94.154.161.0/24 maxlen: 24 94.156.15.0/24 maxlen: 32 94.156.24.0/24 maxlen: 32 94.156.25.0/24 maxlen: 32 94.156.42.0/24 maxlen: 32 94.156.44.0/24 maxlen: 32 94.156.77.0/24 maxlen: 32 94.156.94.0/24 maxlen: 32 94.156.98.0/24 maxlen: 32 94.156.100.0/24 maxlen: 32 94.156.129.0/24 maxlen: 32 94.156.153.0/24 maxlen: 32 94.156.158.0/24 maxlen: 32 94.156.172.0/23 maxlen: 32 94.156.185.0/24 maxlen: 32 94.156.188.0/24 maxlen: 32 94.156.216.0/21 maxlen: 32 94.156.249.0/24 maxlen: 32 94.156.251.0/24 maxlen: 32 94.156.252.0/24 maxlen: 32 185.254.36.0/24 maxlen: 32 194.55.184.0/23 maxlen: 32 194.169.173.0/24 maxlen: 32 195.178.111.0/24 maxlen: 24 212.73.128.0/23 maxlen: 32 212.73.130.0/23 maxlen: 32 212.73.131.0/24 maxlen: 32 212.73.132.0/24 maxlen: 32 212.73.133.0/24 maxlen: 32 212.73.134.0/24 maxlen: 32 212.73.136.0/24 maxlen: 32 212.73.138.0/23 maxlen: 32 212.73.138.0/24 maxlen: 32 212.73.140.0/24 maxlen: 32 212.73.141.0/24 maxlen: 32 212.73.142.0/24 maxlen: 32 212.73.143.0/24 maxlen: 32 212.73.144.0/24 maxlen: 32 212.73.145.0/24 maxlen: 32 212.73.146.0/24 maxlen: 32 212.73.147.0/24 maxlen: 32 212.73.155.0/24 maxlen: 32 212.73.157.0/24 maxlen: 32 212.87.207.0/24 maxlen: 32 2a00:1728::/32 maxlen: 48 2a00:1728:0:d::/64 maxlen: 64 2a00:1728:1::/48 maxlen: 48 2a00:1728:3::/48 maxlen: 48 2a00:1728:1b::/48 maxlen: 48 2a00:1728:1f::/48 maxlen: 48 2a00:1728:21::/48 maxlen: 48 2a00:1728:23::/48 maxlen: 48 2a00:1728:25::/48 maxlen: 48 2a00:1728:27::/48 maxlen: 48 2a00:1728:2f::/48 maxlen: 48 2a00:1728:31::/48 maxlen: 48 2a00:1728:34::/48 maxlen: 48 2a00:1728:35::/48 maxlen: 48 2a00:1728:41::/48 maxlen: 48 2a00:1728:42::/48 maxlen: 48 2a00:1728:43::/48 maxlen: 48 2a00:1728:44::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ef:ae:51:d4:76:14:d0:c6:30:f6:64:c8:42:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ddd95a79f962141752167f9133a5c03d0f8e2af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9b:00:cf:c0:c9:0d:56:c1:06:0e:26:3f:49: b7:80:f3:4f:50:f6:1e:5f:3f:e7:3e:c3:ab:75:a3: ee:a7:cd:c3:d9:a7:8a:56:1a:f0:81:f8:97:9c:b4: 5b:49:70:02:3b:22:78:26:a8:10:d9:6c:77:f8:56: e6:bc:b7:d9:1b:95:d5:1c:1e:3f:53:7f:52:5a:44: b3:42:06:e6:53:c9:3d:ca:17:1f:0c:a7:51:f7:bb: ad:b8:b3:3e:d8:bc:62:a2:65:a6:5f:3c:14:cd:3e: 31:86:c0:d9:3e:5a:10:1d:a4:68:8c:04:e8:93:d0: 22:d1:56:62:14:0c:f3:11:0a:e1:62:43:30:6d:9a: 60:bc:32:b9:70:f2:47:08:e8:07:53:b8:7c:5c:e3: 24:66:e6:41:be:ef:ea:00:70:11:cc:69:c0:e3:80: