This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/3zPWSVi1xKNHgi-DcSpqaMulPAM.roa File: 3zPWSVi1xKNHgi-DcSpqaMulPAM.roa (raw, json) Hash identifier: XmSVH6OWOK+57jQiUpzRVApK787x/2+FteNaQECymcY= Subject key identifier: DF:33:D6:49:58:B5:C4:A3:47:82:2F:83:71:2A:6A:68:CB:A5:3C:03 Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d Certificate serial: 019B7AC82873CA6599BBF400F2A547FC8FB2 Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/3zPWSVi1xKNHgi-DcSpqaMulPAM.roa Signing time: Thu 01 Jan 2026 18:18:16 +0000 ROA not before: Thu 01 Jan 2026 18:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13194 IP address blocks: 82.140.129.0/24 maxlen: 24 84.15.0.0/16 maxlen: 24 84.15.12.0/24 maxlen: 32 84.15.223.0/24 maxlen: 24 84.46.139.0/24 maxlen: 24 84.46.204.0/24 maxlen: 24 84.46.207.0/24 maxlen: 24 86.38.1.0/24 maxlen: 24 86.38.41.0/24 maxlen: 24 86.38.52.0/24 maxlen: 24 86.38.62.0/24 maxlen: 24 86.38.72.0/24 maxlen: 24 86.38.73.0/24 maxlen: 24 86.38.74.0/24 maxlen: 24 86.38.75.0/24 maxlen: 24 86.38.81.0/24 maxlen: 24 86.38.84.0/24 maxlen: 24 86.38.97.0/24 maxlen: 24 86.38.152.0/24 maxlen: 24 86.38.153.0/24 maxlen: 24 86.38.215.0/24 maxlen: 24 86.38.228.0/24 maxlen: 24 86.38.230.0/24 maxlen: 24 86.38.245.0/24 maxlen: 24 89.116.124.0/24 maxlen: 24 89.116.129.0/24 maxlen: 24 89.116.143.0/24 maxlen: 24 89.116.151.0/24 maxlen: 24 89.116.155.0/24 maxlen: 24 89.116.160.0/24 maxlen: 24 89.116.162.0/24 maxlen: 24 89.116.174.0/24 maxlen: 24 89.116.176.0/24 maxlen: 24 89.116.178.0/24 maxlen: 24 89.116.232.0/24 maxlen: 24 89.116.235.0/24 maxlen: 24 89.116.238.0/24 maxlen: 24 89.116.240.0/24 maxlen: 24 89.116.245.0/24 maxlen: 24 89.116.249.0/24 maxlen: 24 89.117.10.0/24 maxlen: 24 89.117.14.0/24 maxlen: 24 89.117.69.0/24 maxlen: 24 89.117.92.0/24 maxlen: 24 89.117.93.0/24 maxlen: 24 89.117.125.0/24 maxlen: 24 89.117.127.0/24 maxlen: 24 89.117.138.0/24 maxlen: 24 89.117.141.0/24 maxlen: 24 89.117.156.0/24 maxlen: 24 89.117.165.0/24 maxlen: 24 89.117.220.0/24 maxlen: 24 89.117.221.0/24 maxlen: 24 89.117.223.0/24 maxlen: 24 89.117.225.0/24 maxlen: 24 89.117.243.0/24 maxlen: 24 89.117.247.0/24 maxlen: 24 89.117.249.0/24 maxlen: 24 89.117.255.0/24 maxlen: 24 185.189.154.0/24 maxlen: 24 213.226.128.0/18 maxlen: 24 213.226.161.0/24 maxlen: 24 