This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/cWy2EfUf6WdRB-2B1LrGbN_3HXQ.roa File: cWy2EfUf6WdRB-2B1LrGbN_3HXQ.roa (raw, json) Hash identifier: uDtCdq06p+axb43wcNWT1J9PQpUk92IGa/UYeQCcCNc= Subject key identifier: 71:6C:B6:11:F5:1F:E9:67:51:07:ED:81:D4:BA:C6:6C:DF:F7:1D:74 Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 019B7AC8E87BF81DF863D15851F7931B7B44 Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/cWy2EfUf6WdRB-2B1LrGbN_3HXQ.roa Signing time: Thu 01 Jan 2026 18:19:05 +0000 ROA not before: Thu 01 Jan 2026 18:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 37.64.0.0/13 maxlen: 24 46.35.0.0/19 maxlen: 24 46.165.64.0/18 maxlen: 24 62.8.0.0/19 maxlen: 24 62.39.0.0/16 maxlen: 24 62.62.128.0/17 maxlen: 24 62.62.169.0/24 maxlen: 24 62.85.128.0/19 maxlen: 24 62.106.128.0/17 maxlen: 24 62.129.160.0/19 maxlen: 24 62.241.64.0/18 maxlen: 24 77.84.0.0/16 maxlen: 24 77.128.0.0/13 maxlen: 24 77.136.0.0/16 maxlen: 24 77.137.196.0/22 maxlen: 24 77.137.200.0/21 maxlen: 24 77.137.208.0/20 maxlen: 24 77.137.224.0/19 maxlen: 24 77.140.0.0/14 maxlen: 24 77.144.0.0/12 maxlen: 24 77.192.0.0/12 maxlen: 24 77.233.96.0/19 maxlen: 24 78.112.0.0/12 maxlen: 24 78.155.128.0/19 maxlen: 24 78.159.0.0/19 maxlen: 24 79.80.0.0/12 maxlen: 24 79.132.32.0/19 maxlen: 24 79.174.192.0/18 maxlen: 24 80.70.32.0/20 maxlen: 24 80.118.0.0/15 maxlen: 24 80.124.0.0/15 maxlen: 24 80.185.0.0/16 maxlen: 24 80.236.0.0/17 maxlen: 24 81.1.0.0/18 maxlen: 24 81.64.0.0/14 maxlen: 24 81.185.0.0/16 maxlen: 24 81.220.0.0/16 maxlen: 24 82.151.0.0/19 maxlen: 24 82.216.0.0/16 maxlen: 24 83.141.128.0/17 maxlen: 24 84.4.0.0/14 maxlen: 24 84.55.128.0/18 maxlen: 24 84.96.0.0/13 maxlen: 24 84.205.128.0/19 maxlen: 24 85.68.0.0/15 maxlen: 24 85.117.128.0/19 maxlen: 24 85.168.0.0/14 maxlen: 24 85.192.192.0/18 maxlen: 24 86.63.224.0/19 maxlen: 24 86.64.0.0/12 maxlen: 24 87.100.0.0/17 maxlen: 24 87.231.0.0/16 maxlen: 24 87.255.128.0/19 maxlen: 24 88.136.0.0/13 maxlen: 24 88.219.0.0/16 maxlen: 24 89.2.0.0/15 maxlen: 24 89.156.0.0/14 maxlen: 24 89.170.0.0/16 maxlen: 24 89.185.160.0/19 maxlen: 24 91.68.0.0/14 maxlen: 24 91.88.0.0/16 maxlen: 24 91.91.0.0/16 maxlen: 24 91.151.112.0/20 maxlen: 24 92.88.0.0/13 maxlen: 24 93.0.0.0/11 maxlen: 24 93.182.192.0/18 maxlen: 24 93.191.80.0/21 maxlen: 24 95.136.128.0/17 maxlen: 24 95.157.128.0/18 maxlen: 24 95.157.192.0/18 maxlen: 18 95.168.0.0/19 maxlen: 24 95.171.128.0/19 maxlen: 24 95.174.160.0/19 maxlen: 24 95.175.160.0/19 maxlen: 24 95.181.220.0/22 maxlen: 24 109.0.0.0/11 maxlen: 24 130.0.96.0/19 maxlen: 19 141.170.216.0/21 maxlen: 24 159.20.8.0/21 maxlen: 24 176.52.224.0/20 maxlen: 20 