This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/0yiZzYOkKi3Duwj9W4iddYlKoCc.roa File: 0yiZzYOkKi3Duwj9W4iddYlKoCc.roa (raw, json) Hash identifier: bbgD3yrnyoBxoMgUPsel4d1NSmBYCiD2RxPXlsE5yU8= Subject key identifier: D3:28:99:CD:83:A4:2A:2D:C3:BB:08:FD:5B:88:9D:75:89:4A:A0:27 Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 019B7AC8DB803EBE6D96526D580FE8BCCA9E Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/0yiZzYOkKi3Duwj9W4iddYlKoCc.roa Signing time: Thu 01 Jan 2026 18:19:02 +0000 ROA not before: Thu 01 Jan 2026 18:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15557 IP address blocks: 37.64.0.0/13 maxlen: 24 46.35.0.0/19 maxlen: 24 62.8.0.0/19 maxlen: 19 62.39.0.0/16 maxlen: 24 62.62.128.0/17 maxlen: 24 62.106.128.0/17 maxlen: 24 62.129.160.0/19 maxlen: 24 62.241.64.0/18 maxlen: 24 77.128.0.0/13 maxlen: 24 77.136.0.0/16 maxlen: 24 77.137.196.0/22 maxlen: 24 77.137.200.0/21 maxlen: 24 77.137.208.0/20 maxlen: 24 77.140.0.0/15 maxlen: 24 77.142.0.0/16 maxlen: 24 77.144.0.0/12 maxlen: 24 77.192.0.0/12 maxlen: 24 78.112.0.0/12 maxlen: 24 78.155.128.0/19 maxlen: 24 79.80.0.0/12 maxlen: 24 79.174.192.0/18 maxlen: 24 80.70.32.0/20 maxlen: 24 80.118.0.0/15 maxlen: 24 80.118.4.0/24 maxlen: 24 80.124.0.0/15 maxlen: 24 80.236.0.0/17 maxlen: 24 81.1.0.0/18 maxlen: 24 81.64.0.0/14 maxlen: 24 81.65.0.0/16 maxlen: 16 81.185.0.0/16 maxlen: 24 81.220.0.0/16 maxlen: 24 82.216.0.0/16 maxlen: 24 83.141.128.0/17 maxlen: 24 84.4.0.0/14 maxlen: 24 84.55.128.0/18 maxlen: 24 84.96.0.0/13 maxlen: 24 84.205.128.0/19 maxlen: 24 84.205.144.0/20 maxlen: 20 85.68.0.0/15 maxlen: 24 85.168.0.0/14 maxlen: 24 86.64.0.0/12 maxlen: 24 86.66.127.0/24 maxlen: 24 87.231.0.0/16 maxlen: 24 88.136.0.0/13 maxlen: 24 88.136.0.0/14 maxlen: 24 88.140.0.0/15 maxlen: 24 88.142.0.0/16 maxlen: 24 88.143.251.0/24 maxlen: 24 88.143.252.0/24 maxlen: 24 88.143.253.0/24 maxlen: 24 88.143.254.0/24 maxlen: 24 88.143.255.0/24 maxlen: 24 88.219.0.0/16 maxlen: 16 89.2.0.0/15 maxlen: 24 89.156.0.0/14 maxlen: 24 91.68.0.0/14 maxlen: 24 91.68.0.0/22 maxlen: 22 91.151.112.0/20 maxlen: 24 92.88.0.0/13 maxlen: 24 93.0.0.0/11 maxlen: 24 93.191.80.0/21 maxlen: 21 95.157.192.0/18 maxlen: 18 109.0.0.0/11 maxlen: 24 141.170.216.0/21 