This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vEHMDzjMvGZB0KDjsnu4yYmwYS4.roa File: vEHMDzjMvGZB0KDjsnu4yYmwYS4.roa (raw, json) Hash identifier: GiwLRbIYu32X269XODozbiXHCnt/OwtFLIrEnqLCeI4= Subject key identifier: BC:41:CC:0F:38:CC:BC:66:41:D0:A0:E3:B2:7B:B8:C9:89:B0:61:2E Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019BFF1E8C9156FF9CC607A23E0828FF4103 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vEHMDzjMvGZB0KDjsnu4yYmwYS4.roa Signing time: Tue 27 Jan 2026 11:02:30 +0000 ROA not before: Tue 27 Jan 2026 11:02:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201942 IP address blocks: 31.170.100.0/22 maxlen: 24 37.32.99.0/24 maxlen: 24 45.90.238.0/24 maxlen: 24 45.131.132.0/23 maxlen: 24 45.137.160.0/22 maxlen: 24 45.147.104.0/22 maxlen: 24 45.147.116.0/22 maxlen: 24 45.159.76.0/22 maxlen: 24 62.106.87.0/24 maxlen: 24 81.21.228.0/22 maxlen: 24 85.115.192.0/22 maxlen: 24 88.135.64.0/22 maxlen: 24 91.235.40.0/24 maxlen: 24 91.235.41.0/24 maxlen: 24 91.238.239.0/24 maxlen: 24 92.60.34.0/24 maxlen: 24 92.60.35.0/24 maxlen: 24 93.92.228.0/22 maxlen: 24 93.189.120.0/24 maxlen: 24 93.189.123.0/24 maxlen: 24 95.214.144.0/22 maxlen: 24 109.230.194.0/24 maxlen: 24 109.230.250.0/24 maxlen: 24 185.91.108.0/22 maxlen: 24 185.105.12.0/22 maxlen: 24 185.105.232.0/22 maxlen: 24 185.106.124.0/22 maxlen: 24 185.107.152.0/22 maxlen: 24 185.118.52.0/23 maxlen: 23 185.118.54.0/23 maxlen: 23 185.119.48.0/22 maxlen: 24 185.128.52.0/22 maxlen: 24 185.129.104.0/22 maxlen: 24 185.150.78.0/23 maxlen: 24 185.163.168.0/22 maxlen: 24 185.163.232.0/22 maxlen: 24 185.166.172.0/22 maxlen: 24 185.175.152.0/22 maxlen: 24 185.176.188.0/22 maxlen: 24 185.179.228.0/22 maxlen: 24 185.179.232.0/22 maxlen: 24 185.189.64.0/22 maxlen: 24 185.196.40.0/22 maxlen: 24 185.196.42.0/24 maxlen: 24 185.196.43.0/24 maxlen: 24 185.197.216.0/22 maxlen: 24 185.199.44.0/22 maxlen: 24 185.199.55.0/24 maxlen: 24 185.200.228.0/22 maxlen: 24 185.201.152.0/22 maxlen: 24 185.202.204.0/22 maxlen: 24 185.204.108.0/24 maxlen: 24 185.204.244.0/22 maxlen: 24 185.212.84.0/22 maxlen: 24 185.216.28.0/22 maxlen: 24 185.217.12.0/22 maxlen: 24 185.218.16.0/22 maxlen: 24 185.220.240.0/22 maxlen: 24 185.221.16.0/22 maxlen: 24 185.222.188.0/22 maxlen: 24 185.223.220.0/22 maxlen: 24 185.224.220.0/22 maxlen: 24 185.226.8.0/22 maxlen: 24 185.226.28.0/22 maxlen: 24 185.227.176.0/22 maxlen: 24 185.227.204.0/24 maxlen: 24 185.230.48.0/22 maxlen: 24 185.239.252.0/22 maxlen: 24 185.239.252.0/24 maxlen: 24 185.239.253.0/24 maxlen: 24 185.239.255.0/24 maxlen: 24 185.245.32.0/23 maxlen: 23 185.247.4.0/24 maxlen: 24 193.17.180.0/22 maxlen: 24 193.17.180.0/24 maxlen: 24 193.17.182.0/24 maxlen: 24 193.35.88.0/22 maxlen: 24 193.105.66.0/24 maxlen: 24 193.162.15.0/24 maxlen: 24 194.35.40.0/24 maxlen: 24 194.41.116.0/22 maxlen: 24 194.41.118.0/24 maxlen: 24 194.41.119.0/24 maxlen: 24 195.182.13.0/24 maxlen: 24 212.80.208.0/22 maxlen: 24 212.115.44.0/22 maxlen: 24 213.232.