This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8p6db2fhNzO1-ABLEKp01WHHRdg.roa File: 8p6db2fhNzO1-ABLEKp01WHHRdg.roa (raw, json) Hash identifier: s73N/UD6u3a4jxdr1Y8CKR5xQI0aI4bbCHfNEXVct2c= Subject key identifier: F2:9E:9D:6F:67:E1:37:33:B5:F8:00:4B:10:AA:74:D5:61:C7:45:D8 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B791153EB1F175236F964F6F0D037CE27 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8p6db2fhNzO1-ABLEKp01WHHRdg.roa Signing time: Thu 01 Jan 2026 10:18:57 +0000 ROA not before: Thu 01 Jan 2026 10:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 45.43.136.0/24 maxlen: 24 45.43.138.0/24 maxlen: 24 45.43.139.0/24 maxlen: 24 45.43.153.0/24 maxlen: 24 45.43.164.0/23 maxlen: 23 64.137.8.0/24 maxlen: 24 64.137.10.0/23 maxlen: 23 64.137.14.0/23 maxlen: 23 64.137.18.0/23 maxlen: 23 64.137.42.0/23 maxlen: 23 64.137.48.0/23 maxlen: 23 64.137.58.0/23 maxlen: 23 64.137.60.0/22 maxlen: 22 64.137.73.0/24 maxlen: 24 64.137.74.0/24 maxlen: 24 64.137.77.0/24 maxlen: 24 64.137.78.0/24 maxlen: 24 64.137.80.0/22 maxlen: 22 64.137.89.0/24 maxlen: 24 64.137.92.0/23 maxlen: 23 64.137.94.0/23 maxlen: 23 64.137.96.0/22 maxlen: 22 64.137.100.0/23 maxlen: 23 104.143.232.0/21 maxlen: 21 104.143.240.0/22 maxlen: 22 104.143.248.0/21 maxlen: 24 104.222.190.0/24 maxlen: 24 104.233.31.0/24 maxlen: 24 104.233.32.0/20 maxlen: 20 104.233.57.0/24 maxlen: 24 104.233.60.0/24 maxlen: 24 104.233.61.0/24 maxlen: 24 104.233.62.0/24 maxlen: 24 104.238.15.0/24 maxlen: 24 104.238.16.0/24 maxlen: 24 104.238.18.0/24 maxlen: 24 104.238.22.0/24 maxlen: 24 104.238.25.0/24 maxlen: 24 104.239.9.0/24 maxlen: 24 104.239.45.0/24 maxlen: 24 104.239.46.0/24 maxlen: 24 104.239.48.0/24 maxlen: 24 104.239.95.0/24 maxlen: 24 104.239.99.0/24 maxlen: 24 104.239.110.0/24 maxlen: 24 104.249.29.0/24 maxlen: 24 104.249.32.0/22 maxlen: 22 104.249.36.0/24 maxlen: 24 104.249.37.0/24 maxlen: 24 104.249.55.0/24 maxlen: 24 104.250.192.0/21 maxlen: 21 104.250.208.0/20 maxlen: 20 138.128.151.0/24 maxlen: 24 138.128.153.0/24 maxlen: 24 216.173.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:53:eb:1f:17:52:36:f9:64:f6:f0:d0:37:ce:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f29e9d6f67e13733b5f8004b10aa74d561c745d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d4:9a:cb:91:49:d5:fe:f9:77:0c:9f:76:4d: 8e:73:22:64:7f:00:5d:22:ce:0a:e5:d6:2f:d0:18: 58:30:90:03:ec:eb:f3:30:23:5e:08:f5:20:de:93: 10:82:05:15:bb:0c:cc:7e:3e:7d:93:db:af:01:0d: 76:1f:31:70:f0:8e:6f:a7:95:c9:c7:72:8f:06:1c: 38:74:cb:c3:a4:28:79:d6:99:4a:23:eb:48:c7:aa: 1b:45:bd:a8:83:ae:cd:bc:24:ce:01:66:89:69:4c: ff:4f:ba:6e:aa:a0:57:d0:1c:46:1d:55:61:be:ab: 60:c6:f6:95:42:d1:23:e1:7e:4b:99:64:19:2b:c2: e8:3f:d8:8a:97:b8:80:08:b8:cc:6e:fc:38:3f:17: 17:a2:8d:e0:9b:e8:18:3b:11:4f:3a:96:a6:75:41: d5:9a:19:90:2e:b2:89:a1:5c:1e:14:c9:02:a3:82: 76:bf:de:a9:3b:5b:1b:d7:20:2a:ad:49:c6:74:00: 7d:65:79:41:88:ab:f8:38:92:81:a3:8a:28:94:b9: 6a:be:38:8a:95:2d:7f:ec:84:4e:e1:29:ac:be:78: 36:36:e5:b1:93:05:eb:97:33:c4:19:c9:49:ef:43: b4:66:34:dd:16:7b:0f:09:af:90:93:ac:0c:b4:03: 0b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9E:9D:6F:67:E1:37:33:B5:F8:00:4B:10:AA:74:D5:61:C7:45:D8 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8p6db2fhNzO1-ABLEKp01WHHRdg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.43.136.0/24 