This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/4B2JkYmQs_-m_nnV_7swcK7b--s.roa File: 4B2JkYmQs_-m_nnV_7swcK7b--s.roa (raw, json) Hash identifier: Bm/l+HyUelHjWz2prLMdplFvCXKepDLUK6QD7+lJYts= Subject key identifier: E0:1D:89:91:89:90:B3:FF:A6:FE:79:D5:FF:BB:30:70:AE:DB:FB:EB Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E381BAF1DFC4C6CA5893759B65214E2 Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/4B2JkYmQs_-m_nnV_7swcK7b--s.roa Signing time: Fri 02 Jan 2026 10:19:24 +0000 ROA not before: Fri 02 Jan 2026 10:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34665 IP address blocks: 5.8.0.0/21 maxlen: 22 5.8.8.0/22 maxlen: 22 5.8.8.0/23 maxlen: 23 5.8.8.0/24 maxlen: 24 5.8.9.0/24 maxlen: 24 5.8.10.0/23 maxlen: 23 5.8.10.0/24 maxlen: 24 5.8.11.0/24 maxlen: 24 5.8.12.0/22 maxlen: 22 5.8.16.0/24 maxlen: 24 5.8.48.0/22 maxlen: 22 5.8.48.0/23 maxlen: 23 5.8.48.0/24 maxlen: 24 5.8.49.0/24 maxlen: 24 5.8.50.0/23 maxlen: 23 5.8.50.0/24 maxlen: 24 5.8.51.0/24 maxlen: 24 5.8.52.0/22 maxlen: 22 5.8.52.0/23 maxlen: 23 5.8.52.0/24 maxlen: 24 5.8.53.0/24 maxlen: 24 5.8.54.0/23 maxlen: 23 5.8.54.0/24 maxlen: 24 5.8.55.0/24 maxlen: 24 5.8.60.0/23 maxlen: 23 5.8.65.0/24 maxlen: 24 5.8.66.0/23 maxlen: 23 5.101.0.0/22 maxlen: 22 5.101.0.0/23 maxlen: 23 5.101.0.0/24 maxlen: 24 5.101.1.0/24 maxlen: 24 5.101.2.0/23 maxlen: 23 5.101.2.0/24 maxlen: 24 5.101.3.0/24 maxlen: 24 5.101.4.0/22 maxlen: 22 5.101.4.0/23 maxlen: 23 5.101.4.0/24 maxlen: 24 5.101.5.0/24 maxlen: 24 5.101.6.0/23 maxlen: 23 5.101.6.0/24 maxlen: 24 5.101.7.0/24 maxlen: 24 5.101.32.0/22 maxlen: 24 5.101.47.0/24 maxlen: 24 5.101.64.0/22 maxlen: 22 5.101.64.0/23 maxlen: 23 5.101.64.0/24 maxlen: 24 5.101.65.0/24 maxlen: 24 5.101.66.0/23 maxlen: 23 5.101.66.0/24 maxlen: 24 5.101.67.0/24 maxlen: 24 5.101.90.0/23 maxlen: 23 5.188.10.0/23 maxlen: 23 5.188.44.0/22 maxlen: 22 5.188.44.0/23 maxlen: 23 5.188.44.0/24 maxlen: 24 5.188.45.0/24 maxlen: 24 5.188.46.0/23 maxlen: 23 5.188.46.0/24 maxlen: 24 5.188.47.0/24 maxlen: 24 5.188.48.0/23 maxlen: 23 5.188.49.0/24 maxlen: 24 5.188.204.0/23 maxlen: 23 5.188.208.0/23 maxlen: 23 5.188.210.0/24 maxlen: 24 5.188.211.0/24 maxlen: 24 5.188.223.0/24 maxlen: 24 5.188.233.0/24 maxlen: 24 5.188.234.0/23 maxlen: 23 5.189.248.0/22 maxlen: 24 31.44.188.0/22 maxlen: 32 31.184.192.0/22 maxlen: 22 31.184.192.0/23 maxlen: 23 31.184.192.0/24 maxlen: 24 31.184.193.0/24 maxlen: 24 31.184.194.0/23 maxlen: 23 31.184.194.0/24 maxlen: 24 31.184.195.0/24 maxlen: 24 31.184.196.0/22 maxlen: 22 31.184.196.0/23 maxlen: 23 31.184.196.0/24 maxlen: 24 31.184.197.0/24 maxlen: 24 31.184.198.0/23 maxlen: 23 31.184.198.0/24 maxlen: 24 31.184.199.0/24 maxlen: 24 31.184.238.0/23 maxlen: 23 31.184.240.0/23 maxlen: 23 31.184.243.0/24 maxlen: 24 37.9.48.0/24 maxlen: 24 37.139.53.0/24 maxlen: 24 37.139.56.0/22 maxlen: 22 37.139.56.0/23 