This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/PHg3Ww569zMDLEj_XkzXkt_l28U.roa File: PHg3Ww569zMDLEj_XkzXkt_l28U.roa (raw, json) Hash identifier: 5pJ4hX6iwllF4hbtS1Bn9jqzOhPSmXxQOqAVEn4F03k= Subject key identifier: 3C:78:37:5B:0E:7A:F7:33:03:2C:48:FF:5E:4C:D7:92:DF:E5:DB:C5 Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2 Certificate serial: 019B78A27B75C7E4DE149DA25069ADB58A9B Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/PHg3Ww569zMDLEj_XkzXkt_l28U.roa Signing time: Thu 01 Jan 2026 08:17:52 +0000 ROA not before: Thu 01 Jan 2026 08:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41897 IP address blocks: 45.158.16.0/22 maxlen: 22 46.40.0.0/18 maxlen: 18 46.40.1.0/24 maxlen: 24 46.40.4.0/24 maxlen: 24 46.40.6.0/24 maxlen: 24 46.40.8.0/22 maxlen: 22 46.40.8.0/24 maxlen: 24 46.40.9.0/24 maxlen: 24 46.40.10.0/24 maxlen: 24 46.40.11.0/24 maxlen: 24 46.40.12.0/23 maxlen: 23 46.40.14.0/24 maxlen: 24 46.40.15.0/24 maxlen: 24 46.40.16.0/21 maxlen: 21 46.40.16.0/24 maxlen: 24 46.40.17.0/24 maxlen: 24 46.40.18.0/24 maxlen: 24 46.40.19.0/24 maxlen: 24 46.40.20.0/24 maxlen: 24 46.40.21.0/24 maxlen: 24 46.40.22.0/24 maxlen: 24 46.40.23.0/24 maxlen: 24 46.40.26.0/24 maxlen: 24 46.40.27.0/24 maxlen: 24 46.40.29.0/24 maxlen: 24 46.40.30.0/23 maxlen: 23 46.40.30.0/24 maxlen: 24 46.40.31.0/24 maxlen: 24 46.40.32.0/24 maxlen: 24 46.40.33.0/24 maxlen: 24 46.40.34.0/24 maxlen: 24 46.40.35.0/24 maxlen: 24 46.40.37.0/24 maxlen: 24 46.40.40.0/21 maxlen: 21 46.40.40.0/24 maxlen: 24 46.40.41.0/24 maxlen: 24 46.40.42.0/24 maxlen: 24 46.40.43.0/24 maxlen: 24 46.40.44.0/23 maxlen: 23 46.40.46.0/23 maxlen: 23 46.40.48.0/21 maxlen: 21 46.40.48.0/24 maxlen: 24 46.40.49.0/24 maxlen: 24 46.40.50.0/24 maxlen: 24 46.40.51.0/24 maxlen: 24 46.40.52.0/24 maxlen: 24 46.40.53.0/24 maxlen: 24 46.40.54.0/24 maxlen: 24 46.40.55.0/24 maxlen: 24 46.40.56.0/22 maxlen: 22 46.40.56.0/24 maxlen: 24 46.40.57.0/24 maxlen: 24 46.40.58.0/24 maxlen: 24 46.40.59.0/24 maxlen: 24 46.40.60.0/23 maxlen: 23 46.40.62.0/24 maxlen: 24 46.40.63.0/24 maxlen: 24 46.251.8.0/22 maxlen: 22 80.245.96.0/22 maxlen: 22 81.24.240.0/21 maxlen: 21 81.24.247.0/24 maxlen: 24 85.222.176.0/20 maxlen: 20 85.222.176.0/21 maxlen: 21 85.222.176.0/24 maxlen: 24 85.222.177.0/24 maxlen: 24 85.222.178.0/24 maxlen: 24 85.222.179.0/24 