This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/tb0BdaQME7yuZvsENp8uSgAMaHM.roa File: tb0BdaQME7yuZvsENp8uSgAMaHM.roa (raw, json) Hash identifier: qm3o/AQ7xgP+nt4WHRstJujvg/2teJkiPVnplUGx4Rs= Subject key identifier: B5:BD:01:75:A4:0C:13:BC:AE:66:FB:04:36:9F:2E:4A:00:0C:68:73 Certificate issuer: /CN=78d778fe5754dc3e16d92270424be21b9281ec72 Certificate serial: 019BFF70F0899C0494EC241B4CE524E390DC Authority key identifier: 78:D7:78:FE:57:54:DC:3E:16:D9:22:70:42:4B:E2:1B:92:81:EC:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNd4_ldU3D4W2SJwQkviG5KB7HI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/tb0BdaQME7yuZvsENp8uSgAMaHM.roa Signing time: Tue 27 Jan 2026 12:32:30 +0000 ROA not before: Tue 27 Jan 2026 12:32:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51018 IP address blocks: 95.159.64.0/18 maxlen: 18 95.159.64.0/20 maxlen: 20 95.159.64.0/24 maxlen: 24 95.159.65.0/24 maxlen: 24 95.159.66.0/24 maxlen: 24 95.159.67.0/24 maxlen: 24 95.159.68.0/24 maxlen: 24 95.159.69.0/24 maxlen: 24 95.159.70.0/24 maxlen: 24 95.159.71.0/24 maxlen: 24 95.159.72.0/24 maxlen: 24 95.159.73.0/24 maxlen: 24 95.159.74.0/24 maxlen: 24 95.159.75.0/24 maxlen: 24 95.159.76.0/24 maxlen: 24 95.159.77.0/24 maxlen: 24 95.159.78.0/24 maxlen: 24 95.159.79.0/24 maxlen: 24 95.159.80.0/20 maxlen: 20 95.159.80.0/22 maxlen: 22 95.159.80.0/23 maxlen: 23 95.159.80.0/24 maxlen: 24 95.159.81.0/24 maxlen: 24 95.159.82.0/23 maxlen: 23 95.159.82.0/24 maxlen: 24 95.159.83.0/24 maxlen: 24 95.159.84.0/22 maxlen: 22 95.159.84.0/23 maxlen: 23 95.159.84.0/24 maxlen: 24 95.159.85.0/24 maxlen: 24 95.159.86.0/23 maxlen: 23 95.159.86.0/24 maxlen: 24 95.159.87.0/24 maxlen: 24 95.159.88.0/22 maxlen: 22 95.159.88.0/23 maxlen: 23 95.159.88.0/24 maxlen: 24 95.159.89.0/24 maxlen: 24 95.159.90.0/24 maxlen: 24 95.159.91.0/24 maxlen: 24 95.159.92.0/24 maxlen: 24 95.159.93.0/24 maxlen: 24 95.159.94.0/24 maxlen: 24 95.159.95.0/24 maxlen: 24 95.159.96.0/20 maxlen: 20 95.159.96.0/24 maxlen: 24 95.159.97.0/24 maxlen: 24 95.159.98.0/24 maxlen: 24 95.159.99.0/24 maxlen: 24 95.159.100.0/24 maxlen: 24 95.159.101.0/24 maxlen: 24 95.159.102.0/24 maxlen: 24 95.159.103.0/24 maxlen: 24 95.159.104.0/22 maxlen: 22 95.159.104.0/24 maxlen: 24 95.159.105.0/24 maxlen: 24 95.159.106.0/24 maxlen: 24 95.159.107.0/24 maxlen: 24 95.159.108.0/24 maxlen: 24 95.159.109.0/24 maxlen: 24 95.159.110.0/24 maxlen: 24 95.159.111.0/24 maxlen: 24 95.159.112.0/20 maxlen: 20 95.159.112.0/21 maxlen: 21 95.159.112.0/24 maxlen: 24 