This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2mPFe9JVtxL9OQS0FXDy5IQ03NY.roa File: 2mPFe9JVtxL9OQS0FXDy5IQ03NY.roa (raw, json) Hash identifier: YVqGVZ6ZOkKJTz6fUioZORtCd6gtshptjDNfyzrFom8= Subject key identifier: DA:63:C5:7B:D2:55:B7:12:FD:39:04:B4:15:70:F2:E4:84:34:DC:D6 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BC627DEF3A56B63CC41E74C86C0BF6A4B Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2mPFe9JVtxL9OQS0FXDy5IQ03NY.roa Signing time: Fri 16 Jan 2026 09:34:20 +0000 ROA not before: Fri 16 Jan 2026 09:34:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 37.202.223.0/24 maxlen: 24 151.240.4.0/24 maxlen: 24 151.240.5.0/24 maxlen: 24 151.240.6.0/24 maxlen: 24 151.240.7.0/24 maxlen: 24 151.240.11.0/24 maxlen: 24 151.240.12.0/24 maxlen: 24 151.240.13.0/24 maxlen: 24 151.240.15.0/24 maxlen: 24 151.240.16.0/24 maxlen: 24 151.240.17.0/24 maxlen: 24 151.240.18.0/24 maxlen: 24 151.240.19.0/24 maxlen: 24 151.240.20.0/24 maxlen: 24 151.240.21.0/24 maxlen: 24 151.240.22.0/24 maxlen: 24 151.240.23.0/24 maxlen: 24 151.240.25.0/24 maxlen: 24 151.240.32.0/24 maxlen: 24 151.240.33.0/24 maxlen: 24 151.240.34.0/24 maxlen: 24 151.240.35.0/24 maxlen: 24 151.240.36.0/24 maxlen: 24 151.240.37.0/24 maxlen: 24 151.240.38.0/24 maxlen: 24 151.240.39.0/24 maxlen: 24 151.240.40.0/24 maxlen: 24 151.240.41.0/24 maxlen: 24 151.240.42.0/24 maxlen: 24 151.240.68.0/24 maxlen: 24 151.240.69.0/24 maxlen: 24 151.240.70.0/24 maxlen: 24 151.240.71.0/24 maxlen: 24 151.240.73.0/24 maxlen: 24 151.240.78.0/24 maxlen: 24 151.240.83.0/24 maxlen: 24 151.240.84.0/24 maxlen: 24 151.240.85.0/24 maxlen: 24 151.240.86.0/24 maxlen: 24 151.240.87.0/24 maxlen: 24 151.240.88.0/24 maxlen: 24 151.240.89.0/24 maxlen: 24 151.240.90.0/24 maxlen: 24 151.240.126.0/24 maxlen: 24 151.240.127.0/24 maxlen: 24 151.240.128.0/24 maxlen: 24 151.240.129.0/24 maxlen: 24 151.240.130.0/24 maxlen: 24 151.240.131.0/24 maxlen: 24 151.240.132.0/24 maxlen: 24 151.240.133.0/24 maxlen: 24 151.240.134.0/24 maxlen: 24 151.240.135.0/24 maxlen: 24 151.240.136.0/24 maxlen: 24 151.240.137.0/24 maxlen: 24 151.240.138.0/24 maxlen: 24 151.240.139.0/24 maxlen: 24 151.240.140.0/24 maxlen: 24 151.240.141.0/24 maxlen: 24 151.240.142.0/24 maxlen: 24 151.240.143.0/24 maxlen: 24 151.240.152.0/24 maxlen: 24 