This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/bLrhejxGzYlplxbqpieFMxs8DTo.roa File: bLrhejxGzYlplxbqpieFMxs8DTo.roa (raw, json) Hash identifier: CHc0tXNDgBxUAvjvHgZDJcY5ybMe0rKmbUth2iY5KUY= Subject key identifier: 6C:BA:E1:7A:3C:46:CD:89:69:97:16:EA:A6:27:85:33:1B:3C:0D:3A Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e Certificate serial: 019B7910D245F2E285946F9784D7AA685B7D Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/bLrhejxGzYlplxbqpieFMxs8DTo.roa Signing time: Thu 01 Jan 2026 10:18:24 +0000 ROA not before: Thu 01 Jan 2026 10:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202 IP address blocks: 149.250.0.0/16 maxlen: 16 192.109.236.0/24 maxlen: 24 195.203.0.0/17 maxlen: 17 195.203.128.0/17 maxlen: 17 195.203.152.0/23 maxlen: 23 195.203.156.0/22 maxlen: 22 217.27.0.0/23 maxlen: 23 217.27.2.0/23 maxlen: 23 217.27.4.0/24 maxlen: 24 217.27.6.0/24 maxlen: 24 217.27.7.0/24 maxlen: 24 2a03:5000:1::/48 maxlen: 48 2a03:5000:2::/48 maxlen: 48 2a03:5000:7::/48 maxlen: 48 2a03:5000:11::/48 maxlen: 48 2a03:5000:12::/48 maxlen: 48 2a03:5000:20::/48 maxlen: 48 2a03:5000:21::/48 maxlen: 48 2a03:5000:22::/48 maxlen: 48 2a03:5000:30::/48 maxlen: 48 2a03:5000:31::/48 maxlen: 48 2a03:5000:32::/48 maxlen: 48 2a03:5000:41::/48 maxlen: 48 2a03:5000:42::/48 maxlen: 48 2a03:5000:51::/48 maxlen: 48 2a03:5000:52::/48 maxlen: 48 2a03:5000:61::/48 maxlen: 48 2a03:5000:62::/48 maxlen: 48 2a03:5000:71::/48 maxlen: 48 2a03:5000:72::/48 maxlen: 48 2a03:5000:81::/48 maxlen: 48 2a03:5000:82::/48 maxlen: 48 2a03:5000:91::/48 maxlen: 48 2a03:5000:92::/48 maxlen: 48 2a03:5000:101::/48 maxlen: 48 2a03:5000:102::/48 maxlen: 48 2a03:5000:111::/48 maxlen: 48 2a03:5000:112::/48 maxlen: 48 2a03:5000:121::/48 maxlen: 48 2a03:5000:122::/48 maxlen: 48 2a03:5000:127::/48 maxlen: 48 2a03:5000:131::/48 maxlen: 48 2a03:5000:132::/48 maxlen: 48 2a03:5000:141::/48 maxlen: 48 2a03:5000:142::/48 maxlen: 48 2a03:5000:151::/48 maxlen: 48 2a03:5000:152::/48 maxlen: 48 2a03:5000:161::/48 maxlen: 48 2a03:5000:162::/48 maxlen: 48 2a03:5000:171::/48 maxlen: 48 2a03:5000:172::/48 maxlen: 48 2a03:5000:181::/48 maxlen: 48 2a03:5000:182::/48 maxlen: 48 2a03:5000:191::/48 maxlen: 48 2a03:5000:192::/48 maxlen: 48 2a03:5000:197::/48 maxlen: 48 2a03:5000:201::/48 maxlen: 48 2a03:5000:202::/48 maxlen: 48 2a03:5000:211::/48 maxlen: 48 2a03:5000:212::/48 maxlen: 48 2a03:5000:221::/48 maxlen: 48 2a03:5000:222::/48 maxlen: 48 2a03:5000:227::/48 maxlen: 48 2a03:5000:231::/48 maxlen: 48 2a03:5000:232::/48 maxlen: 48 2a03:5000:241::/48 maxlen: 48 2a03:5000:242::/48 maxlen: 48 2a03:5000:247::/48 maxlen: 48 2a03:5000:251::/48 maxlen: 48 2a03:5000:252::/48 maxlen: 48 2a03:5000:271::/48 maxlen: 48 2a03:5000:272::/48 maxlen: 48 2a03:5000:291::/48 maxlen: 48 2a03:5000:292::/48 maxlen: 48 2a03:5000:311::/48 maxlen: 48 2a03:5000:312::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d2:45:f2:e2:85:94:6f:97:84:d7:aa:68:5b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e Validity Not Before: Jan 1 10:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cbae17a3c46cd89699716eaa62785331b3c0d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:41:1a:63:6f:b6:36:75:ae:fa:d4:9c:78:ef: 