This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/PD8_vExYu3KUb8isykPPtNCFhgs.roa File: PD8_vExYu3KUb8isykPPtNCFhgs.roa (raw, json) Hash identifier: UcYqm/JU5CkglEED1zRFsnuJkQ9M5OPzFIAxmHS6sX8= Subject key identifier: 3C:3F:3F:BC:4C:58:BB:72:94:6F:C8:AC:CA:43:CF:B4:D0:85:86:0B Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd Certificate serial: 019BF5DD2897098DBC3D665168241A99EF76 Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/PD8_vExYu3KUb8isykPPtNCFhgs.roa Signing time: Sun 25 Jan 2026 15:54:30 +0000 ROA not before: Sun 25 Jan 2026 15:54:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204170 IP address blocks: 5.102.176.0/21 maxlen: 21 5.102.176.0/24 maxlen: 24 5.102.178.0/24 maxlen: 24 5.102.179.0/24 maxlen: 24 5.102.180.0/24 maxlen: 24 5.102.181.0/24 maxlen: 24 5.102.182.0/24 maxlen: 24 5.102.183.0/24 maxlen: 24 78.111.32.0/20 maxlen: 20 78.111.32.0/24 maxlen: 24 78.111.33.0/24 maxlen: 24 78.111.34.0/24 maxlen: 24 78.111.35.0/24 maxlen: 24 78.111.36.0/24 maxlen: 24 78.111.37.0/24 maxlen: 24 78.111.38.0/24 maxlen: 24 78.111.39.0/24 maxlen: 24 78.111.40.0/24 maxlen: 24 78.111.41.0/24 maxlen: 24 78.111.42.0/24 maxlen: 24 78.111.43.0/24 maxlen: 24 78.111.44.0/24 maxlen: 24 78.111.45.0/24 maxlen: 24 78.111.46.0/24 maxlen: 24 78.111.47.0/24 maxlen: 24 84.242.32.0/20 maxlen: 20 84.242.32.0/24 maxlen: 24 84.242.33.0/24 maxlen: 24 84.242.34.0/24 maxlen: 24 84.242.35.0/24 maxlen: 24 84.242.36.0/24 maxlen: 24 84.242.37.0/24 maxlen: 24 84.242.38.0/24 maxlen: 24 84.242.39.0/24 maxlen: 24 84.242.40.0/24 maxlen: 24 84.242.41.0/24 maxlen: 24 84.242.42.0/24 maxlen: 24 84.242.43.0/24 maxlen: 24 84.242.44.0/24 maxlen: 24 84.242.45.0/24 maxlen: 24 84.242.46.0/24 maxlen: 24 84.242.47.0/24 maxlen: 24 94.176.16.0/20 maxlen: 20 94.176.16.0/24 maxlen: 24 94.176.17.0/24 maxlen: 24 94.176.18.0/24 maxlen: 24 94.176.19.0/24 maxlen: 24 94.176.20.0/24 maxlen: 24 94.176.21.0/24 maxlen: 24 94.176.22.0/24 maxlen: 24 94.176.23.0/24 maxlen: 24 94.176.24.0/24 maxlen: 24 94.176.25.0/24 maxlen: 24 94.176.26.0/24 maxlen: 24 94.176.27.0/24 maxlen: 24 94.176.28.0/24 maxlen: 24 94.176.29.0/24 maxlen: 24 94.176.30.0/24 maxlen: 24 94.176.31.0/24 maxlen: 24 96.9.128.0/19 maxlen: 19 96.9.128.0/24 maxlen: 24 96.9.129.0/24 maxlen: 