This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Ha9S9cc-lXoVsLJnEUluQfT1ZxU.roa File: Ha9S9cc-lXoVsLJnEUluQfT1ZxU.roa (raw, json) Hash identifier: 7txmpuFQen9mAQbobcqiWxUDghL7O+hGsaAOtebFBbE= Subject key identifier: 1D:AF:52:F5:C7:3E:95:7A:15:B0:B2:67:11:49:6E:41:F4:F5:67:15 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A25DA9742B43D06993B15001101EC1 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Ha9S9cc-lXoVsLJnEUluQfT1ZxU.roa Signing time: Thu 01 Jan 2026 08:17:45 +0000 ROA not before: Thu 01 Jan 2026 08:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 79.121.132.0/22 maxlen: 24 79.121.132.0/23 maxlen: 24 79.121.134.0/23 maxlen: 24 79.121.140.0/22 maxlen: 24 79.121.140.0/23 maxlen: 24 79.121.142.0/23 maxlen: 24 79.121.144.0/23 maxlen: 24 79.121.148.0/22 maxlen: 24 79.121.148.0/23 maxlen: 24 79.121.150.0/23 maxlen: 24 79.121.154.0/23 maxlen: 24 79.121.156.0/23 maxlen: 24 79.121.162.0/23 maxlen: 24 79.121.164.0/22 maxlen: 24 79.121.164.0/23 maxlen: 24 79.121.166.0/23 maxlen: 24 79.121.168.0/23 maxlen: 24 79.121.178.0/23 maxlen: 24 79.121.180.0/23 maxlen: 24 79.121.184.0/23 maxlen: 24 79.121.200.0/21 maxlen: 24 79.121.212.0/22 maxlen: 24 79.121.212.0/23 maxlen: 24 79.121.214.0/23 maxlen: 24 79.121.216.0/22 maxlen: 24 79.121.216.0/23 maxlen: 24 79.121.218.0/23 maxlen: 24 79.121.222.0/23 maxlen: 24 79.121.226.0/23 maxlen: 24 79.121.232.0/22 maxlen: 24 79.121.232.0/23 maxlen: 24 79.121.234.0/23 maxlen: 24 79.121.238.0/23 maxlen: 24 92.244.174.0/23 maxlen: 24 92.244.176.0/23 maxlen: 24 92.244.180.0/23 maxlen: 24 92.244.182.0/23 maxlen: 24 92.244.184.0/23 maxlen: 24 92.244.190.0/23 maxlen: 24 93.152.73.0/24 maxlen: 24 93.152.87.0/24 maxlen: 24 95.177.0.0/23 maxlen: 24 95.177.8.0/23 maxlen: 24 95.177.20.0/23 maxlen: 24 95.177.54.0/23 maxlen: 24 95.177.64.0/23 maxlen: 24 95.177.68.0/22 maxlen: 24 95.177.68.0/23 maxlen: 24 95.177.70.0/23 maxlen: 24 95.177.72.0/23 maxlen: 24 95.177.76.0/22 maxlen: 24 95.177.76.0/23 maxlen: 24 95.177.78.0/23 maxlen: 24 95.177.80.0/22 maxlen: 24 95.177.80.0/23 maxlen: 24 95.177.82.0/23 maxlen: 24 95.177.104.0/22 maxlen: 24 95.177.104.0/23 maxlen: 24 95.177.106.0/23 maxlen: 24 95.177.114.0/23 maxlen: 24 95.177.124.0/22 maxlen: 24 95.177.124.0/23 maxlen: 24 95.177.126.0/23 maxlen: 24 109.174.176.0/22 maxlen: 24 109.174.180.0/22 maxlen: 24 109.174.184.0/22 maxlen: 24 109.174.188.0/22 maxlen: 24 109.204.6.0/23 maxlen: 24 109.204.12.0/23 maxlen: 24 109.204.20.0/23 maxlen: 24 109.204.28.0/23 maxlen: 24 109.204.32.0/23 maxlen: 24 109.204.40.0/23 maxlen: 24 109.204.44.0/23 maxlen: 24 109.204.50.0/23 maxlen: 24 109.204.54.0/23 maxlen: 24 109.204.58.0/23 maxlen: 24 109.204.60.0/23 maxlen: 24 109.204.72.0/23 maxlen: 24 109.204.82.0/23 maxlen: 24 109.204.92.0/23 maxlen: 24 109.204.95.0/24 maxlen: 24 109.204.101.0/24 maxlen: 24 109.204.112.0/23 maxlen: 24 109.204.120.0/23 maxlen: 24 109.204.124.0/23 maxlen: 24 195.40.26.0/23 maxlen: 24 195.40.30.0/23 