This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/hKLFSPa0iW1XzBfLJaDMo84eA1s.roa File: hKLFSPa0iW1XzBfLJaDMo84eA1s.roa (raw, json) Hash identifier: eG/xoTfgyJqNAYNur30ZD0Z6745jjcEOMSTYh+3y+lU= Subject key identifier: 84:A2:C5:48:F6:B4:89:6D:57:CC:17:CB:25:A0:CC:A3:CE:1E:03:5B Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c Certificate serial: 019B7CED12F36D12A8AAD0F21D915FC89802 Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/hKLFSPa0iW1XzBfLJaDMo84eA1s.roa Signing time: Fri 02 Jan 2026 04:17:50 +0000 ROA not before: Fri 02 Jan 2026 04:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42772 IP address blocks: 37.17.0.0/17 maxlen: 17 37.17.6.0/23 maxlen: 23 37.17.8.0/21 maxlen: 21 37.17.16.0/22 maxlen: 22 37.17.20.0/22 maxlen: 22 37.17.24.0/21 maxlen: 21 37.17.32.0/21 maxlen: 21 37.17.40.0/21 maxlen: 21 37.17.48.0/20 maxlen: 20 37.17.64.0/19 maxlen: 19 37.17.96.0/20 maxlen: 20 37.17.112.0/22 maxlen: 22 37.17.117.0/24 maxlen: 24 37.17.118.0/24 maxlen: 24 37.17.120.0/21 maxlen: 21 46.53.128.0/21 maxlen: 21 46.53.128.0/24 maxlen: 24 46.53.129.0/24 maxlen: 24 46.53.130.0/24 maxlen: 24 46.53.131.0/24 maxlen: 24 46.53.132.0/24 maxlen: 24 46.53.133.0/24 maxlen: 24 46.53.134.0/24 maxlen: 24 46.53.135.0/24 maxlen: 24 46.53.136.0/21 maxlen: 21 46.53.136.0/24 maxlen: 24 46.53.137.0/24 maxlen: 24 46.53.138.0/24 maxlen: 24 46.53.139.0/24 maxlen: 24 46.53.140.0/24 maxlen: 24 46.53.141.0/24 maxlen: 24 46.53.142.0/24 maxlen: 24 46.53.143.0/24 maxlen: 24 46.53.144.0/21 maxlen: 21 46.53.144.0/24 maxlen: 24 46.53.145.0/24 maxlen: 24 46.53.146.0/24 maxlen: 24 46.53.147.0/24 maxlen: 24 46.53.148.0/24 maxlen: 24 46.53.149.0/24 maxlen: 24 46.53.150.0/24 maxlen: 24 46.53.151.0/24 maxlen: 24 46.53.152.0/21 maxlen: 21 46.53.160.0/21 maxlen: 21 46.53.163.0/24 maxlen: 24 46.53.164.0/24 maxlen: 24 46.53.167.0/24 maxlen: 24 46.53.168.0/21 maxlen: 21 46.53.173.0/24 maxlen: 24 46.53.174.0/23 maxlen: 23 46.53.176.0/22 maxlen: 22 46.53.180.0/22 maxlen: 22 46.53.184.0/21 maxlen: 21 46.53.189.0/24 maxlen: 24 46.53.192.0/22 maxlen: 22 46.53.192.0/24 maxlen: 24 46.53.193.0/24 maxlen: 24 46.53.194.0/24 maxlen: 24 46.53.195.0/24 maxlen: 24 46.53.197.0/24 maxlen: 24 46.53.198.0/23 maxlen: 23 46.53.200.0/22 maxlen: 22 46.53.204.0/24 maxlen: 24 46.53.205.0/24 maxlen: 24 46.53.206.0/24 maxlen: 24 46.53.207.0/24 maxlen: 24 46.53.208.0/22 maxlen: 22 46.53.210.0/24 maxlen: 24 46.53.211.0/24 maxlen: 24 46.53.212.0/22 maxlen: 22 46.53.216.0/21 maxlen: 21 46.53.216.0/24 maxlen: 24 46.53.217.0/24 maxlen: 24 46.53.218.0/24 maxlen: 24 46.53.219.0/24 maxlen: 24 46.53.220.0/24 maxlen: 24 46.53.221.0/24 maxlen: 24 46.53.222.0/24 maxlen: 24 46.53.223.0/24 maxlen: 24 46.53.224.0/21 maxlen: 21 46.53.224.0/24 maxlen: 24 46.53.225.0/24 maxlen: 24 