This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/2VrXKMaV4hFStFOxu_UQS5okGCc.roa File: 2VrXKMaV4hFStFOxu_UQS5okGCc.roa (raw, json) Hash identifier: ysQxFYSk2THDKp3xdvckm0rpXg2xlVHGITzLw9rPwIQ= Subject key identifier: D9:5A:D7:28:C6:95:E2:11:52:B4:53:B1:BB:F5:10:4B:9A:24:18:27 Certificate issuer: /CN=2875f185823dbc6a82d105b3ca16077db5729377 Certificate serial: 019B7DCA658EFBFA3877E3CC1E801DB2BA7F Authority key identifier: 28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/2VrXKMaV4hFStFOxu_UQS5okGCc.roa Signing time: Fri 02 Jan 2026 08:19:34 +0000 ROA not before: Fri 02 Jan 2026 08:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 37.157.48.0/24 maxlen: 24 37.157.49.0/24 maxlen: 24 37.157.50.0/24 maxlen: 24 37.157.51.0/24 maxlen: 24 37.157.52.0/24 maxlen: 24 37.157.53.0/24 maxlen: 24 37.157.54.0/24 maxlen: 24 37.157.55.0/24 maxlen: 24 84.247.32.0/24 maxlen: 24 84.247.33.0/24 maxlen: 24 84.247.34.0/24 maxlen: 24 84.247.35.0/24 maxlen: 24 89.35.164.0/24 maxlen: 24 89.35.165.0/24 maxlen: 24 89.35.166.0/24 maxlen: 24 89.35.167.0/24 maxlen: 24 149.19.176.0/24 maxlen: 24 149.19.177.0/24 maxlen: 24 149.19.178.0/24 maxlen: 24 149.19.179.0/24 maxlen: 24 185.2.76.0/24 maxlen: 24 185.2.77.0/24 maxlen: 24 185.2.78.0/24 maxlen: 24 185.2.79.0/24 maxlen: 24 185.34.80.0/24 maxlen: 24 185.34.81.0/24 maxlen: 24 185.34.82.0/24 maxlen: 24 185.34.83.0/24 maxlen: 24 185.60.4.0/24 maxlen: 24 185.60.5.0/24 maxlen: 24 185.60.6.0/24 maxlen: 24 185.60.7.0/24 maxlen: 24 185.61.88.0/24 maxlen: 24 185.61.89.0/24 maxlen: 24 185.61.90.0/24 maxlen: 24 185.61.91.0/24 maxlen: 24 185.86.20.0/24 maxlen: 24 185.86.21.0/24 maxlen: 24 185.86.22.0/24 maxlen: 24 185.86.23.0/24 maxlen: 24 185.91.40.0/24 maxlen: 24 185.91.41.0/24 maxlen: 24 185.91.42.0/24 maxlen: 24 185.91.43.0/24 maxlen: 24 195.206.184.0/24 maxlen: 24 195.206.185.0/24 maxlen: 24 195.206.186.0/24 maxlen: 24 195.206.187.0/24 maxlen: 24 195.206.188.0/24 maxlen: 24 195.206.189.0/24 maxlen: 24 195.206.190.0/24 maxlen: 24 195.206.191.0/24 maxlen: 24 2a00:b840::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:65:8e:fb:fa:38:77:e3:cc:1e:80:1d:b2:ba:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2875f185823dbc6a82d105b3ca16077db5729377 Validity Not Before: Jan 2 08:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d95ad728c695e21152b453b1bbf5104b9a241827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:67:28:67:d5:37:e6:27:25:d3:b3:89:3b:7e: 29:b1:c4:56:60:a1:0e:ab:24:72:eb:89:57:4e:d2: 89:63:17:d9:1a:77:44:09:45:e9:21:5b:69:bd:62: e4:5e:f3:a9:b6:10:b9:1e:41:d5:8b:ad:e2:89:78: 29:04:70:a3:d0:21:d9:35:01:f7:57:70:7e:7f:ab: 82:d6:0c:54:cd:6e:49:a0:80:6f:4f:43:8f:17:51: bd:60:27:df:54:01:b7:04:91:9e:9e:e8:2b:58:7b: 4d:34:8f:62:53:04:f0:5e:e9:95:b1:39:b6:b0:ff: d9:2b:a0:c9:f9:b7:a3:68:2f:8e:53:e5:d1:8e:92: 4b:a5:da:90:8e:bd:ff:04:42:a6:06:55:7c:00:5e: 18:ac:3b:3b:1d:0e:7c:0b:8a:df:5a:4e:11:13:fe: 54:0f:9f:e2:92:bf:9b:64:7a:53:79:86:33:db:8b: 60:90:e3:25:5c:85:fa:9a:74:13:6f:86:75:46:eb: d4:7c:34:c1:7f:05:9b:f0:e7:c7:5c:f3:55:72:2c: 23:5a:85:c8:37:c8:35:fa:3f:17:3d:0b:52:9d:87: 67:9e:2b:60:0e:97:a4:09:7a:1b:07:8b:cb:4e:4f: d3:e6:e5:08:de:cd:1d:90:ce:db:22:e8:d6:6c:e1: 25:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5A:D7:28:C6:95:E2:11:52:B4:53:B1:BB:F5:10:4B:9A:24:18:27 X509v3 Authority Key Identifier: keyid:28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/2VrXKMaV4hFStFOxu_UQS5okGCc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.157.48.0/21 84.247.32.0/22 89.35.164.0/22 149.19.176.0/22 185.2.76.0/22 185.34.80.0/22 185.60.4.0/22 185.61.88.0/22 185.86.20.0/22 185.91.40.0/22 195.206.184.0/21 IPv6: 2a00:b840::/29 Signature Algorithm: sha256WithRSAEncryption 17:78:b1:e3:97:8d:31:a1:a6:0e:2a:fc:1e:ba:ef:98:83:c0: d6:4a:29:fe:48:9c:d8:a6:05:3f:c6:bd:47:66:fc:41:69:0a: b5:67:b7:38:d7:86:ad:0e:e1:f9:a7:e0:3f:dd:be:83:86:83: 0d:8a:9c:74:cb:19:10:5d:27:11:81:d5:8f:88:5e:cd:91:2f: 37:66:7e:7b:38:3d:51:f7:bf:bd:43:b2:5d:d5:29:88:2e:42: 6a:8a:2f:23:a0:44:44:bd:dc:a0:9e:e0:9e:9c:c8:e0:aa:4a: 94:5a:4b:f7:6e:07:1f:c8:ab:4d:ce:37:fc:6b:32:5c:12:04: 8e:08:4e:09:63:08:44:0d:b9:80:48:7c:9e:2b:ba:72:d7:5c: 4c:c3:d4:0d:63:e7:17:f6:27:4b:4e:93:1f:c0:b6:f5:75:4b: 64:3d:29:e4:ed:d5:c0:3d:e9:a5:31:97:a4:4e:fa:37:1f:56: e9:56:46:4d:13:fe:63:b1:1b:27:04:50:73:0e:78:37:e3:06: dd:3d:c0:4f:2e:d5:51:21:12:0a:e4:3b:05:1a:60:65:c3:cb: 6c:16:69:02:e4:f4:fa:77:e4:ef:33:09:c6:d4:32:c0:e8:f5: 21:62:df:60:f1:ea:d4:fa:aa:c5:33:8a:0b:39:c0:1b:5e:83: ae:5e:c0:c6 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZt9ymWO+/o4d+PMHoAdsrp/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NzVmMTg1ODIzZGJjNmE4MmQxMDViM2NhMTYwNzdkYjU3 MjkzNzcwHhcNMjYwMTAyMDgxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTVhZDcyOGM2OTVlMjExNTJiNDUzYjFiYmY1MTA0YjlhMjQxODI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWcoZ9U35icl07OJO34pscRWYKEO qyRy64lXTtKJYxfZGndECUXpIVtpvWLkXvOpthC5HkHVi63iiXgpBHCj0CHZNQH3 V3B+f6uC1gxUzW5JoIBvT0OPF1G9YCffVAG3BJGenugrWHtNNI9iUwTwXumVsTm2 sP/ZK6DJ+bejaC+OU+XRjpJLpdqQjr3/BEKmBlV8AF4YrDs7HQ58C4rfWk4RE/5U D5/ikr+bZHpTeYYz24tgkOMlXIX6mnQTb4Z1RuvUfDTBfwWb8OfHXPNVciwjWoXI N8g1+j8XPQtSnYdnnitgDpekCXobB4vLTk/T5uUI3s0dkM7bIujWbOEl+QIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFNla1yjGleIRUrRTsbv1EEuaJBgnMB8GA1UdIwQY MBaAFCh18YWCPbxqgtEFs8oWB321cpN3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0hYeGhZSTl2R3FDMFFXenloWUhmYlZ5azNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hMDRkYTYtOTg4Ny00MmE1LThlZDct OTRlNWQ0OWNjNjI4LzEvMlZyWEtNYVY0aEZTdEZPeHVfVVFTNW9rR0NjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9hMDRkYTYtOTg4Ny00MmE1LThlZDctOTRlNWQ0OWNjNjI4 LzEvS0hYeGhZSTl2R3FDMFFXenloWUhmYlZ5azNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQDJZ0wAwQC VPcgAwQCWSOkAwQClROwAwQCuQJMAwQCuSJQAwQCuTwEAwQCuT1YAwQCuVYUAwQC uVsoAwQDw864MA0EAgACMAcDBQMqALhAMA0GCSqGSIb3DQEBCwUAA4IBAQAXeLHj l40xoaYOKvweuu+Yg8DWSin+SJzYpgU/xr1HZvxBaQq1Z7c414atDuH5p+A/3b6D hoMNipx0yxkQXScRgdWPiF7NkS83Zn57OD1R97+9Q7Jd1SmILkJqii8joEREvdyg nuCenMjgqkqUWkv3bgcfyKtNzjf8azJcEgSOCE4JYwhEDbmASHyeK7py11xMw9QN Y+cX9idLTpMfwLb1dUtkPSnk7dXAPemlMZekTvo3H1bpVkZNE/5jsRsnBFBzDng3 4wbdPcBPLtVRIRIK5DsFGmBlw8tsFmkC5PT6d+TvMwnG1DLA6PUhYt9g8erU+qrF M4oLOcAbXoOuXsDG -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:30 2026 by rpki-client