This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/fFh9oPWuoY9xNVWPc33QpxmQQBs.roa File: fFh9oPWuoY9xNVWPc33QpxmQQBs.roa (raw, json) Hash identifier: NN0Y+ZnK1CN7424BEea0XmqIfhp3h0YYpe79x2B3cks= Subject key identifier: 7C:58:7D:A0:F5:AE:A1:8F:71:35:55:8F:73:7D:D0:A7:19:90:40:1B Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B3602427473A5D91A36565720C7C7EC Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/fFh9oPWuoY9xNVWPc33QpxmQQBs.roa Signing time: Thu 01 Jan 2026 20:18:15 +0000 ROA not before: Thu 01 Jan 2026 20:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49505 IP address blocks: 2.59.49.0/24 maxlen: 24 31.216.60.0/24 maxlen: 24 37.221.82.0/23 maxlen: 23 45.10.64.0/22 maxlen: 22 45.10.80.0/22 maxlen: 22 45.11.124.0/22 maxlen: 22 45.11.196.0/24 maxlen: 24 45.15.238.0/24 maxlen: 24 45.81.76.0/22 maxlen: 22 45.93.80.0/24 maxlen: 24 45.129.204.0/22 maxlen: 22 45.132.20.0/22 maxlen: 22 45.132.38.0/24 maxlen: 24 45.132.128.0/24 maxlen: 24 45.132.129.0/24 maxlen: 24 45.133.224.0/22 maxlen: 22 45.134.52.0/22 maxlen: 22 45.135.28.0/22 maxlen: 22 45.138.213.0/24 maxlen: 24 45.138.214.0/24 maxlen: 24 45.139.52.0/24 maxlen: 24 45.139.53.0/24 maxlen: 24 45.139.55.0/24 maxlen: 24 45.139.108.0/22 maxlen: 22 45.139.168.0/22 maxlen: 22 45.140.64.0/24 maxlen: 24 45.140.72.0/22 maxlen: 22 45.143.244.0/22 maxlen: 22 45.144.168.0/22 maxlen: 22 45.146.24.0/24 maxlen: 24 45.146.25.0/24 maxlen: 24 45.146.27.0/24 maxlen: 24 45.147.12.0/24 maxlen: 24 45.147.13.0/24 maxlen: 24 45.147.14.0/24 maxlen: 24 45.147.15.0/24 maxlen: 24 45.149.129.0/24 maxlen: 24 45.152.116.0/24 maxlen: 24 45.152.117.0/24 maxlen: 24 45.159.84.0/24 maxlen: 24 45.159.87.0/24 maxlen: 24 62.233.34.0/24 maxlen: 24 62.233.48.0/24 maxlen: 24 84.246.81.0/24 maxlen: 24 84.246.110.0/24 maxlen: 24 87.236.150.0/24 maxlen: 24 89.107.12.0/24 maxlen: 24 91.199.189.0/24 maxlen: 24 91.206.68.0/24 maxlen: 24 91.236.121.0/24 maxlen: 24 93.157.111.0/24 maxlen: 24 93.190.120.0/24 maxlen: 24 93.190.121.0/24 maxlen: 24 94.124.75.0/24 maxlen: 24 94.124.77.0/24 maxlen: 24 176.116.8.0/24 maxlen: 24 176.116.12.0/24 maxlen: 24 176.116.24.0/24 maxlen: 24 176.116.28.0/24 maxlen: 24 176.222.56.0/24 maxlen: 24 176.222.57.0/24 maxlen: 24 176.222.59.0/24 maxlen: 24 185.188.41.0/24 maxlen: 24 192.109.91.0/24 maxlen: 24 192.109.100.0/24 maxlen: 24 193.5.28.0/24 maxlen: 24 193.31.4.0/24 maxlen: 24 193.31.5.0/24 maxlen: 24 193.58.170.0/24 maxlen: 24 193.107.22.0/24 maxlen: 24 193.187.97.0/24 maxlen: 24 194.104.228.0/24 maxlen: 24 195.216.132.0/22 maxlen: 22 195.225.99.0/24 maxlen: 24 213.166.