This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/FqH_aOy535GKEjH0INwMTcbl8MQ.roa File: FqH_aOy535GKEjH0INwMTcbl8MQ.roa (raw, json) Hash identifier: gESEO7zchJhW7wjHBaG+bO0k6phkupK3xEBqEwUYJYg= Subject key identifier: 16:A1:FF:68:EC:B9:DF:91:8A:12:31:F4:20:DC:0C:4D:C6:E5:F0:C4 Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c Certificate serial: 019C052C8B0F65683BD9FB119D6A64AA5B53 Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/FqH_aOy535GKEjH0INwMTcbl8MQ.roa Signing time: Wed 28 Jan 2026 15:15:31 +0000 ROA not before: Wed 28 Jan 2026 15:15:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21267 IP address blocks: 5.39.176.0/21 maxlen: 24 5.159.208.0/21 maxlen: 24 5.181.72.0/22 maxlen: 24 31.192.96.0/21 maxlen: 24 45.8.100.0/22 maxlen: 24 45.132.108.0/22 maxlen: 24 45.137.44.0/22 maxlen: 24 80.74.240.0/21 maxlen: 24 80.74.248.0/21 maxlen: 24 80.87.16.0/20 maxlen: 24 83.150.252.0/22 maxlen: 24 85.95.96.0/19 maxlen: 24 87.236.128.0/21 maxlen: 24 88.151.152.0/21 maxlen: 24 89.38.120.0/21 maxlen: 24 91.143.64.0/20 maxlen: 24 92.42.120.0/21 maxlen: 24 93.115.176.0/20 maxlen: 24 94.142.168.0/21 maxlen: 24 95.129.64.0/21 maxlen: 24 176.58.0.0/21 maxlen: 24 185.52.144.0/22 maxlen: 24 185.79.184.0/22 maxlen: 24 185.90.0.0/22 maxlen: 24 185.94.204.0/22 maxlen: 24 185.99.76.0/22 maxlen: 24 185.145.88.0/22 maxlen: 24 185.178.216.0/22 maxlen: 24 185.178.218.0/24 maxlen: 24 185.178.219.0/24 maxlen: 24 185.182.0.0/21 maxlen: 24 185.182.200.0/22 maxlen: 24 185.182.200.0/23 maxlen: 24 185.204.212.0/22 maxlen: 24 185.229.4.0/22 maxlen: 24 185.246.132.0/22 maxlen: 24 185.247.200.0/22 maxlen: 24 185.248.252.0/22 maxlen: 24 185.248.252.0/24 maxlen: 24 185.248.253.0/24 maxlen: 24 185.248.254.0/24 maxlen: 24 185.248.255.0/24 maxlen: 24 188.94.16.0/21 maxlen: 24 188.94.19.0/24 maxlen: 24 188.94.21.0/24 maxlen: 24 193.24.3.0/24 maxlen: 24 193.24.6.0/24 maxlen: 24 193.24.13.0/24 maxlen: 24 193.24.31.0/24 maxlen: 24 195.26.32.0/19 maxlen: 24 195.88.8.0/23 maxlen: 24 212.11.68.0/22 maxlen: 24 212.11.72.0/22 maxlen: 24 217.145.128.0/20 maxlen: 24 2a00:f1c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:2c:8b:0f:65:68:3b:d9:fb:11:9d:6a:64:aa:5b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66df7742890173927935206a28efbf48123e787c Validity Not Before: Jan 28 