This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/ICj8Fi6t02YaA-jCLwPcHN6uGqc.roa File: ICj8Fi6t02YaA-jCLwPcHN6uGqc.roa (raw, json) Hash identifier: 72ZO0pvNsCtTTKokGnbOowoeWxeA2KxrecfoCsCrB8U= Subject key identifier: 20:28:FC:16:2E:AD:D3:66:1A:03:E8:C2:2F:03:DC:1C:DE:AE:1A:A7 Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528 Certificate serial: 019B783442D8A95A091D628559387EE760F1 Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/ICj8Fi6t02YaA-jCLwPcHN6uGqc.roa Signing time: Thu 01 Jan 2026 06:17:29 +0000 ROA not before: Thu 01 Jan 2026 06:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42473 IP address blocks: 37.235.3.0/24 maxlen: 24 37.235.4.0/24 maxlen: 24 37.235.5.0/24 maxlen: 24 37.235.7.0/24 maxlen: 24 37.252.224.0/19 maxlen: 32 37.252.226.0/24 maxlen: 24 37.252.228.0/24 maxlen: 32 37.252.234.0/24 maxlen: 24 37.252.243.0/24 maxlen: 24 37.252.244.0/24 maxlen: 24 37.252.251.0/24 maxlen: 24 37.252.253.0/24 maxlen: 24 45.84.252.0/24 maxlen: 24 45.132.61.0/24 maxlen: 24 45.132.62.0/23 maxlen: 24 94.16.98.0/24 maxlen: 24 94.16.100.0/24 maxlen: 24 94.16.125.0/24 maxlen: 24 94.16.126.0/24 maxlen: 24 144.208.192.0/18 maxlen: 32 144.208.204.0/24 maxlen: 24 144.208.205.0/24 maxlen: 24 144.208.206.0/24 maxlen: 24 144.208.207.0/24 maxlen: 24 144.208.212.0/22 maxlen: 32 144.208.216.0/24 maxlen: 24 144.208.217.0/24 maxlen: 24 144.208.219.0/24 maxlen: 24 144.208.221.0/24 maxlen: 24 144.208.222.0/24 maxlen: 24 144.208.223.0/24 maxlen: 24 144.208.224.0/24 maxlen: 24 144.208.225.0/24 maxlen: 24 144.208.226.0/24 maxlen: 24 144.208.228.0/24 maxlen: 24 144.208.229.0/24 maxlen: 24 144.208.230.0/24 maxlen: 24 144.208.231.0/24 maxlen: 24 144.208.232.0/24 maxlen: 24 144.208.233.0/24 maxlen: 24 144.208.235.0/24 maxlen: 24 144.208.236.0/24 maxlen: 24 144.208.237.0/24 maxlen: 24 144.208.238.0/24 maxlen: 24 144.208.240.0/24 maxlen: 24 144.208.241.0/24 maxlen: 24 144.208.242.0/24 maxlen: 24 144.208.244.0/24 maxlen: 24 144.208.254.0/24 maxlen: 24 144.208.255.0/24 maxlen: 24 176.123.54.0/23 maxlen: 23 178.255.152.0/21 maxlen: 32 185.2.176.0/22 maxlen: 32 185.2.176.0/24 maxlen: 24 185.50.232.0/23 maxlen: 23 185.50.235.0/24 maxlen: 24 185.81.206.0/24 maxlen: 24 185.81.209.0/24 maxlen: 24 185.116.96.0/24 maxlen: 24 185.116.97.0/24 maxlen: 24 185.116.98.0/24 maxlen: 24 185.116.99.0/24 maxlen: 24 185.228.148.0/22 maxlen: 22 188.65.72.0/21 maxlen: 32 188.172.192.0/18 maxlen: 32 188.172.208.0/24 maxlen: 24 188.172.230.0/23 maxlen: 23 188.172.247.0/24 maxlen: 24 188.172.249.0/24 maxlen: 24 188.172.254.0/24 maxlen: 24 193.33.114.0/23 maxlen: 32 194.1.206.0/24 maxlen: 32 213.227.160.0/19 maxlen: 32 213.227.184.0/24 maxlen: 24 217.146.0.0/19 maxlen: 24 217.146.6.0/24 maxlen: 24 217.146.7.0/24 maxlen: 24 2a00:11c0::/32 maxlen: 128 2a00:11c0:13::/48 maxlen: 48 2a00:11c0:19::/48 maxlen: 48 2a00:11c0:22::/48 