This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/204umdoIBOqtcTbJI3jfclBQCyw.roa File: 204umdoIBOqtcTbJI3jfclBQCyw.roa (raw, json) Hash identifier: IwWlQnWIC7tAHQ+uxk+vueYs6Cuvcq1jNuaEjgSin/4= Subject key identifier: DB:4E:2E:99:DA:08:04:EA:AD:71:36:C9:23:78:DF:72:50:50:0B:2C Certificate issuer: /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec Certificate serial: 019B7EA4C53C2691137629D943180FC1F259 Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/204umdoIBOqtcTbJI3jfclBQCyw.roa Signing time: Fri 02 Jan 2026 12:18:06 +0000 ROA not before: Fri 02 Jan 2026 12:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200960 IP address blocks: 31.14.103.0/24 maxlen: 24 31.14.255.0/24 maxlen: 24 185.18.196.0/24 maxlen: 24 185.18.197.0/24 maxlen: 24 185.45.72.0/24 maxlen: 24 217.148.136.0/24 maxlen: 24 217.148.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:c5:3c:26:91:13:76:29:d9:43:18:0f:c1:f2:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec Validity Not Before: Jan 2 12:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db4e2e99da0804eaad7136c92378df7250500b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:60:2b:d9:83:22:39:85:33:bd:bd:a3:d5:ed: e4:ff:a8:8c:fb:7c:f8:f5:59:5c:1b:b6:df:2f:ef: d4:a5:e8:73:0e:1d:3b:d8:ca:f0:8c:2d:3a:d4:a3: 9c:1b:89:a5:97:0d:87:a2:b9:35:90:bb:af:12:d1: bd:66:93:67:5f:83:6c:89:2b:a4:98:fc:9f:d9:3d: 62:db:7a:5e:42:08:3a:6d:ed:8e:3b:b7:a2:56:8f: 73:83:fa:18:07:35:32:b4:f7:df:12:a9:08:df:9a: 58:0d:66:15:46:27:44:bb:78:ad:c1:58:77:37:fe: f7:1b:2f:75:4b:ad:7a:5b:52:7e:4e:5f:f6:89:81: 21:85:41:27:81:de:99:76:9b:bf:0e:4f:75:93:fe: bf:67:16:8d:7d:7c:43:07:c6:49:c9:bb:ba:3f:51: 52:e2:74:f3:c0:fe:b8:3d:ab:f6:e0:1f:a9:9f:3c: ba:57:7b:16:4e:5b:79:23:ee:a6:9c:d7:c9:18:ed: 46:11:14:f1:8b:e6:df:ba:78:31:36:e0:26:87:26: 36:35:32:2c:33:88:e5:c8:33:5e:ac:f7:b6:58:b8: 8d:aa:89:1d:c7:3f:ae:d6:93:c1:11:c1:12:66:45: d8:02:c1:9e:30:2d:a3:21:e0:8f:c3:3c:d4:e5:6a: 3f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4E:2E:99:DA:08:04:EA:AD:71:36:C9:23:78:DF:72:50:50:0B:2C X509v3 Authority Key Identifier: keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/204umdoIBOqtcTbJI3jfclBQCyw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.103.0/24 31.14.255.0/24 185.18.196.0/23 185.45.72.0/24 217.148.136.0/23 Signature Algorithm: sha256WithRSAEncryption 89:a0:a8:81:3b:69:cb:f6:bb:fd:f3:f1:6b:94:02:f7:0f:84: 2a:0d:1d:ba:9b:c4:a3:95:44:1c:de:2a:b8:90:68:58:a8:3a: 