57:ca:97:04:11:4e:f8:12:13:79:17:c4:96:ea:da: e2:25:dd:d2:e5:29:f9:11:78:83:b8:dc:58:f3:c6: 52:c6:af:0f:3e:7b:98:a7:58:94:23:d4:59:f0:53: 8f:c3:b9:93:7b:43:ed:bb:f0:1c:4a:77:d9:85:05: 34:4b:91:f1:4d:9b:a9:79:c1:2e:6f:0d:b1:3e:76: e6:d8:60:58:2d:58:38:48:e3:86:50:90:53:83:de: 8a:36:1b:81:0d:21:f3:f3:1c:1b:50:54:5f:cc:eb: 83:2e:e8:f8:b1:2e:75:63:d8:4e:fa:54:9a:5e:ce: 13:d7:05:9e:6e:0b:77:34:82:82:b3:68:96:e8:e3: 0f:06:87:11:e1:ea:23:bb:3a:70:66:0c:75:a6:56: 10:bc:d3:9a:ad:cd:c7:41:82:e3:cb:e6:0b:1f:b9: 54:09:18:26:e6:a8:0f:2b:e0:30:80:c1:5d:7b:c4: 0c:1e:f3:c4:5f:f3:af:63:f9:fb:c5:45:d1:5f:65: c4:fd:8d:56:f0:16:35:91:7d:fe:e8:6f:34:4c:f0: 9c:2d:c5:57:a7:04:e0:49:0b:78:22:85:40:ab:9f: d9:f8:de:ba:a6:a1:b6:f8:f7:70:0d:a4:45:b0:3d: 7e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BA:E1:7A:3C:46:CD:89:69:97:16:EA:A6:27:85:33:1B:3C:0D:3A X509v3 Authority Key Identifier: keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/bLrhejxGzYlplxbqpieFMxs8DTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.250.0.0/16 192.109.236.0/24 195.203.0.0/16 217.27.0.0-217.27.4.255 217.27.6.0/23 IPv6: 2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff 2a03:5000:7::/48 2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff 2a03:5000:20::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff 2a03:5000:30::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff 2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff 2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff 2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff 2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff 2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff 2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff 2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff 2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff 2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff 2a03:5000:127::/48 2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff 2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff 2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff 2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff 2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff 2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff 2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff 2a03:5000:197::/48 2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff 2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff 2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff 2a03:5000:227::/48 2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff 2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff 2a03:5000:247::/48 2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff 2a03:5000:271::-2a03:5000:272:ffff:ffff:ffff:ffff:ffff 2a03:5000:291::-2a03:5000:292:ffff:ffff:ffff:ffff:ffff 2a03:5000:311::-2a03:5000:312:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption d1:09:69:a7:52:00:f8:0d:f5:1b:8b:77:1f:61:71:09:b0:91: 8c:ff:cf:f7:1f:d9:a3:25:2a:90:11:f3:b1:fa:ac:ac:a5:8d: 