This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/11MYyJwjk4ExvhCkfcR-vwBBcCE.roa File: 11MYyJwjk4ExvhCkfcR-vwBBcCE.roa (raw, json) Hash identifier: JF3D3Hz3u7gkjcxpdZM2zK9ipXJnVa3PNMEtzJyW4EM= Subject key identifier: D7:53:18:C8:9C:23:93:81:31:BE:10:A4:7D:C4:7E:BF:00:41:70:21 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F8534B9F68643BD3C6B3AFF67938E9D Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/11MYyJwjk4ExvhCkfcR-vwBBcCE.roa Signing time: Fri 02 Jan 2026 16:23:14 +0000 ROA not before: Fri 02 Jan 2026 16:23:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35346 IP address blocks: 45.67.116.0/24 maxlen: 24 91.242.64.0/18 maxlen: 24 91.242.70.0/23 maxlen: 24 91.242.72.0/23 maxlen: 24 91.242.74.0/24 maxlen: 24 91.242.78.0/24 maxlen: 24 91.242.79.0/24 maxlen: 24 91.242.80.0/24 maxlen: 24 91.242.85.0/24 maxlen: 24 91.242.97.0/24 maxlen: 24 91.242.99.0/24 maxlen: 24 91.242.102.0/24 maxlen: 24 91.242.103.0/24 maxlen: 24 91.242.108.0/22 maxlen: 22 91.242.112.0/20 maxlen: 20 91.242.112.0/24 maxlen: 24 91.242.113.0/24 maxlen: 24 91.242.114.0/24 maxlen: 24 91.242.115.0/24 maxlen: 24 91.242.116.0/24 maxlen: 24 91.242.117.0/24 maxlen: 24 91.242.118.0/24 maxlen: 24 91.242.119.0/24 maxlen: 24 91.242.120.0/24 maxlen: 24 91.242.121.0/24 maxlen: 24 91.242.122.0/24 maxlen: 24 178.175.176.0/22 maxlen: 24 194.114.144.0/24 maxlen: 25 194.114.144.128/27 maxlen: 27 195.138.108.0/24 maxlen: 24 2a07:5540::/29 maxlen: 29 2a07:c040::/29 maxlen: 29 2a09:700::/29 maxlen: 29 2a09:15c0::/29 maxlen: 29 2a09:3ac0::/29 maxlen: 29 2a09:4440::/29 maxlen: 29 2a09:4c40::/29 maxlen: 29 2a09:63c0::/29 maxlen: 29 2a09:7640::/29 maxlen: 29 2a09:7b40::/29 maxlen: 29 2a09:7f00::/29 maxlen: 29 2a09:a480::/29 maxlen: 29 2a09:bdc0::/29 maxlen: 29 2a09:ca40::/29 maxlen: 29 2a09:e400::/29 maxlen: 29 2a09:f6c0::/29 maxlen: 29 2a09:f940::/29 maxlen: 29 2a09:fdc0::/29 maxlen: 29 2a0a:3700::/29 maxlen: 29 2a0a:3780::/29 maxlen: 29 2a0a:6000::/29 maxlen: 29 2a0a:ef00::/29 maxlen: 29 2a0b:280::/29 maxlen: 29 2a0b:5d00::/29 maxlen: 29 2a0c:380::/29 maxlen: 29 2a0c:3600::/32 maxlen: 32 2a0c:3780::/29 maxlen: 29 2a0c:57c0::/29 maxlen: 29 2a0c:ae00::/29 maxlen: 29 2a0d:1a00::/29 maxlen: 29 2a0d:dac0::/29 maxlen: 29 2a0d:fb00::/29 maxlen: 29 2a0e:f80::/29 maxlen: 29 2a0e:2080::/29 maxlen: 29 2a0e:2500::/29 maxlen: 29 2a0e:3380::/29 maxlen: 29 2a0e:3540::/29 maxlen: 29 2a0e:3c40::/29 maxlen: 29 2a0e:7880::/29 maxlen: 29 2a0e:b000::/29 maxlen: 29 2a0e:c3c0::/29 maxlen: 29 2a0e:c700::/29 maxlen: 29 2a0e:c800::/29 maxlen: 29 2a0e:d180::/29 maxlen: 29 2a0e:d880::/29 maxlen: 29 2a0e:e540::/29 maxlen: 