This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/wEezPkEzN7e4KBElW04dGq39yXE.roa File: wEezPkEzN7e4KBElW04dGq39yXE.roa (raw, json) Hash identifier: tPPcQRNIUmCvUpl1+b0ZJ2Bt31w7/vOz4ZjosTuObmQ= Subject key identifier: C0:47:B3:3E:41:33:37:B7:B8:28:11:25:5B:4E:1D:1A:AD:FD:C9:71 Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123 Certificate serial: 019C1E2867AB88EEF58CFBD778D501225A16 Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/wEezPkEzN7e4KBElW04dGq39yXE.roa Signing time: Mon 02 Feb 2026 11:41:30 +0000 ROA not before: Mon 02 Feb 2026 11:41:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8641 IP address blocks: 77.73.24.0/21 maxlen: 21 77.94.160.0/19 maxlen: 19 81.26.144.0/21 maxlen: 21 81.26.144.0/24 maxlen: 24 81.26.150.0/24 maxlen: 24 81.26.152.0/22 maxlen: 22 81.26.154.0/24 maxlen: 24 81.26.155.0/24 maxlen: 24 84.47.128.0/23 maxlen: 23 84.47.131.0/24 maxlen: 24 84.47.134.0/23 maxlen: 23 84.47.135.0/24 maxlen: 24 84.47.136.0/24 maxlen: 24 84.47.140.0/22 maxlen: 22 84.47.143.0/24 maxlen: 24 84.47.144.0/23 maxlen: 23 84.47.147.0/24 maxlen: 24 84.47.150.0/23 maxlen: 32 84.47.152.0/23 maxlen: 23 84.47.156.0/22 maxlen: 22 84.47.158.0/23 maxlen: 23 84.47.160.0/24 maxlen: 24 84.47.161.0/24 maxlen: 24 84.47.162.0/24 maxlen: 24 84.47.163.0/24 maxlen: 24 84.47.164.0/23 maxlen: 23 84.47.164.0/24 maxlen: 24 84.47.168.0/22 maxlen: 22 84.47.172.0/24 maxlen: 24 84.47.174.0/23 maxlen: 23 84.47.176.0/23 maxlen: 23 84.47.176.0/24 maxlen: 24 84.47.177.0/24 maxlen: 24 84.47.178.0/24 maxlen: 24 84.47.181.0/24 maxlen: 24 84.47.182.0/23 maxlen: 23 84.47.186.0/23 maxlen: 23 84.47.190.0/23 maxlen: 23 85.91.96.0/21 maxlen: 21 85.91.112.0/22 maxlen: 22 85.91.118.0/23 maxlen: 23 85.91.120.0/23 maxlen: 23 85.91.122.0/24 maxlen: 24 91.197.183.0/24 maxlen: 24 185.106.107.0/24 maxlen: 24 193.105.11.0/24 maxlen: 24 213.135.64.0/23 maxlen: 23 213.135.67.0/24 maxlen: 24 213.135.69.0/24 maxlen: 24 213.135.70.0/24 maxlen: 24 213.135.72.0/23 maxlen: 23 213.135.77.0/24 maxlen: 24 213.135.82.0/23 maxlen: 23 213.135.84.0/22 maxlen: 22 213.135.88.0/22 maxlen: 22 213.135.92.0/24 maxlen: 24 213.135.95.0/24 maxlen: 24 213.208.160.0/21 maxlen: 21 213.208.168.0/23 maxlen: 23 213.208.170.0/24 maxlen: 24 213.208.172.0/23 maxlen: 23 213.208.174.0/23 maxlen: 23 213.208.176.0/21 maxlen: 21 213.208.184.0/24 maxlen: 24 213.208.188.0/22 