This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/E3zCcBPVk1wKs_SgS6nmjH8a8To.roa File: E3zCcBPVk1wKs_SgS6nmjH8a8To.roa (raw, json) Hash identifier: +TJFVpXMWTijJKbmn1LPjwhCJ32DrJMAnCSufx5Zofw= Subject key identifier: 13:7C:C2:70:13:D5:93:5C:0A:B3:F4:A0:4B:A9:E6:8C:7F:1A:F1:3A Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BF9771C624DCE1DB74D797DE785E602FB Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/E3zCcBPVk1wKs_SgS6nmjH8a8To.roa Signing time: Mon 26 Jan 2026 08:41:31 +0000 ROA not before: Mon 26 Jan 2026 08:41:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 31.56.176.0/22 maxlen: 24 31.56.182.0/23 maxlen: 24 31.56.184.0/22 maxlen: 24 31.56.188.0/23 maxlen: 24 31.56.208.0/23 maxlen: 24 31.56.228.0/23 maxlen: 24 31.57.36.0/23 maxlen: 24 31.57.168.0/23 maxlen: 24 31.57.184.0/23 maxlen: 24 31.57.200.0/24 maxlen: 24 31.57.208.0/22 maxlen: 22 31.57.216.0/23 maxlen: 24 31.57.250.0/23 maxlen: 24 31.58.76.0/22 maxlen: 24 31.58.92.0/22 maxlen: 24 31.58.180.0/22 maxlen: 24 31.58.184.0/21 maxlen: 24 31.58.192.0/22 maxlen: 24 31.58.196.0/22 maxlen: 24 31.58.204.0/22 maxlen: 24 31.58.208.0/23 maxlen: 24 31.58.232.0/23 maxlen: 24 31.58.239.0/24 maxlen: 24 31.59.36.0/22 maxlen: 24 31.59.44.0/22 maxlen: 24 31.59.84.0/22 maxlen: 24 31.59.90.0/23 maxlen: 24 31.59.140.0/22 maxlen: 24 31.59.148.0/22 maxlen: 24 31.59.152.0/21 maxlen: 24 31.59.160.0/22 maxlen: 24 31.59.164.0/23 maxlen: 24 94.183.151.0/24 maxlen: 24 94.183.152.0/22 maxlen: 22 94.183.158.0/24 maxlen: 24 94.183.164.0/24 maxlen: 24 94.183.166.0/24 maxlen: 24 94.183.174.0/24 maxlen: 24 94.183.175.0/24 maxlen: 24 94.183.176.0/24 maxlen: 24 94.183.179.0/24 maxlen: 24 94.183.180.0/24 maxlen: 24 94.183.181.0/24 maxlen: 24 94.183.192.0/22 maxlen: 22 94.183.196.0/22 maxlen: 22 94.183.200.0/22 maxlen: 22 94.183.204.0/22 maxlen: 22 94.183.208.0/22 maxlen: 22 94.183.212.0/22 maxlen: 22 94.183.216.0/22 maxlen: 22 94.183.220.0/22 maxlen: 22 94.183.224.0/22 maxlen: 22 94.183.228.0/22 maxlen: 22 94.183.236.0/22 maxlen: 22 94.183.240.0/22 maxlen: 22 94.183.244.0/22 maxlen: 22 94.183.248.0/22 maxlen: 22 94.183.252.0/22 maxlen: 22 217.60.8.0/22 maxlen: 24 217.60.15.0/24 maxlen: 24 217.60.16.0/21 maxlen: 24 217.60.25.0/24 maxlen: 24 217.60.28.0/22 maxlen: 24 217.60.32.0/22 maxlen: 24 217.60.40.0/22 maxlen: 24 217.60.44.0/22 maxlen: 24 217.60.48.0/22 maxlen: 24 217.60.52.0/22 maxlen: 24 217.60.56.0/22 maxlen: 24 217.60.160.0/20 maxlen: 24 217.60.176.0/21 maxlen: 24 217.60.188.0/22 