This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/mc0V-dqblb2LS7X-Me9ToDZupDo.roa File: mc0V-dqblb2LS7X-Me9ToDZupDo.roa (raw, json) Hash identifier: TgiXuLIZXRQWoQtj5JAJxLB0Ph8I4D6iEUTij0gXzCQ= Subject key identifier: 99:CD:15:F9:DA:9B:95:BD:8B:4B:B5:FE:31:EF:53:A0:36:6E:A4:3A Certificate issuer: /CN=945b73df7e6fe1100f1d13a07c18d59af228428c Certificate serial: 019B797EF5439FEA259EA536A44F22318064 Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/mc0V-dqblb2LS7X-Me9ToDZupDo.roa Signing time: Thu 01 Jan 2026 12:18:42 +0000 ROA not before: Thu 01 Jan 2026 12:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61098 IP address blocks: 85.217.160.0/22 maxlen: 24 85.217.172.0/23 maxlen: 24 85.217.174.0/23 maxlen: 24 85.217.184.0/23 maxlen: 24 85.217.186.0/23 maxlen: 24 89.145.160.0/22 maxlen: 24 89.145.164.0/23 maxlen: 24 89.145.166.0/23 maxlen: 24 91.92.116.0/23 maxlen: 24 91.92.118.0/23 maxlen: 24 91.92.140.0/23 maxlen: 24 91.92.142.0/23 maxlen: 24 91.92.152.0/23 maxlen: 24 91.92.154.0/23 maxlen: 24 91.92.200.0/23 maxlen: 24 91.92.202.0/23 maxlen: 24 91.92.224.0/23 maxlen: 24 91.92.227.0/24 maxlen: 24 92.39.56.0/22 maxlen: 24 92.39.60.0/22 maxlen: 24 138.124.208.0/22 maxlen: 24 138.124.212.0/22 maxlen: 24 138.124.216.0/23 maxlen: 24 138.124.220.0/22 maxlen: 24 151.145.192.0/22 maxlen: 24 151.145.196.0/22 maxlen: 22 151.145.200.0/22 maxlen: 22 159.100.240.0/22 maxlen: 24 159.100.244.0/24 maxlen: 24 159.100.245.0/24 maxlen: 24 159.100.246.0/23 maxlen: 24 159.100.248.0/21 maxlen: 24 185.19.28.0/22 maxlen: 24 185.150.8.0/22 maxlen: 24 194.182.160.0/22 maxlen: 24 194.182.164.0/22 maxlen: 24 194.182.168.0/22 maxlen: 24 194.182.172.0/22 maxlen: 24 194.182.176.0/22 maxlen: 24 194.182.180.0/22 maxlen: 24 194.182.184.0/22 maxlen: 24 194.182.188.0/22 maxlen: 24 2a04:c41::/32 maxlen: 48 2a04:c42::/32 maxlen: 48 2a04:c42:f11::/48 maxlen: 48 2a04:c42:f12::/48 maxlen: 48 2a04:c43::/32 maxlen: 48 2a04:c44::/32 maxlen: 48 2a04:c45::/32 maxlen: 48 2a04:c46::/32 maxlen: 48 2a04:c47::/32 maxlen: 48 2a04:c47:f11::/48 maxlen: 48 2a04:c47:f12::/48 maxlen: 48 2a07:6cc0:10::/48 maxlen: 48 2a07:6cc0:11::/48 maxlen: 48 2a07:6cc0:12::/48 maxlen: 48 2a07:6cc0:20::/48 maxlen: 48 2a07:6cc0:21::/48 maxlen: 48 2a07:6cc0:30::/48 maxlen: 48 2a07:6cc0:31::/48 maxlen: 48 2a07:6cc0:40::/48 maxlen: 48 2a07:6cc0:41::/48 maxlen: 48 2a07:6cc0:50::/48 maxlen: 48 2a07:6cc0:60::/48 maxlen: 48 2a07:6cc0:70::/48 maxlen: 48 2a07:6cc0:71::/48 maxlen: 48 