This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/FOLDqKxEVMdWWcpgZnPDCyuO3M4.roa File: FOLDqKxEVMdWWcpgZnPDCyuO3M4.roa (raw, json) Hash identifier: 0gkvmBgKUujlvBMJPfV/1P6cRqx430AdiJwroTPunR0= Subject key identifier: 14:E2:C3:A8:AC:44:54:C7:56:59:CA:60:66:73:C3:0B:2B:8E:DC:CE Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0 Certificate serial: 019B7F8442EE650CE65052CF380216CB0267 Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/FOLDqKxEVMdWWcpgZnPDCyuO3M4.roa Signing time: Fri 02 Jan 2026 16:22:12 +0000 ROA not before: Fri 02 Jan 2026 16:22:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210756 IP address blocks: 5.8.42.0/24 maxlen: 24 5.8.43.0/24 maxlen: 24 5.8.69.0/24 maxlen: 24 5.101.68.0/24 maxlen: 24 5.101.69.0/24 maxlen: 24 5.101.70.0/24 maxlen: 24 5.101.218.0/24 maxlen: 24 5.188.2.0/24 maxlen: 24 5.188.3.0/24 maxlen: 24 5.188.7.0/24 maxlen: 24 5.188.35.0/24 maxlen: 24 5.188.37.0/24 maxlen: 24 5.188.38.0/24 maxlen: 24 5.188.39.0/24 maxlen: 24 5.188.121.0/24 maxlen: 24 5.188.149.0/24 maxlen: 24 5.188.150.0/24 maxlen: 24 5.188.170.0/24 maxlen: 24 5.188.171.0/24 maxlen: 24 5.188.176.0/24 maxlen: 24 5.188.177.0/24 maxlen: 24 5.188.178.0/24 maxlen: 24 5.188.179.0/24 maxlen: 24 5.188.212.0/24 maxlen: 24 5.188.224.0/24 maxlen: 24 5.188.229.0/24 maxlen: 24 5.189.201.0/24 maxlen: 24 5.189.205.0/24 maxlen: 24 5.189.223.0/24 maxlen: 24 31.184.204.0/24 maxlen: 24 31.184.205.0/24 maxlen: 24 37.9.36.0/24 maxlen: 24 37.9.37.0/24 maxlen: 24 37.9.38.0/24 maxlen: 24 37.9.39.0/24 maxlen: 24 37.9.52.0/24 maxlen: 24 37.9.53.0/24 maxlen: 24 37.9.54.0/24 maxlen: 24 37.9.55.0/24 maxlen: 24 37.128.164.0/24 maxlen: 24 37.128.165.0/24 maxlen: 24 37.128.166.0/24 maxlen: 24 37.128.167.0/24 maxlen: 24 45.147.162.0/24 maxlen: 24 45.147.163.0/24 maxlen: 24 79.133.127.0/24 maxlen: 24 82.97.207.0/24 maxlen: 24 83.229.14.0/24 maxlen: 24 83.229.25.0/24 maxlen: 24 91.243.80.0/24 maxlen: 24 91.243.82.0/24 maxlen: 24 91.243.83.0/24 maxlen: 24 91.243.84.0/24 maxlen: 24 91.243.86.0/24 maxlen: 24 92.38.128.0/24 maxlen: 24 92.38.129.0/24 maxlen: 24 92.38.130.0/24 maxlen: 24 92.38.131.0/24 maxlen: 24 92.38.136.0/24 maxlen: 24 92.38.137.0/24 maxlen: 24 92.38.138.0/24 maxlen: 24 92.38.139.0/24 maxlen: 24 92.38.152.0/24 maxlen: 24 92.38.153.0/24 maxlen: 24 92.38.156.0/24 maxlen: 24 92.38.188.0/24 maxlen: 24 92.38.189.0/24 maxlen: 24 92.38.190.0/24 maxlen: 24 92.38.191.0/24 maxlen: 24 92.223.4.0/24 maxlen: 24 92.223.5.0/24 maxlen: 24 92.223.6.0/24 maxlen: 24 92.223.8.0/24 maxlen: 24 92.223.9.0/24 