maxlen: 24 217.60.196.0/23 maxlen: 24 217.60.208.0/20 maxlen: 24 217.60.224.0/21 maxlen: 24 217.60.232.0/22 maxlen: 24 217.60.244.0/23 maxlen: 24 2a14:6e40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:77:1c:62:4d:ce:1d:b7:4d:79:7d:e7:85:e6:02:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 26 08:41:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=137cc27013d5935c0ab3f4a04ba9e68c7f1af13a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:47:79:fe:48:1c:40:c9:13:11:45:37:6b:e9: ea:ef:f4:1a:76:5c:6f:18:b8:94:c2:65:b2:37:3e: 14:93:35:30:2c:c7:f2:28:0b:e6:3e:99:ff:f2:04: 0d:38:3b:f2:10:1c:b3:19:fc:be:22:b3:37:a1:b4: 56:de:2f:d2:a0:f3:5c:d3:68:6e:df:ed:02:b2:8e: 5d:fd:61:c6:58:b8:a2:f7:0b:8f:29:05:6c:48:f3: 3e:44:c5:0c:f2:d0:e3:eb:b8:3d:06:cf:47:78:cc: 4e:34:1b:14:31:83:ab:28:0c:f6:a3:3e:ac:4d:77: 9b:74:ae:7e:20:e4:1c:10:dd:1a:74:e1:a9:ea:c3: 0d:84:06:a2:3d:7e:86:d2:04:73:0d:0a:13:93:b0: 75:27:8d:18:b8:66:46:86:8c:94:3a:a7:15:58:b2: 1b:47:94:b5:07:d1:46:ef:c7:3a:ea:76:1b:bc:79: 23:b1:57:94:2d:e2:65:d2:5b:41:9d:8a:83:e3:6e: 7a:7c:6b:c5:10:4c:83:c7:1b:47:25:89:3d:32:49: de:93:e3:6b:25:ee:19:a4:8d:44:ff:59:b8:5b:df: c2:65:64:ce:3c:55:ad:ea:a0:de:d8:e9:41:41:fe: 6d:e6:30:51:3d:1e:b3:3d:d6:34:b8:6e:8a:95:9d: d3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7C:C2:70:13:D5:93:5C:0A:B3:F4:A0:4B:A9:E6:8C:7F:1A:F1:3A X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/E3zCcBPVk1wKs_SgS6nmjH8a8To.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.176.0/22 31.56.182.0-31.56.189.255 31.56.208.0/23 31.56.228.0/23 31.57.36.0/23 31.57.168.0/23 31.57.184.0/23 31.57.200.0/24 31.57.208.0/22 31.57.216.0/23 31.57.250.0/23 31.58.76.0/22 31.58.92.0/22 31.58.180.0-31.58.199.255 31.58.204.0-31.58.209.255 31.58.232.0/23 31.58.239.0/24 31.59.36.0/22 31.59.44.0/22 31.59.84.0/22 31.59.90.0/23 31.59.140.0/22 31.59.148.0-31.59.165.255 94.183.151.0-94.183.155.255 94.183.158.0/24 94.183.164.0/24 94.183.166.0/24 94.183.174.0-94.183.176.255 94.183.179.0-94.183.181.255 94.183.192.0-94.183.231.255 94.183.236.0-94.183.255.255 217.60.8.0/22 217.60.15.0-217.60.23.255 217.60.25.0/24 217.60.28.0-217.60.35.255 217.60.40.0-217.60.59.255 217.60.160.0-217.60.183.255 217.60.188.0/22 217.60.196.0/23 217.60.208.0-217.60.235.255 217.60.244.0/23 IPv6: 2a14:6e40:1::/48 Signature Algorithm: sha256WithRSAEncryption 3f:42:28:4c:a4:50:38:8c:96:dc:23:90:b7:93:55:65:7d:fd: fc:e6:a2:49:9d:9b:72:29:d8:0b:54:e1:d4:1b:74:d7:d4:a3: be:86:8b:a5:0d:6a:7a:32:81:d4:4d:0e:d0:66:d5:5b:08:6c: 