maxlen: 48 2a00:11c0:24::/48 maxlen: 48 2a00:11c0:29::/48 maxlen: 48 2a00:11c0:40::/48 maxlen: 48 2a00:11c0:41::/48 maxlen: 48 2a00:11c0:42::/48 maxlen: 48 2a00:11c0:43::/48 maxlen: 48 2a00:11c0:46::/48 maxlen: 48 2a00:11c0:4a::/48 maxlen: 48 2a00:11c0:5c::/48 maxlen: 48 2a00:11c0:66::/48 maxlen: 48 2a00:11c0:6c::/48 maxlen: 48 2a00:11c0:79::/48 maxlen: 48 2a00:11c0:80::/48 maxlen: 48 2a00:11c0:83::/48 maxlen: 48 2a00:11c0:84::/48 maxlen: 48 2a00:11c0:86::/48 maxlen: 48 2a00:11c0:87::/48 maxlen: 48 2a00:11c0:88::/48 maxlen: 48 2a00:11c0:96::/48 maxlen: 48 2a00:11c0:97::/48 maxlen: 48 2a00:11c0:98::/48 maxlen: 48 2a00:11c0:99::/48 maxlen: 48 2a00:11c0:9a::/48 maxlen: 48 2a00:11c0:dc::/48 maxlen: 48 2a00:11c0:dd::/48 maxlen: 48 2a00:11c0:de::/48 maxlen: 48 2a00:11c0:1011::/48 maxlen: 48 2a00:11c0:1014::/48 maxlen: 48 2a00:11c0:1334::/48 maxlen: 48 2a00:11c0:1335::/48 maxlen: 48 2a00:11c0:1798::/48 maxlen: 48 2a00:11c0:179a::/48 maxlen: 48 2a00:11c0:179b::/48 maxlen: 48 2a00:11c0:9021::/48 maxlen: 48 2a01:aea0::/32 maxlen: 32 2a01:aea0::/40 maxlen: 40 2a01:aea0:dd1::/48 maxlen: 48 2a01:aea0:df1::/48 maxlen: 48 2a05:8900:28::/48 maxlen: 48 2a05:8900:36::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:42:d8:a9:5a:09:1d:62:85:59:38:7e:e7:60:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528 Validity Not Before: Jan 1 06:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2028fc162eadd3661a03e8c22f03dc1cdeae1aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cf:27:10:07:f4:35:c7:5d:01:d3:d0:a7:46: c4:4a:92:94:98:c9:ab:5a:ad:40:70:89:cc:cb:a8: 99:01:cb:85:c5:df:08:b7:49:f7:37:29:80:e8:8d: c8:c1:91:ce:b8:cd:67:cc:dd:89:47:ec:86:30:1b: c3:c1:f1:ed:ae:17:ac:ec:36:9d:dd:23:1a:47:73: 5b:ed:56:19:a7:d5:a1:4d:01:45:b3:5b:14:7b:2d: c0:29:d2:d8:1f:1e:7e:e9:8c:1f:74:21:7e:13:65: 8c:60:01:d0:2c:e3:a5:af:8b:e8:d1:8b:72:3b:d6: 13:60:c8:0a:47:5b:1b:79:98:c7:1c:e1:01:45:e4: 22:ab:e9:a1:6c:64:3b:90:20:ea:a3:e7:31:af:30: d0:a8:19:18:ea:9d:a1:09:68:29:ea:90:fc:3e:95: 56:8a:40:93:5f:20:0e:e3:e9:9c:bb:4d:df:5b:84: 91:19:06:9f:6a:0f:e6:56:95:cb:b8:c4:00:da:aa: 94:3b:61:b7:48:63:30:4c:46:81:88:e3:60:e1:a6: f7:90:ad:4c:2d:56:6a:c3:9e:29:c1:89:bf:61:6d: 34:40:60:61:21:39:38:89:cb:24:bd:b4:40:aa:78: d2:da:be:85:de:06:72:27:14:b8:1c:75:18:fc:57: c0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:28:FC:16:2E:AD:D3:66:1A:03:E8:C2:2F:03:DC:1C:DE:AE:1A:A7 X509v3 Authority Key Identifier: keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/ICj8Fi6t02YaA-jCLwPcHN6uGqc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.235.3.0-37.235.5.255 37.235.7.0/24 37.252.224.0/19 45.84.252.0/24 45.132.61.0-45.132.63.255 94.16.98.0/24 94.16.100.0/24 94.16.125.0-94.16.126.255 144.208.192.0/18 176.123.54.0/23 178.255.152.0/21 185.2.176.0/22 185.50.232.0/23 185.50.235.0/24 185.81.206.0/24 185.81.209.0/24 185.116.96.0/22 