This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/tZHpw1VfKZ34bSWJyi65qe_TC3g.roa File: tZHpw1VfKZ34bSWJyi65qe_TC3g.roa (raw, json) Hash identifier: QIR8e4kDrB11fofYGNbW3NWNFDSUPStCxw+N6AQTS1A= Subject key identifier: B5:91:E9:C3:55:5F:29:9D:F8:6D:25:89:CA:2E:B9:A9:EF:D3:0B:78 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA4179E89E6B3427BA4A5FF608C7914 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/tZHpw1VfKZ34bSWJyi65qe_TC3g.roa Signing time: Thu 01 Jan 2026 22:18:30 +0000 ROA not before: Thu 01 Jan 2026 22:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209641 IP address blocks: 45.89.66.0/24 maxlen: 24 45.89.67.0/24 maxlen: 24 45.128.176.0/24 maxlen: 24 45.128.177.0/24 maxlen: 24 45.128.178.0/24 maxlen: 24 45.128.179.0/24 maxlen: 24 45.132.252.0/24 maxlen: 24 45.133.247.0/24 maxlen: 24 91.217.80.0/24 maxlen: 24 94.142.138.0/24 maxlen: 24 94.142.139.0/24 maxlen: 24 94.142.140.0/24 maxlen: 24 94.142.141.0/24 maxlen: 24 94.142.142.0/24 maxlen: 24 185.5.248.0/22 maxlen: 22 185.5.248.0/23 maxlen: 23 185.5.250.0/23 maxlen: 23 185.5.250.0/24 maxlen: 24 185.105.116.0/24 maxlen: 24 185.105.117.0/24 maxlen: 24 185.125.216.0/22 maxlen: 22 185.125.218.0/23 maxlen: 23 185.200.188.0/24 maxlen: 24 193.109.85.0/24 maxlen: 24 193.124.176.0/20 maxlen: 20 193.124.176.0/22 maxlen: 22 193.124.176.0/24 maxlen: 24 193.124.177.0/24 maxlen: 24 193.124.178.0/24 maxlen: 24 193.124.179.0/24 maxlen: 24 193.124.184.0/21 maxlen: 21 193.124.184.0/24 maxlen: 24 193.124.191.0/24 maxlen: 24 193.168.224.0/24 maxlen: 24 194.67.196.0/22 maxlen: 22 194.67.202.0/24 maxlen: 24 194.67.203.0/24 maxlen: 24 194.67.204.0/22 maxlen: 22 194.67.208.0/20 maxlen: 20 195.47.250.0/24 maxlen: 24 2a0a:9300:2::/48 maxlen: 48 2a0a:9300:d0::/48 maxlen: 48 2a0a:9300:d1::/48 maxlen: 48 2a0a:9300:d2::/48 maxlen: 48 2a0a:9302:1::/48 maxlen: 48 2a0a:9307::/32 maxlen: 32 2a0d:2dc0::/32 maxlen: 32 2a0d:2dc1::/32 maxlen: 32 2a0d:2dc2::/32 maxlen: 32 2a0d:2dc3::/32 maxlen: 32 2a0e:d603::/32 maxlen: 32 2a0f:7b82::/32 maxlen: 32 2a0f:7b83::/32 maxlen: 32 2a0f:7b84::/32 maxlen: 32 2a0f:7b85::/32 maxlen: 32 2a0f:7b86::/32 maxlen: 32 2a0f:7b87::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:17:9e:89:e6:b3:42:7b:a4:a5:ff:60:8c:79:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b591e9c3555f299df86d2589ca2eb9a9efd30b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:4f:c4:17:93:a6:e6:2f:44:7e:b4:7d:95:5a: 09:a9:2a:ec:c7:fe:95:86:7d:29:27:71:83:f5:93: 61:b7:0e:96:13:98:4c:9e:a3:4e:c9:08:a6:29:26: 5d:8e:0b:42:ae:f5:37:77:93:d6:eb:e2:e9:e6:fe: fe:b6:18:82:6e:c7:62:1e:56:b4:b3:f2:64:47:db: 30:d1:a7:41:07:f1:fd:8f:4c:3c:4d:76:1e:7e:35: 67:f3:c0:0a:a2:5c:f1:62:9d:4e:ba:21:18:20:90: 77:e7:6c:42:05:ee:0a:8d:f8:38:da:76:89:c7:46: 14:74:af:10:2d:6a:8d:9a:98:60:9b:4b:6a:43:32: 5e:98:f7:fd:56:f3:82:43:87:f6:c2:ba:a5:32:3c: 70:49:61:ad:22:04:64:b1:72:d4:cf:84:53:1d:4a: 2b:17:dc:a5:6c:45:4d:0f:8d:75:8d:4f:8e:28:ef: 1f:25:e1:94:50:0a:0f:5e:a3:5d:bc:2f:ae:2d:0b: 4f:98:f5:cd:94:e6:52:0e:53:fa:1a:e2:d7:62:54: e6:d0:73:24:e2:36:d6:ff:62:c9:10:ff:0c:f6:97: b4:c5:58:29:2e:c7:58:6b:6b:06:d9:d8:03:48:b8: 