This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/dHcfbZH7Z1zN39zAGSaPQDZCQeY.roa File: dHcfbZH7Z1zN39zAGSaPQDZCQeY.roa (raw, json) Hash identifier: cqmuHZPjL4XCoT6u5gjSCm4ZP/CSi/q+3ENIMNnmOs4= Subject key identifier: 74:77:1F:6D:91:FB:67:5C:CD:DF:DC:C0:19:26:8F:40:36:42:41:E6 Certificate issuer: /CN=b8fe6518b740ab14054be77489928bb9f7daf0ee Certificate serial: 019BDB1F5871CC608691AB81B5FCE30C567F Authority key identifier: B8:FE:65:18:B7:40:AB:14:05:4B:E7:74:89:92:8B:B9:F7:DA:F0:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uP5lGLdAqxQFS-d0iZKLuffa8O4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/dHcfbZH7Z1zN39zAGSaPQDZCQeY.roa Signing time: Tue 20 Jan 2026 11:17:03 +0000 ROA not before: Tue 20 Jan 2026 11:17:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29355 IP address blocks: 2.72.0.0/15 maxlen: 15 2.72.0.0/16 maxlen: 16 2.73.0.0/16 maxlen: 16 2.74.0.0/16 maxlen: 16 2.74.0.0/18 maxlen: 18 2.74.64.0/18 maxlen: 18 2.74.128.0/18 maxlen: 18 2.74.192.0/18 maxlen: 18 2.75.0.0/21 maxlen: 21 2.75.8.0/21 maxlen: 21 2.75.16.0/21 maxlen: 21 2.75.24.0/21 maxlen: 21 2.75.32.0/21 maxlen: 21 2.75.40.0/21 maxlen: 21 2.75.48.0/21 maxlen: 21 2.75.56.0/21 maxlen: 21 2.75.64.0/21 maxlen: 21 2.75.72.0/21 maxlen: 21 2.75.80.0/21 maxlen: 21 2.75.88.0/21 maxlen: 21 2.75.96.0/21 maxlen: 21 2.75.104.0/21 maxlen: 21 2.75.112.0/21 maxlen: 21 2.75.120.0/21 maxlen: 21 2.75.128.0/21 maxlen: 21 2.75.136.0/21 maxlen: 21 2.75.144.0/21 maxlen: 21 2.75.152.0/21 maxlen: 21 2.75.160.0/21 maxlen: 21 2.75.168.0/21 maxlen: 21 2.75.176.0/21 maxlen: 21 2.75.184.0/21 maxlen: 21 2.75.192.0/21 maxlen: 21 2.75.200.0/21 maxlen: 21 2.75.208.0/21 maxlen: 21 2.75.216.0/21 maxlen: 21 2.75.224.0/21 maxlen: 21 2.75.232.0/21 maxlen: 21 2.75.240.0/21 maxlen: 21 2.75.248.0/21 maxlen: 21 2.76.0.0/21 maxlen: 21 2.76.8.0/21 maxlen: 21 2.76.16.0/21 maxlen: 21 2.76.24.0/21 maxlen: 21 2.76.32.0/21 maxlen: 21 2.76.40.0/21 maxlen: 21 2.76.48.0/21 maxlen: 21 2.76.56.0/21 maxlen: 21 2.76.64.0/21 maxlen: 21 2.76.72.0/21 maxlen: 21 2.76.80.0/21 maxlen: 21 2.76.88.0/21 maxlen: 21 2.76.96.0/21 maxlen: 21 2.76.104.0/21 maxlen: 21 2.76.112.0/21 maxlen: 21 2.76.120.0/21 maxlen: 21 2.76.128.0/21 maxlen: 21 2.76.136.0/21 maxlen: 21 2.76.144.0/21 maxlen: 21 2.76.152.0/21 maxlen: 21 2.76.160.0/21 maxlen: 21 2.76.168.0/21 maxlen: 21 2.76.176.0/21 maxlen: 21 2.76.184.0/21 maxlen: 21 2.76.192.0/21 maxlen: 21 2.76.200.0/21 maxlen: 21 2.76.208.0/21 maxlen: 21 2.76.216.0/21 maxlen: 21 2.76.224.0/21 maxlen: 21 2.76.232.0/21 maxlen: 21 2.76.240.0/21 maxlen: 21 2.76.248.0/21 maxlen: 21 2.78.32.0/21 maxlen: 21 2.78.34.0/24 maxlen: 24 2.78.40.0/24 