This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/04FbY6kBRpqiGP3AkiBuCWu5Bes.roa File: 04FbY6kBRpqiGP3AkiBuCWu5Bes.roa (raw, json) Hash identifier: HoNtS+1Oc+MT8EGjXP3z2c8KS6IAUrdzH1rtxmawMCg= Subject key identifier: D3:81:5B:63:A9:01:46:9A:A2:18:FD:C0:92:20:6E:09:6B:B9:05:EB Certificate issuer: /CN=a088b0547f09fe9224050d70a523da5bedbe0738 Certificate serial: 019B77C71DA44DDEB5AB25E34F58ED37FD42 Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/04FbY6kBRpqiGP3AkiBuCWu5Bes.roa Signing time: Thu 01 Jan 2026 04:18:16 +0000 ROA not before: Thu 01 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215413 IP address blocks: 37.230.138.0/24 maxlen: 24 45.85.60.0/22 maxlen: 24 45.143.196.0/24 maxlen: 24 45.143.197.0/24 maxlen: 24 45.143.198.0/24 maxlen: 24 45.143.199.0/24 maxlen: 24 81.16.176.0/24 maxlen: 24 81.16.177.0/24 maxlen: 24 91.208.92.0/24 maxlen: 24 185.83.152.0/24 maxlen: 24 185.83.153.0/24 maxlen: 24 185.83.154.0/24 maxlen: 24 185.83.155.0/24 maxlen: 24 185.206.148.0/24 maxlen: 24 185.206.149.0/24 maxlen: 24 185.206.150.0/24 maxlen: 24 185.206.151.0/24 maxlen: 24 188.64.33.0/24 maxlen: 24 194.164.96.0/24 maxlen: 24 194.213.3.0/24 maxlen: 24 213.170.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 16:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1d:a4:4d:de:b5:ab:25:e3:4f:58:ed:37:fd:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738 Validity Not Before: Jan 1 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3815b63a901469aa218fdc092206e096bb905eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a5:8f:59:9f:01:82:8b:ff:8d:e9:8f:0d:90: ae:b9:d4:f6:c2:ed:34:5e:be:7d:d5:cc:97:47:2e: 18:77:7a:da:65:1b:83:c1:2c:c8:43:98:37:98:b3: df:8e:00:57:2d:89:d1:fa:f9:1f:52:91:5f:9a:56: 67:59:01:06:d6:13:da:1b:a8:d4:dc:b7:1c:2d:5c: 89:16:a9:b1:79:15:41:c7:66:02:92:f5:5f:6a:90: fd:81:cf:bc:e0:a8:2e:0e:ad:34:37:86:e8:0a:a0: 79:28:68:87:a5:21:5a:7a:7d:36:b1:a6:49:65:e0: 98:4e:e3:ad:cb:23:1a:71:0e:b1:33:c5:92:3a:ea: 7b:e9:fe:e2:f6:f1:d8:d3:7a:23:1e:af:fe:f9:9f: 96:d0:94:7d:6c:05:92:84:9a:58:9e:95:59:22:a1: d9:9c:6d:fc:d6:10:85:90:9d:90:93:12:75:39:49: 79:0a:f2:83:61:64:c3:9f:bd:91:00:b6:7e:aa:43: 47:9b:1b:c3:ef:d7:67:57:04:d2:6b:25:3a:8c:22: a2:26:75:e8:99:77:ff:e7:8b:06:25:52:f0:40:32: bd:a7:f3:05:b1:49:79:61:97:34:46:e1:0f:0e:29: e3:0a:23:95:88:cc:9b:e5:90:fe:a5:95:6f:a5:b0: 0a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:81:5B:63:A9:01:46:9A:A2:18:FD:C0:92:20:6E:09:6B:B9:05:EB X509v3 Authority Key Identifier: keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/04FbY6kBRpqiGP3AkiBuCWu5Bes.