185.228.148.0/22 188.65.72.0/21 188.172.192.0/18 193.33.114.0/23 194.1.206.0/24 213.227.160.0/19 217.146.0.0/19 IPv6: 2a00:11c0::/32 2a01:aea0::/32 2a05:8900:28::/48 2a05:8900:36::/48 Signature Algorithm: sha256WithRSAEncryption 08:8c:12:1f:68:81:a8:b3:fe:65:07:8e:87:b2:58:09:81:36: de:b9:63:54:e7:d8:09:5a:08:af:1b:5f:81:6f:fb:e4:70:ae: 66:8b:99:64:39:e1:f3:13:07:d9:9f:ca:39:34:30:0c:9d:5d: 88:05:d7:25:81:55:46:1d:71:59:df:77:83:9c:07:7d:35:ec: 59:95:ae:8a:29:66:86:15:e3:79:b0:aa:b2:74:3b:1f:58:25: 9f:8b:34:da:36:91:85:3a:2c:77:f0:06:fc:ae:96:ac:6f:b7: b9:55:a3:64:84:b9:0a:02:8d:94:8f:0e:96:89:fb:93:d5:c1: 0d:9f:cf:2e:32:bb:b1:e9:5e:47:4d:69:8c:4c:07:39:35:e6: a7:cc:80:34:f0:01:d3:e1:63:21:95:f0:4a:65:18:9a:b2:fd: a3:ae:69:2e:f4:f3:f0:48:3e:06:f0:f1:1f:a3:a4:01:d1:1c: 47:2e:5d:9d:d5:c0:e1:b6:75:a8:6b:0b:6f:be:79:b4:4a:6b: 5f:84:1d:19:f4:6b:3a:65:11:51:99:45:c2:1c:81:06:f3:35: c3:ab:9a:03:a6:8b:89:17:be:ee:da:93:01:76:34:3c:05:e5: be:81:e7:96:3e:f4:b8:9a:1f:4c:d0:b9:29:86:49:b3:56:be: 43:8f:d8:30 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZt4NELYqVoJHWKFWTh+52DxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MzlhZmViYWNlODk5YThlZTBiYjRmOGJiNDQ3NWZlMjQ3 YTE1MjgwHhcNMjYwMTAxMDYxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDI4ZmMxNjJlYWRkMzY2MWEwM2U4YzIyZjAzZGMxY2RlYWUxYWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc8nEAf0NcddAdPQp0bESpKUmMmr Wq1AcInMy6iZAcuFxd8It0n3NymA6I3IwZHOuM1nzN2JR+yGMBvDwfHtrhes7Dad 3SMaR3Nb7VYZp9WhTQFFs1sUey3AKdLYHx5+6YwfdCF+E2WMYAHQLOOlr4vo0Yty O9YTYMgKR1sbeZjHHOEBReQiq+mhbGQ7kCDqo+cxrzDQqBkY6p2hCWgp6pD8PpVW ikCTXyAO4+mcu03fW4SRGQafag/mVpXLuMQA2qqUO2G3SGMwTEaBiONg4ab3kK1M LVZqw54pwYm/YW00QGBhITk4icskvbRAqnjS2r6F3gZyJxS4HHUY/FfAiwIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFCAo/BYurdNmGgPowi8D3BzerhqnMB8GA1UdIwQY MBaAFKU5r+us6Jmo7gu0+LtEdf4kehUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYt NzQxMzk1OTEzMTJlLzEvSUNqOEZpNnQwMllhQS1qQ0x3UGNITjZ1R3FjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYtNzQxMzk1OTEzMTJl LzEvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHtBggrBgEFBQcBBwEB/wSB3TCB2jCBrwQCAAEwgagwDAME ACXrAwMEASXrBAMEACXrBwMEBSX84AMEAC1U/DAMAwQALYQ9AwQGLYQAAwQAXhBi AwQAXhBkMAwDBABeEH0DBABeEH4DBAaQ0MADBAGwezYDBAOy/5gDBAK5ArADBAG5 MugDBAC5MusDBAC5Uc4DBAC5UdEDBAK5dGADBAK55JQDBAO8QUgDBAa8rMADBAHB IXIDBADCAc4DBAXV46ADBAXZkgAwJgQCAAIwIAMFACoAEcADBQAqAa6gAwcAKgWJ AAAoAwcAKgWJAAA2MA0GCSqGSIb3DQEBCwUAA4IBAQAIjBIfaIGos/5lB46HslgJ gTbeuWNU59gJWgivG1+Bb/vkcK5mi5lkOeHzEwfZn8o5NDAMnV2IBdclgVVGHXFZ 33eDnAd9NexZla6KKWaGFeN5sKqydDsfWCWfizTaNpGFOix38Ab8rpasb7e5VaNk hLkKAo2Ujw6WifuT1cENn88uMrux6V5HTWmMTAc5NeanzIA08AHT4WMhlfBKZRia sv2jrmku9PPwSD4G8PEfo6QB0RxHLl2d1cDhtnWoawtvvnm0SmtfhB0Z9Gs6ZRFR mUXCHIEG8zXDq5oDpouJF77u2pMBdjQ8BeW+geeWPvS4mh9M0LkphkmzVr5Dj9gw -----END CERTIFICATE-----Generated at Mon Jan 26 11:06:16 2026 by rpki-client