2a07:6cc0:80::/48 maxlen: 48 2a07:6cc1::/32 maxlen: 48 2a07:6cc2::/32 maxlen: 48 2a07:6cc2:f11::/48 maxlen: 48 2a07:6cc2:f12::/48 maxlen: 48 2a07:6cc3::/32 maxlen: 48 2a07:6cc3:f11::/48 maxlen: 48 2a07:6cc3:f12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f5:43:9f:ea:25:9e:a5:36:a4:4f:22:31:80:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c Validity Not Before: Jan 1 12:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99cd15f9da9b95bd8b4bb5fe31ef53a0366ea43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:14:05:ea:c9:22:f6:e6:8b:8c:d1:93:60:34: e9:b8:cd:c1:3d:8b:c9:e7:b9:24:3a:36:c2:6e:7a: b7:3f:1a:5b:4a:40:3a:ef:eb:47:5f:f8:0c:5a:8c: c4:07:84:39:3e:b6:cd:1c:67:99:b0:69:87:25:dd: 4a:6f:5a:c7:ab:39:50:9b:7e:a2:49:21:50:6f:ba: a6:09:a5:78:f7:14:05:ed:2a:75:f5:90:f2:b0:0d: 70:7e:38:dc:62:67:d9:4d:7b:b9:a4:43:16:73:26: 32:52:e3:f3:f5:f6:d9:c2:cf:a1:99:5a:21:d5:e3: 1f:21:f5:ca:5a:84:df:37:b8:22:e2:13:1f:c7:e9: 1d:70:4f:0f:1f:20:37:cd:be:ab:82:27:3d:58:f0: b1:0d:9b:21:7c:42:5e:4c:4d:82:b9:35:e8:17:39: a4:df:55:ed:1b:08:83:ac:6e:b4:a3:b5:ef:e5:a7: 6a:f6:73:fc:bc:25:bf:62:d2:cc:b6:7b:5f:8f:0b: 7f:62:98:17:be:65:e1:a1:98:54:b1:ad:29:32:5b: 73:2c:f3:d2:79:6e:fa:85:9d:49:a1:c1:fd:38:69: b2:8e:15:1c:74:d9:1d:3c:72:fe:53:c7:38:90:1a: a3:df:65:e7:bf:43:8b:08:95:b1:50:a1:f5:cc:19: ca:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CD:15:F9:DA:9B:95:BD:8B:4B:B5:FE:31:EF:53:A0:36:6E:A4:3A X509v3 Authority Key Identifier: keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/mc0V-dqblb2LS7X-Me9ToDZupDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.217.160.0/22 85.217.172.0/22 85.217.184.0/22 89.145.160.0/21 91.92.116.0/22 91.92.140.0/22 91.92.152.0/22 91.92.200.0/22 91.92.224.0/23 91.92.227.0/24 92.39.56.0/21 138.124.208.0-138.124.217.255 138.124.220.0/22 151.145.192.0-151.145.203.255 159.100.240.0/20 185.19.28.0/22 185.150.8.0/22 194.182.160.0/19 IPv6: 2a04:c41::-2a04:c47:ffff:ffff:ffff:ffff:ffff:ffff 2a07:6cc0:10::-2a07:6cc0:12:ffff:ffff:ffff:ffff:ffff 2a07:6cc0:20::/47 2a07:6cc0:30::/47 2a07:6cc0:40::/47 2a07:6cc0:50::/48 2a07:6cc0:60::/48 2a07:6cc0:70::/47 2a07:6cc0:80::/48 2a07:6cc1::-2a07:6cc3:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 94:7b:a2:ec:1e:92:92:0d:7e:1d:8e:2f:2b:a5:bf:75:56:71: b1:e7:c5:6c:19:23:f2:a1:89:bc:97:ba:dd:28:55:b9:93:14: 46:b4:6e:f1:77:86:90:1f:f3:4b:c0:20:3a:99:d5:35:1e:d0: 57:ef:ba:07:04:28:f3:a7:e1:fd:79:5c:f7:d5:fa:1e:c3:53: 85:76:5e:cd:46:a3:27:c6:11:1f:01:86:cf:48:27:cc:3f:9d: 