This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/08LcrSM5Tgh5WrAx78MCyBcUuUI.roa File: 08LcrSM5Tgh5WrAx78MCyBcUuUI.roa (raw, json) Hash identifier: K9ZScW16pprknJqQJ4Lzi9WnkmX54pE86HFlLQ5ZeK0= Subject key identifier: D3:C2:DC:AD:23:39:4E:08:79:5A:B0:31:EF:C3:02:C8:17:14:B9:42 Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa Certificate serial: 019B7758D2B5587961E554D92CDF62D1B149 Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/08LcrSM5Tgh5WrAx78MCyBcUuUI.roa Signing time: Thu 01 Jan 2026 02:17:48 +0000 ROA not before: Thu 01 Jan 2026 02:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35104 IP address blocks: 37.228.64.0/24 maxlen: 24 37.228.65.0/24 maxlen: 24 37.228.66.0/24 maxlen: 24 37.228.67.0/24 maxlen: 24 37.228.68.0/24 maxlen: 24 37.228.69.0/24 maxlen: 24 37.228.70.0/24 maxlen: 24 37.228.71.0/24 maxlen: 24 46.235.80.0/24 maxlen: 24 46.235.81.0/24 maxlen: 24 46.235.82.0/24 maxlen: 24 46.235.83.0/24 maxlen: 24 46.235.84.0/24 maxlen: 24 46.235.85.0/24 maxlen: 24 46.235.86.0/24 maxlen: 24 46.235.87.0/24 maxlen: 24 77.245.96.0/24 maxlen: 24 77.245.97.0/24 maxlen: 24 77.245.98.0/24 maxlen: 24 77.245.99.0/24 maxlen: 24 77.245.100.0/24 maxlen: 24 77.245.101.0/24 maxlen: 24 77.245.102.0/24 maxlen: 24 77.245.103.0/24 maxlen: 24 77.245.104.0/22 maxlen: 22 77.245.104.0/24 maxlen: 24 77.245.105.0/24 maxlen: 24 77.245.106.0/24 maxlen: 24 77.245.107.0/24 maxlen: 24 77.245.108.0/23 maxlen: 23 77.245.108.0/24 maxlen: 24 77.245.109.0/24 maxlen: 24 77.245.110.0/24 maxlen: 24 77.245.111.0/24 maxlen: 24 80.242.208.0/24 maxlen: 24 80.242.209.0/24 maxlen: 24 80.242.210.0/24 maxlen: 24 80.242.211.0/24 maxlen: 24 80.242.212.0/24 maxlen: 24 80.242.213.0/24 maxlen: 24 80.242.214.0/24 maxlen: 24 80.242.215.0/24 maxlen: 24 80.242.216.0/24 maxlen: 24 80.242.217.0/24 maxlen: 24 80.242.218.0/24 maxlen: 24 80.242.219.0/24 maxlen: 24 80.242.220.0/24 maxlen: 24 80.242.221.0/24 maxlen: 24 80.242.222.0/24 maxlen: 24 80.242.223.0/24 maxlen: 24 89.219.24.0/24 maxlen: 24 89.219.25.0/24 maxlen: 24 89.219.26.0/24 maxlen: 24 89.219.27.0/24 maxlen: 24 93.185.64.0/24 maxlen: 24 93.185.65.0/24 maxlen: 24 93.185.66.0/24 maxlen: 24 93.185.67.0/24 maxlen: 24 93.185.68.0/24 maxlen: 24 93.185.69.0/24 maxlen: 24 93.185.70.0/24 maxlen: 24 93.185.71.0/24 maxlen: 24 93.185.72.0/21 maxlen: 21 93.185.72.0/24 maxlen: 24 93.185.73.0/24 maxlen: 24 93.185.74.0/24 maxlen: 24 