This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CaxrtyoGHFk1kxt55ffR0IHYbqg.roa File: CaxrtyoGHFk1kxt55ffR0IHYbqg.roa (raw, json) Hash identifier: /fKEZ0KjkRHBRzGgeTyOMIU0/yy8i68HF7IeRMraStM= Subject key identifier: 09:AC:6B:B7:2A:06:1C:59:35:93:1B:79:E5:F7:D1:D0:81:D8:6E:A8 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 019BFD0177756FC7E2EB1AFCE40FC39DB356 Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CaxrtyoGHFk1kxt55ffR0IHYbqg.roa Signing time: Tue 27 Jan 2026 01:11:30 +0000 ROA not before: Tue 27 Jan 2026 01:11:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44285 IP address blocks: 5.1.43.0/24 maxlen: 24 37.32.32.0/21 maxlen: 21 37.32.32.0/22 maxlen: 22 37.32.32.0/24 maxlen: 24 37.32.33.0/24 maxlen: 24 37.32.34.0/24 maxlen: 24 37.32.35.0/24 maxlen: 24 37.32.37.0/24 maxlen: 24 37.32.38.0/24 maxlen: 24 37.32.39.0/24 maxlen: 24 37.75.243.0/24 maxlen: 24 37.75.244.0/22 maxlen: 22 37.75.244.0/24 maxlen: 24 37.75.245.0/24 maxlen: 24 37.75.246.0/24 maxlen: 24 37.75.247.0/24 maxlen: 24 45.9.252.0/22 maxlen: 24 45.9.252.0/24 maxlen: 24 45.9.253.0/24 maxlen: 24 45.9.254.0/24 maxlen: 24 45.87.4.0/23 maxlen: 24 45.140.224.0/22 maxlen: 22 46.28.72.0/21 maxlen: 24 46.28.72.0/24 maxlen: 24 46.28.73.0/24 maxlen: 24 46.28.74.0/24 maxlen: 24 78.110.120.0/22 maxlen: 24 80.249.112.0/23 maxlen: 23 80.249.114.0/24 maxlen: 24 84.47.224.0/21 maxlen: 21 84.47.224.0/22 maxlen: 22 84.47.224.0/24 maxlen: 24 84.47.225.0/24 maxlen: 24 84.47.226.0/24 maxlen: 24 84.47.227.0/24 maxlen: 24 84.47.228.0/22 maxlen: 22 84.47.228.0/24 maxlen: 24 84.47.229.0/24 maxlen: 24 84.47.230.0/23 maxlen: 24 84.47.231.0/24 maxlen: 24 85.198.24.0/22 maxlen: 24 88.135.37.0/24 maxlen: 24 88.135.38.0/24 maxlen: 24 88.135.39.0/24 maxlen: 24 91.236.168.0/23 maxlen: 23 91.236.168.0/24 maxlen: 24 91.236.169.0/24 maxlen: 24 185.18.212.0/22 maxlen: 22 185.18.212.0/24 maxlen: 24 185.18.213.0/24 maxlen: 24 185.18.214.0/24 maxlen: 24 185.18.215.0/24 maxlen: 24 185.51.200.0/24 maxlen: 24 185.51.201.0/24 maxlen: 24 185.51.202.0/24 maxlen: 24 185.51.203.0/24 maxlen: 24 185.121.128.0/22 maxlen: 24 185.121.128.0/24 maxlen: 24 185.121.129.0/24 maxlen: 24 185.121.130.0/24 maxlen: 24 185.121.131.0/24 maxlen: 24 185.128.136.0/24 maxlen: 24 185.128.137.0/24 maxlen: 24 185.128.138.0/24 maxlen: 24 185.128.139.0/24 maxlen: 24 185.141.132.0/24 maxlen: 24 185.141.133.0/24 maxlen: 24 185.141.134.0/24 maxlen: 24 185.141.135.0/24 maxlen: 24 