15:15:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16a1ff68ecb9df918a1231f420dc0c4dc6e5f0c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:93:6f:c9:a9:2e:c1:af:1a:9a:17:28:e0:54: 97:f8:7b:f1:75:0f:1f:2d:af:34:eb:d1:82:77:e3: 06:f7:95:b2:40:02:29:12:fb:ae:6c:67:c0:73:28: 98:41:5c:ac:1e:02:e6:81:12:aa:c3:17:98:d9:67: 37:b0:13:3c:c3:30:3f:a6:2f:0a:0e:7f:08:d2:19: da:d1:43:2d:97:b1:c5:14:ff:30:bc:03:53:a1:69: 14:34:8f:12:3a:10:6c:19:3d:72:8d:42:ef:ea:2d: 80:64:30:25:af:83:50:aa:86:d2:9f:b3:46:73:50: fe:cf:51:16:ea:b3:c6:18:ab:0b:f9:58:72:94:b6: de:10:d3:6b:ec:f9:64:f7:38:2e:c8:54:5a:84:e3: ee:ac:67:da:4c:c1:12:12:41:d7:96:61:94:98:9d: 50:88:29:87:cc:7b:2b:f0:55:4b:51:de:cf:38:e5: 73:fb:ac:71:0c:ec:90:cf:de:47:98:ef:58:a0:0e: f1:ef:05:96:e0:2b:4a:ad:15:17:07:97:2f:af:59: 8b:1d:ae:d6:79:11:bc:d7:75:14:b9:93:00:37:4c: 40:3e:92:a4:0a:15:d6:15:1b:20:8b:1f:86:11:03: 3b:37:d8:3b:b7:ed:0a:cf:61:20:42:38:7a:15:ab: bb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A1:FF:68:EC:B9:DF:91:8A:12:31:F4:20:DC:0C:4D:C6:E5:F0:C4 X509v3 Authority Key Identifier: keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/FqH_aOy535GKEjH0INwMTcbl8MQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.39.176.0/21 5.159.208.0/21 5.181.72.0/22 31.192.96.0/21 45.8.100.0/22 45.132.108.0/22 45.137.44.0/22 80.74.240.0/20 80.87.16.0/20 83.150.252.0/22 85.95.96.0/19 87.236.128.0/21 88.151.152.0/21 89.38.120.0/21 91.143.64.0/20 92.42.120.0/21 93.115.176.0/20 94.142.168.0/21 95.129.64.0/21 176.58.0.0/21 185.52.144.0/22 185.79.184.0/22 185.90.0.0/22 185.94.204.0/22 185.99.76.0/22 185.145.88.0/22 185.178.216.0/22 185.182.0.0/21 185.182.200.0/22 185.204.212.0/22 185.229.4.0/22 185.246.132.0/22 185.247.200.0/22 185.248.252.0/22 188.94.16.0/21 193.24.3.0/24 193.24.6.0/24 193.24.13.0/24 193.24.31.0/24 195.26.32.0/19 195.88.8.0/23 212.11.68.0-212.11.75.255 217.145.128.0/20 IPv6: 2a00:f1c0::/32 Signature Algorithm: sha256WithRSAEncryption 80:d5:82:b5:29:a9:13:f1:72:29:f5:ba:a4:a3:37:f6:df:88: db:56:26:f1:91:71:e1:9e:90:44:b4:63:03:8d:3c:cc:10:12: 11:f3:31:00:2a:ae:9a:a5:f7:78:9d:1a:71:87:99:5d:49:07: 3b:f5:37:af:50:46:47:b5:a4:57:c7:2a:fe:e4:6d:f5:50:25: 0a:02:5a:9b:77:9d:11:84:fd:4b:96:3f:a8:5c:43:5f:56:0a: 25:1d:1a:12:35:16:82:78:32:bf:e7:c8:9c:07:ae:07:6a:1f: ac:f2:e1:fb:73:cf:1e:9b:e3:fb:bb:57:3a:9f:37:18:d8:9a: e3:72:5e:d9:f9:b1:c2:8c:17:4f:79:f9:76:a2:ee:53:cc:5a: e3:3a:fe:10:c4:c7:64:56:fd:43:c0:4b:67:e9:5f:e3:1f:15: 9c:88:ff:e8:87:2e:a4:4a:07:54:52:79:09:ba:fc:10:24:b5: 6b:c0:e3:a3:79:ca:54:d1:39:b2:d5:72:3c:f7:b2:6e:ca:61: 22:46:2c:8c:47:fc:b3:21:62:ce:1c:d2:31:ff:b0:33:40:67: 9a:e7:0d:4a:82:3f:2c:39:ad:56:a2:13:62:15:39:bd:5d:20: 51:15:64:10:27:42:3c:7a:9c:96:a6:dd:a1:41:11:72:73:ee: 20:a3:02:f0 -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgISAZwFLIsPZWg72fsRnWpkqltTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZGY3NzQyODkwMTczOTI3OTM1MjA2YTI4ZWZiZjQ4MTIz ZTc4N2MwHhcNMjYwMTI4MTUxNTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmExZmY2OGVjYjlkZjkxOGExMjMxZjQyMGRjMGM0ZGM2ZTVmMGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5Nvyakuwa8amhco4FSX+HvxdQ8f La8069GCd+MG95WyQAIpEvuubGfAcyiYQVysHgLmgRKqwxeY2Wc3sBM8wzA/pi8K Dn8I0hna0UMtl7HFFP8wvANToWkUNI8SOhBsGT1yjULv6i2AZDAlr4NQqobSn7NG c1D+z1EW6rPGGKsL+VhylLbeENNr7Plk9zguyFRahOPurGfaTMESEkHXlmGUmJ1Q iCmHzHsr8FVLUd7POOVz+6xxDOyQz95HmO9YoA7x7wWW4CtKrRUXB5cvr1mLHa7W eRG813UUuZMAN0xAPpKkChXWFRsgix+GEQM7N9g7t+0Kz2EgQjh6Fau7rQIDAQAB o4IDJjCCAyIwHQYDVR0OBBYEFBah/2jsud+RihIx9CDcDE3G5fDEMB8GA1UdIwQY MBaAFGbfd0KJAXOSeTUgaijvv0gSPnh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYt MDk3ODdmMTUyYWRlLzEvRnFIX2FPeTUzNUdLRWpIMElOd01UY2JsOE1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYtMDk3ODdmMTUyYWRl LzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBOgYIKwYBBQUHAQcBAf8EggEpMIIBJTCCARIEAgABMIIB CgMEAwUnsAMEAwWf0AMEAgW1SAMEAx/AYAMEAi0IZAMEAi2EbAMEAi2JLAMEBFBK 8AMEBFBXEAMEAlOW/AMEBVVfYAMEA1fsgAMEA1iXmAMEA1kmeAMEBFuPQAMEA1wq eAMEBF1zsAMEA16OqAMEA1+BQAMEA7A6AAMEArk0kAMEArlPuAMEArlaAAMEArle zAMEArljTAMEArmRWAMEArmy2AMEA7m2AAMEArm2yAMEArnM1AMEArnlBAMEArn2 hAMEArn3yAMEArn4/AMEA7xeEAMEAMEYAwMEAMEYBgMEAMEYDQMEAMEYHwMEBcMa IAMEAcNYCDAMAwQC1AtEAwQC1AtIAwQE2ZGAMA0EAgACMAcDBQAqAPHAMA0GCSqG SIb3DQEBCwUAA4IBAQCA1YK1KakT8XIp9bqkozf234jbVibxkXHhnpBEtGMDjTzM EBIR8zEAKq6apfd4nRpxh5ldSQc79TevUEZHtaRXxyr+5G31UCUKAlqbd50RhP1L lj+oXENfVgolHRoSNRaCeDK/58icB64Hah+s8uH7c88em+P7u1c6nzcY2Jrjcl7Z +bHCjBdPefl2ou5TzFrjOv4QxMdkVv1DwEtn6V/jHxWciP/ohy6kSgdUUnkJuvwQ JLVrwOOjecpU0Tmy1XI897JuymEiRiyMR/yzIWLOHNIx/7AzQGea5w1Kgj8sOa1W ohNiFTm9XSBRFWQQJ0I8epyWpt2hQRFyc+4gowLw -----END CERTIFICATE-----Generated at Tue Feb 10 06:08:10 2026 by rpki-client