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:02:42:74:73:a5:d9:1a:36:56:57:20:c7:c7:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c587da0f5aea18f7135558f737dd0a71990401b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b4:db:a4:db:09:ce:f8:d7:61:e0:54:c1:64: c8:56:8a:f8:77:37:1f:f9:2d:d2:e0:90:cc:b6:81: 1d:05:6c:d9:11:0d:6f:99:cd:b9:5b:83:67:88:c4: 8a:a8:80:b8:3e:ba:18:83:02:36:c0:5b:81:e1:59: 64:cf:68:95:6f:d5:2c:f9:e0:2d:a5:32:7b:0e:0a: 7a:ce:ed:ee:cb:07:98:cb:b1:b2:3b:05:ed:72:d9: 03:fc:ce:dd:64:04:0c:ce:a3:60:fe:9d:a1:cb:a9: 88:43:1b:3b:a0:06:d5:bc:76:5f:f6:d3:bf:1c:46: a9:a9:6a:58:c7:e7:74:9e:41:31:a5:d2:f7:c4:77: af:02:fa:a6:66:d9:a4:87:e3:a7:db:23:1c:70:43: 9e:d0:8e:ac:64:ef:05:04:57:61:ee:00:bb:42:4a: 80:5f:5e:0d:7c:23:08:92:87:58:4f:c9:55:5e:bd: c4:9b:dc:81:75:46:2a:51:c7:dc:57:50:fc:6f:22: 04:4a:c1:86:ab:d0:4d:6c:c6:50:10:83:bc:20:a9: 9e:c9:b8:7f:77:e3:17:32:16:d8:51:e8:5f:40:8d: 66:0f:21:dd:c0:64:4c:04:ab:98:92:d9:93:9e:2d: 58:98:d6:28:9e:0f:6c:db:a7:60:67:9c:3f:1c:50: a1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:58:7D:A0:F5:AE:A1:8F:71:35:55:8F:73:7D:D0:A7:19:90:40:1B X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/fFh9oPWuoY9xNVWPc33QpxmQQBs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.49.0/24 31.216.60.0/24 37.221.82.0/23 45.10.64.0/22 45.10.80.0/22 45.11.124.0/22 45.11.196.0/24 45.15.238.0/24 45.81.76.0/22 45.93.80.0/24 45.129.204.0/22 45.132.20.0/22 45.132.38.0/24 45.132.128.0/23 45.133.224.0/22 45.134.52.0/22 45.135.28.0/22 45.138.213.0-45.138.214.255 45.139.52.0/23 45.139.55.0/24 45.139.108.0/22 45.139.168.0/22 45.140.64.0/24 45.140.72.0/22 45.143.244.0/22 45.144.168.0/22 45.146.24.0/23 45.146.27.0/24 45.147.12.0/22 45.149.129.0/24 45.152.116.0/23 45.159.84.0/24 45.159.87.0/24 62.233.34.0/24 62.233.48.0/24 84.246.81.0/24 84.246.110.0/24 87.236.150.0/24 89.107.12.0/24 91.199.189.0/24 91.206.68.0/24 91.236.121.0/24 93.157.111.0/24 93.190.120.0/23 94.124.75.0/24 94.124.77.0/24 176.116.8.0/24 176.116.12.0/24 176.116.24.0/24 176.116.28.0/24 176.222.56.0/23 176.222.59.0/24 185.188.41.0/24 192.109.91.0/24 192.109.100.0/24 193.5.28.0/24 193.31.4.0/23 193.58.170.0/24 193.107.22.0/24 193.187.97.0/24 194.104.228.0/24 195.216.132.0/22 195.225.99.0/24 213.166.64.0/22 Signature Algorithm: sha256WithRSAEncryption 05:94:e2:21:93:de:a4:8d:8e:a5:0b:9b:ed:66:05:e0:ee:31: 4a:0d:ac:17:12:2f:33:05:9f:f6:f4:82:50:af:e1:4d:87:ca: 