This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/DdkhG9ScS5mKOj6FEPIiUrVTDGA.roa File: DdkhG9ScS5mKOj6FEPIiUrVTDGA.roa (raw, json) Hash identifier: JddADCbKnFgd2w/G6EyTsDQqGgZM9PxBGHiXPX0tQCk= Subject key identifier: 0D:D9:21:1B:D4:9C:4B:99:8A:3A:3E:85:10:F2:22:52:B5:53:0C:60 Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1 Certificate serial: 019B7DCA5F451E8E57311F98490C75727225 Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/DdkhG9ScS5mKOj6FEPIiUrVTDGA.roa Signing time: Fri 02 Jan 2026 08:19:33 +0000 ROA not before: Fri 02 Jan 2026 08:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20676 IP address blocks: 62.8.128.0/17 maxlen: 17 62.8.168.0/21 maxlen: 21 62.8.176.0/20 maxlen: 20 62.145.0.0/19 maxlen: 19 62.206.0.0/16 maxlen: 16 62.206.164.0/24 maxlen: 24 62.206.165.0/24 maxlen: 24 62.206.166.0/24 maxlen: 24 83.236.0.0/16 maxlen: 16 83.236.0.0/20 maxlen: 20 83.236.16.0/20 maxlen: 20 83.236.32.0/21 maxlen: 21 84.245.128.0/18 maxlen: 18 85.8.132.0/22 maxlen: 22 87.193.0.0/16 maxlen: 16 87.234.0.0/16 maxlen: 16 92.195.0.0/16 maxlen: 16 92.195.0.0/17 maxlen: 17 92.195.128.0/17 maxlen: 17 92.196.0.0/14 maxlen: 14 92.196.0.0/19 maxlen: 19 92.196.96.0/20 maxlen: 20 92.196.112.0/20 maxlen: 20 92.196.128.0/20 maxlen: 20 92.196.144.0/20 maxlen: 20 92.196.160.0/20 maxlen: 20 92.196.176.0/20 maxlen: 20 92.196.192.0/20 maxlen: 20 92.196.208.0/20 maxlen: 20 92.196.224.0/19 maxlen: 19 92.197.130.0/24 maxlen: 24 92.198.96.0/19 maxlen: 19 92.198.144.0/20 maxlen: 20 92.198.160.0/19 maxlen: 19 92.198.192.0/20 maxlen: 20 92.198.208.0/20 maxlen: 20 92.198.224.0/20 maxlen: 20 92.198.240.0/20 maxlen: 20 92.199.16.0/20 maxlen: 20 92.199.64.0/20 maxlen: 20 92.199.96.0/20 maxlen: 20 92.199.112.0/20 maxlen: 20 92.199.128.0/20 maxlen: 20 92.199.144.0/20 maxlen: 20 92.199.176.0/20 maxlen: 20 92.199.208.0/20 maxlen: 20 185.144.188.0/22 maxlen: 22 194.9.127.0/24 maxlen: 24 194.140.96.0/20 maxlen: 20 195.32.128.0/17 maxlen: 17 195.80.192.0/19 maxlen: 19 195.90.0.0/19 maxlen: 19 195.90.8.0/21 maxlen: 21 195.158.160.0/19 maxlen: 19 212.4.160.0/19 maxlen: 19 212.4.176.0/20 maxlen: 20 212.5.0.0/19 maxlen: 19 212.5.8.0/21 maxlen: 21 212.5.16.0/20 maxlen: 20 212.60.192.0/18 maxlen: 18 212.63.32.0/19 maxlen: 19 212.84.208.0/20 maxlen: 20 212.84.224.0/19 maxlen: 19 212.105.192.0/19 maxlen: 19 212.110.192.0/19 maxlen: 19 212.202.0.0/16 maxlen: 16 212.202.0.0/19 maxlen: 19 212.202.40.0/21 maxlen: 21 212.202.48.0/20 maxlen: 20 212.202.168.0/21 maxlen: 21 212.202.176.0/20 maxlen: 20 213.148.128.0/19 maxlen: 19 213.148.128.0/24 maxlen: 24 213.148.129.0/24 maxlen: 24 213.148.130.0/24 maxlen: 24 213.148.133.0/24 