This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/vfAXikjKgCjq74heQ_lW0h7lKZM.roa File: vfAXikjKgCjq74heQ_lW0h7lKZM.roa (raw, json) Hash identifier: y9mC9ZC9KsL88BTXfe+44waOrp0v1g4TnmU21Hw3eNM= Subject key identifier: BD:F0:17:8A:48:CA:80:28:EA:EF:88:5E:43:F9:56:D2:1E:E5:29:93 Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7 Certificate serial: 019B790FFB515829E969A7E442E04A0D0BE2 Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/vfAXikjKgCjq74heQ_lW0h7lKZM.roa Signing time: Thu 01 Jan 2026 10:17:29 +0000 ROA not before: Thu 01 Jan 2026 10:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43260 IP address blocks: 2.56.63.0/24 maxlen: 24 31.210.152.0/24 maxlen: 24 31.210.153.0/24 maxlen: 24 31.210.154.0/24 maxlen: 24 31.210.155.0/24 maxlen: 24 31.210.156.0/24 maxlen: 24 31.210.157.0/24 maxlen: 24 31.210.158.0/24 maxlen: 24 31.210.159.0/24 maxlen: 24 37.247.96.0/24 maxlen: 24 37.247.97.0/24 maxlen: 24 37.247.98.0/24 maxlen: 24 37.247.99.0/24 maxlen: 24 37.247.100.0/24 maxlen: 24 37.247.101.0/24 maxlen: 24 37.247.102.0/24 maxlen: 24 37.247.103.0/24 maxlen: 24 37.247.104.0/24 maxlen: 24 37.247.105.0/24 maxlen: 24 37.247.106.0/24 maxlen: 24 37.247.107.0/24 maxlen: 24 37.247.108.0/24 maxlen: 24 37.247.109.0/24 maxlen: 24 37.247.110.0/24 maxlen: 24 37.247.111.0/24 maxlen: 24 46.20.0.0/24 maxlen: 24 46.20.1.0/24 maxlen: 24 46.20.2.0/24 maxlen: 24 46.20.3.0/24 maxlen: 24 46.20.4.0/24 maxlen: 24 46.20.5.0/24 maxlen: 24 46.20.6.0/24 maxlen: 24 46.20.7.0/24 maxlen: 24 46.20.8.0/24 maxlen: 24 46.20.9.0/24 maxlen: 24 46.20.11.0/24 maxlen: 24 46.20.14.0/24 maxlen: 24 46.20.15.0/24 maxlen: 24 89.107.224.0/24 maxlen: 24 89.107.225.0/24 maxlen: 24 89.107.226.0/24 maxlen: 24 89.107.227.0/24 maxlen: 24 89.107.228.0/24 maxlen: 24 89.107.229.0/24 maxlen: 24 89.107.230.0/24 maxlen: 24 89.107.231.0/24 maxlen: 24 95.130.168.0/24 maxlen: 24 95.130.169.0/24 maxlen: 24 95.130.170.0/24 maxlen: 24 95.130.171.0/24 maxlen: 24 95.130.172.0/24 maxlen: 24 95.130.173.0/24 maxlen: 24 95.130.175.0/24 maxlen: 24 109.235.248.0/24 maxlen: 24 109.235.249.0/24 maxlen: 24 109.235.250.0/24 maxlen: 24 109.235.251.0/24 maxlen: 24 109.235.252.0/24 maxlen: 24 109.235.253.0/24 maxlen: 24 109.235.254.0/24 maxlen: 24 109.235.255.0/24 maxlen: 24 185.29.120.0/24 maxlen: 24 185.29.121.0/24 maxlen: 24 185.29.122.0/24 maxlen: 24 2a04:4280::/29 maxlen: 48 2a04:4280:10::/48 maxlen: 48 2a04:4280:100::/48 maxlen: 48 2a04:4280:200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:fb:51:58:29:e9:69:a7:e4:42:e0:4a:0d:0b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7 Validity Not Before: Jan 1 10:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bdf0178a48ca8028eaef885e43f956d21ee52993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6f:67:35:49:ec:c9:5f:98:2f:80:91:e3:a8: 9c:7c:50:90:0b:11:6f:48:85:56:ab:c9:1d:51:26: 95:14:94:bd:4a:5c:80:5f:cb:0a:42:16:f9:cb:7d: a1:b1:22:18:f7:80:a1:c2:b0:a5:c8:b8:a5:ed:5d: 8b:3d:17:98:48:ee:b6:8a:b5:d9:26:e8:11:2d:14: d8:d4:04:40:6f:c9:31:59:15:97:5f:c0:49:34:5e: ff:db:a7:f1:4f:59:0d:82:19:9f:62:39:cb:03:a3: d1:c2:97:7c:b5:bf:1e:44:50:a8:ed:e4:3e:84:07: df:33:07:6a:8a:55:85:23:17:2a:98:cd:99:16:cc: 77:99:04:de:59:86:8c:e3:b0:fe:27:6e:dc:7d:97: af:31:4c:92:a3:d7:7d:c3:e1:fb:7a:55:45:5e:96: 