This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/HRzfCSegq9wdLnlgNXAjmoIQn-M.roa File: HRzfCSegq9wdLnlgNXAjmoIQn-M.roa (raw, json) Hash identifier: 6cCwTMkaB6udqkfPRgNx/lO4jyDjV4y8nRfQDxyT4Sc= Subject key identifier: 1D:1C:DF:09:27:A0:AB:DC:1D:2E:79:60:35:70:23:9A:82:10:9F:E3 Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d Certificate serial: 019C0C984055C34FFBADD6615C9D1B3936D9 Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/HRzfCSegq9wdLnlgNXAjmoIQn-M.roa Signing time: Fri 30 Jan 2026 01:50:30 +0000 ROA not before: Fri 30 Jan 2026 01:50:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31898 IP address blocks: 79.72.0.0/20 maxlen: 20 79.72.16.0/22 maxlen: 22 79.72.20.0/23 maxlen: 23 79.72.24.0/21 maxlen: 21 79.72.32.0/22 maxlen: 24 79.72.40.0/21 maxlen: 21 79.72.48.0/20 maxlen: 20 79.72.64.0/19 maxlen: 19 79.76.0.0/20 maxlen: 20 79.76.16.0/23 maxlen: 23 79.76.18.0/23 maxlen: 23 79.76.20.0/24 maxlen: 24 79.76.24.0/21 maxlen: 21 79.76.32.0/19 maxlen: 19 79.76.96.0/19 maxlen: 19 80.225.64.0/20 maxlen: 20 80.225.80.0/20 maxlen: 20 80.225.160.0/21 maxlen: 21 80.225.168.0/23 maxlen: 23 80.225.170.0/23 maxlen: 23 80.225.172.0/23 maxlen: 23 80.225.174.0/23 maxlen: 23 80.225.176.0/23 maxlen: 23 80.225.178.0/23 maxlen: 23 80.225.184.0/21 maxlen: 21 80.225.192.0/18 maxlen: 18 81.208.160.0/20 maxlen: 20 81.208.188.0/22 maxlen: 22 82.70.224.0/20 maxlen: 20 82.70.248.0/22 maxlen: 22 84.8.64.0/21 maxlen: 21 84.8.72.0/23 maxlen: 23 84.8.74.0/23 maxlen: 23 84.8.76.0/23 maxlen: 23 84.8.78.0/23 maxlen: 23 84.8.80.0/23 maxlen: 23 84.8.88.0/23 maxlen: 23 84.8.96.0/19 maxlen: 19 84.8.128.0/20 maxlen: 20 84.8.144.0/20 maxlen: 20 84.8.192.0/21 maxlen: 24 84.8.200.0/23 maxlen: 24 84.8.202.0/23 maxlen: 24 84.8.206.0/23 maxlen: 24 84.8.208.0/23 maxlen: 24 84.8.210.0/23 maxlen: 24 84.8.216.0/21 maxlen: 24 84.8.224.0/21 maxlen: 21 84.8.232.0/23 maxlen: 23 84.8.234.0/23 maxlen: 23 84.8.238.0/23 maxlen: 23 84.8.240.0/23 maxlen: 23 84.8.242.0/23 maxlen: 23 84.8.248.0/21 maxlen: 21 84.235.160.0/19 maxlen: 19 84.235.192.0/23 maxlen: 23 84.235.198.0/23 maxlen: 23 84.235.200.0/21 maxlen: 21 84.235.208.0/20 maxlen: 20 84.235.224.0/20 maxlen: 20 84.235.240.0/20 maxlen: 20 89.168.0.0/21 maxlen: 21 89.168.16.0/20 maxlen: 20 89.168.32.0/19 maxlen: 19 89.168.64.0/18 maxlen: 18 92.4.64.0/19 maxlen: 19 92.4.128.0/19 maxlen: 19 92.4.160.0/20 maxlen: 20 92.4.176.0/20 maxlen: 20 92.4.192.0/21 maxlen: 21 92.4.208.0/20 maxlen: 24 92.4.228.0/22 maxlen: 24 92.4.232.0/23 maxlen: 23 92.4.235.0/24 maxlen: 24 92.4.236.0/24 maxlen: 24 92.4.237.0/24 maxlen: 24 92.4.238.0/24 maxlen: 