3d:57:98:7b:8b:25:94:06:65:3d:2f:a8:7f:b1:3b:57:e0:0b: 3c:b9:9e:d7:64:66:78:91:e6:e5:85:8e:82:b3:dc:2b:34:73: 93:14:76:0e:fc:0b:98:a9:3e:2c:f7:d8:dc:d6:92:24:3a:80: cc:d3:ea:c1:6b:9b:1b:cf:04:58:13:ee:06:6c:3a:90:1d:49: df:86:5c:43:74:80:9d:2e:c7:63:41:8f:1b:4f:2d:08:b6:be: e4:c5:ab:9d:d3:c2:34:7b:01:61:04:95:4d:e0:9d:91:49:83: 79:06:c6:1e:ee:85:0e:dd:00:5c:1f:7c:c1:5f:1a:65:6b:d1: 5d:ed:29:87:f9:af:53:47:c6:63:f3:4b:00:77:56:21:e8:05: 9b:12:de:e6:e4:47:46:04:94:66:20:d7:9f:38:4f:13:62:5a: 20:78:d6:42:da:dd:8c:4f:db:1f:18:01:70:e9:b6:59:5c:d4: 4b:f8:d0:2b:98:22:94:0d:73:1f:86:8c:c0:68:0f:ea:34:ee: 07:8c:25:f1:e0:ca:f6:b9:ba:0a:60:d4:24:52:f5:42:ff:c5: c9:80:12:29 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt+pMU8JpETdinZQxgPwfJZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjM2NiMjBjNWNhN2M0ZWQ4ZTQyMDc4YjFhNjcyODdhMGQ5 OTFjZWMwHhcNMjYwMTAyMTIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjRlMmU5OWRhMDgwNGVhYWQ3MTM2YzkyMzc4ZGY3MjUwNTAwYjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmAr2YMiOYUzvb2j1e3k/6iM+3z4 9VlcG7bfL+/UpehzDh072MrwjC061KOcG4mllw2Hork1kLuvEtG9ZpNnX4NsiSuk mPyf2T1i23peQgg6be2OO7eiVo9zg/oYBzUytPffEqkI35pYDWYVRidEu3itwVh3 N/73Gy91S616W1J+Tl/2iYEhhUEngd6Zdpu/Dk91k/6/ZxaNfXxDB8ZJybu6P1FS 4nTzwP64Pav24B+pnzy6V3sWTlt5I+6mnNfJGO1GERTxi+bfungxNuAmhyY2NTIs M4jlyDNerPe2WLiNqokdxz+u1pPBEcESZkXYAsGeMC2jIeCPwzzU5Wo/XQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFNtOLpnaCATqrXE2ySN433JQUAssMB8GA1UdIwQY MBaAFNw8sgxcp8TtjkIHixpnKHoNmRzsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0R5eURGeW54TzJPUWdlTEdtY29lZzJaSE93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hODVmM2QtNjVhMi00ZjZjLTljYjkt ODI2NjBlZTRlYWM0LzEvMjA0dW1kb0lCT3F0Y1RiSkkzamZjbEJRQ3l3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9hODVmM2QtNjVhMi00ZjZjLTljYjktODI2NjBlZTRlYWM0 LzEvM0R5eURGeW54TzJPUWdlTEdtY29lZzJaSE93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAHw5nAwQA Hw7/AwQBuRLEAwQAuS1IAwQB2ZSIMA0GCSqGSIb3DQEBCwUAA4IBAQCJoKiBO2nL 9rv98/FrlAL3D4QqDR26m8SjlUQc3iq4kGhYqDo9V5h7iyWUBmU9L6h/sTtX4As8 uZ7XZGZ4keblhY6Cs9wrNHOTFHYO/AuYqT4s99jc1pIkOoDM0+rBa5sbzwRYE+4G bDqQHUnfhlxDdICdLsdjQY8bTy0Itr7kxaud08I0ewFhBJVN4J2RSYN5BsYe7oUO 3QBcH3zBXxpla9Fd7SmH+a9TR8Zj80sAd1Yh6AWbEt7m5EdGBJRmINefOE8TYlog eNZC2t2MT9sfGAFw6bZZXNRL+NArmCKUDXMfhozAaA/qNO4HjCXx4Mr2uboKYNQk UvVC/8XJgBIp -----END CERTIFICATE-----Generated at Tue Jan 27 02:19:04 2026 by rpki-client