This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/cl4xGAEEhr0atOkS-M875z9YeH4.roa File: cl4xGAEEhr0atOkS-M875z9YeH4.roa (raw, json) Hash identifier: KmImRnh0KgE+zH9nTs3NJvmrEfwkRWLYqjzje40ykHY= Subject key identifier: 72:5E:31:18:01:04:86:BD:1A:B4:E9:12:F8:CF:3B:E7:3F:58:78:7E Certificate issuer: /CN=845c2379efed10056cf865d52c32e1e1eba8c140 Certificate serial: 019B7FF27CC2DC55FF87539F8EB03781B6FE Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/cl4xGAEEhr0atOkS-M875z9YeH4.roa Signing time: Fri 02 Jan 2026 18:22:36 +0000 ROA not before: Fri 02 Jan 2026 18:22:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 62.77.196.0/22 maxlen: 24 62.77.240.0/23 maxlen: 24 62.77.248.0/21 maxlen: 24 62.165.192.0/18 maxlen: 24 77.234.64.0/19 maxlen: 24 78.131.0.0/17 maxlen: 24 79.120.160.0/21 maxlen: 24 79.120.170.0/23 maxlen: 24 79.120.172.0/22 maxlen: 24 79.120.248.0/23 maxlen: 24 79.120.252.0/22 maxlen: 24 80.95.64.0/19 maxlen: 24 81.0.82.0/23 maxlen: 24 81.0.84.0/22 maxlen: 24 81.0.90.0/23 maxlen: 24 81.0.92.0/22 maxlen: 24 81.0.98.0/23 maxlen: 24 81.0.108.0/23 maxlen: 24 81.0.122.0/23 maxlen: 24 81.0.126.0/23 maxlen: 24 81.17.176.0/20 maxlen: 24 82.131.128.0/19 maxlen: 24 82.131.182.0/23 maxlen: 24 82.131.184.0/21 maxlen: 24 82.131.196.0/23 maxlen: 24 82.131.198.0/24 maxlen: 24 82.131.200.0/21 maxlen: 24 82.131.216.0/21 maxlen: 24 82.131.224.0/19 maxlen: 24 82.144.164.0/22 maxlen: 24 82.144.172.0/22 maxlen: 24 82.144.176.0/23 maxlen: 24 82.144.188.0/23 maxlen: 24 84.21.180.0/22 maxlen: 24 84.236.0.0/17 maxlen: 24 85.66.0.0/15 maxlen: 24 85.238.64.0/19 maxlen: 24 87.97.0.0/18 maxlen: 24 87.97.80.0/20 maxlen: 24 87.97.96.0/19 maxlen: 24 89.147.64.0/20 maxlen: 24 89.147.96.0/22 maxlen: 24 89.147.112.0/21 maxlen: 24 89.148.64.0/18 maxlen: 24 89.186.96.0/23 maxlen: 24 89.186.102.0/23 maxlen: 24 89.186.106.0/23 maxlen: 24 89.186.108.0/22 maxlen: 24 89.186.112.0/22 maxlen: 24 89.186.118.0/23 maxlen: 24 89.186.120.0/21 maxlen: 24 91.82.0.0/21 maxlen: 24 91.82.24.0/21 maxlen: 24 91.82.32.0/21 maxlen: 24 91.82.56.0/23 maxlen: 24 91.82.60.0/23 maxlen: 24 91.82.64.0/21 maxlen: 24 91.82.82.0/23 maxlen: 24 91.82.130.0/23 maxlen: 24 91.82.132.0/22 maxlen: 24 91.82.136.0/21 maxlen: 24 91.82.144.0/22 maxlen: 24 91.82.160.0/21 maxlen: 24 91.82.168.0/22 maxlen: 24 91.82.172.0/23 maxlen: 24 91.82.176.0/21 maxlen: 24 91.82.188.0/22 maxlen: 24 91.82.210.0/23 maxlen: 24 91.82.212.0/22 maxlen: 24 91.82.228.0/22 maxlen: 24 91.82.232.0/22 maxlen: 24 91.82.240.0/22 maxlen: 24 91.82.250.0/23 maxlen: 24 91.83.0.0/19 maxlen: 