This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/FYAhwz0XUXMj3Em57TD9TkM3OXA.roa File: FYAhwz0XUXMj3Em57TD9TkM3OXA.roa (raw, json) Hash identifier: MrmuMWKlCOvyn8DaNpGl354yJudqg44bXzGP/KrDTQ4= Subject key identifier: 15:80:21:C3:3D:17:51:73:23:DC:49:B9:ED:30:FD:4E:43:37:39:70 Certificate issuer: /CN=19e06155fc1e37652b2b79c9a536d2e6144d04f7 Certificate serial: 019C0E42E39A2F12A404C2ED20E7A6491999 Authority key identifier: 19:E0:61:55:FC:1E:37:65:2B:2B:79:C9:A5:36:D2:E6:14:4D:04:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/FYAhwz0XUXMj3Em57TD9TkM3OXA.roa Signing time: Fri 30 Jan 2026 09:36:30 +0000 ROA not before: Fri 30 Jan 2026 09:36:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47292 IP address blocks: 31.31.80.0/21 maxlen: 24 77.66.0.0/21 maxlen: 24 77.66.8.0/22 maxlen: 24 77.66.16.0/20 maxlen: 24 77.66.32.0/21 maxlen: 24 77.66.40.0/22 maxlen: 24 77.66.48.0/23 maxlen: 24 77.66.54.0/23 maxlen: 24 77.66.56.0/21 maxlen: 24 77.66.64.0/22 maxlen: 24 77.66.72.0/23 maxlen: 24 77.66.76.0/22 maxlen: 24 77.66.80.0/21 maxlen: 24 77.66.88.0/22 maxlen: 24 77.66.96.0/23 maxlen: 24 77.66.104.0/22 maxlen: 24 77.66.120.0/23 maxlen: 24 77.66.124.0/23 maxlen: 24 81.7.128.0/21 maxlen: 24 81.7.136.0/22 maxlen: 24 81.7.140.0/23 maxlen: 24 81.7.144.0/23 maxlen: 24 81.7.148.0/22 maxlen: 24 81.7.152.0/22 maxlen: 24 81.7.152.0/24 maxlen: 24 81.7.158.0/23 maxlen: 24 81.7.160.0/21 maxlen: 24 81.7.168.0/22 maxlen: 24 81.7.174.0/23 maxlen: 24 81.7.176.0/20 maxlen: 24 81.19.224.0/20 maxlen: 24 81.19.240.0/21 maxlen: 24 81.19.248.0/22 maxlen: 24 83.221.128.0/22 maxlen: 24 83.221.142.0/23 maxlen: 24 83.221.150.0/23 maxlen: 24 83.221.154.0/23 maxlen: 24 83.221.156.0/23 maxlen: 24 86.48.32.0/21 maxlen: 24 86.48.40.0/23 maxlen: 24 86.48.48.0/22 maxlen: 24 86.48.66.0/23 maxlen: 24 86.48.72.0/21 maxlen: 24 86.48.80.0/20 maxlen: 24 86.48.96.0/20 maxlen: 24 86.48.112.0/23 maxlen: 24 86.58.128.0/23 maxlen: 24 86.58.132.0/22 maxlen: 24 86.58.136.0/21 maxlen: 24 86.58.144.0/22 maxlen: 24 86.58.148.0/23 maxlen: 24 86.58.156.0/22 maxlen: 24 86.58.160.0/21 maxlen: 24 86.58.168.0/22 maxlen: 24 86.58.174.0/23 maxlen: 24 86.58.176.0/21 maxlen: 24 86.58.184.0/22 maxlen: 24 86.58.192.0/22 maxlen: 24 86.58.198.0/23 maxlen: 24 86.58.204.0/22 maxlen: 