29 2a0e:e8c0::/29 maxlen: 29 2a0e:e940::/29 maxlen: 29 2a0e:f540::/29 maxlen: 29 2a0f:740::/29 maxlen: 29 2a0f:1b40::/29 maxlen: 29 2a0f:3900::/29 maxlen: 29 2a0f:4840::/29 maxlen: 29 2a0f:6200::/29 maxlen: 29 2a0f:82c0::/29 maxlen: 29 2a0f:9380::/29 maxlen: 29 2a0f:b200::/29 maxlen: 29 2a0f:da00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:34:b9:f6:86:43:bd:3c:6b:3a:ff:67:93:8e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d75318c89c23938131be10a47dc47ebf00417021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e3:26:ce:70:04:ba:da:08:e2:2f:17:e9:28: cd:d7:4b:95:9c:d5:23:02:36:17:60:4f:1e:d2:3e: c3:59:34:a6:e1:48:e1:3b:eb:5a:41:a5:3e:14:97: e1:5d:f1:82:6e:c4:4a:72:f6:1a:b8:09:5e:be:08: b0:da:34:23:62:19:61:22:c7:d1:08:ae:b5:4e:4f: e2:f6:09:15:5b:5c:b8:56:02:68:7a:8d:d9:12:ce: 2f:43:16:f5:df:d5:5d:b0:f0:37:41:d8:46:dd:d8: 99:b4:fc:ea:c3:03:39:0c:ec:4c:a7:9a:4e:4b:34: 17:f2:97:c8:18:79:b9:41:37:3c:98:a0:2f:1d:31: 08:c8:05:c4:b3:21:ee:05:9f:68:62:53:bb:12:2e: 07:46:95:ea:c4:55:4b:76:f9:97:e1:de:3b:7a:61: 7a:3f:a0:3c:5f:d9:99:c8:c8:8d:70:77:75:04:9d: 1a:59:4d:ce:3f:30:6f:1b:56:c0:ad:c2:32:49:33: 19:9c:50:1f:5a:1f:bb:3d:d5:05:c0:ad:1b:89:85: b1:88:b6:87:d5:a2:0f:6e:2e:b8:1b:e7:69:bd:91: 84:9f:3b:76:9a:aa:f9:c0:b9:7c:af:74:13:88:12: 77:21:63:9d:12:05:5a:13:79:df:41:a8:9b:66:87: 76:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:53:18:C8:9C:23:93:81:31:BE:10:A4:7D:C4:7E:BF:00:41:70:21 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/11MYyJwjk4ExvhCkfcR-vwBBcCE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.116.0/24 91.242.64.0/18 178.175.176.0/22 194.114.144.0/24 195.138.108.0/24 IPv6: 2a07:5540::/29 2a07:c040::/29 2a09:700::/29 2a09:15c0::/29 2a09:3ac0::/29 2a09:4440::/29 2a09:4c40::/29 2a09:63c0::/29 2a09:7640::/29 2a09:7b40::/29 2a09:7f00::/29 2a09:a480::/29 2a09:bdc0::/29 2a09:ca40::/29 2a09:e400::/29 2a09:f6c0::/29 2a09:f940::/29 2a09:fdc0::/29 2a0a:3700::/29 2a0a:3780::/29 2a0a:6000::/29 2a0a:ef00::/29 2a0b:280::/29 2a0b:5d00::/29 2a0c:380::/29 2a0c:3600::/32 2a0c:3780::/29 2a0c:57c0::/29 2a0c:ae00::/29 2a0d:1a00::/29 2a0d:dac0::/29 2a0d:fb00::/29 2a0e:f80::/29 2a0e:2080::/29 2a0e:2500::/29 2a0e:3380::/29 2a0e:3540::/29 2a0e:3c40::/29 2a0e:7880::/29 2a0e:b000::/29 2a0e:c3c0::/29 2a0e:c700::/29 2a0e:c800::/29 2a0e:d180::/29 2a0e:d880::/29 2a0e:e540::/29 2a0e:e8c0::/29 2a0e:e940::/29 2a0e:f540::/29 2a0f:740::/29 2a0f:1b40::/29 2a0f:3900::/29 2a0f:4840::/29 2a0f:6200::/29 2a0f:82c0::/29 2a0f:9380::/29 2a0f:b200::/29 2a0f:da00::/29 Signature Algorithm: sha256WithRSAEncryption 11:9f:00:6a:7f:4f:c6:4a:b6:7c:f1:f2:ea:a0:4c:39:fd:ae: 