This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/z8QPDmNfQ0U5nDiOWR6fhTlT5bY.roa File: z8QPDmNfQ0U5nDiOWR6fhTlT5bY.roa (raw, json) Hash identifier: JpJdMydt2d4jsczclhW+ZcOFIoTDZoU5V9xzlSAiVrs= Subject key identifier: CF:C4:0F:0E:63:5F:43:45:39:9C:38:8E:59:1E:9F:85:39:53:E5:B6 Certificate issuer: /CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf Certificate serial: 019B78343B42039E7C27265A7CFCD3E26586 Authority key identifier: E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/z8QPDmNfQ0U5nDiOWR6fhTlT5bY.roa Signing time: Thu 01 Jan 2026 06:17:27 +0000 ROA not before: Thu 01 Jan 2026 06:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202596 IP address blocks: 45.12.240.0/22 maxlen: 22 45.80.244.0/22 maxlen: 22 45.92.120.0/22 maxlen: 22 45.95.156.0/22 maxlen: 22 45.133.120.0/21 maxlen: 21 45.133.128.0/22 maxlen: 22 45.134.228.0/22 maxlen: 22 45.139.12.0/22 maxlen: 22 45.141.132.0/22 maxlen: 22 45.145.48.0/22 maxlen: 22 45.149.188.0/22 maxlen: 22 45.152.232.0/22 maxlen: 22 45.159.64.0/23 maxlen: 23 62.197.32.0/21 maxlen: 21 62.197.42.0/23 maxlen: 23 62.197.46.0/23 maxlen: 23 62.197.52.0/22 maxlen: 22 62.197.56.0/21 maxlen: 21 80.249.16.0/20 maxlen: 20 85.8.164.0/22 maxlen: 22 86.105.196.0/24 maxlen: 24 95.141.16.0/20 maxlen: 20 130.195.48.0/22 maxlen: 22 130.195.60.0/22 maxlen: 22 158.41.48.0/20 maxlen: 20 160.19.180.0/22 maxlen: 22 161.38.0.0/21 maxlen: 21 176.97.152.0/22 maxlen: 22 185.14.88.0/22 maxlen: 22 185.96.220.0/22 maxlen: 22 185.106.72.0/22 maxlen: 22 185.111.72.0/22 maxlen: 22 185.159.76.0/22 maxlen: 22 185.176.160.0/22 maxlen: 22 185.179.12.0/22 maxlen: 22 185.222.80.0/22 maxlen: 22 185.225.44.0/22 maxlen: 22 185.226.36.0/22 maxlen: 22 185.236.184.0/22 maxlen: 22 185.239.32.0/22 maxlen: 22 185.240.108.0/22 maxlen: 22 185.247.172.0/22 maxlen: 22 185.248.104.0/22 maxlen: 22 185.250.188.0/22 maxlen: 22 185.254.136.0/22 maxlen: 22 193.29.28.0/22 maxlen: 22 193.39.240.0/22 maxlen: 22 193.46.20.0/22 maxlen: 22 194.6.251.0/24 maxlen: 24 194.6.252.0/24 maxlen: 24 194.6.254.0/24 maxlen: 24 195.26.