185.182.248.0/22 maxlen: 22 185.182.248.0/23 maxlen: 23 185.182.250.0/23 maxlen: 23 185.182.250.0/24 maxlen: 24 185.182.251.0/24 maxlen: 24 185.233.131.0/24 maxlen: 24 188.209.152.0/23 maxlen: 23 195.110.38.0/23 maxlen: 23 195.110.38.0/24 maxlen: 24 195.110.39.0/24 maxlen: 24 217.172.120.0/21 maxlen: 24 217.172.124.0/23 maxlen: 23 217.172.126.0/23 maxlen: 23 217.172.127.0/24 maxlen: 24 2a02:828::/29 maxlen: 29 2a02:828::/32 maxlen: 32 2a02:828::/48 maxlen: 48 2a02:828::/64 maxlen: 64 2a02:828:1::/48 maxlen: 48 2a02:829::/32 maxlen: 32 2a02:82a::/32 maxlen: 32 2a02:82b::/32 maxlen: 32 2a02:82c::/32 maxlen: 32 2a02:82d::/32 maxlen: 32 2a02:82e::/32 maxlen: 32 2a02:82f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 07:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:01:77:75:6f:c7:e2:eb:1a:fc:e4:0f:c3:9d:b3:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Jan 27 01:11:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09ac6bb72a061c5935931b79e5f7d1d081d86ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b0:00:81:00:1a:da:32:45:98:b1:dc:ca:f1: d3:24:9f:a1:72:39:80:fc:6e:32:4c:3f:14:1a:24: 44:0a:2e:ce:73:39:81:55:00:15:d8:83:5a:a9:c6: 59:a8:0f:03:04:4d:d2:b5:f4:fc:22:cd:f2:90:57: 18:ea:ea:3f:9c:7b:be:a9:1d:e0:40:02:83:1e:e0: f2:33:ac:08:72:d6:c9:13:af:a5:eb:3b:85:3b:ef: 2b:29:fe:dc:a8:a6:37:fe:a8:67:78:11:3a:f3:52: 2b:fb:4e:b3:81:59:b5:c0:81:0a:d6:49:7d:9d:38: 39:38:04:d0:c4:ef:ac:9c:a4:d4:88:1d:54:7c:89: 48:9d:5e:9d:74:a1:11:f4:34:b8:b8:21:6c:39:17: 10:02:af:7a:20:0d:de:d4:11:e9:56:15:c9:9b:f5: 01:d6:79:7c:eb:10:7e:73:2b:e2:60:be:74:c5:1d: ed:fa:2b:6d:a4:3d:ff:ea:d3:75:aa:de:b1:fe:c0: 85:80:87:06:9b:62:19:e4:f1:5f:46:67:11:b4:d2: fc:93:5a:36:3b:ea:53:f4:38:70:65:b1:3e:ab:fd: 2a:2e:24:39:ce:7b:81:6b:85:f6:b5:a6:96:ae:45: dd:31:09:7c:4d:53:37:d7:08:bb:05:a9:bc:0b:f4: 75:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:AC:6B:B7:2A:06:1C:59:35:93:1B:79:E5:F7:D1:D0:81:D8:6E:A8 X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CaxrtyoGHFk1kxt55ffR0IHYbqg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.43.0/24 37.32.32.0/21 37.75.243.0-37.75.247.255 45.9.252.0/22 45.87.4.0/23 45.140.224.0/22 46.28.72.0/21 78.110.120.0/22 80.249.112.0-80.249.114.255 84.47.224.0/21 85.198.24.0/22 88.135.37.0-88.135.39.255 91.236.168.0/23 185.18.212.0/22 185.51.200.0/22 185.121.128.0/22 185.128.136.0/22 185.141.132.0/22 185.182.248.0/22 185.233.131.0/24 188.209.152.0/23 195.110.38.0/23 