78:fa:54:ec:23:e0:06:6f:96:b0:37:24:f7:16:23: 0e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:91:E9:C3:55:5F:29:9D:F8:6D:25:89:CA:2E:B9:A9:EF:D3:0B:78 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/tZHpw1VfKZ34bSWJyi65qe_TC3g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.66.0/23 45.128.176.0/22 45.132.252.0/24 45.133.247.0/24 91.217.80.0/24 94.142.138.0-94.142.142.255 185.5.248.0/22 185.105.116.0/23 185.125.216.0/22 185.200.188.0/24 193.109.85.0/24 193.124.176.0/20 193.168.224.0/24 194.67.196.0/22 194.67.202.0-194.67.223.255 195.47.250.0/24 IPv6: 2a0a:9300:2::/48 2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff 2a0a:9302:1::/48 2a0a:9307::/32 2a0d:2dc0::/30 2a0e:d603::/32 2a0f:7b82::-2a0f:7b87:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption c9:2c:88:da:85:a8:39:ec:d1:01:f2:57:34:b4:a4:08:26:dc: cd:f0:bf:98:94:ec:cb:41:ee:9a:8f:4e:f7:d1:2f:35:09:37: 72:c1:a4:11:93:b9:a1:17:b9:0f:03:66:82:90:6f:ca:56:f9: 25:90:eb:90:63:56:cf:05:d4:94:99:81:c6:f2:96:62:ee:cd: ac:02:dc:63:4c:5d:bf:17:68:77:cc:a9:45:d8:10:e9:04:d4: d2:db:db:20:12:d6:07:fe:d8:bf:f1:33:d8:c4:8e:68:69:97: 04:b9:ca:4a:64:ee:7f:a7:e5:75:11:cc:d7:97:6a:42:7f:cf: 74:de:06:bd:3e:b2:c1:4f:d8:5c:28:19:a0:f3:74:6e:93:ef: 1c:98:fc:54:35:93:6c:af:ef:8f:b1:02:bf:4e:b5:98:27:ee: 49:e5:c0:26:1b:4f:e8:33:bc:fa:f4:c8:79:89:30:27:4a:2e: 09:b0:38:f9:51:71:3a:3f:d2:04:78:87:79:f6:b1:97:f1:ff: 02:cb:97:9a:91:f3:d1:37:a9:3d:02:cb:26:11:07:d6:a3:d4: d4:c9:41:2a:8c:a0:54:ef:0d:76:c0:44:c1:00:26:8a:21:1c: ba:3a:ca:ba:5a:ee:15:c1:ba:70:1c:94:ac:63:ef:34:bf:a5: 33:33:b6:d0 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZt7pBeeieazQnukpf9gjHkUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTkxZTljMzU1NWYyOTlkZjg2ZDI1ODljYTJlYjlhOWVmZDMwYjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/E/EF5Om5i9EfrR9lVoJqSrsx/6V hn0pJ3GD9ZNhtw6WE5hMnqNOyQimKSZdjgtCrvU3d5PW6+Lp5v7+thiCbsdiHla0 s/JkR9sw0adBB/H9j0w8TXYefjVn88AKolzxYp1OuiEYIJB352xCBe4Kjfg42naJ x0YUdK8QLWqNmphgm0tqQzJemPf9VvOCQ4f2wrqlMjxwSWGtIgRksXLUz4RTHUor F9ylbEVND411jU+OKO8fJeGUUAoPXqNdvC+uLQtPmPXNlOZSDlP6GuLXYlTm0HMk 4jbW/2LJEP8M9pe0xVgpLsdYa2sG2dgDSLh4+lTsI+AGb5awNyT3FiMOjwIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFLWR6cNVXymd+G0licouuanv0wt4MB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvdFpIcHcxVmZLWjM0YlNXSnlpNjVxZV9UQzNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHeBggrBgEFBQcBBwEB/wSBzjCByzB2BAIAATBwAwQBLVlC AwQCLYCwAwQALYT8AwQALYX3AwQAW9lQMAwDBAFejooDBABejo4DBAK5BfgDBAG5 aXQDBAK5fdgDBAC5yLwDBADBbVUDBATBfLADBADBqOADBALCQ8QwDAMEAcJDygME BcJDwAMEAMMv+jBRBAIAAjBLAwcAKgqTAAACMBIDBwQqCpMAANADBwAqCpMAANID BwAqCpMCAAEDBQAqCpMHAwUCKg0twAMFACoO1gMwDgMFASoPe4IDBQMqD3uAMA0G CSqGSIb3DQEBCwUAA4IBAQDJLIjahag57NEB8lc0tKQIJtzN8L+YlOzLQe6aj073 0S81CTdywaQRk7mhF7kPA2aCkG/KVvklkOuQY1bPBdSUmYHG8pZi7s2sAtxjTF2/ F2h3zKlF2BDpBNTS29sgEtYH/ti/8TPYxI5oaZcEucpKZO5/p+V1EczXl2pCf890 3ga9PrLBT9hcKBmg83Ruk+8cmPxUNZNsr++PsQK/TrWYJ+5J5cAmG0/oM7z69Mh5 iTAnSi4JsDj5UXE6P9IEeId59rGX8f8Cy5eakfPRN6k9AssmEQfWo9TUyUEqjKBU 7w12wETBACaKIRy6Osq6Wu4VwbpwHJSsY+80v6UzM7bQ -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:58 2026 by rpki-client