maxlen: 22 2a02:bc8::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:28:67:ab:88:ee:f5:8c:fb:d7:78:d5:01:22:5a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123 Validity Not Before: Feb 2 11:41:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c047b33e413337b7b82811255b4e1d1aadfdc971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:33:e6:44:68:91:31:2c:f7:ec:a0:36:dc:da: fc:54:01:b1:83:b8:55:e5:fa:80:e1:d1:d8:a2:fc: cd:d0:7c:5f:5f:2f:4a:74:38:d5:4a:10:2e:2f:1d: ae:61:6a:38:47:3e:ab:f5:24:96:1e:56:20:6d:ba: 22:2e:83:29:a6:d9:49:89:95:fa:8d:fc:3b:b7:20: d5:d7:92:77:be:6b:62:a1:80:76:eb:40:11:05:8d: e9:40:c9:24:91:60:cf:9a:61:be:8f:0e:10:e6:e8: 0b:3e:bd:40:a2:41:32:9a:df:77:05:39:60:74:45: e5:a9:47:07:27:f6:30:35:78:f9:ff:1a:96:0b:9b: b9:00:90:a2:d8:f7:7a:ac:8e:eb:f8:88:4a:5c:e7: f0:a1:b4:31:4e:2d:80:d9:76:f2:08:44:77:ab:0c: 55:75:89:d6:90:b4:36:13:27:1e:01:b7:7e:69:e8: a6:0f:94:aa:e3:9f:12:e8:06:2d:45:d9:fa:dd:b3: 1a:14:cb:90:b4:10:72:b2:d1:bb:6c:6b:c0:81:f5: 67:57:83:eb:f1:37:1e:d8:bb:06:16:68:22:f8:2a: a5:94:29:73:50:a5:e5:f3:d6:ad:5c:49:22:54:a1: d1:59:a4:1c:f8:eb:a6:86:0f:67:ef:ed:ff:9f:0a: 42:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:47:B3:3E:41:33:37:B7:B8:28:11:25:5B:4E:1D:1A:AD:FD:C9:71 X509v3 Authority Key Identifier: keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/wEezPkEzN7e4KBElW04dGq39yXE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.73.24.0/21 77.94.160.0/19 81.26.144.0-81.26.155.255 84.47.128.0/23 84.47.131.0/24 84.47.134.0-84.47.136.255 84.47.140.0-84.47.145.255 84.47.147.0/24 84.47.150.0-84.47.153.255 84.47.156.0-84.47.165.255 84.47.168.0-84.47.172.255 84.47.174.0-84.47.178.255 84.47.181.0-84.47.183.255 84.47.186.0/23 84.47.190.0/23 85.91.96.0/21 85.91.112.0/22 85.91.118.0-85.91.122.255 91.197.183.0/24 185.106.107.0/24 193.105.11.0/24 213.135.64.0/23 213.135.67.0/24 213.135.69.0-213.135.70.255 213.135.72.0/23 213.135.77.0/24 213.135.82.0-213.135.92.255 213.135.95.0/24 213.208.160.0-213.208.170.255 213.208.172.0-213.208.184.255 213.208.188.0/22 IPv6: 2a02:bc8::/29 Signature Algorithm: sha256WithRSAEncryption 41:89:ae:3e:c0:3f:57:7f:e4:27:b3:b3:e7:38:69:5e:0d:18: 90:e5:3c:ab:58:3a:b5:9c:de:43:8f:6e:72:f3:b0:c9:80:58: 23:47:3d:9b:61:61:3b:a8:b7:c5:70:90:f0:d6:5c:64:79:a5: 74:69:ea:ef:d6:19:4a:06:a9:4b:ac:2a:24:bb:e9:83:1a:00: d9:d0:b1:9a:65:b0:d6:f5:60:8d:13:10:2a:a4:f2:f8:25:df: bf:40:cb:27:77:3b:2f:21:d5:0e:39:9c:99:9a:30:b1:3a:db: 4d:4e:fc:70:cf:b9:c4:4c:25:e2:d0:a5:be:92:b2:51:14:39: 3f:9b:00:c6:01:80:28:7d:28:31:a1:d3:7c:c6:c2:43:d3:2b: 1a:e4:87:3d:39:68:e0:24:37:89:a0:76:e1:3f:55:1e:37:11: 76:a5:b1:47:15:f2:f0:b5:41:bd:c4:ff:26:60:aa:9d:24:3b: 8e:e9:41:67:2d:95:fb:d3:5c:19:6f:02:8d:26:ff:2a:fe:c5: a8:05:d3:00:c2:e6:e5:3b:91:2f:2d:2a:ad:fe:91:8e:bd:70: be:2d:52:a3:e0:7b:45:36:8e:7b:19:b9:9e:09:91:27:fb:81: ee:0d:b3:f9:ef:26:11:20:40:06:45:67:4a:ed:7b:0f:1b:1b: eb:62:4d:ad -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgISAZweKGeriO71jPvXeNUBIloWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy NzAxMjMwHhcNMjYwMjAyMTE0MTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDQ3YjMzZTQxMzMzN2I3YjgyODExMjU1YjRlMWQxYWFkZmRjOTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjPmRGiRMSz37KA23Nr8VAGxg7hV 5fqA4dHYovzN0HxfXy9KdDjVShAuLx2uYWo4Rz6r9SSWHlYgbboiLoMpptlJiZX6 jfw7tyDV15J3vmtioYB260ARBY3pQMkkkWDPmmG+jw4Q5ugLPr1AokEymt93BTlg dEXlqUcHJ/YwNXj5/xqWC5u5AJCi2Pd6rI7r+IhKXOfwobQxTi2A2XbyCER3qwxV dYnWkLQ2EyceAbd+aeimD5Sq458S6AYtRdn63bMaFMuQtBBystG7bGvAgfVnV4Pr 8Tce2LsGFmgi+CqllClzUKXl89atXEkiVKHRWaQc+Oumhg9n7+3/nwpCoQIDAQAB o4IDPjCCAzowHQYDVR0OBBYEFMBHsz5BMze3uCgRJVtOHRqt/clxMB8GA1UdIwQY MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt YmZiNGJhMzBlNDVhLzEvd0VlelBrRXpON2U0S0JFbFcwNGRHcTM5eVhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBUgYIKwYBBQUHAQcBAf8EggFBMIIBPTCCASoEAgABMIIB IgMEA01JGAMEBU1eoDAMAwQEURqQAwQCURqYAwQBVC+AAwQAVC+DMAwDBAFUL4YD BABUL4gwDAMEAlQvjAMEAVQvkAMEAFQvkzAMAwQBVC+WAwQBVC+YMAwDBAJUL5wD BAFUL6QwDAMEA1QvqAMEAFQvrDAMAwQBVC+uAwQAVC+yMAwDBABUL7UDBANUL7AD BAFUL7oDBAFUL74DBANVW2ADBAJVW3AwDAMEAVVbdgMEAFVbegMEAFvFtwMEALlq awMEAMFpCwMEAdWHQAMEANWHQzAMAwQA1YdFAwQA1YdGAwQB1YdIAwQA1YdNMAwD BAHVh1IDBADVh1wDBADVh18wDAMEBdXQoAMEANXQqjAMAwQC1dCsAwQA1dC4AwQC 1dC8MA0EAgACMAcDBQMqAgvIMA0GCSqGSIb3DQEBCwUAA4IBAQBBia4+wD9Xf+Qn s7PnOGleDRiQ5TyrWDq1nN5Dj25y87DJgFgjRz2bYWE7qLfFcJDw1lxkeaV0aerv 1hlKBqlLrCoku+mDGgDZ0LGaZbDW9WCNExAqpPL4Jd+/QMsndzsvIdUOOZyZmjCx OttNTvxwz7nETCXi0KW+krJRFDk/mwDGAYAofSgxodN8xsJD0ysa5Ic9OWjgJDeJ oHbhP1UeNxF2pbFHFfLwtUG9xP8mYKqdJDuO6UFnLZX701wZbwKNJv8q/sWoBdMA wublO5EvLSqt/pGOvXC+LVKj4HtFNo57GbmeCZEn+4HuDbP57yYRIEAGRWdK7XsP GxvrYk2t -----END CERTIFICATE-----Generated at Tue Feb 10 02:22:36 2026 by rpki-client