maxlen: 24 213.160.0.0/19 maxlen: 19 213.160.0.0/24 maxlen: 24 213.217.64.0/18 maxlen: 18 217.146.128.0/19 maxlen: 19 2001:658::/29 maxlen: 29 2001:1a80::/29 maxlen: 29 2001:1a80:800::/48 maxlen: 48 2001:1a80:801::/48 maxlen: 48 2001:1a80:802::/48 maxlen: 48 2001:1a81:1000::/36 maxlen: 40 2001:1a81:1000::/40 maxlen: 48 2001:1a81:2000::/36 maxlen: 40 2001:1a81:2000::/40 maxlen: 48 2001:1a81:3000::/36 maxlen: 40 2001:1a81:3000::/40 maxlen: 48 2001:1a81:4000::/36 maxlen: 40 2001:1a81:4000::/40 maxlen: 48 2001:1a81:5000::/36 maxlen: 40 2001:1a81:5000::/40 maxlen: 48 2001:1a81:6000::/36 maxlen: 40 2001:1a81:6000::/40 maxlen: 48 2001:1a81:7000::/36 maxlen: 40 2001:1a81:7000::/40 maxlen: 48 2a09:7100::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:5f:45:1e:8e:57:31:1f:98:49:0c:75:72:72:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1 Validity Not Before: Jan 2 08:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0dd9211bd49c4b998a3a3e8510f22252b5530c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:30:68:57:40:d5:27:3e:87:9d:de:04:8c:49: d9:da:69:19:d7:6d:b1:84:95:74:5d:bc:60:b2:4a: 7c:14:7d:1f:40:2b:16:b2:39:6e:ec:5c:91:1b:69: 0a:c2:16:3c:64:fd:34:0c:fe:8e:5e:1a:09:9c:a4: 7f:2b:9a:e3:d2:a3:3e:88:15:ac:f0:40:86:d4:99: 42:a9:c5:e0:26:0d:74:93:d3:64:53:d4:4a:b2:e7: b7:c1:e2:6b:61:ac:0f:f4:27:32:db:8a:96:d6:53: 89:ca:8e:b4:cc:7c:bb:49:1f:d1:c7:38:ab:3d:0d: fb:80:07:04:31:d7:f3:3c:18:26:c6:47:83:76:78: 31:c9:57:ff:fb:15:f1:70:32:cf:4b:e8:2b:4e:f1: be:fc:97:3f:6d:50:d8:e9:fb:8c:4f:50:22:2e:5c: dc:7f:b7:59:b2:26:98:d5:dd:51:56:bd:d6:1d:a8: 23:78:46:92:36:59:98:58:95:39:26:d9:ee:40:79: 79:fb:0c:f2:f9:4c:ac:47:44:4a:cf:d2:06:9e:92: ef:06:3a:6e:56:7d:02:b9:64:0e:95:ef:f4:0b:21: ea:ae:7f:ba:b5:67:b6:11:81:bd:9c:bc:3c:2f:31: bc:af:96:fc:0f:20:7e:77:c6:9e:0d:f0:03:89:14: da:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D9:21:1B:D4:9C:4B:99:8A:3A:3E:85:10:F2:22:52:B5:53:0C:60 X509v3 Authority Key Identifier: keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/DdkhG9ScS5mKOj6FEPIiUrVTDGA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.8.128.0/17 62.145.0.0/19 62.206.0.0/16 83.236.0.0/16 84.245.128.0/18 85.8.132.0/22 87.193.0.0/16 87.234.0.0/16 92.195.0.0-92.199.255.255 185.144.188.0/22 194.9.127.0/24 194.140.96.0/20 195.32.128.0/17 195.80.192.0/19 195.90.0.0/19 195.158.160.0/19 212.4.160.0/19 212.5.0.0/19 212.60.192.0/18 212.63.32.0/19 212.84.208.0-212.84.255.255 212.105.192.0/19 212.110.192.0/19 212.202.0.0/16 213.148.128.0/19 213.160.0.0/19 213.217.64.0/18 217.146.128.0/19 IPv6: 2001:658::/29 2001:1a80::/29 2a09:7100::/29 Signature Algorithm: sha256WithRSAEncryption 