83:bf:78:9a:59:92:e7:68:2f:10:19:2b:81:fd:78: d1:a6:87:31:b2:27:80:8f:b2:cd:d5:ff:3f:41:4e: 22:79:20:a5:fc:b4:83:6c:08:c0:08:10:79:a4:76: 7d:3e:be:c1:60:3d:c2:85:40:ae:bd:ce:63:11:62: 99:9f:a0:99:87:0f:0e:28:40:81:f6:7c:d2:bb:92: cc:2f:cc:60:e4:79:ba:14:45:54:b7:83:c1:3f:cc: 6f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F0:17:8A:48:CA:80:28:EA:EF:88:5E:43:F9:56:D2:1E:E5:29:93 X509v3 Authority Key Identifier: keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/vfAXikjKgCjq74heQ_lW0h7lKZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.63.0/24 31.210.152.0/21 37.247.96.0/20 46.20.0.0-46.20.9.255 46.20.11.0/24 46.20.14.0/23 89.107.224.0/21 95.130.168.0-95.130.173.255 95.130.175.0/24 109.235.248.0/21 185.29.120.0-185.29.122.255 IPv6: 2a04:4280::/29 Signature Algorithm: sha256WithRSAEncryption 17:a6:63:d4:53:a1:16:7e:da:17:44:78:66:5c:44:ca:a5:28: 76:fc:c0:6c:83:0f:5c:4e:f5:b6:39:e1:d8:e5:a6:86:7d:ac: 4a:1a:ff:89:be:10:18:84:59:ef:ef:23:54:fc:74:bf:68:0b: 64:6c:b0:7f:80:49:5f:dc:67:cd:68:ce:0e:f4:47:13:8d:14: 5f:0a:7f:18:8a:d5:7d:4e:89:c3:85:7d:b0:94:09:8e:c4:aa: 43:96:37:77:45:9c:0c:2f:76:c8:b8:3b:ff:de:da:78:24:03: 01:fb:0e:90:05:ed:5e:68:15:63:65:55:ea:f6:b5:0b:dc:9b: d4:35:3f:c9:1d:b9:c9:c7:71:f1:39:77:56:2b:de:85:ec:de: 55:cb:c3:4b:76:e2:62:5a:5b:a0:cc:5a:e2:2d:f0:14:a1:ce: af:fa:e5:b8:49:7d:80:4d:61:54:93:76:a4:df:08:b9:e5:4f: 32:ab:88:b7:1f:02:72:51:ec:47:da:0c:46:21:85:44:45:84: c1:86:e4:ef:69:11:79:c2:6e:1c:eb:d5:2e:3f:24:3c:40:99: 69:2e:be:40:ff:a8:34:23:99:c5:2f:f3:5f:c5:c5:71:98:06: 1c:e6:32:28:f7:4e:24:9a:56:4b:70:e3:13:83:44:ed:82:9e: a9:a6:6a:e8 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgISAZt5D/tRWCnpaafkQuBKDQviMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MmU3YzFmMjM5NGMzZTNhYWE4Y2NiNjQ3ZmQ4MzY3MWQ2 MDk4YjcwHhcNMjYwMTAxMTAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGYwMTc4YTQ4Y2E4MDI4ZWFlZjg4NWU0M2Y5NTZkMjFlZTUyOTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv29nNUnsyV+YL4CR46icfFCQCxFv SIVWq8kdUSaVFJS9SlyAX8sKQhb5y32hsSIY94ChwrClyLil7V2LPReYSO62irXZ JugRLRTY1ARAb8kxWRWXX8BJNF7/26fxT1kNghmfYjnLA6PRwpd8tb8eRFCo7eQ+ hAffMwdqilWFIxcqmM2ZFsx3mQTeWYaM47D+J27cfZevMUySo9d9w+H7elVFXpaD v3iaWZLnaC8QGSuB/XjRpocxsieAj7LN1f8/QU4ieSCl/LSDbAjACBB5pHZ9Pr7B YD3ChUCuvc5jEWKZn6CZhw8OKECB9nzSu5LML8xg5Hm6FEVUt4PBP8xvVwIDAQAB o4ICbDCCAmgwHQYDVR0OBBYEFL3wF4pIyoAo6u+IXkP5VtIe5SmTMB8GA1UdIwQY MBaAFFkufB8jlMPjqqjMtkf9g2cdYJi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAt NDQzYmU2M2ZjMTIzLzEvdmZBWGlraktnQ2pxNzRoZVFfbFcwaDdsS1pNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAtNDQzYmU2M2ZjMTIz LzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwXwQCAAEwWQMEAAI4PwME Ax/SmAMEBCX3YDALAwMCLhQDBAEuFAgDBAAuFAsDBAEuFA4DBANZa+AwDAMEA1+C qAMEAV+CrAMEAF+CrwMEA23r+DAMAwQDuR14AwQAuR16MA0EAgACMAcDBQMqBEKA MA0GCSqGSIb3DQEBCwUAA4IBAQAXpmPUU6EWftoXRHhmXETKpSh2/MBsgw9cTvW2 OeHY5aaGfaxKGv+JvhAYhFnv7yNU/HS/aAtkbLB/gElf3GfNaM4O9EcTjRRfCn8Y itV9TonDhX2wlAmOxKpDljd3RZwML3bIuDv/3tp4JAMB+w6QBe1eaBVjZVXq9rUL 3JvUNT/JHbnJx3HxOXdWK96F7N5Vy8NLduJiWlugzFriLfAUoc6v+uW4SX2ATWFU k3ak3wi55U8yq4i3HwJyUexH2gxGIYVERYTBhuTvaRF5wm4c69UuPyQ8QJlpLr5A /6g0I5nFL/NfxcVxmAYc5jIo904kmlZLcOMTg0Ttgp6ppmro -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:23 2026 by rpki-client