24 91.83.32.0/21 maxlen: 24 91.83.52.0/22 maxlen: 24 91.83.94.0/23 maxlen: 24 91.83.102.0/23 maxlen: 24 91.83.110.0/23 maxlen: 24 91.83.120.0/23 maxlen: 24 91.83.136.0/21 maxlen: 24 91.83.144.0/23 maxlen: 24 91.83.154.0/23 maxlen: 24 91.83.180.0/22 maxlen: 24 91.83.184.0/21 maxlen: 24 91.83.192.0/20 maxlen: 24 91.83.252.0/23 maxlen: 24 92.52.224.0/19 maxlen: 24 92.245.64.0/19 maxlen: 24 92.249.128.0/17 maxlen: 24 94.21.0.0/16 maxlen: 24 94.247.88.0/21 maxlen: 24 176.241.0.0/18 maxlen: 24 178.164.128.0/17 maxlen: 24 185.29.80.0/22 maxlen: 24 185.62.128.0/22 maxlen: 24 188.142.128.0/19 maxlen: 24 188.143.0.0/17 maxlen: 24 193.110.56.0/21 maxlen: 24 193.226.192.0/23 maxlen: 24 193.226.212.0/22 maxlen: 24 193.226.226.0/23 maxlen: 24 193.226.232.0/23 maxlen: 24 193.226.238.0/23 maxlen: 24 193.226.240.0/23 maxlen: 24 193.226.244.0/22 maxlen: 24 193.226.248.0/23 maxlen: 24 195.38.96.0/19 maxlen: 24 212.40.64.0/22 maxlen: 24 212.40.68.0/23 maxlen: 24 212.40.72.0/21 maxlen: 24 212.40.80.0/20 maxlen: 24 213.197.72.0/21 maxlen: 24 213.197.80.0/20 maxlen: 24 217.197.176.0/20 maxlen: 24 2a01:368::/29 maxlen: 48 2a01:368::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:7c:c2:dc:55:ff:87:53:9f:8e:b0:37:81:b6:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140 Validity Not Before: Jan 2 18:22:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=725e3118010486bd1ab4e912f8cf3be73f58787e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4e:ca:74:b2:7c:59:ae:86:13:29:6f:72:32: 89:dc:ea:5b:f1:bd:5c:9b:04:79:15:47:33:06:d0: 7d:4c:ba:fd:28:52:1c:b5:a9:ca:07:98:9c:85:44: db:e7:fc:ee:56:cc:2c:fd:55:2d:dd:d1:ea:74:6c: 69:f3:d7:ad:53:c4:a9:a2:77:e1:6f:28:84:1a:f5: 7d:72:cd:41:d3:12:ba:9e:b7:66:b4:7e:b0:15:8d: 92:c5:68:af:ec:a5:8e:9e:77:86:1c:ce:ad:38:33: 1b:b4:c7:2c:d7:bc:31:4c:7d:dc:2c:ec:f3:63:2e: 4f:b8:6e:58:37:17:22:d7:92:4d:1d:fd:0e:ea:1d: 91:2a:80:b9:49:77:68:91:58:c7:32:a2:08:28:2a: 46:6b:c5:dc:fd:a8:34:ca:a7:9b:d0:db:fe:bb:78: 60:83:cc:d7:5a:f7:02:9c:0b:b1:0b:f8:5b:02:a5: 0a:00:3b:8f:14:5f:a8:e1:9e:55:07:15:f4:08:4f: 02:c4:21:c7:cc:05:2a:1a:e9:8c:87:08:8f:56:db: a4:63:c2:da:e2:54:53:97:ca:36:f6:b2:f5:e0:10: 9a:b7:13:00:b5:72:c4:75:c7:be:79:dd:1b:ce:b3: 55:97:1b:54:92:b1:7b:de:14:c6:c2:0d:88:a9:a4: de:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5E:31:18:01:04:86:BD:1A:B4:E9:12:F8:CF:3B:E7:3F:58:78:7E X509v3 Authority Key Identifier: keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/cl4xGAEEhr0atOkS-M875z9YeH4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.77.196.0/22 62.77.240.0/23 