This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/RKI3XSz6XZy96Ol-18QcP9FlH4c.roa File: RKI3XSz6XZy96Ol-18QcP9FlH4c.roa (raw, json) Hash identifier: g/j02qL/fofi4lQDzUhm/wqo/x+TAc1YiiXTTjZy7lA= Subject key identifier: 44:A2:37:5D:2C:FA:5D:9C:BD:E8:E9:7E:D7:C4:1C:3F:D1:65:1F:87 Certificate issuer: /CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5 Certificate serial: 019B7A5B7A43E46DA11D7226B3E62D5DE748 Authority key identifier: 87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/RKI3XSz6XZy96Ol-18QcP9FlH4c.roa Signing time: Thu 01 Jan 2026 16:19:34 +0000 ROA not before: Thu 01 Jan 2026 16:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 132839 IP address blocks: 2.59.100.0/22 maxlen: 24 2.59.100.0/24 maxlen: 24 2.59.101.0/24 maxlen: 24 2.59.102.0/24 maxlen: 24 2.59.103.0/24 maxlen: 24 45.8.29.0/24 maxlen: 24 45.8.30.0/24 maxlen: 24 45.9.108.0/22 maxlen: 24 45.9.108.0/24 maxlen: 24 45.9.109.0/24 maxlen: 24 45.9.110.0/24 maxlen: 24 45.9.111.0/24 maxlen: 24 45.10.208.0/23 maxlen: 23 45.10.208.0/24 maxlen: 24 45.10.209.0/24 maxlen: 24 45.10.210.0/24 maxlen: 24 45.13.160.0/22 maxlen: 24 45.13.160.0/24 maxlen: 24 45.66.188.0/22 maxlen: 24 45.66.188.0/24 maxlen: 24 45.66.189.0/24 maxlen: 24 45.66.190.0/24 maxlen: 24 45.66.191.0/24 maxlen: 24 45.80.112.0/22 maxlen: 24 45.80.113.0/24 maxlen: 24 45.80.114.0/23 maxlen: 24 45.80.114.0/24 maxlen: 24 45.87.228.0/22 maxlen: 24 45.87.228.0/24 maxlen: 24 45.87.231.0/24 maxlen: 24 45.93.64.0/22 maxlen: 24 45.93.64.0/24 maxlen: 24 45.93.65.0/24 maxlen: 24 45.93.66.0/24 maxlen: 24 45.93.67.0/24 maxlen: 24 45.131.156.0/22 maxlen: 24 45.131.156.0/24 maxlen: 24 45.131.157.0/24 maxlen: 24 45.131.158.0/24 maxlen: 24 45.131.159.0/24 maxlen: 24 45.142.76.0/22 maxlen: 24 45.142.77.0/24 maxlen: 24 45.142.78.0/24 maxlen: 24 45.142.79.0/24 maxlen: 24 45.147.212.0/22 maxlen: 24 45.147.213.0/24 maxlen: 24 45.147.214.0/24 maxlen: 24 45.147.215.0/24 maxlen: 24 45.149.68.0/22 maxlen: 24 45.149.68.0/24 maxlen: 24 45.149.69.0/24 maxlen: 24 45.156.168.0/22 maxlen: 24 45.156.169.0/24 maxlen: 24 45.156.171.0/24 maxlen: 24 45.156.216.0/22 maxlen: 24 45.158.220.0/22 maxlen: 24 45.158.221.0/24 maxlen: 24 45.158.223.0/24 maxlen: 24 62.192.188.0/22 maxlen: 24 62.192.188.0/24 maxlen: 24 62.192.189.0/24 maxlen: 24 62.192.190.0/24 maxlen: 24 62.192.191.0/24 maxlen: 24 83.150.224.0/22 maxlen: 24 83.150.224.0/24 maxlen: 24 83.150.225.0/24 maxlen: 24 85.208.56.0/22 maxlen: 24 85.208.56.0/24 maxlen: 24 85.208.57.0/24 maxlen: 24 85.208.58.0/24 maxlen: 24 85.208.59.0/24 maxlen: 24 92.118.144.0/22 maxlen: 24 92.118.144.0/24 