This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/DTHhyCPOZ695qnvf8noKgDaldnw.roa File: DTHhyCPOZ695qnvf8noKgDaldnw.roa (raw, json) Hash identifier: RdAlqOJJ+D5HDTAnSoZQT+QzaM+gEFl6T7Vfm5WmDEk= Subject key identifier: 0D:31:E1:C8:23:CE:67:AF:79:AA:7B:DF:F2:7A:0A:80:36:A5:76:7C Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 019B7BA3E032759C8EA3DE321358CC59A4B4 Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/DTHhyCPOZ695qnvf8noKgDaldnw.roa Signing time: Thu 01 Jan 2026 22:18:15 +0000 ROA not before: Thu 01 Jan 2026 22:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12301 IP address blocks: 62.77.192.0/22 maxlen: 24 62.77.200.0/21 maxlen: 24 62.77.208.0/20 maxlen: 24 62.77.224.0/20 maxlen: 24 62.77.242.0/23 maxlen: 24 62.77.244.0/22 maxlen: 24 79.120.128.0/19 maxlen: 24 79.120.168.0/23 maxlen: 24 79.120.176.0/20 maxlen: 24 79.120.179.0/24 maxlen: 24 79.120.192.0/19 maxlen: 24 79.120.198.0/24 maxlen: 24 79.120.200.0/24 maxlen: 24 79.120.224.0/20 maxlen: 24 79.120.240.0/21 maxlen: 24 79.120.250.0/23 maxlen: 24 81.0.64.0/20 maxlen: 24 81.0.80.0/23 maxlen: 24 81.0.88.0/23 maxlen: 24 81.0.96.0/23 maxlen: 24 81.0.100.0/22 maxlen: 24 81.0.104.0/22 maxlen: 24 81.0.110.0/23 maxlen: 24 81.0.112.0/21 maxlen: 24 81.0.120.0/23 maxlen: 24 81.0.120.0/24 maxlen: 24 81.0.121.0/24 maxlen: 24 81.0.124.0/23 maxlen: 24 81.94.176.0/20 maxlen: 24 82.131.160.0/20 maxlen: 24 82.131.176.0/22 maxlen: 24 82.131.180.0/23 maxlen: 24 82.131.192.0/22 maxlen: 24 82.131.199.0/24 maxlen: 24 82.131.208.0/21 maxlen: 24 82.141.128.0/18 maxlen: 24 82.144.160.0/22 maxlen: 24 82.144.168.0/22 maxlen: 24 82.144.178.0/23 maxlen: 24 82.144.180.0/22 maxlen: 24 82.144.184.0/22 maxlen: 24 82.144.190.0/23 maxlen: 24 87.97.64.0/20 maxlen: 24 89.186.98.0/23 maxlen: 24 89.186.100.0/23 maxlen: 24 89.186.104.0/23 maxlen: 24 89.186.116.0/23 maxlen: 24 91.82.8.0/21 maxlen: 24 91.82.16.0/21 maxlen: 24 91.82.40.0/21 maxlen: 24 91.82.48.0/21 maxlen: 24 91.82.58.0/23 maxlen: 24 91.82.62.0/23 maxlen: 24 91.82.72.0/21 maxlen: 24 91.82.80.0/23 maxlen: 24 91.82.84.0/22 maxlen: 24 91.82.88.0/21 maxlen: 24 91.82.96.0/19 maxlen: 24 91.82.128.0/23 maxlen: 24 91.82.148.0/22 maxlen: 24 91.82.152.0/21 maxlen: 24 91.82.174.0/23 maxlen: 24 91.82.184.0/22 maxlen: 24 91.82.192.0/20 maxlen: 24 91.82.208.0/23 maxlen: 24 91.82.216.0/21 maxlen: 24 91.82.224.0/22 maxlen: 24 91.82.236.0/22 maxlen: 24 91.82.244.0/22 maxlen: 24 91.82.248.0/23 