This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/r51rog6pQ5YF_YiI_1fGpRj7PuI.roa File: r51rog6pQ5YF_YiI_1fGpRj7PuI.roa (raw, json) Hash identifier: UheAI79aBtQjewyms9m1mVI6TkjPhw2QkobvywP5VKA= Subject key identifier: AF:9D:6B:A2:0E:A9:43:96:05:FD:88:88:FF:57:C6:A5:18:FB:3E:E2 Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8 Certificate serial: 019B7F817438B8CD02CD2669F5AF058EC5A3 Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/r51rog6pQ5YF_YiI_1fGpRj7PuI.roa Signing time: Fri 02 Jan 2026 16:19:08 +0000 ROA not before: Fri 02 Jan 2026 16:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39855 IP address blocks: 168.199.1.0/24 maxlen: 24 168.199.2.0/23 maxlen: 24 168.199.5.0/24 maxlen: 24 168.199.6.0/23 maxlen: 24 168.199.8.0/24 maxlen: 24 168.199.9.0/24 maxlen: 24 168.199.10.0/23 maxlen: 24 168.199.13.0/24 maxlen: 24 168.199.14.0/23 maxlen: 24 168.199.17.0/24 maxlen: 24 168.199.22.0/23 maxlen: 24 168.199.24.0/24 maxlen: 24 168.199.25.0/24 maxlen: 24 168.199.26.0/24 maxlen: 24 168.199.27.0/24 maxlen: 24 168.199.28.0/24 maxlen: 24 168.199.29.0/24 maxlen: 24 168.199.30.0/24 maxlen: 24 168.199.31.0/24 maxlen: 24 168.199.32.0/24 maxlen: 24 168.199.33.0/24 maxlen: 24 168.199.34.0/24 maxlen: 24 168.199.35.0/24 maxlen: 24 168.199.36.0/24 maxlen: 24 168.199.37.0/24 maxlen: 24 168.199.38.0/24 maxlen: 24 168.199.39.0/24 maxlen: 24 168.199.40.0/24 maxlen: 24 168.199.41.0/24 maxlen: 24 168.199.42.0/24 maxlen: 24 168.199.43.0/24 maxlen: 24 168.199.44.0/24 maxlen: 24 168.199.45.0/24 maxlen: 24 168.199.46.0/24 maxlen: 24 168.199.47.0/24 maxlen: 24 168.199.48.0/23 maxlen: 24 168.199.51.0/24 maxlen: 24 168.199.52.0/23 maxlen: 24 168.199.55.0/24 maxlen: 24 168.199.56.0/23 maxlen: 24 168.199.59.0/24 maxlen: 24 168.199.60.0/23 maxlen: 24 168.199.63.0/24 maxlen: 24 168.199.96.0/24 maxlen: 24 168.199.97.0/24 maxlen: 24 168.199.98.0/24 maxlen: 24 168.199.99.0/24 maxlen: 24 168.199.100.0/24 maxlen: 24 168.199.101.0/24 maxlen: 24 168.199.102.0/24 maxlen: 24 168.199.103.0/24 maxlen: 24 168.199.104.0/24 maxlen: 24 168.199.105.0/24 maxlen: 24 168.199.106.0/24 maxlen: 24 168.199.107.0/24 maxlen: 24 168.199.108.0/24 maxlen: 24 168.199.109.0/24 maxlen: 24 168.199.110.0/24 maxlen: 24 168.199.111.0/24 maxlen: 24 168.199.112.0/23 maxlen: 24 168.199.114.0/24 maxlen: 24 168.199.115.0/24 maxlen: 24 168.199.116.0/23 maxlen: 24 168.199.119.0/24 maxlen: 24 168.199.120.0/23 maxlen: 24 168.199.123.0/24 maxlen: 24 168.199.124.0/23 maxlen: 24 168.199.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:74:38:b8:cd:02:cd:26:69:f5:af:05:8e:c5:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8 Validity Not Before: Jan 2 16:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af9d6ba20ea9439605fd8888ff57c6a518fb3ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:62:a3:c6:51:e7:88:39:72:1d:7b:13:c5:77: ad:24:5e:ee:7d:f3:5a:aa:3a:59:76:c0:0a:d3:8f: 35:93:66:91:f1:45:af:4d:2e:86:e4:87:8b:14:cd: 10:97:bc:50:37:0b:2e:22:6d:a1:74:80:69:3d:2e: ae:ca:01:b1:69:81:7e:65:8b:08:60:e1:42:a7:ae: 6f:4e:61:5a:39:31:76:35:da:ac:3a:ec:aa:34:e8: 88:d6:f9:87:87:81:0e:8d:2d:2f:f4:38:9e:74:0c: 18:b7:82:e4:57:01:77:02:18:f6:15:33:3d:98:bd: e4:e0:16:70:9e:42:2e:3d:d0:e1:23:21:c0:18:f3: cb:2b:39:e8:e1:6c:8c:18:e1:18:81:35:c3:97:47: 49:57:b4:8e:a7:51:c2:6f:98:4d:f3:a5:09:2f:6e: 