maxlen: 24 92.223.14.0/24 maxlen: 24 92.223.32.0/24 maxlen: 24 92.223.33.0/24 maxlen: 24 92.223.34.0/24 maxlen: 24 92.223.35.0/24 maxlen: 24 92.223.36.0/24 maxlen: 24 92.223.38.0/24 maxlen: 24 92.223.41.0/24 maxlen: 24 92.223.43.0/24 maxlen: 24 92.223.49.0/24 maxlen: 24 92.223.60.0/24 maxlen: 24 92.223.64.0/24 maxlen: 24 92.223.65.0/24 maxlen: 24 92.223.67.0/24 maxlen: 24 92.223.72.0/24 maxlen: 24 92.223.80.0/24 maxlen: 24 92.223.87.0/24 maxlen: 24 92.223.91.0/24 maxlen: 24 92.223.103.0/24 maxlen: 24 92.223.106.0/24 maxlen: 24 92.223.108.0/24 maxlen: 24 92.223.109.0/24 maxlen: 24 92.223.110.0/24 maxlen: 24 92.223.111.0/24 maxlen: 24 92.223.114.0/24 maxlen: 24 92.223.115.0/24 maxlen: 24 92.223.122.0/24 maxlen: 24 92.223.123.0/24 maxlen: 24 95.85.88.0/24 maxlen: 24 95.181.176.0/24 maxlen: 24 95.181.177.0/24 maxlen: 24 95.181.178.0/24 maxlen: 24 95.181.179.0/24 maxlen: 24 95.181.180.0/24 maxlen: 24 95.181.181.0/24 maxlen: 24 95.181.182.0/24 maxlen: 24 95.181.183.0/24 maxlen: 24 146.185.196.0/24 maxlen: 24 146.185.197.0/24 maxlen: 24 146.185.198.0/24 maxlen: 24 146.185.199.0/24 maxlen: 24 146.185.215.0/24 maxlen: 24 146.185.218.0/24 maxlen: 24 185.14.46.0/24 maxlen: 24 185.101.137.0/24 maxlen: 24 193.17.93.0/24 maxlen: 24 2a11:27c0::/44 maxlen: 44 2a11:27c0:10::/44 maxlen: 44 2a11:27c0:20::/44 maxlen: 44 2a11:27c0:100::/44 maxlen: 44 2a11:27c0:110::/44 maxlen: 44 2a11:27c0:120::/44 maxlen: 44 2a11:27c0:130::/44 maxlen: 44 2a11:27c0:140::/44 maxlen: 44 2a11:27c0:150::/44 maxlen: 44 2a11:27c0:160::/44 maxlen: 44 2a11:27c0:170::/44 maxlen: 44 2a11:27c0:180::/44 maxlen: 44 2a11:27c0:190::/44 maxlen: 44 2a11:27c0:1a0::/44 maxlen: 44 2a11:27c0:1b0::/44 maxlen: 44 2a11:27c0:1c0::/44 maxlen: 44 2a11:27c0:1d0::/44 maxlen: 44 2a11:27c0:1e0::/44 maxlen: 44 2a11:27c0:1f0::/44 maxlen: 44 2a11:27c0:200::/44 maxlen: 44 2a11:27c0:210::/44 maxlen: 44 2a11:27c0:1000::/44 maxlen: 44 2a11:27c0:1010::/44 maxlen: 44 2a11:27c0:1020::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:42:ee:65:0c:e6:50:52:cf:38:02:16:cb:02:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0 Validity Not Before: Jan 2 16:22:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14e2c3a8ac4454c75659ca606673c30b2b8edcce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e0:60:ae:fe:8d:6e:f2:b7:16:34:58:61:50: ab:50:03:a2:b3:dc:29:e8:16:a1:cc:9c:cc:7f:e4: a0:c0:22:10:e8:44:cf:59:22:62:31:7b:94:99:3f: fe:32:e6:1b:84:35:eb:03:75:5d:68:93:03:6b:ac: 86:5d:b9:c7:ff:36:4c:40:04:83:8a:95:f7:45:26: 13:ff:0d:20:f0:bd:4d:1b:1a:2c:87:4e:b1:5a:5b: 