178.18.176.0/20 maxlen: 24 178.19.0.0/20 maxlen: 24 185.39.216.0/22 maxlen: 24 185.147.204.0/22 maxlen: 24 185.147.232.0/22 maxlen: 22 185.150.120.0/22 maxlen: 24 188.7.0.0/16 maxlen: 24 188.141.128.0/17 maxlen: 24 188.224.0.0/17 maxlen: 24 194.6.128.0/19 maxlen: 24 194.153.88.0/23 maxlen: 24 194.153.90.0/24 maxlen: 24 194.153.92.0/24 maxlen: 24 194.153.97.0/24 maxlen: 24 194.183.192.0/19 maxlen: 24 194.242.176.0/20 maxlen: 24 195.3.0.0/18 maxlen: 24 195.7.96.0/19 maxlen: 24 195.98.96.0/19 maxlen: 24 195.115.0.0/16 maxlen: 24 195.132.0.0/16 maxlen: 24 195.146.192.0/19 maxlen: 24 212.23.160.0/19 maxlen: 24 212.30.96.0/19 maxlen: 24 212.39.128.0/19 maxlen: 24 212.94.160.0/19 maxlen: 24 212.198.0.0/16 maxlen: 24 213.128.32.0/19 maxlen: 24 213.144.192.0/19 maxlen: 24 213.169.160.0/19 maxlen: 24 213.176.192.0/19 maxlen: 24 213.203.64.0/18 maxlen: 24 213.222.64.0/18 maxlen: 24 213.223.0.0/16 maxlen: 24 213.245.0.0/16 maxlen: 24 217.19.192.0/20 maxlen: 24 217.70.80.0/20 maxlen: 24 217.112.224.0/20 maxlen: 24 2a00:5e80::/32 maxlen: 48 2a00:6200::/29 maxlen: 48 2a00:7180::/32 maxlen: 48 2a00:8380::/32 maxlen: 48 2a00:8d80::/32 maxlen: 48 2a00:9380::/32 maxlen: 32 2a00:a580::/32 maxlen: 48 2a00:b280::/32 maxlen: 48 2a00:ba80::/32 maxlen: 48 2a00:c780::/32 maxlen: 48 2a00:cc80::/32 maxlen: 48 2a00:d780::/32 maxlen: 48 2a00:e880::/32 maxlen: 48 2a00:ec80::/29 maxlen: 48 2a00:ec80::/32 maxlen: 48 2a00:ec81::/32 maxlen: 48 2a02:8400::/25 maxlen: 48 2a04:800::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:e8:7b:f8:1d:f8:63:d1:58:51:f7:93:1b:7b:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Jan 1 18:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=716cb611f51fe9675107ed81d4bac66cdff71d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0f:50:3d:85:d6:2d:39:00:a4:41:1a:e3:15: 0f:5d:18:45:cd:fe:c9:65:2a:91:06:44:9f:ba:af: 2a:b6:19:ac:6e:1a:f0:06:d2:55:f1:c5:03:a8:eb: 8b:5d:03:1c:c6:f5:07:ac:2b:05:19:ef:25:a7:40: a4:c6:72:90:ee:6c:66:bd:0d:62:81:f1:01:59:78: 6a:66:50:04:ee:d7:79:f9:b0:10:2f:b7:ad:02:c5: e3:e2:11:2a:29:56:31:32:93:ea:38:82:8c:56:5c: 01:4e:52:94:53:d9:d2:13:b5:e9:2e:35:d4:14:ed: 6b:b2:a4:87:19:8e:3a:6b:3e:cf:ff:3a:ad:44:01: b5:98:16:d1:d4:69:54:56:05:fe:c1:24:86:57:cf: 2f:77:90:d3:44:5f:da:9a:72:e1:28:ed:da:5b:91: 1a:30:80:aa:de:e7:0d:22:8f:df:8e:ff:a9:b2:8a: fc:bf:1e:fb:92:e8:d0:02:c8:fd:23:77:38:52:7c: 67:d2:59:c7:d9:f3:ff:71:10:23:22:59:56:f8:6a: 70:09:a3:d7:db:d3:c7:49:66:dc:dc:80:06:5d:52: 93:ec:88:c4:fd:a7:71:74:7a:f7:1e:d4:e2:49:d9: 27:9c:1a:c7:a7:f5:9c:a0:5f:31:87:09:c7:d6:c4: 66:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:6C:B6:11:F5:1F:E9:67:51:07:ED:81:D4:BA:C6:6C:DF:F7:1D:74 