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 11:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:1e:8c:91:56:ff:9c:c6:07:a2:3e:08:28:ff:41:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 27 11:02:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc41cc0f38ccbc6641d0a0e3b27bb8c989b0612e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9e:c2:ef:a4:81:11:d2:d7:b6:d2:c4:60:eb: 27:5f:aa:65:4e:3d:18:37:2a:e0:0e:fd:08:b3:85: 34:ba:b5:6d:96:f1:11:9c:0c:e5:3b:c4:b5:da:7f: 66:56:fd:f1:4b:2c:e1:60:3b:d1:99:88:ce:f6:cf: 97:6f:fd:ca:c7:3e:8b:c4:54:eb:b6:1b:1b:92:19: c9:41:8b:0e:17:bd:aa:7b:b3:dc:06:22:72:a3:f3: ec:b1:9d:aa:e3:0b:84:d5:3e:e1:9b:03:68:cd:64: 2e:26:0b:01:2b:c0:0c:79:dd:cf:52:42:ea:7f:90: 5d:a6:12:04:96:76:ef:e4:0a:a2:de:95:48:0f:ba: ee:7e:99:f2:94:41:3f:90:c3:d1:f5:ff:7e:31:91: 46:04:7b:88:36:97:56:02:6f:d1:aa:0b:d9:84:a3: 6c:2c:0e:6a:19:9a:3d:a3:1e:3f:bf:1e:15:f4:e9: b5:c0:6d:81:33:2f:ab:93:b3:33:1d:6b:2d:78:81: e5:dc:db:6b:a8:e3:17:c6:f5:3a:8c:ba:e8:52:be: 76:de:5a:5b:5d:ff:5a:e3:1b:0c:0e:69:90:f9:fd: c6:b5:90:d8:29:1a:1b:44:7e:7b:11:7c:d4:3b:fc: b5:8d:ff:8e:e3:6f:ba:73:78:bd:d8:db:91:05:48: af:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:41:CC:0F:38:CC:BC:66:41:D0:A0:E3:B2:7B:B8:C9:89:B0:61:2E X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vEHMDzjMvGZB0KDjsnu4yYmwYS4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.170.100.0/22 37.32.99.0/24 45.90.238.0/24 45.131.132.0/23 45.137.160.0/22 45.147.104.0/22 45.147.116.0/22 45.159.76.0/22 62.106.87.0/24 81.21.228.0/22 85.115.192.0/22 88.135.64.0/22 91.235.40.0/23 91.238.239.0/24 92.60.34.0/23 93.92.228.0/22 93.189.120.0/24 93.189.123.0/24 95.214.144.0/22 109.230.194.0/24 109.230.250.0/24 185.91.108.0/22 185.105.12.0/22 185.105.232.0/22 185.106.124.0/22 185.107.152.0/22 185.118.52.0/22 185.119.48.0/22 185.128.52.0/22 185.129.104.0/22 185.150.78.0/23 185.163.168.0/22 185.163.232.0/22 185.166.172.0/22 185.175.152.0/22 185.176.188.0/22 185.179.228.0-185.179.235.255 185.189.64.0/22 185.196.40.0/22 185.197.216.0/22 185.199.44.0/22 185.199.55.0/24 185.200.228.0/22 185.201.152.0/22 185.202.204.0/22 185.204.108.0/24 185.204.244.0/22 185.212.84.0/22 185.216.28.0/22 185.217.12.0/22 185.218.16.0/22 185.220.240.0/22 185.221.16.0/22 185.222.188.0/22 185.223.220.0/22 185.224.220.0/22 185.226.8.0/22 185.226.28.0/22 185.227.176.0/22 185.227.204.0/24 185.230.48.0/22 185.239.252.0/22 185.245.32.0/23 185.247.4.0/24 193.17.180.0/22 193.35.88.0/22 193.105.66.0/24 193.162.15.0/24 194.35.40.0/24 194.41.116.0/22 195.182.13.0/24 212.80.208.0/22 212.115.44.0/22 213.232.232.0/24 