This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/btxvfCpPBJzhLJ1q0hbmYzTrs_o.roa File: btxvfCpPBJzhLJ1q0hbmYzTrs_o.roa (raw, json) Hash identifier: EWQ0Oxbv6MIMLYiT86duCPS9U8DVrZlE0W+JlVlWSBE= Subject key identifier: 6E:DC:6F:7C:2A:4F:04:9C:E1:2C:9D:6A:D2:16:E6:63:34:EB:B3:FA Certificate issuer: /CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a Certificate serial: 019B7DCB5A7CDE9D10A1711B1ADB7B2F45DA Authority key identifier: F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/btxvfCpPBJzhLJ1q0hbmYzTrs_o.roa Signing time: Fri 02 Jan 2026 08:20:37 +0000 ROA not before: Fri 02 Jan 2026 08:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208677 IP address blocks: 31.40.248.0/23 maxlen: 23 37.18.8.0/23 maxlen: 23 37.18.10.0/24 maxlen: 24 37.18.22.0/24 maxlen: 24 37.18.72.0/23 maxlen: 23 37.18.100.0/23 maxlen: 23 37.18.102.0/24 maxlen: 24 37.18.107.0/24 maxlen: 24 37.18.108.0/22 maxlen: 22 37.18.112.0/23 maxlen: 23 37.18.114.0/24 maxlen: 24 37.18.115.0/24 maxlen: 24 37.18.116.0/22 maxlen: 22 37.18.120.0/23 maxlen: 23 37.18.122.0/24 maxlen: 24 37.44.196.0/23 maxlen: 23 37.44.198.0/24 maxlen: 24 37.230.139.0/24 maxlen: 24 37.230.179.0/24 maxlen: 24 37.230.180.0/23 maxlen: 23 37.230.180.0/24 maxlen: 24 37.230.184.0/23 maxlen: 23 37.230.186.0/24 maxlen: 24 37.230.192.0/21 maxlen: 21 37.230.224.0/24 maxlen: 24 37.230.233.0/24 maxlen: 24 45.9.24.0/22 maxlen: 22 45.89.224.0/22 maxlen: 22 45.132.176.0/22 maxlen: 22 45.136.146.0/23 maxlen: 23 45.151.30.0/23 maxlen: 23 45.155.204.0/23 maxlen: 23 46.16.36.0/24 maxlen: 24 46.243.141.0/24 maxlen: 24 46.243.142.0/23 maxlen: 23 46.243.172.0/24 maxlen: 24 46.243.201.0/24 maxlen: 24 46.243.205.0/24 maxlen: 24 46.243.206.0/24 maxlen: 24 46.243.226.0/23 maxlen: 23 46.243.244.0/23 maxlen: 23 46.253.132.0/24 maxlen: 24 62.233.43.0/24 maxlen: 24 82.202.136.0/21 maxlen: 21 82.202.156.0/22 maxlen: 22 84.54.56.0/22 maxlen: 22 85.208.85.0/24 maxlen: 24 85.208.86.0/23 maxlen: 23 85.208.209.0/24 maxlen: 24 85.208.210.0/23 maxlen: 23 85.209.149.0/24 maxlen: 24 85.209.150.0/23 maxlen: 23 85.235.82.0/23 maxlen: 24 85.235.83.0/24 maxlen: 24 87.242.84.0/22 maxlen: 22 87.242.88.0/21 maxlen: 21 87.242.100.0/22 maxlen: 22 87.242.116.0/22 maxlen: 22 87.242.120.0/21 maxlen: 21 88.218.65.0/24 maxlen: 24 88.218.66.0/23 maxlen: 23 89.232.160.0/21 maxlen: 21 89.232.168.0/22 maxlen: 22 89.232.176.0/22 maxlen: 22 91.224.86.0/23 