This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/syPXSex4oxjtjpAMkvFVMnIlzWI.roa File: syPXSex4oxjtjpAMkvFVMnIlzWI.roa (raw, json) Hash identifier: Yr0Uyf9fhspeiKUFEUhlmnqJAgJTobzAcASp9wbQLEA= Subject key identifier: B3:23:D7:49:EC:78:A3:18:ED:8E:90:0C:92:F1:55:32:72:25:CD:62 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019BA12859B6F3AAFE1CE7B251B1D8D71D26 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/syPXSex4oxjtjpAMkvFVMnIlzWI.roa Signing time: Fri 09 Jan 2026 05:08:54 +0000 ROA not before: Fri 09 Jan 2026 05:08:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26383 IP address blocks: 45.144.172.0/24 maxlen: 24 45.144.174.0/24 maxlen: 24 77.81.101.0/24 maxlen: 24 86.107.50.0/24 maxlen: 24 86.107.100.0/24 maxlen: 24 89.37.185.0/24 maxlen: 24 89.125.95.0/24 maxlen: 24 89.125.98.0/24 maxlen: 24 89.125.131.0/24 maxlen: 24 89.125.152.0/24 maxlen: 24 89.125.213.0/24 maxlen: 24 89.125.243.0/24 maxlen: 24 89.125.248.0/24 maxlen: 24 92.114.54.0/24 maxlen: 24 93.113.171.0/24 maxlen: 24 93.115.106.0/24 maxlen: 24 93.119.154.0/24 maxlen: 24 93.119.195.0/24 maxlen: 24 94.177.13.0/24 maxlen: 24 103.56.84.0/24 maxlen: 24 167.17.178.0/24 maxlen: 24 167.17.179.0/24 maxlen: 24 167.17.180.0/24 maxlen: 24 167.17.181.0/24 maxlen: 24 167.17.183.0/24 maxlen: 24 167.17.184.0/24 maxlen: 24 167.17.185.0/24 maxlen: 24 167.17.186.0/24 maxlen: 24 167.17.187.0/24 maxlen: 24 167.17.188.0/24 maxlen: 24 167.17.189.0/24 maxlen: 24 167.17.190.0/24 maxlen: 24 185.72.8.0/24 maxlen: 24 185.141.219.0/24 maxlen: 24 185.193.102.0/24 maxlen: 24 185.198.235.0/24 maxlen: 24 188.64.142.0/24 maxlen: 24 188.212.121.0/24 maxlen: 24 193.124.49.0/24 maxlen: 24 194.58.34.0/24 maxlen: 24 194.58.44.0/24 maxlen: 24 194.58.45.0/24 maxlen: 24 194.58.46.0/24 maxlen: 24 195.88.89.0/24 maxlen: 24 195.133.192.0/24 maxlen: 24 195.133.193.0/24 maxlen: 24 202.71.15.0/24 maxlen: 24 204.77.0.0/24 maxlen: 24 204.77.2.0/24 maxlen: 24 204.77.3.0/24 maxlen: 24 206.245.128.0/24 maxlen: 24 206.245.130.0/24 maxlen: 24 206.245.131.0/24 maxlen: 24 206.245.133.0/24 maxlen: 24 206.245.134.0/24 maxlen: 24 206.245.157.0/24 maxlen: 24 212.192.6.0/24 maxlen: 24 212.192.12.0/24 maxlen: 24 212.192.13.0/24 maxlen: 24 212.192.15.0/24 maxlen: 24 212.192.20.0/24 maxlen: 24 212.192.21.0/24 maxlen: 24 212.192.23.0/24 maxlen: 24 212.192.214.0/24 maxlen: 24 212.192.