This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/ov_yPvQnjCBOxMDQ0fxhQYRGf24.roa File: ov_yPvQnjCBOxMDQ0fxhQYRGf24.roa (raw, json) Hash identifier: 87TB6uHBD00xhJxzxPfF6P3fX0oGRc/an9mxW40Dcho= Subject key identifier: A2:FF:F2:3E:F4:27:8C:20:4E:C4:C0:D0:D1:FC:61:41:84:46:7F:6E Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5 Certificate serial: 019B7E38BA93A5C15921C329AE959BED443F Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/ov_yPvQnjCBOxMDQ0fxhQYRGf24.roa Signing time: Fri 02 Jan 2026 10:20:05 +0000 ROA not before: Fri 02 Jan 2026 10:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16839 IP address blocks: 37.98.232.0/21 maxlen: 24 37.98.232.0/22 maxlen: 24 37.98.232.0/23 maxlen: 23 37.98.232.0/24 maxlen: 24 37.98.233.0/24 maxlen: 24 37.98.234.0/23 maxlen: 23 37.98.234.0/24 maxlen: 24 37.98.235.0/24 maxlen: 24 37.98.236.0/22 maxlen: 24 37.98.236.0/23 maxlen: 23 37.98.236.0/24 maxlen: 24 37.98.237.0/24 maxlen: 24 37.98.238.0/23 maxlen: 23 37.98.238.0/24 maxlen: 24 37.98.239.0/24 maxlen: 24 136.242.128.0/17 maxlen: 17 138.12.128.0/17 maxlen: 17 148.139.0.0/16 maxlen: 16 148.139.0.0/24 maxlen: 24 148.139.1.0/24 maxlen: 24 148.139.2.0/24 maxlen: 24 148.139.3.0/24 maxlen: 24 148.139.4.0/22 maxlen: 24 148.139.8.0/22 maxlen: 24 148.139.12.0/22 maxlen: 24 148.139.16.0/22 maxlen: 24 148.139.28.0/24 maxlen: 24 148.139.29.0/24 maxlen: 24 148.139.30.0/24 maxlen: 24 148.139.32.0/20 maxlen: 24 148.139.48.0/20 maxlen: 24 148.139.64.0/20 maxlen: 24 148.139.80.0/20 maxlen: 24 148.139.96.0/22 maxlen: 24 148.139.100.0/22 maxlen: 24 148.139.104.0/24 maxlen: 24 148.139.105.0/24 maxlen: 24 148.139.108.0/22 maxlen: 24 148.139.112.0/22 maxlen: 24 148.139.116.0/22 maxlen: 24 148.139.120.0/22 maxlen: 24 148.139.124.0/24 maxlen: 24 148.139.125.0/24 maxlen: 24 148.139.128.0/22 maxlen: 24 148.139.132.0/22 maxlen: 24 148.139.136.0/22 maxlen: 24 148.139.140.0/24 maxlen: 24 148.139.141.0/24 maxlen: 24 148.139.142.0/24 maxlen: 24 148.139.143.0/24 maxlen: 24 148.139.144.0/22 maxlen: 24 148.139.144.0/24 maxlen: 24 148.139.148.0/22 maxlen: 24 148.139.152.0/22 maxlen: 24 148.139.156.0/22 maxlen: 24 148.139.160.0/20 maxlen: 24 148.139.176.0/20 maxlen: 24 148.139.192.0/24 maxlen: 24 148.139.193.0/24 maxlen: 24 148.139.194.0/24 maxlen: 24 148.139.195.0/24 maxlen: 24 148.139.196.0/22 maxlen: 24 148.139.200.0/22 maxlen: 24 148.139.214.0/24 maxlen: 24 148.139.215.0/24 maxlen: 24 148.139.224.0/22 maxlen: 