maxlen: 24 85.222.180.0/22 maxlen: 22 89.147.80.0/20 maxlen: 20 89.147.80.0/22 maxlen: 22 89.147.80.0/24 maxlen: 24 89.147.81.0/24 maxlen: 24 89.147.82.0/24 maxlen: 24 89.147.83.0/24 maxlen: 24 89.147.84.0/22 maxlen: 22 89.147.88.0/24 maxlen: 24 89.147.89.0/24 maxlen: 24 89.147.92.0/24 maxlen: 24 89.147.93.0/24 maxlen: 24 89.147.94.0/24 maxlen: 24 89.147.95.0/24 maxlen: 24 91.102.224.0/21 maxlen: 21 91.102.229.0/24 maxlen: 24 91.147.240.0/21 maxlen: 21 91.147.244.0/22 maxlen: 22 94.248.184.0/21 maxlen: 21 94.248.232.0/21 maxlen: 21 94.248.232.0/22 maxlen: 22 94.248.232.0/24 maxlen: 24 94.248.233.0/24 maxlen: 24 94.248.234.0/24 maxlen: 24 94.248.235.0/24 maxlen: 24 94.248.236.0/24 maxlen: 24 94.248.237.0/24 maxlen: 24 94.248.238.0/24 maxlen: 24 94.248.239.0/24 maxlen: 24 95.85.128.0/18 maxlen: 18 95.85.128.0/22 maxlen: 22 95.85.135.0/24 maxlen: 24 95.85.136.0/22 maxlen: 22 95.85.144.0/21 maxlen: 21 95.85.144.0/24 maxlen: 24 95.85.145.0/24 maxlen: 24 95.85.146.0/24 maxlen: 24 95.85.147.0/24 maxlen: 24 95.85.148.0/24 maxlen: 24 95.85.149.0/24 maxlen: 24 95.85.150.0/24 maxlen: 24 95.85.151.0/24 maxlen: 24 95.85.152.0/23 maxlen: 23 95.85.152.0/24 maxlen: 24 95.85.153.0/24 maxlen: 24 95.85.154.0/23 maxlen: 23 95.85.154.0/24 maxlen: 24 95.85.155.0/24 maxlen: 24 95.85.156.0/22 maxlen: 22 95.85.172.0/24 maxlen: 24 95.85.173.0/24 maxlen: 24 95.85.176.0/22 maxlen: 22 95.85.184.0/23 maxlen: 23 95.85.186.0/23 maxlen: 23 178.20.200.0/24 maxlen: 24 178.20.201.0/24 maxlen: 24 178.20.202.0/23 maxlen: 23 185.6.188.0/22 maxlen: 22 185.6.188.0/24 maxlen: 24 185.6.189.0/24 maxlen: 24 185.6.190.0/24 maxlen: 24 185.6.191.0/24 maxlen: 24 185.10.204.0/22 maxlen: 22 185.10.204.0/24 maxlen: 24 185.37.168.0/22 maxlen: 22 185.37.169.0/24 maxlen: 24 185.37.170.0/24 maxlen: 24 185.141.196.0/22 maxlen: 22 185.141.196.0/23 maxlen: 23 185.141.198.0/24 maxlen: 24 185.141.199.0/24 maxlen: 24 185.156.152.0/22 maxlen: 22 185.169.248.0/22 maxlen: 22 185.169.248.0/24 maxlen: 24 185.169.249.0/24 maxlen: 24 185.169.250.0/23 maxlen: 23 185.231.128.0/22 maxlen: 22 195.192.244.0/22 maxlen: 22 217.17.96.0/20 maxlen: 24 217.17.96.0/24 maxlen: 24 217.17.97.0/24 maxlen: 24 217.17.98.0/24 maxlen: 24 217.17.100.0/24 maxlen: 24 217.17.107.0/24 maxlen: 24 217.17.108.0/24 maxlen: 24 217.17.110.0/24 maxlen: 24 217.17.111.0/24 maxlen: 