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:28:59:b6:f3:aa:fe:1c:e7:b2:51:b1:d8:d7:1d:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 9 05:08:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b323d749ec78a318ed8e900c92f155327225cd62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:85:c1:a0:13:1d:56:c0:6c:2e:8f:40:c6:ca: 23:51:37:e4:90:94:77:c9:3b:77:e5:c1:2d:0a:25: bf:77:2b:10:5a:75:ae:bd:0c:76:55:43:20:84:28: b9:58:e8:65:1c:65:b7:ea:5b:59:4e:05:93:12:32: 60:f4:26:0d:e4:58:d7:1b:78:80:bc:5a:c3:4b:ae: 88:da:38:a9:f2:92:5b:54:d8:d3:86:27:9a:5e:23: 39:4c:cd:38:42:82:e8:db:10:08:ae:6b:4f:0e:25: 08:7a:48:c6:41:c7:c6:28:13:13:ef:f3:a3:a4:a1: b6:45:44:34:2e:ff:59:17:39:af:29:ea:e8:99:54: 5b:da:dd:95:2f:f5:70:76:a4:d5:7b:1b:24:e2:5d: b9:36:8a:bc:f2:77:f1:1b:dd:4f:ef:30:c9:57:02: 44:f4:72:85:da:e6:1a:73:26:42:a3:fd:88:74:c0: e8:ee:88:9d:0f:70:4e:25:02:dd:07:a1:d8:60:51: 12:93:e0:9a:fd:22:0b:40:65:0f:3e:9c:ec:5f:e6: 47:b6:8e:bd:43:4e:fc:53:0a:2c:88:8d:e0:c3:5f: 7b:51:42:a1:8e:8b:68:30:ee:a2:c2:7f:cd:a7:49: 41:7e:6c:fa:7f:23:de:31:2a:e8:a1:3e:dd:4a:b3: 75:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:23:D7:49:EC:78:A3:18:ED:8E:90:0C:92:F1:55:32:72:25:CD:62 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/syPXSex4oxjtjpAMkvFVMnIlzWI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.172.0/24 45.144.174.0/24 77.81.101.0/24 86.107.50.0/24 86.107.100.0/24 89.37.185.0/24 89.125.95.0/24 89.125.98.0/24 89.125.131.0/24 89.125.152.0/24 89.125.213.0/24 89.125.243.0/24 89.125.248.0/24 92.114.54.0/24 93.113.171.0/24 93.115.106.0/24 93.119.154.0/24 93.119.195.0/24 94.177.13.0/24 103.56.84.0/24 167.17.178.0-167.17.181.255 167.17.183.0-167.17.190.255 185.72.8.0/24 185.141.219.0/24 185.193.102.0/24 185.198.235.0/24 188.64.142.0/24 188.212.121.0/24 193.124.49.0/24 194.58.34.0/24 194.58.44.0-194.58.46.255 195.88.89.0/24 195.133.192.0/23 202.71.15.0/24 204.77.0.0/24 204.77.2.0/23 206.245.128.0/24 206.245.130.0/23 206.245.133.0-206.245.134.255 206.245.157.0/24 212.192.6.0/24 212.192.12.0/23 212.192.15.0/24 212.192.20.0/23 212.192.23.0/24 212.192.214.0/23 Signature Algorithm: sha256WithRSAEncryption 55:71:a5:cb:f4:f7:f8:8e:30:1c:af:7e:2e:64:74:43:67:29: 1d:67:d8:76:3a:b6:b8:17:82:27:53:1b:ce:35:02:11:bc:62: be:4b:d6:b4:45:c8:a4:3a:5f:18:1c:25:f2:37:fc:fa:ca:86: 19:cb:ad:f6:31:de:d5:fe:73:76:0d:a7:23:4d:91:90:20:30: 