07:be:b3:64:5e:41:48:21:fe:39:af:d2:f3:3a:2b:ef:20:0c: 32:55:97:2a:b1:bb:f6:25:7d:c7:b3:77:cf:9c:b3:c5:69:9e: ba:27:1b:47:16:df:a0:ec:76:15:0d:59:bf:81:5a:80:85:3a: 1a:7a:e7:19:90:15:d9:f1:88:1b:49:49:07:a2:1e:be:3b:21: 17:c4:13:fd:08:8e:67:ec:da:9d:d9:f0:b5:62:93:e5:c6:59: 81:57:54:5f:1f:ef:67:57:d5:3e:b0:54:bb:77:ff:cd:64:a2: f1:8d:5a:d3:75:e5:c7:16:2e:8d:2e:29:43:38:cc:fc:94:c2: f7:e4:80:4b:64:9a:e2:6d:b9:c1:92:37:23:1e:29:ce:7f:93: 0f:40:b5:d6:e4:81:52:f1:62:06:80:b0:9b:a8:37:c1:28:a2: de:2e:15:84:41:51:4a:26:de:79:a5:7a:ce:9f:88:f8:59:98: 34:ee:6b:68:92:49:12:f2:bc:94:d3:65:a3:8a:61:62:3b:38: d6:1e:43:f4 -----BEGIN CERTIFICATE----- MIIGdzCCBV+gAwIBAgISAZv5dxxiTc4dt015feeF5gL7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTI2MDg0MTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzdjYzI3MDEzZDU5MzVjMGFiM2Y0YTA0YmE5ZTY4YzdmMWFmMTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEd5/kgcQMkTEUU3a+nq7/Qadlxv GLiUwmWyNz4UkzUwLMfyKAvmPpn/8gQNODvyEByzGfy+IrM3obRW3i/SoPNc02hu 3+0Cso5d/WHGWLii9wuPKQVsSPM+RMUM8tDj67g9Bs9HeMxONBsUMYOrKAz2oz6s TXebdK5+IOQcEN0adOGp6sMNhAaiPX6G0gRzDQoTk7B1J40YuGZGhoyUOqcVWLIb R5S1B9FG78c66nYbvHkjsVeULeJl0ltBnYqD4256fGvFEEyDxxtHJYk9Mknek+Nr Je4ZpI1E/1m4W9/CZWTOPFWt6qDe2OlBQf5t5jBRPR6zPdY0uG6KlZ3TpwIDAQAB o4IDgzCCA38wHQYDVR0OBBYEFBN8wnAT1ZNcCrP0oEup5ox/GvE6MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvRTN6Q2NCUFZrMXdLc19TZ1M2bm1qSDhhOFRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBlwYIKwYBBQUHAQcBAf8EggGGMIIBgjCCAW0EAgABMIIB ZQMEAh84sDAMAwQBHzi2AwQBHzi8AwQBHzjQAwQBHzjkAwQBHzkkAwQBHzmoAwQB Hzm4AwQAHznIAwQCHznQAwQBHznYAwQBHzn6AwQCHzpMAwQCHzpcMAwDBAIfOrQD BAMfOsAwDAMEAh86zAMEAR860AMEAR866AMEAB867wMEAh87JAMEAh87LAMEAh87 VAMEAR87WgMEAh87jDAMAwQCHzuUAwQBHzukMAwDBABet5cDBAJet5gDBABet54D BABet6QDBABet6YwDAMEAV63rgMEAF63sDAMAwQAXrezAwQBXre0MAwDBAZet8AD BANet+AwCwMEAl637AMDA16wAwQC2TwIMAwDBADZPA8DBAPZPBADBADZPBkwDAME Atk8HAMEAtk8IDAMAwQD2TwoAwQC2Tw4MAwDBAXZPKADBAPZPLADBALZPLwDBAHZ PMQwDAMEBNk80AMEAtk86AMEAdk89DAPBAIAAjAJAwcAKhRuQAABMA0GCSqGSIb3 DQEBCwUAA4IBAQA/QihMpFA4jJbcI5C3k1Vlff385qJJnZtyKdgLVOHUG3TX1KO+ houlDWp6MoHUTQ7QZtVbCGwHvrNkXkFIIf45r9LzOivvIAwyVZcqsbv2JX3Hs3fP nLPFaZ66JxtHFt+g7HYVDVm/gVqAhToaeucZkBXZ8YgbSUkHoh6+OyEXxBP9CI5n 7Nqd2fC1YpPlxlmBV1RfH+9nV9U+sFS7d//NZKLxjVrTdeXHFi6NLilDOMz8lML3 5IBLZJribbnBkjcjHinOf5MPQLXW5IFS8WIGgLCbqDfBKKLeLhWEQVFKJt55pXrO n4j4WZg07mtokkkS8ryU02WjimFiOzjWHkP0 -----END CERTIFICATE-----Generated at Mon Jan 26 11:43:48 2026 by rpki-client