217.172.120.0/21 IPv6: 2a02:828::/29 Signature Algorithm: sha256WithRSAEncryption 2a:5d:13:5d:43:07:33:32:79:89:4c:6a:c5:ae:cf:fb:c2:e1: 4b:30:43:05:c4:23:e8:35:3b:67:ca:4a:21:8e:27:93:28:82: 1e:63:bb:d3:78:1a:23:ff:93:b5:1e:af:0d:b3:70:d8:1d:72: 3e:63:18:31:83:a6:e0:78:0d:bb:df:64:12:1c:42:fe:49:99: cc:99:40:b4:7f:46:dd:ad:f6:f4:27:8a:07:6c:2e:fd:b2:a3: 25:5b:78:1e:86:e1:57:95:15:65:36:3c:84:6e:5a:db:ed:68: 0e:67:a1:ab:a0:c5:4f:e5:11:fe:41:f0:57:2b:12:08:63:2c: 0c:b8:84:a2:b0:1a:8e:87:61:58:f6:87:80:64:d3:44:80:c6: 86:91:21:2d:30:7e:1d:02:ec:2e:e6:b0:4b:49:25:2a:ac:f3: bb:3e:52:74:80:04:fc:43:3a:9d:44:7e:78:d3:4d:6f:0f:d2: ca:05:81:ca:7f:65:bb:c7:4e:03:3d:20:4f:74:21:53:22:e6: b4:54:94:99:a1:02:90:b7:65:ec:de:52:5a:bd:95:8b:fd:dd: e8:2e:9c:91:cb:7f:9c:23:80:3e:43:0f:b9:96:70:99:01:21: 7c:57:65:3e:cf:ce:6d:54:39:3b:95:4c:ab:2e:c4:84:7f:48: 49:05:42:5e -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgISAZv9AXd1b8fi6xr85A/DnbNWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjYwMTI3MDExMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWFjNmJiNzJhMDYxYzU5MzU5MzFiNzllNWY3ZDFkMDgxZDg2ZWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLAAgQAa2jJFmLHcyvHTJJ+hcjmA /G4yTD8UGiRECi7OczmBVQAV2INaqcZZqA8DBE3StfT8Is3ykFcY6uo/nHu+qR3g QAKDHuDyM6wIctbJE6+l6zuFO+8rKf7cqKY3/qhneBE681Ir+06zgVm1wIEK1kl9 nTg5OATQxO+snKTUiB1UfIlInV6ddKER9DS4uCFsORcQAq96IA3e1BHpVhXJm/UB 1nl86xB+cyviYL50xR3t+ittpD3/6tN1qt6x/sCFgIcGm2IZ5PFfRmcRtNL8k1o2 O+pT9DhwZbE+q/0qLiQ5znuBa4X2taaWrkXdMQl8TVM31wi7Bam8C/R15QIDAQAB o4ICuTCCArUwHQYDVR0OBBYEFAmsa7cqBhxZNZMbeeX30dCB2G6oMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvQ2F4cnR5b0dIRmsxa3h0NTVmZlIwSUhZYnFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHOBggrBgEFBQcBBwEB/wSBvjCBuzCBqQQCAAEwgaIDBAAF ASsDBAMlICAwDAMEACVL8wMEAyVL8AMEAi0J/AMEAS1XBAMEAi2M4AMEAy4cSAME Ak5ueDAMAwQEUPlwAwQAUPlyAwQDVC/gAwQCVcYYMAwDBABYhyUDBANYhyADBAFb 7KgDBAK5EtQDBAK5M8gDBAK5eYADBAK5gIgDBAK5jYQDBAK5tvgDBAC56YMDBAG8 0ZgDBAHDbiYDBAPZrHgwDQQCAAIwBwMFAyoCCCgwDQYJKoZIhvcNAQELBQADggEB ACpdE11DBzMyeYlMasWuz/vC4UswQwXEI+g1O2fKSiGOJ5Mogh5ju9N4GiP/k7Ue rw2zcNgdcj5jGDGDpuB4DbvfZBIcQv5JmcyZQLR/Rt2t9vQnigdsLv2yoyVbeB6G 4VeVFWU2PIRuWtvtaA5noaugxU/lEf5B8FcrEghjLAy4hKKwGo6HYVj2h4Bk00SA xoaRIS0wfh0C7C7msEtJJSqs87s+UnSABPxDOp1EfnjTTW8P0soFgcp/ZbvHTgM9 IE90IVMi5rRUlJmhApC3ZezeUlq9lYv93egunJHLf5wjgD5DD7mWcJkBIXxXZT7P zm1UOTuVTKsuxIR/SEkFQl4= -----END CERTIFICATE-----Generated at Sun Feb 1 16:54:37 2026 by rpki-client