This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/vtlW7KcHy2quDtxiMcXh5ACZAJE.roa File: vtlW7KcHy2quDtxiMcXh5ACZAJE.roa (raw, json) Hash identifier: jwkMxNX7GEGE3hAf5FaeLuIWqkCqM1RbyuM2bownKWE= Subject key identifier: BE:D9:56:EC:A7:07:CB:6A:AE:0E:DC:62:31:C5:E1:E4:00:99:00:91 Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Certificate serial: 019B79ED35344C973DAEACA8633E112E9294 Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/vtlW7KcHy2quDtxiMcXh5ACZAJE.roa Signing time: Thu 01 Jan 2026 14:19:07 +0000 ROA not before: Thu 01 Jan 2026 14:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 719 IP address blocks: 31.7.16.0/20 maxlen: 20 46.182.112.0/21 maxlen: 21 62.142.0.0/16 maxlen: 16 62.148.192.0/19 maxlen: 19 62.216.96.0/19 maxlen: 19 62.240.64.0/19 maxlen: 19 62.248.128.0/17 maxlen: 17 77.109.192.0/18 maxlen: 18 80.81.160.0/19 maxlen: 19 80.88.176.0/20 maxlen: 20 80.186.0.0/16 maxlen: 16 80.248.96.0/19 maxlen: 19 81.197.0.0/16 maxlen: 16 81.209.0.0/17 maxlen: 17 82.103.192.0/18 maxlen: 18 82.118.192.0/19 maxlen: 19 82.141.64.0/18 maxlen: 18 82.215.192.0/18 maxlen: 18 83.245.128.0/17 maxlen: 17 84.230.0.0/15 maxlen: 15 85.76.0.0/14 maxlen: 14 85.156.0.0/16 maxlen: 16 85.157.0.0/16 maxlen: 16 85.217.0.0/17 maxlen: 17 88.112.0.0/14 maxlen: 14 91.152.0.0/13 maxlen: 13 94.22.0.0/16 maxlen: 16 109.232.80.0/21 maxlen: 21 139.97.0.0/16 maxlen: 16 178.251.56.0/21 maxlen: 21 192.77.120.0/22 maxlen: 22 192.102.32.0/24 maxlen: 24 192.102.36.0/24 maxlen: 24 192.102.37.0/24 maxlen: 24 192.102.38.0/24 maxlen: 24 192.102.39.0/24 maxlen: 24 192.102.40.0/24 maxlen: 24 192.102.41.0/24 maxlen: 24 192.102.42.0/24 maxlen: 24 192.102.49.0/24 maxlen: 24 192.102.50.0/24 maxlen: 24 192.126.1.0/24 maxlen: 24 192.126.23.0/24 maxlen: 24 192.126.24.0/24 maxlen: 24 192.126.35.0/24 maxlen: 24 192.126.44.0/24 maxlen: 24 192.126.46.0/24 maxlen: 24 192.163.32.0/19 maxlen: 19 192.163.64.0/18 maxlen: 18 192.163.128.0/19 maxlen: 19 192.175.45.0/24 maxlen: 24 193.64.0.0/15 maxlen: 15 193.66.0.0/16 maxlen: 16 193.94.0.0/16 maxlen: 16 193.184.0.0/15 maxlen: 15 193.199.0.0/16 maxlen: 16 193.229.0.0/16 maxlen: 16 194.86.0.0/16 maxlen: 16 194.136.0.0/16 maxlen: 16 194.157.0.0/16 maxlen: 16 194.188.0.0/16 maxlen: 16 194.211.0.0/16 maxlen: 