This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ES1lahPFgcwTztwXyOfhZ5VVmvc.roa File: ES1lahPFgcwTztwXyOfhZ5VVmvc.roa (raw, json) Hash identifier: Ew+ImBSHPbFzPIU+4Pej0vRiFBv0R3uwB1KeV4mUWqo= Subject key identifier: 11:2D:65:6A:13:C5:81:CC:13:CE:DC:17:C8:E7:E1:67:95:55:9A:F7 Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Certificate serial: 019B7E379A6F8A97833A35388E0770A2D27E Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ES1lahPFgcwTztwXyOfhZ5VVmvc.roa Signing time: Fri 02 Jan 2026 10:18:51 +0000 ROA not before: Fri 02 Jan 2026 10:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 31.131.12.0/22 maxlen: 22 31.133.24.0/22 maxlen: 22 31.133.192.0/24 maxlen: 24 31.133.193.0/24 maxlen: 24 31.133.194.0/24 maxlen: 24 31.133.195.0/24 maxlen: 24 31.133.196.0/23 maxlen: 23 31.133.198.0/24 maxlen: 24 31.133.199.0/24 maxlen: 24 31.135.1.0/24 maxlen: 24 31.135.7.0/24 maxlen: 24 37.97.122.0/23 maxlen: 23 64.43.66.0/23 maxlen: 23 64.43.68.0/22 maxlen: 22 64.43.80.0/21 maxlen: 21 77.36.4.0/22 maxlen: 22 77.36.8.0/21 maxlen: 21 77.36.28.0/23 maxlen: 23 77.36.30.0/24 maxlen: 24 77.36.32.0/22 maxlen: 22 77.36.36.0/23 maxlen: 23 77.36.38.0/23 maxlen: 23 77.36.40.0/21 maxlen: 21 77.36.48.0/22 maxlen: 22 77.36.52.0/23 maxlen: 23 77.36.57.0/24 maxlen: 24 77.36.60.0/24 maxlen: 24 77.36.65.0/24 maxlen: 24 77.36.68.0/22 maxlen: 22 77.36.80.0/21 maxlen: 21 77.36.89.0/24 maxlen: 24 77.36.90.0/23 maxlen: 23 77.36.92.0/22 maxlen: 22 77.36.96.0/20 maxlen: 20 77.232.192.0/23 maxlen: 24 77.232.194.0/23 maxlen: 23 77.232.196.0/22 maxlen: 22 77.232.200.0/22 maxlen: 22 77.232.204.0/22 maxlen: 22 77.232.208.0/21 maxlen: 21 77.232.220.0/22 maxlen: 22 81.161.12.0/22 maxlen: 22 85.204.196.0/23 maxlen: 24 86.104.132.0/23 maxlen: 24 89.34.74.0/23 maxlen: 24 89.42.232.0/23 maxlen: 24 89.44.100.0/23 maxlen: 24 89.45.92.0/23 maxlen: 24 89.46.112.0/23 maxlen: 24 91.218.252.0/23 maxlen: 23 91.218.254.0/23 maxlen: 23 91.223.158.0/24 maxlen: 24 91.225.34.0/24 maxlen: 24 91.225.35.0/24 maxlen: 24 91.228.119.0/24 maxlen: 24 91.229.6.0/24 maxlen: 24 91.229.16.0/23 maxlen: 23 91.229.31.0/24 maxlen: 24 91.229.156.0/23 maxlen: 23 91.229.158.0/24 maxlen: 24 91.229.159.0/24 maxlen: 24 91.231.223.0/24 maxlen: 24 91.231.224.0/23 maxlen: 23 91.231.226.0/24 maxlen: 24 91.232.16.0/23 maxlen: 23 91.232.254.0/24 maxlen: 24 91.233.2.0/23 maxlen: 23 91.233.202.0/23 maxlen: 23 91.234.150.0/23 maxlen: 23 91.234.220.0/23 maxlen: 23 91.234.222.0/23 maxlen: 23 91.236.77.0/24 maxlen: 24 91.236.237.0/24 maxlen: 24 91.237.48.0/24 