213.252.192.0/20 maxlen: 20 213.252.194.0/24 maxlen: 24 213.252.200.0/22 maxlen: 22 213.252.220.0/24 maxlen: 24 213.252.223.0/24 maxlen: 24 213.252.224.0/22 maxlen: 22 213.252.234.0/23 maxlen: 23 213.252.236.0/23 maxlen: 23 213.252.252.0/24 maxlen: 24 213.252.254.0/24 maxlen: 24 217.9.248.0/23 maxlen: 23 2a00:f500::/29 maxlen: 29 2a00:f502:150::/44 maxlen: 44 2a00:f502:160::/44 maxlen: 44 2a00:f502:170::/47 maxlen: 47 2a00:f502:172::/47 maxlen: 47 2a00:f502:174::/47 maxlen: 47 2a00:f502:176::/47 maxlen: 47 2a00:f502:178::/47 maxlen: 47 2a00:f502:17a::/47 maxlen: 47 2a00:f502:17c::/47 maxlen: 47 2a00:f502:17e::/47 maxlen: 47 2a00:f502:180::/47 maxlen: 47 2a00:f502:250::/44 maxlen: 44 2a00:f502:260::/44 maxlen: 44 2a00:f502:270::/47 maxlen: 47 2a00:f502:272::/47 maxlen: 47 2a00:f502:274::/47 maxlen: 47 2a00:f502:276::/47 maxlen: 47 2a00:f502:278::/47 maxlen: 47 2a00:f502:27a::/47 maxlen: 47 2a00:f502:27c::/47 maxlen: 47 2a00:f502:27e::/47 maxlen: 47 2a00:f502:280::/47 maxlen: 47 2a00:f503:150::/45 maxlen: 45 2a00:f503:158::/45 maxlen: 45 2a00:f503:160::/45 maxlen: 45 2a00:f503:168::/45 maxlen: 45 2a00:f503:170::/47 maxlen: 47 2a00:f503:172::/47 maxlen: 47 2a00:f503:174::/47 maxlen: 47 2a00:f503:176::/47 maxlen: 47 2a00:f503:178::/47 maxlen: 47 2a00:f503:17a::/47 maxlen: 47 2a00:f503:17c::/47 maxlen: 47 2a00:f503:17e::/47 maxlen: 47 2a00:f503:180::/47 maxlen: 47 2a00:f503:250::/45 maxlen: 45 2a00:f503:258::/45 maxlen: 45 2a00:f503:260::/45 maxlen: 45 2a00:f503:268::/45 maxlen: 45 2a00:f503:270::/47 maxlen: 47 2a00:f503:272::/47 maxlen: 47 2a00:f503:274::/47 maxlen: 47 2a00:f503:276::/47 maxlen: 47 2a00:f503:278::/47 maxlen: 47 2a00:f503:27a::/47 maxlen: 47 2a00:f503:27c::/47 maxlen: 47 2a00:f503:27e::/47 maxlen: 47 2a00:f503:280::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:28:73:ca:65:99:bb:f4:00:f2:a5:47:fc:8f:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d Validity Not Before: Jan 1 18:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df33d64958b5c4a347822f83712a6a68cba53c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ed:e4:a3:90:c8:54:26:30:44:3c:ce:89:52: 13:5b:ce:cb:52:37:60:ef:60:02:e6:cf:74:6a:f3: dd:7f:77:13:4c:a9:b3:d5:ac:34:25:ed:a3:d8:a0: 69:41:bd:a7:5e:cb:bd:9c:ed:44:69:e4:ee:e9:4c: 52:7b:d3:5f:4e:fd:29:fa:19:7e:e7:4c:5d:1a:af: 