This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/z7n80BLGHDjb6YfhGkxdX4xMOMs.roa File: z7n80BLGHDjb6YfhGkxdX4xMOMs.roa (raw, json) Hash identifier: 9FePyGXXYAYaqj//OytdvMy8EySnRxX7D+gCSpgTVog= Subject key identifier: CF:B9:FC:D0:12:C6:1C:38:DB:E9:87:E1:1A:4C:5D:5F:8C:4C:38:CB Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC79E5B3C7886185900B854D8D4B5B2 Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/z7n80BLGHDjb6YfhGkxdX4xMOMs.roa Signing time: Thu 01 Jan 2026 18:17:41 +0000 ROA not before: Thu 01 Jan 2026 18:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202656 IP address blocks: 45.136.206.0/24 maxlen: 24 45.137.52.0/24 maxlen: 24 45.137.53.0/24 maxlen: 24 45.137.55.0/24 maxlen: 24 45.137.191.0/24 maxlen: 24 45.139.28.0/24 maxlen: 24 45.139.31.0/24 maxlen: 24 45.140.171.0/24 maxlen: 24 45.140.173.0/24 maxlen: 24 45.141.186.0/24 maxlen: 24 45.141.187.0/24 maxlen: 24 45.141.198.0/23 maxlen: 23 45.145.162.0/24 maxlen: 24 45.147.1.0/24 maxlen: 24 45.149.83.0/24 maxlen: 24 45.152.225.0/24 maxlen: 24 45.154.162.0/24 maxlen: 24 85.202.166.0/24 maxlen: 24 85.202.167.0/24 maxlen: 24 91.191.186.0/24 maxlen: 24 91.212.82.0/24 maxlen: 24 91.220.84.0/24 maxlen: 24 91.220.90.0/24 maxlen: 24 91.220.126.0/24 maxlen: 24 91.221.38.0/24 maxlen: 24 92.249.13.0/24 maxlen: 24 92.249.14.0/24 maxlen: 24 193.150.98.0/24 maxlen: 24 193.150.170.0/24 maxlen: 24 193.150.171.0/24 maxlen: 24 193.163.199.0/24 maxlen: 24 194.33.8.0/24 maxlen: 24 194.33.9.0/24 maxlen: 24 194.55.103.0/24 maxlen: 24 194.55.104.0/24 maxlen: 24 194.61.76.0/24 maxlen: 24 194.61.233.0/24 maxlen: 24 194.147.84.0/24 maxlen: 24 194.147.85.0/24 maxlen: 24 195.245.110.0/24 maxlen: 24 213.139.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:9e:5b:3c:78:86:18:59:00:b8:54:d8:d4:b5:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfb9fcd012c61c38dbe987e11a4c5d5f8c4c38cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f8:4f:cc:f0:80:23:59:27:63:31:f2:c5:b9: de:a9:32:bc:38:ae:2f:b7:71:7a:4a:7f:bb:ee:63: e9:63:9d:63:20:7c:66:dd:30:ac:47:e3:f5:0e:f8: cf:40:2c:61:4d:75:f1:55:7a:49:28:04:2f:ce:b3: 82:d1:a6:e6:e0:a0:da:85:48:8b:df:9b:5f:50:bd: 88:4f:ec:60:61:64:4c:0c:ce:80:7b:5c:aa:e3:7a: 2c:3f:4c:54:da:37:d6:79:f5:bf:d6:fa:31:e6:ef: 74:25:b9:2f:c1:83:43:3a:f4:8a:41:98:41:30:cb: aa:cf:94:41:8f:aa:12:9b:f6:f1:36:32:3a:b9:6f: dd:3b:26:3b:13:be:0a:c0:6a:3f:f0:97:4b:eb:de: 94:95:af:10:75:a9:4f:73:4b:cf:44:43:51:06:74: 52:d0:09:05:33:fe:29:f7:3e:82:39:15:82:fb:7f: a8:4c:7e:5d:ce:af:6b:09:7c:3e:fd:86:92:c6:84: e8:31:d1:c6:90:ef:4e:80:45:73:d0:29:1d:54:c8: fe:a7:b6:9d:95:31:46:70:7c:80:84:0a:3e:e9:19: 94:d1:37:a5:d5:5a:3e:d3:b5:ce:2b:c2:70:98:4e: 31:b3:2c:4a:18:3e:66:c9:ad:71:f5:31:2f:3c:f7: da:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B9:FC:D0:12:C6:1C:38:DB:E9:87:E1:1A:4C:5D:5F:8C:4C:38:CB X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/z7n80BLGHDjb6YfhGkxdX4xMOMs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.206.0/24 