maxlen: 24 91.239.0.0/22 maxlen: 22 91.239.178.0/24 maxlen: 24 91.239.222.0/23 maxlen: 23 91.240.156.0/22 maxlen: 22 91.245.176.0/21 maxlen: 21 91.246.184.0/22 maxlen: 22 91.246.188.0/22 maxlen: 22 91.246.196.0/22 maxlen: 22 93.120.8.0/24 maxlen: 24 93.120.9.0/24 maxlen: 24 93.120.12.0/22 maxlen: 22 93.120.27.0/24 maxlen: 24 93.120.28.0/23 maxlen: 23 93.120.30.0/24 maxlen: 24 93.120.46.0/24 maxlen: 24 93.120.48.0/20 maxlen: 20 93.120.64.0/21 maxlen: 21 93.120.74.0/24 maxlen: 24 93.120.75.0/24 maxlen: 24 93.120.76.0/22 maxlen: 22 93.120.80.0/22 maxlen: 22 93.120.85.0/24 maxlen: 24 93.120.86.0/23 maxlen: 23 93.120.88.0/23 maxlen: 23 93.120.90.0/24 maxlen: 24 93.120.92.0/23 maxlen: 23 93.120.94.0/23 maxlen: 23 93.120.112.0/21 maxlen: 21 93.120.120.0/22 maxlen: 22 93.120.124.0/22 maxlen: 22 109.207.140.0/23 maxlen: 23 171.25.223.0/24 maxlen: 24 176.96.48.0/22 maxlen: 22 176.96.56.0/21 maxlen: 21 176.96.93.0/24 maxlen: 24 176.96.176.0/22 maxlen: 22 176.96.180.0/22 maxlen: 22 176.97.144.0/22 maxlen: 22 176.97.148.0/22 maxlen: 22 176.98.56.0/22 maxlen: 22 176.98.60.0/22 maxlen: 22 176.107.64.0/20 maxlen: 24 176.107.72.0/21 maxlen: 21 176.110.106.0/24 maxlen: 24 176.110.114.0/23 maxlen: 23 176.111.0.0/22 maxlen: 22 176.111.4.0/22 maxlen: 22 176.112.84.0/22 maxlen: 22 176.116.40.0/21 maxlen: 21 176.118.88.0/22 maxlen: 22 176.118.92.0/22 maxlen: 22 176.121.96.0/21 maxlen: 21 176.124.176.0/22 maxlen: 22 176.124.180.0/22 maxlen: 22 178.159.147.0/24 maxlen: 24 178.159.148.0/22 maxlen: 22 178.159.152.0/21 maxlen: 21 185.9.236.0/22 maxlen: 22 185.9.240.0/22 maxlen: 22 185.104.196.0/22 maxlen: 24 188.191.248.0/22 maxlen: 22 188.191.252.0/22 maxlen: 22 188.213.233.0/24 maxlen: 24 193.0.190.0/24 maxlen: 24 193.36.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:9a:6f:8a:97:83:3a:35:38:8e:07:70:a2:d2:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Validity Not Before: Jan 2 10:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=112d656a13c581cc13cedc17c8e7e16795559af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2b:6d:31:88:60:e3:c1:db:67:9f:87:3d:97: fb:41:1c:5f:e7:1b:a3:de:3b:b9:d1:8b:51:35:c0: 3f:cb:bc:04:c0:53:5d:1d:04:6d:6d:17:45:29:d3: bd:d5:84:7c:76:20:77:47:ab:57:c5:09:00:78:b7: 7a:2c:29:52:20:80:1b:27:87:86:dc:45:5d:30:a1: 04:19:9e:e9:cc:a1:e2:a8:7a:e8:dd:fb:49:5f:de: 02:30:9b:62:4e:1f:dd:d9:28:04:f0:96:f0:93:a4: 69:7a:66:75:c3:59:5f:b1:73:09:4f:9f:c3:9c:fd: a7:76:23:8d:7f:60:05:a4:88:96:8c:e3:9d:31:21: 76:db:03:fd:64:82:f8:cd:8e:33:5c:4d:0b:1f:36: 75:06:54:19:f4:b9:c5:54:6f:23:44:17:b3:da:8c: 