maxlen: 24 2.78.41.0/24 maxlen: 24 2.78.43.0/24 maxlen: 24 2.78.44.0/24 maxlen: 24 2.78.45.0/24 maxlen: 24 2.78.47.0/24 maxlen: 24 2.78.48.0/20 maxlen: 20 2.78.56.0/23 maxlen: 23 2.78.58.0/24 maxlen: 24 2.78.59.0/24 maxlen: 24 2.78.60.0/23 maxlen: 23 2.78.128.0/21 maxlen: 21 2.78.136.0/21 maxlen: 21 2.78.144.0/21 maxlen: 21 2.78.152.0/21 maxlen: 21 2.78.160.0/21 maxlen: 21 2.78.168.0/21 maxlen: 21 2.78.176.0/21 maxlen: 21 2.78.184.0/21 maxlen: 21 2.78.192.0/21 maxlen: 21 2.78.200.0/21 maxlen: 21 2.78.208.0/21 maxlen: 21 2.78.216.0/21 maxlen: 21 2.78.224.0/21 maxlen: 21 2.78.232.0/21 maxlen: 21 2.78.240.0/21 maxlen: 21 2.78.248.0/21 maxlen: 21 2.79.0.0/21 maxlen: 21 2.79.8.0/21 maxlen: 21 2.79.16.0/21 maxlen: 21 2.79.24.0/21 maxlen: 21 2.79.32.0/21 maxlen: 21 2.79.40.0/21 maxlen: 21 2.79.48.0/21 maxlen: 21 2.79.56.0/21 maxlen: 21 2.79.64.0/21 maxlen: 21 2.79.72.0/21 maxlen: 21 2.79.80.0/21 maxlen: 21 2.79.88.0/21 maxlen: 21 2.79.96.0/21 maxlen: 21 2.79.104.0/21 maxlen: 21 2.79.112.0/21 maxlen: 21 2.79.120.0/21 maxlen: 21 2.79.128.0/21 maxlen: 21 2.79.136.0/21 maxlen: 21 2.79.144.0/21 maxlen: 21 2.79.152.0/21 maxlen: 21 2.79.160.0/21 maxlen: 21 2.79.168.0/21 maxlen: 21 2.79.176.0/21 maxlen: 21 2.79.184.0/21 maxlen: 21 2.79.192.0/21 maxlen: 21 2.79.200.0/21 maxlen: 21 2.79.208.0/21 maxlen: 21 2.79.216.0/21 maxlen: 21 2.79.224.0/21 maxlen: 21 2.79.232.0/21 maxlen: 21 2.79.240.0/21 maxlen: 21 2.79.248.0/21 maxlen: 21 149.3.192.0/21 maxlen: 21 149.3.200.0/21 maxlen: 21 149.3.208.0/21 maxlen: 21 149.3.216.0/21 maxlen: 21 149.3.224.0/21 maxlen: 21 149.3.232.0/21 maxlen: 21 149.27.0.0/21 maxlen: 21 149.27.8.0/21 maxlen: 21 149.27.16.0/21 maxlen: 21 149.27.24.0/21 maxlen: 21 149.27.32.0/21 maxlen: 21 149.27.40.0/21 maxlen: 21 149.27.48.0/21 maxlen: 21 149.27.56.0/21 maxlen: 21 149.27.64.0/21 maxlen: 21 149.27.72.0/21 maxlen: 21 149.27.80.0/21 maxlen: 21 149.27.88.0/21 maxlen: 21 149.27.96.0/21 maxlen: 21 149.27.104.0/21 maxlen: 21 149.27.112.0/21 maxlen: 21 149.27.120.0/21 maxlen: 21 149.27.128.0/21 maxlen: 21 149.27.136.0/21 maxlen: 21 149.27.144.0/21 maxlen: 21 149.27.152.0/21 maxlen: 21 149.27.160.0/21 maxlen: 21 149.27.168.0/21 maxlen: 21 149.27.176.0/21 maxlen: 21 149.27.184.0/21 maxlen: 21 149.27.192.0/21 maxlen: 21 149.27.200.0/21 maxlen: 21 149.27.208.0/21 maxlen: 21 149.27.216.0/21 maxlen: 21 149.27.224.0/21 maxlen: 21 149.27.232.0/21 maxlen: 21 149.27.240.0/21 maxlen: 21 149.27.248.0/21 maxlen: 21 164.0.0.0/17 maxlen: 17 164.0.128.0/17 maxlen: 17 164.40.0.0/21 maxlen: 21 164.40.8.0/21 maxlen: 21 164.40.16.0/21 maxlen: 21 164.40.24.0/21 maxlen: 21 164.40.32.0/21 maxlen: 21 164.40.40.0/21 maxlen: 