Signature Algorithm: sha256WithRSAEncryption 79:c5:84:ff:eb:fa:60:6c:64:54:0a:cc:3f:21:71:3c:26:aa: cc:4e:05:00:99:a2:51:d4:88:33:b7:c7:46:f0:e4:02:18:9e: ba:f9:76:f9:ad:37:88:2e:e5:ab:9e:b0:d8:7a:d3:d4:18:fe: c0:93:e6:0e:fc:72:58:fb:e9:fc:31:af:51:c1:37:a8:19:6b: 00:a5:48:d0:20:1f:02:12:97:07:7f:cd:cd:9b:77:67:07:03: 23:ac:53:66:de:f9:0c:65:12:0e:ae:6d:56:61:dc:f4:9d:70: aa:f6:ec:f4:64:61:0f:78:45:0c:64:34:88:e0:1c:74:72:ce: a5:7c:f8:5f:67:66:c6:71:df:a9:3a:4e:c9:26:20:37:ce:5b: 49:9a:81:66:7c:d7:79:33:57:bd:37:47:9b:6c:a5:4c:1c:40: 62:f1:2a:dd:a1:5e:e5:a9:f6:75:b2:d0:3f:5f:58:e7:23:2d: e9:31:f8:3d:79:d3:be:7d:24:30:26:5d:06:c7:e2:04:e9:b3: f5:ee:67:8d:5c:5a:8d:f9:0a:d3:19:cf:fc:99:48:d4:fb:5f: 6b:fb:1b:c4:fa:e6:0d:54:34:c3:08:49:86:ee:bb:89:53:ec: a0:63:b3:e7:e8:e6:a2:af:48:8d:84:48:f8:8b:ff:57:96:a0: 97:ed:af:7c -----BEGIN CERTIFICATE----- MIIGxTCCBa2gAwIBAgISAZv/HoyRVv+cxgeiPggo/0EDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTI3MTEwMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzQxY2MwZjM4Y2NiYzY2NDFkMGEwZTNiMjdiYjhjOTg5YjA2MTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6J7C76SBEdLXttLEYOsnX6plTj0Y NyrgDv0Is4U0urVtlvERnAzlO8S12n9mVv3xSyzhYDvRmYjO9s+Xb/3Kxz6LxFTr thsbkhnJQYsOF72qe7PcBiJyo/PssZ2q4wuE1T7hmwNozWQuJgsBK8AMed3PUkLq f5BdphIElnbv5Aqi3pVID7rufpnylEE/kMPR9f9+MZFGBHuINpdWAm/RqgvZhKNs LA5qGZo9ox4/vx4V9Om1wG2BMy+rk7MzHWsteIHl3NtrqOMXxvU6jLroUr523lpb Xf9a4xsMDmmQ+f3GtZDYKRobRH57EXzUO/y1jf+O42+6c3i92NuRBUiv0QIDAQAB o4ID0TCCA80wHQYDVR0OBBYEFLxBzA84zLxmQdCg47J7uMmJsGEuMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvdkVITUR6ak12R1pCMEtEanNudTR5WW13WVM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIB5QYIKwYBBQUHAQcBAf8EggHUMIIB0DCCAcwEAgABMIIB xAMEAh+qZAMEACUgYwMEAC1a7gMEAS2DhAMEAi2JoAMEAi2TaAMEAi2TdAMEAi2f TAMEAD5qVwMEAlEV5AMEAlVzwAMEAliHQAMEAVvrKAMEAFvu7wMEAVw8IgMEAl1c 5AMEAF29eAMEAF29ewMEAl/WkAMEAG3mwgMEAG3m+gMEArlbbAMEArlpDAMEArlp 6AMEArlqfAMEArlrmAMEArl2NAMEArl3MAMEArmANAMEArmBaAMEAbmWTgMEArmj qAMEArmj6AMEArmmrAMEArmvmAMEArmwvDAMAwQCubPkAwQCubPoAwQCub1AAwQC ucQoAwQCucXYAwQCuccsAwQAucc3AwQCucjkAwQCucmYAwQCucrMAwQAucxsAwQC ucz0AwQCudRUAwQCudgcAwQCudkMAwQCudoQAwQCudzwAwQCud0QAwQCud68AwQC ud/cAwQCueDcAwQCueIIAwQCueIcAwQCueOwAwQAuePMAwQCueYwAwQCue/8AwQB ufUgAwQAufcEAwQCwRG0AwQCwSNYAwQAwWlCAwQAwaIPAwQAwiMoAwQCwil0AwQA w7YNAwQC1FDQAwQC1HMsAwQA1ejoMA0GCSqGSIb3DQEBCwUAA4IBAQB5xYT/6/pg bGRUCsw/IXE8JqrMTgUAmaJR1Igzt8dG8OQCGJ66+Xb5rTeILuWrnrDYetPUGP7A k+YO/HJY++n8Ma9RwTeoGWsApUjQIB8CEpcHf83Nm3dnBwMjrFNm3vkMZRIOrm1W Ydz0nXCq9uz0ZGEPeEUMZDSI4Bx0cs6lfPhfZ2bGcd+pOk7JJiA3zltJmoFmfNd5 M1e9N0ebbKVMHEBi8SrdoV7lqfZ1stA/X1jnIy3pMfg9edO+fSQwJl0Gx+IE6bP1 7meNXFqN+QrTGc/8mUjU+19r+xvE+uYNVDTDCEmG7ruJU+ygY7Pn6Oair0iNhEj4 i/9XlqCX7a98 -----END CERTIFICATE-----Generated at Tue Jan 27 21:21:04 2026 by rpki-client