This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/O8TEWtCyCFFFeBDFSQav1ileZCc.roa File: O8TEWtCyCFFFeBDFSQav1ileZCc.roa (raw, json) Hash identifier: ZRW28K9Lr27GeePq4xOpOm3t2INDbE7syD4cgpdmkwY= Subject key identifier: 3B:C4:C4:5A:D0:B2:08:51:45:78:10:C5:49:06:AF:D6:29:5E:64:27 Certificate issuer: /CN=2665c17fa028b31348f630f6b56df422ce062b3b Certificate serial: 019B7C117951CC8CAD002FE7C6CEB5699A28 Authority key identifier: 26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/O8TEWtCyCFFFeBDFSQav1ileZCc.roa Signing time: Fri 02 Jan 2026 00:17:58 +0000 ROA not before: Fri 02 Jan 2026 00:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197637 IP address blocks: 31.25.152.0/21 maxlen: 21 37.99.200.0/21 maxlen: 21 37.123.120.0/21 maxlen: 21 109.75.96.0/24 maxlen: 24 109.75.97.0/24 maxlen: 24 109.75.98.0/24 maxlen: 24 109.75.99.0/24 maxlen: 24 109.75.100.0/22 maxlen: 22 109.75.102.0/24 maxlen: 24 109.75.104.0/24 maxlen: 24 109.75.105.0/24 maxlen: 24 109.75.106.0/24 maxlen: 24 109.75.107.0/24 maxlen: 24 109.75.108.0/22 maxlen: 22 153.92.32.0/21 maxlen: 21 185.8.84.0/23 maxlen: 23 185.8.86.0/23 maxlen: 23 185.62.88.0/22 maxlen: 22 185.65.196.0/23 maxlen: 23 185.65.198.0/23 maxlen: 23 185.68.76.0/22 maxlen: 22 185.211.16.0/22 maxlen: 22 193.57.0.0/22 maxlen: 22 195.42.244.0/22 maxlen: 22 195.178.0.0/23 maxlen: 23 2a04:6ec0::/29 maxlen: 29 2a04:6ec0::/32 maxlen: 32 2a0b:6240::/29 maxlen: 29 2a0c:90c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.crl rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:79:51:cc:8c:ad:00:2f:e7:c6:ce:b5:69:9a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2665c17fa028b31348f630f6b56df422ce062b3b Validity Not Before: Jan 2 00:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bc4c45ad0b20851457810c54906afd6295e6427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bf:77:0a:ec:df:13:d9:69:d8:7c:1c:1f:3e: c1:fe:77:05:18:0c:1b:8d:62:45:aa:52:16:04:28: 43:83:7b:ca:8d:90:75:d8:a6:99:ee:61:a8:b2:6a: 00:70:40:b3:2a:04:96:dd:31:6b:4f:1f:b7:8e:e9: 0b:80:14:a8:0a:24:7d:12:10:e7:a1:be:20:7f:c7: cd:3f:3a:d3:bb:59:3d:07:65:37:21:0d:3f:98:aa: 56:bc:c3:b6:a4:67:8d:0b:1b:37:72:40:15:1d:5a: 8d:cc:5d:b3:fe:68:54:3c:d7:99:51:c9:71:19:2f: 33:02:70:0c:ce:c3:62:bf:52:4e:26:b2:2f:7c:b1: 6a:cf:00:ff:73:fe:88:f3:75:f3:75:52:8a:d9:8e: d2:9e:57:7a:31:49:24:5a:ed:66:35:ca:02:76:fd: 05:8b:b8:b6:16:09:45:65:eb:f7:bd:ee:7f:24:6a: 86:85:2a:23:b6:d6:3d:a0:69:f5:04:a7:5e:a9:38: a6:57:09:45:b6:9a:6c:10:89:94:9e:61:11:0e:6f: aa:23:10:3d:11:b2:d3:f1:da:af:c2:eb:4d:c6:ba: 07:17:70:40:0e:e1:b8:84:8f:33:ce:0f:8d:0d:52: dd:b3:eb:db:66:e2:ab:ab:6e:ca:e0:55:cf:5c:30: 9a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C4:C4:5A:D0:B2:08:51:45:78:10:C5:49:06:AF:D6:29:5E:64:27 X509v3 Authority Key Identifier: keyid:26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/O8TEWtCyCFFFeBDFSQav1ileZCc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.152.0/21 