76:8b:90:5f:76:4b:e9:2e:13:27:05:9a:a2:4f:83:cf:76:3a: 0b:a1:dd:6c:ea:ae:3c:da:0f:57:5e:50:06:96:39:5b:bb:b9: 5b:5c:74:2c:2c:a7:b6:c6:37:ee:92:7d:78:50:36:2a:78:4e: 39:2d:b9:30:02:e6:1f:a7:05:69:d4:ea:7a:b0:98:82:72:03: b1:a7:78:f3:d8:36:69:a0:d8:c6:9a:a0:7d:a8:c8:91:19:5e: f1:77:9a:79:42:44:cd:ca:44:8c:91:a9:2b:68:76:7c:eb:ce: 29:9c:83:c4:3f:86:c8:b7:20:58:98:bd:82:ec:a3:e7:c2:44: b2:4f:85:49:e2:30:75:67:5a:d0:6b:10:c7:c4:e2:6a:5b:a7: 52:0a:92:5c:57:8f:90:8c:f2:c5:c6:c6:43:2b:3a:02:37:b7: 6d:45:4d:1e:c2:df:99:d6:8e:78:55:9a:e9:8b:2a:d9:09:4a: f6:45:ea:ea:f2:f9:b2:5f:d7:e7:fb:62:db:38:34:0a:e3:2c: d5:5a:f4:69:80:c6:94:b9:65:fd:ac:96:f2:d4:f8:1e:28:1b: d2:96:78:f0:cb:69:c0:4c:51:39:56:c6:a2:23:2c:6f:2b:88: f6:d8:ff:a6:19:e4:c3:7e:29:35:8b:bf:a7:6f:30:49:bf:23: af:f8:12:bb -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgISAZt9yl9FHo5XMR+YSQx1cnIlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMDY2Y2I4NDg4ZGFlN2U0MjM0YWE3Yzg5MjQzMGRhZDEx ZmU1YjEwHhcNMjYwMTAyMDgxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGQ5MjExYmQ0OWM0Yjk5OGEzYTNlODUxMGYyMjI1MmI1NTMwYzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDBoV0DVJz6Hnd4EjEnZ2mkZ122x hJV0Xbxgskp8FH0fQCsWsjlu7FyRG2kKwhY8ZP00DP6OXhoJnKR/K5rj0qM+iBWs 8ECG1JlCqcXgJg10k9NkU9RKsue3weJrYawP9Ccy24qW1lOJyo60zHy7SR/Rxzir PQ37gAcEMdfzPBgmxkeDdngxyVf/+xXxcDLPS+grTvG+/Jc/bVDY6fuMT1AiLlzc f7dZsiaY1d1RVr3WHagjeEaSNlmYWJU5JtnuQHl5+wzy+UysR0RKz9IGnpLvBjpu Vn0CuWQOle/0CyHqrn+6tWe2EYG9nLw8LzG8r5b8DyB+d8aeDfADiRTaNwIDAQAB o4IC1TCCAtEwHQYDVR0OBBYEFA3ZIRvUnEuZijo+hRDyIlK1UwxgMB8GA1UdIwQY MBaAFJ0GbLhIja5+QjSqfIkkMNrRH+WxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMGQyZmQtYWE5MC00MjA3LTkxMDQt M2VmMDJkNTE0MGI3LzEvRGRraEc5U2NTNW1LT2o2RkVQSWlVclZUREdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kMGQyZmQtYWE5MC00MjA3LTkxMDQtM2VmMDJkNTE0MGI3 LzEvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHqBggrBgEFBQcBBwEB/wSB2jCB1zCBtwQCAAEwgbADBAc+ CIADBAU+kQADAwA+zgMDAFPsAwQGVPWAAwQCVQiEAwMAV8EDAwBX6jAKAwMAXMMD AwNcwAMEArmQvAMEAMIJfwMEBMKMYAMEB8MggAMEBcNQwAMEBcNaAAMEBcOeoAME BdQEoAMEBdQFAAMEBtQ8wAMEBdQ/IDALAwQE1FTQAwMA1FQDBAXUacADBAXUbsAD AwDUygMEBdWUgAMEBdWgAAMEBtXZQAMEBdmSgDAbBAIAAjAVAwUDIAEGWAMFAyAB GoADBQMqCXEAMA0GCSqGSIb3DQEBCwUAA4IBAQB2i5BfdkvpLhMnBZqiT4PPdjoL od1s6q482g9XXlAGljlbu7lbXHQsLKe2xjfukn14UDYqeE45LbkwAuYfpwVp1Op6 sJiCcgOxp3jz2DZpoNjGmqB9qMiRGV7xd5p5QkTNykSMkakraHZ8684pnIPEP4bI tyBYmL2C7KPnwkSyT4VJ4jB1Z1rQaxDHxOJqW6dSCpJcV4+QjPLFxsZDKzoCN7dt RU0ewt+Z1o54VZrpiyrZCUr2Rerq8vmyX9fn+2LbODQK4yzVWvRpgMaUuWX9rJby 1PgeKBvSlnjwy2nATFE5VsaiIyxvK4j22P+mGeTDfik1i7+nbzBJvyOv+BK7 -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:39 2026 by rpki-client