maxlen: 23 37.139.56.0/24 maxlen: 24 37.139.57.0/24 maxlen: 24 37.139.58.0/23 maxlen: 23 37.139.58.0/24 maxlen: 24 37.139.59.0/24 maxlen: 24 46.161.2.0/23 maxlen: 23 46.161.8.0/24 maxlen: 24 46.161.10.0/24 maxlen: 24 46.161.14.0/23 maxlen: 23 46.161.20.0/22 maxlen: 22 46.161.28.0/22 maxlen: 22 46.161.32.0/22 maxlen: 22 46.161.44.0/22 maxlen: 22 46.161.48.0/22 maxlen: 22 46.161.48.0/23 maxlen: 23 46.161.48.0/24 maxlen: 24 46.161.49.0/24 maxlen: 24 46.161.50.0/23 maxlen: 23 46.161.50.0/24 maxlen: 24 46.161.51.0/24 maxlen: 24 91.243.32.0/22 maxlen: 22 91.243.48.0/22 maxlen: 22 91.243.48.0/23 maxlen: 23 91.243.48.0/24 maxlen: 24 91.243.49.0/24 maxlen: 24 91.243.50.0/23 maxlen: 23 91.243.50.0/24 maxlen: 24 91.243.51.0/24 maxlen: 24 91.243.52.0/22 maxlen: 22 91.243.56.0/22 maxlen: 22 91.243.60.0/24 maxlen: 24 91.243.61.0/24 maxlen: 24 95.215.0.0/22 maxlen: 24 95.215.0.0/23 maxlen: 23 95.215.0.0/24 maxlen: 24 95.215.1.0/24 maxlen: 24 95.215.2.0/23 maxlen: 23 95.215.2.0/24 maxlen: 24 95.215.3.0/24 maxlen: 24 146.185.223.0/24 maxlen: 24 146.185.224.0/21 maxlen: 21 188.143.232.0/22 maxlen: 22 188.143.232.0/23 maxlen: 23 188.143.232.0/24 maxlen: 24 188.143.233.0/24 maxlen: 24 188.143.235.0/24 maxlen: 24 195.2.240.0/23 maxlen: 24 2a00:1d78:100:1c0::/58 maxlen: 58 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:1b:af:1d:fc:4c:6c:a5:89:37:59:b6:52:14:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e01d89918990b3ffa6fe79d5ffbb3070aedbfbeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f5:89:20:85:f5:25:f1:46:c0:2c:6c:6d:8f: 2b:17:7d:9f:11:9f:7d:67:51:87:3d:df:df:ce:24: 72:8d:04:18:95:61:7d:7f:00:57:16:86:a1:4c:fb: 4a:5d:67:21:f2:36:a0:03:90:44:f3:01:ce:7d:52: 42:d1:f5:0b:f2:56:f0:82:8f:fe:3b:bc:10:25:18: 35:6a:3d:3e:c7:6f:21:75:4b:42:2d:7c:7f:ab:ea: 64:96:04:6b:92:68:82:48:6e:81:55:3e:a2:f6:57: b4:95:73:29:8a:79:28:a3:65:67:3a:ac:04:f4:0b: e2:ea:5a:12:f9:0e:cc:97:63:d8:14:f6:ad:f4:34: 50:e0:d7:db:11:06:a7:9a:0c:e7:8a:97:36:50:d1: ea:b1:a5:5d:57:a6:b1:01:02:45:4b:4e:d4:68:18: 1a:da:3a:eb:aa:9a:5d:4e:84:5b:01:52:eb:86:08: e0:b4:0d:b5:95:92:1c:eb:85:36:a2:ac:16:a0:59: 0a:52:6e:45:27:da:da:de:7a:b0:9f:f1:08:84:19: c1:1f:04:a4:d9:1d:2b:84:0d:46:b8:a5:8c:21:b9: c3:ec:33:aa:19:8f:dd:ee:c9:8e:bc:5f:c5:e5:9f: 3c:b1:c8:7b:4d:c3:18:ff:97:36:6f:ae:18:96:b0: 0a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:1D:89:91:89:90:B3:FF:A6:FE:79:D5:FF:BB:30:70:AE:DB:FB:EB X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/4B2JkYmQs_-m_nnV_7swcK7b--s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.8.0.0-5.8.16.255 5.8.48.0/21 5.8.60.0/23 5.8.65.0-5.8.67.255 5.101.0.0/21 5.101.32.0/22 5.101.47.0/24 5.101.64.0/22 5.101.90.0/23 5.188.10.0/23 5.188.44.0-5.188.49.255 5.188.204.0/23 5.188.208.0/22 5.188.223.0/24 5.188.233.0-5.188.235.255 5.189.248.0/22 31.44.188.0/22 31.184.192.0/21 31.184.238.0-31.184.241.255 