This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/Q9Ww3Do89xMOQrPd5TKLAZBAvrg.roa File: Q9Ww3Do89xMOQrPd5TKLAZBAvrg.roa (raw, json) Hash identifier: hGe4aZ3em/P54+6JoLXuYwSoEpjVtG261LosCw0VpbI= Subject key identifier: 43:D5:B0:DC:3A:3C:F7:13:0E:42:B3:DD:E5:32:8B:01:90:40:BE:B8 Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Certificate serial: 019BEF1ACFFF677534E9DAEE68AD94772928 Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/Q9Ww3Do89xMOQrPd5TKLAZBAvrg.roa Signing time: Sat 24 Jan 2026 08:24:30 +0000 ROA not before: Sat 24 Jan 2026 08:24:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39737 IP address blocks: 77.93.160.0/23 maxlen: 23 77.93.162.0/24 maxlen: 24 77.93.164.0/22 maxlen: 22 77.93.168.0/22 maxlen: 22 77.93.176.0/20 maxlen: 20 86.105.181.0/24 maxlen: 24 86.107.183.0/24 maxlen: 24 87.243.0.0/21 maxlen: 21 89.18.0.0/20 maxlen: 20 89.18.0.0/21 maxlen: 21 89.18.0.0/24 maxlen: 24 89.18.1.0/24 maxlen: 24 89.18.2.0/24 maxlen: 24 89.18.3.0/24 maxlen: 24 89.18.4.0/24 maxlen: 24 89.18.5.0/24 maxlen: 24 89.18.6.0/24 maxlen: 24 89.18.7.0/24 maxlen: 24 89.18.8.0/24 maxlen: 24 89.18.9.0/24 maxlen: 24 89.18.10.0/24 maxlen: 24 89.18.11.0/24 maxlen: 24 89.18.12.0/24 maxlen: 24 89.18.13.0/24 maxlen: 24 89.18.14.0/24 maxlen: 24 89.18.15.0/24 maxlen: 24 89.18.31.0/24 maxlen: 24 89.34.72.0/23 maxlen: 23 89.35.74.0/23 maxlen: 23 89.37.120.0/21 maxlen: 21 89.38.140.0/22 maxlen: 22 89.43.193.0/24 maxlen: 24 89.44.232.0/22 maxlen: 22 89.46.160.0/22 maxlen: 22 89.47.224.0/21 maxlen: 21 92.55.131.0/24 maxlen: 24 92.55.132.0/24 maxlen: 24 92.55.134.0/24 maxlen: 24 92.55.135.0/24 maxlen: 24 92.55.144.0/21 maxlen: 21 92.55.152.0/24 maxlen: 24 92.55.153.0/24 maxlen: 24 92.55.154.0/24 maxlen: 24 94.177.32.0/21 maxlen: 21 94.177.40.0/21 maxlen: 21 188.247.129.0/24 maxlen: 24 188.247.132.0/23 maxlen: 23 188.247.224.0/23 maxlen: 23 188.247.226.0/23 maxlen: 23 188.247.238.0/24 maxlen: 24 188.247.239.0/24 maxlen: 24 188.247.240.0/21 maxlen: 21 188.247.248.0/21 maxlen: 21 188.247.252.0/22 maxlen: 22 193.58.243.0/24 maxlen: 24 193.254.242.0/23 maxlen: 23 194.102.221.0/24 maxlen: 24 195.20.145.0/24 maxlen: 24 2a00:1480::/48 maxlen: 48 2a00:1480:1::/48 maxlen: 48 2a00:1480:5::/48 maxlen: 48 2a00:1480:6::/48 maxlen: 48 