This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/IGRV2WsskuWTSjE61k7EJ5BQL_g.roa File: IGRV2WsskuWTSjE61k7EJ5BQL_g.roa (raw, json) Hash identifier: TD0j7saLbQNy5wP2+Z7EAP+DfzUHpEljN22YPu7FxcQ= Subject key identifier: 20:64:55:D9:6B:2C:92:E5:93:4A:31:3A:D6:4E:C4:27:90:50:2F:F8 Certificate issuer: /CN=237f7db033314c473cda194e0df79f1c375da3f4 Certificate serial: 019B79ECF4DDAC7B4029DD81D4D4570980E9 Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/IGRV2WsskuWTSjE61k7EJ5BQL_g.roa Signing time: Thu 01 Jan 2026 14:18:50 +0000 ROA not before: Thu 01 Jan 2026 14:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3225 IP address blocks: 91.140.128.0/17 maxlen: 24 91.140.128.0/22 maxlen: 24 91.140.132.0/22 maxlen: 24 91.140.140.0/22 maxlen: 24 91.140.148.0/22 maxlen: 24 91.140.152.0/22 maxlen: 24 91.140.160.0/22 maxlen: 24 91.140.164.0/22 maxlen: 24 91.140.172.0/22 maxlen: 24 91.140.180.0/22 maxlen: 24 91.140.188.0/22 maxlen: 24 91.140.192.0/22 maxlen: 24 91.140.196.0/22 maxlen: 24 91.140.200.0/22 maxlen: 24 91.140.201.0/24 maxlen: 24 91.140.202.0/24 maxlen: 24 91.140.203.0/24 maxlen: 24 91.140.204.0/22 maxlen: 24 91.140.207.0/24 maxlen: 24 91.140.208.0/22 maxlen: 24 91.140.212.0/22 maxlen: 24 91.140.216.0/22 maxlen: 24 91.140.220.0/24 maxlen: 24 91.140.221.0/24 maxlen: 24 91.140.222.0/24 maxlen: 24 91.140.223.0/24 maxlen: 24 91.140.224.0/22 maxlen: 24 91.140.224.0/24 maxlen: 24 91.140.226.0/24 maxlen: 24 91.140.228.0/22 maxlen: 24 91.140.232.0/24 maxlen: 24 91.140.233.0/24 maxlen: 24 91.140.234.0/24 maxlen: 24 91.140.235.0/24 maxlen: 24 91.140.236.0/24 maxlen: 24 91.140.237.0/24 maxlen: 24 91.140.238.0/24 maxlen: 24 91.140.239.0/24 maxlen: 24 91.140.240.0/24 maxlen: 24 91.140.241.0/24 maxlen: 24 91.140.242.0/24 maxlen: 24 91.140.244.0/22 maxlen: 24 91.140.246.0/24 maxlen: 24 91.140.248.0/22 maxlen: 24 91.140.248.0/24 maxlen: 24 91.140.249.0/24 maxlen: 24 91.140.250.0/24 maxlen: 24 91.140.251.0/24 maxlen: 24 91.140.252.0/22 maxlen: 24 91.140.252.0/24 maxlen: 24 91.140.253.0/24 maxlen: 24 91.140.254.0/24 maxlen: 24 91.140.255.0/24 maxlen: 24 94.187.224.0/19 maxlen: 24 94.187.228.0/22 maxlen: 24 94.187.232.0/22 maxlen: 24 94.187.236.0/22 maxlen: 24 94.187.240.0/22 maxlen: 24 94.187.244.0/22 maxlen: 24 94.187.248.0/22 maxlen: 24 94.187.252.0/22 maxlen: 24 185.16.4.0/22 