This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EF4AgWIGQ67FQjnky2pAG3Cd0TI.roa File: EF4AgWIGQ67FQjnky2pAG3Cd0TI.roa (raw, json) Hash identifier: /atUnGB0jkuB+QtvirVdc3ZjaSawzZLKjWyM5dYS/Pk= Subject key identifier: 10:5E:00:81:62:06:43:AE:C5:42:39:E4:CB:6A:40:1B:70:9D:D1:32 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BDFFCE55E1243E1AB1863FA5822B32768 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EF4AgWIGQ67FQjnky2pAG3Cd0TI.roa Signing time: Wed 21 Jan 2026 09:57:31 +0000 ROA not before: Wed 21 Jan 2026 09:57:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 31.57.168.0/23 maxlen: 24 31.57.200.0/24 maxlen: 24 31.57.208.0/22 maxlen: 22 31.57.216.0/23 maxlen: 24 31.57.250.0/23 maxlen: 24 31.58.76.0/22 maxlen: 24 31.58.92.0/22 maxlen: 24 31.58.180.0/22 maxlen: 24 31.58.184.0/21 maxlen: 24 31.58.192.0/22 maxlen: 24 31.58.239.0/24 maxlen: 24 31.59.84.0/22 maxlen: 24 31.59.90.0/23 maxlen: 24 31.59.148.0/22 maxlen: 24 31.59.152.0/21 maxlen: 24 31.59.160.0/22 maxlen: 24 31.59.164.0/23 maxlen: 24 94.183.151.0/24 maxlen: 24 94.183.158.0/24 maxlen: 24 94.183.164.0/24 maxlen: 24 94.183.166.0/24 maxlen: 24 94.183.174.0/24 maxlen: 24 94.183.175.0/24 maxlen: 24 94.183.176.0/24 maxlen: 24 94.183.180.0/24 maxlen: 24 94.183.181.0/24 maxlen: 24 217.60.15.0/24 maxlen: 24 217.60.16.0/21 maxlen: 24 217.60.25.0/24 maxlen: 24 217.60.28.0/22 maxlen: 24 217.60.40.0/22 maxlen: 24 217.60.160.0/20 maxlen: 24 217.60.176.0/21 maxlen: 24 217.60.188.0/22 maxlen: 24 217.60.196.0/23 maxlen: 24 217.60.208.0/20 maxlen: 24 217.60.224.0/21 maxlen: 24 217.60.232.0/22 maxlen: 24 217.60.237.0/24 maxlen: 24 217.60.244.0/23 maxlen: 24 2a14:6e40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:fc:e5:5e:12:43:e1:ab:18:63:fa:58:22:b3:27:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 21 09:57:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=105e0081620643aec54239e4cb6a401b709dd132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3d:cd:02:1a:1c:d7:9f:d0:4f:89:26:bd:e4: 1e:92:40:95:16:e6:04:29:d5:0d:11:e9:6d:00:e5: e8:a3:43:30:6b:ce:9c:38:da:ed:6d:56:c6:f2:17: 3f:1c:47:40:66:b9:95:5d:cd:60:74:6d:ec:15:32: 64:c6:ba:5a:cb:ae:5a:e2:4d:19:e4:14:9f:b2:96: 6f:6f:a1:ec:54:58:09:cf:a1:dd:af:a6:28:6b:58: 3f:d2:cf:91:be:89:f2:a8:b5:76:67:a1:08:d6:5b: bf:21:e7:4b:08:50:46:46:8f:0a:5a:d2:f2:7e:32: b9:86:88:43:d9:f9:e1:f8:81:47:c7:31:47:49:77: 00:02:99:c7:f2:15:1c:1f:ba:95:6e:91:26:cf:a3: 52:31:14:50:e6:94:49:c8:40:9e:a9:18:86:00:a3: 04:2b:b7:7f:b5:5c:b0:7a:b5:5d:34:01:fe:6c:69: 6f:9e:bc:ce:34:8a:ba:2e:61:50:d2:8a:5b:07:2c: 72:bc:c0:f3:da:b1:96:fb:d7:22:6f:e4:35:17:70: 06:8d:e6:7a:56:b9:4b:91:e1:dd:c4:49:c0:5d:8a: 53:da:20:42:51:18:96:77:c5:67:a8:af:ca:23:9b: 61:71:27:b6:91:8e:60:65:8d:9d:2d:19:fa:24:7b: 37:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5E:00:81:62:06:43:AE:C5:42:39:E4:CB:6A:40:1B:70:9D:D1:32 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EF4AgWIGQ67FQjnky2pAG3Cd0TI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.168.0/23 