95.159.113.0/24 maxlen: 24 95.159.114.0/24 maxlen: 24 95.159.115.0/24 maxlen: 24 95.159.116.0/24 maxlen: 24 95.159.117.0/24 maxlen: 24 95.159.118.0/24 maxlen: 24 95.159.119.0/24 maxlen: 24 95.159.120.0/21 maxlen: 21 95.159.120.0/24 maxlen: 24 95.159.121.0/24 maxlen: 24 95.159.122.0/24 maxlen: 24 95.159.123.0/24 maxlen: 24 95.159.124.0/24 maxlen: 24 95.159.125.0/24 maxlen: 24 95.159.126.0/24 maxlen: 24 95.159.127.0/24 maxlen: 24 178.22.32.0/21 maxlen: 21 178.22.32.0/22 maxlen: 22 178.22.36.0/22 maxlen: 22 194.180.40.0/22 maxlen: 22 194.180.40.0/23 maxlen: 23 194.180.40.0/24 maxlen: 24 2a01:58a0::/32 maxlen: 32 2a01:58a0::/40 maxlen: 40 2a01:58a0:100::/40 maxlen: 40 2a01:58a0:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.mft rsync://rpki.ripe.net/repository/DEFAULT/eNd4_ldU3D4W2SJwQkviG5KB7HI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:70:f0:89:9c:04:94:ec:24:1b:4c:e5:24:e3:90:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78d778fe5754dc3e16d92270424be21b9281ec72 Validity Not Before: Jan 27 12:32:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5bd0175a40c13bcae66fb04369f2e4a000c6873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:48:ab:25:37:85:65:50:6a:bf:cb:16:d0:b8: e1:43:88:98:00:f8:b2:65:ed:00:3f:6b:1a:a5:15: 4b:26:b9:26:59:78:4a:03:45:08:e0:51:75:92:46: e3:77:86:c5:1f:d7:e3:9a:bd:64:e1:53:cf:b3:27: e2:d2:f6:c7:fb:b3:a7:f8:c4:ca:d4:24:48:88:38: c6:f4:fa:a8:66:ed:c8:9f:9d:8a:b7:68:c1:0c:69: 1f:c7:dc:04:e2:27:ba:d3:d6:5f:06:7e:e4:0d:e8: 71:71:73:3c:83:66:7e:ec:1e:26:b6:3f:4e:27:c0: 46:ad:86:80:d1:9b:c5:cb:b6:5a:14:e4:40:4f:52: fd:b0:e0:2a:22:48:e5:e7:ed:2c:bd:46:f1:e1:1c: ad:84:8b:10:37:ae:cc:48:15:ed:af:d7:8b:eb:39: fb:88:e6:86:4a:7d:42:17:e4:d4:72:4a:78:a5:70: a8:c5:d5:10:4a:68:a0:55:73:bb:bb:85:6e:d8:68: bb:51:de:e2:30:bf:1d:e7:5a:7f:51:ea:eb:37:03: d9:98:17:00:c9:e5:f4:d3:f2:0f:5d:a7:e8:d7:84: 4b:6d:e0:ef:55:d3:28:79:b5:ab:77:30:a5:68:a6: 57:e3:b7:56:ac:b4:c0:ea:9d:40:8e:13:ac:70:fa: a3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BD:01:75:A4:0C:13:BC:AE:66:FB:04:36:9F:2E:4A:00:0C:68:73 X509v3 Authority Key Identifier: keyid:78:D7:78:FE:57:54:DC:3E:16:D9:22:70:42:4B:E2:1B:92:81:EC:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNd4_ldU3D4W2SJwQkviG5KB7HI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/tb0BdaQME7yuZvsENp8uSgAMaHM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.159.64.0/18 178.22.32.0/21 194.180.40.0/22 IPv6: 2a01:58a0::/32 Signature Algorithm: sha256WithRSAEncryption