12:03:94:b1:8f:42:0b:42:69:d5:7a:85:24:eb:68: f6:51:ae:e9:41:c7:c9:b6:2f:33:33:d1:cb:61:4e: d2:49:be:e8:c6:ec:de:28:8f:23:a0:89:9a:20:f8: 5c:69:47:c4:d1:3c:b2:a1:a0:46:2b:96:18:4c:07: f0:50:c2:0f:98:e1:d4:d3:90:61:17:6e:ea:92:43: 3b:3b:ef:8c:ff:e5:c6:7c:d7:3d:d7:18:9a:58:29: 5f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:2D:65:6A:13:C5:81:CC:13:CE:DC:17:C8:E7:E1:67:95:55:9A:F7 X509v3 Authority Key Identifier: keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ES1lahPFgcwTztwXyOfhZ5VVmvc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.131.12.0/22 31.133.24.0/22 31.133.192.0/21 31.135.1.0/24 31.135.7.0/24 37.97.122.0/23 64.43.66.0-64.43.71.255 64.43.80.0/21 77.36.4.0-77.36.15.255 77.36.28.0-77.36.30.255 77.36.32.0-77.36.53.255 77.36.57.0/24 77.36.60.0/24 77.36.65.0/24 77.36.68.0/22 77.36.80.0/21 77.36.89.0-77.36.111.255 77.232.192.0-77.232.215.255 77.232.220.0/22 81.161.12.0/22 85.204.196.0/23 86.104.132.0/23 89.34.74.0/23 89.42.232.0/23 89.44.100.0/23 89.45.92.0/23 89.46.112.0/23 91.218.252.0/22 91.223.158.0/24 91.225.34.0/23 91.228.119.0/24 91.229.6.0/24 91.229.16.0/23 91.229.31.0/24 91.229.156.0/22 91.231.223.0-91.231.226.255 91.232.16.0/23 91.232.254.0/24 91.233.2.0/23 91.233.202.0/23 91.234.150.0/23 91.234.220.0/22 91.236.77.0/24 91.236.237.0/24 91.237.48.0/24 91.239.0.0/22 91.239.178.0/24 91.239.222.0/23 91.240.156.0/22 91.245.176.0/21 91.246.184.0/21 91.246.196.0/22 93.120.8.0/23 93.120.12.0/22 93.120.27.0-93.120.30.255 93.120.46.0/24 93.120.48.0-93.120.71.255 93.120.74.0-93.120.83.255 93.120.85.0-93.120.90.255 93.120.92.0/22 93.120.112.0/20 109.207.140.0/23 171.25.223.0/24 176.96.48.0/22 176.96.56.0/21 176.96.93.0/24 176.96.176.0/21 176.97.144.0/21 176.98.56.0/21 176.107.64.0/20 176.110.106.0/24 176.110.114.0/23 176.111.0.0/21 176.112.84.0/22 176.116.40.0/21 176.118.88.0/21 176.121.96.0/21 176.124.176.0/21 178.159.147.0-178.159.159.255 185.9.236.0-185.9.243.255 185.104.196.0/22 188.191.248.0/21 188.213.233.0/24 193.0.190.0/24 193.36.192.0/21 Signature Algorithm: sha256WithRSAEncryption 65:3c:ed:60:aa:22:2c:45:c7:f7:f6:df:bd:91:d8:99:e4:41: 8f:d4:86:db:be:5e:85:c7:3e:de:f4:7a:d2:b4:b4:3b:8a:40: 7b:cb:68:97:19:85:3e:9b:64:23:ac:27:21:f8:06:b0:86:7d: d4:56:9b:12:ef:b4:9c:1e:85:b6:ba:3c:4a:80:4d:d5:35:1e: 56:67:ed:80:3a:3a:26:f5:d6:d4:2d:0c:e8:fb:a0:74:cd:6f: eb:60:29:a6:9b:85:88:4d:bc:54:3c:e0:b0:41:fe:1f:76:f5: e9:7c:6c:8f:08:b4:4d:f0:ef:ab:c1:db:5d:27:c5:0a:ae:69: 69:6d:6f:9f:9f:d2:32:bb:63:fe:27:80:fb:07:3d:78:ef:d1: 9b:48:7b:b1:01:79:19:d4:2e:59:f0:b1:ec:61:de:15:bf:1a: 