maxlen: 24 92.118.145.0/24 maxlen: 24 92.118.146.0/24 maxlen: 24 92.118.147.0/24 maxlen: 24 185.51.164.0/22 maxlen: 24 185.51.164.0/24 maxlen: 24 185.51.167.0/24 maxlen: 24 193.42.15.0/24 maxlen: 24 193.42.132.0/24 maxlen: 24 193.42.135.0/24 maxlen: 24 193.42.149.0/24 maxlen: 24 193.108.46.0/24 maxlen: 24 193.108.96.0/23 maxlen: 24 193.108.96.0/24 maxlen: 24 193.108.97.0/24 maxlen: 24 193.168.4.0/23 maxlen: 24 193.168.4.0/24 maxlen: 24 194.146.84.0/22 maxlen: 24 194.146.84.0/24 maxlen: 24 194.146.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7a:43:e4:6d:a1:1d:72:26:b3:e6:2d:5d:e7:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5 Validity Not Before: Jan 1 16:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44a2375d2cfa5d9cbde8e97ed7c41c3fd1651f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f2:0a:5b:ac:22:27:ac:d0:94:04:0a:d9:a2: b9:d7:4d:c4:58:b9:6d:48:7f:d3:7c:53:99:c0:4c: 49:32:d8:92:5d:31:88:15:6a:e6:2e:30:41:6e:eb: e0:8b:f5:a4:bd:64:50:2c:3d:99:d7:8a:51:05:a9: fe:59:b3:6e:5d:87:57:a5:f5:47:a4:68:ba:f7:ca: 5b:30:73:34:69:0e:0e:f3:94:e0:31:55:5d:69:3f: 4e:42:85:0d:8d:6f:b7:bd:5c:1d:7f:44:f9:82:1a: 3d:71:13:2b:72:26:f8:c9:3e:d9:3a:c6:a9:1e:8f: 68:e0:9b:17:55:2b:b7:60:7d:bd:1b:15:fc:6a:d6: f0:b6:f3:5d:e9:8e:48:de:dd:fa:69:cc:b0:cb:4b: 95:9e:e4:be:06:5e:d8:0d:40:6a:a7:49:60:2d:89: 36:ba:5d:59:a0:8e:28:70:a0:2f:ad:96:79:c0:8d: fa:c4:bb:d7:2e:a8:20:54:8b:0a:c7:ad:55:00:00: b9:75:c9:cf:11:12:6a:67:af:2a:a4:4e:8b:dd:26: ba:f1:e2:f2:68:19:25:be:25:70:b0:40:fc:de:bd: b9:cf:c0:69:09:b1:64:48:f3:ba:e9:37:09:bb:75: 4b:d2:ce:2e:e8:06:66:4b:98:5d:bf:1d:b4:b7:7a: 96:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A2:37:5D:2C:FA:5D:9C:BD:E8:E9:7E:D7:C4:1C:3F:D1:65:1F:87 X509v3 Authority Key Identifier: keyid:87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/RKI3XSz6XZy96Ol-18QcP9FlH4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.100.0/22 45.8.29.0-45.8.30.255 45.9.108.0/22 45.10.208.0-45.10.210.255 45.13.160.0/22 45.66.188.0/22 45.80.112.0/22 45.87.228.0/22 45.93.64.0/22 45.131.156.0/22 45.142.76.0/22 45.147.212.0/22 45.149.68.0/22 45.156.168.0/22 45.156.216.0/22 45.158.220.0/22 62.192.188.0/22 83.150.224.0/22 85.208.56.0/22 92.118.144.0/22 185.51.164.0/22 193.42.15.0/24 193.42.132.0/24 193.42.135.0/24 193.42.149.0/24 193.108.46.0/24 193.108.96.0/23 193.168.4.0/23 194.146.84.