21 164.40.48.0/21 maxlen: 21 164.40.56.0/21 maxlen: 21 164.40.64.0/21 maxlen: 21 164.40.72.0/21 maxlen: 21 164.40.80.0/21 maxlen: 21 164.40.88.0/21 maxlen: 21 164.40.96.0/21 maxlen: 21 164.40.104.0/21 maxlen: 21 164.40.112.0/21 maxlen: 21 164.40.120.0/21 maxlen: 21 185.2.224.0/22 maxlen: 22 185.2.224.0/23 maxlen: 23 185.2.224.0/24 maxlen: 24 185.2.225.0/24 maxlen: 24 185.2.226.0/23 maxlen: 23 195.47.255.0/24 maxlen: 24 2a02:50c0::/29 maxlen: 29 2a02:50c0::/32 maxlen: 32 2a02:50c0::/36 maxlen: 36 2a02:50c0:d0::/44 maxlen: 44 2a02:50c0:5000::/36 maxlen: 36 2a02:50c0:6000::/36 maxlen: 36 2a02:50c0:c000::/36 maxlen: 36 2a02:50c0:d000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.mft rsync://rpki.ripe.net/repository/DEFAULT/uP5lGLdAqxQFS-d0iZKLuffa8O4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:1f:58:71:cc:60:86:91:ab:81:b5:fc:e3:0c:56:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8fe6518b740ab14054be77489928bb9f7daf0ee Validity Not Before: Jan 20 11:17:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74771f6d91fb675ccddfdcc019268f40364241e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3f:ba:44:18:24:68:00:84:f7:50:8a:61:24: 0d:fb:2a:20:78:c6:fd:9a:ea:e1:c4:fc:4f:90:14: 8f:56:de:c7:e0:b5:1c:f6:b0:a2:44:1e:64:f3:ed: 40:8a:5d:09:ab:02:cc:a4:ea:ae:31:e9:59:0d:b8: 37:45:c2:c7:af:4e:86:b2:b0:8b:af:74:ab:9f:a8: 36:0a:d9:c9:79:00:27:2e:98:34:6d:47:74:d8:a4: 73:99:1f:e4:f1:eb:4e:e3:b7:c1:c6:54:32:cf:ea: a2:2f:30:ed:28:10:47:25:be:4c:14:bc:f1:03:c7: 57:b0:cd:db:a3:6b:08:4b:56:e6:7a:e4:c6:e3:ef: 74:25:ac:92:77:a7:f4:58:14:11:ce:9b:13:9b:83: 9f:df:ca:33:5a:f4:04:c9:e3:12:2c:09:0c:e5:e0: ab:70:f3:9c:38:4d:7e:5d:78:1f:c0:46:fd:5b:d1: 97:a0:ac:86:b9:af:ee:59:e0:89:96:2b:6e:f3:9c: 90:27:44:74:23:29:9d:21:cc:14:63:59:69:89:71: 26:6c:60:6e:5f:cf:e4:a0:e4:f4:68:56:d9:d5:b6: 64:39:15:88:4d:2c:24:1b:0b:e5:c0:cc:8d:be:38: a7:ac:b4:ba:da:bd:b3:a2:fc:51:33:e8:23:d1:52: ba:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:77:1F:6D:91:FB:67:5C:CD:DF:DC:C0:19:26:8F:40:36:42:41:E6 X509v3 Authority Key Identifier: keyid:B8:FE:65:18:B7:40:AB:14:05:4B:E7:74:89:92:8B:B9:F7:DA:F0:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uP5lGLdAqxQFS-d0iZKLuffa8O4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/dHcfbZH7Z1zN39zAGSaPQDZCQeY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.72.0.0-2.76.255.255 2.78.32.0-2.78.41.255 2.78.43.0-2.78.45.255 2.78.47.0-2.78.63.255 2.78.128.0-2.79.255.255 149.3.192.0-149.3.239.255 149.27.0.0/16 164.0.0.0/16 164.40.0.0/17 185.2.224.0/22 195.47.255.0/24 IPv6: 2a02:50c0::/29 Signature Algorithm: sha256WithRSAEncryption aa:0c:15:b0:21:97:15:2f:d7:49:ff:c9:36:b1:74:a6:8d:7d: 