This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/Rb5hHaoWK42HVqMlLmdL2Q_tqs4.roa File: Rb5hHaoWK42HVqMlLmdL2Q_tqs4.roa (raw, json) Hash identifier: pvzrnsOI9tdcc9ULSntzOOVe3GikcQWZKLx+48F0nCc= Subject key identifier: 45:BE:61:1D:AA:16:2B:8D:87:56:A3:25:2E:67:4B:D9:0F:ED:AA:CE Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 019B79ECB4778BAA31C1B46134023EE87934 Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/Rb5hHaoWK42HVqMlLmdL2Q_tqs4.roa Signing time: Thu 01 Jan 2026 14:18:34 +0000 ROA not before: Thu 01 Jan 2026 14:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29084 IP address blocks: 37.209.168.0/21 maxlen: 24 37.209.168.0/24 maxlen: 24 37.209.169.0/24 maxlen: 24 37.209.170.0/24 maxlen: 24 37.209.171.0/24 maxlen: 24 37.209.172.0/24 maxlen: 24 37.209.173.0/24 maxlen: 24 78.108.242.0/24 maxlen: 24 79.132.0.0/19 maxlen: 19 79.132.0.0/24 maxlen: 24 79.132.1.0/24 maxlen: 24 79.132.2.0/24 maxlen: 24 79.132.3.0/24 maxlen: 24 79.132.4.0/24 maxlen: 24 79.132.5.0/24 maxlen: 24 79.132.6.0/24 maxlen: 24 79.132.7.0/24 maxlen: 24 79.132.8.0/24 maxlen: 24 79.132.9.0/24 maxlen: 24 79.132.10.0/24 maxlen: 24 79.132.11.0/24 maxlen: 24 79.132.12.0/24 maxlen: 24 79.132.13.0/24 maxlen: 24 79.132.14.0/24 maxlen: 24 79.132.15.0/24 maxlen: 24 79.132.16.0/24 maxlen: 24 79.132.17.0/24 maxlen: 24 79.132.18.0/24 maxlen: 24 79.132.19.0/24 maxlen: 24 79.132.20.0/24 maxlen: 24 79.132.21.0/24 maxlen: 24 79.132.22.0/24 maxlen: 24 79.132.23.0/24 maxlen: 24 79.132.24.0/24 maxlen: 24 79.132.25.0/24 maxlen: 24 79.132.26.0/24 maxlen: 24 79.132.27.0/24 maxlen: 24 79.132.28.0/24 maxlen: 24 79.132.29.0/24 maxlen: 24 79.132.30.0/24 maxlen: 24 79.132.31.0/24 maxlen: 24 83.222.168.0/24 maxlen: 24 83.222.175.0/24 maxlen: 24 83.222.182.0/24 maxlen: 24 84.54.128.0/18 maxlen: 18 84.54.128.0/24 maxlen: 24 84.54.129.0/24 maxlen: 24 84.54.130.0/24 maxlen: 24 84.54.131.0/24 maxlen: 24 84.54.132.0/24 maxlen: 24 84.54.133.0/24 maxlen: 24 84.54.134.0/24 maxlen: 24 84.54.135.0/24 maxlen: 24 84.54.136.0/24 maxlen: 24 84.54.137.0/24 maxlen: 24 84.54.138.0/24 maxlen: 24 84.54.139.0/24 maxlen: 24 84.54.140.0/24 maxlen: 24 84.54.141.0/24 maxlen: 24 84.54.142.0/24 maxlen: 24 84.54.143.0/24 maxlen: 24 84.54.144.0/24 maxlen: 24 84.54.145.0/24 maxlen: 24 84.54.146.0/24 maxlen: 24 84.54.147.0/24 maxlen: 24 84.54.149.0/24 maxlen: 24 84.54.151.0/24 maxlen: 24 84.54.152.0/24 maxlen: 24 84.54.153.0/24 maxlen: 24 84.54.154.0/24 maxlen: 24 84.54.155.0/24 maxlen: 24 84.54.156.0/24 maxlen: 24 84.54.157.0/24 maxlen: 24 84.54.158.0/24 maxlen: 24 84.54.159.0/24 maxlen: 24 84.54.160.0/24 maxlen: 24 84.54.161.0/24 maxlen: 24 84.54.162.0/24 maxlen: 24 84.54.163.0/24 maxlen: 24 84.54.164.0/24 maxlen: 24 84.54.165.0/24 maxlen: 24 84.54.166.0/24 maxlen: 24 84.54.167.0/24 maxlen: 24 84.54.168.0/24 maxlen: 24 84.54.169.0/24 maxlen: 24 