This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/iDP1bGdTiUqEFNWH9pQ_fwFAZO8.roa File: iDP1bGdTiUqEFNWH9pQ_fwFAZO8.roa (raw, json) Hash identifier: juc+ynuClZ4OorzxxoiPvzF8miwUosVKgq4mBUka3tw= Subject key identifier: 88:33:F5:6C:67:53:89:4A:84:14:D5:87:F6:94:3F:7F:01:40:64:EF Certificate issuer: /CN=b45f5560d79f04a92d7a150f3ed8da4308abea33 Certificate serial: 019B7BA50F90AC53FD034151341B24B07289 Authority key identifier: B4:5F:55:60:D7:9F:04:A9:2D:7A:15:0F:3E:D8:DA:43:08:AB:EA:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/iDP1bGdTiUqEFNWH9pQ_fwFAZO8.roa Signing time: Thu 01 Jan 2026 22:19:33 +0000 ROA not before: Thu 01 Jan 2026 22:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198317 IP address blocks: 91.200.104.0/22 maxlen: 22 91.200.104.0/23 maxlen: 23 91.200.104.0/24 maxlen: 24 91.200.105.0/24 maxlen: 24 91.200.106.0/23 maxlen: 23 91.200.106.0/24 maxlen: 24 91.200.107.0/24 maxlen: 24 91.239.196.0/22 maxlen: 22 91.239.196.0/23 maxlen: 23 91.239.196.0/24 maxlen: 24 91.239.197.0/24 maxlen: 24 91.239.198.0/23 maxlen: 23 91.239.198.0/24 maxlen: 24 91.239.199.0/24 maxlen: 24 155.133.56.0/22 maxlen: 22 155.133.56.0/23 maxlen: 23 155.133.56.0/24 maxlen: 24 155.133.57.0/24 maxlen: 24 155.133.58.0/23 maxlen: 23 155.133.58.0/24 maxlen: 24 155.133.59.0/24 maxlen: 24 185.96.120.0/22 maxlen: 22 185.96.120.0/23 maxlen: 23 185.96.120.0/24 maxlen: 24 185.96.121.0/24 maxlen: 24 185.96.122.0/23 maxlen: 23 185.96.122.0/24 maxlen: 24 185.96.123.0/24 maxlen: 24 185.235.124.0/22 maxlen: 22 185.235.124.0/23 maxlen: 23 185.235.124.0/24 maxlen: 24 185.235.125.0/24 maxlen: 24 185.235.126.0/23 maxlen: 23 185.235.126.0/24 maxlen: 24 185.235.127.0/24 maxlen: 24 193.106.216.0/22 maxlen: 22 193.106.216.0/23 maxlen: 23 193.106.216.0/24 maxlen: 24 193.106.217.0/24 maxlen: 24 193.106.218.0/23 maxlen: 23 193.106.218.0/24 maxlen: 24 193.106.219.0/24 maxlen: 24 195.88.144.0/23 maxlen: 23 195.88.144.0/24 maxlen: 24 195.88.145.0/24 maxlen: 24 2a05:ffc0::/32 maxlen: 32 2a05:ffc0::/33 maxlen: 33 2a05:ffc0::/34 maxlen: 34 2a05:ffc0::/48 maxlen: 48 2a05:ffc0:4000::/34 maxlen: 34 2a05:ffc0:8000::/33 maxlen: 33 2a05:ffc0:8000::/34 maxlen: 34 2a05:ffc0:c000::/34 maxlen: 34 2a05:ffc1::/32 maxlen: 32 2a05:ffc1::/33 maxlen: 33 2a05:ffc1::/34 maxlen: 34 2a05:ffc1:4000::/34 maxlen: 34 2a05:ffc1:8000::/33 maxlen: 33 2a05:ffc1:8000::/34 maxlen: 34 2a05:ffc1:c000::/34 maxlen: 34 2a05:ffc2::/32 maxlen: 32 2a05:ffc2::/33 maxlen: 33 2a05:ffc2::/34 maxlen: 34 2a05:ffc2:4000::/34 maxlen: 34 2a05:ffc2:8000::/33 maxlen: 33 2a05:ffc2:8000::/34 maxlen: 34 2a05:ffc2:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:0f:90:ac:53:fd:03:41:51:34:1b:24:b0:72:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45f5560d79f04a92d7a150f3ed8da4308abea33 Validity Not Before: Jan 1 22:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8833f56c6753894a8414d587f6943f7f014064ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7e:67:45:47:8a:8d:52:af:8a:1e:b8:a8:79: 22:73:02:78:49:6b:ac:2b:79:07:cb:66:36:d5:8b: b1:55:ec:f0:6d:28:c8:05:c1:6d:bf:74:75:0e:f4: 2f:03:c0:3a:cc:9c:69:36:81:c9:61:86:be:e4:ab: 8d:66:ee:53:bd:8a:b5:22:76:df:b9:ea:4a:8f:ab: e6:1b:0a:d1:f6:88:94:0b:3f:41:71:76:53:e7:01: 65:14:41:55:32:d4:c3:1b:73:ff:42:74:f9:94:40: 64:0a:c5:ed:b8:60:33:84:55:32:89:17:33:7e:15: a9:b4:ef:af:ab:b4:dd:bd:f5:11:69:65:02:cd:93: 32:7f:8c:f6:e6:85:6d:8c:24:37:3f:5d:e8:c3:71: 