24 2a00:ad00::/29 maxlen: 29 2a00:ad00:2010::/44 maxlen: 44 2a00:ad03::/32 maxlen: 32 2a00:ad07:3000::/36 maxlen: 36 2a04:f040::/29 maxlen: 29 2a0c:6300::/30 maxlen: 30 2a0f:7bc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:7b:75:c7:e4:de:14:9d:a2:50:69:ad:b5:8a:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2 Validity Not Before: Jan 1 08:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c78375b0e7af733032c48ff5e4cd792dfe5dbc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:95:c9:90:33:d8:ec:ed:d0:7b:19:d7:8b:bd: 62:79:93:ce:ec:5f:75:81:6c:92:f2:ac:f3:b7:2a: 76:33:c3:83:9f:63:0d:45:74:b5:85:a5:56:6f:28: 99:49:38:0d:ab:64:fd:3c:51:cf:02:32:3e:a3:0e: ad:e1:99:02:73:8c:ac:0b:fb:6a:aa:f4:44:26:4a: 1d:03:9a:f2:72:63:a7:7d:fe:f8:65:eb:6d:e9:90: 78:b4:50:28:52:02:9e:d5:09:d3:e4:ad:8f:32:15: 23:73:f1:14:58:71:27:a5:48:17:be:0b:e4:ba:98: 6a:4a:5b:bf:f7:34:e8:6d:d3:2c:6b:b5:8c:59:77: 1b:d6:9e:ad:f4:db:6a:1b:c6:c9:83:48:ff:e6:af: fc:a6:ed:8d:e0:f3:c0:27:b8:1d:92:28:59:5e:c2: 2a:20:eb:cd:72:b1:8f:fc:bc:cf:00:34:94:dd:7a: 52:4e:39:58:f1:ee:35:bb:2a:71:dc:83:b9:ff:04: be:d7:54:61:ce:b7:45:c6:f8:04:18:d2:53:05:de: 2f:2a:6a:11:be:00:da:3c:35:5c:d6:5c:a1:70:f2: de:6a:d1:f7:49:ae:e7:8f:bf:82:4e:01:5c:3d:9d: 3f:23:ba:43:8f:39:59:32:26:ce:cf:7b:65:76:83: 92:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:78:37:5B:0E:7A:F7:33:03:2C:48:FF:5E:4C:D7:92:DF:E5:DB:C5 X509v3 Authority Key Identifier: keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/PHg3Ww569zMDLEj_XkzXkt_l28U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.16.0/22 46.40.0.0/18 46.251.8.0/22 80.245.96.0/22 81.24.240.0/21 85.222.176.0/20 89.147.80.0/20 91.102.224.0/21 91.147.240.0/21 94.248.184.0/21 94.248.232.0/21 95.85.128.0/18 178.20.200.0/22 185.6.188.0/22 185.10.204.0/22 185.37.168.0/22 185.141.196.0/22 185.156.152.0/22 185.169.248.0/22 185.231.128.0/22 195.192.244.0/22 217.17.96.0/20 IPv6: 2a00:ad00::/29 2a04:f040::/29 2a0c:6300::/30 2a0f:7bc0::/29 Signature Algorithm: sha256WithRSAEncryption 88:b1:fc:b0:69:f0:b7:f3:0b:20:e4:eb:58:72:93:ad:8a:74: 41:a0:e9:16:56:2e:02:64:a2:93:cf:2c:50:b3:e3:7d:c0:be: 64:56:02:51:d9:d7:5b:cd:b4:37:91:dd:eb:66:6c:48:3a:80: 9a:83:c9:ef:1e:d2:ef:6b:bc:9a:c9:de:67:ba:84:dc:aa:b0: 94:51:e6:6a:40:35:75:82:5c:65:e9:69:a2:77:53:ac:31:41: 88:0a:a8:cd:0f:04:b8:22:54:59:a1:64:bd:7b:99:0f:6d:7b: 