62.77.248.0/21 62.165.192.0/18 77.234.64.0/19 78.131.0.0/17 79.120.160.0/21 79.120.170.0-79.120.175.255 79.120.248.0/23 79.120.252.0/22 80.95.64.0/19 81.0.82.0-81.0.87.255 81.0.90.0-81.0.95.255 81.0.98.0/23 81.0.108.0/23 81.0.122.0/23 81.0.126.0/23 81.17.176.0/20 82.131.128.0/19 82.131.182.0-82.131.191.255 82.131.196.0-82.131.198.255 82.131.200.0/21 82.131.216.0-82.131.255.255 82.144.164.0/22 82.144.172.0-82.144.177.255 82.144.188.0/23 84.21.180.0/22 84.236.0.0/17 85.66.0.0/15 85.238.64.0/19 87.97.0.0/18 87.97.80.0-87.97.127.255 89.147.64.0/20 89.147.96.0/22 89.147.112.0/21 89.148.64.0/18 89.186.96.0/23 89.186.102.0/23 89.186.106.0-89.186.115.255 89.186.118.0-89.186.127.255 91.82.0.0/21 91.82.24.0-91.82.39.255 91.82.56.0/23 91.82.60.0/23 91.82.64.0/21 91.82.82.0/23 91.82.130.0-91.82.147.255 91.82.160.0-91.82.173.255 91.82.176.0/21 91.82.188.0/22 91.82.210.0-91.82.215.255 91.82.228.0-91.82.235.255 91.82.240.0/22 91.82.250.0/23 91.83.0.0-91.83.39.255 91.83.52.0/22 91.83.94.0/23 91.83.102.0/23 91.83.110.0/23 91.83.120.0/23 91.83.136.0-91.83.145.255 91.83.154.0/23 91.83.180.0-91.83.207.255 91.83.252.0/23 92.52.224.0/19 92.245.64.0/19 92.249.128.0/17 94.21.0.0/16 94.247.88.0/21 176.241.0.0/18 178.164.128.0/17 185.29.80.0/22 185.62.128.0/22 188.142.128.0/19 188.143.0.0/17 193.110.56.0/21 193.226.192.0/23 193.226.212.0/22 193.226.226.0/23 193.226.232.0/23 193.226.238.0-193.226.241.255 193.226.244.0-193.226.249.255 195.38.96.0/19 212.40.64.0-212.40.69.255 212.40.72.0-212.40.95.255 213.197.72.0-213.197.95.255 217.197.176.0/20 IPv6: 2a01:368::/29 Signature Algorithm: sha256WithRSAEncryption 99:b2:94:19:ec:3b:e5:e1:10:bc:47:33:7a:5d:bc:c9:61:74: 9e:01:fc:b7:a2:b1:6b:51:a5:9a:cf:37:76:1c:7e:13:c8:e5: e0:7f:15:0a:57:16:8f:0e:68:fa:66:29:4e:b2:fa:fa:5b:81: cf:96:18:41:0a:5c:dd:f1:35:f9:11:9e:3a:5c:38:53:bd:8e: ca:45:dd:e5:c8:6f:81:d4:3e:cc:e1:b2:e1:19:1f:75:ee:25: 5e:13:10:f9:6f:14:40:b1:fc:97:9d:91:7e:0a:70:6a:06:1d: 18:f4:86:38:0f:70:28:92:03:b0:4a:3f:1f:6d:25:6b:a2:20: b0:cc:fe:01:71:86:d5:c3:08:40:c7:cf:8a:10:c4:0e:b1:13: b6:2a:42:8b:b2:ab:10:42:96:7c:bb:10:75:9c:64:f0:25:6f: 52:08:68:d5:df:d3:29:0e:4e:32:90:78:7d:ef:a6:ad:8f:88: b9:2c:19:fc:eb:cd:5b:10:08:20:55:f5:2a:81:94:8d:05:45: f8:d2:f1:17:3b:a7:7e:97:44:95:4c:91:dc:45:e0:a4:1a:2b: 4e:e7:26:79:89:3d:38:08:1f:3b:70:51:da:e9:96:cb:b7:76: 51:ec:8d:ea:af:6c:f9:4f:99:63:57:cc:b0:69:65:3e:21:65: 99:8d:d5:fe -----BEGIN CERTIFICATE----- MIIHzjCCBragAwIBAgISAZt/8nzC3FX/h1OfjrA3gbb+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NWMyMzc5ZWZlZDEwMDU2Y2Y4NjVkNTJjMzJlMWUxZWJh