This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/t4VzSYm8jZxHXra8a1gQU_oCZrg.roa File: t4VzSYm8jZxHXra8a1gQU_oCZrg.roa (raw, json) Hash identifier: nhJnac8mfQfMue/8D0r8n0jxVEck6bnRlVwo/77WvNc= Subject key identifier: B7:85:73:49:89:BC:8D:9C:47:5E:B6:BC:6B:58:10:53:FA:02:66:B8 Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019B979C9185C0EFC96B61C33FDFAF8A6160 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/t4VzSYm8jZxHXra8a1gQU_oCZrg.roa Signing time: Wed 07 Jan 2026 08:39:39 +0000 ROA not before: Wed 07 Jan 2026 08:39:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 5.187.33.0/24 maxlen: 24 37.235.48.0/24 maxlen: 24 37.235.51.0/24 maxlen: 24 45.151.73.0/24 maxlen: 24 45.151.74.0/24 maxlen: 24 45.153.127.0/24 maxlen: 24 46.183.187.0/24 maxlen: 24 83.172.134.0/24 maxlen: 24 83.172.135.0/24 maxlen: 24 83.172.136.0/24 maxlen: 24 83.172.138.0/24 maxlen: 24 83.172.150.0/24 maxlen: 24 83.172.159.0/24 maxlen: 24 83.243.120.0/24 maxlen: 24 83.243.121.0/24 maxlen: 24 89.31.120.0/24 maxlen: 24 89.31.121.0/24 maxlen: 24 89.31.123.0/24 maxlen: 24 89.40.105.0/24 maxlen: 24 89.46.232.0/24 maxlen: 24 89.46.233.0/24 maxlen: 24 89.46.234.0/24 maxlen: 24 89.46.235.0/24 maxlen: 24 89.46.236.0/24 maxlen: 24 91.132.92.0/24 maxlen: 24 91.132.93.0/24 maxlen: 24 91.132.95.0/24 maxlen: 24 92.243.64.0/24 maxlen: 24 93.113.99.0/24 maxlen: 24 93.113.215.0/24 maxlen: 24 95.156.204.0/24 maxlen: 24 95.156.207.0/24 maxlen: 24 103.57.248.0/24 maxlen: 24 103.57.249.0/24 maxlen: 24 103.57.251.0/24 maxlen: 24 134.255.211.0/24 maxlen: 24 149.154.157.0/24 maxlen: 24 149.154.158.0/24 maxlen: 24 149.154.159.0/24 maxlen: 24 151.236.4.0/24 maxlen: 24 151.236.11.0/24 maxlen: 24 151.236.15.0/24 maxlen: 24 151.236.16.0/24 maxlen: 24 151.236.17.0/24 maxlen: 24 151.236.18.0/24 maxlen: 24 151.236.20.0/24 maxlen: 24 151.236.21.0/24 maxlen: 24 151.236.22.0/24 maxlen: 24 151.236.25.0/24 maxlen: 24 158.255.208.0/24 maxlen: 24 158.255.213.0/24 maxlen: 24 158.255.214.0/24 maxlen: 24 158.255.215.0/24 maxlen: 24 176.126.99.0/24 maxlen: 24 185.26.236.0/24 maxlen: 24 185.26.238.0/24 maxlen: 24 185.26.239.0/24 maxlen: 24 185.76.78.0/24 maxlen: 24 185.76.79.0/24 maxlen: 24 185.122.187.0/24 maxlen: 24 185.193.48.0/24 maxlen: 24 185.195.64.0/24 maxlen: 24 185.195.66.0/24 maxlen: 24 188.190.0.0/24 maxlen: 24 188.190.1.0/24 maxlen: 24 188.190.2.0/24 maxlen: 24 188.190.4.0/24 maxlen: 24 188.190.9.0/24 maxlen: 24 188.190.16.0/24 maxlen: 24 188.190.17.0/24 maxlen: 24 188.214.32.0/24 maxlen: 24 193.3.55.0/24 maxlen: 24 213.111.176.0/24 maxlen: 24 213.111.178.0/24 maxlen: 24 213.111.182.0/24 maxlen: 24 213.111.183.0/24 maxlen: 24 213.111.184.0/24 maxlen: 24 213.111.185.0/24 maxlen: 24 213.111.191.0/24 maxlen: 24 213.183.55.0/24 maxlen: 24 2a03:f80:32::/48 maxlen: 48 2a03:f80:33::/48 maxlen: 48 2a03:f80:39::/48 maxlen: 48 2a03:f80:40::/48 maxlen: 48 2a03:f80:41::/48 maxlen: 48 2a03:f80:44::/48 