maxlen: 24 91.82.252.0/22 maxlen: 24 91.83.40.0/21 maxlen: 24 91.83.48.0/22 maxlen: 24 91.83.56.0/21 maxlen: 24 91.83.64.0/20 maxlen: 24 91.83.80.0/21 maxlen: 24 91.83.88.0/22 maxlen: 24 91.83.92.0/23 maxlen: 24 91.83.96.0/22 maxlen: 24 91.83.100.0/23 maxlen: 24 91.83.104.0/22 maxlen: 24 91.83.108.0/23 maxlen: 24 91.83.122.0/23 maxlen: 24 91.83.124.0/22 maxlen: 24 91.83.128.0/21 maxlen: 24 91.83.146.0/23 maxlen: 24 91.83.148.0/22 maxlen: 24 91.83.152.0/23 maxlen: 24 91.83.156.0/22 maxlen: 24 91.83.160.0/20 maxlen: 24 91.83.176.0/22 maxlen: 24 91.83.208.0/20 maxlen: 24 91.83.220.0/22 maxlen: 22 91.83.224.0/20 maxlen: 24 91.83.240.0/21 maxlen: 24 91.83.248.0/22 maxlen: 24 91.83.254.0/23 maxlen: 24 94.125.248.0/21 maxlen: 24 185.50.28.0/22 maxlen: 24 193.68.32.0/19 maxlen: 24 193.91.64.0/19 maxlen: 24 193.226.194.0/23 maxlen: 24 193.226.196.0/22 maxlen: 24 193.226.200.0/21 maxlen: 24 193.226.208.0/22 maxlen: 24 193.226.216.0/21 maxlen: 24 193.226.224.0/23 maxlen: 24 193.226.228.0/22 maxlen: 24 193.226.234.0/23 maxlen: 24 193.226.236.0/23 maxlen: 24 193.226.242.0/23 maxlen: 24 193.226.250.0/23 maxlen: 24 193.226.252.0/22 maxlen: 24 194.143.224.0/19 maxlen: 24 194.169.253.0/24 maxlen: 24 195.184.0.0/19 maxlen: 24 212.24.160.0/19 maxlen: 19 212.108.192.0/18 maxlen: 24 213.16.64.0/18 maxlen: 24 213.163.0.0/18 maxlen: 24 213.163.40.0/24 maxlen: 24 213.197.64.0/21 maxlen: 24 213.253.192.0/18 maxlen: 24 217.150.128.0/20 maxlen: 20 2001:1aa0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:e0:32:75:9c:8e:a3:de:32:13:58:cc:59:a4:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Jan 1 22:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d31e1c823ce67af79aa7bdff27a0a8036a5767c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:06:ea:fe:7a:04:94:77:29:21:1f:c0:ac:e4: a3:81:13:ac:eb:58:ef:a3:cc:e6:8a:86:1e:6a:db: 19:ca:a1:c2:23:11:60:2f:d6:03:e0:52:f2:ae:54: 08:f1:a4:20:a9:53:7e:6d:47:78:db:df:74:6e:a8: 05:aa:24:33:ec:99:64:1b:fa:e0:e3:d3:bc:e1:b3: 91:2d:a5:bc:b2:36:f8:a8:6f:c0:fe:36:cd:c1:10: 56:f9:65:28:58:6e:9f:ee:42:ee:97:5e:f9:a6:10: 0f:37:5b:96:37:1d:77:ce:31:6e:47:c4:2b:91:a0: 1a:e3:67:c6:0b:d7:f3:e2:1a:96:9e:c0:68:b0:8d: af:c9:86:9b:02:1c:c2:4a:da:71:78:2c:04:54:7a: 54:69:47:fd:49:08:a7:f3:c5:e0:0a:2b:c5:c4:4a: 45:27:06:4c:55:d3:be:7c:a3:ca:c3:af:d0:53:98: 67:9d:08:25:e4:46:1d:47:2b:0a:fa:c6:97:4f:77: 5d:26:95:a7:97:71:0e:b8:45:69:68:94:37:b0:01: 