maxlen: 23 94.139.252.0/22 maxlen: 22 94.158.22.0/23 maxlen: 23 95.174.88.0/21 maxlen: 21 141.101.151.0/24 maxlen: 24 141.101.152.0/24 maxlen: 24 141.101.201.0/24 maxlen: 24 152.89.196.0/24 maxlen: 24 168.222.176.0/22 maxlen: 24 176.108.240.0/20 maxlen: 20 176.109.96.0/20 maxlen: 24 176.123.160.0/21 maxlen: 21 178.170.191.0/24 maxlen: 24 178.170.192.0/22 maxlen: 22 178.170.196.0/23 maxlen: 23 178.170.242.0/24 maxlen: 24 185.50.200.0/22 maxlen: 22 185.234.11.0/24 maxlen: 24 185.241.57.0/24 maxlen: 24 188.72.96.0/24 maxlen: 24 188.72.106.0/23 maxlen: 23 188.72.108.0/23 maxlen: 23 188.72.117.0/24 maxlen: 24 188.72.118.0/24 maxlen: 24 192.144.12.0/22 maxlen: 22 192.144.28.0/24 maxlen: 24 193.42.116.0/23 maxlen: 23 193.105.4.0/24 maxlen: 24 193.163.94.0/24 maxlen: 24 193.201.8.0/24 maxlen: 24 194.5.92.0/23 maxlen: 23 194.26.228.0/24 maxlen: 24 194.50.72.0/24 maxlen: 24 194.113.34.0/23 maxlen: 23 195.128.152.0/24 maxlen: 24 213.171.24.0/21 maxlen: 21 213.178.153.0/24 maxlen: 24 213.178.154.0/24 maxlen: 24 2a0c:2b80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5a:7c:de:9d:10:a1:71:1b:1a:db:7b:2f:45:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a Validity Not Before: Jan 2 08:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6edc6f7c2a4f049ce12c9d6ad216e66334ebb3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9b:6f:c8:df:b7:47:7b:5e:4e:c3:b6:91:5d: 8f:98:e7:18:66:40:a1:06:b7:55:2d:34:aa:09:0c: e4:ce:9c:47:19:4f:4d:4a:62:51:e2:74:82:bd:9f: ce:3c:4c:59:97:e0:e4:35:9e:5b:9d:a8:62:1e:18: 4e:dd:d7:3c:b6:34:dd:8d:aa:87:80:4a:04:d1:3e: 9d:7e:f1:3c:b1:1e:86:4c:42:4e:a5:fe:d5:d9:44: f3:0a:81:13:b2:03:4f:a7:64:c6:10:d0:de:55:26: 40:0f:4b:a6:7a:bc:f1:fa:f4:8c:2b:51:3f:de:5b: d7:eb:63:8a:5d:9b:7b:5b:29:27:1a:29:f6:88:44: 00:a2:fd:c2:eb:63:f0:7f:8a:47:f7:dc:92:f3:82: 5e:1d:ee:14:08:65:b1:60:a5:d3:48:a8:08:55:49: d6:37:97:29:d7:7f:21:ca:6e:62:36:70:7f:ed:09: 6f:34:51:a0:55:04:45:e5:b4:f4:0d:c1:44:64:db: 3f:93:d5:aa:04:56:62:e0:c7:d9:ef:68:17:f1:ec: 06:31:3b:5f:01:ab:d8:cd:5a:16:31:63:b4:1b:95: fa:f6:0b:14:fb:d9:88:a9:64:66:92:19:90:ec:97: 17:fc:49:c2:b9:c5:9d:47:38:02:86:7b:ea:b8:26: 6d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:DC:6F:7C:2A:4F:04:9C:E1:2C:9D:6A:D2:16:E6:63:34:EB:B3:FA X509v3 Authority Key Identifier: keyid:F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/btxvfCpPBJzhLJ1q0hbmYzTrs_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.248.0/23 