maxlen: 24 185.147.204.0/22 maxlen: 24 194.6.128.0/19 maxlen: 19 194.183.192.0/19 maxlen: 19 194.242.176.0/20 maxlen: 20 195.3.0.0/18 maxlen: 24 195.7.96.0/19 maxlen: 24 195.98.96.0/19 maxlen: 24 195.115.0.0/16 maxlen: 24 195.132.0.0/16 maxlen: 24 195.146.192.0/19 maxlen: 24 212.30.96.0/19 maxlen: 24 212.39.128.0/19 maxlen: 24 212.94.160.0/19 maxlen: 24 212.198.0.0/16 maxlen: 24 213.128.32.0/19 maxlen: 24 213.144.192.0/19 maxlen: 24 213.169.160.0/19 maxlen: 24 213.203.64.0/18 maxlen: 24 213.223.0.0/16 maxlen: 24 213.245.0.0/16 maxlen: 24 217.19.192.0/20 maxlen: 24 217.70.80.0/20 maxlen: 24 217.112.224.0/20 maxlen: 24 2a00:6200::/29 maxlen: 48 2a00:8380::/32 maxlen: 32 2a00:8d80::/32 maxlen: 32 2a00:9380::/32 maxlen: 32 2a00:b280::/32 maxlen: 32 2a00:c780::/32 maxlen: 32 2a00:cc80::/32 maxlen: 32 2a00:d780::/32 maxlen: 32 2a00:ec80::/32 maxlen: 32 2a02:8400::/25 maxlen: 48 2a02:8400::/48 maxlen: 48 2a02:8400:11::/48 maxlen: 48 2a02:8400:12::/48 maxlen: 48 2a02:8400:13::/48 maxlen: 48 2a02:8400:14::/48 maxlen: 48 2a02:8440:5000::/36 maxlen: 36 2a04:800::/29 maxlen: 29 2a04:800::/30 maxlen: 30 2a04:807::/48 maxlen: 48 2a04:807:1::/48 maxlen: 48 2a04:807:2::/48 maxlen: 48 2a04:807:3::/48 maxlen: 48 2a04:807:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 21:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:db:80:3e:be:6d:96:52:6d:58:0f:e8:bc:ca:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Jan 1 18:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d32899cd83a42a2dc3bb08fd5b889d75894aa027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:db:ee:1e:f2:d2:8a:bb:cf:0c:c4:34:f8:c9: 6d:d7:dd:1f:4d:50:ad:ff:45:74:62:ed:c7:0c:f2: 2b:dd:d5:3f:2e:09:b4:a7:c1:05:9c:de:d7:07:3f: c1:e9:e4:36:2c:9f:56:98:b6:ea:9b:59:92:f0:f9: 18:cb:45:26:0b:e2:81:27:93:24:11:96:44:f2:3c: 29:fa:f3:99:08:be:19:23:b7:c3:b8:11:e1:a5:9e: 6a:ba:8e:aa:4d:72:42:92:5b:ab:d4:db:f1:7c:9f: 4e:0a:5c:64:71:88:4d:cd:2e:a4:86:55:90:37:74: fb:cc:8b:db:69:7f:9b:cd:81:ac:cc:72:0a:0a:0a: b2:c7:65:0d:e9:c3:19:ea:5b:06:26:b0:20:6f:db: 01:90:bd:fd:94:99:f2:fe:fa:cf:d9:c3:95:2c:b8: e6:b8:f2:20:44:10:95:8c:78:3a:67:d0:12:6f:b8: c3:a7:a0:45:e7:0f:63:4f:75:54:9d:95:a4:9e:59: e2:09:8f:74:95:65:52:18:d9:42:2d:fd:63:9b:62: 