24 148.139.228.0/22 maxlen: 24 148.139.232.0/22 maxlen: 24 148.139.236.0/22 maxlen: 24 148.139.240.0/22 maxlen: 24 148.139.244.0/22 maxlen: 24 148.139.248.0/22 maxlen: 24 148.139.252.0/22 maxlen: 24 157.5.128.0/17 maxlen: 17 157.70.0.0/17 maxlen: 17 163.120.128.0/17 maxlen: 17 165.171.0.0/17 maxlen: 17 2a04:37c0::/29 maxlen: 48 2a04:37c0:3110::/48 maxlen: 48 2a04:37c0:3120::/48 maxlen: 48 2a04:37c0:3510::/48 maxlen: 48 2a04:37c0:3520::/48 maxlen: 48 2a04:37c0:3910::/48 maxlen: 48 2a04:37c0:3920::/48 maxlen: 48 2a04:37c0:4110::/48 maxlen: 48 2a04:37c0:4120::/48 maxlen: 48 2a04:37c0:4410::/48 maxlen: 48 2a04:37c0:4420::/48 maxlen: 48 2a04:37c0:4430::/48 maxlen: 48 2a04:37c0:4910::/48 maxlen: 48 2a04:37c0:4920::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ba:93:a5:c1:59:21:c3:29:ae:95:9b:ed:44:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5 Validity Not Before: Jan 2 10:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2fff23ef4278c204ec4c0d0d1fc614184467f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:23:51:f3:93:ae:8c:5f:52:c5:9d:db:14:3a: 2d:fe:9f:d9:0f:d7:1e:ef:dd:ee:68:84:5d:b8:b3: 7b:f3:9a:fd:42:f4:e1:3a:2a:44:7d:c8:a6:60:45: 4f:5a:a3:2f:b8:87:1b:fc:f0:85:b0:05:e8:d3:4c: 05:64:89:aa:5a:70:20:b2:1d:b5:7a:dc:fc:a9:e0: 29:d4:48:87:c6:79:d6:98:c4:66:9b:ee:41:44:24: 5b:5e:f2:ac:b8:8e:45:71:ae:0f:7b:0c:13:69:5f: f5:69:88:be:52:6a:c9:f0:f5:5a:2e:82:d9:5d:7f: 3f:5a:90:8c:f7:57:0c:28:25:60:5e:e9:78:9d:ee: 11:43:69:e9:d7:e8:04:2c:62:b0:1c:8a:02:95:77: 92:b0:44:17:74:2d:94:4c:aa:65:dc:10:14:52:28: 30:d7:9b:47:a8:45:ec:1f:26:51:4b:e7:5c:f3:46: 56:db:ff:30:13:8e:f1:7b:c0:f3:6a:71:6d:8d:2a: 59:26:d0:36:b6:cb:cd:df:51:e0:90:4a:af:52:98: 9f:b5:6b:3f:5f:01:98:2f:aa:48:98:8f:09:d8:da: 8a:45:3a:98:c6:90:be:a2:32:0e:a3:88:10:1a:9c: 49:31:79:56:02:64:6e:3e:7f:c3:c4:12:9c:aa:5e: 28:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FF:F2:3E:F4:27:8C:20:4E:C4:C0:D0:D1:FC:61:41:84:46:7F:6E X509v3 Authority Key Identifier: keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/ov_yPvQnjCBOxMDQ0fxhQYRGf24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.98.232.0/21 136.242.128.0/17 138.12.128.0/17 148.139.0.0/16 157.5.128.0/17 157.70.0.0/17 163.120.128.0/17 165.171.0.0/17 IPv6: 2a04:37c0::/29 Signature Algorithm: sha256WithRSAEncryption 76:ef:82:bb:86:61:aa:70:ef:d6:12:9b:e8:67:84:54:b3:e4: a7:90:c2:a0:8a:8a:9d:8c:a7:1b:f7:be:36:ae:dc:69:24:4c: 36:f0:34:58:fa:8a:fc:67:cf:ba:08:73:bf:bf:ba:e9:20:a8: 