This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/A_sUqXNJn9Rojoy-SannfwQKt2w.roa File: A_sUqXNJn9Rojoy-SannfwQKt2w.roa (raw, json) Hash identifier: 7MgWH2+po5ITevBMtb9RWW486i9XpZGlyB9u24ejDDA= Subject key identifier: 03:FB:14:A9:73:49:9F:D4:68:8E:8C:BE:49:A9:E7:7F:04:0A:B7:6C Certificate issuer: /CN=8b69fc6128be591401acf82bc2461af636ebe8e6 Certificate serial: 019B7834650E143BB7DEB99D5AEB80ED72DD Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/A_sUqXNJn9Rojoy-SannfwQKt2w.roa Signing time: Thu 01 Jan 2026 06:17:38 +0000 ROA not before: Thu 01 Jan 2026 06:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 80.81.192.0/21 maxlen: 21 80.81.202.0/24 maxlen: 24 80.81.203.0/24 maxlen: 24 185.0.4.0/24 maxlen: 24 185.0.5.0/24 maxlen: 24 185.0.6.0/24 maxlen: 24 185.0.7.0/24 maxlen: 24 185.0.8.0/24 maxlen: 24 185.0.17.0/24 maxlen: 24 185.0.33.0/24 maxlen: 24 185.0.35.0/24 maxlen: 24 185.1.8.0/24 maxlen: 24 185.1.46.0/24 maxlen: 24 185.1.47.0/24 maxlen: 24 185.1.48.0/24 maxlen: 24 185.1.119.0/24 maxlen: 24 185.1.131.0/24 maxlen: 24 185.1.170.0/23 maxlen: 23 185.1.176.0/24 maxlen: 24 185.1.182.0/24 maxlen: 24 185.1.183.0/24 maxlen: 24 185.1.187.0/24 maxlen: 24 185.1.192.0/23 maxlen: 23 185.1.197.0/24 maxlen: 24 185.1.204.0/24 maxlen: 24 185.1.208.0/23 maxlen: 23 185.1.210.0/23 maxlen: 23 185.1.220.0/24 maxlen: 24 185.1.244.0/24 maxlen: 24 185.1.245.0/24 maxlen: 24 185.1.246.0/24 maxlen: 24 185.1.248.0/24 maxlen: 24 185.1.252.0/24 maxlen: 24 185.1.253.0/24 maxlen: 24 185.176.192.0/24 maxlen: 24 2001:7f8::/48 maxlen: 48 2001:7f8:32::/48 maxlen: 48 2001:7f8:36::/48 maxlen: 48 2001:7f8:3d::/48 maxlen: 48 2001:7f8:3f::/48 maxlen: 48 2001:7f8:44::/48 maxlen: 48 2001:7f8:73::/48 maxlen: 48 2001:7f8:9e::/48 maxlen: 48 2001:7f8:a0::/48 maxlen: 48 2001:7f8:d5::/48 maxlen: 48 2001:7f8:df::/48 maxlen: 48 2001:7f8:106::/48 maxlen: 48 2001:7f8:10a::/48 maxlen: 48 2001:7f8:139::/48 maxlen: 48 2001:7f8:13a::/48 maxlen: 48 2001:7f8:13b::/48 maxlen: 48 2001:7f8:13c::/48 maxlen: 48 2001:7f8:13e::/48 maxlen: 48 2001:7f8:143::/48 maxlen: 48 2001:7f8:14e::/48 maxlen: 48 2a02:c50:4000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:65:0e:14:3b:b7:de:b9:9d:5a:eb:80:ed:72:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6 Validity Not Before: Jan 1 06:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03fb14a973499fd4688e8cbe49a9e77f040ab76c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ef:8a:f0:52:8d:d7:2d:a4:41:f5:8d:13:08: 16:0e:58:ca:e9:3f:6a:13:0c:bf:55:20:5e:14:94: e3:cd:cd:5e:b5:27:af:26:a8:05:35:9c:ce:55:2c: 53:2c:78:ec:74:bf:3a:57:ca:13:64:ba:fc:3b:9c: 33:61:c3:a1:18:95:b7:d2:6a:19:07:be:af:d3:df: 06:48:b0:8d:e8:40:80:6e:ab:d8:6e:ab:57:ad:cb: ec:73:b9:55:0f:82:f7:de:9f:fe:d2:69:81:b5:74: b5:9d:80:c8:60:0c:1c:55:ea:6e:26:d0:4d:c5:87: a0:6e:ca:9b:88:cb:55:11:5c:12:eb:02:5d:37:c7: e5:5d:50:1f:d3:bb:12:d8:40:66:36:e5:e2:61:aa: 5d:8e:70:64:1e:36:62:11:07:e6:b6:1c:52:54:ff: a0:5a:16:58:eb:c1:41:8a:12:f0:a8:6a:3d:ab:5b: d6:e1:bb:67:3e:8f:94:9d:35:e7:9d:1f:01:88:39: 2a:c4:dc:81:e9:c4:7f:5d:c9:0a:d8:29:7f:0a:5f: 91:c6:d7:8b:ff:67:e5:81:c5:d5:e0:93:29:1c:ee: b7:85:51:ce:6b:28:7a:f2:de:4b:0d:1c:bd:db:45: b2:cb:a8:bb:e0:7d:7b:53:6e:69:fe:ef:ec:c9:9c: 44:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FB:14:A9:73:49:9F:D4:68:8E:8C:BE:49:A9:E7:7F:04:0A:B7:6C X509v3 Authority Key Identifier: keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/A_sUqXNJn9Rojoy-SannfwQKt2w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.81.192.0/21 80.81.202.0/23 185.0.4.0-185.0.8.255 185.0.17.0/24 185.0.33.0/24 185.0.35.0/24 185.1.8.0/24 185.1.46.0-185.1.48.255 185.1.119.0/24 185.1.131.0/24 185.1.170.0/23 185.1.176.0/24 185.1.182.0/23 185.1.187.0/24 185.1.192.0/23 185.1.197.0/24 185.1.204.0/24 185.1.208.0/22 185.1.220.0/24 185.1.244.0-185.1.246.255 185.1.248.0/24 185.1.252.0/23 185.176.192.0/24 IPv6: 2001:7f8::/48 2001:7f8:32::/48 2001:7f8:36::/48 2001:7f8:3d::/48 2001:7f8:3f::/48 2001:7f8:44::/48 2001:7f8:73::/48 2001:7f8:9e::/48 2001:7f8:a0::/48 2001:7f8:d5::/48 2001:7f8:df::/48 2001:7f8:106::/48 2001:7f8:10a::/48 2001:7f8:139::-2001:7f8:13c:ffff:ffff:ffff:ffff:ffff 2001:7f8:13e::/48 2001:7f8:143::/48 2001:7f8:14e::/48 2a02:c50:4000::/44 Signature Algorithm: sha256WithRSAEncryption 54:ad:3c:21:b1:98:57:d7:03:20:f1:98:60:2c:d3:29:d8:34: e5:37:75:5b:00:5f:1b:23:7c:ee:82:5f:44:8b:eb:0b:98:cb: 54:50:15:9d:97:de:19:93:d4:76:c7:6c:36:1e:a6:1b:f6:8b: fb:db:d7:74:ed:f7:17:04:b5:b4:6f:a6:21:fb:f3:96:6e:42: 0d:26:c2:eb:37:35:be:77:ee:48:ba:94:e3:84:fa:7e:78:47: 89:8a:cf:fc:10:34:49:8b:b0:b2:f9:f3:48:6d:8e:47:fb:e8: 06:83:45:18:8e:d4:98:74:74:f7:8d:40:f5:f0:fe:ce:99:ea: 3e:df:41:c1:c1:18:06:b8:28:da:53:67:b3:50:7e:18:fa:16: 42:f4:03:47:17:d2:e1:fa:d3:43:67:bc:57:c2:5b:ee:95:5e: f3:70:a2:f7:6e:6d:54:54:f6:a2:ba:2a:0f:c9:56:85:55:ad: 7d:1c:5f:a5:94:57:e7:3b:46:fb:b1:6b:72:1b:5a:1a:3a:26: dc:da:8a:33:2c:8f:31:74:a7:4b:12:23:1b:44:fd:f7:69:93: a1:76:fe:87:83:e2:47:83:1b:2a:8a:58:0f:56:46:8f:8d:2a: d7:82:ad:f2:1a:3a:d3:7b:a1:54:8e:fa:b2:82:5f:a3:44:ce: ca:f8:16:c2 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgISAZt4NGUOFDu33rmdWuuA7XLdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNjlmYzYxMjhiZTU5MTQwMWFjZjgyYmMyNDYxYWY2MzZl YmU4ZTYwHhcNMjYwMTAxMDYxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2ZiMTRhOTczNDk5ZmQ0Njg4ZThjYmU0OWE5ZTc3ZjA0MGFiNzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs++K8FKN1y2kQfWNEwgWDljK6T9q Ewy/VSBeFJTjzc1etSevJqgFNZzOVSxTLHjsdL86V8oTZLr8O5wzYcOhGJW30moZ B76v098GSLCN6ECAbqvYbqtXrcvsc7lVD4L33p/+0mmBtXS1nYDIYAwcVepuJtBN xYegbsqbiMtVEVwS6wJdN8flXVAf07sS2EBmNuXiYapdjnBkHjZiEQfmthxSVP+g WhZY68FBihLwqGo9q1vW4btnPo+UnTXnnR8BiDkqxNyB6cR/XckK2Cl/Cl+RxteL /2flgcXV4JMpHO63hVHOayh68t5LDRy920Wyy6i74H17U25p/u/syZxEsQIDAQAB o4IDZDCCA2AwHQYDVR0OBBYEFAP7FKlzSZ/UaI6Mvkmp538ECrdsMB8GA1UdIwQY MBaAFItp/GEovlkUAaz4K8JGGvY26+jmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYWE2ZTYtMzA1NC00ODg4LTg2NWUt MjY1ZjJiZDBmOGYzLzEvQV9zVXFYTkpuOVJvam95LVNhbm5md1FLdDJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wYWE2ZTYtMzA1NC00ODg4LTg2NWUtMjY1ZjJiZDBmOGYz LzEvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBeAYIKwYBBQUHAQcBAf8EggFnMIIBYzCBqQQCAAEwgaID BANQUcADBAFQUcowDAMEArkABAMEALkACAMEALkAEQMEALkAIQMEALkAIwMEALkB CDAMAwQBuQEuAwQAuQEwAwQAuQF3AwQAuQGDAwQBuQGqAwQAuQGwAwQBuQG2AwQA uQG7AwQBuQHAAwQAuQHFAwQAuQHMAwQCuQHQAwQAuQHcMAwDBAK5AfQDBAC5AfYD BAC5AfgDBAG5AfwDBAC5sMAwgbQEAgACMIGtAwcAIAEH+AAAAwcAIAEH+AAyAwcA IAEH+AA2AwcAIAEH+AA9AwcAIAEH+AA/AwcAIAEH+ABEAwcAIAEH+ABzAwcAIAEH +ACeAwcAIAEH+ACgAwcAIAEH+ADVAwcAIAEH+ADfAwcAIAEH+AEGAwcAIAEH+AEK MBIDBwAgAQf4ATkDBwAgAQf4ATwDBwAgAQf4AT4DBwAgAQf4AUMDBwAgAQf4AU4D BwQqAgxQQAAwDQYJKoZIhvcNAQELBQADggEBAFStPCGxmFfXAyDxmGAs0ynYNOU3 dVsAXxsjfO6CX0SL6wuYy1RQFZ2X3hmT1HbHbDYephv2i/vb13Tt9xcEtbRvpiH7 85ZuQg0mwus3Nb537ki6lOOE+n54R4mKz/wQNEmLsLL580htjkf76AaDRRiO1Jh0 dPeNQPXw/s6Z6j7fQcHBGAa4KNpTZ7NQfhj6FkL0A0cX0uH600NnvFfCW+6VXvNw ovdubVRU9qK6Kg/JVoVVrX0cX6WUV+c7Rvuxa3IbWho6JtzaijMsjzF0p0sSIxtE /fdpk6F2/oeD4keDGyqKWA9WRo+NKteCrfIaOtN7oVSO+rKCX6NEzsr4FsI= -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:13 2026 by rpki-client