24 92.4.239.0/24 maxlen: 24 92.4.240.0/20 maxlen: 20 92.5.0.0/17 maxlen: 17 92.5.128.0/18 maxlen: 18 92.5.192.0/19 maxlen: 19 92.5.224.0/20 maxlen: 20 92.5.240.0/21 maxlen: 21 92.5.248.0/22 maxlen: 22 92.5.254.0/24 maxlen: 24 92.5.255.0/24 maxlen: 24 130.110.0.0/20 maxlen: 20 130.110.16.0/21 maxlen: 21 130.110.24.0/22 maxlen: 22 130.110.28.0/23 maxlen: 23 130.110.32.0/19 maxlen: 19 130.110.64.0/19 maxlen: 19 130.110.96.0/19 maxlen: 19 130.110.192.0/24 maxlen: 24 130.110.206.0/24 maxlen: 24 130.110.207.0/24 maxlen: 24 130.110.208.0/24 maxlen: 24 130.110.209.0/24 maxlen: 24 130.110.210.0/24 maxlen: 24 130.110.211.0/24 maxlen: 24 130.110.212.0/24 maxlen: 24 130.110.213.0/24 maxlen: 24 130.110.214.0/24 maxlen: 24 130.110.215.0/24 maxlen: 24 130.110.216.0/24 maxlen: 24 130.110.218.0/24 maxlen: 24 130.110.219.0/24 maxlen: 24 130.110.220.0/24 maxlen: 24 130.110.221.0/24 maxlen: 24 130.110.222.0/24 maxlen: 24 130.110.223.0/24 maxlen: 24 130.110.224.0/21 maxlen: 21 130.110.232.0/22 maxlen: 22 130.110.236.0/23 maxlen: 23 130.110.238.0/24 maxlen: 24 130.110.239.0/24 maxlen: 24 130.110.240.0/20 maxlen: 20 134.98.64.0/23 maxlen: 23 134.98.128.0/19 maxlen: 24 134.98.192.0/19 maxlen: 19 134.98.224.0/23 maxlen: 23 134.98.248.0/21 maxlen: 21 140.84.160.0/19 maxlen: 24 140.86.236.0/24 maxlen: 24 140.86.237.0/24 maxlen: 24 140.86.238.0/24 maxlen: 24 141.253.96.0/19 maxlen: 19 141.253.192.0/20 maxlen: 20 141.253.208.0/22 maxlen: 22 141.253.212.0/23 maxlen: 23 141.253.214.0/24 maxlen: 24 141.253.215.0/24 maxlen: 24 141.253.216.0/21 maxlen: 21 145.241.96.0/21 maxlen: 21 145.241.104.0/21 maxlen: 24 145.241.112.0/20 maxlen: 20 145.241.144.0/21 maxlen: 21 145.241.152.0/21 maxlen: 21 145.241.160.0/20 maxlen: 20 145.241.176.0/24 maxlen: 24 145.241.177.0/24 maxlen: 24 145.241.178.0/23 maxlen: 23 145.241.180.0/23 maxlen: 23 145.241.182.0/24 maxlen: 24 145.241.183.0/24 maxlen: 24 145.241.184.0/21 maxlen: 21 145.241.192.0/18 maxlen: 18 213.35.96.0/19 maxlen: 19 217.142.128.0/19 maxlen: 19 217.142.160.0/21 maxlen: 21 217.142.168.0/23 maxlen: 23 217.142.170.0/23 maxlen: 23 217.142.172.0/23 maxlen: 23 217.142.174.0/23 maxlen: 23 217.142.176.0/23 maxlen: 23 217.142.178.0/23 maxlen: 23 217.142.184.0/21 maxlen: 21 217.142.