9e:9e:15:b9:8e:cb:b5:a6:b6:37:fc:e4:83:60:24:a3:8f:00: 95:c2:8a:60:e0:0c:07:ed:42:78:58:0c:93:64:b0:84:85:0d: 2c:e1:a2:e4:0a:5b:5c:32:88:79:6a:92:a5:f5:1c:b1:a8:a7: ac:24:ec:3c:8c:08:2a:89:ee:6c:2a:f3:b1:82:2b:47:a7:c1: 27:12:63:5c:31:0f:0f:2c:c0:70:f2:e9:b4:bf:84:53:f6:79: 3f:04:85:22:20:40:b0:d5:70:ee:4c:84:92:53:af:75:43:41: 34:49:a5:ec:dd:3a:72:60:f1:74:98:d9:6f:4b:a3:f6:42:e1: c8:7a:74:be:35:90:50:96:41:2c:78:e2:5f:13:54:9c:b6:3c: 51:ad:72:31:4e:79:68:0b:ce:74:96:39:74:f8:29:ce:44:34: 15:79:6a:00:d7:04:2b:53:92:9d:89:4c:e2:43:fc:30:40:8c: 56:72:2f:26:1e:f1:96:28:a9:66:72:8a:c6:b7:30:8f:bd:ee: 82:dc:99:c0 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZt+OLqTpcFZIcMprpWb7UQ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYzM4YTA2YTM5YjIwYjhkYTQwMDA5MjM3ZDc2YWNkZDI4 ZTcxYTUwHhcNMjYwMTAyMTAyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmZmZjIzZWY0Mjc4YzIwNGVjNGMwZDBkMWZjNjE0MTg0NDY3ZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyNR85OujF9SxZ3bFDot/p/ZD9ce 793uaIRduLN785r9QvThOipEfcimYEVPWqMvuIcb/PCFsAXo00wFZImqWnAgsh21 etz8qeAp1EiHxnnWmMRmm+5BRCRbXvKsuI5Fca4PewwTaV/1aYi+UmrJ8PVaLoLZ XX8/WpCM91cMKCVgXul4ne4RQ2np1+gELGKwHIoClXeSsEQXdC2UTKpl3BAUUigw 15tHqEXsHyZRS+dc80ZW2/8wE47xe8DzanFtjSpZJtA2tsvN31HgkEqvUpiftWs/ XwGYL6pImI8J2NqKRTqYxpC+ojIOo4gQGpxJMXlWAmRuPn/DxBKcql4odwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFKL/8j70J4wgTsTA0NH8YUGERn9uMB8GA1UdIwQY MBaAFAHDigajmyC42kAAkjfXas3SjnGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWNPS0JxT2JJTGphUUFDU045ZHF6ZEtPY2FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS82YThlNWUtMzliNi00N2UzLWJiYjAt YjI5ZjEwY2MwMzI4LzEvb3ZfeVB2UW5qQ0JPeE1EUTBmeGhRWVJHZjI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS82YThlNWUtMzliNi00N2UzLWJiYjAtYjI5ZjEwY2MwMzI4 LzEvQWNPS0JxT2JJTGphUUFDU045ZHF6ZEtPY2FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjA1BAIAATAvAwQDJWLoAwQH iPKAAwQHigyAAwMAlIsDBAedBYADBAedRgADBAejeIADBAelqwAwDQQCAAIwBwMF AyoEN8AwDQYJKoZIhvcNAQELBQADggEBAHbvgruGYapw79YSm+hnhFSz5KeQwqCK ip2Mpxv3vjau3GkkTDbwNFj6ivxnz7oIc7+/uukgqJ6eFbmOy7Wmtjf85INgJKOP AJXCimDgDAftQnhYDJNksISFDSzhouQKW1wyiHlqkqX1HLGop6wk7DyMCCqJ7mwq 87GCK0enwScSY1wxDw8swHDy6bS/hFP2eT8EhSIgQLDVcO5MhJJTr3VDQTRJpezd OnJg8XSY2W9Lo/ZC4ch6dL41kFCWQSx44l8TVJy2PFGtcjFOeWgLznSWOXT4Kc5E NBV5agDXBCtTkp2JTOJD/DBAjFZyLyYe8ZYoqWZyisa3MI+97oLcmcA= -----END CERTIFICATE-----Generated at Mon Jan 26 02:07:54 2026 by rpki-client