84.54.170.0/24 maxlen: 24 84.54.171.0/24 maxlen: 24 84.54.172.0/24 maxlen: 24 84.54.173.0/24 maxlen: 24 84.54.174.0/24 maxlen: 24 84.54.175.0/24 maxlen: 24 84.54.176.0/24 maxlen: 24 84.54.177.0/24 maxlen: 24 84.54.178.0/24 maxlen: 24 84.54.179.0/24 maxlen: 24 84.54.180.0/24 maxlen: 24 84.54.181.0/24 maxlen: 24 84.54.182.0/24 maxlen: 24 84.54.183.0/24 maxlen: 24 84.54.185.0/24 maxlen: 24 84.54.186.0/24 maxlen: 24 84.54.187.0/24 maxlen: 24 84.54.188.0/24 maxlen: 24 84.54.189.0/24 maxlen: 24 84.54.190.0/24 maxlen: 24 87.246.35.0/24 maxlen: 24 109.160.4.0/22 maxlen: 22 109.160.4.0/24 maxlen: 24 109.160.5.0/24 maxlen: 24 109.160.6.0/24 maxlen: 24 109.160.7.0/24 maxlen: 24 109.160.13.0/24 maxlen: 24 109.160.24.0/21 maxlen: 24 109.160.24.0/24 maxlen: 24 109.160.25.0/24 maxlen: 24 109.160.26.0/24 maxlen: 24 109.160.27.0/24 maxlen: 24 109.160.28.0/24 maxlen: 24 109.160.29.0/24 maxlen: 24 109.160.30.0/24 maxlen: 24 109.160.31.0/24 maxlen: 24 109.160.42.0/23 maxlen: 23 109.160.42.0/24 maxlen: 24 109.160.43.0/24 maxlen: 24 109.160.98.0/24 maxlen: 24 185.78.36.0/22 maxlen: 22 185.78.36.0/24 maxlen: 24 185.78.37.0/24 maxlen: 24 185.78.38.0/24 maxlen: 24 185.78.39.0/24 maxlen: 24 212.70.150.0/24 maxlen: 24 212.70.157.0/24 maxlen: 24 217.174.48.0/20 maxlen: 20 217.174.48.0/24 maxlen: 24 217.174.49.0/24 maxlen: 24 217.174.50.0/24 maxlen: 24 217.174.51.0/24 maxlen: 24 217.174.52.0/24 maxlen: 24 217.174.53.0/24 maxlen: 24 217.174.54.0/24 maxlen: 24 217.174.55.0/24 maxlen: 24 217.174.56.0/24 maxlen: 24 217.174.57.0/24 maxlen: 24 217.174.58.0/24 maxlen: 24 217.174.59.0/24 maxlen: 24 217.174.60.0/24 maxlen: 24 217.174.61.0/24 maxlen: 24 217.174.62.0/24 maxlen: 24 217.174.63.0/24 maxlen: 24 2a02:1c0::/29 maxlen: 29 2a02:1c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b4:77:8b:aa:31:c1:b4:61:34:02:3e:e8:79:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Jan 1 14:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45be611daa162b8d8756a3252e674bd90fedaace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e2:5b:7c:1e:21:3a:98:75:c5:a9:e1:c7:4e: 8d:77:e0:27:d4:32:e2:28:d1:e1:41:89:03:b2:1a: d0:4a:60:5c:23:65:32:ea:c3:1b:04:e1:41:62:f6: eb:8b:da:bc:a0:aa:aa:d6:38:47:08:cf:3b:7f:99: 94:13:2f:dc:40:74:ae:1e:60:22:5f:2f:8a:3e:ab: 0f:d4:ed:8a:32:6b:da:02:56:ab:15:13:c3:00:0f: bc:72:c0:06:aa:7c:fb:2b:e5:50:63:85:00:22:72: e1:dc:a7:12:89:e3:7d:19:e4:42:cd:42:99:d7:cc: 83:00:a4:be:3d:16:d2:9f:2c:b7:a9:00:45:a0:ae: fe:90:59:e8:9f:75:5e:cc:26:2b:11:65:61:f7:b2: 74:5a:94:28:ac:06:b4:a2:ba:3b:1b:68:7f:9f:6c: b4:83:84:fd:92:03:ec:47:05:0d:ac:59:11:8d:67: 3d:23:74:be:e5:d7:d2:8f:67:df:57:8c:bd:80:bb: 75:cd:52:4a:7b:51:54:5e:41:54:e5:ac:42:0d:2b: 53:0a:4c:5c:2d:0b:95:7e:2f:14:4a:a4:9f:54:91: 7f:49:ab:35:e4:cd:ee:83:40:76:1c:7e:e5:78:b4: 5f:1d:63:26:08:d6:45:95:03:67:f5:ff:35:44:2b: ba:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BE:61:1D:AA:16:2B:8D:87:56:A3:25:2E:67:4B:D9:0F:ED:AA:CE X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/Rb5hHaoWK42HVqMlLmdL2Q_tqs4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.168.0/21 78.108.242.0/24 79.132.0.0/19 83.222.168.0/24 83.222.175.0/24 83.222.182.0/24 84.54.128.0/18 87.246.35.0/24 109.160.4.0/22 109.160.13.0/24 109.160.24.0/21 109.160.42.0/23 109.160.98.0/24 185.78.36.0/22 212.70.150.0/24 212.70.157.0/24 217.174.48.0/20 IPv6: 2a02:1c0::/29 Signature Algorithm: sha256WithRSAEncryption 55:04:55:43:f9:ce:7e:b3:92:6c:4e:45:e5:33:90:82:c2:7d: ef:ee:ab:13:60:7f:18:9a:82:54:a9:3c:6b:eb:69:a0:76:d6: ca:4c:f0:22:3c:3f:6c:22:6a:21:51:c7:50:2c:ed:f2:3c:9d: 69:42:84:d8:eb:81:f1:6b:af:4b:57:a2:c5:7c:75:f4:d1:b8: a3:55:91:93:1d:42:06:36:59:02:fa:4f:f9:5c:c7:2e:b3:6b: be:2f:02:ce:48:9a:58:1e:8f:28:50:6a:1c:6f:0e:59:3d:d9: c9:e2:9b:db:d6:d2:82:52:1f:ec:80:c8:2c:7f:38:18:1e:d2: c9:5f:60:2e:7d:d6:6a:36:c0:b6:68:80:4d:70:67:b3:ec:66: f1:d7:74:18:da:03:89:36:7f:1e:ae:69:65:ab:dc:e2:66:0d: a7:9d:f6:0e:cb:cb:f0:8d:63:04:74:cd:78:42:5c:54:be:9e: ed:9e:88:23:c8:0e:0b:2f:71:ab:b3:e9:6b:c0:7c:a7:66:51: 73:d3:9a:1c:4d:23:47:96:15:d8:cb:51:cf:0b:3e:ec:c9:54: c2:df:b6:28:10:24:73:c4:f3:5e:1d:7c:33:ca:a8:d6:77:c1: fe:d4:90:ee:05:b4:62:6c:1b:f8:16:4d:d0:e2:e3:ff:ab:76: fd:c4:00:7f -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgISAZt57LR3i6oxwbRhNAI+6Hk0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjYwMTAxMTQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWJlNjExZGFhMTYyYjhkODc1NmEzMjUyZTY3NGJkOTBmZWRhYWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+JbfB4hOph1xanhx06Nd+An1DLi KNHhQYkDshrQSmBcI2Uy6sMbBOFBYvbri9q8oKqq1jhHCM87f5mUEy/cQHSuHmAi Xy+KPqsP1O2KMmvaAlarFRPDAA+8csAGqnz7K+VQY4UAInLh3KcSieN9GeRCzUKZ 18yDAKS+PRbSnyy3qQBFoK7+kFnon3VezCYrEWVh97J0WpQorAa0oro7G2h/n2y0 g4T9kgPsRwUNrFkRjWc9I3S+5dfSj2ffV4y9gLt1zVJKe1FUXkFU5axCDStTCkxc LQuVfi8USqSfVJF/Sas15M3ug0B2HH7leLRfHWMmCNZFlQNn9f81RCu6mQIDAQAB o4ICeTCCAnUwHQYDVR0OBBYEFEW+YR2qFiuNh1ajJS5nS9kP7arOMB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvUmI1aEhhb1dLNDJIVnFNbExtZEwyUV90cXM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGOBggrBgEFBQcBBwEB/wR/MH0wbAQCAAEwZgMEAyXRqAME AE5s8gMEBU+EAAMEAFPeqAMEAFPerwMEAFPetgMEBlQ2gAMEAFf2IwMEAm2gBAME AG2gDQMEA22gGAMEAW2gKgMEAG2gYgMEArlOJAMEANRGlgMEANRGnQMEBNmuMDAN BAIAAjAHAwUDKgIBwDANBgkqhkiG9w0BAQsFAAOCAQEAVQRVQ/nOfrOSbE5F5TOQ gsJ97+6rE2B/GJqCVKk8a+tpoHbWykzwIjw/bCJqIVHHUCzt8jydaUKE2OuB8Wuv S1eixXx19NG4o1WRkx1CBjZZAvpP+VzHLrNrvi8CzkiaWB6PKFBqHG8OWT3ZyeKb 29bSglIf7IDILH84GB7SyV9gLn3WajbAtmiATXBns+xm8dd0GNoDiTZ/Hq5pZavc 4mYNp532DsvL8I1jBHTNeEJcVL6e7Z6II8gOCy9xq7Ppa8B8p2ZRc9OaHE0jR5YV 2MtRzws+7MlUwt+2KBAkc8TzXh18M8qo1nfB/tSQ7gW0Ymwb+BZN0OLj/6t2/cQA fw== -----END CERTIFICATE-----Generated at Mon Jan 26 08:58:15 2026 by rpki-client