16 194.240.0.0/15 maxlen: 15 195.16.192.0/19 maxlen: 19 195.74.0.0/19 maxlen: 19 195.170.128.0/19 maxlen: 19 195.197.0.0/16 maxlen: 16 195.218.64.0/19 maxlen: 19 195.236.0.0/15 maxlen: 15 195.238.192.0/19 maxlen: 19 195.255.0.0/16 maxlen: 16 212.38.224.0/20 maxlen: 20 212.38.240.0/24 maxlen: 24 212.38.241.0/24 maxlen: 24 212.38.242.0/24 maxlen: 24 212.38.243.0/24 maxlen: 24 212.38.244.0/24 maxlen: 24 212.50.192.0/19 maxlen: 19 212.54.0.0/19 maxlen: 19 212.63.0.0/19 maxlen: 19 212.226.0.0/16 maxlen: 16 212.246.0.0/16 maxlen: 16 213.130.224.0/19 maxlen: 19 213.161.32.0/19 maxlen: 19 213.169.0.0/19 maxlen: 19 213.192.128.0/18 maxlen: 18 213.250.64.0/18 maxlen: 18 217.24.96.0/20 maxlen: 20 217.25.96.0/20 maxlen: 20 217.77.192.0/20 maxlen: 20 217.152.0.0/16 maxlen: 16 2001:671::/48 maxlen: 48 2001:671:1::/48 maxlen: 48 2001:671:fc00::/40 maxlen: 40 2001:671:fd00::/40 maxlen: 40 2001:671:fe00::/40 maxlen: 40 2001:671:ff00::/40 maxlen: 40 2001:998::/29 maxlen: 32 2001:9f0::/29 maxlen: 29 2001:1658::/29 maxlen: 29 2a00:1dd0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:35:34:4c:97:3d:ae:ac:a8:63:3e:11:2e:92:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Validity Not Before: Jan 1 14:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bed956eca707cb6aae0edc6231c5e1e400990091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cb:c9:3e:0d:d2:99:95:a0:fc:1f:5d:83:c3: 7a:64:be:fc:1b:1f:de:8b:74:93:4a:fa:0c:57:23: 1b:e7:ff:c7:a9:9f:c6:25:e0:76:ab:f7:33:5b:57: 08:3a:e7:85:cd:0d:fc:ce:4b:2c:d2:e5:de:9e:2a: 3f:86:3f:49:60:48:92:87:bc:d5:e8:64:e6:b2:fb: 7f:02:75:0c:7e:7d:03:82:9b:b2:c1:fb:26:65:dd: 4c:8b:28:4b:d6:47:42:b8:80:ab:61:3f:f1:6d:f5: cf:06:bf:58:e2:49:57:74:00:7b:cc:cf:48:fa:e0: 7d:b4:71:9c:59:27:fe:a8:da:3d:e2:bf:15:d5:b7: ff:44:85:b6:57:34:9b:24:3b:88:4d:dd:46:73:99: 02:38:b2:e9:2a:39:52:b6:b0:b3:00:aa:a5:4c:70: c0:50:79:b8:e8:55:f6:51:1a:e0:6f:8b:27:ba:0b: b7:ee:e9:53:91:8f:3c:1b:c2:9a:af:73:9b:40:ca: e5:11:e7:7b:10:83:a1:57:19:87:75:07:24:fe:0f: 63:f6:82:d1:7f:07:af:83:48:f6:a8:f8:12:78:cc: a5:70:77:bf:16:22:30:bd:d7:0b:96:91:aa:37:73: bd:fa:ca:97:cd:f3:4f:e9:b2:2c:9e:e4:7a:88:b1: ab:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D9:56:EC:A7:07:CB:6A:AE:0E:DC:62:31:C5:E1:E4:00:99:00:91 X509v3 