67:17:9b:54:56:57:3d:72:dc:2b:bc:13:df:b7:f9:85:82:d6: f9:12:85:24:73:bf:c6:9d:1c:8e:2a:4f:6b:74:fa:c0:6c:52: 94:5e:0c:aa:89:47:e3:e6:34:ba:07:e2:fb:16:74:23:f1:b7: 47:76:0e:9a:a6:02:76:a5:c9:34:2a:ae:cb:2c:66:1f:11:55: 9b:0a:d7:f0:9f:3d:f3:79:e1:0d:a6:89:d9:b2:44:9c:ab:14: 2b:68:53:b4:64:17:90:35:d5:40:f1:9f:42:33:8a:e6:90:45: 70:39:47:a9:5e:67:d9:1c:21:3d:98:5c:7c:20:84:0d:5b:15: 42:56:5a:af:b7:bc:04:03:62:b4:00:f1:80:25:f1:58:fb:50: 2b:1b:67:52:f5:b6:81:a0:cb:f6:57:3b:ba:37:85:64:07:55: b4:f3:40:ac -----BEGIN CERTIFICATE----- MIIF9TCCBN2gAwIBAgISAZt5fvVDn+olnqU2pE8iMYBkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NWI3M2RmN2U2ZmUxMTAwZjFkMTNhMDdjMThkNTlhZjIy ODQyOGMwHhcNMjYwMTAxMTIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWNkMTVmOWRhOWI5NWJkOGI0YmI1ZmUzMWVmNTNhMDM2NmVhNDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BQF6ski9uaLjNGTYDTpuM3BPYvJ 57kkOjbCbnq3PxpbSkA67+tHX/gMWozEB4Q5PrbNHGeZsGmHJd1Kb1rHqzlQm36i SSFQb7qmCaV49xQF7Sp19ZDysA1wfjjcYmfZTXu5pEMWcyYyUuPz9fbZws+hmVoh 1eMfIfXKWoTfN7gi4hMfx+kdcE8PHyA3zb6rgic9WPCxDZshfEJeTE2CuTXoFzmk 31XtGwiDrG60o7Xv5adq9nP8vCW/YtLMtntfjwt/YpgXvmXhoZhUsa0pMltzLPPS eW76hZ1JocH9OGmyjhUcdNkdPHL+U8c4kBqj32Xnv0OLCJWxUKH1zBnKOQIDAQAB o4IDATCCAv0wHQYDVR0OBBYEFJnNFfnam5W9i0u1/jHvU6A2bqQ6MB8GA1UdIwQY MBaAFJRbc99+b+EQDx0ToHwY1ZryKEKMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lYzYxOGYtOWY2MS00MTg1LWJhMGQt NmU0NTI0MjVhMTkzLzEvbWMwVi1kcWJsYjJMUzdYLU1lOVRvRFp1cERvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9lYzYxOGYtOWY2MS00MTg1LWJhMGQtNmU0NTI0MjVhMTkz LzEvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBFQYIKwYBBQUHAQcBAf8EggEEMIIBADCBggQCAAEwfAME AlXZoAMEAlXZrAMEAlXZuAMEA1mRoAMEAltcdAMEAltcjAMEAltcmAMEAltcyAME AVtc4AMEAFtc4wMEA1wnODAMAwQEinzQAwQBinzYAwQCinzcMAwDBAaXkcADBAKX kcgDBASfZPADBAK5ExwDBAK5lggDBAXCtqAweQQCAAIwczAOAwUAKgQMQQMFAyoE DEAwEgMHBCoHbMAAEAMHACoHbMAAEgMHASoHbMAAIAMHASoHbMAAMAMHASoHbMAA QAMHACoHbMAAUAMHACoHbMAAYAMHASoHbMAAcAMHACoHbMAAgDAOAwUAKgdswQMF AioHbMAwDQYJKoZIhvcNAQELBQADggEBAJR7ouwekpINfh2OLyulv3VWcbHnxWwZ I/KhibyXut0oVbmTFEa0bvF3hpAf80vAIDqZ1TUe0FfvugcEKPOn4f15XPfV+h7D U4V2Xs1GoyfGER8Bhs9IJ8w/nWcXm1RWVz1y3Cu8E9+3+YWC1vkShSRzv8adHI4q T2t0+sBsUpReDKqJR+PmNLoH4vsWdCPxt0d2DpqmAnalyTQqrsssZh8RVZsK1/Cf PfN54Q2midmyRJyrFCtoU7RkF5A11UDxn0IziuaQRXA5R6leZ9kcIT2YXHwghA1b FUJWWq+3vAQDYrQA8YAl8Vj7UCsbZ1L1toGgy/ZXO7o3hWQHVbTzQKw= -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:53 2026 by rpki-client