maxlen: 48 2a03:f80:45::/48 maxlen: 48 2a03:f80:46::/48 maxlen: 48 2a03:f80:47::/48 maxlen: 48 2a03:f80:48::/48 maxlen: 48 2a03:f80:49::/48 maxlen: 48 2a03:f80:61::/48 maxlen: 48 2a03:f80:65::/48 maxlen: 48 2a03:f80:81::/48 maxlen: 48 2a03:f80:358::/48 maxlen: 48 2a03:f80:381::/48 maxlen: 48 2a03:f80:852::/48 maxlen: 48 2a03:f80:971::/48 maxlen: 48 2a03:f80:4416::/48 maxlen: 48 2a03:f80:ed51::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:97:9c:91:85:c0:ef:c9:6b:61:c3:3f:df:af:8a:61:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Jan 7 08:39:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b785734989bc8d9c475eb6bc6b581053fa0266b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:61:55:fb:bf:d6:d8:db:f7:d2:50:5d:00:a9: c2:93:c0:8d:6e:e9:b3:56:a3:07:c9:79:f6:e8:b3: dc:bb:7f:54:e1:c3:b6:2b:3b:a8:64:b9:f2:93:22: 9d:5d:9f:80:fb:11:93:fa:ee:01:ff:64:85:21:ed: c7:23:1b:7f:84:42:a4:33:f0:b6:47:92:d1:48:b3: e8:bf:85:a7:3f:65:d9:f7:95:f1:f0:af:57:7d:91: 1d:79:ce:0e:4a:9c:ca:72:0e:61:79:68:55:2a:1a: 67:ff:93:c5:5b:02:04:32:55:04:3f:c4:c9:df:94: 90:99:d0:62:58:53:16:7c:f7:28:45:a9:c4:fd:e7: 41:9a:10:77:fb:c4:16:fa:a2:6f:a1:77:77:9b:f3: 15:81:cb:cf:7b:76:0e:87:79:ba:93:60:13:b5:f6: 4e:31:72:4d:83:59:5e:f9:8d:c6:d5:cb:c0:42:c5: 63:0c:8d:7f:0c:39:9d:bd:cb:dc:10:89:bf:c6:f4: 41:a0:11:cb:4d:3f:c9:e9:2f:d4:f2:80:f6:1f:54: 80:3e:4e:92:5f:f2:db:ae:a8:61:9c:62:08:00:a8: ce:f8:ea:9e:28:79:9d:18:34:5b:0e:71:74:7d:a2: de:c5:5a:4c:0c:7b:be:3d:34:5e:52:2f:6e:89:af: 4f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:85:73:49:89:BC:8D:9C:47:5E:B6:BC:6B:58:10:53:FA:02:66:B8 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/t4VzSYm8jZxHXra8a1gQU_oCZrg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.187.33.0/24 37.235.48.0/24 37.235.51.0/24 45.151.73.0-45.151.74.255 45.153.127.0/24 46.183.187.0/24 83.172.134.0-83.172.136.255 83.172.138.0/24 83.172.150.0/24 83.172.159.0/24 83.243.120.0/23 89.31.120.0/23 89.31.123.0/24 89.40.105.0/24 89.46.232.0-89.46.236.255 91.132.92.0/23 91.132.95.0/24 92.243.64.0/24 93.113.99.0/24 93.113.215.0/24 95.156.204.0/24 95.156.207.0/24 103.57.248.0/23 103.57.251.0/24 134.255.211.0/24 149.154.157.0-149.154.159.255 151.236.4.0/24 151.236.11.0/24 151.236.15.0-151.236.18.255 151.236.20.0-151.236.22.255 151.236.25.0/24 158.255.208.0/24 158.255.213.0-158.255.215.255 176.126.99.0/24 185.26.236.0/24 185.26.238.0/23 185.76.78.0/23 185.122.187.0/24 185.193.48.0/24 185.195.64.0/24 185.195.66.0/24 188.190.0.0-188.190.2.255 188.190.4.0/24 188.190.9.0/24 188.190.16.0/23 188.214.32.0/24 193.3.55.0/24 213.111.176.0/24 213.111.178.0/24 213.111.182.0-213.111.185.255 213.111.191.0/24 213.183.55.0/24 IPv6: 2a03:f80:32::/47 2a03:f80:39::/48 2a03:f80:40::/47 2a03:f80:44::-2a03:f80:49:ffff:ffff:ffff:ffff:ffff 2a03:f80:61::/48 2a03:f80:65::/48 2a03:f80:81::/48 2a03:f80:358::/48 2a03:f80:381::/48 2a03:f80:852::/48 2a03:f80:971::/48 2a03:f80:4416::/48 