93.185.75.0/24 maxlen: 24 93.185.76.0/24 maxlen: 24 93.185.77.0/24 maxlen: 24 93.185.78.0/24 maxlen: 24 93.185.79.0/24 maxlen: 24 95.141.128.0/24 maxlen: 24 95.141.129.0/24 maxlen: 24 95.141.130.0/24 maxlen: 24 95.141.131.0/24 maxlen: 24 95.141.132.0/24 maxlen: 24 95.141.133.0/24 maxlen: 24 95.141.134.0/24 maxlen: 24 95.141.135.0/24 maxlen: 24 95.141.136.0/22 maxlen: 22 95.141.136.0/24 maxlen: 24 95.141.137.0/24 maxlen: 24 95.141.138.0/24 maxlen: 24 95.141.139.0/24 maxlen: 24 95.141.140.0/24 maxlen: 24 95.141.141.0/24 maxlen: 24 95.141.142.0/24 maxlen: 24 95.141.143.0/24 maxlen: 24 185.20.124.0/24 maxlen: 24 185.20.125.0/24 maxlen: 24 185.20.126.0/23 maxlen: 23 185.20.126.0/24 maxlen: 24 185.20.127.0/24 maxlen: 24 188.0.128.0/24 maxlen: 24 188.0.129.0/24 maxlen: 24 188.0.130.0/24 maxlen: 24 188.0.131.0/24 maxlen: 24 188.0.132.0/24 maxlen: 24 188.0.133.0/24 maxlen: 24 188.0.134.0/24 maxlen: 24 188.0.135.0/24 maxlen: 24 188.0.136.0/24 maxlen: 24 188.0.137.0/24 maxlen: 24 188.0.138.0/24 maxlen: 24 188.0.139.0/24 maxlen: 24 188.0.140.0/22 maxlen: 24 188.0.141.0/24 maxlen: 24 188.0.142.0/24 maxlen: 24 188.0.143.0/24 maxlen: 24 188.0.144.0/24 maxlen: 24 188.0.145.0/24 maxlen: 24 188.0.146.0/24 maxlen: 24 188.0.147.0/24 maxlen: 24 188.0.148.0/24 maxlen: 24 188.0.149.0/24 maxlen: 24 188.0.150.0/24 maxlen: 24 188.0.151.0/24 maxlen: 24 188.0.152.0/24 maxlen: 24 188.0.153.0/24 maxlen: 24 188.0.154.0/24 maxlen: 24 188.0.155.0/24 maxlen: 24 188.0.156.0/24 maxlen: 24 188.0.157.0/24 maxlen: 24 188.0.158.0/24 maxlen: 24 188.0.159.0/24 maxlen: 24 188.127.32.0/24 maxlen: 24 188.127.33.0/24 maxlen: 24 188.127.34.0/24 maxlen: 24 188.127.35.0/24 maxlen: 24 188.127.36.0/24 maxlen: 24 188.127.37.0/24 maxlen: 24 188.127.38.0/24 maxlen: 24 188.127.39.0/24 maxlen: 24 188.127.40.0/24 maxlen: 24 188.127.41.0/24 maxlen: 24 188.127.42.0/24 maxlen: 24 188.127.43.0/24 maxlen: 24 188.127.44.0/24 maxlen: 24 188.127.45.0/24 maxlen: 24 188.127.47.0/24 maxlen: 24 188.127.48.0/24 maxlen: 24 188.127.49.0/24 maxlen: 24 188.127.52.0/24 maxlen: 24 193.29.53.0/24 maxlen: 24 195.189.28.0/24 maxlen: 24 195.189.29.0/24 maxlen: 24 195.189.30.0/24 maxlen: 24 195.189.31.0/24 maxlen: 24 217.196.16.0/24 maxlen: 24 217.196.17.0/24 maxlen: 24 217.196.18.0/24 maxlen: 24 217.196.19.0/24 maxlen: 24 217.196.20.0/24 maxlen: 24 217.196.21.0/24 maxlen: 24 217.196.22.0/24 maxlen: 24 217.196.23.0/24 maxlen: 24 