This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/hT-So4aGOddQyRT0oPTXu7IXVdI.roa File: hT-So4aGOddQyRT0oPTXu7IXVdI.roa (raw, json) Hash identifier: AkJbPF5CNSKe103pnrR7OvnuxlDRt9RWR677qdnMbMw= Subject key identifier: 85:3F:92:A3:86:86:39:D7:50:C9:14:F4:A0:F4:D7:BB:B2:17:55:D2 Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777 Certificate serial: 019C3C2D148823FDE7F8682DC1C880D7D8D5 Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/hT-So4aGOddQyRT0oPTXu7IXVdI.roa Signing time: Sun 08 Feb 2026 07:35:13 +0000 ROA not before: Sun 08 Feb 2026 07:35:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13150 IP address blocks: 85.255.16.0/24 maxlen: 24 85.255.17.0/24 maxlen: 24 85.255.19.0/24 maxlen: 24 85.255.20.0/24 maxlen: 24 85.255.21.0/24 maxlen: 24 85.255.22.0/24 maxlen: 24 85.255.23.0/24 maxlen: 24 85.255.24.0/24 maxlen: 24 85.255.25.0/24 maxlen: 24 85.255.26.0/24 maxlen: 24 85.255.27.0/24 maxlen: 24 85.255.28.0/24 maxlen: 24 85.255.29.0/24 maxlen: 24 85.255.30.0/24 maxlen: 24 85.255.31.0/24 maxlen: 24 159.117.224.0/24 maxlen: 24 159.117.225.0/24 maxlen: 24 159.117.226.0/24 maxlen: 24 159.117.227.0/24 maxlen: 24 159.117.228.0/24 maxlen: 24 159.117.229.0/24 maxlen: 24 159.117.230.0/24 maxlen: 24 159.117.231.0/24 maxlen: 24 159.117.232.0/24 maxlen: 24 159.117.233.0/24 maxlen: 24 159.117.234.0/24 maxlen: 24 159.117.236.0/24 maxlen: 24 159.117.237.0/24 maxlen: 24 159.117.238.0/24 maxlen: 24 185.114.120.0/24 maxlen: 24 185.114.121.0/24 maxlen: 24 185.114.122.0/24 maxlen: 24 185.114.123.0/24 maxlen: 24 209.206.0.0/24 maxlen: 24 209.206.1.0/24 maxlen: 24 209.206.2.0/24 maxlen: 24 209.206.3.0/24 maxlen: 24 209.206.4.0/24 maxlen: 24 209.206.5.0/24 maxlen: 24 209.206.6.0/24 maxlen: 24 209.206.7.0/24 maxlen: 24 209.206.8.0/24 maxlen: 24 209.206.9.0/24 maxlen: 24 209.206.10.0/24 maxlen: 24 209.206.11.0/24 maxlen: 24 209.206.12.0/24 maxlen: 24 209.206.13.0/24 maxlen: 24 209.206.14.0/24 maxlen: 24 209.206.15.0/24 maxlen: 24 209.206.16.0/24 maxlen: 24 209.206.17.0/24 maxlen: 24 209.206.18.0/24 maxlen: 24 209.206.19.0/24 maxlen: 24 209.206.20.0/24 maxlen: 24 209.206.21.0/24 maxlen: 24 209.206.22.0/24 maxlen: 24 209.206.23.0/24 maxlen: 24 209.206.24.0/24 maxlen: 24 209.206.25.0/24 maxlen: 24 209.206.26.0/24 maxlen: 24 209.206.27.0/24 maxlen: 24 209.206.28.0/24 maxlen: 24 209.206.29.0/24 maxlen: 24 209.206.30.0/24 maxlen: 24 209.206.31.0/24 maxlen: 24 216.252.176.0/24 maxlen: 24 216.252.177.0/24 maxlen: 24 216.252.178.0/24 maxlen: 24 216.252.179.0/24 maxlen: 24 216.252.180.0/24 maxlen: 24 216.252.181.0/24 maxlen: 24 216.252.182.0/24 maxlen: 24 216.252.183.0/24 maxlen: 24 216.252.184.0/24 maxlen: 24 216.252.185.0/24 maxlen: 24 216.252.186.0/24 maxlen: 24 216.252.187.0/24 maxlen: 24 216.252.189.0/24 maxlen: 24 216.252.190.0/24 maxlen: 24 216.252.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:3c:2d:14:88:23:fd:e7:f8:68:2d:c1:c8:80:d7:d8:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777 Validity Not Before: Feb 8 07:35:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=853f92a3868639d750c914f4a0f4d7bbb21755d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7f:55:89:19:9e:66:3f:f8:fa:31:c4:a0:78: 43:30:96:01:6e:a4:7e:c2:87:96:b8:25:4f:1d:40: 8a:97:a2:c3:77:01:9a:45:ef:7a:de:e2:c4:dd:52: aa:2f:d5:bc:4e:bf:ac:0f:61:3e:15:2f:3f:8c:42: 09:05:93:85:06:c3:fc:37:5e:ec:c5:12:a5:76:b2: 63:69:23:d3:b6:cd:97:44:ec:6e:03:64:b2:2d:ab: 3e:f0:06:be:23:ec:60:7d:e3:8c:2a:81:21:e8:f4: 