This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/IoLtImk3bMIaS_8z9WSi8YVBNMc.roa File: IoLtImk3bMIaS_8z9WSi8YVBNMc.roa (raw, json) Hash identifier: xPFKHev36XeOwDu6W1VM1t5NooCDJGJAcVNJx/zeVHY= Subject key identifier: 22:82:ED:22:69:37:6C:C2:1A:4B:FF:33:F5:64:A2:F1:85:41:34:C7 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019BE183D05A4C4B1BF3019C6EAA3BF5A8B2 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/IoLtImk3bMIaS_8z9WSi8YVBNMc.roa Signing time: Wed 21 Jan 2026 17:04:30 +0000 ROA not before: Wed 21 Jan 2026 17:04:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48031 IP address blocks: 31.216.57.0/24 maxlen: 24 31.216.63.0/24 maxlen: 24 37.221.81.0/24 maxlen: 24 62.192.137.0/24 maxlen: 24 62.192.138.0/24 maxlen: 24 77.87.120.0/24 maxlen: 24 84.246.84.0/24 maxlen: 24 84.246.86.0/24 maxlen: 24 84.246.87.0/24 maxlen: 24 84.246.106.0/24 maxlen: 24 84.246.109.0/24 maxlen: 24 87.236.151.0/24 maxlen: 24 88.151.15.0/24 maxlen: 24 89.107.14.0/24 maxlen: 24 89.107.15.0/24 maxlen: 24 89.248.70.0/24 maxlen: 24 91.190.153.0/24 maxlen: 24 91.220.198.0/24 maxlen: 24 91.246.34.0/24 maxlen: 24 91.246.48.0/24 maxlen: 24 91.246.53.0/24 maxlen: 24 91.246.54.0/24 maxlen: 24 91.247.161.0/24 maxlen: 24 91.247.162.0/24 maxlen: 24 91.247.165.0/24 maxlen: 24 91.247.166.0/24 maxlen: 24 91.247.167.0/24 maxlen: 24 91.247.173.0/24 maxlen: 24 91.247.183.0/24 maxlen: 24 93.157.104.0/24 maxlen: 24 93.157.109.0/24 maxlen: 24 109.94.161.0/24 maxlen: 24 109.94.163.0/24 maxlen: 24 109.107.136.0/24 maxlen: 24 109.107.141.0/24 maxlen: 24 109.107.142.0/24 maxlen: 24 109.107.144.0/24 maxlen: 24 109.107.147.0/24 maxlen: 24 109.107.148.0/24 maxlen: 24 109.205.184.0/24 maxlen: 24 109.205.188.0/24 maxlen: 24 176.97.199.0/24 maxlen: 24 176.97.203.0/24 maxlen: 24 176.97.208.0/24 maxlen: 24 176.97.222.0/24 maxlen: 24 176.97.223.0/24 maxlen: 24 176.116.3.0/24 maxlen: 24 193.160.219.0/24 maxlen: 24 193.163.22.0/24 maxlen: 24 194.26.134.0/24 maxlen: 24 194.26.224.0/24 maxlen: 24 194.26.227.0/24 maxlen: 24 194.105.60.0/24 maxlen: 24 194.107.92.0/24 maxlen: 24 195.88.220.0/24 maxlen: 24 195.96.144.0/24 maxlen: 24 195.96.147.0/24 maxlen: 24 195.96.154.0/24 maxlen: 24 212.18.126.0/24 maxlen: 24 212.52.25.0/24 maxlen: 24 212.52.26.0/24 maxlen: 24 213.217.11.0/24 maxlen: 24 217.198.176.0/24 maxlen: 24 217.198.178.0/24 maxlen: 24 217.198.179.0/24 maxlen: 24 217.198.180.0/24 maxlen: 24 217.198.181.0/24 maxlen: 24 217.198.