maxlen: 24 194.54.192.0/18 maxlen: 24 194.54.192.0/19 maxlen: 24 194.54.194.0/23 maxlen: 24 194.54.196.0/22 maxlen: 24 194.54.200.0/22 maxlen: 24 194.54.202.0/24 maxlen: 24 194.54.204.0/22 maxlen: 24 194.54.208.0/22 maxlen: 24 194.54.208.0/24 maxlen: 24 194.54.209.0/24 maxlen: 24 194.54.212.0/22 maxlen: 24 194.54.216.0/22 maxlen: 24 194.54.220.0/22 maxlen: 24 194.54.220.0/24 maxlen: 24 194.54.224.0/19 maxlen: 24 194.54.224.0/22 maxlen: 24 194.54.228.0/22 maxlen: 24 194.54.232.0/22 maxlen: 24 194.54.234.0/24 maxlen: 24 194.54.236.0/22 maxlen: 24 194.54.240.0/22 maxlen: 24 194.54.241.0/24 maxlen: 24 194.54.243.0/24 maxlen: 24 194.54.244.0/22 maxlen: 24 194.54.248.0/22 maxlen: 24 194.54.252.0/22 maxlen: 24 2a01:7780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:f4:dd:ac:7b:40:29:dd:81:d4:d4:57:09:80:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4 Validity Not Before: Jan 1 14:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=206455d96b2c92e5934a313ad64ec42790502ff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3d:36:29:dc:b9:08:d6:da:6a:4d:72:13:99: 8c:c5:87:5c:65:87:d4:72:6c:83:1a:bd:09:e4:fb: c8:d5:a9:6c:70:00:1b:60:48:1e:b7:54:32:f5:00: 64:43:a7:de:35:05:48:57:59:fe:06:da:2a:c8:2c: b0:0c:d1:e9:e6:12:c8:a0:4a:3f:78:5f:0d:bb:a2: ee:d0:a4:70:50:81:71:11:d8:45:e5:70:33:6b:aa: 60:ad:8e:66:80:6b:ee:f2:a1:e3:94:24:09:93:91: b1:b5:aa:2f:5e:89:d4:38:ec:f7:13:d1:c2:68:eb: a3:69:e8:85:98:e2:4d:4e:7f:32:bc:82:66:0d:ac: 6d:ce:a0:33:d7:bc:e3:03:1f:9e:83:27:3d:22:0a: 85:c8:1d:da:68:21:00:5f:14:64:48:7c:96:fc:58: ca:8f:8c:cf:fd:a6:87:bf:00:2e:bb:91:e0:63:86: 9a:b6:71:8e:ee:2b:d6:f3:0d:5e:b6:b5:b2:92:fb: 28:50:27:04:e6:a7:af:bd:0e:14:58:be:43:ff:37: 34:be:28:03:34:af:03:57:91:98:7a:e0:d2:4e:9a: ed:c2:d3:46:10:c5:1f:5d:2f:ef:b6:f4:cd:df:28: e0:e8:ab:04:79:f3:de:f0:ce:70:54:ff:5d:21:74: 3a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:64:55:D9:6B:2C:92:E5:93:4A:31:3A:D6:4E:C4:27:90:50:2F:F8 X509v3 Authority Key Identifier: keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/IGRV2WsskuWTSjE61k7EJ5BQL_g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.140.128.0/17 94.187.224.0/19 185.16.4.0/22 194.54.192.0/18 IPv6: 2a01:7780::/32 Signature Algorithm: sha256WithRSAEncryption 1e:c8:9c:fc:1b:1c:6f:13:91:a4:a9:12:ac:5f:30:7a:09:85: 08:d2:3b:79:bb:12:0b:2f:a3:a7:bf:e0:af:e1:a1:f2:ef:a4: 