58:1e:44:1a:74:91:53:a7:e8:d7:4d:fa:6b:e3:92: d6:82:fb:46:22:7e:fd:f1:77:92:eb:c7:c5:3e:97: 02:f9:64:17:72:99:a4:a2:c3:5c:38:f7:be:bb:93: 4f:11:3c:a2:e0:90:20:57:12:ac:5b:e2:d3:cc:07: 89:e0:96:ed:ff:c7:af:82:01:08:d3:a8:1e:29:be: 4d:80:ac:cd:e3:41:e8:fd:e9:20:93:09:1a:ef:f5: 9d:77:1b:94:85:02:c7:0b:69:00:82:62:53:59:5a: 1b:db:3d:1a:42:f8:56:91:93:9e:b3:ef:4c:59:57: 32:3b:5d:2e:14:01:cf:d8:82:d7:b6:61:9a:8e:a8: 1e:c4:51:2a:36:a2:cf:da:94:0f:23:a9:c8:7c:54: b7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3F:92:A3:86:86:39:D7:50:C9:14:F4:A0:F4:D7:BB:B2:17:55:D2 X509v3 Authority Key Identifier: keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/hT-So4aGOddQyRT0oPTXu7IXVdI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.255.16.0/23 85.255.19.0-85.255.31.255 159.117.224.0-159.117.234.255 159.117.236.0-159.117.238.255 185.114.120.0/22 209.206.0.0/19 216.252.176.0-216.252.187.255 216.252.189.0-216.252.191.255 Signature Algorithm: sha256WithRSAEncryption bc:9d:6b:50:d7:fe:22:52:b5:3b:7b:34:26:84:ca:aa:db:f5: 29:f6:01:11:37:b9:5a:2d:3c:88:65:45:fc:26:b5:1d:72:58: 3e:71:00:69:54:66:88:09:91:97:e2:75:3c:a0:5a:3f:ae:04: 22:d7:25:9d:b6:f0:35:ac:33:32:c0:b0:21:0b:c7:74:2d:ed: 0a:ae:d1:f5:9e:e1:ee:1f:93:35:6f:fe:52:79:35:44:21:b9: 15:31:b2:fe:b6:8c:be:4f:f8:bb:b2:e1:fb:0a:e1:af:57:8e: 90:0a:d6:33:40:ff:7e:0a:a8:98:b6:39:a2:30:4e:ef:f1:7b: 17:86:b9:d4:ef:fd:20:6f:b7:0e:d4:5c:ed:f1:c9:97:a3:4c: d3:b3:36:e7:dd:02:0c:83:7c:3f:ee:cd:4f:5b:4b:db:e3:21: c3:84:e5:a9:bd:0b:40:ae:82:26:7a:ac:e7:ed:ef:8d:0f:95: 82:09:e6:28:5c:f9:c7:bb:35:f2:80:8f:09:5a:9a:7f:73:77: ca:b1:70:02:f2:4f:ed:57:9f:35:12:6f:ea:f0:ab:2f:1a:f5: f6:2f:21:da:3d:15:88:9c:da:6b:d0:d6:c9:18:a9:36:82:37: c8:a9:32:0d:7f:fe:53:ce:91:a8:1f:87:b9:f1:65:49:55:b8: b2:21:c9:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgISAZw8LRSII/3n+GgtwciA19jVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYjc1MTkxOTc4ODY2ZjFmYzk3ZjUyM2M3ZGRhNDBhODhm N2U3NzcwHhcNMjYwMjA4MDczNTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTNmOTJhMzg2ODYzOWQ3NTBjOTE0ZjRhMGY0ZDdiYmIyMTc1NWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzX9ViRmeZj/4+jHEoHhDMJYBbqR+ woeWuCVPHUCKl6LDdwGaRe963uLE3VKqL9W8Tr+sD2E+FS8/jEIJBZOFBsP8N17s xRKldrJjaSPTts2XROxuA2SyLas+8Aa+I+xgfeOMKoEh6PRYHkQadJFTp+jXTfpr 45LWgvtGIn798XeS68fFPpcC+WQXcpmkosNcOPe+u5NPETyi4JAgVxKsW+LTzAeJ 4Jbt/8evggEI06geKb5NgKzN40Ho/ekgkwka7/WddxuUhQLHC2kAgmJTWVob2z0a QvhWkZOes+9MWVcyO10uFAHP2ILXtmGajqgexFEqNqLP2pQPI6nIfFS3fwIDAQAB o4ICWzCCAlcwHQYDVR0OBBYEFIU/kqOGhjnXUMkU9KD017uyF1XSMB8GA1UdIwQY MBaAFM+3UZGXiGbx/Jf1I8fdpAqI9+d3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOTU3NWItYjdjMS00YzVjLTlkYWIt YzE5OWM3YjRjYWMyLzEvaFQtU280YUdPZGRReVJUMG9QVFh1N0lYVmRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iOTU3NWItYjdjMS00YzVjLTlkYWItYzE5OWM3YjRjYWMy LzEvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBeBAIAATBYAwQBVf8QMAwD BABV/xMDBAVV/wAwDAMEBZ914AMEAJ916jAMAwQCn3XsAwQAn3XuAwQCuXJ4AwQF 0c4AMAwDBATY/LADBALY/LgwDAMEANj8vQMEBtj8gDANBgkqhkiG9w0BAQsFAAOC AQEAvJ1rUNf+IlK1O3s0JoTKqtv1KfYBETe5Wi08iGVF/Ca1HXJYPnEAaVRmiAmR l+J1PKBaP64EItclnbbwNawzMsCwIQvHdC3tCq7R9Z7h7h+TNW/+Unk1RCG5FTGy /raMvk/4u7Lh+wrhr1eOkArWM0D/fgqomLY5ojBO7/F7F4a51O/9IG+3DtRc7fHJ l6NM07M2590CDIN8P+7NT1tL2+Mhw4Tlqb0LQK6CJnqs5+3vjQ+VggnmKFz5x7s1 8oCPCVqaf3N3yrFwAvJP7VefNRJv6vCrLxr19i8h2j0ViJzaa9DWyRipNoI3yKky DX/+U86RqB+HufFlSVW4siHJSA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:46 2026 by rpki-client