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0c:98:40:55:c3:4f:fb:ad:d6:61:5c:9d:1b:39:36:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d Validity Not Before: Jan 30 01:50:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d1cdf0927a0abdc1d2e79603570239a82109fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7b:ae:cd:69:56:ca:fd:26:2b:10:13:1c:40: 9d:4b:d9:f9:e3:23:6b:81:ad:ce:3e:ed:ad:ba:f9: bd:f4:b3:22:57:2b:b7:f7:49:7d:f9:2d:0f:f2:80: 0c:90:d3:2d:f7:66:ea:b7:51:da:12:24:80:ac:4a: 1b:bf:37:45:64:11:8f:f9:70:32:bd:7f:05:1c:3b: 17:7b:f2:56:ce:78:38:f8:97:a2:d3:b7:5d:3e:e2: e6:d4:4f:47:81:23:e3:25:10:70:41:07:6d:ef:42: 7a:8a:d2:be:81:a5:7e:3f:36:18:b3:e7:2f:71:84: 4e:3d:6d:a1:11:a4:fa:f5:d1:be:0b:37:04:12:b5: 35:09:bf:b0:9d:c9:39:e9:66:e7:de:5b:c4:7a:c9: 69:65:87:e4:db:d6:f0:24:b9:3d:dd:81:35:60:dc: 0e:4d:20:30:14:70:64:23:69:d1:4e:95:05:6f:bc: 54:86:13:81:a4:c3:c3:47:21:0c:be:c8:f8:13:a2: 2b:e3:80:12:cb:09:73:e2:62:40:3a:8c:2f:1b:9d: 65:82:f8:be:0b:d0:e6:d8:f2:fb:da:d7:cf:05:dd: af:9c:d1:fc:b5:ee:43:81:b0:3b:6e:21:2b:69:8e: 4c:64:bd:22:a4:02:5a:69:3f:a6:5a:2f:a6:4d:ef: 57:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1C:DF:09:27:A0:AB:DC:1D:2E:79:60:35:70:23:9A:82:10:9F:E3 X509v3 Authority Key Identifier: keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/HRzfCSegq9wdLnlgNXAjmoIQn-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.72.0.0-79.72.21.255 79.72.24.0-79.72.35.255 79.72.40.0-79.72.95.255 79.76.0.0-79.76.20.255 79.76.24.0-79.76.63.255 79.76.96.0/19 80.225.64.0/19 80.225.160.0-80.225.179.255 80.225.184.0-80.225.255.255 81.208.160.0/20 81.208.188.0/22 82.70.224.0/20 82.70.248.0/22 84.8.64.0-84.8.81.255 84.8.88.0/23 84.8.96.0-84.8.159.255 84.8.192.0-84.8.203.255 84.8.206.0-84.8.211.255 84.8.216.0-84.8.235.255 84.8.238.0-84.8.243.255 84.8.248.0/21 84.235.160.0-84.235.193.255 84.235.198.0-84.235.255.255 89.168.0.0/21 89.168.16.0-89.168.127.255 92.4.64.0/19 92.4.128.0-92.4.199.255 92.4.208.0/20 92.4.228.0-92.4.233.255 92.4.235.0-92.5.251.255 92.5.254.0/23 130.110.0.0-130.110.29.255 130.110.32.0-130.110.127.255 130.110.192.0/24 130.110.206.0-130.110.216.255 130.110.218.0-130.110.255.255 134.98.64.0/23 134.98.128.0/19 134.98.192.0-134.98.225.255 134.98.248.0/21 140.84.160.0/19 140.86.236.0-140.86.238.255 141.253.96.0/19 141.253.192.0/19 145.241.96.0/19 145.241.144.0-145.241.255.255 213.35.96.0/19 217.142.128.0-217.142.179.255 217.142.184.0/21 217.142.224.0/19 Signature Algorithm: sha256WithRSAEncryption 33:f0:52:61:1b:56:e0:0b:ff:79:b7:a0:34:1a:2d:cc:e0:ee: 52:d1:5d:02:d1:bb:67:53:fe:06:93:a1:15:80:ab:ff:88:24: fb:37:7f:59:a1:eb:0d:c0:e4:05:3f:62:ad:99:c9:c0:3b:19: fb:92:d6:3d:7f:7c:bd:82:9a:c0:33:89:d0:7e:b5:58:25:71: e2:26:32:29:f6:08:e1:97:18:22:00:be:3f:29:a9:d4:40:dd: 5d:ce:6a:b0:65:02:a9:e4:38:43:8f:23:f3:91:26:78:ec:2c: d0:b1:a9:ce:11:76:7d:f9:66:97:ed:b7:91:74:fb:9f:ae:04: 6c:59:db:51:39:f7:ea:5a:f7:fc:a6:c6:9e:d9:b2:be:98:06: 46:26:41:03:0d:95:58:7d:83:3a:ba:ca:62:c1:70:34:fe:98: 