This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/4F0OaJWrFY1VR8hbnoWiUu3gQNw.roa File: 4F0OaJWrFY1VR8hbnoWiUu3gQNw.roa (raw, json) Hash identifier: 0plAJbu0NHlUYP4bdzDQfrORA51pS6TOr8F/YNOFV9M= Subject key identifier: E0:5D:0E:68:95:AB:15:8D:55:47:C8:5B:9E:85:A2:52:ED:E0:40:DC Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18 Certificate serial: 019B7CEE6A76DF84CA809E82DBFDA28C6D85 Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/4F0OaJWrFY1VR8hbnoWiUu3gQNw.roa Signing time: Fri 02 Jan 2026 04:19:18 +0000 ROA not before: Fri 02 Jan 2026 04:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57363 IP address blocks: 91.231.234.0/24 maxlen: 24 91.231.235.0/24 maxlen: 24 91.231.236.0/24 maxlen: 24 91.231.237.0/24 maxlen: 24 91.231.239.0/24 maxlen: 24 91.238.108.0/24 maxlen: 24 91.238.109.0/24 maxlen: 24 91.238.110.0/24 maxlen: 24 91.240.168.0/24 maxlen: 24 91.240.169.0/24 maxlen: 24 91.240.170.0/24 maxlen: 24 91.240.171.0/24 maxlen: 24 151.236.64.0/24 maxlen: 24 151.236.65.0/24 maxlen: 24 151.236.67.0/24 maxlen: 24 151.236.68.0/24 maxlen: 24 151.236.70.0/24 maxlen: 24 151.236.72.0/24 maxlen: 24 151.236.73.0/24 maxlen: 24 151.236.74.0/24 maxlen: 24 151.236.75.0/24 maxlen: 24 151.236.76.0/24 maxlen: 24 151.236.77.0/24 maxlen: 24 151.236.78.0/24 maxlen: 24 151.236.80.0/24 maxlen: 24 151.236.81.0/24 maxlen: 24 151.236.83.0/24 maxlen: 24 151.236.84.0/24 maxlen: 24 151.236.85.0/24 maxlen: 24 151.236.86.0/24 maxlen: 24 151.236.87.0/24 maxlen: 24 151.236.88.0/24 maxlen: 24 151.236.89.0/24 maxlen: 24 151.236.90.0/24 maxlen: 24 151.236.91.0/24 maxlen: 24 151.236.94.0/24 maxlen: 24 151.236.95.0/24 maxlen: 24 151.236.96.0/24 maxlen: 24 151.236.99.0/24 maxlen: 24 151.236.100.0/24 maxlen: 24 151.236.102.0/24 maxlen: 24 151.236.106.0/24 maxlen: 24 151.236.107.0/24 maxlen: 24 151.236.109.0/24 maxlen: 24 151.236.110.0/23 maxlen: 23 151.236.111.0/24 maxlen: 24 151.236.113.0/24 maxlen: 24 151.236.122.0/23 maxlen: 23 151.236.123.0/24 maxlen: 24 151.236.125.0/24 maxlen: 24 151.236.127.0/24 maxlen: 24 185.31.112.0/24 maxlen: 24 185.31.113.0/24 maxlen: 24 185.31.114.0/24 maxlen: 24 185.31.115.0/24 maxlen: 24 2a02:aec0:1::/48 maxlen: 48 2a02:aec0:2::/48 maxlen: 48 2a02:aec0:3::/48 maxlen: 48 2a02:aec0:5::/48 maxlen: 48 2a02:aec0:6::/48 maxlen: 48 2a02:aec0:7::/48 maxlen: 48 2a02:aec0:8::/48 maxlen: 48 2a02:aec0:9::/48 maxlen: 48 