45.137.52.0/23 45.137.55.0/24 45.137.191.0/24 45.139.28.0/24 45.139.31.0/24 45.140.171.0/24 45.140.173.0/24 45.141.186.0/23 45.141.198.0/23 45.145.162.0/24 45.147.1.0/24 45.149.83.0/24 45.152.225.0/24 45.154.162.0/24 85.202.166.0/23 91.191.186.0/24 91.212.82.0/24 91.220.84.0/24 91.220.90.0/24 91.220.126.0/24 91.221.38.0/24 92.249.13.0-92.249.14.255 193.150.98.0/24 193.150.170.0/23 193.163.199.0/24 194.33.8.0/23 194.55.103.0-194.55.104.255 194.61.76.0/24 194.61.233.0/24 194.147.84.0/23 195.245.110.0/24 213.139.194.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:65:99:fd:b6:01:7f:3f:a6:c6:9a:43:89:7d:fe:1a:db:d7: 09:ee:aa:07:28:49:b2:a3:50:fd:94:d5:66:2c:52:f3:99:d7: 21:94:58:1e:78:23:c4:35:03:b0:ba:e0:ec:89:a6:0e:6b:75: 01:93:00:7c:42:d5:17:34:3a:3c:1a:a3:a6:a4:4d:b7:1e:04: ca:b9:90:24:9d:2b:f5:18:7d:c8:be:56:22:53:24:32:1d:09: b6:39:97:23:1e:c4:2f:ff:1c:4a:d3:18:f9:f1:d3:4d:17:80: 15:b5:48:ca:f9:62:ba:8b:90:11:38:4c:c6:b3:e2:ff:da:b6: 73:e6:9f:95:6c:3f:8e:ec:84:f5:62:00:8e:4a:bc:2d:81:a1: 43:c8:a7:53:7b:42:d6:4e:2d:e8:a7:f6:c7:f0:c6:2c:67:2a: a0:fb:45:54:49:35:04:43:df:08:27:c2:a4:42:c4:4e:83:30: 62:cb:16:ad:32:65:b7:17:c1:fb:1c:2b:bf:fa:46:64:ce:39: 1f:ba:9f:b3:8b:02:86:6f:37:a8:cd:05:80:70:3d:25:8d:71: 59:4a:9c:68:66:bd:6d:c0:ca:7b:4f:0b:b9:04:1a:ab:c7:92: e5:ec:66:ba:73:b4:0d:13:07:85:4b:18:ca:6d:30:a8:87:c3: 1b:e7:8d:3f -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgISAZt6x55bPHiGGFkAuFTY1LWyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmI5ZmNkMDEyYzYxYzM4ZGJlOTg3ZTExYTRjNWQ1ZjhjNGMzOGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/hPzPCAI1knYzHyxbneqTK8OK4v t3F6Sn+77mPpY51jIHxm3TCsR+P1DvjPQCxhTXXxVXpJKAQvzrOC0abm4KDahUiL 35tfUL2IT+xgYWRMDM6Ae1yq43osP0xU2jfWefW/1vox5u90JbkvwYNDOvSKQZhB MMuqz5RBj6oSm/bxNjI6uW/dOyY7E74KwGo/8JdL696Ula8QdalPc0vPRENRBnRS 0AkFM/4p9z6CORWC+3+oTH5dzq9rCXw+/YaSxoToMdHGkO9OgEVz0CkdVMj+p7ad lTFGcHyAhAo+6RmU0Tel1Vo+07XOK8JwmE4xsyxKGD5mya1x9TEvPPfa2wIDAQAB o4IC3jCCAtowHQYDVR0OBBYEFM+5/NASxhw42+mH4RpMXV+MTDjLMB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvejduODBCTEdIRGpiNllmaEdreGRYNHhNT01zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHzBggrBgEFBQcBBwEB/wSB4zCB4DCB3QQCAAEwgdYDBAAt iM4DBAEtiTQDBAAtiTcDBAAtib8DBAAtixwDBAAtix8DBAAtjKsDBAAtjK0DBAEt jboDBAEtjcYDBAAtkaIDBAAtkwEDBAAtlVMDBAAtmOEDBAAtmqIDBAFVyqYDBABb v7oDBABb1FIDBABb3FQDBABb3FoDBABb3H4DBABb3SYwDAMEAFz5DQMEAFz5DgME AMGWYgMEAcGWqgMEAMGjxwMEAcIhCDAMAwQAwjdnAwQAwjdoAwQAwj1MAwQAwj3p AwQBwpNUAwQAw/VuAwQA1YvCMA0GCSqGSIb3DQEBCwUAA4IBAQCeZZn9tgF/P6bG mkOJff4a29cJ7qoHKEmyo1D9lNVmLFLzmdchlFgeeCPENQOwuuDsiaYOa3UBkwB8 QtUXNDo8GqOmpE23HgTKuZAknSv1GH3IvlYiUyQyHQm2OZcjHsQv/xxK0xj58dNN F4AVtUjK+WK6i5AROEzGs+L/2rZz5p+VbD+O7IT1YgCOSrwtgaFDyKdTe0LWTi3o p/bH8MYsZyqg+0VUSTUEQ98IJ8KkQsROgzBiyxatMmW3F8H7HCu/+kZkzjkfup+z iwKGbzeozQWAcD0ljXFZSpxoZr1twMp7Twu5BBqrx5Ll7Ga6c7QNEweFSxjKbTCo h8Mb540/ -----END CERTIFICATE-----Generated at Mon Jan 19 20:37:17 2026 by rpki-client