75:ff:08:4b:e7:b0:47:7c:e6:c9:3a:70:c3:49:8d:30:6d:1f: 25:90:e8:af:73:c6:6d:7d:a2:e7:11:0a:60:dc:cd:38:ab:a2: 67:ea:0b:8a:29:8a:d5:3d:31:1a:f5:82:c7:35:4b:61:98:0c: 47:91:af:5f:f9:31:25:85:09:ca:72:b6:fc:e2:a0:42:ea:15: 1a:da:24:3b:f5:94:d1:d2:44:57:11:ad:9d:e6:25:5a:2d:4e: c9:2a:93:49:03:0e:e8:e8:c0:c3:3b:d4:b4:0a:1e:49:27:8b: 26:38:44:cb:c2:60:bf:04:b4:52:c3:ce:16:35:9f:0a:31:10: 02:6a:14:9d:bf:bb:8d:92:bf:90:45:30:8d:a9:3a:fd:70:a6: ae:22:c8:59:ce:01:3c:be:e2:c3:cf:c2:9f:fb:5a:f3:db:17: 03:90:8a:92:b7:19:37:c5:05:d2:14:a8:d4:89:ad:85:a0:f9: 15:af:ce:94:1f:a4:f3:6e:25:64:10:47:af:4d:3b:12:8e:5a: 85:82:14:49:d6:08:20:12:df:8b:45:1b:8b:53:e7:80:6a:36: f1:e2:5f:bc -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt57PTdrHtAKd2B1NRXCYDpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzN2Y3ZGIwMzMzMTRjNDczY2RhMTk0ZTBkZjc5ZjFjMzc1 ZGEzZjQwHhcNMjYwMTAxMTQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDY0NTVkOTZiMmM5MmU1OTM0YTMxM2FkNjRlYzQyNzkwNTAyZmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz02Kdy5CNbaak1yE5mMxYdcZYfU cmyDGr0J5PvI1alscAAbYEget1Qy9QBkQ6feNQVIV1n+BtoqyCywDNHp5hLIoEo/ eF8Nu6Lu0KRwUIFxEdhF5XAza6pgrY5mgGvu8qHjlCQJk5GxtaovXonUOOz3E9HC aOujaeiFmOJNTn8yvIJmDaxtzqAz17zjAx+egyc9IgqFyB3aaCEAXxRkSHyW/FjK j4zP/aaHvwAuu5HgY4aatnGO7ivW8w1etrWykvsoUCcE5qevvQ4UWL5D/zc0vigD NK8DV5GYeuDSTprtwtNGEMUfXS/vtvTN3yjg6KsEefPe8M5wVP9dIXQ6VQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFCBkVdlrLJLlk0oxOtZOxCeQUC/4MB8GA1UdIwQY MBaAFCN/fbAzMUxHPNoZTg33nxw3XaP0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lZWY1NTctMGUxMC00MGNlLWE0OGYt ZWUwNjAzOTQ5ZjkzLzEvSUdSVjJXc3NrdVdUU2pFNjFrN0VKNUJRTF9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9lZWY1NTctMGUxMC00MGNlLWE0OGYtZWUwNjAzOTQ5Zjkz LzEvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQHW4yAAwQF XrvgAwQCuRAEAwQGwjbAMA0EAgACMAcDBQAqAXeAMA0GCSqGSIb3DQEBCwUAA4IB AQAeyJz8GxxvE5GkqRKsXzB6CYUI0jt5uxILL6Onv+Cv4aHy76R1/whL57BHfObJ OnDDSY0wbR8lkOivc8ZtfaLnEQpg3M04q6Jn6guKKYrVPTEa9YLHNUthmAxHka9f +TElhQnKcrb84qBC6hUa2iQ79ZTR0kRXEa2d5iVaLU7JKpNJAw7o6MDDO9S0Ch5J J4smOETLwmC/BLRSw84WNZ8KMRACahSdv7uNkr+QRTCNqTr9cKauIshZzgE8vuLD z8Kf+1rz2xcDkIqStxk3xQXSFKjUia2FoPkVr86UH6TzbiVkEEevTTsSjlqFghRJ 1gggEt+LRRuLU+eAajbx4l+8 -----END CERTIFICATE-----Generated at Tue Jan 20 06:17:02 2026 by rpki-client