07:45:31:d9:02:8b:03:71:bd:93:e7:9a:f2:ec:82: 5a:fc:b3:b0:ed:09:c9:9d:17:0e:c3:85:b8:7c:d9: 57:f7:de:a6:42:44:a4:51:04:bb:3a:72:3f:dd:03: 3d:d3:7b:35:c2:9c:e1:c3:97:f6:f1:7b:9b:d9:45: d3:06:9c:d2:3b:a9:47:ca:57:ab:6a:81:3e:d4:12: 70:65:17:9a:5b:97:3d:c6:21:b3:62:c8:db:aa:ac: 0d:59:5a:a3:3d:11:7f:26:cd:c7:d9:ff:20:f3:88: c4:f9:85:37:57:d7:25:8f:27:8c:28:ab:4e:17:f0: 4f:43:b7:bb:af:70:c5:a7:ec:ae:4d:c6:c2:31:ec: ff:d5:03:8e:12:89:30:38:25:ef:6e:c6:c8:0d:61: 47:f2:0e:22:c0:a7:60:e7:44:26:40:a2:05:42:b9: 66:dd:05:c6:a3:22:76:06:91:09:85:a1:c4:87:b3: c9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:33:D6:49:58:B5:C4:A3:47:82:2F:83:71:2A:6A:68:CB:A5:3C:03 X509v3 Authority Key Identifier: keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/3zPWSVi1xKNHgi-DcSpqaMulPAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.140.129.0/24 84.15.0.0/16 84.46.139.0/24 84.46.204.0/24 84.46.207.0/24 86.38.1.0/24 86.38.41.0/24 86.38.52.0/24 86.38.62.0/24 86.38.72.0/22 86.38.81.0/24 86.38.84.0/24 86.38.97.0/24 86.38.152.0/23 86.38.215.0/24 86.38.228.0/24 86.38.230.0/24 86.38.245.0/24 89.116.124.0/24 89.116.129.0/24 89.116.143.0/24 89.116.151.0/24 89.116.155.0/24 89.116.160.0/24 89.116.162.0/24 89.116.174.0/24 89.116.176.0/24 89.116.178.0/24 89.116.232.0/24 89.116.235.0/24 89.116.238.0/24 89.116.240.0/24 89.116.245.0/24 89.116.249.0/24 89.117.10.0/24 89.117.14.0/24 89.117.69.0/24 89.117.92.0/23 89.117.125.0/24 89.117.127.0/24 89.117.138.0/24 89.117.141.0/24 89.117.156.0/24 89.117.165.0/24 89.117.220.0/23 89.117.223.0/24 89.117.225.0/24 89.117.243.0/24 89.117.247.0/24 89.117.249.0/24 89.117.255.0/24 185.189.154.0/24 213.226.128.0/18 213.252.192.0/20 213.252.220.0/24 213.252.223.0-213.252.227.255 213.252.234.0-213.252.237.255 213.252.252.0/24 213.252.254.0/24 217.9.248.0/23 IPv6: 2a00:f500::/29 Signature Algorithm: sha256WithRSAEncryption 09:ed:23:18:6f:e3:bc:d9:12:c1:45:db:ce:16:26:55:15:69: 8c:39:05:75:50:5c:75:25:8a:4c:78:6d:0d:8e:34:ca:08:4a: 6d:d3:63:d4:51:60:f6:33:1b:1f:58:de:6b:3b:0c:f8:4c:b1: 70:02:3f:6a:f0:59:93:d3:f9:6b:d0:3c:10:20:e2:1b:0a:1b: 57:d9:33:ed:91:a2:7e:00:bc:73:d4:62:5c:1e:d6:9e:ea:cd: 68:10:f6:0e:56:26:34:a6:96:79:6e:ef:4e:85:bf:24:09:4a: 25:d3:0f:fc:e6:0e:f5:9a:e1:a7:7b:6c:7a:24:02:cf:79:7f: 78:c7:a3:a7:63:8d:ba:3c:2a:1b:05:8b:11:1d:7c:96:dc:36: ae:b2:ab:72:97:3c:26:cc:30:79:e8:67:fc:d0:0c:7f:fa:4d: ca:40:5e:aa:6b:d0:d8:ca:70:e7:a2:43:e7:64:84:17:91:5c: 73:d3:c8:5a:13:00:61:1e:4b:76:f3:01:50:7f:b6:2f:de:3e: c9:98:90:35:1c:cb:a1:18:f4:6a:13:eb:7d:64:21:b6:11:3a: 7a:f2:3b:ea:bd:11:d5:fc:1e:63:b1:85:b9:60:63:7a:36:37: 82:75:2f:d9:00:f2:fb:f1:61:18:34:97:e1:b0:90:af:de:79: 95:ff:1a:bc -----BEGIN CERTIFICATE----- MIIGhzCCBW+gAwIBAgISAZt6yChzymWZu/QA8qVH/I+yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3 MTE4MGQwHhcNMjYwMTAxMTgxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjMzZDY0OTU4YjVjNGEzNDc4MjJmODM3MTJhNmE2OGNiYTUzYzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye3ko5DIVCYwRDzOiVITW87LUjdg 72AC5s90avPdf3cTTKmz1aw0Je2j2KBpQb2nXsu9nO1EaeTu6UxSe9NfTv0p+hl+ 50xdGq8HRTHZAosDcb2T55ry7IJa/LOw7QnJnRcOw4W4fNlX996mQkSkUQS7OnI/ 3QM903s1wpzhw5f28Xub2UXTBpzSO6lHyleraoE+1BJwZReaW5c9xiGzYsjbqqwN WVqjPRF/Js3H2f8g84jE+YU3V9cljyeMKKtOF/BPQ7e7r3DFp+yuTcbCMez/1QOO EokwOCXvbsbIDWFH8g4iwKdg50QmQKIFQrlm3QXGoyJ2BpEJhaHEh7PJiQIDAQAB o4IDkzCCA48wHQYDVR0OBBYEFN8z1klYtcSjR4Ivg3EqamjLpTwDMB8GA1UdIwQY MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt MDQ2ODA0MjQ4NmRjLzEvM3pQV1NWaTF4S05IZ2ktRGNTcHFhTXVsUEFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBpwYIKwYBBQUHAQcBAf8EggGWMIIBkjCCAX8EAgABMIIB dwMEAFKMgQMDAFQPAwQAVC6LAwQAVC7MAwQAVC7PAwQAViYBAwQAViYpAwQAViY0 AwQAViY+AwQCViZIAwQAViZRAwQAViZUAwQAViZhAwQBViaYAwQAVibXAwQAVibk AwQAVibmAwQAVib1AwQAWXR8AwQAWXSBAwQAWXSPAwQAWXSXAwQAWXSbAwQAWXSg AwQAWXSiAwQAWXSuAwQAWXSwAwQAWXSyAwQAWXToAwQAWXTrAwQAWXTuAwQAWXTw AwQAWXT1AwQAWXT5AwQAWXUKAwQAWXUOAwQAWXVFAwQBWXVcAwQAWXV9AwQAWXV/ AwQAWXWKAwQAWXWNAwQAWXWcAwQAWXWlAwQBWXXcAwQAWXXfAwQAWXXhAwQAWXXz AwQAWXX3AwQAWXX5AwQAWXX/AwQAub2aAwQG1eKAAwQE1fzAAwQA1fzcMAwDBADV /N8DBALV/OAwDAMEAdX86gMEAdX87AMEANX8/AMEANX8/gMEAdkJ+DANBAIAAjAH AwUDKgD1ADANBgkqhkiG9w0BAQsFAAOCAQEACe0jGG/jvNkSwUXbzhYmVRVpjDkF dVBcdSWKTHhtDY40yghKbdNj1FFg9jMbH1jeazsM+EyxcAI/avBZk9P5a9A8ECDi GwobV9kz7ZGifgC8c9RiXB7WnurNaBD2DlYmNKaWeW7vToW/JAlKJdMP/OYO9Zrh p3tseiQCz3l/eMejp2ONujwqGwWLER18ltw2rrKrcpc8Jswweehn/NAMf/pNykBe qmvQ2Mpw56JD52SEF5Fcc9PIWhMAYR5LdvMBUH+2L94+yZiQNRzLoRj0ahPrfWQh thE6evI76r0R1fweY7GFuWBjejY3gnUv2QDy+/FhGDSX4bCQr955lf8avA== -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:36 2026 by rpki-client