7a:10:e2:f3:2a:d6:0b:1f:ed:5d:62:f9:16:c7:e0:8e:94:6a: 7b:e2:21:c5:f6:e1:ea:86:ec:93:a6:60:af:86:7f:03:ca:05: 15:25:66:6e:f5:ad:b3:e2:b0:c7:ab:4f:cd:b1:0d:b4:2f:e2: 19:cb:55:2a:87:74:f0:87:1d:e8:64:31:ef:b4:17:76:2b:ff: a5:7c:73:83:7c:35:4e:37:4e:03:21:26:40:e6:30:09:e0:85: 07:23:95:07:fc:e9:f7:bb:39:dd:49:70:8c:a9:aa:d6:08:4d: 1a:d4:a9:f5:4f:f9:a1:a1:2e:7d:d6:32:8e:e2:93:cc:76:9f: e8:8f:e9:45:90:06:cd:46:b9:d8:6b:24:a2:a6:31:fc:fc:d7: d5:ca:20:6f:1d:b8:af:25:a6:55:9d:8d:2a:04:9a:07:d7:b0: 40:92:51:3f:35:6d:0a:33:35:8a:d0:8f:d2:62:e1:b3:f9:76: 18:d6:ac:3b:c0:c6:af:2a:33:ed:de:3f:b2:e4:11:90:8d:89: 22:99:04:13:3f:9a:25:20:c3:56:57:f0:06:1b:30:e1:f3:16: 77:6e:49:fc -----BEGIN CERTIFICATE----- MIIGiTCCBXGgAwIBAgISAZt7NgJCdHOl2Ro2Vlcgx8fsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzU4N2RhMGY1YWVhMThmNzEzNTU1OGY3MzdkZDBhNzE5OTA0MDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrTbpNsJzvjXYeBUwWTIVor4dzcf +S3S4JDMtoEdBWzZEQ1vmc25W4NniMSKqIC4ProYgwI2wFuB4Vlkz2iVb9Us+eAt pTJ7Dgp6zu3uyweYy7GyOwXtctkD/M7dZAQMzqNg/p2hy6mIQxs7oAbVvHZf9tO/ HEapqWpYx+d0nkExpdL3xHevAvqmZtmkh+On2yMccEOe0I6sZO8FBFdh7gC7QkqA X14NfCMIkodYT8lVXr3Em9yBdUYqUcfcV1D8byIESsGGq9BNbMZQEIO8IKmeybh/ d+MXMhbYUehfQI1mDyHdwGRMBKuYktmTni1YmNYong9s26dgZ5w/HFChSQIDAQAB o4IDlTCCA5EwHQYDVR0OBBYEFHxYfaD1rqGPcTVVj3N90KcZkEAbMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvZkZoOW9QV3VvWTl4TlZXUGMzM1FweG1RUUJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBqQYIKwYBBQUHAQcBAf8EggGYMIIBlDCCAZAEAgABMIIB iAMEAAI7MQMEAB/YPAMEASXdUgMEAi0KQAMEAi0KUAMEAi0LfAMEAC0LxAMEAC0P 7gMEAi1RTAMEAC1dUAMEAi2BzAMEAi2EFAMEAC2EJgMEAS2EgAMEAi2F4AMEAi2G NAMEAi2HHDAMAwQALYrVAwQALYrWAwQBLYs0AwQALYs3AwQCLYtsAwQCLYuoAwQA LYxAAwQCLYxIAwQCLY/0AwQCLZCoAwQBLZIYAwQALZIbAwQCLZMMAwQALZWBAwQB LZh0AwQALZ9UAwQALZ9XAwQAPukiAwQAPukwAwQAVPZRAwQAVPZuAwQAV+yWAwQA WWsMAwQAW8e9AwQAW85EAwQAW+x5AwQAXZ1vAwQBXb54AwQAXnxLAwQAXnxNAwQA sHQIAwQAsHQMAwQAsHQYAwQAsHQcAwQBsN44AwQAsN47AwQAubwpAwQAwG1bAwQA wG1kAwQAwQUcAwQBwR8EAwQAwTqqAwQAwWsWAwQAwbthAwQAwmjkAwQCw9iEAwQA w+FjAwQC1aZAMA0GCSqGSIb3DQEBCwUAA4IBAQAFlOIhk96kjY6lC5vtZgXg7jFK DawXEi8zBZ/29IJQr+FNh8p6EOLzKtYLH+1dYvkWx+COlGp74iHF9uHqhuyTpmCv hn8DygUVJWZu9a2z4rDHq0/NsQ20L+IZy1Uqh3Twhx3oZDHvtBd2K/+lfHODfDVO N04DISZA5jAJ4IUHI5UH/On3uzndSXCMqarWCE0a1Kn1T/mhoS591jKO4pPMdp/o j+lFkAbNRrnYaySipjH8/NfVyiBvHbivJaZVnY0qBJoH17BAklE/NW0KMzWK0I/S YuGz+XYY1qw7wMavKjPt3j+y5BGQjYkimQQTP5olIMNWV/AGGzDh8xZ3bkn8 -----END CERTIFICATE-----Generated at Thu Jan 15 13:18:28 2026 by rpki-client