151.240.156.0/24 maxlen: 24 151.240.157.0/24 maxlen: 24 151.240.159.0/24 maxlen: 24 151.240.160.0/24 maxlen: 24 151.240.162.0/24 maxlen: 24 151.240.163.0/24 maxlen: 24 151.240.164.0/24 maxlen: 24 151.240.166.0/24 maxlen: 24 151.240.167.0/24 maxlen: 24 151.240.168.0/24 maxlen: 24 151.240.170.0/24 maxlen: 24 151.240.171.0/24 maxlen: 24 151.240.172.0/24 maxlen: 24 151.240.173.0/24 maxlen: 24 151.240.174.0/24 maxlen: 24 151.240.175.0/24 maxlen: 24 151.240.176.0/24 maxlen: 24 151.240.178.0/24 maxlen: 24 151.240.180.0/24 maxlen: 24 151.240.181.0/24 maxlen: 24 151.240.182.0/24 maxlen: 24 151.240.183.0/24 maxlen: 24 151.240.184.0/24 maxlen: 24 151.240.185.0/24 maxlen: 24 151.240.186.0/24 maxlen: 24 151.240.187.0/24 maxlen: 24 151.240.188.0/24 maxlen: 24 151.240.189.0/24 maxlen: 24 151.240.190.0/24 maxlen: 24 151.240.191.0/24 maxlen: 24 151.240.192.0/24 maxlen: 24 151.240.193.0/24 maxlen: 24 151.240.194.0/24 maxlen: 24 151.240.195.0/24 maxlen: 24 151.240.196.0/24 maxlen: 24 151.240.197.0/24 maxlen: 24 151.240.198.0/24 maxlen: 24 151.240.199.0/24 maxlen: 24 151.240.200.0/24 maxlen: 24 151.240.201.0/24 maxlen: 24 151.240.202.0/24 maxlen: 24 151.240.203.0/24 maxlen: 24 151.240.204.0/24 maxlen: 24 151.240.206.0/24 maxlen: 24 151.240.207.0/24 maxlen: 24 151.240.208.0/24 maxlen: 24 151.240.209.0/24 maxlen: 24 151.240.210.0/24 maxlen: 24 151.240.211.0/24 maxlen: 24 151.240.212.0/24 maxlen: 24 151.240.213.0/24 maxlen: 24 151.240.214.0/24 maxlen: 24 151.240.215.0/24 maxlen: 24 151.240.216.0/24 maxlen: 24 151.240.217.0/24 maxlen: 24 151.240.218.0/24 maxlen: 24 151.240.219.0/24 maxlen: 24 151.240.220.0/24 maxlen: 24 151.240.221.0/24 maxlen: 24 151.240.222.0/24 maxlen: 24 151.240.223.0/24 maxlen: 24 151.240.224.0/24 maxlen: 24 151.240.225.0/24 maxlen: 24 151.240.229.0/24 maxlen: 24 151.240.233.0/24 maxlen: 24 151.240.234.0/24 maxlen: 24 151.240.235.0/24 maxlen: 24 151.240.236.0/24 maxlen: 24 151.240.237.0/24 maxlen: 24 151.240.238.0/24 maxlen: 24 151.240.240.0/24 maxlen: 24 151.240.248.0/24 maxlen: 24 151.240.254.0/24 maxlen: 24 151.241.32.0/24 maxlen: 24 151.242.145.0/24 maxlen: 24 151.243.45.0/24 maxlen: 24 151.243.88.0/24 maxlen: 24 151.244.186.0/24 maxlen: 24 151.244.187.0/24 maxlen: 24 151.245.132.0/24 maxlen: 24 151.245.203.0/24 maxlen: 24 151.247.