37.18.8.0-37.18.10.255 37.18.22.0/24 37.18.72.0/23 37.18.100.0-37.18.102.255 37.18.107.0-37.18.122.255 37.44.196.0-37.44.198.255 37.230.139.0/24 37.230.179.0-37.230.181.255 37.230.184.0-37.230.186.255 37.230.192.0/21 37.230.224.0/24 37.230.233.0/24 45.9.24.0/22 45.89.224.0/22 45.132.176.0/22 45.136.146.0/23 45.151.30.0/23 45.155.204.0/23 46.16.36.0/24 46.243.141.0-46.243.143.255 46.243.172.0/24 46.243.201.0/24 46.243.205.0-46.243.206.255 46.243.226.0/23 46.243.244.0/23 46.253.132.0/24 62.233.43.0/24 82.202.136.0/21 82.202.156.0/22 84.54.56.0/22 85.208.85.0-85.208.87.255 85.208.209.0-85.208.211.255 85.209.149.0-85.209.151.255 85.235.82.0/23 87.242.84.0-87.242.95.255 87.242.100.0/22 87.242.116.0-87.242.127.255 88.218.65.0-88.218.67.255 89.232.160.0-89.232.171.255 89.232.176.0/22 91.224.86.0/23 94.139.252.0/22 94.158.22.0/23 95.174.88.0/21 141.101.151.0-141.101.152.255 141.101.201.0/24 152.89.196.0/24 168.222.176.0/22 176.108.240.0/20 176.109.96.0/20 176.123.160.0/21 178.170.191.0-178.170.197.255 178.170.242.0/24 185.50.200.0/22 185.234.11.0/24 185.241.57.0/24 188.72.96.0/24 188.72.106.0-188.72.109.255 188.72.117.0-188.72.118.255 192.144.12.0/22 192.144.28.0/24 193.42.116.0/23 193.105.4.0/24 193.163.94.0/24 193.201.8.0/24 194.5.92.0/23 194.26.228.0/24 194.50.72.0/24 194.113.34.0/23 195.128.152.0/24 213.171.24.0/21 213.178.153.0-213.178.154.255 IPv6: 2a0c:2b80::/29 Signature Algorithm: sha256WithRSAEncryption 88:12:c6:61:91:33:be:6c:7f:64:35:29:a8:7a:01:83:40:85: 57:a6:d6:bd:5d:76:1c:04:ce:e4:d4:81:24:87:8c:33:d2:71: 74:36:97:8b:0b:25:d6:0c:a6:58:e8:33:6a:5b:c4:dc:c4:c6: 16:ff:c6:d2:d4:cc:c5:73:18:de:24:26:12:9a:4d:2f:fe:3b: 63:c0:ed:aa:b1:01:24:cd:e0:05:cb:ab:68:9b:15:73:2c:6d: 4d:19:30:0d:b5:30:d9:00:34:e5:79:93:00:52:04:fe:2f:f9: 61:4f:62:7c:d5:79:37:a1:da:f9:2c:b0:2d:2b:48:53:f7:c5: 51:37:59:6b:1b:9c:a7:a6:a5:13:10:b5:95:0b:cb:d6:1c:f3: a5:20:09:38:16:1f:9f:44:4a:5b:7a:6b:5d:00:7f:dd:fe:7c: b7:84:a4:60:3e:6a:7f:b4:c2:51:47:29:f6:a9:fc:d2:91:1c: dd:37:c9:26:46:77:19:3d:a9:7e:6a:fb:39:b3:76:9a:28:c6: 1c:e6:a6:6e:3b:8f:9a:fb:43:6d:67:13:01:73:92:42:63:1e: 76:d2:17:48:81:88:de:fd:af:e6:18:6a:89:50:07:b9:d7:6a: 8b:0b:b1:e0:3c:26:1a:16:79:2e:b9:40:f9:01:7e:c5:6d:b1: 88:09:c4:d5 -----BEGIN CERTIFICATE----- MIIHaDCCBlCgAwIBAgISAZt9y1p83p0QoXEbGtt7L0XaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MTllMWYzZmU2OWI0ZWJkZmYwMmE5YTg1N2U3YzZjMmIy