This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/1-oVz-ukS3HFDu_aW3GMcEndti7g.roa File: 1-oVz-ukS3HFDu_aW3GMcEndti7g.roa (raw, json) Hash identifier: swN06LulnBGamFOf7heyqpYBEANaxO83I7025OZqKLQ= Subject key identifier: FA:85:73:FA:E9:12:DC:71:43:BB:F6:96:DC:63:1C:12:77:6D:8B:B8 Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515 Certificate serial: 019C4178F9E7F11462F1289D2E2A92BF4293 Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/1-oVz-ukS3HFDu_aW3GMcEndti7g.roa Signing time: Mon 09 Feb 2026 08:16:13 +0000 ROA not before: Mon 09 Feb 2026 08:16:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197540 IP address blocks: 2.56.96.0/22 maxlen: 22 5.45.96.0/20 maxlen: 32 5.181.48.0/22 maxlen: 22 5.252.224.0/22 maxlen: 22 37.120.160.0/19 maxlen: 32 37.120.160.0/20 maxlen: 22 37.120.176.0/22 maxlen: 22 37.120.182.0/23 maxlen: 24 37.120.184.0/21 maxlen: 22 37.221.192.0/21 maxlen: 32 45.9.60.0/22 maxlen: 22 45.83.104.0/22 maxlen: 22 45.90.4.0/22 maxlen: 22 45.129.180.0/22 maxlen: 22 45.132.244.0/22 maxlen: 22 45.136.28.0/22 maxlen: 22 45.142.176.0/22 maxlen: 22 45.157.176.0/22 maxlen: 22 46.38.224.0/20 maxlen: 32 46.38.240.0/21 maxlen: 32 46.38.248.0/22 maxlen: 32 46.38.252.0/22 maxlen: 32 46.232.248.0/22 maxlen: 22 81.16.16.0/22 maxlen: 22 85.209.48.0/22 maxlen: 22 85.235.64.0/22 maxlen: 22 89.58.0.0/22 maxlen: 22 89.58.4.0/22 maxlen: 22 89.58.8.0/22 maxlen: 22 89.58.12.0/22 maxlen: 22 89.58.16.0/21 maxlen: 21 89.58.20.0/24 maxlen: 24 89.58.24.0/22 maxlen: 22 89.58.28.0/22 maxlen: 22 89.58.32.0/22 maxlen: 22 89.58.36.0/22 maxlen: 22 89.58.40.0/22 maxlen: 22 89.58.44.0/22 maxlen: 22 89.58.48.0/22 maxlen: 22 89.58.52.0/22 maxlen: 22 89.58.56.0/22 maxlen: 22 89.58.60.0/22 maxlen: 22 91.132.144.0/22 maxlen: 22 91.204.44.0/22 maxlen: 24 92.60.36.0/22 maxlen: 22 93.177.64.0/22 maxlen: 22 152.89.104.0/22 maxlen: 22 159.195.1.0/24 maxlen: 24 159.195.4.0/22 maxlen: 22 159.195.8.0/22 maxlen: 22 159.195.20.0/22 maxlen: 22 159.195.24.0/22 maxlen: 22 159.195.28.0/22 maxlen: 22 159.195.32.0/22 maxlen: 22 159.195.36.0/22 maxlen: 22 159.195.40.0/22 maxlen: 22 159.195.44.0/22 maxlen: 22 159.195.48.0/22 maxlen: 22 159.195.52.0/22 maxlen: 22 159.195.56.0/22 maxlen: 22 159.195.60.0/22 maxlen: 22 159.195.64.0/22 maxlen: 22 159.195.68.0/22 maxlen: 22 159.195.72.0/22 maxlen: 22 