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.138.0/24 45.85.60.0/22 45.143.196.0/22 81.16.176.0/23 91.208.92.0/24 185.83.152.0/22 185.206.148.0/22 188.64.33.0/24 194.164.96.0/24 194.213.3.0/24 213.170.135.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:91:56:a4:5e:0c:a1:08:f4:08:7f:f8:cc:5f:b3:c0:86:20: 4e:00:bf:75:aa:45:4d:93:97:eb:d5:6a:71:cb:12:d8:8e:cb: a6:5d:b9:72:01:82:81:56:ff:d4:f5:0b:a6:e3:ba:6e:81:09: 81:8e:25:ca:9d:9f:8d:96:58:50:a5:af:d2:ce:cd:5f:ed:a9: c2:c3:ba:30:0d:0f:dc:5e:69:bb:d1:15:8a:4d:2a:1f:bd:7d: ef:e7:3c:d4:52:8a:0c:ba:e0:f5:7d:1f:96:3d:ae:0e:dc:95: 3f:84:22:d9:f5:d7:2f:50:26:53:4f:97:17:9b:55:eb:3c:5b: 3e:95:1f:8d:60:61:7f:15:96:31:40:9c:c7:58:bc:ed:47:c7: 6d:68:5a:8f:97:83:5f:9c:5b:a2:39:b1:ed:8c:43:cb:8b:18: 36:1f:1e:91:da:4a:1c:28:f9:72:7c:39:d2:ad:eb:7b:d1:44: 8a:12:79:80:7e:57:80:0f:59:c8:2c:8c:f8:d9:c3:93:a5:09: 34:38:8f:f2:cd:01:68:a4:b8:ab:09:6a:8a:3b:93:90:71:d3: 2d:4c:5e:15:ee:ce:c8:12:38:d9:94:e9:0c:19:2f:0b:48:5d: bf:47:98:45:9c:e0:35:94:a9:3e:ec:2f:d8:a8:7b:8b:61:20: 3b:37:e3:88 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt3xx2kTd61qyXjT1jtN/1CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwODhiMDU0N2YwOWZlOTIyNDA1MGQ3MGE1MjNkYTViZWRi ZTA3MzgwHhcNMjYwMTAxMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzgxNWI2M2E5MDE0NjlhYTIxOGZkYzA5MjIwNmUwOTZiYjkwNWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KWPWZ8Bgov/jemPDZCuudT2wu00 Xr591cyXRy4Yd3raZRuDwSzIQ5g3mLPfjgBXLYnR+vkfUpFfmlZnWQEG1hPaG6jU 3LccLVyJFqmxeRVBx2YCkvVfapD9gc+84KguDq00N4boCqB5KGiHpSFaen02saZJ ZeCYTuOtyyMacQ6xM8WSOup76f7i9vHY03ojHq/++Z+W0JR9bAWShJpYnpVZIqHZ nG381hCFkJ2QkxJ1OUl5CvKDYWTDn72RALZ+qkNHmxvD79dnVwTSayU6jCKiJnXo mXf/54sGJVLwQDK9p/MFsUl5YZc0RuEPDinjCiOViMyb5ZD+pZVvpbAKPwIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFNOBW2OpAUaaohj9wJIgbglruQXrMB8GA1UdIwQY MBaAFKCIsFR/Cf6SJAUNcKUj2lvtvgc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMt ZGY4MmZhODk3MzI2LzEvMDRGYlk2a0JScHFpR1AzQWtpQnVDV3U1QmVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMtZGY4MmZhODk3MzI2 LzEvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAJeaKAwQC LVU8AwQCLY/EAwQBURCwAwQAW9BcAwQCuVOYAwQCuc6UAwQAvEAhAwQAwqRgAwQA wtUDAwQA1aqHMA0GCSqGSIb3DQEBCwUAA4IBAQB/kVakXgyhCPQIf/jMX7PAhiBO AL91qkVNk5fr1WpxyxLYjsumXblyAYKBVv/U9Qum47pugQmBjiXKnZ+NllhQpa/S zs1f7anCw7owDQ/cXmm70RWKTSofvX3v5zzUUooMuuD1fR+WPa4O3JU/hCLZ9dcv UCZTT5cXm1XrPFs+lR+NYGF/FZYxQJzHWLztR8dtaFqPl4NfnFuiObHtjEPLixg2 Hx6R2kocKPlyfDnSret70USKEnmAfleAD1nILIz42cOTpQk0OI/yzQFopLirCWqK O5OQcdMtTF4V7s7IEjjZlOkMGS8LSF2/R5hFnOA1lKk+7C/YqHuLYSA7N+OI -----END CERTIFICATE-----Generated at Fri Jan 9 00:11:55 2026 by rpki-client