24 86.58.224.0/22 maxlen: 24 86.58.240.0/22 maxlen: 24 86.58.244.0/23 maxlen: 24 86.58.248.0/21 maxlen: 24 89.186.168.0/23 maxlen: 24 89.186.172.0/22 maxlen: 24 89.186.176.0/20 maxlen: 24 89.188.80.0/21 maxlen: 24 89.188.88.0/23 maxlen: 24 89.188.92.0/23 maxlen: 24 91.102.88.0/21 maxlen: 24 91.193.136.0/22 maxlen: 24 91.215.160.0/22 maxlen: 24 93.180.80.0/23 maxlen: 24 93.180.84.0/22 maxlen: 24 94.126.176.0/23 maxlen: 24 94.126.182.0/23 maxlen: 24 109.238.48.0/21 maxlen: 24 185.45.48.0/22 maxlen: 24 195.190.153.0/24 maxlen: 24 195.211.176.0/22 maxlen: 24 212.97.128.0/22 maxlen: 24 217.30.36.0/22 maxlen: 24 217.116.224.0/20 maxlen: 24 217.116.240.0/23 maxlen: 24 217.116.254.0/23 maxlen: 24 217.145.48.0/21 maxlen: 24 217.145.56.0/23 maxlen: 24 2001:1448::/32 maxlen: 48 2a00:49c0::/32 maxlen: 48 2a01:6200::/32 maxlen: 48 2a01:7920::/29 maxlen: 48 2a02:9d0::/32 maxlen: 48 2a03:a480::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0e:42:e3:9a:2f:12:a4:04:c2:ed:20:e7:a6:49:19:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19e06155fc1e37652b2b79c9a536d2e6144d04f7 Validity Not Before: Jan 30 09:36:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=158021c33d17517323dc49b9ed30fd4e43373970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f3:f4:1e:22:0e:2b:46:3d:10:ef:01:92:d1: ef:ee:65:a5:a5:08:7d:72:8a:01:c7:0c:51:a1:9a: 41:86:2e:c9:f2:6f:58:d5:71:96:48:66:3e:05:12: 66:1b:63:d6:c3:21:22:3f:27:4a:12:c4:e5:d7:20: a4:9c:97:a3:b4:4b:f6:90:94:79:b6:0c:26:a5:45: da:c6:14:cc:7a:08:49:e4:bf:31:a6:9d:93:6c:55: f9:02:fa:1f:4e:91:16:58:1b:0b:f3:8a:7e:2f:33: f9:71:b6:c3:2c:07:a2:41:4d:d2:f1:c6:70:92:7c: 3b:60:f7:09:8f:94:fa:cb:c6:29:6b:88:11:fb:31: 74:f1:ae:45:24:50:5b:a5:dc:6b:89:42:50:0f:34: e8:cf:4c:dc:4e:2b:3c:88:35:9c:98:dc:d8:0b:dc: ec:8b:77:37:2f:b4:ca:ef:21:99:93:0e:6d:3d:65: 90:77:ed:c2:08:c9:06:b3:27:41:9d:01:fa:48:49: 86:f0:49:53:43:93:11:a3:03:02:2e:ef:0e:65:f6: 9f:bf:c8:90:41:dd:e5:3f:82:18:ee:01:f4:e2:77: 3f:88:d1:c3:4e:a7:12:d4:78:dc:45:cb:69:c3:c6: 16:be:95:5c:50:1f:dd:af:b0:62:ee:da:b9:7a:7c: 2c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:80:21:C3:3D:17:51:73:23:DC:49:B9:ED:30:FD:4E:43:37:39:70 X509v3 Authority Key Identifier: keyid:19:E0:61:55:FC:1E:37:65:2B:2B:79:C9:A5:36:D2:E6:14:4D:04:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/FYAhwz0XUXMj3Em57TD9TkM3OXA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.31.80.0/21 77.66.0.0-77.66.11.255 77.66.16.0-77.66.43.255 77.66.48.0/23 77.66.54.0-77.66.67.255 77.66.72.0/23 77.66.76.0-77.66.91.255 77.66.96.0/23 77.66.104.0/22 77.66.120.0/23 77.66.124.0/23 81.7.128.0-81.7.141.255 81.7.144.0/23 81.7.148.0-81.7.155.255 81.7.158.0-81.7.171.255 81.7.174.0-81.7.191.255 81.19.224.0-81.19.251.255 83.221.128.0/22 83.221.142.0/23 83.221.150.0/23 83.221.154.0-83.221.157.255 86.48.32.0-86.48.41.255 86.48.48.0/22 86.48.66.0/23 86.48.72.0-86.48.113.255 86.58.128.0/23 86.58.132.0-86.58.149.255 86.58.156.0-86.58.171.255 86.58.174.0-86.58.187.255 86.58.192.0/22 86.58.198.0/23 86.58.204.0/22 86.58.224.0/22 86.58.240.0-86.58.245.255 86.58.248.0/21 89.186.168.0/23 89.186.172.0-89.186.191.255 89.188.80.0-89.188.89.255 89.188.92.0/23 91.102.88.0/21 91.193.136.0/22 91.215.160.0/22 93.180.80.0/23 93.180.84.0/22 94.126.176.0/23 94.126.182.0/23 109.238.48.0/21 185.45.48.0/22 195.190.153.0/24 195.211.176.0/22 212.97.128.0/22 217.30.36.0/22 217.116.224.0-217.116.241.255 217.116.254.0/23 217.145.48.0-217.145.57.255 IPv6: 2001:1448::/32 2a00:49c0::/32 2a01:6200::/32 2a01:7920::/29 2a02:9d0::/32 2a03:a480::/32 Signature Algorithm: sha256WithRSAEncryption 98:bf:9a:5c:0d:79:10:da:e4:33:10:e4:bd:ea:e1:38:c6:2c: 02:fc:d0:f7:cc:76:a3:b9:1c:c6:10:10:08:b0:ec:e2:36:9f: 68:8a:87:da:88:88:7b:c0:f5:92:e3:78:fa:b5:0d:a9:7e:44: 07:96:51:46:e8:6c:84:d6:37:fd:62:e8:01:21:c0:f7:5d:59: ae:9e:b4:50:3c:e8:4a:0d:e3:c0:ff:ca:87:0a:33:7e:ba:60: d6:9e:5c:0a:60:b4:c1:26:76:f7:0d:9c:a6:2c:74:e9:bf:38: 02:e6:72:dc:c1:e2:0a:0b:1e:93:98:a0:d3:08:f0:eb:09:ff: 9e:0b:91:05:5c:40:5f:04:2b:0d:d6:ef:19:f5:38:5c:59:02: 14:a8:b5:fb:b0:09:19:17:0c:86:2a:ca:7d:c2:92:47:da:ae: d1:e3:b3:13:ca:e3:86:ca:e5:e4:7d:d4:d4:9c:ce:25:e3:06: 35:83:c1:64:3e:05:6c:a9:d1:43:42:09:6e:18:66:26:ad:b3: da:96:6e:2d:de:c1:5c:a7:1e:8e:b3:dd:d5:03:0f:c6:2f:bc: 29:89:5f:0a:ee:c1:c8:9a:ec:b2:bf:2a:c5:84:e5:b4:57:be: 37:24:55:3c:a3:02:87:a0:b6:6f:ed:d7:6b:f1:58:7a:7a:29: cb:01:8a:cf -----BEGIN CERTIFICATE----- MIIHHDCCBgSgAwIBAgISAZwOQuOaLxKkBMLtIOemSRmZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZTA2MTU1ZmMxZTM3NjUyYjJiNzljOWE1MzZkMmU2MTQ0 