6a:a3:4c:c0:91:9e:82:dc:59:41:a2:e8:9b:90:cb:4e:0f:f6: 83:17:fa:73:f2:24:9d:57:8b:39:26:7a:ea:4a:12:5d:6f:31: 25:53:14:cd:3b:c7:d7:75:e9:34:ca:aa:96:8b:67:ee:1a:ec: b5:aa:f0:fc:6d:f0:76:08:84:cd:6b:af:ef:c6:2a:a3:51:cd: 90:e9:c7:cf:35:89:a2:2c:81:1f:ac:05:c1:7e:c6:d9:ee:3d: de:56:97:ae -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgISAZwMmEBVw0/7rdZhXJ0bOTbZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzN2M4MzQ0N2QxNzE4MzM4MGY0ODliYzk0NmM4YjllMzAw ZmZiMWQwHhcNMjYwMTMwMDE1MDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDFjZGYwOTI3YTBhYmRjMWQyZTc5NjAzNTcwMjM5YTgyMTA5ZmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnuuzWlWyv0mKxATHECdS9n54yNr ga3OPu2tuvm99LMiVyu390l9+S0P8oAMkNMt92bqt1HaEiSArEobvzdFZBGP+XAy vX8FHDsXe/JWzng4+Jei07ddPuLm1E9HgSPjJRBwQQdt70J6itK+gaV+PzYYs+cv cYROPW2hEaT69dG+CzcEErU1Cb+wnck56Wbn3lvEeslpZYfk29bwJLk93YE1YNwO TSAwFHBkI2nRTpUFb7xUhhOBpMPDRyEMvsj4E6Ir44ASywlz4mJAOowvG51lgvi+ C9Dm2PL72tfPBd2vnNH8te5DgbA7biEraY5MZL0ipAJaaT+mWi+mTe9XFwIDAQAB o4IECjCCBAYwHQYDVR0OBBYEFB0c3wknoKvcHS55YDVwI5qCEJ/jMB8GA1UdIwQY MBaAFCN8g0R9FxgzgPSJvJRsi54wD/sdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85ZDU5ZTEtN2E2Ny00NjlkLWI0ZGEt OGIzMzcyMjM0ZGMwLzEvSFJ6ZkNTZWdxOXdkTG5sZ05YQWptb0lRbi1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS85ZDU5ZTEtN2E2Ny00NjlkLWI0ZGEtOGIzMzcyMjM0ZGMw LzEvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICHgYIKwYBBQUHAQcBAf8EggINMIICCTCCAgUEAgABMIIB /TALAwMDT0gDBAFPSBQwDAMEA09IGAMEAk9IIDAMAwQDT0goAwQFT0hAMAsDAwJP TAMEAE9MFDAMAwQDT0wYAwQGT0wAAwQFT0xgAwQFUOFAMAwDBAVQ4aADBAJQ4bAw CwMEA1DhuAMDAVDgAwQEUdCgAwQCUdC8AwQEUkbgAwQCUkb4MAwDBAZUCEADBAFU CFADBAFUCFgwDAMEBVQIYAMEBVQIgDAMAwQGVAjAAwQCVAjIMAwDBAFUCM4DBAJU CNAwDAMEA1QI2AMEAlQI6DAMAwQBVAjuAwQCVAjwAwQDVAj4MAwDBAVU66ADBAFU 68AwCwMEAVTrxgMDAlToAwQDWagAMAwDBARZqBADBAdZqAADBAVcBEAwDAMEB1wE gAMEA1wEwAMEBFwE0DAMAwQCXATkAwQBXAToMAwDBABcBOsDBAJcBfgDBAFcBf4w CwMDAYJuAwQBgm4cMAwDBAWCbiADBAeCbgADBACCbsAwDAMEAYJuzgMEAIJu2DAL AwQBgm7aAwMAgm4DBAGGYkADBAWGYoAwDAMEBoZiwAMEAYZi4AMEA4Zi+AMEBYxU oDAMAwQCjFbsAwQAjFbuAwQFjf1gAwQFjf3AAwQFkfFgMAsDBASR8ZADAwGR8AME BdUjYDAMAwQH2Y6AAwQC2Y6wAwQD2Y64AwQF2Y7gMA0GCSqGSIb3DQEBCwUAA4IB AQAz8FJhG1bgC/95t6A0Gi3M4O5S0V0C0btnU/4Gk6EVgKv/iCT7N39ZoesNwOQF P2KtmcnAOxn7ktY9f3y9gprAM4nQfrVYJXHiJjIp9gjhlxgiAL4/KanUQN1dzmqw ZQKp5DhDjyPzkSZ47CzQsanOEXZ9+WaX7beRdPufrgRsWdtROffqWvf8psae2bK+ mAZGJkEDDZVYfYM6uspiwXA0/phqo0zAkZ6C3FlBouibkMtOD/aDF/pz8iSdV4s5 JnrqShJdbzElUxTNO8fXdek0yqqWi2fuGuy1qvD8bfB2CITNa6/vxiqjUc2Q6cfP NYmiLIEfrAXBfsbZ7j3eVpeu -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:37 2026 by rpki-client