X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/cWy2EfUf6WdRB-2B1LrGbN_3HXQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.64.0.0/13 46.35.0.0/19 46.165.64.0/18 62.8.0.0/19 62.39.0.0/16 62.62.128.0/17 62.85.128.0/19 62.106.128.0/17 62.129.160.0/19 62.241.64.0/18 77.84.0.0/16 77.128.0.0-77.136.255.255 77.137.196.0-77.137.255.255 77.140.0.0-77.159.255.255 77.192.0.0/12 77.233.96.0/19 78.112.0.0/12 78.155.128.0/19 78.159.0.0/19 79.80.0.0/12 79.132.32.0/19 79.174.192.0/18 80.70.32.0/20 80.118.0.0/15 80.124.0.0/15 80.185.0.0/16 80.236.0.0/17 81.1.0.0/18 81.64.0.0/14 81.185.0.0/16 81.220.0.0/16 82.151.0.0/19 82.216.0.0/16 83.141.128.0/17 84.4.0.0/14 84.55.128.0/18 84.96.0.0/13 84.205.128.0/19 85.68.0.0/15 85.117.128.0/19 85.168.0.0/14 85.192.192.0/18 86.63.224.0-86.79.255.255 87.100.0.0/17 87.231.0.0/16 87.255.128.0/19 88.136.0.0/13 88.219.0.0/16 89.2.0.0/15 89.156.0.0/14 89.170.0.0/16 89.185.160.0/19 91.68.0.0/14 91.88.0.0/16 91.91.0.0/16 91.151.112.0/20 92.88.0.0/13 93.0.0.0/11 93.182.192.0/18 93.191.80.0/21 95.136.128.0/17 95.157.128.0/17 95.168.0.0/19 95.171.128.0/19 95.174.160.0/19 95.175.160.0/19 95.181.220.0/22 109.0.0.0/11 130.0.96.0/19 141.170.216.0/21 159.20.8.0/21 176.52.224.0/20 178.18.176.0/20 178.19.0.0/20 185.39.216.0/22 185.147.204.0/22 185.147.232.0/22 185.150.120.0/22 188.7.0.0/16 188.141.128.0/17 188.224.0.0/17 194.6.128.0/19 194.153.88.0-194.153.90.255 194.153.92.0/24 194.153.97.0/24 194.183.192.0/19 194.242.176.0/20 195.3.0.0/18 195.7.96.0/19 195.98.96.0/19 195.115.0.0/16 195.132.0.0/16 195.146.192.0/19 212.23.160.0/19 212.30.96.0/19 212.39.128.0/19 212.94.160.0/19 212.198.0.0/16 213.128.32.0/19 213.144.192.0/19 213.169.160.0/19 213.176.192.0/19 213.203.64.0/18 213.222.64.0/18 213.223.0.0/16 213.245.0.0/16 217.19.192.0/20 217.70.80.0/20 217.112.224.0/20 IPv6: 2a00:5e80::/32 2a00:6200::/29 2a00:7180::/32 2a00:8380::/32 2a00:8d80::/32 2a00:9380::/32 2a00:a580::/32 2a00:b280::/32 2a00:ba80::/32 2a00:c780::/32 2a00:cc80::/32 2a00:d780::/32 2a00:e880::/32 2a00:ec80::/29 2a02:8400::/25 2a04:800::/29 Signature Algorithm: sha256WithRSAEncryption 03:0b:26:e3:f6:f0:ee:cc:88:57:45:df:92:03:8d:bc:85:b3: a5:74:ac:bd:0c:eb:14:90:86:e0:e4:e1:7a:e3:a1:45:12:15: 71:3c:0f:07:3f:82:f1:d7:1d:cc:aa:6b:19:6d:5d:1a:3a:ee: ea:8c:c9:67:d2:c8:98:d4:bd:91:60:26:ab:56:ca:89:3e:2c: b3:bc:95:94:58:6d:0b:56:99:80:c7:00:8a:f3:64:ce:aa:9f: a9:c4:f3:50:eb:42:2f:bf:aa:88:49:70:36:83:3f:49:a3:b2: b5:f7:33:90:ce:9f:02:83:b1:f0:9d:50:d1:37:bd:57:c4:66: 0d:09:aa:d7:41:08:47:95:06:5b:fa:9a:80:82:31:86:e3:f0: aa:4a:13:bf:4a:0e:1b:40:ff:ad:72:08:68:b4:d2:4a:b5:db: ec:5d:4b:c0:2b:07:f1:04:0b:27:83:10:b7:4d:05:b7:c8:a6: e0:96:72:11:98:4e:a2:76:7d:f7:b5:2b:b2:72:d0:40:4a:d6: 7a:4f:6c:9a:8c:4a:8b:38:18:5f:8f:f3:0b:78:0c:c1:a4:70: c5:35:7f:1b:4e:cc:48:60:34:db:4a:6f:45:3a:8e:b8:bb:6e: e5:ab:05:d4:61:c3:0d:61:62:e2:89:ed:9d:75:55:2b:e3:7f: 14:67:8f:3f -----BEGIN CERTIFICATE----- MIIIBjCCBu6gAwIBAgISAZt6yOh7+B34Y9FYUfeTG3tEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjYwMTAxMTgxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTZjYjYxMWY1MWZlOTY3NTEwN2VkODFkNGJhYzY2Y2RmZjcxZDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ9QPYXWLTkApEEa4xUPXRhFzf7J ZSqRBkSfuq8qthmsbhrwBtJV8cUDqOuLXQMcxvUHrCsFGe8lp0CkxnKQ7mxmvQ1i gfEBWXhqZlAE7td5+bAQL7etAsXj4hEqKVYxMpPqOIKMVlwBTlKUU9nSE7XpLjXU FO1rsqSHGY46az7P/zqtRAG1mBbR1GlUVgX+wSSGV88vd5DTRF/amnLhKO3aW5Ea MICq3ucNIo/fjv+psor8vx77kujQAsj9I3c4Unxn0lnH2fP/cRAjIllW+GpwCaPX 29PHSWbc3IAGXVKT7IjE/adxdHr3HtTiSdknnBrHp/WcoF8xhwnH1sRmrQIDAQAB o4IFEjCCBQ4wHQYDVR0OBBYEFHFsthH1H+lnUQftgdS6xmzf9x10MB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvY1d5MkVmVWY2V2RSQi0yQjFMckdiTl8zSFhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIDJgYIKwYBBQUHAQcBAf8EggMVMIIDETCCApUEAgABMIIC jQMDAyVAAwQFLiMAAwQGLqVAAwQFPggAAwMAPicDBAc+PoADBAU+VYADBAc+aoAD BAU+gaADBAY+8UADAwBNVDAKAwMHTYADAwBNiDALAwQCTYnEAwMBTYgwCgMDAk2M AwMFTYADAwRNwAMEBU3pYAMDBE5wAwQFTpuAAwQFTp8AAwMET1ADBAVPhCADBAZP rsADBARQRiADAwFQdgMDAVB8AwMAULkDBAdQ7AADBAZRAQADAwJRQAMDAFG5AwMA UdwDBAVSlwADAwBS2AMEB1ONgAMDAlQEAwQGVDeAAwMDVGADBAVUzYADAwFVRAME BVV1gAMDAlWoAwQGVcDAMAsDBAVWP+ADAwRWQAMEB1dkAAMDAFfnAwQFV/+AAwMD WIgDAwBY2wMDAVkCAwMCWZwDAwBZqgMEBVm5oAMDAltEAwMAW1gDAwBbWwMEBFuX cAMDA1xYAwMFXQADBAZdtsADBANdv1ADBAdfiIADBAdfnYADBAVfqAADBAVfq4AD BAVfrqADBAVfr6ADBAJftdwDAwVtAAMEBYIAYAMEA42q2AMEA58UCAMEBLA04AME BLISsAMEBLITAAMEArkn2AMEArmTzAMEArmT6AMEArmWeAMDALwHAwQHvI2AAwQH vOAAAwQFwgaAMAwDBAPCmVgDBADCmVoDBADCmVwDBADCmWEDBAXCt8ADBATC8rAD BAbDAwADBAXDB2ADBAXDYmADAwDDcwMDAMOEAwQFw5LAAwQF1BegAwQF1B5gAwQF 1CeAAwQF1F6gAwMA1MYDBAXVgCADBAXVkMADBAXVqaADBAXVsMADBAbVy0ADBAbV 3kADAwDV3wMDANX1AwQE2RPAAwQE2UZQAwQE2XDgMHYEAgACMHADBQAqAF6AAwUD KgBiAAMFACoAcYADBQAqAIOAAwUAKgCNgAMFACoAk4ADBQAqAKWAAwUAKgCygAMF ACoAuoADBQAqAMeAAwUAKgDMgAMFACoA14ADBQAqAOiAAwUDKgDsgAMFByoChAAD BQMqBAgAMA0GCSqGSIb3DQEBCwUAA4IBAQADCybj9vDuzIhXRd+SA428hbOldKy9 DOsUkIbg5OF646FFEhVxPA8HP4Lx1x3MqmsZbV0aOu7qjMln0siY1L2RYCarVsqJ PiyzvJWUWG0LVpmAxwCK82TOqp+pxPNQ60Ivv6qISXA2gz9Jo7K19zOQzp8Cg7Hw nVDRN71XxGYNCarXQQhHlQZb+pqAgjGG4/CqShO/Sg4bQP+tcghotNJKtdvsXUvA KwfxBAsngxC3TQW3yKbglnIRmE6idn33tSuyctBAStZ6T2yajEqLOBhfj/MLeAzB pHDFNX8bTsxIYDTbSm9FOo64u27lqwXUYcMNYWLiie2ddVUr438UZ48/ -----END CERTIFICATE-----Generated at Wed Jan 7 22:29:18 2026 by rpki-client