ZDA0ZjcwHhcNMjYwMTMwMDkzNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTgwMjFjMzNkMTc1MTczMjNkYzQ5YjllZDMwZmQ0ZTQzMzczOTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvP0HiIOK0Y9EO8BktHv7mWlpQh9 cooBxwxRoZpBhi7J8m9Y1XGWSGY+BRJmG2PWwyEiPydKEsTl1yCknJejtEv2kJR5 tgwmpUXaxhTMeghJ5L8xpp2TbFX5AvofTpEWWBsL84p+LzP5cbbDLAeiQU3S8cZw knw7YPcJj5T6y8Ypa4gR+zF08a5FJFBbpdxriUJQDzToz0zcTis8iDWcmNzYC9zs i3c3L7TK7yGZkw5tPWWQd+3CCMkGsydBnQH6SEmG8ElTQ5MRowMCLu8OZfafv8iQ Qd3lP4IY7gH04nc/iNHDTqcS1HjcRctpw8YWvpVcUB/dr7Bi7tq5enws0QIDAQAB o4IEKDCCBCQwHQYDVR0OBBYEFBWAIcM9F1FzI9xJue0w/U5DNzlwMB8GA1UdIwQY MBaAFBngYVX8HjdlKyt5yaU20uYUTQT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2VCaFZmd2VOMlVySzNuSnBUYlM1aFJOQlBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iYjg1ZDctN2NkZS00ZTFjLWI5ZGYt NzllZWI2MzIxZWI3LzEvRllBaHd6MFhVWE1qM0VtNTdURDlUa00zT1hBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9iYjg1ZDctN2NkZS00ZTFjLWI5ZGYtNzllZWI2MzIxZWI3 LzEvR2VCaFZmd2VOMlVySzNuSnBUYlM1aFJOQlBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICPAYIKwYBBQUHAQcBAf8EggIrMIICJzCCAfEEAgABMIIB 6QMEAx8fUDALAwMBTUIDBAJNQggwDAMEBE1CEAMEAk1CKAMEAU1CMDAMAwQBTUI2 AwQCTUJAAwQBTUJIMAwDBAJNQkwDBAJNQlgDBAFNQmADBAJNQmgDBAFNQngDBAFN QnwwDAMEB1EHgAMEAVEHjAMEAVEHkDAMAwQCUQeUAwQCUQeYMAwDBAFRB54DBAJR B6gwDAMEAVEHrgMEBlEHgDAMAwQFURPgAwQCURP4AwQCU92AAwQBU92OAwQBU92W MAwDBAFT3ZoDBAFT3ZwwDAMEBVYwIAMEAVYwKAMEAlYwMAMEAVYwQjAMAwQDVjBI AwQBVjBwAwQBVjqAMAwDBAJWOoQDBAFWOpQwDAMEAlY6nAMEAlY6qDAMAwQBVjqu AwQCVjq4AwQCVjrAAwQBVjrGAwQCVjrMAwQCVjrgMAwDBARWOvADBAFWOvQDBANW OvgDBAFZuqgwDAMEAlm6rAMEBlm6gDAMAwQEWbxQAwQBWbxYAwQBWbxcAwQDW2ZY AwQCW8GIAwQCW9egAwQBXbRQAwQCXbRUAwQBXn6wAwQBXn62AwQDbe4wAwQCuS0w AwQAw76ZAwQCw9OwAwQC1GGAAwQC2R4kMAwDBAXZdOADBAHZdPADBAHZdP4wDAME BNmRMAMEAdmRODAwBAIAAjAqAwUAIAEUSAMFACoAScADBQAqAWIAAwUDKgF5IAMF ACoCCdADBQAqA6SAMA0GCSqGSIb3DQEBCwUAA4IBAQCYv5pcDXkQ2uQzEOS96uE4 xiwC/ND3zHajuRzGEBAIsOziNp9oiofaiIh7wPWS43j6tQ2pfkQHllFG6GyE1jf9 YugBIcD3XVmunrRQPOhKDePA/8qHCjN+umDWnlwKYLTBJnb3DZymLHTpvzgC5nLc weIKCx6TmKDTCPDrCf+eC5EFXEBfBCsN1u8Z9ThcWQIUqLX7sAkZFwyGKsp9wpJH 2q7R47MTyuOGyuXkfdTUnM4l4wY1g8FkPgVsqdFDQgluGGYmrbPalm4t3sFcpx6O s93VAw/GL7wpiV8K7sHImuyyvyrFhOW0V743JFU8owKHoLZv7ddr8Vh6einLAYrP -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:26 2026 by rpki-client