Authority Key Identifier: keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/vtlW7KcHy2quDtxiMcXh5ACZAJE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.7.16.0/20 46.182.112.0/21 62.142.0.0/16 62.148.192.0/19 62.216.96.0/19 62.240.64.0/19 62.248.128.0/17 77.109.192.0/18 80.81.160.0/19 80.88.176.0/20 80.186.0.0/16 80.248.96.0/19 81.197.0.0/16 81.209.0.0/17 82.103.192.0/18 82.118.192.0/19 82.141.64.0/18 82.215.192.0/18 83.245.128.0/17 84.230.0.0/15 85.76.0.0/14 85.156.0.0/15 85.217.0.0/17 88.112.0.0/14 91.152.0.0/13 94.22.0.0/16 109.232.80.0/21 139.97.0.0/16 178.251.56.0/21 192.77.120.0/22 192.102.32.0/24 192.102.36.0-192.102.42.255 192.102.49.0-192.102.50.255 192.126.1.0/24 192.126.23.0-192.126.24.255 192.126.35.0/24 192.126.44.0/24 192.126.46.0/24 192.163.32.0-192.163.159.255 192.175.45.0/24 193.64.0.0-193.66.255.255 193.94.0.0/16 193.184.0.0/15 193.199.0.0/16 193.229.0.0/16 194.86.0.0/16 194.136.0.0/16 194.157.0.0/16 194.188.0.0/16 194.211.0.0/16 194.240.0.0/15 195.16.192.0/19 195.74.0.0/19 195.170.128.0/19 195.197.0.0/16 195.218.64.0/19 195.236.0.0/15 195.238.192.0/19 195.255.0.0/16 212.38.224.0-212.38.244.255 212.50.192.0/19 212.54.0.0/19 212.63.0.0/19 212.226.0.0/16 212.246.0.0/16 213.130.224.0/19 213.161.32.0/19 213.169.0.0/19 213.192.128.0/18 213.250.64.0/18 217.24.96.0/20 217.25.96.0/20 217.77.192.0/20 217.152.0.0/16 IPv6: 2001:671::/47 2001:671:fc00::/38 2001:998::/29 2001:9f0::/29 2001:1658::/29 2a00:1dd0::/29 Signature Algorithm: sha256WithRSAEncryption 4b:29:32:a8:29:24:0a:ac:cf:22:36:95:ee:73:13:aa:43:3b: 6a:95:5d:10:0f:7c:e6:fa:27:07:ef:7f:db:b2:ee:8e:4c:69: 25:0f:3b:a6:67:ec:17:7f:53:54:20:24:d9:7f:5f:26:34:89: 61:ce:e5:a0:e1:61:e0:e9:f9:0e:51:44:85:89:b3:41:c8:1e: b6:f2:60:20:ba:dc:99:b3:41:90:33:4e:61:fd:01:b2:06:77: e4:a0:5e:6f:c7:ab:c5:1f:ea:b7:40:43:b0:81:73:64:b5:ed: a6:29:ad:cb:cb:76:d2:60:95:5d:de:b3:5d:d5:a9:13:5d:ae: 82:b1:aa:df:cc:25:4c:aa:2a:68:e4:c6:86:cd:06:0d:85:dc: d7:62:ae:ac:5b:14:b3:bd:07:02:13:11:5c:ab:3e:07:b6:66: e9:87:0b:af:0a:0e:e0:b4:f2:8c:49:2d:76:8a:a7:f6:f8:0b: f8:9e:c3:e8:e5:2d:35:17:66:c8:fd:be:68:cb:4e:4c:e0:b1: 29:42:62:ac:fc:e0:25:2a:8c:f3:58:77:b3:f7:0e:a3:6f:ce: f9:d5:47:09:f6:0a:27:e9:57:ec:c1:19:a0:72:93:41:f1:b2: 3a:81:c0:d5:6b:0b:f9:ad:b4:3d:2e:c1:67:37:85:da:5f:89: 