45.43.138.0/23 45.43.153.0/24 45.43.164.0/23 64.137.8.0/24 64.137.10.0/23 64.137.14.0/23 64.137.18.0/23 64.137.42.0/23 64.137.48.0/23 64.137.58.0-64.137.63.255 64.137.73.0-64.137.74.255 64.137.77.0-64.137.78.255 64.137.80.0/22 64.137.89.0/24 64.137.92.0-64.137.101.255 104.143.232.0-104.143.243.255 104.143.248.0/21 104.222.190.0/24 104.233.31.0-104.233.47.255 104.233.57.0/24 104.233.60.0-104.233.62.255 104.238.15.0-104.238.16.255 104.238.18.0/24 104.238.22.0/24 104.238.25.0/24 104.239.9.0/24 104.239.45.0-104.239.46.255 104.239.48.0/24 104.239.95.0/24 104.239.99.0/24 104.239.110.0/24 104.249.29.0/24 104.249.32.0-104.249.37.255 104.249.55.0/24 104.250.192.0/21 104.250.208.0/20 138.128.151.0/24 138.128.153.0/24 216.173.111.0/24 Signature Algorithm: sha256WithRSAEncryption 83:8c:11:97:df:0a:06:3f:3d:12:ff:e6:de:dd:dc:69:1c:5e: fd:85:80:5f:9a:cd:c0:e8:70:a8:35:76:bf:97:a9:f2:ca:8b: a7:ad:fa:da:80:58:a2:4d:62:6c:b9:e1:69:a7:90:5e:c5:8f: 5c:ac:d9:0e:24:43:8d:93:81:b4:a2:09:2f:e2:5e:d9:cc:92: ff:e1:06:4f:4f:ea:94:ed:a5:18:ef:bb:56:4a:6f:23:df:93: b7:5b:f9:54:83:82:d8:a3:3b:93:9e:28:36:29:20:89:ec:0c: 1c:ae:32:5f:fd:70:a6:16:a5:eb:da:79:95:dc:b9:93:74:d9: c0:4c:fe:9a:24:3a:b9:75:76:b3:88:97:c3:23:81:ef:4e:c9: 81:82:8d:b1:63:b4:ab:28:83:a8:80:87:02:47:b3:60:7c:bd: 7b:d2:6a:37:19:14:12:78:a2:33:69:ed:d0:7e:3a:25:00:fa: 22:f9:3f:45:75:17:c2:3a:52:ab:a0:7e:53:41:bd:63:58:12: 30:73:40:6d:d6:e1:59:04:2f:37:b2:82:7e:91:85:cb:18:7d: 14:2d:12:55:1d:e4:ab:63:34:55:25:da:b2:30:53:c3:11:71: 0b:a1:5d:3b:26:ed:55:f7:da:c1:ac:80:51:9d:06:39:4b:fb: d5:5a:74:99 -----BEGIN CERTIFICATE----- MIIGQTCCBSmgAwIBAgISAZt5EVPrHxdSNvlk9vDQN84nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjllOWQ2ZjY3ZTEzNzMzYjVmODAwNGIxMGFhNzRkNTYxYzc0NWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tSay5FJ1f75dwyfdk2OcyJkfwBd Is4K5dYv0BhYMJAD7OvzMCNeCPUg3pMQggUVuwzMfj59k9uvAQ12HzFw8I5vp5XJ x3KPBhw4dMvDpCh51plKI+tIx6obRb2og67NvCTOAWaJaUz/T7puqqBX0BxGHVVh vqtgxvaVQtEj4X5LmWQZK8LoP9iKl7iACLjMbvw4PxcXoo3gm+gYOxFPOpamdUHV mhmQLrKJoVweFMkCo4J2v96pO1sb1yAqrUnGdAB9ZXlBiKv4OJKBo4oolLlqvjiK lS1/7IRO4Smsvng2NuWxkwXrlzPEGclJ70O0ZjTdFnsPCa+Qk6wMtAMLmQIDAQAB o4IDTTCCA0kwHQYDVR0OBBYEFPKenW9n4TcztfgASxCqdNVhx0XYMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvOHA2ZGIyZmhOek8xLUFCTEVLcDAxV0hIUmRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBYQYIKwYBBQUHAQcBAf8EggFQMIIBTDCCAUgEAgABMIIB QAMEAC0riAMEAS0rigMEAC0rmQMEAS0rpAMEAECJCAMEAUCJCgMEAUCJDgMEAUCJ EgMEAUCJKgMEAUCJMDAMAwQBQIk6AwQGQIkAMAwDBABAiUkDBABAiUowDAMEAECJ TQMEAECJTgMEAkCJUAMEAECJWTAMAwQCQIlcAwQBQIlkMAwDBANoj+gDBAJoj/AD BANoj/gDBABo3r4wDAMEAGjpHwMEBGjpIAMEAGjpOTAMAwQCaOk8AwQAaOk+MAwD BABo7g8DBABo7hADBABo7hIDBABo7hYDBABo7hkDBABo7wkwDAMEAGjvLQMEAGjv LgMEAGjvMAMEAGjvXwMEAGjvYwMEAGjvbgMEAGj5HTAMAwQFaPkgAwQBaPkkAwQA aPk3AwQDaPrAAwQEaPrQAwQAioCXAwQAioCZAwQA2K1vMA0GCSqGSIb3DQEBCwUA A4IBAQCDjBGX3woGPz0S/+be3dxpHF79hYBfms3A6HCoNXa/l6nyyounrfragFii TWJsueFpp5BexY9crNkOJEONk4G0ogkv4l7ZzJL/4QZPT+qU7aUY77tWSm8j35O3 W/lUg4LYozuTnig2KSCJ7AwcrjJf/XCmFqXr2nmV3LmTdNnATP6aJDq5dXaziJfD I4HvTsmBgo2xY7SrKIOogIcCR7NgfL170mo3GRQSeKIzae3QfjolAPoi+T9FdRfC OlKroH5TQb1jWBIwc0Bt1uFZBC83soJ+kYXLGH0ULRJVHeSrYzRVJdqyMFPDEXEL oV07Ju1V99rBrIBRnQY5S/vVWnSZ -----END CERTIFICATE-----Generated at Fri Jan 2 02:36:36 2026 by rpki-client