46.53.226.0/24 maxlen: 24 46.53.227.0/24 maxlen: 24 46.53.228.0/24 maxlen: 24 46.53.229.0/24 maxlen: 24 46.53.230.0/24 maxlen: 24 46.53.231.0/24 maxlen: 24 46.53.232.0/21 maxlen: 21 46.53.240.0/21 maxlen: 21 46.53.240.0/22 maxlen: 22 46.53.248.0/21 maxlen: 21 46.53.248.0/22 maxlen: 22 46.56.129.0/24 maxlen: 24 46.56.130.0/23 maxlen: 23 46.56.132.0/24 maxlen: 24 46.56.133.0/24 maxlen: 24 46.56.134.0/24 maxlen: 24 46.56.135.0/24 maxlen: 24 46.56.136.0/23 maxlen: 23 46.56.138.0/23 maxlen: 23 46.56.140.0/22 maxlen: 22 46.56.144.0/20 maxlen: 20 46.56.160.0/21 maxlen: 21 46.56.168.0/21 maxlen: 21 46.56.176.0/20 maxlen: 20 46.56.176.0/21 maxlen: 21 46.56.184.0/21 maxlen: 21 46.56.192.0/21 maxlen: 21 46.56.200.0/21 maxlen: 21 46.56.208.0/24 maxlen: 24 46.56.209.0/24 maxlen: 24 46.56.210.0/24 maxlen: 24 46.56.211.0/24 maxlen: 24 46.56.212.0/24 maxlen: 24 46.56.213.0/24 maxlen: 24 46.56.214.0/23 maxlen: 23 46.56.214.0/24 maxlen: 24 46.56.216.0/21 maxlen: 21 46.56.224.0/21 maxlen: 21 46.56.232.0/21 maxlen: 21 46.56.240.0/21 maxlen: 21 46.56.248.0/21 maxlen: 21 46.182.48.0/21 maxlen: 21 77.74.32.0/21 maxlen: 21 77.74.34.0/24 maxlen: 24 77.74.35.0/24 maxlen: 24 77.74.37.0/24 maxlen: 24 77.74.38.0/24 maxlen: 24 77.74.39.0/24 maxlen: 24 93.191.96.0/22 maxlen: 22 93.191.100.0/24 maxlen: 24 93.191.101.0/24 maxlen: 24 93.191.102.0/24 maxlen: 24 93.191.103.0/24 maxlen: 24 128.65.0.0/18 maxlen: 18 128.65.0.0/24 maxlen: 24 128.65.1.0/24 maxlen: 24 128.65.2.0/23 maxlen: 23 128.65.4.0/23 maxlen: 23 128.65.6.0/23 maxlen: 23 128.65.8.0/21 maxlen: 21 128.65.16.0/22 maxlen: 22 128.65.20.0/22 maxlen: 22 128.65.24.0/21 maxlen: 21 128.65.24.0/22 maxlen: 22 128.65.28.0/22 maxlen: 22 128.65.32.0/21 maxlen: 21 128.65.40.0/21 maxlen: 21 128.65.48.0/20 maxlen: 20 128.65.56.0/21 maxlen: 21 128.65.56.0/22 maxlen: 22 128.65.60.0/22 maxlen: 22 128.140.240.0/20 maxlen: 20 128.140.240.0/24 maxlen: 24 128.140.244.0/22 maxlen: 22 128.140.248.0/22 maxlen: 22 178.163.128.0/17 maxlen: 17 178.163.128.0/24 maxlen: 24 178.163.129.0/24 maxlen: 24 178.163.130.0/24 maxlen: 24 178.163.131.0/24 maxlen: 24 178.163.132.0/24 maxlen: 24 178.163.133.0/24 maxlen: 24 178.163.134.0/24 maxlen: 24 178.163.135.0/24 maxlen: 24 178.163.136.0/24 maxlen: 24 178.163.138.0/24 maxlen: 24 178.163.140.0/22 maxlen: 22 178.163.144.0/21 maxlen: 21 178.163.152.0/21 maxlen: 21 178.163.160.0/24 maxlen: 24 178.163.161.0/24 maxlen: 24 178.163.162.0/24 maxlen: 24 178.163.163.0/24 maxlen: 24 178.163.168.0/21 maxlen: 21 178.163.176.0/21 maxlen: 21 178.163.184.0/21 maxlen: 21 178.163.192.0/22 maxlen: 22 178.163.196.0/22 maxlen: 22 178.163.200.0/23 maxlen: 23 178.163.202.0/23 maxlen: 23 178.163.204.0/23 maxlen: 23 178.163.206.0/23 maxlen: 23 178.163.208.0/21 maxlen: 21 178.163.216.0/22 maxlen: 22 