maxlen: 24 195.40.100.0/23 maxlen: 24 195.40.114.0/23 maxlen: 24 195.40.118.0/23 maxlen: 24 195.40.166.0/23 maxlen: 24 195.40.180.0/24 maxlen: 24 195.172.102.0/23 maxlen: 24 195.172.110.0/23 maxlen: 24 195.172.112.0/23 maxlen: 24 195.172.124.0/24 maxlen: 24 195.172.204.0/23 maxlen: 24 195.172.214.0/23 maxlen: 24 195.172.216.0/23 maxlen: 24 195.172.218.0/23 maxlen: 24 195.172.220.0/23 maxlen: 24 195.172.222.0/23 maxlen: 24 212.134.78.0/24 maxlen: 24 212.135.10.0/23 maxlen: 24 212.135.174.0/24 maxlen: 24 212.135.178.0/24 maxlen: 24 212.135.190.0/23 maxlen: 24 212.135.236.0/23 maxlen: 24 217.79.104.0/22 maxlen: 24 217.79.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:5d:a9:74:2b:43:d0:69:93:b1:50:01:10:1e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1daf52f5c73e957a15b0b26711496e41f4f56715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:eb:27:27:47:d5:d3:bb:f9:d3:67:08:ca:bb: 14:84:5b:8f:f7:7b:c3:df:e5:84:bd:dc:0f:b0:2a: d6:63:b2:59:52:5d:f4:98:d5:4f:dc:f5:00:a8:ae: fa:37:06:0c:29:75:b6:f8:78:ae:2a:e3:b3:e4:3b: a7:67:74:1f:12:05:93:16:64:59:a0:16:27:f4:19: 0e:12:d4:89:da:a7:14:9a:32:12:ed:4c:29:33:c6: 42:6f:47:e8:5b:18:8b:d7:f4:38:f7:a5:50:8a:9d: 79:49:68:0b:61:58:46:bd:5e:55:e2:da:91:69:cf: 2b:28:3a:41:f8:fe:58:29:a4:0c:9b:e9:36:5f:0e: a4:50:a1:d9:eb:d7:f2:f5:07:68:4d:4e:60:11:ce: a1:75:66:55:cf:ca:b6:5b:19:bb:b7:03:9d:34:5e: 34:a6:ca:48:03:17:8f:e3:5f:74:16:4f:23:1d:e6: be:ad:ec:00:9c:ca:3b:4e:34:c3:95:1d:98:ef:60: b3:dc:56:32:bb:e2:53:86:82:5d:04:3e:e0:81:ed: cd:7e:f0:f3:2e:8a:06:d6:a2:85:7e:04:fe:ea:06: 12:a7:e8:6d:6a:9b:1b:f2:cf:dc:62:89:c4:9c:71: 9f:8b:31:14:33:7a:90:03:78:ab:22:9b:45:33:07: 1c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AF:52:F5:C7:3E:95:7A:15:B0:B2:67:11:49:6E:41:F4:F5:67:15 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Ha9S9cc-lXoVsLJnEUluQfT1ZxU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.121.132.0/22 79.121.140.0-79.121.145.255 79.121.148.0/22 79.121.154.0-79.121.157.255 79.121.162.0-79.121.169.255 79.121.178.0-79.121.181.255 79.121.184.0/23 79.121.200.0/21 79.121.212.0-79.121.219.255 79.121.222.0/23 79.121.226.0/23 79.121.232.0/22 79.121.238.0/23 92.244.174.0-92.244.177.255 92.244.180.0-92.244.185.255 92.244.190.0/23 93.152.73.0/24 93.152.87.0/24 95.177.0.0/23 95.177.8.0/23 95.177.20.0/23 95.177.54.0/23 95.177.64.0/23 95.177.68.0-95.177.73.255 95.177.76.0-95.177.83.255 95.177.104.0/22 95.177.114.0/23 95.177.124.0/22 109.174.176.0/20 109.204.6.0/23 109.204.12.0/23 109.204.20.0/23 109.204.28.0/23 109.204.32.0/23 109.204.40.0/23 109.204.44.0/23 109.204.50.0/23 109.204.54.0/23 109.204.58.0-109.204.61.255 109.204.72.0/23 109.204.82.0/23 109.204.92.0/23 109.204.95.0/24 109.204.101.0/24 109.204.112.0/23 109.204.120.0/23 109.204.124.0/23 195.40.26.0/23 195.40.30.0/23 195.40.100.0/23 195.40.114.0/23 195.40.118.0/23 195.40.166.0/23 195.40.180.0/24 195.172.102.0/23 195.172.110.0-195.172.113.255 195.172.124.0/24 195.172.204.0/23 