a8:5c:dd:d9:47:cd:a6:d6:bc:be:0f:82:c3:dd:cf:93:8f:cc: 77:1b:4c:82:73:f0:92:54:d0:13:96:1b:68:e2:45:72:05:37: 2e:64:2a:a5:f7:56:dd:32:58:cb:9a:f5:c6:dd:3f:84:98:54: b2:86:57:1c:48:3c:73:af:da:0b:eb:a5:2e:e3:9c:2e:d3:04: 5c:5f:37:e3:50:8a:05:97:88:58:02:89:52:40:5d:13:6d:2a: d9:8c:ac:91:5b:e9:a7:43:66:df:92:dc:b5:93:a0:c5:39:59: d9:ed:08:33:e6:cb:92:e9:87:53:4c:70:f4:3d:ec:64:1b:a5: 37:5d:d5:65:b5:fc:eb:8b:bf:34:54:78:e2:f3:46:42:0b:5a: 73:14:5b:2e:3c:9c:46:19:4d:5c:2f:ed:c2:99:de:fa:f9:2f: 9c:e1:7e:b2:71:77:a8:62:2f:32:38:5f:5f:0f:1c:7c:b6:ef: c3:42:af:53:59:9e:a5:cb:4a:28:43:ac:e5:ed:bd:9e:0d:a6: 78:fd:0e:66:96:c6:bd:c7:2b:b6:24:ad:85:b4:ab:4b:86:8e: a2:66:4b:a5:c1:3c:5a:ce:72:d1:17:5b:a8:35:e8:93:45:9b: 35:26:24:da:ce:e4:de:8a:53:bd:59:55:22:5b:a5:9d:91:88: dd:d2:f2:d0 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZv/cPCJnASU7CQbTOUk45DcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZDc3OGZlNTc1NGRjM2UxNmQ5MjI3MDQyNGJlMjFiOTI4 MWVjNzIwHhcNMjYwMTI3MTIzMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWJkMDE3NWE0MGMxM2JjYWU2NmZiMDQzNjlmMmU0YTAwMGM2ODczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkirJTeFZVBqv8sW0LjhQ4iYAPiy Ze0AP2sapRVLJrkmWXhKA0UI4FF1kkbjd4bFH9fjmr1k4VPPsyfi0vbH+7On+MTK 1CRIiDjG9PqoZu3In52Kt2jBDGkfx9wE4ie609ZfBn7kDehxcXM8g2Z+7B4mtj9O J8BGrYaA0ZvFy7ZaFORAT1L9sOAqIkjl5+0svUbx4RythIsQN67MSBXtr9eL6zn7 iOaGSn1CF+TUckp4pXCoxdUQSmigVXO7u4Vu2Gi7Ud7iML8d51p/UerrNwPZmBcA yeX00/IPXafo14RLbeDvVdMoebWrdzClaKZX47dWrLTA6p1AjhOscPqjVwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFLW9AXWkDBO8rmb7BDafLkoADGhzMB8GA1UdIwQY MBaAFHjXeP5XVNw+FtkicEJL4huSgexyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU5kNF9sZFUzRDRXMlNKd1FrdmlHNUtCN0hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kMTVhNjItZTJmZi00MDRkLWE5NGMt N2ZkYmY2ZmIwZGY4LzEvdGIwQmRhUU1FN3l1WnZzRU5wOHVTZ0FNYUhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9kMTVhNjItZTJmZi00MDRkLWE5NGMtN2ZkYmY2ZmIwZGY4 LzEvZU5kNF9sZFUzRDRXMlNKd1FrdmlHNUtCN0hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQGX59AAwQD shYgAwQCwrQoMA0EAgACMAcDBQAqAVigMA0GCSqGSIb3DQEBCwUAA4IBAQCoXN3Z R82m1ry+D4LD3c+Tj8x3G0yCc/CSVNATlhto4kVyBTcuZCql91bdMljLmvXG3T+E mFSyhlccSDxzr9oL66Uu45wu0wRcXzfjUIoFl4hYAolSQF0TbSrZjKyRW+mnQ2bf kty1k6DFOVnZ7Qgz5suS6YdTTHD0PexkG6U3XdVltfzri780VHji80ZCC1pzFFsu PJxGGU1cL+3Cmd76+S+c4X6ycXeoYi8yOF9fDxx8tu/DQq9TWZ6ly0ooQ6zl7b2e DaZ4/Q5mlsa9xyu2JK2FtKtLho6iZkulwTxaznLRF1uoNeiTRZs1JiTazuTeilO9 WVUiW6WdkYjd0vLQ -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:42 2026 by rpki-client