83:19:5c:82:62:15:f5:5e:0c:48:b7:83:5b:e4:2b:ba:85:4c: ee:88:fd:b8:f8:ac:35:12:49:e0:fb:26:d3:b2:26:c2:2f:05: 71:b4:53:32:ff:30:2d:73:da:1d:d9:f1:3e:2c:a1:0f:f0:11: fd:7e:b5:c3:b6:29:5d:40:08:42:88:8a:9b:78:88:45:3a:c3: aa:0e:78:9f:bd:2d:3e:df:30:d9:d6:7d:b1:b5:d3:76:0f:b5: 0a:4c:00:47:02:a4:39:3b:cd:fb:99:15:72:9f:ac:a8:6a:2c: 5a:f8:5a:96:43:73:26:35:7f:f7:c5:b4:1b:19:ca:b1:83:f4: 59:03:d8:d1:3f:e3:e3:37:b5:b1:08:ad:75:52:64:ea:91:bf: 66:c8:cb:d8:a1:90:3e:7a:f3:0b:f7:69:a4:27:3c:0f:99:16: 39:4f:0a:07:85:84:98:33:17:8e:6f:88:79:5b:36:14:e3:36: 5e:fc:58:46 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgISAZuhKFm286r+HOeyUbHY1x0mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTA5MDUwODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzIzZDc0OWVjNzhhMzE4ZWQ4ZTkwMGM5MmYxNTUzMjcyMjVjZDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4XBoBMdVsBsLo9AxsojUTfkkJR3 yTt35cEtCiW/dysQWnWuvQx2VUMghCi5WOhlHGW36ltZTgWTEjJg9CYN5FjXG3iA vFrDS66I2jip8pJbVNjThieaXiM5TM04QoLo2xAIrmtPDiUIekjGQcfGKBMT7/Oj pKG2RUQ0Lv9ZFzmvKeromVRb2t2VL/VwdqTVexsk4l25Noq88nfxG91P7zDJVwJE 9HKF2uYacyZCo/2IdMDo7oidD3BOJQLdB6HYYFESk+Ca/SILQGUPPpzsX+ZHto69 Q078UwosiI3gw197UUKhjotoMO6iwn/Np0lBfmz6fyPeMSrooT7dSrN10wIDAQAB o4IDQTCCAz0wHQYDVR0OBBYEFLMj10nseKMY7Y6QDJLxVTJyJc1iMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvc3lQWFNleDRveGp0anBBTWt2RlZNbklseldJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBVQYIKwYBBQUHAQcBAf8EggFEMIIBQDCCATwEAgABMIIB NAMEAC2QrAMEAC2QrgMEAE1RZQMEAFZrMgMEAFZrZAMEAFkluQMEAFl9XwMEAFl9 YgMEAFl9gwMEAFl9mAMEAFl91QMEAFl98wMEAFl9+AMEAFxyNgMEAF1xqwMEAF1z agMEAF13mgMEAF13wwMEAF6xDQMEAGc4VDAMAwQBpxGyAwQBpxG0MAwDBACnEbcD BACnEb4DBAC5SAgDBAC5jdsDBAC5wWYDBAC5xusDBAC8QI4DBAC81HkDBADBfDED BADCOiIwDAMEAsI6LAMEAMI6LgMEAMNYWQMEAcOFwAMEAMpHDwMEAMxNAAMEAcxN AgMEAM71gAMEAc71gjAMAwQAzvWFAwQAzvWGAwQAzvWdAwQA1MAGAwQB1MAMAwQA 1MAPAwQB1MAUAwQA1MAXAwQB1MDWMA0GCSqGSIb3DQEBCwUAA4IBAQBVcaXL9Pf4 jjAcr34uZHRDZykdZ9h2Ora4F4InUxvONQIRvGK+S9a0RcikOl8YHCXyN/z6yoYZ y632Md7V/nN2DacjTZGQIDCDGVyCYhX1XgxIt4Nb5Cu6hUzuiP24+Kw1Ekng+ybT sibCLwVxtFMy/zAtc9od2fE+LKEP8BH9frXDtildQAhCiIqbeIhFOsOqDnifvS0+ 3zDZ1n2xtdN2D7UKTABHAqQ5O837mRVyn6yoaixa+FqWQ3MmNX/3xbQbGcqxg/RZ A9jRP+PjN7WxCK11UmTqkb9myMvYoZA+evML92mkJzwPmRY5TwoHhYSYMxeOb4h5 WzYU4zZe/FhG -----END CERTIFICATE-----Generated at Mon Jan 19 14:37:36 2026 by rpki-client