31.184.243.0/24 37.9.48.0/24 37.139.53.0/24 37.139.56.0/22 46.161.2.0/23 46.161.8.0/24 46.161.10.0/24 46.161.14.0/23 46.161.20.0/22 46.161.28.0-46.161.35.255 46.161.44.0-46.161.51.255 91.243.32.0/22 91.243.48.0-91.243.61.255 95.215.0.0/22 146.185.223.0-146.185.231.255 188.143.232.0/22 195.2.240.0/23 IPv6: 2a00:1d78:100:1c0::/58 Signature Algorithm: sha256WithRSAEncryption a1:05:6e:2c:af:f0:95:d5:87:d5:a3:98:25:8d:a2:d3:50:b2: c8:47:1c:16:a9:d0:52:b0:46:04:ef:51:77:39:89:c8:45:67: c6:84:b8:ce:1e:63:a0:1b:c1:77:79:74:60:06:d9:eb:9f:e6: 2f:61:30:6e:07:54:de:d6:7d:73:28:21:60:a0:40:ee:85:72: a7:59:ae:9d:d0:40:2b:52:7f:27:08:4d:fd:c2:15:c6:d9:c5: 27:14:57:92:b6:cc:76:ea:2f:a4:19:dd:1a:d7:7e:1e:2a:04: cd:e1:90:ed:2e:92:71:f2:e8:ed:58:0e:b4:63:b5:f6:c2:42: 3a:85:41:1c:3c:e9:5c:b8:af:69:31:d0:75:70:ce:77:95:47: 66:a4:13:b6:dc:8f:f0:70:da:89:f4:22:22:9b:b2:8c:71:36: e1:59:8a:a0:18:e8:13:cb:8b:74:20:f3:a5:61:0a:bf:6f:c0: ed:4a:3b:49:9e:6e:ed:2b:28:de:23:a8:4a:48:ba:19:cc:c0: e2:2c:b4:27:b9:db:e8:01:22:4d:51:dc:d0:4f:5a:30:03:6d: ea:9c:67:70:29:32:7a:de:88:5e:19:7a:bf:a4:bb:6b:cd:84: 50:be:d9:90:28:80:e0:5f:5c:f7:72:76:b5:82:a1:22:d6:30: de:d4:17:8d -----BEGIN CERTIFICATE----- MIIGMzCCBRugAwIBAgISAZt+OBuvHfxMbKWJN1m2UhTiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDFkODk5MTg5OTBiM2ZmYTZmZTc5ZDVmZmJiMzA3MGFlZGJmYmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfWJIIX1JfFGwCxsbY8rF32fEZ99 Z1GHPd/fziRyjQQYlWF9fwBXFoahTPtKXWch8jagA5BE8wHOfVJC0fUL8lbwgo/+ O7wQJRg1aj0+x28hdUtCLXx/q+pklgRrkmiCSG6BVT6i9le0lXMpinkoo2VnOqwE 9Avi6loS+Q7Ml2PYFPat9DRQ4NfbEQanmgznipc2UNHqsaVdV6axAQJFS07UaBga 2jrrqppdToRbAVLrhgjgtA21lZIc64U2oqwWoFkKUm5FJ9ra3nqwn/EIhBnBHwSk 2R0rhA1GuKWMIbnD7DOqGY/d7smOvF/F5Z88sch7TcMY/5c2b64YlrAKfwIDAQAB o4IDPzCCAzswHQYDVR0OBBYEFOAdiZGJkLP/pv551f+7MHCu2/vrMB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvNEIySmtZbVFzXy1tX25uVl83c3djSzdiLS1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBUwYIKwYBBQUHAQcBAf8EggFCMIIBPjCCAScEAgABMIIB HzALAwMDBQgDBAAFCBADBAMFCDADBAEFCDwwDAMEAAUIQQMEAgUIQAMEAwVlAAME AgVlIAMEAAVlLwMEAgVlQAMEAQVlWgMEAQW8CjAMAwQCBbwsAwQBBbwwAwQBBbzM AwQCBbzQAwQABbzfMAwDBAAFvOkDBAIFvOgDBAIFvfgDBAIfLLwDBAMfuMAwDAME AR+47gMEAR+48AMEAB+48wMEACUJMAMEACWLNQMEAiWLOAMEAS6hAgMEAC6hCAME AC6hCgMEAS6hDgMEAi6hFDAMAwQCLqEcAwQCLqEgMAwDBAIuoSwDBAIuoTADBAJb 8yAwDAMEBFvzMAMEAVvzPAMEAl/XADAMAwQAkrnfAwQDkrngAwQCvI/oAwQBwwLw MBEEAgACMAsDCQYqAB14AQABwDANBgkqhkiG9w0BAQsFAAOCAQEAoQVuLK/wldWH 1aOYJY2i01CyyEccFqnQUrBGBO9RdzmJyEVnxoS4zh5joBvBd3l0YAbZ65/mL2Ew bgdU3tZ9cyghYKBA7oVyp1mundBAK1J/JwhN/cIVxtnFJxRXkrbMduovpBndGtd+ HioEzeGQ7S6ScfLo7VgOtGO19sJCOoVBHDzpXLivaTHQdXDOd5VHZqQTttyP8HDa ifQiIpuyjHE24VmKoBjoE8uLdCDzpWEKv2/A7Uo7SZ5u7Sso3iOoSki6GczA4iy0 J7nb6AEiTVHc0E9aMANt6pxncCkyet6IXhl6v6S7a82EUL7ZkCiA4F9c93J2tYKh ItYw3tQXjQ== -----END CERTIFICATE-----Generated at Tue Jan 20 09:21:46 2026 by rpki-client