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:3b:42:03:9e:7c:27:26:5a:7c:fc:d3:e2:65:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf Validity Not Before: Jan 1 06:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfc40f0e635f4345399c388e591e9f853953e5b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ca:8b:ed:c8:59:7d:04:29:d3:e3:3a:7c:ae: 5c:1f:98:b9:4e:d2:04:9c:ae:f3:6c:81:d3:1f:ff: fd:77:2a:e2:34:2b:da:f1:e1:24:28:12:10:52:fc: 6e:97:62:cd:b7:0d:b0:d7:2b:7b:ec:bc:fd:b1:d0: bf:01:0d:96:a4:5b:cb:1c:8a:d4:6c:ae:4a:f1:95: 10:c1:71:e2:45:7f:c7:6c:16:b3:20:4e:2b:fb:13: d6:6e:18:15:19:b5:e7:0c:1f:15:0e:77:69:73:23: b3:db:62:8d:10:55:a5:53:2f:2c:91:fe:6d:2a:ec: a7:8b:97:61:d5:2c:8d:2a:83:7f:9a:f9:41:1d:d5: 9f:2b:78:a1:01:b8:a0:34:50:29:75:62:43:3a:6d: a4:fd:49:11:09:fd:fa:1c:2a:4b:28:83:60:59:56: 54:dc:95:d8:da:0f:a7:1f:db:8f:6e:e2:9a:2b:35: f8:c8:5a:91:c1:88:19:7b:f1:01:8f:8e:4c:9e:aa: af:0e:de:90:d4:20:ab:99:f2:35:f0:8d:2c:ae:c8: 40:01:a5:7a:a9:13:a7:89:4c:af:c0:00:4d:49:05: 1e:b6:bb:03:64:aa:79:1d:e2:70:9b:bc:08:a5:55: d8:c3:bf:7d:dc:bf:be:93:b5:9f:1e:a9:7d:0a:05: ca:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C4:0F:0E:63:5F:43:45:39:9C:38:8E:59:1E:9F:85:39:53:E5:B6 X509v3 Authority Key Identifier: keyid:E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/z8QPDmNfQ0U5nDiOWR6fhTlT5bY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.240.0/22 45.80.244.0/22 45.92.120.0/22 45.95.156.0/22 45.133.120.0-45.133.131.255 45.134.228.0/22 45.139.12.0/22 45.141.132.0/22 45.145.48.0/22 45.149.188.0/22 45.152.232.0/22 45.159.64.0/23 62.197.32.0/21 62.197.42.0/23 62.197.46.0/23 62.197.52.0-62.197.63.255 80.249.16.0/20 85.8.164.0/22 86.105.196.0/24 95.141.16.0/20 130.195.48.0/22 130.195.60.0/22 158.41.48.0/20 160.19.180.0/22 161.38.0.0/21 176.97.152.0/22 185.14.88.0/22 185.96.220.0/22 185.106.72.0/22 185.111.72.0/22 185.159.76.0/22 185.176.160.0/22 185.179.12.0/22 185.222.80.0/22 185.225.44.0/22 185.226.36.0/22 185.236.184.0/22 185.239.32.0/22 185.240.108.0/22 185.247.172.0/22 185.248.104.0/22 185.250.188.0/22 185.254.136.0/22 193.29.28.0/22 193.39.240.0/22 193.46.20.0/22 194.6.251.0-194.6.252.255 194.6.254.0/24 195.26.112.0/20 Signature Algorithm: sha256WithRSAEncryption 92:15:82:4c:a6:a6:2c:56:a6:26:0c:c5:0b:51:7b:b7:61:16: ce:d2:c0:d6:a2:45:66:90:4f:de:63:46:d4:1b:7e:ea:3e:8e: 05:84:bb:de:b2:d0:7d:10:d8:64:54:01:f6:80:78:36:f0:48: 0f:6d:82:b2:8a:fa:1a:63:30:58:9c:8a:94:de:09:df:96:55: 4c:48:c1:84:5e:68:57:39:27:28:84:dc:d7:66:2a:0f:4d:77: 9f:c0:25:bd:c9:a1:95:e0:7f:fe:13:51:e4:7a:bb:c7:c6:cb: 4b:04:5a:2c:de:d2:c0:bb:12:59:07:b0:37:7d:ff:ac:09:64: a2:a4:96:0d:71:96:55:7a:5b:e8:71:1b:51:76:54:b9:b1:40: 83:2c:18:e3:d3:22:30:8e:c1:6d:e2:92:2a:34:a1:8f:47:48: e4:fe:37:e7:70:8f:2c:e3:d2:71:3b:12:96:57:2a:c8:04:46: 