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:87:be:12:c3:d0:c3:36:22:61:f1:19:c2:ed:7b:a0:e4:77: ec:be:98:64:37:c4:e0:11:e3:a5:7c:75:e3:99:5a:d1:3c:af: 5a:c6:f7:e7:45:a0:54:a5:a6:1a:ef:a0:3d:8a:7c:b3:f4:11: d7:f4:9a:27:8f:60:54:64:07:f2:5b:57:32:e6:e4:ec:97:7b: 83:a9:1a:23:be:55:97:53:dc:e3:a4:81:2d:74:2e:40:73:6a: b8:bb:3c:12:61:30:13:a2:c5:21:d8:47:45:6a:2d:20:eb:91: f0:20:55:db:32:1a:0d:52:21:00:73:2b:a4:7f:37:8c:14:9d: d1:81:4b:76:31:32:77:ad:f0:7b:22:e3:bd:e2:45:7e:ba:d7: 98:92:64:5e:09:4c:ee:2a:84:00:2f:d2:f8:5e:ee:23:32:06: 69:3f:a4:95:79:21:9f:4e:49:7e:9e:6a:fb:75:b4:58:eb:11: 42:2f:d0:d3:a6:06:f5:89:f2:2e:37:3b:87:83:f4:fa:43:09: 2d:d4:cb:d3:b2:d8:b9:12:23:5d:c5:96:ae:af:4f:d5:52:85: 82:6e:26:4a:44:03:85:74:9e:e0:eb:22:68:dc:fb:53:b5:68: d3:79:1c:35:73:93:d5:59:bf:de:5c:25:16:55:04:3d:63:5a: 7d:0a:44:b6 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt6W3pD5G2hHXIms+YtXedIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OGFiYjI5OTc3YTY1YjE0MGNhY2I2ZTcyYWIyNGNlZGRk NGU4YzUwHhcNMjYwMTAxMTYxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGEyMzc1ZDJjZmE1ZDljYmRlOGU5N2VkN2M0MWMzZmQxNjUxZjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvIKW6wiJ6zQlAQK2aK5103EWLlt SH/TfFOZwExJMtiSXTGIFWrmLjBBbuvgi/WkvWRQLD2Z14pRBan+WbNuXYdXpfVH pGi698pbMHM0aQ4O85TgMVVdaT9OQoUNjW+3vVwdf0T5gho9cRMrcib4yT7ZOsap Ho9o4JsXVSu3YH29GxX8atbwtvNd6Y5I3t36acywy0uVnuS+Bl7YDUBqp0lgLYk2 ul1ZoI4ocKAvrZZ5wI36xLvXLqggVIsKx61VAAC5dcnPERJqZ68qpE6L3Sa68eLy aBklviVwsED83r25z8BpCbFkSPO66TcJu3VL0s4u6AZmS5hdvx20t3qWSQIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFESiN10s+l2cvejpftfEHD/RZR+HMB8GA1UdIwQY MBaAFIeKuymXemWxQMrLbnKrJM7d1OjFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDRxN0taZDZaYkZBeXN0dWNxc2t6dDNVNk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wNmI4ZjUtMWE3Ni00NWY4LWI5N2Et YWM4NjQ3ZDA1NThhLzEvUktJM1hTejZYWnk5Nk9sLTE4UWNQOUZsSDRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8wNmI4ZjUtMWE3Ni00NWY4LWI5N2EtYWM4NjQ3ZDA1NThh LzEvaDRxN0taZDZaYkZBeXN0dWNxc2t6dDNVNk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHbBggrBgEFBQcBBwEB/wSByzCByDCBxQQCAAEwgb4DBAIC O2QwDAMEAC0IHQMEAC0IHgMEAi0JbDAMAwQELQrQAwQALQrSAwQCLQ2gAwQCLUK8 AwQCLVBwAwQCLVfkAwQCLV1AAwQCLYOcAwQCLY5MAwQCLZPUAwQCLZVEAwQCLZyo AwQCLZzYAwQCLZ7cAwQCPsC8AwQCU5bgAwQCVdA4AwQCXHaQAwQCuTOkAwQAwSoP AwQAwSqEAwQAwSqHAwQAwSqVAwQAwWwuAwQBwWxgAwQBwagEAwQCwpJUMA0GCSqG SIb3DQEBCwUAA4IBAQAth74Sw9DDNiJh8RnC7Xug5HfsvphkN8TgEeOlfHXjmVrR PK9axvfnRaBUpaYa76A9inyz9BHX9Jonj2BUZAfyW1cy5uTsl3uDqRojvlWXU9zj pIEtdC5Ac2q4uzwSYTATosUh2EdFai0g65HwIFXbMhoNUiEAcyukfzeMFJ3RgUt2 MTJ3rfB7IuO94kV+uteYkmReCUzuKoQAL9L4Xu4jMgZpP6SVeSGfTkl+nmr7dbRY 6xFCL9DTpgb1ifIuNzuHg/T6Qwkt1MvTsti5EiNdxZaur0/VUoWCbiZKRAOFdJ7g 6yJo3PtTtWjTeRw1c5PVWb/eXCUWVQQ9Y1p9CkS2 -----END CERTIFICATE-----Generated at Fri Jan 23 09:56:48 2026 by rpki-client