NTMwMWEwHhcNMjYwMTAyMDgyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWRjNmY3YzJhNGYwNDljZTEyYzlkNmFkMjE2ZTY2MzM0ZWJiM2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArptvyN+3R3teTsO2kV2PmOcYZkCh BrdVLTSqCQzkzpxHGU9NSmJR4nSCvZ/OPExZl+DkNZ5bnahiHhhO3dc8tjTdjaqH gEoE0T6dfvE8sR6GTEJOpf7V2UTzCoETsgNPp2TGENDeVSZAD0umerzx+vSMK1E/ 3lvX62OKXZt7WyknGin2iEQAov3C62Pwf4pH99yS84JeHe4UCGWxYKXTSKgIVUnW N5cp138hym5iNnB/7QlvNFGgVQRF5bT0DcFEZNs/k9WqBFZi4MfZ72gX8ewGMTtf AavYzVoWMWO0G5X69gsU+9mIqWRmkhmQ7JcX/EnCucWdRzgChnvquCZtgQIDAQAB o4IEdDCCBHAwHQYDVR0OBBYEFG7cb3wqTwSc4SydatIW5mM067P6MB8GA1UdIwQY MBaAFPkZ4fP+abTr3/AqmoV+fGwrJTAaMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Sbmg4XzVwdE92ZjhDcWFoWDU4YkNzbE1Cby5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvMWM5ODA5LTFmNjAtNDNjMi04MTAz LWRhZDA0MjBiODVkMy8xL2J0eHZmQ3BQQkp6aExKMXEwaGJtWXpUcnNfby5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZjYvMWM5ODA5LTFmNjAtNDNjMi04MTAzLWRhZDA0MjBiODVk My8xLzEtUm5oOF81cHRPdmY4Q3FhaFg1OGJDc2xNQm8uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwggKGBggrBgEFBQcBBwEB/wSCAnUwggJxMIICXgQCAAEw ggJWAwQBHyj4MAwDBAMlEggDBAAlEgoDBAAlEhYDBAElEkgwDAMEAiUSZAMEACUS ZjAMAwQAJRJrAwQAJRJ6MAwDBAIlLMQDBAAlLMYDBAAl5oswDAMEACXmswMEASXm tDAMAwQDJea4AwQAJea6AwQDJebAAwQAJebgAwQAJebpAwQCLQkYAwQCLVngAwQC LYSwAwQBLYiSAwQBLZceAwQBLZvMAwQALhAkMAwDBAAu840DBAQu84ADBAAu86wD BAAu88kwDAMEAC7zzQMEAC7zzgMEAS7z4gMEAS7z9AMEAC79hAMEAD7pKwMEA1LK iAMEAlLKnAMEAlQ2ODAMAwQAVdBVAwQDVdBQMAwDBABV0NEDBAJV0NAwDAMEAFXR lQMEA1XRkAMEAVXrUjAMAwQCV/JUAwQFV/JAAwQCV/JkMAwDBAJX8nQDBAdX8gAw DAMEAFjaQQMEAljaQDAMAwQFWeigAwQCWeioAwQCWeiwAwQBW+BWAwQCXov8AwQB Xp4WAwQDX65YMAwDBACNZZcDBACNZZgDBACNZckDBACYWcQDBAKo3rADBASwbPAD BASwbWADBAOwe6AwDAMEALKqvwMEAbKqxAMEALKq8gMEArkyyAMEALnqCwMEALnx OQMEALxIYDAMAwQBvEhqAwQBvEhsMAwDBAC8SHUDBAC8SHYDBALAkAwDBADAkBwD BAHBKnQDBADBaQQDBADBo14DBADByQgDBAHCBVwDBADCGuQDBADCMkgDBAHCcSID BADDgJgDBAPVqxgwDAMEANWymQMEANWymjANBAIAAjAHAwUDKgwrgDANBgkqhkiG 9w0BAQsFAAOCAQEAiBLGYZEzvmx/ZDUpqHoBg0CFV6bWvV12HATO5NSBJIeMM9Jx dDaXiwsl1gymWOgzalvE3MTGFv/G0tTMxXMY3iQmEppNL/47Y8DtqrEBJM3gBcur aJsVcyxtTRkwDbUw2QA05XmTAFIE/i/5YU9ifNV5N6Ha+SywLStIU/fFUTdZaxuc p6alExC1lQvL1hzzpSAJOBYfn0RKW3prXQB/3f58t4SkYD5qf7TCUUcp9qn80pEc 3TfJJkZ3GT2pfmr7ObN2mijGHOambjuPmvtDbWcTAXOSQmMedtIXSIGI3v2v5hhq iVAHuddqiwux4DwmGhZ5LrlA+QF+xW2xiAnE1Q== -----END CERTIFICATE-----Generated at Mon Feb 9 22:28:39 2026 by rpki-client