4a:dd:59:96:e9:51:ef:ca:7b:38:dd:8a:fc:69:ed: de:b2:1b:03:0e:bb:eb:b3:c4:ec:67:93:53:ce:92: 30:cd:24:d5:93:f4:8d:69:7a:dc:50:bb:86:6f:d2: 6c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:31:E1:C8:23:CE:67:AF:79:AA:7B:DF:F2:7A:0A:80:36:A5:76:7C X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/DTHhyCPOZ695qnvf8noKgDaldnw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.77.192.0/22 62.77.200.0-62.77.239.255 62.77.242.0-62.77.247.255 79.120.128.0/19 79.120.168.0/23 79.120.176.0-79.120.247.255 79.120.250.0/23 81.0.64.0-81.0.81.255 81.0.88.0/23 81.0.96.0/23 81.0.100.0-81.0.107.255 81.0.110.0-81.0.121.255 81.0.124.0/23 81.94.176.0/20 82.131.160.0-82.131.181.255 82.131.192.0/22 82.131.199.0/24 82.131.208.0/21 82.141.128.0/18 82.144.160.0/22 82.144.168.0/22 82.144.178.0-82.144.187.255 82.144.190.0/23 87.97.64.0/20 89.186.98.0-89.186.101.255 89.186.104.0/23 89.186.116.0/23 91.82.8.0-91.82.23.255 91.82.40.0-91.82.55.255 91.82.58.0/23 91.82.62.0/23 91.82.72.0-91.82.81.255 91.82.84.0-91.82.129.255 91.82.148.0-91.82.159.255 91.82.174.0/23 91.82.184.0/22 91.82.192.0-91.82.209.255 91.82.216.0-91.82.227.255 91.82.236.0/22 91.82.244.0-91.82.249.255 91.82.252.0/22 91.83.40.0-91.83.51.255 91.83.56.0-91.83.93.255 91.83.96.0-91.83.101.255 91.83.104.0-91.83.109.255 91.83.122.0-91.83.135.255 91.83.146.0-91.83.153.255 91.83.156.0-91.83.179.255 91.83.208.0-91.83.251.255 91.83.254.0/23 94.125.248.0/21 185.50.28.0/22 193.68.32.0/19 193.91.64.0/19 193.226.194.0-193.226.211.255 193.226.216.0-193.226.225.255 193.226.228.0/22 193.226.234.0-193.226.237.255 193.226.242.0/23 193.226.250.0-193.226.255.255 194.143.224.0/19 194.169.253.0/24 195.184.0.0/19 212.24.160.0/19 212.108.192.0/18 213.16.64.0/18 213.163.0.0/18 213.197.64.0/21 213.253.192.0/18 217.150.128.0/20 IPv6: 2001:1aa0::/29 Signature Algorithm: sha256WithRSAEncryption 42:d4:ef:29:32:f9:06:46:a3:ce:49:58:cc:29:31:cd:d3:8f: 0d:b9:7c:6a:6f:2f:a5:d7:7f:49:6d:98:af:df:fa:cb:0f:3c: aa:c6:a1:ef:4c:fe:6c:7d:09:18:62:5e:59:fb:b5:57:37:15: d1:53:8d:a7:0d:eb:f6:ce:7c:2f:6b:b7:62:50:dd:4a:02:bd: e2:a0:e2:63:71:a4:60:53:78:8b:aa:8c:c7:9f:a8:6a:b5:3c: 15:35:42:0c:3c:f5:e8:06:92:43:bf:15:67:0c:72:ab:ce:fa: 98:8a:4d:6e:d7:db:9b:2a:cb:ca:8e:11:6e:5d:c3:c6:50:5b: 81:a2:d9:b7:a8:68:43:16:a2:46:9b:68:8d:9e:85:80:a6:f0: 95:66:57:52:e4:96:b9:9b:fd:8d:d4:e3:d6:98:37:60:f2:e6: 3e:7e:51:40:7c:0e:d6:12:4a:8e:b2:d5:d6:ec:56:2b:df:9d: c6:29:ba:1b:75:8e:12:5a:a6:f2:9e:c4:b5:f9:54:0b:06:13: 