159.195.76.0/22 maxlen: 22 159.195.80.0/22 maxlen: 22 159.195.84.0/22 maxlen: 22 159.195.96.0/22 maxlen: 22 159.195.100.0/22 maxlen: 22 159.195.104.0/24 maxlen: 24 159.195.105.0/24 maxlen: 24 159.195.106.0/24 maxlen: 24 185.16.60.0/22 maxlen: 32 185.162.248.0/22 maxlen: 32 185.163.116.0/22 maxlen: 22 185.170.112.0/22 maxlen: 32 185.183.156.0/22 maxlen: 32 185.194.140.0/22 maxlen: 22 185.207.104.0/22 maxlen: 32 185.228.136.0/22 maxlen: 32 185.233.104.0/22 maxlen: 32 185.243.8.0/22 maxlen: 32 185.244.192.0/22 maxlen: 32 188.68.32.0/19 maxlen: 32 192.145.44.0/22 maxlen: 22 193.30.120.0/22 maxlen: 22 193.31.24.0/22 maxlen: 22 194.13.80.0/22 maxlen: 22 194.55.12.0/22 maxlen: 22 194.59.204.0/22 maxlen: 22 195.128.100.0/22 maxlen: 22 213.109.160.0/22 maxlen: 22 2a03:4000::/32 maxlen: 48 2a03:4000:63:1000::/52 maxlen: 52 2a03:4001::/32 maxlen: 48 2a0a:4cc0::/40 maxlen: 40 2a0a:4cc0::/43 maxlen: 43 2a0a:4cc0:40::/43 maxlen: 43 2a0a:4cc0:40:2000::/56 maxlen: 56 2a0a:4cc0:60::/43 maxlen: 43 2a0a:4cc0:80::/43 maxlen: 43 2a0a:4cc0:c0::/43 maxlen: 43 2a0a:4cc0:c1:6000::/52 maxlen: 52 2a0a:4cc0:c1:b000::/52 maxlen: 52 2a0a:4cc0:c1:d000::/52 maxlen: 52 2a0a:4cc0:c1:e000::/52 maxlen: 52 2a0a:4cc0:c1:f000::/52 maxlen: 52 2a0a:4cc0:c2:1000::/52 maxlen: 52 2a0a:4cc0:c2:2000::/52 maxlen: 52 2a0a:4cc0:c2:3000::/52 maxlen: 52 2a0a:4cc0:c2:4000::/52 maxlen: 52 2a0a:4cc0:c2:5000::/52 maxlen: 52 2a0a:4cc0:fe::/48 maxlen: 48 2a0a:4cc0:ff::/48 maxlen: 48 2a0a:4cc0:ff:1000::/52 maxlen: 52 2a0a:4cc0:100::/48 maxlen: 48 2a0a:4cc0:104::/48 maxlen: 48 2a0a:4cc0:104::/52 maxlen: 52 2a0a:4cc0:104:1000::/52 maxlen: 52 2a0a:4cc0:2000:4000::/56 maxlen: 56 2a0a:4cc0:2000:4200::/56 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:78:f9:e7:f1:14:62:f1:28:9d:2e:2a:92:bf:42:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515 Validity Not Before: Feb 9 08:16:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa8573fae912dc7143bbf696dc631c12776d8bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c4:12:cb:c8:98:dd:0d:ca:f0:13:36:62:aa: 66:88:92:b1:77:89:25:7f:c7:8c:27:31:cc:84:fc: 09:89:b0:ae:d4:07:d5:f5:48:8e:65:6c:2c:80:8e: a9:48:15:22:78:f7:e7:52:64:75:ca:06:f5:c4:5b: 13:8c:62:55:04:2d:f8:82:7e:0c:6e:18:ae:ce:04: 12:ab:78:14:9e:ff:b8:2c:a9:a0:cc:bd:44:de:c6: 34:76:17:8a:df:ca:bf:00:5f:3d:3b:a6:ad:3f:82: de:9f:74:61:b2:b2:c5:8a:9d:97:43:77:7a:15:72: 9f:c0:63:aa:b3:6c:cc:44:10:b1:3a:cf:0d:d2:b2: 31:50:d3:7b:2d:f9:43:ea:f8:16:32:01:88:1c:1e: c9:a2:d4:e8:01:62:cc:b6:cc:23:c5:2d:3c:14:7e: fc:aa:b0:46:25:be:c5:1b:66:1b:16:28:0b:90:2e: 70:e6:50:6c:17:22:5a:c0:fe:4a:c1:3e:62:82:56: d4:2b:b8:05:14:35:d6:41:16:29:d6:d2:16:d3:4c: b6:41:fc:53:eb:69:ae:c5:f5:2c:82:b7:c4:e5:e8: f5:08:54:f1:17:74:0f:4c:a0:8a:47:58:bb:be:4c: ae:6f:b7:6a:59:04:3f:ec:19:ff:b5:75:61:9a:6a: df:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:85:73:FA:E9:12:DC:71:43:BB:F6:96:DC:63:1C:12:77:6D:8B:B8 X509v3 Authority Key Identifier: keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/1-oVz-ukS3HFDu_aW3GMcEndti7g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.96.0/22 5.45.96.0/20 5.181.48.0/22 5.252.224.0/22 37.120.160.0/19 37.221.192.0/21 45.9.60.0/22 45.83.104.0/22 45.90.4.0/22 45.129.180.0/22 45.132.244.0/22 45.136.28.0/22 45.142.176.0/22 45.157.176.0/22 46.38.224.0/19 46.232.248.0/22 81.16.16.0/22 85.209.48.0/22 85.235.64.0/22 89.58.0.0/18 91.132.144.0/22 91.204.44.0/22 92.60.36.0/22 93.177.64.0/22 152.89.104.0/22 159.195.1.0/24 159.195.4.0-159.195.11.255 159.195.20.0-159.195.87.255 159.195.96.0-159.195.106.255 185.16.60.0/22 185.162.248.0/22 185.163.116.0/22 185.170.112.0/22 185.183.156.0/22 185.194.140.0/22 185.207.104.0/22 185.228.136.0/22 185.233.104.0/22 185.243.8.0/22 185.244.192.0/22 188.68.32.0/19 192.145.44.0/22 193.30.120.0/22 193.31.24.0/22 194.13.80.0/22 194.55.12.0/22 194.59.204.0/22 195.128.100.0/22 213.109.160.0/22 IPv6: 2a03:4000::/31 2a0a:4cc0::-2a0a:4cc0:100:ffff:ffff:ffff:ffff:ffff 2a0a:4cc0:104::/48 2a0a:4cc0:2000:4000::/56 2a0a:4cc0:2000:4200::/56 Signature Algorithm: sha256WithRSAEncryption 40:b2:f6:71:9b:c2:c1:59:4a:e3:e6:b7:4d:e6:61:c2:30:0d: 9c:98:d1:83:72:f4:f5:7f:42:24:c6:90:bd:54:88:bb:20:41: 01:de:06:b8:07:53:fc:db:53:3c:b3:78:28:61:16:e0:ae:f8: 96:b3:30:0b:a4:46:86:02:73:60:66:be:75:ad:22:5a:85:11: 0b:fe:11:ff:e1:58:6c:c6:c3:f2:a9:1b:50:ba:98:d9:91:a4: e3:27:52:ac:b6:b4:69:e9:fc:98:14:56:a3:21:01:1f:dd:ef: 6e:fc:a0:76:86:27:40:5f:d3:f7:32:39:0d:8a:91:34:1a:7e: 5d:e7:4d:8a:38:48:aa:ec:a6:5e:4f:2a:7b:ea:54:de:6f:50: 43:8b:09:a1:ce:7b:fe:17:aa:b8:31:a9:a2:70:0c:c4:f0:2c: 52:80:a1:bd:a9:f0:95:e3:3e:6c:84:1d:92:35:2e:4b:5d:09: 87:a3:66:8e:7c:b7:b7:10:d7:c8:0d:7e:46:dd:61:7a:71:8c: fe:cc:d6:ac:b2:8d:4d:fa:3a:38:25:63:0f:21:cc:4d:43:c3: 0d:d3:99:99:80:86:4f:42:2a:83:54:8e:d5:cd:8e:30:e2:64: 12:9b:6c:4f:ab:f8:35:34:f3:ec:0c:6d:a8:c9:34:c3:cd:52: 81:5c:a0:88 -----BEGIN CERTIFICATE----- MIIGfjCCBWagAwIBAgISAZxBePnn8RRi8SidLiqSv0KTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MmVlYjg3OTA4NWM5NDE5NDI5N2RkOWU0Y2QyNDljZDI1 MTY1MTUwHhcNMjYwMjA5MDgxNjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTg1NzNmYWU5MTJkYzcxNDNiYmY2OTZkYzYzMWMxMjc3NmQ4YmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MQSy8iY3Q3K8BM2YqpmiJKxd4kl f8eMJzHMhPwJibCu1AfV9UiOZWwsgI6pSBUiePfnUmR1ygb1xFsTjGJVBC34gn4M bhiuzgQSq3gUnv+4LKmgzL1E3sY0dheK38q/AF89O6atP4Len3RhsrLFip2XQ3d6 FXKfwGOqs2zMRBCxOs8N0rIxUNN7LflD6vgWMgGIHB7JotToAWLMtswjxS08FH78 qrBGJb7FG2YbFigLkC5w5lBsFyJawP5KwT5iglbUK7gFFDXWQRYp1tIW00y2QfxT 62muxfUsgrfE5ej1CFTxF3QPTKCKR1i7vkyub7dqWQQ/7Bn/tXVhmmrfzwIDAQAB o4IDijCCA4YwHQYDVR0OBBYEFPqFc/rpEtxxQ7v2ltxjHBJ3bYu4MB8GA1UdIwQY MBaAFPYu64eQhclBlCl92eTNJJzSUWUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzIt NWZiZjlhMjliNmUxLzEvMS1vVnotdWtTM0hGRHVfYVczR01jRW5kdGk3Zy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTkvOTFkYThiLTA1MDItNDhkZi04NTMyLTVmYmY5YTI5YjZl MS8xLzlpN3JoNUNGeVVHVUtYM1o1TTBrbk5KUlpSVS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCCAZ0GCCsGAQUFBwEHAQH/BIIBjDCCAYgwggFGBAIAATCC AT4DBAICOGADBAQFLWADBAIFtTADBAIF/OADBAUleKADBAMl3cADBAItCTwDBAIt U2gDBAItWgQDBAItgbQDBAIthPQDBAItiBwDBAItjrADBAItnbADBAUuJuADBAIu 6PgDBAJREBADBAJV0TADBAJV60ADBAZZOgADBAJbhJADBAJbzCwDBAJcPCQDBAJd sUADBAKYWWgDBACfwwEwDAMEAp/DBAMEAp/DCDAMAwQCn8MUAwQDn8NQMAwDBAWf w2ADBACfw2oDBAK5EDwDBAK5ovgDBAK5o3QDBAK5qnADBAK5t5wDBAK5wowDBAK5 z2gDBAK55IgDBAK56WgDBAK58wgDBAK59MADBAW8RCADBALAkSwDBALBHngDBALB HxgDBALCDVADBALCNwwDBALCO8wDBALDgGQDBALVbaAwPAQCAAIwNgMFASoDQAAw EAMFBioKTMADBwAqCkzAAQADBwAqCkzAAQQDCAAqCkzAIABAAwgAKgpMwCAAQjAN BgkqhkiG9w0BAQsFAAOCAQEAQLL2cZvCwVlK4+a3TeZhwjANnJjRg3L09X9CJMaQ vVSIuyBBAd4GuAdT/NtTPLN4KGEW4K74lrMwC6RGhgJzYGa+da0iWoURC/4R/+FY bMbD8qkbULqY2ZGk4ydSrLa0aen8mBRWoyEBH93vbvygdoYnQF/T9zI5DYqRNBp+ XedNijhIquymXk8qe+pU3m9QQ4sJoc57/hequDGponAMxPAsUoChvanwleM+bIQd kjUuS10Jh6Nmjny3txDXyA1+Rt1henGM/szWrLKNTfo6OCVjDyHMTUPDDdOZmYCG T0Iqg1SO1c2OMOJkEptsT6v4NTTz7AxtqMk0w81SgVygiA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:31 2026 by rpki-client