185.61.104.0/23 maxlen: 23 185.61.105.0/24 maxlen: 24 185.61.106.0/23 maxlen: 23 195.222.64.0/20 maxlen: 20 195.222.64.0/24 maxlen: 24 195.222.66.0/24 maxlen: 24 195.222.70.0/24 maxlen: 24 195.222.71.0/24 maxlen: 24 195.222.73.0/24 maxlen: 24 195.222.79.0/24 maxlen: 24 195.222.80.0/21 maxlen: 21 195.222.80.0/24 maxlen: 24 195.222.81.0/24 maxlen: 24 195.222.82.0/24 maxlen: 24 195.222.88.0/23 maxlen: 23 195.222.90.0/24 maxlen: 24 195.222.91.0/24 maxlen: 24 195.222.92.0/22 maxlen: 22 195.222.92.0/24 maxlen: 24 195.222.95.0/24 maxlen: 24 2a00:1760::/32 maxlen: 32 2a00:1760:8000::/40 maxlen: 40 2a00:1760:8100::/40 maxlen: 40 2a00:1760:c000::/40 maxlen: 40 2a00:1760:c100::/40 maxlen: 40 2a00:1760:c200::/40 maxlen: 40 2a00:1760:c300::/40 maxlen: 40 2a00:1761::/32 maxlen: 32 2a00:1761:a000::/35 maxlen: 35 2a00:1761:a000::/40 maxlen: 40 2a00:1761:a100::/40 maxlen: 40 2a00:1761:a200::/40 maxlen: 40 2a00:1761:a300::/40 maxlen: 40 2a00:1762::/32 maxlen: 32 2a00:1762:8000::/40 maxlen: 40 2a00:1762:8100::/40 maxlen: 40 2a00:1763::/32 maxlen: 32 2a00:1763:8000::/40 maxlen: 40 2a00:1763:8100::/40 maxlen: 40 2a00:1765::/32 maxlen: 32 2a00:1765:8000::/40 maxlen: 40 2a00:1765:8100::/40 maxlen: 40 2a03:3000::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:12:f3:6d:12:a8:aa:d0:f2:1d:91:5f:c8:98:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c Validity Not Before: Jan 2 04:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84a2c548f6b4896d57cc17cb25a0cca3ce1e035b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:67:c0:38:d4:ab:3d:91:a1:ed:8e:53:e0:cf: d3:d7:c1:00:10:cb:90:e2:99:2b:25:1e:ae:37:cd: f3:ef:87:9e:21:15:ed:a8:4e:ee:17:b7:ca:2e:83: d1:85:02:f8:51:16:66:dc:48:c1:8a:fe:e3:93:d7: 9e:81:94:a2:26:c6:14:55:a6:3d:28:f6:a9:bf:f7: 2f:61:3a:cc:38:fd:aa:d7:7c:63:6e:96:9d:73:ae: af:92:9f:76:cf:62:5a:72:58:cc:fb:70:64:fd:6c: 09:8d:21:48:97:8f:d1:97:7b:6f:b2:8e:94:0d:cb: 16:21:24:23:ac:0d:01:94:86:b4:c8:60:eb:47:b8: 5c:f4:7c:a4:74:2c:a0:b7:cf:1f:29:c6:f1:f8:8c: f0:d6:07:c7:14:f5:a5:c5:9f:2c:6f:c7:a2:fd:e7: 39:51:7c:f8:16:42:59:9d:15:1b:56:b4:9d:24:75: 10:dd:6c:3a:da:83:f1:53:1c:9d:18:31:b6:5a:5b: ed:26:1a:82:6a:12:b1:c0:9e:1c:e8:8e:a7:38:f9: b6:91:ca:8f:4c:0f:81:7f:21:21:c1:92:b3:a0:36: 55:f3:36:74:d1:30:ab:cc:a1:7f:d5:79:22:eb:b8: 60:4b:0a:a8:52:93:77:b0:23:dc:c7:3b:a7:df:7d: f6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A2:C5:48:F6:B4:89:6D:57:CC:17:CB:25:A0:CC:A3:CE:1E:03:5B X509v3 Authority Key Identifier: keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/hKLFSPa0iW1XzBfLJaDMo84eA1s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.17.0.0/17 46.53.128.0-46.53.195.255 46.53.197.0-46.53.255.255 46.56.129.0-46.56.255.255 46.182.48.0/21 77.74.32.0/21 93.191.96.0/21 128.65.0.0/18 128.140.240.0/20 178.163.128.0/17 