217.196.24.0/24 maxlen: 24 217.196.25.0/24 maxlen: 24 217.196.26.0/23 maxlen: 23 217.196.26.0/24 maxlen: 24 217.196.27.0/24 maxlen: 24 217.196.28.0/24 maxlen: 24 217.196.29.0/24 maxlen: 24 217.196.30.0/24 maxlen: 24 217.196.31.0/24 maxlen: 24 2a03:a300::/32 maxlen: 32 2a03:a300:800::/37 maxlen: 37 2a03:a300:1000::/48 maxlen: 48 2a03:a300:1140::/48 maxlen: 48 2a03:a300:2000::/48 maxlen: 48 2a03:a300:2020::/48 maxlen: 48 2a03:a300:3000::/48 maxlen: 48 2a03:a300:4000::/44 maxlen: 44 2a03:a300:4100::/48 maxlen: 48 2a03:a300:5000::/36 maxlen: 36 2a03:a300:5000::/42 maxlen: 42 2a03:a300:5000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d2:b5:58:79:61:e5:54:d9:2c:df:62:d1:b1:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa Validity Not Before: Jan 1 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3c2dcad23394e08795ab031efc302c81714b942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ae:e9:f6:a2:46:99:ea:a9:ac:03:94:a2:08: 90:a4:73:30:bd:02:e8:c2:75:96:f4:bf:cc:c2:fd: 6b:e1:61:b2:bb:44:c8:a4:7e:e6:4e:61:79:96:db: de:74:ec:af:6c:8d:32:12:2d:fb:b1:fb:3f:e8:fd: 49:1f:22:aa:c1:45:ec:bb:ee:3e:57:0d:12:db:ca: 03:dc:ea:fc:ce:76:33:03:61:24:8f:c0:dc:71:da: db:e5:8f:1e:4d:5d:26:b4:04:9b:13:d7:ad:39:c2: ff:aa:f0:7c:5e:27:a9:44:39:4e:6a:f0:db:5a:53: 1a:6f:cb:38:0b:7b:e6:66:fb:73:be:27:9e:de:4f: c3:de:f1:e2:33:40:99:cc:84:de:ed:68:25:f9:20: 03:fb:14:2e:76:b1:1f:70:4a:5c:d4:31:ee:33:fd: c0:d8:94:8e:8f:66:b7:58:90:41:72:d4:aa:72:61: 83:6b:c5:75:a9:79:1a:62:86:e6:df:d1:2a:92:f9: fc:ed:d2:07:ab:da:6e:8d:0a:80:21:c2:8e:98:b6: 5d:42:c4:dc:e8:ad:62:41:6f:70:d1:2f:ec:17:fb: 71:32:f7:32:cd:82:22:a6:92:7b:38:b7:2f:a3:27: 39:25:26:7e:20:83:80:61:8a:b3:af:10:71:4c:2a: 43:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C2:DC:AD:23:39:4E:08:79:5A:B0:31:EF:C3:02:C8:17:14:B9:42 X509v3 Authority Key Identifier: keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/08LcrSM5Tgh5WrAx78MCyBcUuUI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.228.64.0/21 46.235.80.0/21 77.245.96.0/20 80.242.208.0/20 89.219.24.0/22 93.185.64.0/20 95.141.128.0/20 185.20.124.0/22 188.0.128.0/19 188.127.32.0-188.127.45.255 188.127.47.0-188.127.49.255 188.127.52.0/24 193.29.53.0/24 195.189.28.0/22 217.196.16.0/20 IPv6: 2a03:a300::/32 Signature Algorithm: sha256WithRSAEncryption 67:0d:67:94:3a:26:45:bd:80:eb:ea:3c:45:84:e6:7d:dc:26: 10:25:ff:33:f7:65:d4:d8:9c:ee:40:5a:bd:41:4b:1a:72:cd: db:9a:27:3e:c0:ac:6e:a2:2c:2c:25:a4:1a:78:6d:08:5a:0a: a1:3b:2c:3e:89:1e:78:19:0e:a1:6f:fd:ba:0f:ee:21:70:72: fd:0c:2d:45:3e:27:14:da:1e:84:47:e3:69:17:e5:f8:65:fb: 37:11:cf:1d:3f:97:c6:45:34:44:5b:75:63:f5:44:3a:89:9b: e3:d3:af:1b:c8:90:65:65:83:5a:d5:61:72:98:5a:4f:4f:d4: 12:17:9f:5b:37:e5:f3:a9:71:d6:2b:92:9d:3c:c2:4e:f4:af: e4:49:61:5a:78:5e:a1:c3:1f:a6:ab:92:d9:70:d9:11:cd:db: fe:b2:cd:89:86:ab:0f:ba:ee:64:79:00:93:1a:ef:c2:17:c9: b7:83:7c:3a:2d:d2:05:54:32:03:56:4c:32:da:b3:7d:dd:29: 13:f1:ae:77:b5:86:36:66:cc:88:18:40:52:b8:9f:e7:83:13: 63:69:80:c9:df:71:a4:5a:30:f5:4b:f3:46:c3:ed:8f:32:54: 76:10:62:d0:ce:de:6f:28:f8:05:fe:8e:09:ac:18:a7:29:f9: 99:1f:a6:08 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt3WNK1WHlh5VTZLN9i0bFJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjEwZjIyNTkwOTNhYWY0NTI4NTkyMmE1ODhlOWE2NjFh YmE5ZmEwHhcNMjYwMTAxMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2MyZGNhZDIzMzk0ZTA4Nzk1YWIwMzFlZmMzMDJjODE3MTRiOTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua7p9qJGmeqprAOUogiQpHMwvQLo wnWW9L/Mwv1r4WGyu0TIpH7mTmF5ltvedOyvbI0yEi37sfs/6P1JHyKqwUXsu+4+ Vw0S28oD3Or8znYzA2Ekj8Dccdrb5Y8eTV0mtASbE9etOcL/qvB8XiepRDlOavDb WlMab8s4C3vmZvtzviee3k/D3vHiM0CZzITe7Wgl+SAD+xQudrEfcEpc1DHuM/3A 2JSOj2a3WJBBctSqcmGDa8V1qXkaYobm39Eqkvn87dIHq9pujQqAIcKOmLZdQsTc 6K1iQW9w0S/sF/txMvcyzYIippJ7OLcvoyc5JSZ+IIOAYYqzrxBxTCpDWQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFNPC3K0jOU4IeVqwMe/DAsgXFLlCMB8GA1UdIwQY MBaAFJ0hDyJZCTqvRShZIqWI6aZhq6n6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQt NDM4NDNjMmU5NDNiLzEvMDhMY3JTTTVUZ2g1V3JBeDc4TUN5QmNVdVVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQtNDM4NDNjMmU5NDNi LzEvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGUBggrBgEFBQcBBwEB/wSBhDCBgTBwBAIAATBqAwQDJeRA AwQDLutQAwQETfVgAwQEUPLQAwQCWdsYAwQEXblAAwQEX42AAwQCuRR8AwQFvACA MAwDBAW8fyADBAG8fywwDAMEALx/LwMEAbx/MAMEALx/NAMEAMEdNQMEAsO9HAME BNnEEDANBAIAAjAHAwUAKgOjADANBgkqhkiG9w0BAQsFAAOCAQEAZw1nlDomRb2A 6+o8RYTmfdwmECX/M/dl1Nic7kBavUFLGnLN25onPsCsbqIsLCWkGnhtCFoKoTss PokeeBkOoW/9ug/uIXBy/QwtRT4nFNoehEfjaRfl+GX7NxHPHT+XxkU0RFt1Y/VE Oomb49OvG8iQZWWDWtVhcphaT0/UEhefWzfl86lx1iuSnTzCTvSv5ElhWnheocMf pquS2XDZEc3b/rLNiYarD7ruZHkAkxrvwhfJt4N8Oi3SBVQyA1ZMMtqzfd0pE/Gu d7WGNmbMiBhAUrif54MTY2mAyd9xpFow9UvzRsPtjzJUdhBi0M7ebyj4Bf6OCawY pyn5mR+mCA== -----END CERTIFICATE-----Generated at Mon Jan 26 06:18:01 2026 by rpki-client