This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/r4dxvkQZwbyb1bTe5s6O3EuanzY.roa File: r4dxvkQZwbyb1bTe5s6O3EuanzY.roa (raw, json) Hash identifier: ha1dXfPatLYplVCiGeXFFuNw1IFyhd/nS23Ss+QY/4I= Subject key identifier: AF:87:71:BE:44:19:C1:BC:9B:D5:B4:DE:E6:CE:8E:DC:4B:9A:9F:36 Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978 Certificate serial: 019B7F834B8020E084CAE546039B2C7EA707 Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/r4dxvkQZwbyb1bTe5s6O3EuanzY.roa Signing time: Fri 02 Jan 2026 16:21:09 +0000 ROA not before: Fri 02 Jan 2026 16:21:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 31.10.128.0/17 maxlen: 17 31.10.128.0/18 maxlen: 18 31.10.192.0/18 maxlen: 18 46.126.0.0/15 maxlen: 15 46.126.0.0/16 maxlen: 16 46.127.0.0/16 maxlen: 16 46.140.0.0/16 maxlen: 16 46.140.0.0/17 maxlen: 17 46.140.128.0/17 maxlen: 17 62.2.0.0/16 maxlen: 16 62.2.0.0/17 maxlen: 17 62.2.128.0/17 maxlen: 17 77.56.0.0/14 maxlen: 14 77.56.0.0/15 maxlen: 15 77.58.0.0/15 maxlen: 15 80.218.0.0/15 maxlen: 15 80.218.0.0/16 maxlen: 16 80.219.0.0/16 maxlen: 16 81.7.224.0/19 maxlen: 19 81.7.224.0/20 maxlen: 20 81.7.240.0/20 maxlen: 20 84.20.32.0/20 maxlen: 20 84.20.32.0/21 maxlen: 21 84.20.40.0/21 maxlen: 21 84.20.48.0/21 maxlen: 21 84.20.48.0/22 maxlen: 22 84.20.52.0/22 maxlen: 22 84.72.0.0/14 maxlen: 14 84.72.0.0/15 maxlen: 16 84.73.0.0/16 maxlen: 16 84.74.0.0/15 maxlen: 15 84.74.0.0/16 maxlen: 17 84.74.128.0/17 maxlen: 17 84.75.0.0/16 maxlen: 16 178.82.0.0/16 maxlen: 17 194.29.0.0/19 maxlen: 19 194.29.0.0/20 maxlen: 20 194.29.16.0/20 maxlen: 20 195.202.192.0/18 maxlen: 18 195.202.192.0/19 maxlen: 19 195.202.224.0/19 maxlen: 19 212.47.160.0/19 maxlen: 19 212.47.160.0/20 maxlen: 20 212.47.176.0/20 maxlen: 20 213.193.64.0/18 maxlen: 18 213.193.64.0/19 maxlen: 19 213.193.96.0/19 maxlen: 19 217.162.0.0/16 maxlen: 16 217.162.0.0/17 maxlen: 17 217.162.128.0/17 maxlen: 17 217.168.32.0/19 maxlen: 19 217.168.32.0/20 maxlen: 20 217.168.48.0/20 maxlen: 20 2a00:e2c0::/32 maxlen: 32 2a00:e2c0::/33 maxlen: 33 2a00:e2c0:8000::/33 maxlen: 33 2a02:aa00::/27 maxlen: 27 2a02:aa00::/28 maxlen: 28 2a02:aa10::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 04:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:4b:80:20:e0:84:ca:e5:46:03:9b:2c:7e:a7:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978 Validity Not Before: Jan 2 16:21:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af8771be4419c1bc9bd5b4dee6ce8edc4b9a9f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9e:c7:e1:56:92:18:9a:95:cd:3e:19:00:a7: 6d:2c:44:b8:3b:49:54:7d:3b:be:a5:38:17:0a:60: 47:e5:4a:32:75:86:0c:e5:16:38:18:de:3a:b4:8a: f1:e4:b1:0e:44:48:bb:08:05:b2:ee:46:8b:b8:d8: fc:40:46:4b:15:e1:b1:c7:54:b6:61:9b:0b:65:f9: e3:25:f1:06:1f:dc:6b:50:03:da:e4:85:f6:c9:ef: 0c:24:65:02:91:84:ac:4b:8c:fd:41:ec:e9:94:a3: ed:4b:5b:ff:90:69:0b:50:d0:ce:2f:52:ea:71:a6: 13:96:b1:d4:e3:54:c3:d6:b7:b6:39:30:6a:79:d5: eb:ee:9c:5f:b6:b0:a3:79:06:d7:bd:fb:54:20:da: 5b:30:2c:33:9a:01:39:0e:bf:2c:c2:15:f7:06:2e: b8:50:65:5e:7b:55:70:26:eb:87:d6:5c:7e:4d:48: 5d:9a:bb:7d:52:4b:f1:c7:a1:82:0c:da:ec:97:e6: 84:72:62:75:b9:5f:0d:dd:1b:3e:40:23:6d:42:99: 1c:ea:5f:19:50:83:63:7c:46:2d:4c:5d:ad:fd:07: be:25:7c:c3:b1:28:8a:31:78:72:cd:7d:27:b4:b9: f2:65:55:02:fa:a7:7f:c9:ea:a1:3d:60:54:51:6e: 48:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:87:71:BE:44:19:C1:BC:9B:D5:B4:DE:E6:CE:8E:DC:4B:9A:9F:36 X509v3 Authority Key Identifier: keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/r4dxvkQZwbyb1bTe5s6O3EuanzY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.10.128.0/17 46.126.0.0/15 46.140.0.0/16 62.2.0.0/16 77.56.0.0/14 80.218.0.0/15 81.7.224.0/19 84.20.32.0-84.20.55.255 84.72.0.0/14 178.82.0.0/16 194.29.0.0/19 195.202.192.0/18 212.47.160.0/19 213.193.64.0/18 217.162.0.0/16 217.168.32.0/19 IPv6: 2a00:e2c0::/32 2a02:aa00::/27 Signature Algorithm: sha256WithRSAEncryption 50:78:98:5f:d7:41:50:0c:c7:ca:ab:39:78:35:70:07:39:9d: c4:f4:c7:d0:64:f6:8a:6b:77:e4:06:c5:ad:05:52:f3:53:4c: da:df:92:e6:2b:c3:c5:77:85:d1:d2:b5:20:04:45:08:f0:3a: 6f:51:ef:7b:d0:e3:f1:a6:2c:3f:2b:0c:1e:4f:b7:d4:a4:95: cc:02:b0:cb:40:35:c4:36:0e:f8:37:9a:ea:03:b4:f5:8f:b0: 97:44:da:1b:eb:d0:ac:ce:72:fa:30:83:b0:7f:a1:a5:c3:9d: 56:2f:a2:2b:ad:9e:f2:cf:5a:52:42:90:de:da:73:7c:63:d7: 07:d1:c9:24:b1:3e:ad:71:6f:54:b1:01:61:00:1b:76:8a:be: 42:2f:c9:93:ac:a7:6e:ea:2d:76:bf:7d:4a:92:ae:6f:77:8b: 7a:11:44:66:63:a4:90:b1:8e:5a:13:64:7c:10:a2:62:df:77: 79:26:a0:5c:dc:61:1d:e3:3e:09:ed:22:b6:ba:db:87:ce:57: c6:6a:74:b9:5c:3e:a4:8c:40:70:85:7b:f3:fd:4d:14:7f:f4: f2:c8:be:70:52:23:bd:af:d4:11:04:a7:b3:77:69:af:1e:22: a6:b4:37:e0:6b:36:ab:9a:05:c1:c1:f1:26:f7:7b:9c:ef:1f: 4e:ca:46:30 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgISAZt/g0uAIOCEyuVGA5ssfqcHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZDI0NDIxNGQ3NjQ2OGQzZmI3MmFiYWQxODkyZWYyM2Rl ZGU5NzgwHhcNMjYwMTAyMTYyMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjg3NzFiZTQ0MTljMWJjOWJkNWI0ZGVlNmNlOGVkYzRiOWE5ZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3p7H4VaSGJqVzT4ZAKdtLES4O0lU fTu+pTgXCmBH5UoydYYM5RY4GN46tIrx5LEOREi7CAWy7kaLuNj8QEZLFeGxx1S2 YZsLZfnjJfEGH9xrUAPa5IX2ye8MJGUCkYSsS4z9QezplKPtS1v/kGkLUNDOL1Lq caYTlrHU41TD1re2OTBqedXr7pxftrCjeQbXvftUINpbMCwzmgE5Dr8swhX3Bi64 UGVee1VwJuuH1lx+TUhdmrt9Ukvxx6GCDNrsl+aEcmJ1uV8N3Rs+QCNtQpkc6l8Z UINjfEYtTF2t/Qe+JXzDsSiKMXhyzX0ntLnyZVUC+qd/yeqhPWBUUW5IyQIDAQAB o4ICezCCAncwHQYDVR0OBBYEFK+Hcb5EGcG8m9W03ubOjtxLmp82MB8GA1UdIwQY MBaAFL3SRCFNdkaNP7cqutGJLvI97el4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmRKRUlVMTJSbzBfdHlxNjBZa3U4ajN0NlhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83NTZlZWYtNjYyOS00NjNhLTk5ZmYt NDZhNDNlZjAyMjFiLzEvcjRkeHZrUVp3YnliMWJUZTVzNk8zRXVhbnpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC83NTZlZWYtNjYyOS00NjNhLTk5ZmYtNDZhNDNlZjAyMjFi LzEvdmRKRUlVMTJSbzBfdHlxNjBZa3U4ajN0NlhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MGYEAgABMGADBAcfCoAD AwEufgMDAC6MAwMAPgIDAwJNOAMDAVDaAwQFUQfgMAwDBAVUFCADBANUFDADAwJU SAMDALJSAwQFwh0AAwQGw8rAAwQF1C+gAwQG1cFAAwMA2aIDBAXZqCAwFAQCAAIw DgMFACoA4sADBQUqAqoAMA0GCSqGSIb3DQEBCwUAA4IBAQBQeJhf10FQDMfKqzl4 NXAHOZ3E9MfQZPaKa3fkBsWtBVLzU0za35LmK8PFd4XR0rUgBEUI8DpvUe970OPx piw/KwweT7fUpJXMArDLQDXENg74N5rqA7T1j7CXRNob69CsznL6MIOwf6Glw51W L6IrrZ7yz1pSQpDe2nN8Y9cH0ckksT6tcW9UsQFhABt2ir5CL8mTrKdu6i12v31K kq5vd4t6EURmY6SQsY5aE2R8EKJi33d5JqBc3GEd4z4J7SK2utuHzlfGanS5XD6k jEBwhXvz/U0Uf/TyyL5wUiO9r9QRBKezd2mvHiKmtDfgazarmgXBwfEm93uc7x9O ykYw -----END CERTIFICATE-----Generated at Sat Jan 10 14:12:49 2026 by rpki-client