99:a6:9c:91:49:4a:6d:f2:75:5f:5e:54:c8:04:24: df:56:1f:c0:fb:4d:41:06:13:94:d9:9f:a9:e7:5a: b7:91:1a:d2:59:2d:37:48:68:d4:2f:56:6e:4b:69: 11:70:3d:f6:da:79:39:64:ae:88:6c:04:22:a1:08: fb:1f:2a:f9:20:e2:f2:22:0a:57:e0:cb:9a:c7:6a: cd:75:50:21:ed:7f:2a:c5:a7:83:ee:2e:03:8c:2f: f5:72:08:3b:02:b8:69:13:78:4e:5a:81:53:d3:a0: e3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:33:F5:6C:67:53:89:4A:84:14:D5:87:F6:94:3F:7F:01:40:64:EF X509v3 Authority Key Identifier: keyid:B4:5F:55:60:D7:9F:04:A9:2D:7A:15:0F:3E:D8:DA:43:08:AB:EA:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/iDP1bGdTiUqEFNWH9pQ_fwFAZO8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.104.0/22 91.239.196.0/22 155.133.56.0/22 185.96.120.0/22 185.235.124.0/22 193.106.216.0/22 195.88.144.0/23 IPv6: 2a05:ffc0::-2a05:ffc2:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 02:c8:c6:f3:b2:41:49:25:2d:46:d6:3e:83:d9:0c:43:27:84: 42:25:59:68:15:a2:d3:c2:5a:96:9a:ca:69:f9:0c:28:86:b7: 3f:41:8c:ad:7b:7f:e9:97:2e:8e:36:a0:a7:22:16:4f:1d:ef: 35:0d:75:0a:7e:6b:9f:74:61:38:24:f0:81:7f:5e:43:78:12: 53:7e:d3:9f:51:4b:5f:98:5e:e8:87:e7:38:f8:0e:4a:50:ab: 50:59:49:14:5f:77:68:8b:4b:a4:b9:28:9c:ad:cc:ec:9d:5b: ff:58:7b:c9:f5:99:a0:13:af:b4:b5:93:d5:f9:62:6c:34:dc: 81:b5:0d:5f:06:78:65:7c:c8:c5:c7:80:88:16:6f:f4:8a:9e: 80:19:91:80:d7:31:f0:16:cd:8f:9b:a8:df:47:00:f8:9b:04: 60:5a:18:c6:fc:e8:c6:fc:ce:d8:51:f9:5f:3d:b2:63:b3:df: 68:84:81:28:ce:c4:60:c3:13:fa:27:73:fb:5e:8f:de:88:de: af:bb:fb:2f:00:9d:bb:f5:4e:c3:4b:fa:bc:a3:45:b7:f8:b7: cc:1e:6f:75:1a:23:c8:9d:ff:48:60:d3:4f:d5:03:f6:06:b5: be:9f:80:03:6a:06:3e:86:4e:26:8d:16:ff:b6:23:c2:1e:4a: 84:57:43:27 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt7pQ+QrFP9A0FRNBsksHKJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NWY1NTYwZDc5ZjA0YTkyZDdhMTUwZjNlZDhkYTQzMDhh YmVhMzMwHhcNMjYwMTAxMjIxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODMzZjU2YzY3NTM4OTRhODQxNGQ1ODdmNjk0M2Y3ZjAxNDA2NGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH5nRUeKjVKvih64qHkicwJ4SWus K3kHy2Y21YuxVezwbSjIBcFtv3R1DvQvA8A6zJxpNoHJYYa+5KuNZu5TvYq1Inbf uepKj6vmGwrR9oiUCz9BcXZT5wFlFEFVMtTDG3P/QnT5lEBkCsXtuGAzhFUyiRcz fhWptO+vq7TdvfURaWUCzZMyf4z25oVtjCQ3P13ow3GZppyRSUpt8nVfXlTIBCTf Vh/A+01BBhOU2Z+p51q3kRrSWS03SGjUL1ZuS2kRcD322nk5ZK6IbAQioQj7Hyr5 IOLyIgpX4Muax2rNdVAh7X8qxaeD7i4DjC/1cgg7ArhpE3hOWoFT06DjjQIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFIgz9WxnU4lKhBTVh/aUP38BQGTvMB8GA1UdIwQY MBaAFLRfVWDXnwSpLXoVDz7Y2kMIq+ozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEY5VllOZWZCS2t0ZWhVUFB0amFRd2lyNmpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83YjE2OWQtZmMwOS00OWJiLTk2Njkt YzMyMjI0NzRlZWYxLzEvaURQMWJHZFRpVXFFRk5XSDlwUV9md0ZBWk84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy83YjE2OWQtZmMwOS00OWJiLTk2NjktYzMyMjI0NzRlZWYx LzEvdEY5VllOZWZCS2t0ZWhVUFB0amFRd2lyNmpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjAwBAIAATAqAwQCW8hoAwQC W+/EAwQCm4U4AwQCuWB4AwQCuet8AwQCwWrYAwQBw1iQMBYEAgACMBAwDgMFBioF /8ADBQAqBf/CMA0GCSqGSIb3DQEBCwUAA4IBAQACyMbzskFJJS1G1j6D2QxDJ4RC JVloFaLTwlqWmspp+Qwohrc/QYyte3/ply6ONqCnIhZPHe81DXUKfmufdGE4JPCB f15DeBJTftOfUUtfmF7oh+c4+A5KUKtQWUkUX3doi0ukuSicrczsnVv/WHvJ9Zmg E6+0tZPV+WJsNNyBtQ1fBnhlfMjFx4CIFm/0ip6AGZGA1zHwFs2Pm6jfRwD4mwRg WhjG/OjG/M7YUflfPbJjs99ohIEozsRgwxP6J3P7Xo/eiN6vu/svAJ279U7DS/q8 o0W3+LfMHm91GiPInf9IYNNP1QP2BrW+n4ADagY+hk4mjRb/tiPCHkqEV0Mn -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:14 2026 by rpki-client