24 96.9.130.0/24 maxlen: 24 96.9.131.0/24 maxlen: 24 96.9.132.0/24 maxlen: 24 96.9.133.0/24 maxlen: 24 96.9.134.0/24 maxlen: 24 96.9.135.0/24 maxlen: 24 96.9.136.0/24 maxlen: 24 96.9.137.0/24 maxlen: 24 96.9.138.0/24 maxlen: 24 96.9.139.0/24 maxlen: 24 96.9.140.0/24 maxlen: 24 96.9.141.0/24 maxlen: 24 96.9.142.0/24 maxlen: 24 96.9.143.0/24 maxlen: 24 96.9.144.0/24 maxlen: 24 96.9.146.0/24 maxlen: 24 96.9.147.0/24 maxlen: 24 96.9.148.0/24 maxlen: 24 96.9.149.0/24 maxlen: 24 96.9.150.0/24 maxlen: 24 96.9.151.0/24 maxlen: 24 96.9.152.0/24 maxlen: 24 96.9.153.0/24 maxlen: 24 96.9.154.0/24 maxlen: 24 96.9.155.0/24 maxlen: 24 96.9.156.0/24 maxlen: 24 96.9.157.0/24 maxlen: 24 96.9.158.0/24 maxlen: 24 96.9.159.0/24 maxlen: 24 141.105.168.0/21 maxlen: 21 141.105.168.0/24 maxlen: 24 141.105.169.0/24 maxlen: 24 141.105.170.0/24 maxlen: 24 141.105.171.0/24 maxlen: 24 141.105.172.0/24 maxlen: 24 141.105.173.0/24 maxlen: 24 141.105.174.0/24 maxlen: 24 141.105.175.0/24 maxlen: 24 178.20.16.0/21 maxlen: 21 178.20.16.0/24 maxlen: 24 178.20.17.0/24 maxlen: 24 178.20.18.0/24 maxlen: 24 178.20.19.0/24 maxlen: 24 178.20.20.0/24 maxlen: 24 178.20.21.0/24 maxlen: 24 178.20.22.0/24 maxlen: 24 178.20.23.0/24 maxlen: 24 185.29.140.0/22 maxlen: 22 185.29.140.0/24 maxlen: 24 185.29.141.0/24 maxlen: 24 185.29.142.0/24 maxlen: 24 185.29.143.0/24 maxlen: 24 185.112.104.0/22 maxlen: 22 185.112.104.0/24 maxlen: 24 185.112.105.0/24 maxlen: 24 185.112.106.0/24 maxlen: 24 185.112.107.0/24 maxlen: 24 199.48.224.0/24 maxlen: 24 206.167.33.0/24 maxlen: 24 2a0a:c740:2::/48 maxlen: 48 2a0a:c740:4::/48 maxlen: 48 2a0a:c740:5::/48 maxlen: 48 2a0a:c740:7::/48 maxlen: 48 2a0a:c740:8::/48 maxlen: 48 2a0a:c740:a::/48 maxlen: 48 2a0a:c740:b::/48 maxlen: 48 2a0a:c740:100::/48 maxlen: 48 2a0a:c740:1009::/48 maxlen: 48 2a0a:c740:1063::/48 maxlen: 48 2a0a:c740:1064::/48 maxlen: 48 2a0a:c740:2000::/48 maxlen: 48 2a0a:c740:2009::/48 maxlen: 48 2a0a:c740:2063::/48 maxlen: 48 2a0a:c740:2064::/48 maxlen: 48 2a0a:c740:9998::/48 maxlen: 48 2a0a:c740:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:dd:28:97:09:8d:bc:3d:66:51:68:24:1a:99:ef:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd Validity Not Before: Jan 25 