82:64:ec:30:54:ea:af:05:a3:c3:37:d2:8d:53:bf:da:19:b7: 3c:e0:66:50:89:99:bd:80:e2:a8:7e:a3:19:44:bd:b3:96:7c: df:d3:5c:6e:e9:c5:15:f9:4c:21:4b:04:88:4c:e5:50:49:4b: e8:b2:2d:6b:cb:cc:76:e6:4c:1c:c0:06:c9:0a:6d:3e:d0:ec: c5:4e:76:bf:0a:c0:26:09:43:c8:ae:c3:0c:21:bf:24:d8:7e: 04:af:ab:01:e9:22:d2:10:4f:1e:ba:de:29:bd:50:b7:8e:bb: 4f:31:f3:86:5a:0d:4a:02:a2:2c:ce:a6:9b:5d:28:5d:04:83: 14:9d:ff:0e:b5:8e:ef:c7:51:90:03:42:a5:04:61:20:87:bf: af:f2:54:78 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt4ont1x+TeFJ2iUGmttYqbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZGRhNzVmODExMDc0M2QyNTBjMzA2OGEzNTZjZTZhY2Yx YzRmZTIwHhcNMjYwMTAxMDgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzc4Mzc1YjBlN2FmNzMzMDMyYzQ4ZmY1ZTRjZDc5MmRmZTVkYmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpXJkDPY7O3QexnXi71ieZPO7F91 gWyS8qzztyp2M8ODn2MNRXS1haVWbyiZSTgNq2T9PFHPAjI+ow6t4ZkCc4ysC/tq qvREJkodA5rycmOnff74Zett6ZB4tFAoUgKe1QnT5K2PMhUjc/EUWHEnpUgXvgvk uphqSlu/9zTobdMsa7WMWXcb1p6t9NtqG8bJg0j/5q/8pu2N4PPAJ7gdkihZXsIq IOvNcrGP/LzPADSU3XpSTjlY8e41uypx3IO5/wS+11RhzrdFxvgEGNJTBd4vKmoR vgDaPDVc1lyhcPLeatH3Sa7nj7+CTgFcPZ0/I7pDjzlZMibOz3tldoOS5QIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFDx4N1sOevczAyxI/15M15Lf5dvFMB8GA1UdIwQY MBaAFFndp1+BEHQ9JQwwaKNWzmrPHE/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lYmYzZjctZTNhYi00ZjhjLTg2ZTgt NzA4N2UzZmUyYTVkLzEvUEhnM1d3NTY5ek1ETEVqX1hrelhrdF9sMjhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9lYmYzZjctZTNhYi00ZjhjLTg2ZTgtNzA4N2UzZmUyYTVk LzEvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHFBggrBgEFBQcBBwEB/wSBtTCBsjCBiwQCAAEwgYQDBAIt nhADBAYuKAADBAIu+wgDBAJQ9WADBANRGPADBARV3rADBARZk1ADBANbZuADBANb k/ADBANe+LgDBANe+OgDBAZfVYADBAKyFMgDBAK5BrwDBAK5CswDBAK5JagDBAK5 jcQDBAK5nJgDBAK5qfgDBAK554ADBALDwPQDBATZEWAwIgQCAAIwHAMFAyoArQAD BQMqBPBAAwUCKgxjAAMFAyoPe8AwDQYJKoZIhvcNAQELBQADggEBAIix/LBp8Lfz CyDk61hyk62KdEGg6RZWLgJkopPPLFCz433AvmRWAlHZ11vNtDeR3etmbEg6gJqD ye8e0u9rvJrJ3me6hNyqsJRR5mpANXWCXGXpaaJ3U6wxQYgKqM0PBLgiVFmhZL17 mQ9te4Jk7DBU6q8Fo8M30o1Tv9oZtzzgZlCJmb2A4qh+oxlEvbOWfN/TXG7pxRX5 TCFLBIhM5VBJS+iyLWvLzHbmTBzABskKbT7Q7MVOdr8KwCYJQ8iuwwwhvyTYfgSv qwHpItIQTx663im9ULeOu08x84ZaDUoCoizOpptdKF0EgxSd/w61ju/HUZADQqUE YSCHv6/yVHg= -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:13 2026 by rpki-client