2a03:f80:ed51::/48 Signature Algorithm: sha256WithRSAEncryption 19:e5:70:8b:dc:60:0d:d4:a9:bb:bd:ad:57:84:ab:84:24:74: 4d:5c:91:cf:b6:6d:0d:34:8e:92:2f:51:c4:b5:ec:fd:4a:45: 80:78:1c:e6:02:9d:76:66:8a:35:69:b6:e1:14:ec:de:11:fc: 4b:f3:78:3b:22:81:29:52:1d:f7:0d:23:99:a2:29:6d:5e:24: 24:67:8d:7a:e1:84:5a:4f:85:d5:90:92:da:5f:1b:51:32:d7: 81:67:cd:24:8c:78:ae:6e:fa:8a:ab:00:09:d7:f9:c1:c8:c1: 54:56:9c:bc:58:95:33:f8:99:ab:bb:af:c2:50:ca:08:bf:05: a2:aa:81:61:6f:78:1c:e6:ba:86:72:e1:45:a8:e4:21:35:fe: 2e:de:91:e4:a1:1d:1e:4e:d3:13:aa:08:5b:7a:12:99:80:1a: 04:3f:30:84:73:22:00:91:b5:51:89:a6:69:f6:96:1f:f7:15: 3f:aa:f5:22:c9:f2:62:a6:b9:1e:1e:84:f5:1d:52:1e:40:86: 71:33:57:1e:bc:d9:2e:6e:31:dc:f9:21:61:bb:63:14:84:97: 85:4d:a5:77:af:a8:6b:64:05:de:7b:97:c9:94:5f:6b:31:c6: be:dd:29:c6:99:77:59:ca:9b:f4:6e:4b:f9:55:67:82:86:8b: b7:ec:9a:c0 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgISAZuXnJGFwO/Ja2HDP9+vimFgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwMTA3MDgzOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzg1NzM0OTg5YmM4ZDljNDc1ZWI2YmM2YjU4MTA1M2ZhMDI2NmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWFV+7/W2Nv30lBdAKnCk8CNbumz VqMHyXn26LPcu39U4cO2KzuoZLnykyKdXZ+A+xGT+u4B/2SFIe3HIxt/hEKkM/C2 R5LRSLPov4WnP2XZ95Xx8K9XfZEdec4OSpzKcg5heWhVKhpn/5PFWwIEMlUEP8TJ 35SQmdBiWFMWfPcoRanE/edBmhB3+8QW+qJvoXd3m/MVgcvPe3YOh3m6k2ATtfZO MXJNg1le+Y3G1cvAQsVjDI1/DDmdvcvcEIm/xvRBoBHLTT/J6S/U8oD2H1SAPk6S X/LbrqhhnGIIAKjO+OqeKHmdGDRbDnF0faLexVpMDHu+PTReUi9uia9PfwIDAQAB o4IEFjCCBBIwHQYDVR0OBBYEFLeFc0mJvI2cR162vGtYEFP6Ama4MB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvdDRWelNZbThqWnhIWHJhOGExZ1FVX29DWnJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICKgYIKwYBBQUHAQcBAf8EggIZMIICFTCCAYcEAgABMIIB fwMEAAW7IQMEACXrMAMEACXrMzAMAwQALZdJAwQALZdKAwQALZl/AwQALre7MAwD BAFTrIYDBABTrIgDBABTrIoDBABTrJYDBABTrJ8DBAFT83gDBAFZH3gDBABZH3sD BABZKGkwDAMEA1ku6AMEAFku7AMEAVuEXAMEAFuEXwMEAFzzQAMEAF1xYwMEAF1x 1wMEAF+czAMEAF+czwMEAWc5+AMEAGc5+wMEAIb/0zAMAwQAlZqdAwQFlZqAAwQA l+wEAwQAl+wLMAwDBACX7A8DBACX7BIwDAMEApfsFAMEAJfsFgMEAJfsGQMEAJ7/ 0DAMAwQAnv/VAwQDnv/QAwQAsH5jAwQAuRrsAwQBuRruAwQBuUxOAwQAuXq7AwQA ucEwAwQAucNAAwQAucNCMAsDAwG8vgMEALy+AgMEALy+BAMEALy+CQMEAby+EAME ALzWIAMEAMEDNwMEANVvsAMEANVvsjAMAwQB1W+2AwQB1W+4AwQA1W+/AwQA1bc3 MIGHBAIAAjCBgAMHASoDD4AAMgMHACoDD4AAOQMHASoDD4AAQDASAwcCKgMPgABE AwcBKgMPgABIAwcAKgMPgABhAwcAKgMPgABlAwcAKgMPgACBAwcAKgMPgANYAwcA KgMPgAOBAwcAKgMPgAhSAwcAKgMPgAlxAwcAKgMPgEQWAwcAKgMPgO1RMA0GCSqG SIb3DQEBCwUAA4IBAQAZ5XCL3GAN1Km7va1XhKuEJHRNXJHPtm0NNI6SL1HEtez9 SkWAeBzmAp12Zoo1abbhFOzeEfxL83g7IoEpUh33DSOZoiltXiQkZ4164YRaT4XV kJLaXxtRMteBZ80kjHiubvqKqwAJ1/nByMFUVpy8WJUz+Jmru6/CUMoIvwWiqoFh b3gc5rqGcuFFqOQhNf4u3pHkoR0eTtMTqghbehKZgBoEPzCEcyIAkbVRiaZp9pYf 9xU/qvUiyfJiprkeHoT1HVIeQIZxM1cevNkubjHc+SFhu2MUhJeFTaV3r6hrZAXe e5fJlF9rMca+3SnGmXdZypv0bkv5VWeChou37JrA -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:53 2026 by rpki-client