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:27:de:f3:a5:6b:63:cc:41:e7:4c:86:c0:bf:6a:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 16 09:34:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da63c57bd255b712fd3904b41570f2e48434dcd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ef:3f:13:dd:46:96:bb:b3:40:b1:a4:a0:f0: f5:83:ba:7e:35:16:ef:4c:8b:37:51:1d:8f:2d:e7: e2:3f:89:7b:1b:ff:e2:45:44:eb:c5:fa:5e:3b:16: 07:5b:b7:f0:1d:cf:4e:13:5d:76:b9:ef:40:7b:c1: ef:2d:1b:22:dc:62:3e:eb:66:12:62:5e:96:ec:5c: c8:92:82:8a:b5:15:69:07:16:9f:30:71:96:d5:e2: 3d:ff:a7:29:61:e5:b7:a0:3b:01:b4:bc:a6:b7:94: 49:dc:f7:cb:ad:e2:a3:de:a5:53:da:bd:eb:3a:3a: 82:39:47:6e:1c:e3:1a:3b:2b:b6:01:d1:d0:8d:46: 85:e4:17:a9:a2:99:04:f8:e2:90:e8:dd:bf:25:02: e0:40:53:c6:df:e1:ef:d7:a0:ca:d7:8a:6a:59:bf: 30:91:c1:00:1b:50:a9:ca:e4:34:15:bd:9f:04:56: c1:5c:4e:14:9e:5a:60:6a:7d:b1:4e:3b:8c:33:bc: 1f:b1:19:81:a9:b3:70:48:d2:c0:8c:01:fe:d4:98: 51:82:b2:d8:a3:ea:d0:c0:7e:e9:cd:90:7c:d6:4b: b9:63:d9:14:c6:54:10:6d:9b:23:64:1e:2d:ec:84: 74:5f:1e:96:93:91:83:c1:e3:cc:f4:c8:fa:82:3f: f3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:63:C5:7B:D2:55:B7:12:FD:39:04:B4:15:70:F2:E4:84:34:DC:D6 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2mPFe9JVtxL9OQS0FXDy5IQ03NY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.223.0/24 151.240.4.0/22 151.240.11.0-151.240.13.255 151.240.15.0-151.240.23.255 151.240.25.0/24 151.240.32.0-151.240.42.255 151.240.68.0/22 151.240.73.0/24 151.240.78.0/24 151.240.83.0-151.240.90.255 151.240.126.0-151.240.143.255 151.240.152.0/24 151.240.156.0/23 151.240.159.0-151.240.160.255 151.240.162.0-151.240.164.255 151.240.166.0-151.240.168.255 151.240.170.0-151.240.176.255 151.240.178.0/24 151.240.180.0-151.240.204.255 151.240.206.0-151.240.225.255 151.240.229.0/24 151.240.233.0-151.240.238.255 151.240.240.0/24 151.240.248.0/24 151.240.254.0/24 151.241.32.0/24 151.242.145.0/24 151.243.45.0/24 151.243.88.0/24 151.244.186.0/23 151.245.132.0/24 151.245.203.0/24 151.247.4.0/24 Signature Algorithm: sha256WithRSAEncryption 92:f0:0f:a5:cf:2f:1c:2e:1f:33:10:f2:8b:eb:bb:20:c4:ea: 78:e3:c9:e0:9b:15:af:53:0b:e9:cd:cb:ca:12:9f:68:3a:ca: dc:7f:18:44:02:b3:c8:1e:b2:24:ae:05:5d:dc:0d:a4:81:a8: 86:db:9f:f4:1c:09:96:31:ac:43:d4:73:aa:08:46:4d:b4:b1: 