This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/OIEYZhMWNxTqwPFPtrJQP_P_8kc.roa File: OIEYZhMWNxTqwPFPtrJQP_P_8kc.roa (raw, json) Hash identifier: oh65h6lMRU5dPAsjnmn6axHzKgGM8bi/szblqT+O4Kc= Subject key identifier: 38:81:18:66:13:16:37:14:EA:C0:F1:4F:B6:B2:50:3F:F3:FF:F2:47 Certificate issuer: /CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a Certificate serial: 019B77C6E465FA30B7CDB2359B5889FB1A85 Authority key identifier: BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/OIEYZhMWNxTqwPFPtrJQP_P_8kc.roa Signing time: Thu 01 Jan 2026 04:18:01 +0000 ROA not before: Thu 01 Jan 2026 04:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5432 IP address blocks: 37.62.0.0/16 maxlen: 16 37.184.0.0/15 maxlen: 16 46.178.0.0/15 maxlen: 16 62.4.128.0/17 maxlen: 17 62.235.0.0/16 maxlen: 16 80.200.0.0/15 maxlen: 16 80.236.128.0/17 maxlen: 17 81.11.128.0/17 maxlen: 17 81.169.0.0/17 maxlen: 17 81.240.0.0/14 maxlen: 16 81.244.0.0/14 maxlen: 16 83.134.0.0/16 maxlen: 16 87.64.0.0/14 maxlen: 16 88.197.128.0/17 maxlen: 17 91.176.0.0/14 maxlen: 16 91.180.0.0/14 maxlen: 16 92.48.128.0/18 maxlen: 18 109.128.0.0/14 maxlen: 16 109.132.0.0/14 maxlen: 16 109.136.0.0/14 maxlen: 16 109.140.0.0/14 maxlen: 16 178.144.0.0/15 maxlen: 16 188.5.0.0/16 maxlen: 16 193.74.0.0/16 maxlen: 16 193.75.128.0/17 maxlen: 17 193.91.96.0/19 maxlen: 19 193.121.0.0/16 maxlen: 16 194.78.0.0/16 maxlen: 16 194.119.224.0/19 maxlen: 19 195.0.0.0/17 maxlen: 17 195.13.0.0/19 maxlen: 19 195.74.192.0/19 maxlen: 19 195.95.0.0/17 maxlen: 17 195.207.0.0/16 maxlen: 16 195.238.0.0/19 maxlen: 19 212.233.0.0/19 maxlen: 19 212.239.128.0/17 maxlen: 17 213.49.0.0/16 maxlen: 16 213.177.128.0/19 maxlen: 19 213.181.32.0/19 maxlen: 19 217.136.0.0/16 maxlen: 16 2a02:a000::/26 maxlen: 26 2a04:6c40::/29 maxlen: 29 2a04:9f80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e4:65:fa:30:b7:cd:b2:35:9b:58:89:fb:1a:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a Validity Not Before: Jan 1 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3881186613163714eac0f14fb6b2503ff3fff247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:20:37:30:83:b2:5f:69:c9:88:3d:af:b5:3c: ad:ca:46:03:da:e9:8e:be:14:03:2e:83:15:fe:d8: 15:b7:f5:0d:61:a5:39:6b:e2:78:53:0d:0b:bc:36: 71:7f:71:03:0b:64:af:99:81:4e:f6:1b:49:f9:b3: 68:91:67:7a:da:db:b8:36:f5:a5:6a:08:5b:c7:2c: 18:59:cc:86:71:d4:87:62:ae:e4:a2:20:b1:60:f2: 24:97:c4:74:95:82:f1:5c:fc:4d:0e:3a:74:86:62: 64:d0:ec:21:33:a8:34:ef:00:a6:80:92:eb:67:9d: 5d:e7:c9:57:f6:6d:90:b8:c2:25:c3:da:67:ed:d5: 1c:6e:e5:87:93:bb:f1:77:7c:fd:01:5b:56:9c:7c: c8:68:1c:08:eb:b2:cc:e3:c9:31:3d:85:99:65:0d: ca:e2:ae:f3:c8:6b:e1:f7:66:e8:41:10:37:b4:22: c1:44:78:cd:db:11:68:7e:69:25:fb:71:58:b4:21: 03:7f:ac:94:88:e0:bb:ee:42:0b:e3:5c:28:3d:0e: ac:21:2f:9c:1c:7c:25:26:4a:71:97:e4:70:51:eb: d5:95:00:2c:dd:c3:3f:6c:d2:13:fe:aa:01:0b:e7: 91:de:a8:96:97:99:5f:72:31:83:79:0e:83:2c:5c: d9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:81:18:66:13:16:37:14:EA:C0:F1:4F:B6:B2:50:3F:F3:FF:F2:47 X509v3 Authority Key Identifier: keyid:BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/OIEYZhMWNxTqwPFPtrJQP_P_8kc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.62.0.0/16 37.184.0.0/15 46.178.0.0/15 62.4.128.0/17 62.235.0.0/16 80.200.0.0/15 80.236.128.0/17 81.11.128.0/17 81.169.0.0/17 