16:8b:a4:a1:47:a8:65:cf:3d:66:7b:e3:50:65:95:c4:40:98: 49:c0:e1:7c:3e:de:7f:c9:11:76:c5:f2:10:9f:9e:b2:6a:77: e9:8c:97:8a:06:d8:bf:db:68:d7:30:72:7b:f0:f7:23:45:d0: 4c:19:70:95:8f:6c:90:42:10:cb:84:42:76:fd:cd:b7:ea:67: d5:0d:3b:4b:7b:52:01:48:56:6c:84:0b:08:e7:d7:f8:ba:88: 57:53:4a:1f -----BEGIN CERTIFICATE----- MIIHZzCCBk+gAwIBAgISAZt+N5pvipeDOjU4jgdwotJ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy MjRkYWEwHhcNMjYwMTAyMTAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTJkNjU2YTEzYzU4MWNjMTNjZWRjMTdjOGU3ZTE2Nzk1NTU5YWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyittMYhg48HbZ5+HPZf7QRxf5xuj 3ju50YtRNcA/y7wEwFNdHQRtbRdFKdO91YR8diB3R6tXxQkAeLd6LClSIIAbJ4eG 3EVdMKEEGZ7pzKHiqHro3ftJX94CMJtiTh/d2SgE8Jbwk6RpemZ1w1lfsXMJT5/D nP2ndiONf2AFpIiWjOOdMSF22wP9ZIL4zY4zXE0LHzZ1BlQZ9LnFVG8jRBez2owS A5Sxj0ILQmnVeoUk62j2Ua7pQcfJti8zM9HLYU7SSb7oxuzeKI8joImaIPhcaUfE 0TyyoaBGK5YYTAfwUMIPmOHU05BhF27qkkM7O++M/+XGfNc91xiaWClfRQIDAQAB o4IEczCCBG8wHQYDVR0OBBYEFBEtZWoTxYHME87cF8jn4WeVVZr3MB8GA1UdIwQY MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt ZGMwNmRkODA1OTYwLzEvRVMxbGFoUEZnY3dUenR3WHlPZmhaNVZWbXZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIChwYIKwYBBQUHAQcBAf8EggJ2MIICcjCCAm4EAgABMIIC ZgMEAh+DDAMEAh+FGAMEAx+FwAMEAB+HAQMEAB+HBwMEASVhejAMAwQBQCtCAwQD QCtAAwQDQCtQMAwDBAJNJAQDBARNJAAwDAMEAk0kHAMEAE0kHjAMAwQFTSQgAwQB TSQ0AwQATSQ5AwQATSQ8AwQATSRBAwQCTSREAwQDTSRQMAwDBABNJFkDBARNJGAw DAMEBk3owAMEA03o0AMEAk3o3AMEAlGhDAMEAVXMxAMEAVZohAMEAVkiSgMEAVkq 6AMEAVksZAMEAVktXAMEAVkucAMEAlva/AMEAFvfngMEAVvhIgMEAFvkdwMEAFvl BgMEAVvlEAMEAFvlHwMEAlvlnDAMAwQAW+ffAwQAW+fiAwQBW+gQAwQAW+j+AwQB W+kCAwQBW+nKAwQBW+qWAwQCW+rcAwQAW+xNAwQAW+ztAwQAW+0wAwQCW+8AAwQA W++yAwQBW+/eAwQCW/CcAwQDW/WwAwQDW/a4AwQCW/bEAwQBXXgIAwQCXXgMMAwD BABdeBsDBABdeB4DBABdeC4wDAMEBF14MAMEA114QDAMAwQBXXhKAwQCXXhQMAwD BABdeFUDBABdeFoDBAJdeFwDBARdeHADBAFtz4wDBACrGd8DBAKwYDADBAOwYDgD BACwYF0DBAOwYLADBAOwYZADBAOwYjgDBASwa0ADBACwbmoDBAGwbnIDBAOwbwAD BAKwcFQDBAOwdCgDBAOwdlgDBAOweWADBAOwfLAwDAMEALKfkwMEBbKfgDAMAwQC uQnsAwQCuQnwAwQCuWjEAwQDvL/4AwQAvNXpAwQAwQC+AwQDwSTAMA0GCSqGSIb3 DQEBCwUAA4IBAQBlPO1gqiIsRcf39t+9kdiZ5EGP1Ibbvl6Fxz7e9HrStLQ7ikB7 y2iXGYU+m2QjrCch+Aawhn3UVpsS77ScHoW2ujxKgE3VNR5WZ+2AOjom9dbULQzo +6B0zW/rYCmmm4WITbxUPOCwQf4fdvXpfGyPCLRN8O+rwdtdJ8UKrmlpbW+fn9Iy u2P+J4D7Bz1479GbSHuxAXkZ1C5Z8LHsYd4VvxoWi6ShR6hlzz1me+NQZZXEQJhJ wOF8Pt5/yRF2xfIQn56yanfpjJeKBti/22jXMHJ78PcjRdBMGXCVj2yQQhDLhEJ2 /c236mfVDTtLe1IBSFZshAsI59f4uohXU0of -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:50 2026 by rpki-client