4a:3b:7e:7d -----BEGIN CERTIFICATE----- MIIHBjCCBe6gAwIBAgISAZt57TU0TJc9rqyoYz4RLpKUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZGVlMWIwNmJhMjRhNjc2MjEzZjk3NmE0YjUwYzEyOWRj YjJiNzMwHhcNMjYwMTAxMTQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWQ5NTZlY2E3MDdjYjZhYWUwZWRjNjIzMWM1ZTFlNDAwOTkwMDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMvJPg3SmZWg/B9dg8N6ZL78Gx/e i3STSvoMVyMb5//HqZ/GJeB2q/czW1cIOueFzQ38zkss0uXenio/hj9JYEiSh7zV 6GTmsvt/AnUMfn0DgpuywfsmZd1MiyhL1kdCuICrYT/xbfXPBr9Y4klXdAB7zM9I +uB9tHGcWSf+qNo94r8V1bf/RIW2VzSbJDuITd1Gc5kCOLLpKjlStrCzAKqlTHDA UHm46FX2URrgb4snugu37ulTkY88G8Kar3ObQMrlEed7EIOhVxmHdQck/g9j9oLR fwevg0j2qPgSeMylcHe/FiIwvdcLlpGqN3O9+sqXzfNP6bIsnuR6iLGrhQIDAQAB o4IEEjCCBA4wHQYDVR0OBBYEFL7ZVuynB8tqrg7cYjHF4eQAmQCRMB8GA1UdIwQY MBaAFODe4bBrokpnYhP5dqS1DBKdyytzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMt MTVlOTBiZjg3ZmFiLzEvdnRsVzdLY0h5MnF1RHR4aU1jWGg1QUNaQUpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMtMTVlOTBiZjg3ZmFi LzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICJgYIKwYBBQUHAQcBAf8EggIVMIICETCCAdgEAgABMIIB 0AMEBB8HEAMEAy62cAMDAD6OAwQFPpTAAwQFPthgAwQFPvBAAwQHPviAAwQGTW3A AwQFUFGgAwQEUFiwAwMAULoDBAVQ+GADAwBRxQMEB1HRAAMEBlJnwAMEBVJ2wAME BlKNQAMEBlLXwAMEB1P1gAMDAVTmAwMCVUwDAwFVnAMEB1XZAAMDAlhwAwMDW5gD AwBeFgMEA23oUAMDAIthAwQDsvs4AwQCwE14AwQAwGYgMAwDBALAZiQDBADAZiow DAMEAMBmMQMEAMBmMgMEAMB+ATAMAwQAwH4XAwQAwH4YAwQAwH4jAwQAwH4sAwQA wH4uMAwDBAXAoyADBAXAo4ADBADAry0wCgMDBsFAAwMAwUIDAwDBXgMDAcG4AwMA wccDAwDB5QMDAMJWAwMAwogDAwDCnQMDAMK8AwMAwtMDAwHC8AMEBcMQwAMEBcNK AAMEBcOqgAMDAMPFAwQFw9pAAwMBw+wDBAXD7sADAwDD/zAMAwQF1CbgAwQA1Cb0 AwQF1DLAAwQF1DYAAwQF1D8AAwMA1OIDAwDU9gMEBdWC4AMEBdWhIAMEBdWpAAME BtXAgAMEBtX6QAMEBNkYYAMEBNkZYAMEBNlNwAMDANmYMDMEAgACMC0DBwEgAQZx AAADBgIgAQZx/AMFAyABCZgDBQMgAQnwAwUDIAEWWAMFAyoAHdAwDQYJKoZIhvcN AQELBQADggEBAEspMqgpJAqszyI2le5zE6pDO2qVXRAPfOb6Jwfvf9uy7o5MaSUP O6Zn7Bd/U1QgJNl/XyY0iWHO5aDhYeDp+Q5RRIWJs0HIHrbyYCC63JmzQZAzTmH9 AbIGd+SgXm/Hq8Uf6rdAQ7CBc2S17aYprcvLdtJglV3es13VqRNdroKxqt/MJUyq KmjkxobNBg2F3NdirqxbFLO9BwITEVyrPge2ZumHC68KDuC08oxJLXaKp/b4C/ie w+jlLTUXZsj9vmjLTkzgsSlCYqz84CUqjPNYd7P3DqNvzvnVRwn2CifpV+zBGaBy k0HxsjqBwNVrC/mttD0uwWc3hdpfiUo7fn0= -----END CERTIFICATE-----Generated at Mon Jan 26 14:14:07 2026 by rpki-client