0d:96:e7:df:54:87:a8:ff:5f:62:a5:5e:5e:e1:41:f1:10:27: d1:09:ba:a1:95:e7:cc:5d:37:31:c3:9e:be:5a:df:2f:c2:c7: ed:ae:d3:d6:22:fc:26:31:40:40:a1:dd:6e:a9:a0:a8:97:88: e5:bd:44:8e -----BEGIN CERTIFICATE----- MIIHmzCCBoOgAwIBAgISAZt7o+AydZyOo94yE1jMWaS0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjYwMTAxMjIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDMxZTFjODIzY2U2N2FmNzlhYTdiZGZmMjdhMGE4MDM2YTU3NjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwbq/noElHcpIR/ArOSjgROs61jv o8zmioYeatsZyqHCIxFgL9YD4FLyrlQI8aQgqVN+bUd42990bqgFqiQz7JlkG/rg 49O84bORLaW8sjb4qG/A/jbNwRBW+WUoWG6f7kLul175phAPN1uWNx13zjFuR8Qr kaAa42fGC9fz4hqWnsBosI2vyYabAhzCStpxeCwEVHpUaUf9SQin88XgCivFxEpF JwZMVdO+fKPKw6/QU5hnnQgl5EYdRysK+saXT3ddJpWnl3EOuEVpaJQ3sAFK3VmW 6VHvyns43Yr8ae3eshsDDrvrs8TsZ5NTzpIwzSTVk/SNaXrcULuGb9JsXwIDAQAB o4IEpzCCBKMwHQYDVR0OBBYEFA0x4cgjzmeveap73/J6CoA2pXZ8MB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvRFRIaHlDUE9aNjk1cW52Zjhub0tnRGFsZG53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICuwYIKwYBBQUHAQcBAf8EggKqMIICpjCCApMEAgABMIIC iwMEAj5NwDAMAwQDPk3IAwQEPk3gMAwDBAE+TfIDBAM+TfADBAVPeIADBAFPeKgw DAMEBE94sAMEA0948AMEAU94+jAMAwQGUQBAAwQBUQBQAwQBUQBYAwQBUQBgMAwD BAJRAGQDBAJRAGgwDAMEAVEAbgMEAVEAeAMEAVEAfAMEBFFesDAMAwQFUoOgAwQB UoO0AwQCUoPAAwQAUoPHAwQDUoPQAwQGUo2AAwQCUpCgAwQCUpCoMAwDBAFSkLID BAJSkLgDBAFSkL4DBARXYUAwDAMEAVm6YgMEAVm6ZAMEAVm6aAMEAVm6dDAMAwQD W1IIAwQDW1IQMAwDBANbUigDBANbUjADBAFbUjoDBAFbUj4wDAMEA1tSSAMEAVtS UDAMAwQCW1JUAwQBW1KAMAwDBAJbUpQDBAVbUoADBAFbUq4DBAJbUrgwDAMEBltS wAMEAVtS0DAMAwQDW1LYAwQCW1LgAwQCW1LsMAwDBAJbUvQDBAFbUvgDBAJbUvww DAMEA1tTKAMEAltTMDAMAwQDW1M4AwQBW1NcMAwDBAVbU2ADBAFbU2QwDAMEA1tT aAMEAVtTbDAMAwQBW1N6AwQDW1OAMAwDBAFbU5IDBAFbU5gwDAMEAltTnAMEAltT sDAMAwQEW1PQAwQCW1P4AwQBW1P+AwQDXn34AwQCuTIcAwQFwUQgAwQFwVtAMAwD BAHB4sIDBALB4tAwDAMEA8Hi2AMEAcHi4AMEAsHi5DAMAwQBweLqAwQBweLsAwQB weLyMAsDBAHB4voDAwDB4gMEBcKP4AMEAMKp/QMEBcO4AAMEBdQYoAMEBtRswAME BtUQQAMEBtWjAAMEA9XFQAMEBtX9wAMEBNmWgDANBAIAAjAHAwUDIAEaoDANBgkq hkiG9w0BAQsFAAOCAQEAQtTvKTL5BkajzklYzCkxzdOPDbl8am8vpdd/SW2Yr9/6 yw88qsah70z+bH0JGGJeWfu1VzcV0VONpw3r9s58L2u3YlDdSgK94qDiY3GkYFN4 i6qMx5+oarU8FTVCDDz16AaSQ78VZwxyq876mIpNbtfbmyrLyo4Rbl3DxlBbgaLZ t6hoQxaiRptojZ6FgKbwlWZXUuSWuZv9jdTj1pg3YPLmPn5RQHwO1hJKjrLV1uxW K9+dxim6G3WOElqm8p7EtflUCwYTDZbn31SHqP9fYqVeXuFB8RAn0Qm6oZXnzF03 McOevlrfL8LH7a7T1iL8JjFAQKHdbqmgqJeI5b1Ejg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:59 2026 by rpki-client