195.172.214.0-195.172.223.255 212.134.78.0/24 212.135.10.0/23 212.135.174.0/24 212.135.178.0/24 212.135.190.0/23 212.135.236.0/23 217.79.104.0/22 217.79.116.0/22 Signature Algorithm: sha256WithRSAEncryption 07:a4:7d:73:d8:e5:aa:3a:33:36:f5:bb:f4:7d:8b:47:9d:b8: b3:09:c0:bb:91:16:ee:ac:54:ef:3e:5d:09:73:ee:7d:d1:a3: e0:23:e2:d1:7f:f4:a1:7f:e6:53:ef:91:5d:3a:8b:0c:25:df: d2:a4:b5:e0:5d:70:f9:87:23:7c:14:41:70:8a:8b:b9:75:d6: 7a:ff:d0:b7:56:ae:ce:bb:cf:4d:76:35:2e:28:c4:40:b2:8f: dc:bc:af:75:6c:8e:f0:9f:ec:c3:cb:58:50:d5:cc:b3:9d:62: 54:0e:56:c5:2f:3f:c1:eb:1b:c9:36:6a:70:b7:62:6c:28:3d: 5e:5a:f4:08:ac:06:8e:44:99:16:b9:89:dd:c1:9a:9f:ea:e6: c7:a2:d7:61:7b:28:9d:c2:0e:5d:51:6a:0f:bb:9e:57:18:0f: 01:e9:e7:2d:36:1b:c8:da:e2:eb:c4:34:4b:6b:ff:ea:43:9c: 96:7b:d0:f6:92:1a:1e:f0:65:53:fd:77:39:14:4b:7a:01:eb: e3:8f:2e:3d:c8:e3:9e:b8:06:e5:8d:db:4e:05:63:58:66:f7: e1:f7:81:17:33:48:b8:e7:24:a8:d2:e9:4e:9e:7b:59:16:9b: 29:e0:d5:14:d0:40:9e:18:ff:80:bd:27:66:8c:d6:90:86:b1: 37:77:23:05 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgISAZt4ol2pdCtD0GmTsVABEB7BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGFmNTJmNWM3M2U5NTdhMTViMGIyNjcxMTQ5NmU0MWY0ZjU2NzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAresnJ0fV07v502cIyrsUhFuP93vD 3+WEvdwPsCrWY7JZUl30mNVP3PUAqK76NwYMKXW2+HiuKuOz5DunZ3QfEgWTFmRZ oBYn9BkOEtSJ2qcUmjIS7UwpM8ZCb0foWxiL1/Q496VQip15SWgLYVhGvV5V4tqR ac8rKDpB+P5YKaQMm+k2Xw6kUKHZ69fy9QdoTU5gEc6hdWZVz8q2Wxm7twOdNF40 pspIAxeP4190Fk8jHea+rewAnMo7TjTDlR2Y72Cz3FYyu+JThoJdBD7gge3NfvDz LooG1qKFfgT+6gYSp+htapsb8s/cYonEnHGfizEUM3qQA3irIptFMwccGwIDAQAB o4ID/zCCA/swHQYDVR0OBBYEFB2vUvXHPpV6FbCyZxFJbkH09WcVMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvSGE5UzljYy1sWG9Wc0xKbkVVbHVRZlQxWnhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICEwYIKwYBBQUHAQcBAf8EggICMIIB/jCCAfoEAgABMIIB 8gMEAk95hDAMAwQCT3mMAwQBT3mQAwQCT3mUMAwDBAFPeZoDBAFPeZwwDAMEAU95 ogMEAU95qDAMAwQBT3myAwQBT3m0AwQBT3m4AwQDT3nIMAwDBAJPedQDBAJPedgD BAFPed4DBAFPeeIDBAJPeegDBAFPee4wDAMEAVz0rgMEAVz0sDAMAwQCXPS0AwQB XPS4AwQBXPS+AwQAXZhJAwQAXZhXAwQBX7EAAwQBX7EIAwQBX7EUAwQBX7E2AwQB X7FAMAwDBAJfsUQDBAFfsUgwDAMEAl+xTAMEAl+xUAMEAl+xaAMEAV+xcgMEAl+x fAMEBG2usAMEAW3MBgMEAW3MDAMEAW3MFAMEAW3MHAMEAW3MIAMEAW3MKAMEAW3M LAMEAW3MMgMEAW3MNjAMAwQBbcw6AwQBbcw8AwQBbcxIAwQBbcxSAwQBbcxcAwQA bcxfAwQAbcxlAwQBbcxwAwQBbcx4AwQBbcx8AwQBwygaAwQBwygeAwQBwyhkAwQB wyhyAwQBwyh2AwQBwyimAwQAwyi0AwQBw6xmMAwDBAHDrG4DBAHDrHADBADDrHwD BAHDrMwwDAMEAcOs1gMEBcOswAMEANSGTgMEAdSHCgMEANSHrgMEANSHsgMEAdSH vgMEAdSH7AMEAtlPaAMEAtlPdDANBgkqhkiG9w0BAQsFAAOCAQEAB6R9c9jlqjoz NvW79H2LR524swnAu5EW7qxU7z5dCXPufdGj4CPi0X/0oX/mU++RXTqLDCXf0qS1 4F1w+YcjfBRBcIqLuXXWev/Qt1auzrvPTXY1LijEQLKP3LyvdWyO8J/sw8tYUNXM s51iVA5WxS8/wesbyTZqcLdibCg9Xlr0CKwGjkSZFrmJ3cGan+rmx6LXYXsoncIO XVFqD7ueVxgPAennLTYbyNri68Q0S2v/6kOclnvQ9pIaHvBlU/13ORRLegHr448u PcjjnrgG5Y3bTgVjWGb34feBFzNIuOckqNLpTp57WRabKeDVFNBAnhj/gL0nZozW kIaxN3cjBQ== -----END CERTIFICATE-----Generated at Mon Jan 19 08:15:52 2026 by rpki-client