1b:5d:98:d1:14:0b:ce:eb:4a:08:b2:61:55:88:0c: 5f:d5:bf:ad:f1:85:80:8e:8a:62:a8:35:ca:94:cc: c9:16:0c:f0:c3:81:91:1e:7c:83:28:6a:0d:cc:03: f4:5b:80:c6:40:b9:16:5c:6b:7b:82:04:2c:e5:3c: b3:6f:71:f9:d2:c4:d0:39:fb:81:30:bc:a7:77:8f: 9d:c1:c0:57:cb:1c:67:b3:ec:dc:02:aa:98:e0:46: 4f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9D:6B:A2:0E:A9:43:96:05:FD:88:88:FF:57:C6:A5:18:FB:3E:E2 X509v3 Authority Key Identifier: keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/r51rog6pQ5YF_YiI_1fGpRj7PuI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.199.1.0-168.199.3.255 168.199.5.0-168.199.11.255 168.199.13.0-168.199.15.255 168.199.17.0/24 168.199.22.0-168.199.49.255 168.199.51.0-168.199.53.255 168.199.55.0-168.199.57.255 168.199.59.0-168.199.61.255 168.199.63.0/24 168.199.96.0-168.199.117.255 168.199.119.0-168.199.121.255 168.199.123.0-168.199.125.255 168.199.127.0/24 Signature Algorithm: sha256WithRSAEncryption aa:6e:2c:c1:47:0d:fa:cf:08:b9:2a:1b:e9:81:de:51:22:f7: 9f:5c:94:b3:ab:43:e5:e2:95:33:58:8a:4a:8e:bc:a0:6d:39: 28:73:49:ed:be:b4:7d:4e:90:2e:b2:71:e2:72:b9:63:7c:bd: 2d:cc:8d:dd:8b:2e:15:81:cc:bb:6c:47:33:c6:dd:ab:a0:fa: d6:8e:91:40:39:e5:ba:6d:90:01:72:97:ec:41:9f:97:3b:25: 29:5b:0d:60:a0:76:ee:5b:61:a2:51:99:59:97:0c:10:da:54: df:02:aa:fa:9a:22:9b:18:e9:29:29:7a:8c:98:da:91:6a:d5: ad:91:60:9b:8e:4b:26:79:62:c2:7a:e7:fa:b1:cf:c6:48:71: 3c:7c:90:b5:46:f5:42:71:50:e0:f5:67:01:11:05:52:d6:55: 59:ab:ad:27:44:e8:ad:fb:1f:41:98:b1:71:b7:8b:d9:5f:89: 69:bb:1a:9c:df:a4:c4:0b:25:87:0a:0c:16:5d:23:76:bc:3b: b1:6d:db:8b:0a:49:be:af:89:80:4a:84:03:79:48:ac:b2:15: c3:6d:18:eb:c6:5e:56:2e:a1:56:00:e6:58:f6:65:0b:1b:09: 40:03:39:64:44:57:ba:72:ff:df:18:25:0f:7d:7d:0d:88:a5: c7:2b:3f:35 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt/gXQ4uM0CzSZp9a8FjsWjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4 ODE3ZDgwHhcNMjYwMTAyMTYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjlkNmJhMjBlYTk0Mzk2MDVmZDg4ODhmZjU3YzZhNTE4ZmIzZWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGKjxlHniDlyHXsTxXetJF7uffNa qjpZdsAK0481k2aR8UWvTS6G5IeLFM0Ql7xQNwsuIm2hdIBpPS6uygGxaYF+ZYsI YOFCp65vTmFaOTF2NdqsOuyqNOiI1vmHh4EOjS0v9DiedAwYt4LkVwF3Ahj2FTM9 mL3k4BZwnkIuPdDhIyHAGPPLKzno4WyMGOEYgTXDl0dJV7SOp1HCb5hN86UJL24b XZjRFAvO60oIsmFViAxf1b+t8YWAjopiqDXKlMzJFgzww4GRHnyDKGoNzAP0W4DG QLkWXGt7ggQs5Tyzb3H50sTQOfuBMLynd4+dwcBXyxxns+zcAqqY4EZPjQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFK+da6IOqUOWBf2IiP9XxqUY+z7iMB8GA1UdIwQY MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt MmQxOTE4YmExYzBlLzEvcjUxcm9nNnBRNVlGX1lpSV8xZkdwUmo3UHVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG7BggrBgEFBQcBBwEB/wSBqzCBqDCBpQQCAAEwgZ4wDAME AKjHAQMEAqjHADAMAwQAqMcFAwQCqMcIMAwDBACoxw0DBASoxwADBACoxxEwDAME AajHFgMEAajHMDAMAwQAqMczAwQBqMc0MAwDBACoxzcDBAGoxzgwDAMEAKjHOwME AajHPAMEAKjHPzAMAwQFqMdgAwQBqMd0MAwDBACox3cDBAGox3gwDAMEAKjHewME AajHfAMEAKjHfzANBgkqhkiG9w0BAQsFAAOCAQEAqm4swUcN+s8IuSob6YHeUSL3 n1yUs6tD5eKVM1iKSo68oG05KHNJ7b60fU6QLrJx4nK5Y3y9LcyN3YsuFYHMu2xH M8bdq6D61o6RQDnlum2QAXKX7EGflzslKVsNYKB27ltholGZWZcMENpU3wKq+poi mxjpKSl6jJjakWrVrZFgm45LJnliwnrn+rHPxkhxPHyQtUb1QnFQ4PVnAREFUtZV WautJ0TorfsfQZixcbeL2V+JabsanN+kxAslhwoMFl0jdrw7sW3biwpJvq+JgEqE A3lIrLIVw20Y68ZeVi6hVgDmWPZlCxsJQAM5ZERXunL/3xglD319DYilxys/NQ== -----END CERTIFICATE-----Generated at Fri Jan 9 16:49:38 2026 by rpki-client