25:4d:c8:3d:39:a6:59:99:8c:29:46:57:38:f9:64:16:20:42: 77:2c:6c:b6:3f:31:80:21:e1:a7:f0:b3:7e:8e:c9:2f:bd:44: ae:78:c4:8c:e8:d1:e8:47:50:6d:97:19:3b:ba:06:42:83:9d: 22:88:4a:5b:8e:22:3e:9d:9d:fd:c8:c2:0f:de:b9:21:b5:2e: 50:38:86:41:4c:41:e3:07:f4:5c:b1:4f:30:e8:19:51:41:a7: bb:77:cb:6a:51:1f:c7:ad:94:ba:74:19:bf:19:55:c0:99:cc: 27:44:90:c3:db:1c:f8:63:93:31:7d:9b:07:83:02:ab:47:19: 74:a1:0a:e6:15:19:c6:77:6b:f6:6f:0d:4b:41:3d:93:46:f8: 27:0b:0b:0f:f4:ad:43:46:99:ac:2a:5b:42:10:de:fa:f0:80: a4:08:0d:3a:42:e5:3d:78:53:8e:b0:f7:41:94:05:cc:7b:ba: de:6a:f3:50:29:4c:c4:07:56:2c:6e:a3:a6:98:9c:b9:43:70: 5e:53:8c:94:dd:3b:ba:e0:44:63:43:0c:a6:14:5b:25:f6:63: c0:ff:dc:c7:b6:e1:a5:71:da:f4:7a:3e:05:80:d7:42:53:48: 5b:bb:b4:b6 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgISAZvbH1hxzGCGkauBtfzjDFZ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZmU2NTE4Yjc0MGFiMTQwNTRiZTc3NDg5OTI4YmI5Zjdk YWYwZWUwHhcNMjYwMTIwMTExNzAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDc3MWY2ZDkxZmI2NzVjY2RkZmRjYzAxOTI2OGY0MDM2NDI0MWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD+6RBgkaACE91CKYSQN+yogeMb9 murhxPxPkBSPVt7H4LUc9rCiRB5k8+1Ail0JqwLMpOquMelZDbg3RcLHr06GsrCL r3Srn6g2CtnJeQAnLpg0bUd02KRzmR/k8etO47fBxlQyz+qiLzDtKBBHJb5MFLzx A8dXsM3bo2sIS1bmeuTG4+90JaySd6f0WBQRzpsTm4Of38ozWvQEyeMSLAkM5eCr cPOcOE1+XXgfwEb9W9GXoKyGua/uWeCJlitu85yQJ0R0IymdIcwUY1lpiXEmbGBu X8/koOT0aFbZ1bZkORWITSwkGwvlwMyNvjinrLS62r2zovxRM+gj0VK6ywIDAQAB o4ICgjCCAn4wHQYDVR0OBBYEFHR3H22R+2dczd/cwBkmj0A2QkHmMB8GA1UdIwQY MBaAFLj+ZRi3QKsUBUvndImSi7n32vDuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVA1bEdMZEFxeFFGUy1kMGlaS0x1ZmZhOE80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84OTY5ZTctY2E0Zi00ZTMxLWFmYjIt NDczODNkYzhjZDBlLzEvZEhjZmJaSDdaMXpOMzl6QUdTYVBRRFpDUWVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi84OTY5ZTctY2E0Zi00ZTMxLWFmYjItNDczODNkYzhjZDBl LzEvdVA1bEdMZEFxeFFGUy1kMGlaS0x1ZmZhOE80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGXBggrBgEFBQcBBwEB/wSBhzCBhDBzBAIAATBtMAoDAwMC SAMDAAJMMAwDBAUCTiADBAECTigwDAMEAAJOKwMEAQJOLDAMAwQAAk4vAwQGAk4A MAsDBAcCToADAwQCQDAMAwQGlQPAAwQElQPgAwMAlRsDAwCkAAMEB6QoAAMEArkC 4AMEAMMv/zANBAIAAjAHAwUDKgJQwDANBgkqhkiG9w0BAQsFAAOCAQEAqgwVsCGX FS/XSf/JNrF0po19JU3IPTmmWZmMKUZXOPlkFiBCdyxstj8xgCHhp/Czfo7JL71E rnjEjOjR6EdQbZcZO7oGQoOdIohKW44iPp2d/cjCD965IbUuUDiGQUxB4wf0XLFP MOgZUUGnu3fLalEfx62UunQZvxlVwJnMJ0SQw9sc+GOTMX2bB4MCq0cZdKEK5hUZ xndr9m8NS0E9k0b4JwsLD/StQ0aZrCpbQhDe+vCApAgNOkLlPXhTjrD3QZQFzHu6 3mrzUClMxAdWLG6jppicuUNwXlOMlN07uuBEY0MMphRbJfZjwP/cx7bhpXHa9Ho+ BYDXQlNIW7u0tg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:45:06 2026 by rpki-client