23:23:0a:45:75:da:2a:1a:2f:0a:f4:5d:e5:77:3e:db:1d:a3: 6a:f1:49:01:1a:c7:46:4e:8f:b2:e1:26:1e:49:c4:e5:72:71: 4b:35:2a:1f:d0:f3:15:bc:0c:f0:10:7f:63:6a:5a:d4:67:f3: 8d:9c:62:14:38:8c:35:af:7f:c3:45:6a:d6:dd:89:da:c5:1e: fc:59:87:1b -----BEGIN CERTIFICATE----- MIIGPzCCBSegAwIBAgISAZt4NDtCA558JyZafPzT4mWGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5ZmRmY2RjMzI2MWI1N2FmYWRmZWQ3MzBmYjJkZWRiMjg2 NDlmY2YwHhcNMjYwMTAxMDYxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmM0MGYwZTYzNWY0MzQ1Mzk5YzM4OGU1OTFlOWY4NTM5NTNlNWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusqL7chZfQQp0+M6fK5cH5i5TtIE nK7zbIHTH//9dyriNCva8eEkKBIQUvxul2LNtw2w1yt77Lz9sdC/AQ2WpFvLHIrU bK5K8ZUQwXHiRX/HbBazIE4r+xPWbhgVGbXnDB8VDndpcyOz22KNEFWlUy8skf5t Kuyni5dh1SyNKoN/mvlBHdWfK3ihAbigNFApdWJDOm2k/UkRCf36HCpLKINgWVZU 3JXY2g+nH9uPbuKaKzX4yFqRwYgZe/EBj45MnqqvDt6Q1CCrmfI18I0srshAAaV6 qROniUyvwABNSQUetrsDZKp5HeJwm7wIpVXYw7993L++k7WfHql9CgXKkwIDAQAB o4IDSzCCA0cwHQYDVR0OBBYEFM/EDw5jX0NFOZw4jlken4U5U+W2MB8GA1UdIwQY MBaAFOn9/NwyYbV6+t/tcw+y3tsoZJ/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmYzODNESmh0WHI2My0xekQ3TGUyeWhrbjg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8xYmExOTEtYTQyYS00NTA5LWJiMjgt MGJjN2U3ZWYwNzYzLzEvejhRUERtTmZRMFU1bkRpT1dSNmZoVGxUNWJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8xYmExOTEtYTQyYS00NTA5LWJiMjgtMGJjN2U3ZWYwNzYz LzEvNmYzODNESmh0WHI2My0xekQ3TGUyeWhrbjg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBXwYIKwYBBQUHAQcBAf8EggFOMIIBSjCCAUYEAgABMIIB PgMEAi0M8AMEAi1Q9AMEAi1ceAMEAi1fnDAMAwQDLYV4AwQCLYWAAwQCLYbkAwQC LYsMAwQCLY2EAwQCLZEwAwQCLZW8AwQCLZjoAwQBLZ9AAwQDPsUgAwQBPsUqAwQB PsUuMAwDBAI+xTQDBAY+xQADBARQ+RADBAJVCKQDBABWacQDBARfjRADBAKCwzAD BAKCwzwDBASeKTADBAKgE7QDBAOhJgADBAKwYZgDBAK5DlgDBAK5YNwDBAK5akgD BAK5b0gDBAK5n0wDBAK5sKADBAK5swwDBAK53lADBAK54SwDBAK54iQDBAK57LgD BAK57yADBAK58GwDBAK596wDBAK5+GgDBAK5+rwDBAK5/ogDBALBHRwDBALBJ/AD BALBLhQwDAMEAMIG+wMEAMIG/AMEAMIG/gMEBMMacDANBgkqhkiG9w0BAQsFAAOC AQEAkhWCTKamLFamJgzFC1F7t2EWztLA1qJFZpBP3mNG1Bt+6j6OBYS73rLQfRDY ZFQB9oB4NvBID22Csor6GmMwWJyKlN4J35ZVTEjBhF5oVzknKITc12YqD013n8Al vcmhleB//hNR5Hq7x8bLSwRaLN7SwLsSWQewN33/rAlkoqSWDXGWVXpb6HEbUXZU ubFAgywY49MiMI7BbeKSKjShj0dI5P4353CPLOPScTsSllcqyARGIyMKRXXaKhov CvRd5Xc+2x2javFJARrHRk6PsuEmHknE5XJxSzUqH9DzFbwM8BB/Y2pa1GfzjZxi FDiMNa9/w0Vq1t2J2sUe/FmHGw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:27 2026 by rpki-client