44:63:2a:8a:d0:da:6b:a9:4b:e9:a2:f1:b0:29:49: b2:c0:30:de:dc:76:a4:a8:d3:8f:f5:29:ed:22:54: da:8e:70:33:1c:0e:4d:8e:cb:34:a0:41:88:81:2f: bf:7e:9c:a0:77:21:29:d9:a5:a0:6f:16:90:fd:2b: 44:79:38:e6:73:b7:30:e0:13:f2:b5:7b:8e:fe:aa: 5f:58:09:97:bd:f8:3f:61:cf:c3:8b:b4:a0:25:48: d4:a0:4d:50:8b:4f:5e:f0:e3:27:a5:6e:1f:12:8d: 7c:7d:8c:5d:ce:ca:b4:8e:e5:bf:72:45:05:f5:fa: e5:1a:e4:5a:57:a5:da:70:de:02:4c:6a:97:27:b3: cb:10:00:7a:99:26:b1:f8:97:90:fc:1c:b5:f6:ba: 80:ef:76:a6:83:31:8d:94:c8:34:6b:0e:a3:b2:ae: ac:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E2:C3:A8:AC:44:54:C7:56:59:CA:60:66:73:C3:0B:2B:8E:DC:CE X509v3 Authority Key Identifier: keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/FOLDqKxEVMdWWcpgZnPDCyuO3M4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.8.42.0/23 5.8.69.0/24 5.101.68.0-5.101.70.255 5.101.218.0/24 5.188.2.0/23 5.188.7.0/24 5.188.35.0/24 5.188.37.0-5.188.39.255 5.188.121.0/24 5.188.149.0-5.188.150.255 5.188.170.0/23 5.188.176.0/22 5.188.212.0/24 5.188.224.0/24 5.188.229.0/24 5.189.201.0/24 5.189.205.0/24 5.189.223.0/24 31.184.204.0/23 37.9.36.0/22 37.9.52.0/22 37.128.164.0/22 45.147.162.0/23 79.133.127.0/24 82.97.207.0/24 83.229.14.0/24 83.229.25.0/24 91.243.80.0/24 91.243.82.0-91.243.84.255 91.243.86.0/24 92.38.128.0/22 92.38.136.0/22 92.38.152.0/23 92.38.156.0/24 92.38.188.0/22 92.223.4.0-92.223.6.255 92.223.8.0/23 92.223.14.0/24 92.223.32.0-92.223.36.255 92.223.38.0/24 92.223.41.0/24 92.223.43.0/24 92.223.49.0/24 92.223.60.0/24 92.223.64.0/23 92.223.67.0/24 92.223.72.0/24 92.223.80.0/24 92.223.87.0/24 92.223.91.0/24 92.223.103.0/24 92.223.106.0/24 92.223.108.0/22 92.223.114.0/23 92.223.122.0/23 95.85.88.0/24 95.181.176.0/21 146.185.196.0/22 146.185.215.0/24 146.185.218.0/24 185.14.46.0/24 185.101.137.0/24 193.17.93.0/24 IPv6: 2a11:27c0::-2a11:27c0:2f:ffff:ffff:ffff:ffff:ffff 2a11:27c0:100::-2a11:27c0:21f:ffff:ffff:ffff:ffff:ffff 2a11:27c0:1000::-2a11:27c0:102f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 32:29:91:57:82:2f:60:fd:46:d1:f5:67:59:2a:70:89:86:9b: a4:2f:10:2a:b7:f3:e1:71:4c:ab:97:67:de:53:b7:43:10:bc: 59:2e:a3:5c:b8:9f:36:26:67:ed:0a:33:33:b7:e5:2f:da:ae: 71:4a:5b:a1:0e:43:3a:8e:5c:a8:f1:09:d1:fa:86:67:b0:52: 81:ee:8a:1e:15:04:ba:49:3b:5e:0c:8c:99:4e:38:b4:0b:3f: 1d:da:81:f1:ca:7d:4b:e1:74:15:cb:b4:b2:fd:45:fb:a2:67: 7c:2f:a9:6d:84:86:e5:a3:f7:a2:58:6c:5a:33:70:f8:fb:e2: f9:b8:0c:1e:86:a9:a7:77:79:29:01:0a:18:5e:da:ca:52:1b: e2:45:78:8b:52:67:7d:6a:36:ce:f4:95:3c:10:f6:a8:48:9e: 