37.99.200.0/21 37.123.120.0/21 109.75.96.0/20 153.92.32.0/21 185.8.84.0/22 185.62.88.0/22 185.65.196.0/22 185.68.76.0/22 185.211.16.0/22 193.57.0.0/22 195.42.244.0/22 195.178.0.0/23 IPv6: 2a04:6ec0::/29 2a0b:6240::/29 2a0c:90c0::/29 Signature Algorithm: sha256WithRSAEncryption 9f:d3:ad:ac:c4:9b:c0:27:fc:8a:16:b6:91:c8:1a:75:71:5d: 33:9b:f2:90:c9:7a:80:ec:57:8b:fd:26:6d:3a:cb:ac:c8:d6: 13:aa:e9:ab:7e:de:ae:dd:37:06:62:e1:df:9d:66:0a:bc:bc: 01:10:88:e4:28:e3:74:24:55:a7:8b:44:f2:53:1c:ba:7a:19: a6:93:c9:e3:65:35:14:9c:7f:bc:6b:85:4e:c9:7a:73:1c:7c: a3:5e:75:03:0b:40:a7:e4:2d:03:43:17:f5:af:9c:62:61:74: 5d:71:49:d7:38:ab:b4:58:4f:ce:2e:26:38:94:cd:92:84:72: 96:48:a8:06:e6:50:6c:ac:d4:02:d4:41:8d:bc:4c:fa:d8:a7: 76:e7:49:49:bc:96:62:39:68:28:b7:f8:92:8b:7a:63:8f:cf: 9e:a7:20:28:3b:61:d0:41:cc:a5:25:f4:de:bc:fd:4b:5d:20: f0:e8:ff:7d:b8:ef:48:ed:96:22:af:42:77:d2:a1:96:af:0a: 02:b8:b2:6e:6a:58:6f:2e:7e:b5:e3:5e:b6:04:12:dd:00:8c: 74:aa:b8:ce:c1:0f:78:35:74:b9:24:bb:23:a5:af:29:87:00: 46:5f:72:4d:e6:13:bc:85:09:02:0d:0b:e5:af:a4:2f:74:98: 16:11:ff:30 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgISAZt8EXlRzIytAC/nxs61aZooMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjVjMTdmYTAyOGIzMTM0OGY2MzBmNmI1NmRmNDIyY2Uw NjJiM2IwHhcNMjYwMTAyMDAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmM0YzQ1YWQwYjIwODUxNDU3ODEwYzU0OTA2YWZkNjI5NWU2NDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb93CuzfE9lp2HwcHz7B/ncFGAwb jWJFqlIWBChDg3vKjZB12KaZ7mGosmoAcECzKgSW3TFrTx+3jukLgBSoCiR9EhDn ob4gf8fNPzrTu1k9B2U3IQ0/mKpWvMO2pGeNCxs3ckAVHVqNzF2z/mhUPNeZUclx GS8zAnAMzsNiv1JOJrIvfLFqzwD/c/6I83XzdVKK2Y7Snld6MUkkWu1mNcoCdv0F i7i2FglFZev3ve5/JGqGhSojttY9oGn1BKdeqTimVwlFtppsEImUnmERDm+qIxA9 EbLT8dqvwutNxroHF3BADuG4hI8zzg+NDVLds+vbZuKrq27K4FXPXDCaNQIDAQAB o4ICbzCCAmswHQYDVR0OBBYEFDvExFrQsghRRXgQxUkGr9YpXmQnMB8GA1UdIwQY MBaAFCZlwX+gKLMTSPYw9rVt9CLOBis7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1YQmY2QW9zeE5JOWpEMnRXMzBJczRHS3pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mYzkwYTAtODA0Yy00MGZhLWIyN2Et YzM4M2E5MDEwMDA1LzEvTzhURVd0Q3lDRkZGZUJERlNRYXYxaWxlWkNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9mYzkwYTAtODA0Yy00MGZhLWIyN2EtYzM4M2E5MDEwMDA1 LzEvSm1YQmY2QW9zeE5JOWpEMnRXMzBJczRHS3pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwVAQCAAEwTgMEAx8ZmAME AyVjyAMEAyV7eAMEBG1LYAMEA5lcIAMEArkIVAMEArk+WAMEArlBxAMEArlETAME ArnTEAMEAsE5AAMEAsMq9AMEAcOyADAbBAIAAjAVAwUDKgRuwAMFAyoLYkADBQMq DJDAMA0GCSqGSIb3DQEBCwUAA4IBAQCf062sxJvAJ/yKFraRyBp1cV0zm/KQyXqA 7FeL/SZtOsusyNYTqumrft6u3TcGYuHfnWYKvLwBEIjkKON0JFWni0TyUxy6ehmm k8njZTUUnH+8a4VOyXpzHHyjXnUDC0Cn5C0DQxf1r5xiYXRdcUnXOKu0WE/OLiY4 lM2ShHKWSKgG5lBsrNQC1EGNvEz62Kd250lJvJZiOWgot/iSi3pjj8+epyAoO2HQ QcylJfTevP1LXSDw6P99uO9I7ZYir0J30qGWrwoCuLJualhvLn614162BBLdAIx0 qrjOwQ94NXS5JLsjpa8phwBGX3JN5hO8hQkCDQvlr6QvdJgWEf8w -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:39 2026 by rpki-client