15:54:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c3f3fbc4c58bb72946fc8acca43cfb4d085860b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:df:db:a4:aa:85:4e:8e:a8:a8:e5:10:52:1b: 35:5e:6a:2a:86:11:74:86:e2:21:11:de:60:8c:44: e2:e3:e0:2a:72:84:48:80:ed:f4:75:a6:a1:30:70: f1:43:ec:d5:4e:69:a8:05:9b:84:0e:e7:58:e4:b2: 99:12:19:ef:c0:c2:84:12:1b:11:44:8f:db:e8:4f: 70:e0:34:48:81:9e:c6:52:23:d6:ab:78:f4:ce:15: 08:36:5b:ba:ac:8b:1f:c4:78:bc:c2:fe:13:fe:47: b3:94:8d:5b:22:cf:84:97:89:c9:3d:f9:90:ae:6d: 32:7a:22:42:ca:ee:dd:40:54:63:bf:f8:d4:04:dd: 1f:40:b1:93:14:32:c5:a7:50:c9:78:46:20:83:86: 1b:f0:1e:a8:04:17:34:df:f6:25:72:c2:d1:b0:cd: 5f:ec:6b:79:71:8b:a7:59:aa:29:e8:e7:53:a9:b4: e6:ec:0d:51:6d:c8:56:23:73:d9:1a:35:fd:5e:61: 27:e5:d3:d3:c6:70:7b:ba:89:26:4c:a1:2a:aa:f5: 24:c8:79:23:0d:6d:14:86:fb:68:e6:15:b2:e9:f5: ce:7f:eb:43:9a:64:34:fe:9a:f9:ed:16:88:83:a9: f3:ef:0b:8d:d6:1d:1e:5b:ef:75:d6:b3:6b:a0:84: 12:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3F:3F:BC:4C:58:BB:72:94:6F:C8:AC:CA:43:CF:B4:D0:85:86:0B X509v3 Authority Key Identifier: keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/PD8_vExYu3KUb8isykPPtNCFhgs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.176.0/21 78.111.32.0/20 84.242.32.0/20 94.176.16.0/20 96.9.128.0/19 141.105.168.0/21 178.20.16.0/21 185.29.140.0/22 185.112.104.0/22 199.48.224.0/24 206.167.33.0/24 IPv6: 2a0a:c740:2::/48 2a0a:c740:4::/47 2a0a:c740:7::-2a0a:c740:8:ffff:ffff:ffff:ffff:ffff 2a0a:c740:a::/47 2a0a:c740:100::/48 2a0a:c740:1009::/48 2a0a:c740:1063::-2a0a:c740:1064:ffff:ffff:ffff:ffff:ffff 2a0a:c740:2000::/48 2a0a:c740:2009::/48 2a0a:c740:2063::-2a0a:c740:2064:ffff:ffff:ffff:ffff:ffff 2a0a:c740:9998::/48 2a0a:c740:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 07:e1:d5:af:28:ef:9f:5f:99:2e:59:4e:86:6c:5d:dd:8f:7f: 2a:c3:b6:0e:04:c6:6a:16:c5:e3:2c:ef:b7:24:41:9d:46:60: 34:2c:26:43:9b:1b:7c:b3:b6:e4:a8:62:1b:a5:42:82:98:84: b3:f7:9a:3b:10:ac:52:32:ad:bf:11:82:90:63:4f:e2:e4:25: 8a:85:ac:0d:b4:18:3d:84:bb:40:cd:d7:c6:b3:f3:5a:45:b4: bd:fc:8f:63:ad:49:dc:6a:13:d5:39:bd:7e:33:a1:20:36:43: 15:b6:2b:d8:83:af:ae:ce:5c:1b:d0:60:8d:af:84:5f:52:65: 95:2b:a0:1d:c1:14:52:35:62:24:bf:83:e2:d6:0a:00:e4:52: 2d:63:f6:d2:2a:a6:38:f1:7a:73:b9:7d:52:9c:79:e8:c0:c1: 8b:d5:f0:18:1f:51:b9:52:ad:eb:1a:30:14:6b:d6:dc:98:9f: 