81.240.0.0/13 83.134.0.0/16 87.64.0.0/14 88.197.128.0/17 91.176.0.0/13 92.48.128.0/18 109.128.0.0/12 178.144.0.0/15 188.5.0.0/16 193.74.0.0/16 193.75.128.0/17 193.91.96.0/19 193.121.0.0/16 194.78.0.0/16 194.119.224.0/19 195.0.0.0/17 195.13.0.0/19 195.74.192.0/19 195.95.0.0/17 195.207.0.0/16 195.238.0.0/19 212.233.0.0/19 212.239.128.0/17 213.49.0.0/16 213.177.128.0/19 213.181.32.0/19 217.136.0.0/16 IPv6: 2a02:a000::/26 2a04:6c40::/29 2a04:9f80::/29 Signature Algorithm: sha256WithRSAEncryption 22:3d:69:38:dc:c8:8a:45:9a:74:fc:0e:2c:8c:38:0d:37:f2: 87:1c:e9:f6:0a:5c:84:10:c8:4d:66:07:f7:aa:1f:eb:a0:04: 55:ac:71:8f:df:00:dd:34:55:b1:3a:50:fc:ca:b9:d6:01:2b: 75:d7:e8:93:e9:b4:b5:b2:12:d4:30:d3:b7:38:4f:87:ef:25: 1c:2e:8e:fc:fc:58:51:55:11:34:b4:cd:5f:0d:e2:94:f1:2b: ca:a8:69:c6:03:a9:53:a9:ba:ad:71:9a:68:61:bc:7e:a4:74: 3b:e7:02:55:01:0f:86:0b:83:4e:7a:4f:50:db:7c:cb:fd:6b: 01:91:e3:ac:0b:5f:e4:60:ea:7f:d9:e7:9e:0c:fe:23:3c:a8: d5:6a:46:76:48:87:ba:e1:84:b4:07:46:6b:3f:31:b7:77:36: 23:77:78:82:a6:10:de:40:7a:99:7f:30:d6:15:cb:4c:a8:f7: 07:10:f7:70:5a:c4:3a:42:7c:ec:ba:20:48:76:c9:aa:65:88: e4:bf:78:09:c7:2d:e2:05:4c:a2:aa:72:da:e8:fa:ef:c0:94: 22:46:aa:a7:92:ab:d7:a2:c1:2d:6c:3f:2a:bc:8f:fa:ac:5a: 61:9a:86:78:52:84:cc:15:28:80:a3:23:38:2d:e3:de:73:fc: f2:63:06:ed -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgISAZt3xuRl+jC3zbI1m1iJ+xqFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmEzYWY4MzlhYTFkY2U3NThmNDg5ZTJkMzFhZTIyMDky ZmM5OWEwHhcNMjYwMTAxMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODgxMTg2NjEzMTYzNzE0ZWFjMGYxNGZiNmIyNTAzZmYzZmZmMjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiA3MIOyX2nJiD2vtTytykYD2umO vhQDLoMV/tgVt/UNYaU5a+J4Uw0LvDZxf3EDC2SvmYFO9htJ+bNokWd62tu4NvWl aghbxywYWcyGcdSHYq7koiCxYPIkl8R0lYLxXPxNDjp0hmJk0OwhM6g07wCmgJLr Z51d58lX9m2QuMIlw9pn7dUcbuWHk7vxd3z9AVtWnHzIaBwI67LM48kxPYWZZQ3K 4q7zyGvh92boQRA3tCLBRHjN2xFofmkl+3FYtCEDf6yUiOC77kIL41woPQ6sIS+c HHwlJkpxl+RwUevVlQAs3cM/bNIT/qoBC+eR3qiWl5lfcjGDeQ6DLFzZAwIDAQAB o4IC7DCCAugwHQYDVR0OBBYEFDiBGGYTFjcU6sDxT7ayUD/z//JHMB8GA1UdIwQY MBaAFL36Ovg5qh3OdY9Ini0xriIJL8maMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZvNi1EbXFIYzUxajBpZUxUR3VJZ2t2eVpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC84Y2RiYzUtOTM2NS00YTBjLWI5YTMt YWU3NzQ2ZjA5NjMwLzEvT0lFWVpoTVdOeFRxd1BGUHRySlFQX1BfOGtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC84Y2RiYzUtOTM2NS00YTBjLWI5YTMtYWU3NzQ2ZjA5NjMw LzEvdmZvNi1EbXFIYzUxajBpZUxUR3VJZ2t2eVpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBAAYIKwYBBQUHAQcBAf8EgfAwge0wgc0EAgABMIHGAwMA JT4DAwEluAMDAS6yAwQHPgSAAwMAPusDAwFQyAMEB1DsgAMEB1ELgAMEB1GpAAMD A1HwAwMAU4YDAwJXQAMEB1jFgAMDA1uwAwQGXDCAAwMEbYADAwGykAMDALwFAwMA wUoDBAfBS4ADBAXBW2ADAwDBeQMDAMJOAwQFwnfgAwQHwwAAAwQFww0AAwQFw0rA AwQHw18AAwMAw88DBAXD7gADBAXU6QADBAfU74ADAwDVMQMEBdWxgAMEBdW1IAMD ANmIMBsEAgACMBUDBQYqAqAAAwUDKgRsQAMFAyoEn4AwDQYJKoZIhvcNAQELBQAD ggEBACI9aTjcyIpFmnT8DiyMOA038occ6fYKXIQQyE1mB/eqH+ugBFWscY/fAN00 VbE6UPzKudYBK3XX6JPptLWyEtQw07c4T4fvJRwujvz8WFFVETS0zV8N4pTxK8qo acYDqVOpuq1xmmhhvH6kdDvnAlUBD4YLg056T1DbfMv9awGR46wLX+Rg6n/Z554M /iM8qNVqRnZIh7rhhLQHRms/Mbd3NiN3eIKmEN5Aepl/MNYVy0yo9wcQ93BaxDpC fOy6IEh2yapliOS/eAnHLeIFTKKqctro+u/AlCJGqqeSq9eiwS1sPyq8j/qsWmGa hnhShMwVKICjIzgt495z/PJjBu0= -----END CERTIFICATE-----Generated at Mon Feb 9 21:24:21 2026 by rpki-client