185.61.104.0/22 195.222.64.0/19 IPv6: 2a00:1760::/30 2a00:1765::/32 2a03:3000::/32 Signature Algorithm: sha256WithRSAEncryption 84:40:6a:09:ab:f8:81:12:88:31:53:7d:c7:ed:8a:9b:fb:bd: b6:3e:73:46:bf:07:8e:65:50:6e:e7:99:b7:00:d0:a2:dc:ad: ec:ee:f1:a3:59:23:8c:00:1d:e6:c5:f2:e0:dc:06:60:77:35: 01:d2:2e:ed:b7:9b:79:6f:bb:ea:aa:53:12:64:77:14:5f:5d: 97:6e:24:db:60:ca:39:84:21:d8:f4:f9:d0:71:54:20:d7:bd: df:00:2a:cd:35:7e:81:dc:bb:ae:c1:8b:38:fe:6b:ff:43:b1: bb:af:f0:93:63:6b:a3:d2:55:a5:83:ad:85:65:6e:eb:e1:1e: b4:70:7a:50:12:54:67:bf:44:6f:82:63:7c:0d:4c:89:e5:f1: b6:1e:5d:f6:54:be:97:3d:55:e2:f0:8d:46:51:2c:8e:dc:ae: 31:26:e9:9f:8f:50:b3:97:af:e2:fe:10:df:11:4e:5d:7a:69: 37:91:16:d8:8d:c7:f4:eb:5f:22:bf:ab:c9:17:27:20:93:5c: e4:24:f3:39:93:3e:62:07:32:60:78:18:97:80:90:66:c1:d5: a1:af:80:ed:48:2c:b8:dd:63:89:1e:7b:ae:37:4f:94:71:bd: 67:98:97:36:e6:4c:30:ef:d8:e4:44:3a:9b:81:d6:28:0b:ca: a7:a0:f1:c8 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgISAZt87RLzbRKoqtDyHZFfyJgCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YWE5MzEyYWY0YzNkOWNlZTA4MmM5NTQxYTZiNjVhZGE1 NjliM2MwHhcNMjYwMTAyMDQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGEyYzU0OGY2YjQ4OTZkNTdjYzE3Y2IyNWEwY2NhM2NlMWUwMzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2fAONSrPZGh7Y5T4M/T18EAEMuQ 4pkrJR6uN83z74eeIRXtqE7uF7fKLoPRhQL4URZm3EjBiv7jk9eegZSiJsYUVaY9 KPapv/cvYTrMOP2q13xjbpadc66vkp92z2JacljM+3Bk/WwJjSFIl4/Rl3tvso6U DcsWISQjrA0BlIa0yGDrR7hc9HykdCygt88fKcbx+Izw1gfHFPWlxZ8sb8ei/ec5 UXz4FkJZnRUbVrSdJHUQ3Ww62oPxUxydGDG2WlvtJhqCahKxwJ4c6I6nOPm2kcqP TA+BfyEhwZKzoDZV8zZ00TCrzKF/1Xki67hgSwqoUpN3sCPcxzun3332MwIDAQAB o4ICgTCCAn0wHQYDVR0OBBYEFISixUj2tIltV8wXyyWgzKPOHgNbMB8GA1UdIwQY MBaAFHSqkxKvTD2c7ggslUGmtlraVps8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEtxVEVxOU1QWnp1Q0N5VlFhYTJXdHBXbXp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wYTQxNWEtYzcyOC00MmU5LWJlNDUt OThhMWQ2NWNmZTZmLzEvaEtMRlNQYTBpVzFYekJmTEphRE1vODRlQTFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8wYTQxNWEtYzcyOC00MmU5LWJlNDUtOThhMWQ2NWNmZTZm LzEvZEtxVEVxOU1QWnp1Q0N5VlFhYTJXdHBXbXp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzBkBAIAATBeAwQHJREA MAwDBAcuNYADBAIuNcAwCwMEAC41xQMDAS40MAsDBAAuOIEDAwAuOAMEAy62MAME A01KIAMEA12/YAMEBoBBAAMEBICM8AMEB7KjgAMEArk9aAMEBcPeQDAbBAIAAjAV AwUCKgAXYAMFACoAF2UDBQAqAzAAMA0GCSqGSIb3DQEBCwUAA4IBAQCEQGoJq/iB EogxU33H7Yqb+722PnNGvweOZVBu55m3ANCi3K3s7vGjWSOMAB3mxfLg3AZgdzUB 0i7tt5t5b7vqqlMSZHcUX12XbiTbYMo5hCHY9PnQcVQg173fACrNNX6B3LuuwYs4 /mv/Q7G7r/CTY2uj0lWlg62FZW7r4R60cHpQElRnv0RvgmN8DUyJ5fG2Hl32VL6X PVXi8I1GUSyO3K4xJumfj1Czl6/i/hDfEU5demk3kRbYjcf0618iv6vJFycgk1zk JPM5kz5iBzJgeBiXgJBmwdWhr4DtSCy43WOJHnuuN0+Ucb1nmJc25kww79jkRDqb gdYoC8qnoPHI -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:56 2026 by rpki-client