f1:7c:f1:68:84:b6:66:24:fa:88:0b:2f:a1:1f:de: 3b:78:b5:8d:54:cc:c2:7f:08:76:aa:f1:c8:38:32: 1f:5f:5f:e0:09:04:ae:13:3f:4d:6c:f7:1f:e0:d7: b8:cd:4d:1d:c2:da:08:10:1d:68:19:63:a4:59:13: 80:d1:3a:49:c1:80:46:6a:67:44:a0:6e:4f:23:88: b4:9b:42:bf:5c:e5:6c:01:71:26:3a:01:86:85:a9: da:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:DD:95:A7:9F:96:21:41:75:21:67:F9:13:3A:5C:03:D0:F8:E2:AF X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Td2Vp5-WIUF1IWf5EzpcA9D44q8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.13.195.0/24 31.13.197.0/24 31.13.216.0/21 31.13.230.0/24 31.13.236.0/22 31.13.241.0/24 31.13.245.0/24 37.60.138.0/23 45.81.38.0/24 45.139.123.0/24 82.115.210.0/24 83.143.115.0/24 87.120.6.0-87.120.8.255 87.120.13.0/24 87.120.33.0/24 87.120.37.0/24 87.120.39.0/24 87.120.43.0/24 87.120.61.0/24 87.120.109.0/24 87.120.128.0/23 87.120.133.0-87.120.135.255 87.120.176.0/24 87.120.195.0/24 87.120.199.0-87.120.201.255 87.120.206.0/23 87.120.217.0/24 87.120.223.0/24 87.120.253.0-87.121.2.255 87.121.6.0/23 87.121.32.0/24 87.121.42.0/24 87.121.52.0/24 87.121.64.0/24 87.121.83.0/24 87.121.90.0/23 87.121.110.0-87.121.113.255 87.121.118.0/24 87.121.150.0/23 87.121.161.0/24 91.92.0.0-91.92.2.255 91.92.65.0-91.92.66.255 91.92.105.0/24 91.92.109.0/24 91.92.139.0/24 91.92.198.0/23 91.92.219.0/24 91.212.233.0/24 92.249.49.0/24 93.123.8.0/24 93.123.12.0/24 93.123.18.0/24 93.123.28.0/23 93.123.32.0-93.123.36.255 94.154.161.0/24 94.156.15.0/24 94.156.24.0/23 94.156.42.0/24 94.156.44.0/24 94.156.77.0/24 94.156.94.0/24 94.156.98.0/24 94.156.100.0/24 94.156.129.0/24 94.156.153.0/24 94.156.158.0/24 94.156.172.0/23 94.156.185.0/24 94.156.188.0/24 94.156.216.0/21 94.156.249.0/24 94.156.251.0-94.156.252.255 185.254.36.0/24 194.55.184.0/23 194.169.173.0/24 195.178.111.0/24 212.73.128.0-212.73.134.255 212.73.136.0/24 212.73.138.0-212.73.147.255 212.73.155.0/24 212.73.157.0/24 212.87.207.0/24 IPv6: 2a00:1728::/32 Signature Algorithm: sha256WithRSAEncryption 94:63:29:71:2b:d1:7c:d3:6d:c2:69:c1:f2:72:74:05:6b:fd: ae:bc:bc:94:72:34:d8:6a:84:c4:fb:87:3d:63:67:cc:8c:7f: f9:7d:d0:d3:ba:47:83:55:1e:b5:4b:64:3b:d0:63:b0:ba:6f: 76:2d:43:e5:a7:3a:cf:23:d5:f0:b8:f3:5a:ce:d9:88:80:70: f4:08:9f:6d:67:4e:9c:47:46:d1:2b:01:ce:54:43:9c:3a:9d: ac:32:b0:f3:86:49:1e:12:b3:19:42:d0:49:fe:ac:05:50:25: 9f:50:60:c2:3f:91:b2:54:5e:53:2e:e8:9c:db:b8:01:cc:fd: 82:64:ca:96:e6:32:67:ba:88:72:8b:6b:01:fe:3d:82:0b:26: e3:47:48:6e:30:5b:26:31:14:25:c1:fc:cb:fb:ab:69:5f:72: 3c:fc:1b:aa:41:b3:17:f7:a0:53:67:e4:64:1b:ce:b8:9a:cb: 6e:a9:54:c5:72:cb:95:74:c4:ba:e9:27:83:31:3b:a7:c9:9d: f9:f9:53:81:7d:c3:f1:7d:e2:1c:eb:91:f1:bd:b7:b2:19:93: c6:5f:8f:1a:67:f9:a1:1a:91:5b:6d:f0:36:20:02:08:f5:2e: 18:e2:01:eb:ff:3f:9c:99:63:41:c6:f6:43:7b:ec:d3:f5:d6: 8c:57:a0:97 -----BEGIN CERTIFICATE----- MIIHUzCCBjugAwIBAgISAZt4ou+uUdR2FNDGMPZkyEJnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGRkOTVhNzlmOTYyMTQxNzUyMTY3ZjkxMzNhNWMwM2QwZjhlMmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5sAz8DJDVbBBg4mP0m3gPNPUPYe Xz/nPsOrdaPup83D2aeKVhrwgfiXnLRbSXACOyJ4JqgQ2Wx3+FbmvLfZG5XVHB4/ U39SWkSzQgbmU8k9yhcfDKdR97utuLM+2LxiomWmXzwUzT4xhsDZPloQHaRojATo k9Ai0VZiFAzzEQrhYkMwbZpgvDK5cPJHCOgHU7h8XOMkZuZBvu/qAHARzGnA44Dx fPFohLZmJPqICy+hH947eLWNVMzCfwh2qvHIODIfX1/gCQSuEz9NbPcf4Ne4zU0d wtoIEB1oGWOkWROA0TpJwYBGamdEoG5PI4i0m0K/XOVsAXEmOgGGhanaUQIDAQAB o4IEXzCCBFswHQYDVR0OBBYEFE3dlaefliFBdSFn+RM6XAPQ+OKvMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvVGQyVnA1LVdJVUYxSVdmNUV6cGNBOUQ0NHE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICcwYIKwYBBQUHAQcBAf8EggJiMIICXjCCAksEAgABMIIC QwMEAB8NwwMEAB8NxQMEAx8N2AMEAB8N5gMEAh8N7AMEAB8N8QMEAB8N9QMEASU8 igMEAC1RJgMEAC2LewMEAFJz0gMEAFOPczAMAwQBV3gGAwQAV3gIAwQAV3gNAwQA V3ghAwQAV3glAwQAV3gnAwQAV3grAwQAV3g9AwQAV3htAwQBV3iAMAwDBABXeIUD BANXeIADBABXeLADBABXeMMwDAMEAFd4xwMEAVd4yAMEAVd4zgMEAFd42QMEAFd4 3zAMAwQAV3j9AwQAV3kCAwQBV3kGAwQAV3kgAwQAV3kqAwQAV3k0AwQAV3lAAwQA V3lTAwQBV3laMAwDBAFXeW4DBAFXeXADBABXeXYDBAFXeZYDBABXeaEwCwMDAltc AwQAW1wCMAwDBABbXEEDBABbXEIDBABbXGkDBABbXG0DBABbXIsDBAFbXMYDBABb XNsDBABb1OkDBABc+TEDBABdewgDBABdewwDBABdexIDBAFdexwwDAMEBV17IAME AF17JAMEAF6aoQMEAF6cDwMEAV6cGAMEAF6cKgMEAF6cLAMEAF6cTQMEAF6cXgME AF6cYgMEAF6cZAMEAF6cgQMEAF6cmQMEAF6cngMEAV6crAMEAF6cuQMEAF6cvAME A16c2AMEAF6c+TAMAwQAXpz7AwQAXpz8AwQAuf4kAwQBwje4AwQAwqmtAwQAw7Jv MAwDBAfUSYADBADUSYYDBADUSYgwDAMEAdRJigMEAtRJkAMEANRJmwMEANRJnQME ANRXzzANBAIAAjAHAwUAKgAXKDANBgkqhkiG9w0BAQsFAAOCAQEAlGMpcSvRfNNt wmnB8nJ0BWv9rry8lHI02GqExPuHPWNnzIx/+X3Q07pHg1UetUtkO9BjsLpvdi1D 5ac6zyPV8LjzWs7ZiIBw9AifbWdOnEdG0SsBzlRDnDqdrDKw84ZJHhKzGULQSf6s BVAln1Bgwj+RslReUy7onNu4Acz9gmTKluYyZ7qIcotrAf49ggsm40dIbjBbJjEU JcH8y/uraV9yPPwbqkGzF/egU2fkZBvOuJrLbqlUxXLLlXTEuukngzE7p8md+flT gX3D8X3iHOuR8b23shmTxl+PGmf5oRqRW23wNiACCPUuGOIB6/8/nJljQcb2Q3vs 0/XWjFeglw== -----END CERTIFICATE-----Generated at Fri Jan 2 12:04:29 2026 by rpki-client