31.57.200.0/24 31.57.208.0/22 31.57.216.0/23 31.57.250.0/23 31.58.76.0/22 31.58.92.0/22 31.58.180.0-31.58.195.255 31.58.239.0/24 31.59.84.0/22 31.59.90.0/23 31.59.148.0-31.59.165.255 94.183.151.0/24 94.183.158.0/24 94.183.164.0/24 94.183.166.0/24 94.183.174.0-94.183.176.255 94.183.180.0/23 217.60.15.0-217.60.23.255 217.60.25.0/24 217.60.28.0/22 217.60.40.0/22 217.60.160.0-217.60.183.255 217.60.188.0/22 217.60.196.0/23 217.60.208.0-217.60.235.255 217.60.237.0/24 217.60.244.0/23 IPv6: 2a14:6e40:1::/48 Signature Algorithm: sha256WithRSAEncryption ad:2b:40:3b:50:70:05:54:0c:12:3d:a2:b1:3a:4b:a6:d9:b6: 95:01:24:31:ec:8b:a9:32:0e:ee:d7:ac:c4:3b:67:3d:36:93: 58:de:b5:4c:b1:02:6f:64:c8:49:f4:3f:7b:8a:91:b2:a7:f6: 8f:f3:47:68:ae:12:7b:31:c4:8a:7c:1f:d9:68:c5:a0:9a:70: 62:44:93:b5:2b:9b:66:af:a4:10:ed:95:b8:a6:a3:78:5b:0d: 81:69:3e:4d:27:2f:1a:38:db:a1:3f:eb:f4:0d:6b:4c:cb:15: 50:58:06:76:f4:24:8a:2a:4c:3a:5e:d0:e6:eb:ba:27:0b:b1: 05:24:f6:de:70:48:56:67:f6:15:d6:00:d9:7d:af:d2:ad:2a: 39:2b:2d:73:fe:bd:38:f7:74:b1:08:2d:fe:01:4a:11:d3:3a: 0b:f2:fe:9b:42:67:a6:dc:c1:7b:f0:40:9b:8a:f3:1b:56:08: f3:06:4b:bf:97:8a:ef:3c:2d:ce:95:dd:3b:29:08:03:75:07: 24:19:7c:6c:db:88:37:96:b7:ef:ee:f9:9b:27:56:6d:00:f5: 61:30:d7:a5:b3:af:9b:c6:05:97:0d:0e:97:ef:4e:c7:53:17: 8e:84:95:c7:9e:1c:0f:61:cd:02:6c:05:ee:34:77:dc:fb:61: 86:e6:74:91 -----BEGIN CERTIFICATE----- MIIF5jCCBM6gAwIBAgISAZvf/OVeEkPhqxhj+lgisydoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTIxMDk1NzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDVlMDA4MTYyMDY0M2FlYzU0MjM5ZTRjYjZhNDAxYjcwOWRkMTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT3NAhoc15/QT4kmveQekkCVFuYE KdUNEeltAOXoo0Mwa86cONrtbVbG8hc/HEdAZrmVXc1gdG3sFTJkxrpay65a4k0Z 5BSfspZvb6HsVFgJz6Hdr6Yoa1g/0s+RvonyqLV2Z6EI1lu/IedLCFBGRo8KWtLy fjK5hohD2fnh+IFHxzFHSXcAApnH8hUcH7qVbpEmz6NSMRRQ5pRJyECeqRiGAKME K7d/tVywerVdNAH+bGlvnrzONIq6LmFQ0opbByxyvMDz2rGW+9cib+Q1F3AGjeZ6 VrlLkeHdxEnAXYpT2iBCURiWd8VnqK/KI5thcSe2kY5gZY2dLRn6JHs3wQIDAQAB o4IC8jCCAu4wHQYDVR0OBBYEFBBeAIFiBkOuxUI55MtqQBtwndEyMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvRUY0QWdXSUdRNjdGUWpua3kycEFHM0NkMFRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBBgYIKwYBBQUHAQcBAf8EgfYwgfMwgd8EAgABMIHYAwQB HzmoAwQAHznIAwQCHznQAwQBHznYAwQBHzn6AwQCHzpMAwQCHzpcMAwDBAIfOrQD BAIfOsADBAAfOu8DBAIfO1QDBAEfO1owDAMEAh87lAMEAR87pAMEAF63lwMEAF63 ngMEAF63pAMEAF63pjAMAwQBXreuAwQAXrewAwQBXre0MAwDBADZPA8DBAPZPBAD BADZPBkDBALZPBwDBALZPCgwDAMEBdk8oAMEA9k8sAMEAtk8vAMEAdk8xDAMAwQE 2TzQAwQC2TzoAwQA2TztAwQB2Tz0MA8EAgACMAkDBwAqFG5AAAEwDQYJKoZIhvcN AQELBQADggEBAK0rQDtQcAVUDBI9orE6S6bZtpUBJDHsi6kyDu7XrMQ7Zz02k1je tUyxAm9kyEn0P3uKkbKn9o/zR2iuEnsxxIp8H9loxaCacGJEk7Urm2avpBDtlbim o3hbDYFpPk0nLxo426E/6/QNa0zLFVBYBnb0JIoqTDpe0ObruicLsQUk9t5wSFZn 9hXWANl9r9KtKjkrLXP+vTj3dLEILf4BShHTOgvy/ptCZ6bcwXvwQJuK8xtWCPMG S7+Xiu88Lc6V3TspCAN1ByQZfGzbiDeWt+/u+ZsnVm0A9WEw16Wzr5vGBZcNDpfv TsdTF46ElceeHA9hzQJsBe40d9z7YYbmdJE= -----END CERTIFICATE-----Generated at Thu Jan 22 00:45:28 2026 by rpki-client