This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/iTc4QiTRTDUVzAoc9HgTQBj9vNk.roa File: iTc4QiTRTDUVzAoc9HgTQBj9vNk.roa (raw, json) Hash identifier: M7YGFKI/ySmqCxDcz0c66t0IiUvrgr0f2weY7qCCabo= Subject key identifier: 89:37:38:42:24:D1:4C:35:15:CC:0A:1C:F4:78:13:40:18:FD:BC:D9 Certificate issuer: /CN=d4fdd596267d56f7ce56ebfaec86a32708fede00 Certificate serial: 019B775929C0D77CD392DC4A67EE7258B883 Authority key identifier: D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/iTc4QiTRTDUVzAoc9HgTQBj9vNk.roa Signing time: Thu 01 Jan 2026 02:18:10 +0000 ROA not before: Thu 01 Jan 2026 02:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206206 IP address blocks: 37.156.104.0/22 maxlen: 24 37.156.104.0/24 maxlen: 24 37.156.105.0/24 maxlen: 24 37.156.106.0/24 maxlen: 24 37.156.107.0/24 maxlen: 24 185.24.60.0/22 maxlen: 24 185.24.60.0/23 maxlen: 24 185.24.60.0/24 maxlen: 24 185.24.61.0/24 maxlen: 24 185.24.62.0/23 maxlen: 24 185.24.62.0/24 maxlen: 24 185.24.63.0/24 maxlen: 24 185.106.28.0/23 maxlen: 24 185.106.30.0/23 maxlen: 24 185.136.148.0/23 maxlen: 24 185.136.148.0/24 maxlen: 24 185.136.149.0/24 maxlen: 24 185.136.150.0/23 maxlen: 24 185.136.150.0/24 maxlen: 24 185.136.151.0/24 maxlen: 24 185.187.76.0/22 maxlen: 24 185.187.76.0/24 maxlen: 24 185.187.77.0/24 maxlen: 24 185.187.78.0/24 maxlen: 24 185.187.79.0/24 maxlen: 24 185.244.152.0/22 maxlen: 24 185.244.152.0/23 maxlen: 24 185.244.152.0/24 maxlen: 24 185.244.153.0/24 maxlen: 24 185.244.154.0/23 maxlen: 24 185.244.154.0/24 maxlen: 24 185.244.155.0/24 maxlen: 24 212.237.112.0/21 maxlen: 24 212.237.112.0/23 maxlen: 24 212.237.112.0/24 maxlen: 24 212.237.113.0/24 maxlen: 24 212.237.114.0/23 maxlen: 24 212.237.114.0/24 maxlen: 24 212.237.115.0/24 maxlen: 24 212.237.116.0/23 maxlen: 24 212.237.116.0/24 maxlen: 24 212.237.117.0/24 maxlen: 24 212.237.118.0/23 maxlen: 24 212.237.118.0/24 maxlen: 24 212.237.119.0/24 maxlen: 24 212.237.120.0/22 maxlen: 24 212.237.120.0/23 maxlen: 24 212.237.120.0/24 maxlen: 24 212.237.121.0/24 maxlen: 24 212.237.122.0/23 maxlen: 24 212.237.122.0/24 maxlen: 24 212.237.123.0/24 maxlen: 24 212.237.124.0/22 maxlen: 24 212.237.124.0/24 maxlen: 24 212.237.125.0/24 maxlen: 24 212.237.126.0/24 maxlen: 24 212.237.127.0/24 maxlen: 24 213.32.252.0/23 maxlen: 24 213.32.254.0/23 maxlen: 24 2a06:fd80::/48 maxlen: 48 2a06:fd80::/64 maxlen: 64 2a06:fd80:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 08:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:29:c0:d7:7c:d3:92:dc:4a:67:ee:72:58:b8:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4fdd596267d56f7ce56ebfaec86a32708fede00 Validity Not Before: Jan 1 02:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8937384224d14c3515cc0a1cf478134018fdbcd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:79:86:09:be:a4:c9:18:dc:32:1a:81:9a:f5: 3a:35:20:5d:2f:4c:b7:78:af:ab:e8:b7:35:05:f5: 02:be:64:32:45:68:73:23:b9:82:35:a8:f6:85:5d: 11:ca:9a:51:6b:e5:5f:c6:b8:21:28:fa:64:f9:7e: f3:0c:5a:5f:94:89:56:85:f0:2a:17:5e:a0:96:c8: bd:dd:74:6c:20:74:02:6c:3d:3e:0a:bd:a5:86:2e: 10:e2:d8:f6:0e:8c:79:67:55:be:d5:8d:51:ba:5c: a7:cc:0a:70:10:98:a2:51:a5:2c:1e:12:51:d4:a8: ba:c1:52:db:90:43:27:aa:1b:78:e9:db:84:09:1a: 9b:60:bd:84:98:fc:5a:e9:f1:ec:83:ae:d9:28:37: d5:1d:8c:af:69:34:df:56:8e:29:ad:fb:bb:42:96: ef:f2:68:7e:67:97:a8:1c:07:a4:40:10:b0:b3:fb: 2f:f7:a3:a0:d1:50:b5:eb:7e:f7:25:f3:cb:d3:91: ce:b2:a9:04:0a:98:00:1e:87:7b:f3:ff:dd:48:6d: 1e:04:e5:0b:d0:9a:d4:f4:31:46:ed:14:20:e4:bd: 45:e5:d5:7e:40:4c:66:a8:c5:0e:dc:3f:5a:d7:81: 3f:9a:70:05:4a:ff:51:82:32:4f:49:21:5f:a5:d8: 50:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:37:38:42:24:D1:4C:35:15:CC:0A:1C:F4:78:13:40:18:FD:BC:D9 X509v3 Authority Key Identifier: keyid:D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/iTc4QiTRTDUVzAoc9HgTQBj9vNk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.156.104.0/22 185.24.60.0/22 185.106.28.0/22 185.136.148.0/22 185.187.76.0/22 185.244.152.0/22 212.237.112.0/20 213.32.252.0/22 IPv6: 2a06:fd80::/47 Signature Algorithm: sha256WithRSAEncryption 09:27:63:c1:ad:6f:fa:59:90:4f:aa:55:3f:76:49:ee:10:42: 18:f2:b8:8b:64:0c:76:5a:30:88:68:30:75:4b:ac:3d:d7:a2: e8:71:f0:ef:62:87:93:83:8a:3e:f1:e8:fd:a5:14:2b:c1:93: 49:e4:25:23:90:ec:eb:7a:11:5a:49:c0:4a:78:c8:74:eb:4e: 27:19:51:14:7f:6b:4e:f0:42:07:67:f8:14:11:4a:1e:cc:c4: 87:29:93:3f:19:aa:a2:22:9f:a1:32:1c:f5:a6:c6:a3:62:67: d8:92:ba:44:4f:4f:1a:1d:98:4d:24:bf:41:d5:a4:fe:4c:49: 21:38:43:2e:06:4a:63:d9:fe:4d:c8:f6:4f:e8:4c:80:16:17: f6:af:e6:2f:0a:2c:8e:cf:ed:3d:67:a6:48:06:eb:3a:49:49: dc:f3:5e:a6:b0:0b:8e:2e:fb:5e:0d:7e:63:fa:21:ee:2d:fd: 9a:a7:ca:b6:63:ae:16:c3:b8:3a:5d:0d:e0:99:5b:7a:70:a6: 74:1d:1d:b6:1a:cd:07:c0:af:74:67:2b:00:52:ac:be:29:91: 60:59:b0:35:8e:66:fd:23:a2:c5:7f:a8:ae:09:9e:44:f6:f1: 1d:b7:70:67:7e:76:9a:42:b4:5d:e3:0f:04:eb:b6:12:40:df: 8a:e3:97:dd -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISAZt3WSnA13zTktxKZ+5yWLiDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZmRkNTk2MjY3ZDU2ZjdjZTU2ZWJmYWVjODZhMzI3MDhm ZWRlMDAwHhcNMjYwMTAxMDIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTM3Mzg0MjI0ZDE0YzM1MTVjYzBhMWNmNDc4MTM0MDE4ZmRiY2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3mGCb6kyRjcMhqBmvU6NSBdL0y3 eK+r6Lc1BfUCvmQyRWhzI7mCNaj2hV0RyppRa+VfxrghKPpk+X7zDFpflIlWhfAq F16glsi93XRsIHQCbD0+Cr2lhi4Q4tj2Dox5Z1W+1Y1RulynzApwEJiiUaUsHhJR 1Ki6wVLbkEMnqht46duECRqbYL2EmPxa6fHsg67ZKDfVHYyvaTTfVo4prfu7Qpbv 8mh+Z5eoHAekQBCws/sv96Og0VC16373JfPL05HOsqkECpgAHod78//dSG0eBOUL 0JrU9DFG7RQg5L1F5dV+QExmqMUO3D9a14E/mnAFSv9RgjJPSSFfpdhQqQIDAQAB o4ICRDCCAkAwHQYDVR0OBBYEFIk3OEIk0Uw1FcwKHPR4E0AY/bzZMB8GA1UdIwQY MBaAFNT91ZYmfVb3zlbr+uyGoycI/t4AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVAzVmxpWjlWdmZPVnV2NjdJYWpKd2otM2dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jZDRhZjYtYjc0Mi00Y2RjLWIzYTAt NjdhODdkOGEzYjliLzEvaVRjNFFpVFJURFVWekFvYzlIZ1RRQmo5dk5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jZDRhZjYtYjc0Mi00Y2RjLWIzYTAtNjdhODdkOGEzYjli LzEvMVAzVmxpWjlWdmZPVnV2NjdJYWpKd2otM2dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTA2BAIAATAwAwQCJZxoAwQC uRg8AwQCuWocAwQCuYiUAwQCubtMAwQCufSYAwQE1O1wAwQC1SD8MA8EAgACMAkD BwEqBv2AAAAwDQYJKoZIhvcNAQELBQADggEBAAknY8Gtb/pZkE+qVT92Se4QQhjy uItkDHZaMIhoMHVLrD3Xouhx8O9ih5ODij7x6P2lFCvBk0nkJSOQ7Ot6EVpJwEp4 yHTrTicZURR/a07wQgdn+BQRSh7MxIcpkz8ZqqIin6EyHPWmxqNiZ9iSukRPTxod mE0kv0HVpP5MSSE4Qy4GSmPZ/k3I9k/oTIAWF/av5i8KLI7P7T1npkgG6zpJSdzz XqawC44u+14NfmP6Ie4t/ZqnyrZjrhbDuDpdDeCZW3pwpnQdHbYazQfAr3RnKwBS rL4pkWBZsDWOZv0josV/qK4JnkT28R23cGd+dppCtF3jDwTrthJA34rjl90= -----END CERTIFICATE-----Generated at Mon Jan 12 16:07:29 2026 by rpki-client