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:83:d0:5a:4c:4b:1b:f3:01:9c:6e:aa:3b:f5:a8:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 21 17:04:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2282ed2269376cc21a4bff33f564a2f1854134c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:98:e1:3c:fd:be:56:3b:af:7f:82:b9:0b:95: 4c:0c:3e:5c:28:06:d7:e0:3c:e3:90:9d:f4:75:5a: 48:eb:08:69:aa:54:55:85:38:ba:1a:5f:b1:95:cf: f7:21:5c:94:75:83:22:5f:2a:ce:ad:f8:90:d8:08: 9e:9d:59:3e:a9:b5:5c:89:ba:b9:15:93:46:ad:c9: 26:5b:9c:b1:86:c6:dd:48:41:69:bb:6f:0d:5d:f4: f7:50:8a:7c:63:26:98:18:38:45:8f:8a:5d:54:db: a0:30:2f:38:d3:07:19:90:15:9f:a3:32:38:42:bf: ab:4d:2d:47:d7:ec:d2:47:96:1a:e5:53:9d:2e:b2: 5d:c5:c4:67:a8:75:59:fb:f6:9f:b5:eb:3a:04:51: 33:84:e9:4e:6c:76:fc:a0:ff:9a:52:52:86:a6:46: 20:48:5a:fe:3a:e5:c7:2c:9d:2f:24:26:05:00:d9: 05:67:8e:9c:da:4d:4a:18:d0:e3:cd:fc:46:6d:58: 49:23:52:11:48:f3:bb:1f:20:41:d9:70:94:b3:dc: 37:91:95:f0:4f:38:ac:52:d6:75:f4:1b:3e:ee:f8: 3e:04:f3:75:77:ca:b7:4c:21:d8:6f:eb:28:19:2f: 9e:0e:39:15:b9:42:3c:86:17:a6:1d:54:2b:4e:9e: d0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:82:ED:22:69:37:6C:C2:1A:4B:FF:33:F5:64:A2:F1:85:41:34:C7 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/IoLtImk3bMIaS_8z9WSi8YVBNMc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.216.57.0/24 31.216.63.0/24 37.221.81.0/24 62.192.137.0-62.192.138.255 77.87.120.0/24 84.246.84.0/24 84.246.86.0/23 84.246.106.0/24 84.246.109.0/24 87.236.151.0/24 88.151.15.0/24 89.107.14.0/23 89.248.70.0/24 91.190.153.0/24 91.220.198.0/24 91.246.34.0/24 91.246.48.0/24 91.246.53.0-91.246.54.255 91.247.161.0-91.247.162.255 91.247.165.0-91.247.167.255 91.247.173.0/24 91.247.183.0/24 93.157.104.0/24 93.157.109.0/24 109.94.161.0/24 109.94.163.0/24 109.107.136.0/24 109.107.141.0-109.107.142.255 109.107.144.0/24 109.107.147.0-109.107.148.255 109.205.184.0/24 109.205.188.0/24 176.97.199.0/24 176.97.203.0/24 176.97.208.0/24 176.97.222.0/23 176.116.3.0/24 193.160.219.0/24 193.163.22.0/24 194.26.134.0/24 194.26.224.0/24 194.26.227.0/24 194.105.60.0/24 194.107.92.0/24 195.88.220.0/24 195.96.144.0/24 195.96.147.0/24 195.96.154.0/24 212.18.126.0/24 212.52.25.0-212.52.26.255 213.217.11.0/24 217.198.176.0/24 217.198.178.0-217.198.182.255 Signature Algorithm: sha256WithRSAEncryption 5c:f5:28:37:ac:96:69:34:42:8b:38:a9:db:f0:2f:c5:a5:01: d4:b5:cf:da:ea:9e:98:3f:d9:02:77:7b:59:33:e6:0d:ef:08: 12:91:e2:da:d8:4d:c6:d0:50:e7:8d:f7:4d:e9:d5:19:1f:f8: d7:27:30:97:e6:1b:03:d2:a7:68:73:b0:17:13:b7:c6:84:72: ca:ac:0e:4c:68:f3:5c:0e:17:24:31:0c:ca:b4:5d:e2:3e:68: 90:5f:a1:56:10:f3:a5:d6:96:9a:93:25:58:57:7a:1e:d3:ea: 50:c0:04:e3:5b:c8:2a:78:8f:2c:8c:26:a1:48:cc:2a:3b:26: 2a:10:86:9b:f2:ee:44:8d:9f:b4:69:81:a9:c2:e6:74:19:3b: 7f:aa:fc:58:af:11:62:5b:0a:a9:a0:64:6f:0f:94:97:e6:24: 30:f0:f6:97:5f:4d:8b:f8:38:84:41:eb:b5:0c:87:08:84:da: 9a:1a:9b:cc:a6:1d:34:b7:e3:a4:3a:0f:50:f4:f9:12:e9:d1: 15:11:49:30:bc:55:c9:00:ce:6e:a6:14:79:74:34:f0:5f:36: 97:55:b6:b3:58:52:a5:8b:2b:dc:02:43:1e:00:2c:b7:9f:52: 21:2f:5b:32:88:73:c1:65:d3:4f:e0:30:2b:b9:63:23:a3:b4: 51:3c:4b:0a -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgISAZvhg9BaTEsb8wGcbqo79aiyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTIxMTcwNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjgyZWQyMjY5Mzc2Y2MyMWE0YmZmMzNmNTY0YTJmMTg1NDEzNGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5jhPP2+Vjuvf4K5C5VMDD5cKAbX 4DzjkJ30dVpI6whpqlRVhTi6Gl+xlc/3IVyUdYMiXyrOrfiQ2AienVk+qbVcibq5 FZNGrckmW5yxhsbdSEFpu28NXfT3UIp8YyaYGDhFj4pdVNugMC840wcZkBWfozI4 Qr+rTS1H1+zSR5Ya5VOdLrJdxcRnqHVZ+/aftes6BFEzhOlObHb8oP+aUlKGpkYg SFr+OuXHLJ0vJCYFANkFZ46c2k1KGNDjzfxGbVhJI1IRSPO7HyBB2XCUs9w3kZXw TzisUtZ19Bs+7vg+BPN1d8q3TCHYb+soGS+eDjkVuUI8hhemHVQrTp7QcQIDAQAB o4IDizCCA4cwHQYDVR0OBBYEFCKC7SJpN2zCGkv/M/VkovGFQTTHMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvSW9MdEltazNiTUlhU184ejlXU2k4WVZCTk1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBnwYIKwYBBQUHAQcBAf8EggGOMIIBijCCAYYEAgABMIIB fgMEAB/YOQMEAB/YPwMEACXdUTAMAwQAPsCJAwQAPsCKAwQATVd4AwQAVPZUAwQB VPZWAwQAVPZqAwQAVPZtAwQAV+yXAwQAWJcPAwQBWWsOAwQAWfhGAwQAW76ZAwQA W9zGAwQAW/YiAwQAW/YwMAwDBABb9jUDBABb9jYwDAMEAFv3oQMEAFv3ojAMAwQA W/elAwQDW/egAwQAW/etAwQAW/e3AwQAXZ1oAwQAXZ1tAwQAbV6hAwQAbV6jAwQA bWuIMAwDBABta40DBABta44DBABta5AwDAMEAG1rkwMEAG1rlAMEAG3NuAMEAG3N vAMEALBhxwMEALBhywMEALBh0AMEAbBh3gMEALB0AwMEAMGg2wMEAMGjFgMEAMIa hgMEAMIa4AMEAMIa4wMEAMJpPAMEAMJrXAMEAMNY3AMEAMNgkAMEAMNgkwMEAMNg mgMEANQSfjAMAwQA1DQZAwQA1DQaAwQA1dkLAwQA2cawMAwDBAHZxrIDBADZxrYw DQYJKoZIhvcNAQELBQADggEBAFz1KDeslmk0Qos4qdvwL8WlAdS1z9rqnpg/2QJ3 e1kz5g3vCBKR4trYTcbQUOeN903p1Rkf+NcnMJfmGwPSp2hzsBcTt8aEcsqsDkxo 81wOFyQxDMq0XeI+aJBfoVYQ86XWlpqTJVhXeh7T6lDABONbyCp4jyyMJqFIzCo7 JioQhpvy7kSNn7RpganC5nQZO3+q/FivEWJbCqmgZG8PlJfmJDDw9pdfTYv4OIRB 67UMhwiE2poam8ymHTS346Q6D1D0+RLp0RURSTC8VckAzm6mFHl0NPBfNpdVtrNY UqWLK9wCQx4ALLefUiEvWzKIc8Fl00/gMCu5YyOjtFE8Swo= -----END CERTIFICATE-----Generated at Thu Jan 22 14:06:00 2026 by rpki-client