2f:12:5a:93:6f:7c:64:25:c1:18:fc:a7:fe:a8:c4: 5f:21:c5:d8:5c:d2:e6:8e:c0:76:43:ac:42:98:ad: 33:ac:89:f0:ed:02:49:d3:02:6d:54:2e:a0:11:9f: bd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:28:99:CD:83:A4:2A:2D:C3:BB:08:FD:5B:88:9D:75:89:4A:A0:27 X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/0yiZzYOkKi3Duwj9W4iddYlKoCc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.64.0.0/13 46.35.0.0/19 62.8.0.0/19 62.39.0.0/16 62.62.128.0/17 62.106.128.0/17 62.129.160.0/19 62.241.64.0/18 77.128.0.0-77.136.255.255 77.137.196.0-77.137.223.255 77.140.0.0-77.142.255.255 77.144.0.0/12 77.192.0.0/12 78.112.0.0/12 78.155.128.0/19 79.80.0.0/12 79.174.192.0/18 80.70.32.0/20 80.118.0.0/15 80.124.0.0/15 80.236.0.0/17 81.1.0.0/18 81.64.0.0/14 81.185.0.0/16 81.220.0.0/16 82.216.0.0/16 83.141.128.0/17 84.4.0.0/14 84.55.128.0/18 84.96.0.0/13 84.205.128.0/19 85.68.0.0/15 85.168.0.0/14 86.64.0.0/12 87.231.0.0/16 88.136.0.0/13 88.219.0.0/16 89.2.0.0/15 89.156.0.0/14 91.68.0.0/14 91.151.112.0/20 92.88.0.0/13 93.0.0.0/11 93.191.80.0/21 95.157.192.0/18 109.0.0.0/11 141.170.216.0/21 185.147.204.0/22 194.6.128.0/19 194.183.192.0/19 194.242.176.0/20 195.3.0.0/18 195.7.96.0/19 195.98.96.0/19 195.115.0.0/16 195.132.0.0/16 195.146.192.0/19 212.30.96.0/19 212.39.128.0/19 212.94.160.0/19 212.198.0.0/16 213.128.32.0/19 213.144.192.0/19 213.169.160.0/19 213.203.64.0/18 213.223.0.0/16 213.245.0.0/16 217.19.192.0/20 217.70.80.0/20 217.112.224.0/20 IPv6: 2a00:6200::/29 2a00:8380::/32 2a00:8d80::/32 2a00:9380::/32 2a00:b280::/32 2a00:c780::/32 2a00:cc80::/32 2a00:d780::/32 2a00:ec80::/32 2a02:8400::/25 2a04:800::/29 Signature Algorithm: sha256WithRSAEncryption 37:42:16:e1:a5:31:f4:f8:cd:3c:25:a4:42:96:89:7f:c6:87: a9:bf:2c:02:c5:b2:a8:00:61:b5:b7:04:4e:fa:8e:3b:6f:91: 06:0a:ce:f2:73:b3:bd:27:de:80:aa:e6:63:eb:68:ef:26:66: 7f:00:b4:9b:38:f6:74:59:6b:4e:99:bb:46:e2:62:a8:5a:6e: 52:93:84:f4:df:8f:c5:66:4a:ec:03:73:80:fc:cf:3b:f3:7f: 30:98:79:11:1e:ff:d4:83:d2:75:c2:b6:1f:b6:ad:d9:05:bc: 81:ff:d8:fb:7d:49:df:81:0e:b3:f4:f3:be:cd:e7:c4:bd:c7: 87:9a:a7:47:e5:ed:fb:67:4f:94:a7:e8:fa:24:06:eb:fc:fa: 34:f8:0f:58:b7:2d:4b:ed:87:82:db:f7:29:18:6f:a4:09:63: c7:e1:f5:88:72:11:20:88:1b:cf:1e:bf:fc:06:0e:c4:7b:86: e0:72:71:89:12:58:35:f9:30:41:ff:69:f0:aa:d5:71:0f:63: 91:a2:e4:99:c1:3e:c0:f1:6c:24:71:b1:1d:05:55:d3:9e:15: 69:f5:f3:f2:ac:e9:16:04:14:08:7a:44:64:9d:80:cc:2b:88: a8:01:ab:9f:96:65:9e:94:16:85:fc:6c:97:11:4c:4f:a3:fe: d5:96:df:7d -----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgISAZt6yNuAPr5tllJtWA/ovMqeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjYwMTAxMTgxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzI4OTljZDgzYTQyYTJkYzNiYjA4ZmQ1Yjg4OWQ3NTg5NGFhMDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNvuHvLSirvPDMQ0+Mlt190fTVCt /0V0Yu3HDPIr3dU/Lgm0p8EFnN7XBz/B6eQ2LJ9WmLbqm1mS8PkYy0UmC+KBJ5Mk EZZE8jwp+vOZCL4ZI7fDuBHhpZ5quo6qTXJCklur1NvxfJ9OClxkcYhNzS6khlWQ N3T7zIvbaX+bzYGszHIKCgqyx2UN6cMZ6lsGJrAgb9sBkL39lJny/vrP2cOVLLjm uPIgRBCVjHg6Z9ASb7jDp6BF5w9jT3VUnZWknlniCY90lWVSGNlCLf1jm2IvElqT b3xkJcEY/Kf+qMRfIcXYXNLmjsB2Q6xCmK0zrInw7QJJ0wJtVC6gEZ+9ZwIDAQAB o4ID+zCCA/cwHQYDVR0OBBYEFNMomc2DpCotw7sI/VuInXWJSqAnMB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvMHlpWnpZT2tLaTNEdXdqOVc0aWRkWWxLb0NjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICDwYIKwYBBQUHAQcBAf8EggH+MIIB+jCCAaEEAgABMIIB mQMDAyVAAwQFLiMAAwQFPggAAwMAPicDBAc+PoADBAc+aoADBAU+gaADBAY+8UAw CgMDB02AAwMATYgwDAMEAk2JxAMEBU2JwDAKAwMCTYwDAwBNjgMDBE2QAwMETcAD AwROcAMEBU6bgAMDBE9QAwQGT67AAwQEUEYgAwMBUHYDAwFQfAMEB1DsAAMEBlEB AAMDAlFAAwMAUbkDAwBR3AMDAFLYAwQHU42AAwMCVAQDBAZUN4ADAwNUYAMEBVTN gAMDAVVEAwMCVagDAwRWQAMDAFfnAwMDWIgDAwBY2wMDAVkCAwMCWZwDAwJbRAME BFuXcAMDA1xYAwMFXQADBANdv1ADBAZfncADAwVtAAMEA42q2AMEArmTzAMEBcIG gAMEBcK3wAMEBMLysAMEBsMDAAMEBcMHYAMEBcNiYAMDAMNzAwMAw4QDBAXDksAD BAXUHmADBAXUJ4ADBAXUXqADAwDUxgMEBdWAIAMEBdWQwAMEBdWpoAMEBtXLQAMD ANXfAwMA1fUDBATZE8ADBATZRlADBATZcOAwUwQCAAIwTQMFAyoAYgADBQAqAIOA AwUAKgCNgAMFACoAk4ADBQAqALKAAwUAKgDHgAMFACoAzIADBQAqANeAAwUAKgDs gAMFByoChAADBQMqBAgAMA0GCSqGSIb3DQEBCwUAA4IBAQA3QhbhpTH0+M08JaRC lol/xoepvywCxbKoAGG1twRO+o47b5EGCs7yc7O9J96AquZj62jvJmZ/ALSbOPZ0 WWtOmbtG4mKoWm5Sk4T034/FZkrsA3OA/M87838wmHkRHv/Ug9J1wrYftq3ZBbyB /9j7fUnfgQ6z9PO+zefEvceHmqdH5e37Z0+Up+j6JAbr/Po0+A9Yty1L7YeC2/cp GG+kCWPH4fWIchEgiBvPHr/8Bg7Ee4bgcnGJElg1+TBB/2nwqtVxD2ORouSZwT7A 8WwkcbEdBVXTnhVp9fPyrOkWBBQIekRknYDMK4ioAauflmWelBaF/GyXEUxPo/7V lt99 -----END CERTIFICATE-----Generated at Wed Jan 21 06:07:48 2026 by rpki-client