7d:b1:2a:9b:ca:3b:05:83:d3:7a:d2:83:a3:88:84:e5:10:fa: 0c:b6:70:78:a5:bb:d6:b0:6f:ea:0c:31:7d:2f:d1:58:0b:e8: 90:30:1b:8a:1e:dd:28:58:75:80:92:e3:1e:77:e1:bb:66:d6: 62:aa:82:c9:33:ef:14:ad:f9:b2:1b:68:35:4d:8b:0a:a9:a1: 7b:24:a3:4a:65:63:32:f7:bf:39:e5:16:eb:f1:41:bf:e5:03: a4:97:0a:c0 -----BEGIN CERTIFICATE----- MIIG6zCCBdOgAwIBAgISAZt/hELuZQzmUFLPOAIWywJnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2U1ODVhNTliNTIzYmI4NmQ2NjBhNzE2OGUxYzFlYmEw OTRkYTAwHhcNMjYwMTAyMTYyMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGUyYzNhOGFjNDQ1NGM3NTY1OWNhNjA2NjczYzMwYjJiOGVkY2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguBgrv6NbvK3FjRYYVCrUAOis9wp 6BahzJzMf+SgwCIQ6ETPWSJiMXuUmT/+MuYbhDXrA3VdaJMDa6yGXbnH/zZMQASD ipX3RSYT/w0g8L1NGxosh06xWltEYyqK0NprqUvpovGwKUmywDDe3HakqNOP9Snt IlTajnAzHA5Njss0oEGIgS+/fpygdyEp2aWgbxaQ/StEeTjmc7cw4BPytXuO/qpf WAmXvfg/Yc/Di7SgJUjUoE1Qi09e8OMnpW4fEo18fYxdzsq0juW/ckUF9frlGuRa V6XacN4CTGqXJ7PLEAB6mSax+JeQ/By19rqA73amgzGNlMg0aw6jsq6soQIDAQAB o4ID9zCCA/MwHQYDVR0OBBYEFBTiw6isRFTHVlnKYGZzwwsrjtzOMB8GA1UdIwQY MBaAFHw+WFpZtSO7htZgpxaOHB66CU2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8yNmUzMmEtMzViYS00NDNmLWJjMWUt NmRjMWY1NjAzMWViLzEvRk9MRHFLeEVWTWRXV2NwZ1puUERDeXVPM000LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8yNmUzMmEtMzViYS00NDNmLWJjMWUtNmRjMWY1NjAzMWVi LzEvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICCwYIKwYBBQUHAQcBAf8EggH6MIIB9jCCAbIEAgABMIIB qgMEAQUIKgMEAAUIRTAMAwQCBWVEAwQABWVGAwQABWXaAwQBBbwCAwQABbwHAwQA BbwjMAwDBAAFvCUDBAMFvCADBAAFvHkwDAMEAAW8lQMEAAW8lgMEAQW8qgMEAgW8 sAMEAAW81AMEAAW84AMEAAW85QMEAAW9yQMEAAW9zQMEAAW93wMEAR+4zAMEAiUJ JAMEAiUJNAMEAiWApAMEAS2TogMEAE+FfwMEAFJhzwMEAFPlDgMEAFPlGQMEAFvz UDAMAwQBW/NSAwQAW/NUAwQAW/NWAwQCXCaAAwQCXCaIAwQBXCaYAwQAXCacAwQC XCa8MAwDBAJc3wQDBABc3wYDBAFc3wgDBABc3w4wDAMEBVzfIAMEAFzfJAMEAFzf JgMEAFzfKQMEAFzfKwMEAFzfMQMEAFzfPAMEAVzfQAMEAFzfQwMEAFzfSAMEAFzf UAMEAFzfVwMEAFzfWwMEAFzfZwMEAFzfagMEAlzfbAMEAVzfcgMEAVzfegMEAF9V WAMEA1+1sAMEApK5xAMEAJK51wMEAJK52gMEALkOLgMEALlliQMEAMERXTA+BAIA AjA4MBADBQYqESfAAwcEKhEnwAAgMBEDBgAqESfAAQMHBSoRJ8ACADARAwYEKhEn wBADBwQqESfAECAwDQYJKoZIhvcNAQELBQADggEBADIpkVeCL2D9RtH1Z1kqcImG m6QvECq38+FxTKuXZ95Tt0MQvFkuo1y4nzYmZ+0KMzO35S/arnFKW6EOQzqOXKjx CdH6hmewUoHuih4VBLpJO14MjJlOOLQLPx3agfHKfUvhdBXLtLL9RfuiZ3wvqW2E huWj96JYbFozcPj74vm4DB6Gqad3eSkBChhe2spSG+JFeItSZ31qNs70lTwQ9qhI nn2xKpvKOwWD03rSg6OIhOUQ+gy2cHilu9awb+oMMX0v0VgL6JAwG4oe3ShYdYCS 4x534btm1mKqgskz7xSt+bIbaDVNiwqpoXsko0plYzL3vznlFuvxQb/lA6SXCsA= -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:54 2026 by rpki-client