44:c3:3a:b5:6e:99:2e:a7:b4:7b:64:24:ea:18:81:2a:e7:16: ea:72:08:91:02:09:e5:84:20:81:2e:67:d2:d5:66:06:20:56: 4a:a8:e2:3d:77:cf:0b:e3:1f:92:56:18:33:f7:94:91:29:4b: e4:92:52:18:4a:29:df:be:07:91:e9:f7:9e:f9:92:6e:bb:26: 83:9e:a2:44:2c:d5:35:60:ff:cd:60:68:c0:e7:bc:b8:c8:07: 7e:d1:d6:9b:77:cc:82:3d:57:f5:bf:63:c9:1f:df:39:74:02: 48:15:35:f9:5c:e2:19:10:31:5f:2f:25:85:39:ac:47:b6:c6: c1:ba:37:52:99:e6:ee:c0:42:e8:b1:ed:a7:cc:24:cb:e1:1b: 79:66:9d:00:05:20:ed:9d:96:e6:8d:a9:8b:b5:38:98:a9:e8: 25:92:4e:74:72:b3:27:03:cd:a5:b6:93:d9:3c:c0:a6:13:1b: aa:f0:76:bf:7b:15:db:af:0e:2b:52:4d:f6:4a:f3:9a:5a:76: 69:35:25:47:4b:34:5e:77:90:f5:86:4b:d3:7d:63:23:04:56: ec:7e:da:84 -----BEGIN CERTIFICATE----- MIIHnTCCBoWgAwIBAgISAZt5ENJF8uKFlG+XhNeqaFt9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0Y2M2YjljMzdmYWEwZGEzYjQxMjAwN2MwYjEwYjJjNWJm MmNmNGUwHhcNMjYwMTAxMTAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2JhZTE3YTNjNDZjZDg5Njk5NzE2ZWFhNjI3ODUzMzFiM2MwZDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUEaY2+2NnWu+tSceO9XypcEEU74 EhN5F8SW6triJd3S5Sn5EXiDuNxY88ZSxq8PPnuYp1iUI9RZ8FOPw7mTe0Ptu/Ac SnfZhQU0S5HxTZupecEubw2xPnbm2GBYLVg4SOOGUJBTg96KNhuBDSHz8xwbUFRf zOuDLuj4sS51Y9hO+lSaXs4T1wWebgt3NIKCs2iW6OMPBocR4eojuzpwZgx1plYQ vNOarc3HQYLjy+YLH7lUCRgm5qgPK+AwgMFde8QMHvPEX/OvY/n7xUXRX2XE/Y1W 8BY1kX3+6G80TPCcLcVXpwTgSQt4IoVAq5/Z+N66pqG2+PdwDaRFsD1+4QIDAQAB o4IEqTCCBKUwHQYDVR0OBBYEFGy64Xo8Rs2JaZcW6qYnhTMbPA06MB8GA1UdIwQY MBaAFCTMa5w3+qDaO0EgB8CxCyxb8s9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUt ODY0MjM4YmMwNDliLzEvYkxyaGVqeEd6WWxwbHhicXBpZUZNeHM4RFRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUtODY0MjM4YmMwNDli LzEvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICvQYIKwYBBQUHAQcBAf8EggKsMIICqDApBAIAATAjAwMA lfoDBADAbewDAwDDyzALAwMA2RsDBADZGwQDBAHZGwYwggJ5BAIAAjCCAnEwEgMH ACoDUAAAAQMHACoDUAAAAgMHACoDUAAABzASAwcAKgNQAAARAwcAKgNQAAASMBID BwUqA1AAACADBwAqA1AAACIwEgMHBCoDUAAAMAMHACoDUAAAMjASAwcAKgNQAABB AwcAKgNQAABCMBIDBwAqA1AAAFEDBwAqA1AAAFIwEgMHACoDUAAAYQMHACoDUAAA YjASAwcAKgNQAABxAwcAKgNQAAByMBIDBwAqA1AAAIEDBwAqA1AAAIIwEgMHACoD UAAAkQMHACoDUAAAkjASAwcAKgNQAAEBAwcAKgNQAAECMBIDBwAqA1AAAREDBwAq A1AAARIwEgMHACoDUAABIQMHACoDUAABIgMHACoDUAABJzASAwcAKgNQAAExAwcA KgNQAAEyMBIDBwAqA1AAAUEDBwAqA1AAAUIwEgMHACoDUAABUQMHACoDUAABUjAS AwcAKgNQAAFhAwcAKgNQAAFiMBIDBwAqA1AAAXEDBwAqA1AAAXIwEgMHACoDUAAB gQMHACoDUAABgjASAwcAKgNQAAGRAwcAKgNQAAGSAwcAKgNQAAGXMBIDBwAqA1AA AgEDBwAqA1AAAgIwEgMHACoDUAACEQMHACoDUAACEjASAwcAKgNQAAIhAwcAKgNQ AAIiAwcAKgNQAAInMBIDBwAqA1AAAjEDBwAqA1AAAjIwEgMHACoDUAACQQMHACoD UAACQgMHACoDUAACRzASAwcAKgNQAAJRAwcAKgNQAAJSMBIDBwAqA1AAAnEDBwAq A1AAAnIwEgMHACoDUAACkQMHACoDUAACkjASAwcAKgNQAAMRAwcAKgNQAAMSMA0G CSqGSIb3DQEBCwUAA4IBAQDRCWmnUgD4DfUbi3cfYXEJsJGM/8/3H9mjJSqQEfOx +qyspY1Ewzq1bpkup7R7ZCTqGIEq5xbqcgiRAgnlhCCBLmfS1WYGIFZKqOI9d88L 4x+SVhgz95SRKUvkklIYSinfvgeR6fee+ZJuuyaDnqJELNU1YP/NYGjA57y4yAd+ 0dabd8yCPVf1v2PJH985dAJIFTX5XOIZEDFfLyWFOaxHtsbBujdSmebuwELose2n zCTL4Rt5Zp0ABSDtnZbmjamLtTiYqeglkk50crMnA82ltpPZPMCmExuq8Ha/exXb rw4rUk32SvOaWnZpNSVHSzRed5D1hkvTfWMjBFbsftqE -----END CERTIFICATE-----Generated at Tue Jan 20 23:14:22 2026 by rpki-client