This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/dw0pzmkTaZts4fybHtDLSMI8pwU.roa File: dw0pzmkTaZts4fybHtDLSMI8pwU.roa (raw, json) Hash identifier: POq13Xf4ByDXuaJoDtQFN2IdIJQyKKVS8tZJvFhZ98Q= Subject key identifier: 77:0D:29:CE:69:13:69:9B:6C:E1:FC:9B:1E:D0:CB:48:C2:3C:A7:05 Certificate issuer: /CN=addd2a815060aa7e621a2094349758b2036896f0 Certificate serial: 019B7EA68901A12238E494CCA97FA88C3CC2 Authority key identifier: AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/dw0pzmkTaZts4fybHtDLSMI8pwU.roa Signing time: Fri 02 Jan 2026 12:20:01 +0000 ROA not before: Fri 02 Jan 2026 12:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201776 IP address blocks: 2.59.51.0/24 maxlen: 24 31.40.208.0/22 maxlen: 22 31.40.252.0/22 maxlen: 22 37.44.252.0/22 maxlen: 22 77.83.8.0/22 maxlen: 22 77.83.16.0/22 maxlen: 22 78.136.196.0/22 maxlen: 22 78.136.200.0/21 maxlen: 21 78.153.137.0/24 maxlen: 24 78.153.138.0/24 maxlen: 24 78.153.147.0/24 maxlen: 24 83.171.252.0/22 maxlen: 22 83.172.60.0/22 maxlen: 24 83.172.61.0/24 maxlen: 24 85.115.200.0/22 maxlen: 22 89.107.136.0/22 maxlen: 22 89.107.138.0/24 maxlen: 24 89.107.139.0/24 maxlen: 24 91.103.110.0/23 maxlen: 23 94.126.24.0/21 maxlen: 24 94.126.30.0/24 maxlen: 24 109.94.220.0/22 maxlen: 22 109.236.52.0/22 maxlen: 22 109.237.104.0/24 maxlen: 24 178.34.152.0/21 maxlen: 21 178.34.176.0/20 maxlen: 20 178.173.124.0/22 maxlen: 22 185.64.44.0/22 maxlen: 22 188.119.76.0/22 maxlen: 22 188.124.224.0/21 maxlen: 21 188.124.248.0/21 maxlen: 21 193.47.44.0/22 maxlen: 22 193.56.64.0/22 maxlen: 22 193.56.72.0/22 maxlen: 22 193.148.52.0/22 maxlen: 22 217.197.172.0/22 maxlen: 22 2a04:f800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:89:01:a1:22:38:e4:94:cc:a9:7f:a8:8c:3c:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=addd2a815060aa7e621a2094349758b2036896f0 Validity Not Before: Jan 2 12:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=770d29ce6913699b6ce1fc9b1ed0cb48c23ca705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8d:af:cd:34:f3:be:03:5e:be:0d:49:63:b8: a1:14:06:28:5d:10:61:d6:70:d2:1f:9e:f8:8b:e6: 37:6b:5b:57:52:9a:77:4a:46:18:0d:b1:b1:c0:ca: d6:5d:dc:6b:62:5a:f1:bd:83:49:ab:dc:34:07:f3: a2:e3:ef:60:0a:18:72:74:55:99:4b:2d:53:2a:3a: 07:c5:35:d1:05:89:65:aa:37:33:93:0e:d5:f6:81: 33:25:9d:32:f1:f7:03:a5:97:1b:34:07:4e:dd:6d: 71:7e:c0:81:29:d1:9e:75:12:37:36:57:f3:d4:1f: 4f:55:cb:6c:7f:44:ef:16:e1:c0:c1:31:38:e4:8e: 04:29:7a:ab:32:3e:15:f1:b9:27:50:bd:cb:4e:e9: ac:95:74:d0:63:f1:59:68:cb:32:e0:86:4f:85:b4: 6d:19:e7:6e:23:54:43:ad:7e:2a:95:62:ba:a5:ab: 6b:f9:c1:d3:b9:92:fb:2b:c0:b8:f6:d9:d5:68:6d: c0:4b:8e:28:8c:11:a9:de:a6:42:67:b6:cd:14:40: c0:9b:cc:f2:bc:31:61:9d:cf:cd:b5:d9:c4:45:2d: 35:7e:c3:1e:a1:f0:7d:aa:d5:0c:5e:7c:84:51:54: a1:e0:a3:44:06:20:f9:e2:6b:cc:a0:45:0b:55:87: 9b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0D:29:CE:69:13:69:9B:6C:E1:FC:9B:1E:D0:CB:48:C2:3C:A7:05 X509v3 Authority Key Identifier: keyid:AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/dw0pzmkTaZts4fybHtDLSMI8pwU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.51.0/24 31.40.208.0/22 31.40.252.0/22 37.44.252.0/22 77.83.8.0/22 77.83.16.0/22 78.136.196.0-78.136.207.255 78.153.137.0-78.153.138.255 