2a00:1480:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ef:1a:cf:ff:67:75:34:e9:da:ee:68:ad:94:77:29:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Validity Not Before: Jan 24 08:24:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43d5b0dc3a3cf7130e42b3dde5328b019040beb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6c:d4:b4:79:a1:ba:7a:c6:e7:ef:d7:98:48: b9:f2:ca:91:bb:36:76:75:34:83:91:56:df:22:99: 07:05:3a:0b:32:e1:a7:ce:42:a1:cf:a3:e7:a6:db: ab:73:af:82:9d:2c:5d:80:5e:2b:e7:2f:de:24:2c: 9f:b8:ad:62:5b:7c:04:67:66:b8:d2:40:bf:b6:f1: c4:11:4f:ad:ee:6a:52:d6:79:98:95:5b:07:6c:8f: 12:8e:c7:25:fe:3e:e0:53:d9:c8:40:9d:fc:6a:22: d7:20:9e:76:a8:93:29:48:27:e2:70:9a:a9:c5:11: 74:ef:5d:9a:c7:56:bf:f9:08:98:52:68:5a:38:76: ed:fe:d8:21:d8:e5:ee:ad:81:50:b3:4d:85:57:a9: d5:03:4e:13:e8:e7:e0:df:12:e3:6c:15:b9:23:bd: 63:4f:17:e2:41:f7:71:76:cc:24:e5:7d:d2:17:ab: ed:c2:ae:b6:ac:8f:6b:75:e0:68:94:be:a3:06:31: 98:81:1f:18:8e:f1:e1:8d:f8:09:e8:0a:ee:9f:f1: 3a:7a:9a:73:ab:fb:f4:cf:8a:d0:2c:c4:3c:d3:54: c5:e6:8a:19:66:af:de:ec:12:46:05:af:4d:69:7b: 64:ed:22:d4:a7:0d:3b:b2:ae:57:8b:46:c2:a9:a3: 81:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D5:B0:DC:3A:3C:F7:13:0E:42:B3:DD:E5:32:8B:01:90:40:BE:B8 X509v3 Authority Key Identifier: keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/Q9Ww3Do89xMOQrPd5TKLAZBAvrg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.93.160.0-77.93.162.255 77.93.164.0-77.93.171.255 77.93.176.0/20 86.105.181.0/24 86.107.183.0/24 87.243.0.0/21 89.18.0.0/20 89.18.31.0/24 89.34.72.0/23 89.35.74.0/23 89.37.120.0/21 89.38.140.0/22 89.43.193.0/24 89.44.232.0/22 89.46.160.0/22 89.47.224.0/21 92.55.131.0-92.55.132.255 92.55.134.0/23 92.55.144.0-92.55.154.255 94.177.32.0/20 188.247.129.0/24 188.247.132.0/23 188.247.224.0/22 188.247.238.0-188.247.255.255 193.58.243.0/24 193.254.242.0/23 194.102.221.0/24 195.20.145.0/24 IPv6: 2a00:1480::/47 2a00:1480:5::-2a00:1480:7:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption ca:12:7a:ea:03:c1:e0:28:d6:8b:03:42:d8:23:61:54:21:80: dd:f0:91:51:85:f2:3f:de:81:9c:3c:01:cd:8e:0d:c9:0c:bc: f5:8d:83:3e:c8:72:30:da:c9:a6:6b:3a:b9:5c:d2:27:76:74: d8:7b:11:dc:55:69:d7:11:61:3b:fd:6f:d8:5b:b9:bb:db:55: 50:e9:cd:a2:29:b8:ec:93:c1:97:24:ad:4a:34:f5:2a:db:64: 9d:31:ed:fe:c5:59:e0:e8:4e:74:fe:1a:9b:2a:3a:1c:18:51: a7:7f:9f:4a:d1:07:5c:ea:07:6f:3d:c5:35:36:9c:31:ed:ab: 06:00:7e:44:6c:21:4f:c5:bd:d6:e1:af:dd:95:8f:9c:18:6f: 83:e0:f4:dc:4b:fc:83:ec:34:1e:88:57:80:19:16:ae:2f:0b: 41:0f:99:7b:69:c2:cc:15:65:2d:dd:21:61:83:b5:c9:54:de: 6b:0e:34:26:54:2d:d7:8a:29:22:0f:99:f8:84:20:68:48:78: 98:9a:cd:17:5d:2c:30:06:3d:19:31:06:4d:86:0b:07:0b:43: 05:f2:17:a1:89:77:2f:88:99:32:d0:4b:e4:8f:c0:03:2f:19: 2e:30:d9:37:46:f3:5f:05:9f:5b:15:24:cc:ce:0b:ed:1d:1a: b4:51:9e:45 -----BEGIN CERTIFICATE----- MIIF8jCCBNqgAwIBAgISAZvvGs//Z3U06druaK2UdykoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOGM2YzU4YjYwN2ZmMjNhZTcxNzVhNjE2ODJjNzU0ODBm MWUyMTQwHhcNMjYwMTI0MDgyNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2Q1YjBkYzNhM2NmNzEzMGU0MmIzZGRlNTMyOGIwMTkwNDBiZWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWzUtHmhunrG5+/XmEi58sqRuzZ2 dTSDkVbfIpkHBToLMuGnzkKhz6Pnpturc6+CnSxdgF4r5y/eJCyfuK1iW3wEZ2a4 0kC/tvHEEU+t7mpS1nmYlVsHbI8Sjscl/j7gU9nIQJ38aiLXIJ52qJMpSCficJqp xRF0712ax1a/+QiYUmhaOHbt/tgh2OXurYFQs02FV6nVA04T6Ofg3xLjbBW5I71j TxfiQfdxdswk5X3SF6vtwq62rI9rdeBolL6jBjGYgR8YjvHhjfgJ6Arun/E6eppz q/v0z4rQLMQ801TF5ooZZq/e7BJGBa9NaXtk7SLUpw07sq5Xi0bCqaOBGQIDAQAB o4IC/jCCAvowHQYDVR0OBBYEFEPVsNw6PPcTDkKz3eUyiwGQQL64MB8GA1UdIwQY MBaAFKuMbFi2B/8jrnF1phaCx1SA8eIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2Mt ODhhM2M0MWZhZWUyLzEvUTlXdzNEbzg5eE1PUXJQZDVUS0xBWkJBdnJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2MtODhhM2M0MWZhZWUy LzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBEgYIKwYBBQUHAQcBAf8EggEBMIH+MIHWBAIAATCBzzAM AwQFTV2gAwQATV2iMAwDBAJNXaQDBAJNXagDBARNXbADBABWabUDBABWa7cDBANX 8wADBARZEgADBABZEh8DBAFZIkgDBAFZI0oDBANZJXgDBAJZJowDBABZK8EDBAJZ LOgDBAJZLqADBANZL+AwDAMEAFw3gwMEAFw3hAMEAVw3hjAMAwQEXDeQAwQAXDea AwQEXrEgAwQAvPeBAwQBvPeEAwQCvPfgMAsDBAG89+4DAwO88AMEAME68wMEAcH+ 8gMEAMJm3QMEAMMUkTAjBAIAAjAdAwcBKgAUgAAAMBIDBwAqABSAAAUDBwMqABSA AAAwDQYJKoZIhvcNAQELBQADggEBAMoSeuoDweAo1osDQtgjYVQhgN3wkVGF8j/e gZw8Ac2ODckMvPWNgz7IcjDayaZrOrlc0id2dNh7EdxVadcRYTv9b9hbubvbVVDp zaIpuOyTwZckrUo09SrbZJ0x7f7FWeDoTnT+GpsqOhwYUad/n0rRB1zqB289xTU2 nDHtqwYAfkRsIU/Fvdbhr92Vj5wYb4Pg9NxL/IPsNB6IV4AZFq4vC0EPmXtpwswV ZS3dIWGDtclU3msONCZULdeKKSIPmfiEIGhIeJiazRddLDAGPRkxBk2GCwcLQwXy F6GJdy+ImTLQS+SPwAMvGS4w2TdG818Fn1sVJMzOC+0dGrRRnkU= -----END CERTIFICATE-----Generated at Mon Jan 26 23:21:17 2026 by rpki-client