80:fa:e1:f6:5a:be:b9:09:87:62:7b:b3:81:78:eb:64:91:3d: 19:76:32:26:d4:1c:e7:80:61:8d:91:1a:0c:73:98:0b:8a:a7: d2:01:a2:f9:1e:f1:3b:5e:ce:cc:e8:e3:60:64:62:c6:79:c6: f6:2a:e9:1c:17:f0:15:d0:38:1e:09:6d:c0:45:b8:1a:56:24: 3d:10:0a:4d -----BEGIN CERTIFICATE----- MIIF0zCCBLugAwIBAgISAZv13SiXCY28PWZRaCQame92MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNTUwYjhlZmY5MGNjY2VlOWY4ZDMxMzRiNjQzODk5NmI3 ZDI3Y2QwHhcNMjYwMTI1MTU1NDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzNmM2ZiYzRjNThiYjcyOTQ2ZmM4YWNjYTQzY2ZiNGQwODU4NjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd/bpKqFTo6oqOUQUhs1XmoqhhF0 huIhEd5gjETi4+AqcoRIgO30daahMHDxQ+zVTmmoBZuEDudY5LKZEhnvwMKEEhsR RI/b6E9w4DRIgZ7GUiPWq3j0zhUINlu6rIsfxHi8wv4T/kezlI1bIs+El4nJPfmQ rm0yeiJCyu7dQFRjv/jUBN0fQLGTFDLFp1DJeEYgg4Yb8B6oBBc03/YlcsLRsM1f 7Gt5cYunWaop6OdTqbTm7A1RbchWI3PZGjX9XmEn5dPTxnB7uokmTKEqqvUkyHkj DW0Uhvto5hWy6fXOf+tDmmQ0/pr57RaIg6nz7wuN1h0eW+911rNroIQSzwIDAQAB o4IC3zCCAtswHQYDVR0OBBYEFDw/P7xMWLtylG/IrMpDz7TQhYYLMB8GA1UdIwQY MBaAFL5VC47/kMzO6fjTE0tkOJlrfSfNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmxVTGp2LVF6TTdwLU5NVFMyUTRtV3Q5SjgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8zNDBkY2QtM2FlZS00MDEyLTkyMzMt YzE1NTMyYmFmZjdkLzEvUEQ4X3ZFeFl1M0tVYjhpc3lrUFB0TkNGaGdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8zNDBkY2QtM2FlZS00MDEyLTkyMzMtYzE1NTMyYmFmZjdk LzEvdmxVTGp2LVF6TTdwLU5NVFMyUTRtV3Q5SjgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH0BggrBgEFBQcBBwEB/wSB5DCB4TBIBAIAATBCAwQDBWaw AwQETm8gAwQEVPIgAwQEXrAQAwQFYAmAAwQDjWmoAwQDshQQAwQCuR2MAwQCuXBo AwQAxzDgAwQAzqchMIGUBAIAAjCBjQMHACoKx0AAAgMHASoKx0AABDASAwcAKgrH QAAHAwcAKgrHQAAIAwcBKgrHQAAKAwcAKgrHQAEAAwcAKgrHQBAJMBIDBwAqCsdA EGMDBwAqCsdAEGQDBwAqCsdAIAADBwAqCsdAIAkwEgMHACoKx0AgYwMHACoKx0Ag ZAMHACoKx0CZmAMHACoKx0D//zANBgkqhkiG9w0BAQsFAAOCAQEAB+HVryjvn1+Z LllOhmxd3Y9/KsO2DgTGahbF4yzvtyRBnUZgNCwmQ5sbfLO25KhiG6VCgpiEs/ea OxCsUjKtvxGCkGNP4uQlioWsDbQYPYS7QM3XxrPzWkW0vfyPY61J3GoT1Tm9fjOh IDZDFbYr2IOvrs5cG9Bgja+EX1JllSugHcEUUjViJL+D4tYKAORSLWP20iqmOPF6 c7l9Upx56MDBi9XwGB9RuVKt6xowFGvW3JifgPrh9lq+uQmHYnuzgXjrZJE9GXYy JtQc54BhjZEaDHOYC4qn0gGi+R7xO17OzOjjYGRixnnG9irpHBfwFdA4HgltwEW4 GlYkPRAKTQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:59 2026 by rpki-client