This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/4idHKr8iidN9-yQyhnGqDfiW9q8.roa File: 4idHKr8iidN9-yQyhnGqDfiW9q8.roa (raw, json) Hash identifier: nh/szdSdvcCkYbqwsZX9wdA0trtKQJhpXMJXZCoPXVw= Subject key identifier: E2:27:47:2A:BF:22:89:D3:7D:FB:24:32:86:71:AA:0D:F8:96:F6:AF Certificate issuer: /CN=66ed3ba68c78bff2c4724400ade6348482fb4364 Certificate serial: 019BBBF3DFC85457CB01A6F7FD2B17673DF7 Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/4idHKr8iidN9-yQyhnGqDfiW9q8.roa Signing time: Wed 14 Jan 2026 10:01:20 +0000 ROA not before: Wed 14 Jan 2026 10:01:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64289 IP address blocks: 185.225.24.0/24 maxlen: 24 194.110.60.0/24 maxlen: 24 2a14:3f80::/45 maxlen: 45 2a14:3f80:8::/45 maxlen: 45 2a14:3f80:10::/45 maxlen: 45 2a14:3f80:18::/45 maxlen: 45 2a14:3f80:20::/45 maxlen: 45 2a14:3f80:28::/45 maxlen: 45 2a14:3f80:60::/45 maxlen: 45 2a14:3f80:80::/45 maxlen: 45 2a14:3f80:88::/45 maxlen: 45 2a14:3f80:100::/45 maxlen: 45 2a14:3f80:108::/45 maxlen: 45 2a14:3f80:3d1::/48 maxlen: 48 2a14:3f80:800::/38 maxlen: 38 2a14:3f80:c00::/38 maxlen: 38 2a14:3f80:1000::/38 maxlen: 38 2a14:3f80:1400::/38 maxlen: 38 2a14:3f80:1800::/38 maxlen: 38 2a14:3f80:1ed0::/45 maxlen: 45 2a14:3f80:2000::/38 maxlen: 38 2a14:3f80:2400::/38 maxlen: 38 2a14:3f80:2800::/38 maxlen: 38 2a14:3f80:2b40::/42 maxlen: 42 2a14:3f80:3000::/38 maxlen: 38 2a14:3f80:3400::/38 maxlen: 38 2a14:3f80:3800::/38 maxlen: 38 2a14:3f80:3c00::/38 maxlen: 38 2a14:3f80:4000::/38 maxlen: 38 2a14:3f80:4400::/38 maxlen: 38 2a14:3f80:5000::/38 maxlen: 38 2a14:3f80:6000::/38 maxlen: 38 2a14:3f80:7000::/38 maxlen: 38 2a14:3f80:8800::/38 maxlen: 38 2a14:3f80:af38::/45 maxlen: 45 2a14:3f81:5800::/38 maxlen: 38 2a14:3f82:4000::/38 maxlen: 38 2a14:3f82:6000::/38 maxlen: 38 2a14:3f82:7000::/38 maxlen: 38 2a14:3f82:8800::/38 maxlen: 38 2a14:3f87:2800::/38 maxlen: 38 2a14:3f87:4800::/38 maxlen: 38 2a14:3f87:6800::/38 maxlen: 38 2a14:3f87:6920::/44 maxlen: 44 2a14:3f87:6ba0::/44 maxlen: 44 2a14:3f87:9800::/38 maxlen: 38 2a14:3f87:c800::/38 maxlen: 38 2a14:3f87:e000::/38 maxlen: 38 2a14:3f87:f000::/38 maxlen: 38 2a14:3f87:f001::/48 maxlen: 48 2a14:3f87:f002::/48 maxlen: 48 2a14:3f87:fc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 04:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:f3:df:c8:54:57:cb:01:a6:f7:fd:2b:17:67:3d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364 Validity Not