2a02:aec0:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:6a:76:df:84:ca:80:9e:82:db:fd:a2:8c:6d:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18 Validity Not Before: Jan 2 04:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e05d0e6895ab158d5547c85b9e85a252ede040dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d0:26:4c:3a:30:03:9a:9c:e6:b3:0c:bf:90: 44:1a:ee:33:b1:b8:cc:ef:17:a3:31:52:26:0e:4b: 5b:d8:83:38:03:fc:03:dc:48:e5:20:c2:eb:ff:51: f4:14:cf:1e:71:08:78:3a:ef:cc:a0:41:4b:f5:f6: 38:d1:0a:7d:b4:2f:4f:fc:aa:3b:d6:02:2a:ca:95: 39:1d:4d:b8:8a:66:7c:54:bf:9d:c5:4e:5e:08:a0: 5e:0a:31:4f:cf:01:aa:75:53:7c:f2:45:bf:7b:c5: 8a:50:f5:6e:93:f6:36:d9:08:00:f8:30:d2:cd:aa: 2e:c5:b5:b3:00:4f:1c:00:e4:7a:28:90:5c:44:83: b7:ce:9a:3a:2e:ac:5c:2a:ce:5b:43:65:29:7e:7b: b1:5f:c3:13:ae:e2:7f:79:5d:70:ec:cc:12:f5:6c: f1:75:14:6a:86:1e:c7:9c:89:3b:00:d1:f8:9e:a8: 75:39:5e:a6:f9:8d:aa:20:00:f1:3f:75:d9:db:6f: 9e:cf:88:46:75:a8:21:71:bc:74:8c:7e:61:1e:cc: d5:77:9f:e7:c2:4f:57:59:c3:70:ea:8d:93:e9:21: c5:b6:d1:d7:42:d1:27:3a:c8:0e:fd:2b:db:f3:20: 57:4d:b8:2c:08:af:12:9e:41:9f:b1:2a:8a:7d:86: 8a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5D:0E:68:95:AB:15:8D:55:47:C8:5B:9E:85:A2:52:ED:E0:40:DC X509v3 Authority Key Identifier: keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/4F0OaJWrFY1VR8hbnoWiUu3gQNw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.234.0-91.231.237.255 91.231.239.0/24 91.238.108.0-91.238.110.255 91.240.168.0/22 151.236.64.0/23 151.236.67.0-151.236.68.255 151.236.70.0/24 151.236.72.0-151.236.78.255 151.236.80.0/23 151.236.83.0-151.236.91.255 151.236.94.0-151.236.96.255 151.236.99.0-151.236.100.255 151.236.102.0/24 151.236.106.0/23 151.236.109.0-151.236.111.255 151.236.113.0/24 151.236.122.0/23 151.236.125.0/24 151.236.127.0/24 185.31.112.0/22 IPv6: 2a02:aec0:1::-2a02:aec0:3:ffff:ffff:ffff:ffff:ffff 2a02:aec0:5::-2a02:aec0:9:ffff:ffff:ffff:ffff:ffff 2a02:aec0:b::/48 Signature Algorithm: sha256WithRSAEncryption 91:9e:f2:96:cb:e5:57:9a:03:ba:d0:fb:30:c8:b7:d6:a9:79: fc:b5:0e:d8:b0:34:69:a8:56:f1:ba:14:03:3c:c0:75:1b:31: a4:89:a6:bd:ea:cf:ba:75:d5:a8:90:c2:92:02:e4:02:98:47: c3:8a:ef:15:09:63:67:42:3e:3f:4f:45:8e:3b:8c:78:44:d4: 05:96:e7:da:d5:a8:c7:ba:83:ab:fc:5f:e5:e1:13:e9:46:d4: b1:13:bc:91:52:b6:d7:2d:14:66:45:0b:2b:6c:ef:17:90:93: 4e:f6:68:9f:d5:84:85:26:6c:b5:17:b1:db:b6:45:7a:93:33: c8:70:5d:1b:a0:c3:17:cf:22:4a:a4:57:97:9a:5a:6f:56:8d: fd:7b:87:07:b9:51:ac:86:ff:38:d8:02:6e:86:08:29:e4:1c: 7b:e4:0c:1e:26:9e:4e:cb:d9:56:5d:72:da:8b:32:51:24:7f: f3:56:e5:a0:1a:7a:26:52:e2:43:a6:e5:dc:04:38:9e:23:c4: 5b:94:a1:69:df:e8:63:cd:27:63:31:14:81:bb:4d:6f:40:27: 01:c4:a7:42:bb:38:d4:e9:41:37:c0:65:47:aa:1a:16:66:47: e7:89:0e:f8:ba:3a:8e:46:c2:a6:78:53:c1:63:ac:7d:f3:14: e4:a5:9b:7b -----BEGIN CERTIFICATE----- MIIF7jCCBNagAwIBAgISAZt87mp234TKgJ6C2/2ijG2FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNGM0OTRmNTYxOTNiNGU5YWRmM2RiNzJlNGYwMTk3OGM1 ODdmMTgwHhcNMjYwMTAyMDQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDVkMGU2ODk1YWIxNThkNTU0N2M4NWI5ZTg1YTI1MmVkZTA0MGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9AmTDowA5qc5rMMv5BEGu4zsbjM 7xejMVImDktb2IM4A/wD3EjlIMLr/1H0FM8ecQh4Ou/MoEFL9fY40Qp9tC9P/Ko7 1gIqypU5HU24imZ8VL+dxU5eCKBeCjFPzwGqdVN88kW/e8WKUPVuk/Y22QgA+DDS zaouxbWzAE8cAOR6KJBcRIO3zpo6LqxcKs5bQ2UpfnuxX8MTruJ/eV1w7MwS9Wzx dRRqhh7HnIk7ANH4nqh1OV6m+Y2qIADxP3XZ22+ez4hGdaghcbx0jH5hHszVd5/n wk9XWcNw6o2T6SHFttHXQtEnOsgO/Svb8yBXTbgsCK8SnkGfsSqKfYaKfwIDAQAB o4IC+jCCAvYwHQYDVR0OBBYEFOBdDmiVqxWNVUfIW56FolLt4EDcMB8GA1UdIwQY MBaAFGJMSU9WGTtOmt89ty5PAZeMWH8YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWt4SlQxWVpPMDZhM3oyM0xrOEJsNHhZZnhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wOTg4YWYtOGQ3Zi00YzI5LWI1Y2Mt N2FhYjZlZjk1NWExLzEvNEYwT2FKV3JGWTFWUjhoYm5vV2lVdTNnUU53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8wOTg4YWYtOGQ3Zi00YzI5LWI1Y2MtN2FhYjZlZjk1NWEx LzEvWWt4SlQxWVpPMDZhM3oyM0xrOEJsNHhZZnhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBDgYIKwYBBQUHAQcBAf8Egf4wgfswgb8EAgABMIG4MAwD BAFb5+oDBAFb5+wDBABb5+8wDAMEAlvubAMEAFvubgMEAlvwqAMEAZfsQDAMAwQA l+xDAwQAl+xEAwQAl+xGMAwDBAOX7EgDBACX7E4DBAGX7FAwDAMEAJfsUwMEApfs WDAMAwQBl+xeAwQAl+xgMAwDBACX7GMDBACX7GQDBACX7GYDBAGX7GowDAMEAJfs bQMEBJfsYAMEAJfscQMEAZfsegMEAJfsfQMEAJfsfwMEArkfcDA3BAIAAjAxMBID BwAqAq7AAAEDBwIqAq7AAAAwEgMHACoCrsAABQMHASoCrsAACAMHACoCrsAACzAN BgkqhkiG9w0BAQsFAAOCAQEAkZ7ylsvlV5oDutD7MMi31ql5/LUO2LA0aahW8boU AzzAdRsxpImmverPunXVqJDCkgLkAphHw4rvFQljZ0I+P09FjjuMeETUBZbn2tWo x7qDq/xf5eET6UbUsRO8kVK21y0UZkULK2zvF5CTTvZon9WEhSZstRex27ZFepMz yHBdG6DDF88iSqRXl5pab1aN/XuHB7lRrIb/ONgCboYIKeQce+QMHiaeTsvZVl1y 2osyUSR/81bloBp6JlLiQ6bl3AQ4niPEW5Shad/oY80nYzEUgbtNb0AnAcSnQrs4 1OlBN8BlR6oaFmZH54kO+Lo6jkbCpnhTwWOsffMU5KWbew== -----END CERTIFICATE-----Generated at Mon Jan 26 12:21:27 2026 by rpki-client