32:77:b6:2c:96:cf:34:d0:db:9f:c4:29:63:08:df:95:d4:79: 9d:02:24:2b:aa:f8:98:9d:1b:60:70:34:38:78:53:3b:fa:e8: 97:39:1d:cb:c7:6a:56:e1:d1:d9:4b:b6:76:b2:8f:76:ef:ab: 29:d3:23:4a:9a:f3:11:e9:bf:8f:28:1d:e1:8b:f4:d2:8b:2d: b0:ba:90:2f:c2:07:ff:27:f5:27:68:f9:85:2b:61:75:97:bf: b3:a7:b2:95:33:c1:f6:7c:ef:cd:65:59:5e:03:03:2c:57:03: 62:48:9b:14:c2:a2:fd:01:fd:87:09:7e:a8:15:ed:7e:34:39: 0c:53:94:c8:70:26:da:75:a6:87:37:4b:fa:a9:8f:ea:7d:47: ee:1f:4f:01:ad:b6:d6:e1:3d:41:de:b6:96:45:41:06:f7:8f: d2:44:af:19:ed:91:d3:48:0a:06:9a:59:36:06:18:f3:06:6e: 81:d9:de:b0 -----BEGIN CERTIFICATE----- MIIGJzCCBQ+gAwIBAgISAZvGJ97zpWtjzEHnTIbAv2pLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTE2MDkzNDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTYzYzU3YmQyNTViNzEyZmQzOTA0YjQxNTcwZjJlNDg0MzRkY2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+8/E91GlruzQLGkoPD1g7p+NRbv TIs3UR2PLefiP4l7G//iRUTrxfpeOxYHW7fwHc9OE112ue9Ae8HvLRsi3GI+62YS Yl6W7FzIkoKKtRVpBxafMHGW1eI9/6cpYeW3oDsBtLymt5RJ3PfLreKj3qVT2r3r OjqCOUduHOMaOyu2AdHQjUaF5BepopkE+OKQ6N2/JQLgQFPG3+Hv16DK14pqWb8w kcEAG1CpyuQ0Fb2fBFbBXE4Unlpgan2xTjuMM7wfsRmBqbNwSNLAjAH+1JhRgrLY o+rQwH7pzZB81ku5Y9kUxlQQbZsjZB4t7IR0Xx6Wk5GDwePM9Mj6gj/zqQIDAQAB o4IDMzCCAy8wHQYDVR0OBBYEFNpjxXvSVbcS/TkEtBVw8uSENNzWMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvMm1QRmU5SlZ0eEw5T1FTMEZYRHk1SVEwM05ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBRwYIKwYBBQUHAQcBAf8EggE2MIIBMjCCAS4EAgABMIIB JgMEACXK3wMEApfwBDAMAwQAl/ALAwQBl/AMMAwDBACX8A8DBAOX8BADBACX8Bkw DAMEBZfwIAMEAJfwKgMEApfwRAMEAJfwSQMEAJfwTjAMAwQAl/BTAwQAl/BaMAwD BAGX8H4DBASX8IADBACX8JgDBAGX8JwwDAMEAJfwnwMEAJfwoDAMAwQBl/CiAwQA l/CkMAwDBAGX8KYDBACX8KgwDAMEAZfwqgMEAJfwsAMEAJfwsjAMAwQCl/C0AwQA l/DMMAwDBAGX8M4DBAGX8OADBACX8OUwDAMEAJfw6QMEAJfw7gMEAJfw8AMEAJfw +AMEAJfw/gMEAJfxIAMEAJfykQMEAJfzLQMEAJfzWAMEAZf0ugMEAJf1hAMEAJf1 ywMEAJf3BDANBgkqhkiG9w0BAQsFAAOCAQEAkvAPpc8vHC4fMxDyi+u7IMTqeOPJ 4JsVr1ML6c3LyhKfaDrK3H8YRAKzyB6yJK4FXdwNpIGohtuf9BwJljGsQ9RzqghG TbSxMne2LJbPNNDbn8QpYwjfldR5nQIkK6r4mJ0bYHA0OHhTO/rolzkdy8dqVuHR 2Uu2drKPdu+rKdMjSprzEem/jygd4Yv00ostsLqQL8IH/yf1J2j5hSthdZe/s6ey lTPB9nzvzWVZXgMDLFcDYkibFMKi/QH9hwl+qBXtfjQ5DFOUyHAm2nWmhzdL+qmP 6n1H7h9PAa221uE9Qd62lkVBBveP0kSvGe2R00gKBppZNgYY8wZugdnesA== -----END CERTIFICATE-----Generated at Sun Jan 18 06:28:51 2026 by rpki-client