Before: Jan 14 10:01:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e227472abf2289d37dfb24328671aa0df896f6af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:27:a9:59:e7:af:0c:6d:72:76:f9:c9:71:b2: d1:5d:00:da:a4:4b:ec:17:d0:d1:f5:0f:32:91:b8: ed:51:5b:00:de:b9:be:14:cf:45:f9:36:e3:b2:1f: e6:d5:fb:e1:0f:bf:9a:d0:01:97:a7:d7:0c:00:2b: 7a:34:da:31:3c:d4:20:86:64:b2:cb:4a:c7:69:94: 4b:de:43:c9:2e:ce:fe:4f:c8:5f:6c:94:da:49:42: 8b:49:79:8c:df:a2:d6:8a:ea:5d:bc:c1:f4:5d:b1: ef:31:57:ab:0e:55:36:0d:e6:8e:13:9d:47:98:23: 30:9a:f9:62:14:f4:b6:95:b8:73:13:65:68:48:81: ef:74:81:08:bc:b5:cc:04:6f:81:35:8f:dd:61:dc: 0e:4e:f7:6f:1c:11:79:c0:9a:87:c0:a6:58:8c:3b: 20:f0:94:a4:ce:31:44:33:36:b9:fb:82:f0:53:5f: 4e:c2:dc:b1:1b:59:0c:4b:08:40:c7:91:98:0e:13: e1:f0:f9:ad:78:40:9d:25:b0:4d:23:84:11:a5:a9: f6:56:7c:61:e6:41:4a:e2:22:0a:21:4d:48:07:f4: 1c:21:92:8b:8a:91:bd:ad:c8:54:8e:a6:d5:93:dd: ac:13:7f:d8:fb:46:ab:f6:20:0e:69:a5:58:ef:1c: 22:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:27:47:2A:BF:22:89:D3:7D:FB:24:32:86:71:AA:0D:F8:96:F6:AF X509v3 Authority Key Identifier: keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/4idHKr8iidN9-yQyhnGqDfiW9q8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.24.0/24 194.110.60.0/24 IPv6: 2a14:3f80::-2a14:3f80:2f:ffff:ffff:ffff:ffff:ffff 2a14:3f80:60::/45 2a14:3f80:80::/44 2a14:3f80:100::/44 2a14:3f80:3d1::/48 2a14:3f80:800::-2a14:3f80:1bff:ffff:ffff:ffff:ffff:ffff 2a14:3f80:1ed0::/45 2a14:3f80:2000::-2a14:3f80:2bff:ffff:ffff:ffff:ffff:ffff 2a14:3f80:3000::-2a14:3f80:47ff:ffff:ffff:ffff:ffff:ffff 2a14:3f80:5000::/38 2a14:3f80:6000::/38 2a14:3f80:7000::/38 2a14:3f80:8800::/38 2a14:3f80:af38::/45 2a14:3f81:5800::/38 2a14:3f82:4000::/38 2a14:3f82:6000::/38 2a14:3f82:7000::/38 2a14:3f82:8800::/38 2a14:3f87:2800::/38 2a14:3f87:4800::/38 2a14:3f87:6800::/38 2a14:3f87:9800::/38 2a14:3f87:c800::/38 2a14:3f87:e000::/38 2a14:3f87:f000::/38 2a14:3f87:fc00::/38 Signature Algorithm: sha256WithRSAEncryption 29:19:e1:87:44:9d:f8:45:b8:18:a5:99:4d:30:49:58:b4:ce: af:6b:4d:13:d0:7d:e9:35:44:6e:f1:4f:cd:98:11:af:70:ad: ab:e6:db:fc:84:f6:21:50:31:f9:1a:02:c7:00:e9:30:9b:ed: 49:5c:4e:f4:8d:14:40:b1:3e:c6:de:cc:94:36:3f:d0:ea:b6: 38:e8:b4:d1:72:cf:43:e6:e0:61:ce:b8:31:00:cb:44:18:c8: 0a:ad:0c:55:8a:4b:7e:8f:7a:ec:80:70:b0:13:f6:a1:3b:e6: 75:ab:4e:25:51:a6:0d:44:25:aa:a6:53:cf:5f:05:73:38:fe: c4:55:04:3d:41:33:2c:c3:05:1c:02:3c:05:ff:74:d2:69:72: a5:24:94:4f:2a:e3:1a:05:55:3e:35:5c:29:f1:66:87:92:e7: 63:db:ac:05:73:f6:9a:75:13:ee:5c:6c:67:e6:1b:e5:4d:b6: 94:39:8e:64:12:a7:77:85:fe:91:c1:59:fc:3f:f4:35:58:94: cf:3f:4b:44:36:a9:60:a4:67:f8:32:7f:42:73:90:7e:10:ef: e4:2b:06:f9:12:cb:2c:99:d4:50:0a:d5:7d:92:ef:d7:ed:29: 1a:d8:48:c0:94:a8:18:1d:af:e2:f3:96:39:d7:fe:fa:d1:ec: 46:c0:1c:59 -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgISAZu789/IVFfLAab3/SsXZz33MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZWQzYmE2OGM3OGJmZjJjNDcyNDQwMGFkZTYzNDg0ODJm YjQzNjQwHhcNMjYwMTE0MTAwMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjI3NDcyYWJmMjI4OWQzN2RmYjI0MzI4NjcxYWEwZGY4OTZmNmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySepWeevDG1ydvnJcbLRXQDapEvs F9DR9Q8ykbjtUVsA3rm+FM9F+Tbjsh/m1fvhD7+a0AGXp9cMACt6NNoxPNQghmSy y0rHaZRL3kPJLs7+T8hfbJTaSUKLSXmM36LWiupdvMH0XbHvMVerDlU2DeaOE51H mCMwmvliFPS2lbhzE2VoSIHvdIEIvLXMBG+BNY/dYdwOTvdvHBF5wJqHwKZYjDsg 8JSkzjFEMza5+4LwU19OwtyxG1kMSwhAx5GYDhPh8PmteECdJbBNI4QRpan2Vnxh 5kFK4iIKIU1IB/QcIZKLipG9rchUjqbVk92sE3/Y+0ar9iAOaaVY7xwicwIDAQAB o4IDJzCCAyMwHQYDVR0OBBYEFOInRyq/IonTffskMoZxqg34lvavMB8GA1UdIwQY MBaAFGbtO6aMeL/yxHJEAK3mNISC+0NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnUwN3BveDR2X0xFY2tRQXJlWTBoSUw3UTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iNzlhNjgtNWIwMi00MDk3LWEyZTMt MGE0M2I3YTNlYjU0LzEvNGlkSEtyOGlpZE45LXlReWhuR3FEZmlXOXE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9iNzlhNjgtNWIwMi00MDk3LWEyZTMtMGE0M2I3YTNlYjU0 LzEvWnUwN3BveDR2X0xFY2tRQXJlWTBoSUw3UTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBOwYIKwYBBQUHAQcBAf8EggEqMIIBJjASBAIAATAMAwQA ueEYAwQAwm48MIIBDgQCAAIwggEGMBADBQcqFD+AAwcEKhQ/gAAgAwcDKhQ/gABg AwcEKhQ/gACAAwcEKhQ/gAEAAwcAKhQ/gAPRMBADBgMqFD+ACAMGAioUP4AYAwcD KhQ/gB7QMBADBgUqFD+AIAMGAioUP4AoMBADBgQqFD+AMAMGAyoUP4BAAwYCKhQ/ gFADBgIqFD+AYAMGAioUP4BwAwYCKhQ/gIgDBwMqFD+ArzgDBgIqFD+BWAMGAioU P4JAAwYCKhQ/gmADBgIqFD+CcAMGAioUP4KIAwYCKhQ/hygDBgIqFD+HSAMGAioU P4doAwYCKhQ/h5gDBgIqFD+HyAMGAioUP4fgAwYCKhQ/h/ADBgIqFD+H/DANBgkq hkiG9w0BAQsFAAOCAQEAKRnhh0Sd+EW4GKWZTTBJWLTOr2tNE9B96TVEbvFPzZgR r3Ctq+bb/IT2IVAx+RoCxwDpMJvtSVxO9I0UQLE+xt7MlDY/0Oq2OOi00XLPQ+bg Yc64MQDLRBjICq0MVYpLfo967IBwsBP2oTvmdatOJVGmDUQlqqZTz18Fczj+xFUE PUEzLMMFHAI8Bf900mlypSSUTyrjGgVVPjVcKfFmh5LnY9usBXP2mnUT7lxsZ+Yb 5U22lDmOZBKnd4X+kcFZ/D/0NViUzz9LRDapYKRn+DJ/QnOQfhDv5CsG+RLLLJnU UArVfZLv1+0pGthIwJSoGB2v4vOWOdf++tHsRsAcWQ== -----END CERTIFICATE-----Generated at Mon Feb 2 14:23:33 2026 by rpki-client