OGMxNDAwHhcNMjYwMTAyMTgyMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjVlMzExODAxMDQ4NmJkMWFiNGU5MTJmOGNmM2JlNzNmNTg3ODdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU7KdLJ8Wa6GEylvcjKJ3Opb8b1c mwR5FUczBtB9TLr9KFIctanKB5ichUTb5/zuVsws/VUt3dHqdGxp89etU8Sponfh byiEGvV9cs1B0xK6nrdmtH6wFY2SxWiv7KWOnneGHM6tODMbtMcs17wxTH3cLOzz Yy5PuG5YNxci15JNHf0O6h2RKoC5SXdokVjHMqIIKCpGa8Xc/ag0yqeb0Nv+u3hg g8zXWvcCnAuxC/hbAqUKADuPFF+o4Z5VBxX0CE8CxCHHzAUqGumMhwiPVtukY8La 4lRTl8o29rL14BCatxMAtXLEdce+ed0bzrNVlxtUkrF73hTGwg2IqaTeWQIDAQAB o4IE2jCCBNYwHQYDVR0OBBYEFHJeMRgBBIa9GrTpEvjPO+c/WHh+MB8GA1UdIwQY MBaAFIRcI3nv7RAFbPhl1Swy4eHrqMFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZ3amVlX3RFQVZzLUdYVkxETGg0ZXVvd1VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82MGU4ZmEtZWM1Yy00NTk0LTllYzQt YmU3YTFhMDAxY2NmLzEvY2w0eEdBRUVocjBhdE9rUy1NODc1ejlZZUg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS82MGU4ZmEtZWM1Yy00NTk0LTllYzQtYmU3YTFhMDAxY2Nm LzEvaEZ3amVlX3RFQVZzLUdYVkxETGg0ZXVvd1VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIC7gYIKwYBBQUHAQcBAf8EggLdMIIC2TCCAsYEAgABMIIC vgMEAj5NxAMEAT5N8AMEAz5N+AMEBj6lwAMEBU3qQAMEB06DAAMEA094oDAMAwQB T3iqAwQET3igAwQBT3j4AwQCT3j8AwQFUF9AMAwDBAFRAFIDBANRAFAwDAMEAVEA WgMEBVEAQAMEAVEAYgMEAVEAbAMEAVEAegMEAVEAfgMEBFERsAMEBVKDgDAMAwQB UoO2AwQGUoOAMAwDBAJSg8QDBABSg8YDBANSg8gwCwMEA1KD2AMDAlKAAwQCUpCk MAwDBAJSkKwDBAFSkLADBAFSkLwDBAJUFbQDBAdU7AADAwFVQgMEBVXuQAMEBldh ADAMAwQEV2FQAwQHV2EAAwQEWZNAAwQCWZNgAwQDWZNwAwQGWZRAAwQBWbpgAwQB WbpmMAwDBAFZumoDBAJZunAwDAMEAVm6dgMEB1m6AAMEA1tSADAMAwQDW1IYAwQD W1IgAwQBW1I4AwQBW1I8AwQDW1JAAwQBW1JSMAwDBAFbUoIDBAJbUpAwDAMEBVtS oAMEAVtSrAMEA1tSsAMEAltSvDAMAwQBW1LSAwQDW1LQMAwDBAJbUuQDBAJbUugD BAJbUvADBAFbUvowCwMDAFtTAwQDW1MgAwQCW1M0AwQBW1NeAwQBW1NmAwQBW1Nu AwQBW1N4MAwDBANbU4gDBAFbU5ADBAFbU5owDAMEAltTtAMEBFtTwAMEAVtT/AME BVw04AMEBVz1QAMEB1z5gAMDAF4VAwQDXvdYAwQGsPEAAwQHsqSAAwQCuR1QAwQC uT6AAwQFvI6AAwQHvI8AAwQDwW44AwQBweLAAwQCweLUAwQBweLiAwQBweLoMAwD BAHB4u4DBAHB4vAwDAMEAsHi9AMEAcHi+AMEBcMmYDAMAwQG1ChAAwQB1ChEMAwD BAPUKEgDBAXUKEAwDAMEA9XFSAMEBdXFQAMEBNnFsDANBAIAAjAHAwUDKgEDaDAN BgkqhkiG9w0BAQsFAAOCAQEAmbKUGew75eEQvEczel28yWF0ngH8t6Kxa1Glms83 dhx+E8jl4H8VClcWjw5o+mYpTrL6+luBz5YYQQpc3fE1+RGeOlw4U72OykXd5chv gdQ+zOGy4Rkfde4lXhMQ+W8UQLH8l52RfgpwagYdGPSGOA9wKJIDsEo/H20la6Ig sMz+AXGG1cMIQMfPihDEDrETtipCi7KrEEKWfLsQdZxk8CVvUgho1d/TKQ5OMpB4 fe+mrY+IuSwZ/OvNWxAIIFX1KoGUjQVF+NLxFzunfpdElUyR3EXgpBorTucmeYk9 OAgfO3BR2umWy7d2UeyN6q9s+U+ZY1fMsGllPiFlmY3V/g== -----END CERTIFICATE-----Generated at Wed Jan 21 07:22:12 2026 by rpki-client