78.153.147.0/24 83.171.252.0/22 83.172.60.0/22 85.115.200.0/22 89.107.136.0/22 91.103.110.0/23 94.126.24.0/21 109.94.220.0/22 109.236.52.0/22 109.237.104.0/24 178.34.152.0/21 178.34.176.0/20 178.173.124.0/22 185.64.44.0/22 188.119.76.0/22 188.124.224.0/21 188.124.248.0/21 193.47.44.0/22 193.56.64.0/22 193.56.72.0/22 193.148.52.0/22 217.197.172.0/22 IPv6: 2a04:f800::/29 Signature Algorithm: sha256WithRSAEncryption 2b:3a:86:ef:1a:e3:d2:a9:f5:94:77:9c:06:38:5d:a7:9d:d7: 71:31:42:06:c8:7c:e7:76:f2:96:80:92:46:76:75:e6:94:51: 67:ac:ee:42:c0:60:d8:c5:3c:1c:c6:4d:26:59:b3:ad:9a:90: 7c:8b:4c:a2:33:b8:e9:04:d2:7f:c6:b6:41:08:18:1a:74:d9: aa:17:99:29:e2:36:4f:7e:d3:14:20:26:22:aa:f3:d4:14:8b: 02:1e:af:a7:6a:ca:dc:e0:ea:28:32:83:1f:2d:69:41:a0:02: d7:fa:7e:d2:d9:c4:68:d0:ec:83:da:ae:43:d3:e5:14:09:06: 2a:ef:bf:61:43:6e:71:33:17:d6:c3:2b:a7:a1:c8:50:2f:e1: 42:cc:b9:09:48:e8:0f:c8:6b:76:c9:02:f5:71:48:e7:7a:57: 13:e7:1a:7a:ec:b0:a7:ea:b8:19:a7:35:44:35:a7:8f:40:c7: 6b:2b:46:ca:f0:9c:0a:f1:55:be:7c:4e:ca:e5:2e:cb:58:6e: d4:98:ba:eb:0a:b3:b3:25:75:e9:6f:31:00:a7:9c:c7:b9:42: 7b:98:13:14:ad:6a:d1:cd:36:b5:28:9f:a7:55:32:18:c7:0c: 7f:a0:2f:93:48:e7:a4:33:ae:7c:ad:2d:22:d3:23:18:c3:55: 19:47:1d:5c -----BEGIN CERTIFICATE----- MIIFzzCCBLegAwIBAgISAZt+pokBoSI45JTMqX+ojDzCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZGQyYTgxNTA2MGFhN2U2MjFhMjA5NDM0OTc1OGIyMDM2 ODk2ZjAwHhcNMjYwMTAyMTIyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzBkMjljZTY5MTM2OTliNmNlMWZjOWIxZWQwY2I0OGMyM2NhNzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI2vzTTzvgNevg1JY7ihFAYoXRBh 1nDSH574i+Y3a1tXUpp3SkYYDbGxwMrWXdxrYlrxvYNJq9w0B/Oi4+9gChhydFWZ Sy1TKjoHxTXRBYllqjczkw7V9oEzJZ0y8fcDpZcbNAdO3W1xfsCBKdGedRI3Nlfz 1B9PVctsf0TvFuHAwTE45I4EKXqrMj4V8bknUL3LTumslXTQY/FZaMsy4IZPhbRt GeduI1RDrX4qlWK6patr+cHTuZL7K8C49tnVaG3AS44ojBGp3qZCZ7bNFEDAm8zy vDFhnc/NtdnERS01fsMeofB9qtUMXnyEUVSh4KNEBiD54mvMoEULVYebxwIDAQAB o4IC2zCCAtcwHQYDVR0OBBYEFHcNKc5pE2mbbOH8mx7Qy0jCPKcFMB8GA1UdIwQY MBaAFK3dKoFQYKp+YhoglDSXWLIDaJbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmQwcWdWQmdxbjVpR2lDVU5KZFlzZ05vbHZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lNGZhNDgtM2JlOC00ZmEzLWE0MzYt OGEwZDBiZjBiNTc3LzEvZHcwcHpta1RhWnRzNGZ5Ykh0RExTTUk4cHdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9lNGZhNDgtM2JlOC00ZmEzLWE0MzYtOGEwZDBiZjBiNTc3 LzEvcmQwcWdWQmdxbjVpR2lDVU5KZFlzZ05vbHZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHwBggrBgEFBQcBBwEB/wSB4DCB3TCBywQCAAEwgcQDBAAC OzMDBAIfKNADBAIfKPwDBAIlLPwDBAJNUwgDBAJNUxAwDAMEAk6IxAMEBE6IwDAM AwQATpmJAwQATpmKAwQATpmTAwQCU6v8AwQCU6w8AwQCVXPIAwQCWWuIAwQBW2du AwQDXn4YAwQCbV7cAwQCbew0AwQAbe1oAwQDsiKYAwQEsiKwAwQCsq18AwQCuUAs AwQCvHdMAwQDvHzgAwQDvHz4AwQCwS8sAwQCwThAAwQCwThIAwQCwZQ0AwQC2cWs MA0EAgACMAcDBQMqBPgAMA0GCSqGSIb3DQEBCwUAA4IBAQArOobvGuPSqfWUd5wG OF2nnddxMUIGyHzndvKWgJJGdnXmlFFnrO5CwGDYxTwcxk0mWbOtmpB8i0yiM7jp BNJ/xrZBCBgadNmqF5kp4jZPftMUICYiqvPUFIsCHq+nasrc4OooMoMfLWlBoALX +n7S2cRo0OyD2q5D0+UUCQYq779hQ25xMxfWwyunochQL+FCzLkJSOgPyGt2yQL1 cUjnelcT5xp67LCn6rgZpzVENaePQMdrK0bK8JwK8VW+fE7K5S7LWG7UmLrrCrOz JXXpbzEAp5zHuUJ7mBMUrWrRzTa1KJ+nVTIYxwx/oC+TSOekM658rS0i0yMYw1UZ Rx1c -----END CERTIFICATE-----Generated at Mon Jan 26 15:00:30 2026 by rpki-client