57:9b:f3:34:6e:86:89:5b:08:9a:9e:e9:dc:58:54:6a:49:00: d3:d1:a8:7d:c6:f4:3c:1c:36:2a:a4:15:ca:50:71:5f:c9:c2: d2:e5:d4:9b:90:fe:0d:50:5a:6b:3b:a8:6a:cd:bd:f4:6e:6b: 71:13:39:fa:90:62:49:fe:c4:68:94:9d:a3:ff:10:a7:50:17: b6:a7:c3:19:bd:78:11:94:5a:66:82:79:b3:76:93:3b:ba:0c: 0f:a8:51:b9:ea:80:2a:0c:10:f9:a6:6d:8f:3f:6b:96:ea:be: 25:b1:69:5f:d1:d7:55:12:0a:56:57:9f:ce:60:f1:d0:f0:3c: 0e:d3:a9:77:27:94:ec:14:ca:c5:1a:bb:64:33:84:7b:68:a4: 8c:44:d6:04:9c:a6:d8:02:e9:87:2f:da:09:a6:fd:1d:51:c9: 20:61:92:c1:de:e1:49:a7:d2:6c:47:3d:8c:af:e4:34:03:ff: 36:33:d4:85:07:db:42:63:e8:ed:1a:b1:a7:0c:51:98:2b:de: c7:8a:10:8c:e9:44:ad:2e:25:43:d6:64:cc:8c:ef:c0:39:c5: a0:cc:c7:f5:aa:f9:cf:fe:1d:62:6b:f2:64:bc:31:43:52:7b: 44:77:45:d8 -----BEGIN CERTIFICATE----- MIIGvTCCBaWgAwIBAgISAZt/hTS59oZDvTxrOv9nk46dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzUzMThjODljMjM5MzgxMzFiZTEwYTQ3ZGM0N2ViZjAwNDE3MDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+MmznAEutoI4i8X6SjN10uVnNUj AjYXYE8e0j7DWTSm4UjhO+taQaU+FJfhXfGCbsRKcvYauAlevgiw2jQjYhlhIsfR CK61Tk/i9gkVW1y4VgJoeo3ZEs4vQxb139VdsPA3QdhG3diZtPzqwwM5DOxMp5pO SzQX8pfIGHm5QTc8mKAvHTEIyAXEsyHuBZ9oYlO7Ei4HRpXqxFVLdvmX4d47emF6 P6A8X9mZyMiNcHd1BJ0aWU3OPzBvG1bArcIySTMZnFAfWh+7PdUFwK0biYWxiLaH 1aIPbi64G+dpvZGEnzt2mqr5wLl8r3QTiBJ3IWOdEgVaE3nfQaibZod20QIDAQAB o4IDyTCCA8UwHQYDVR0OBBYEFNdTGMicI5OBMb4QpH3Efr8AQXAhMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvMTFNWXlKd2prNEV4dmhDa2ZjUi12d0JCY0NFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIB3QYIKwYBBQUHAQcBAf8EggHMMIIByDAkBAIAATAeAwQA LUN0AwQGW/JAAwQCsq+wAwQAwnKQAwQAw4psMIIBngQCAAIwggGWAwUDKgdVQAMF AyoHwEADBQMqCQcAAwUDKgkVwAMFAyoJOsADBQMqCURAAwUDKglMQAMFAyoJY8AD BQMqCXZAAwUDKgl7QAMFAyoJfwADBQMqCaSAAwUDKgm9wAMFAyoJykADBQMqCeQA AwUDKgn2wAMFAyoJ+UADBQMqCf3AAwUDKgo3AAMFAyoKN4ADBQMqCmAAAwUDKgrv AAMFAyoLAoADBQMqC10AAwUDKgwDgAMFACoMNgADBQMqDDeAAwUDKgxXwAMFAyoM rgADBQMqDRoAAwUDKg3awAMFAyoN+wADBQMqDg+AAwUDKg4ggAMFAyoOJQADBQMq DjOAAwUDKg41QAMFAyoOPEADBQMqDniAAwUDKg6wAAMFAyoOw8ADBQMqDscAAwUD Kg7IAAMFAyoO0YADBQMqDtiAAwUDKg7lQAMFAyoO6MADBQMqDulAAwUDKg71QAMF AyoPB0ADBQMqDxtAAwUDKg85AAMFAyoPSEADBQMqD2IAAwUDKg+CwAMFAyoPk4AD BQMqD7IAAwUDKg/aADANBgkqhkiG9w0BAQsFAAOCAQEAEZ8Aan9Pxkq2fPHy6qBM Of2uV5vzNG6GiVsImp7p3FhUakkA09Gofcb0PBw2KqQVylBxX8nC0uXUm5D+DVBa azuoas299G5rcRM5+pBiSf7EaJSdo/8Qp1AXtqfDGb14EZRaZoJ5s3aTO7oMD6hR ueqAKgwQ+aZtjz9rluq+JbFpX9HXVRIKVlefzmDx0PA8DtOpdyeU7BTKxRq7ZDOE e2ikjETWBJym2ALphy/aCab9HVHJIGGSwd7hSafSbEc9jK/kNAP/NjPUhQfbQmPo 7RqxpwxRmCvex4oQjOlErS4lQ9ZkzIzvwDnFoMzH9ar5z/4dYmvyZLwxQ1J7RHdF 2A== -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:52 2026 by rpki-client