This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/1cB9lohxPvW0aZ8d9tUcZB_hbpA.roa File: 1cB9lohxPvW0aZ8d9tUcZB_hbpA.roa (raw, json) Hash identifier: ZGgmXtZjF6LTHZxN99Ge2atwtWdo2BL+hrKZeJQ6mA4= Subject key identifier: D5:C0:7D:96:88:71:3E:F5:B4:69:9F:1D:F6:D5:1C:64:1F:E1:6E:90 Certificate issuer: /CN=845c2379efed10056cf865d52c32e1e1eba8c140 Certificate serial: 019B7FF27D21C742E59A4362CEDD32843C71 Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/1cB9lohxPvW0aZ8d9tUcZB_hbpA.roa Signing time: Fri 02 Jan 2026 18:22:36 +0000 ROA not before: Fri 02 Jan 2026 18:22:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20845 IP address blocks: 62.77.196.0/22 maxlen: 24 62.77.240.0/23 maxlen: 24 62.77.248.0/21 maxlen: 24 62.165.192.0/18 maxlen: 24 77.234.64.0/19 maxlen: 24 78.131.0.0/17 maxlen: 24 79.120.160.0/21 maxlen: 24 79.120.170.0/23 maxlen: 24 79.120.172.0/22 maxlen: 24 79.120.248.0/23 maxlen: 24 79.120.252.0/22 maxlen: 24 80.95.64.0/19 maxlen: 24 81.0.82.0/23 maxlen: 24 81.0.84.0/22 maxlen: 24 81.0.90.0/23 maxlen: 24 81.0.92.0/22 maxlen: 24 81.0.98.0/23 maxlen: 24 81.0.108.0/23 maxlen: 24 81.0.122.0/23 maxlen: 24 81.0.126.0/23 maxlen: 24 81.17.176.0/20 maxlen: 24 82.131.128.0/19 maxlen: 24 82.131.182.0/23 maxlen: 24 82.131.184.0/21 maxlen: 24 82.131.196.0/23 maxlen: 24 82.131.198.0/24 maxlen: 24 82.131.200.0/21 maxlen: 24 82.131.216.0/21 maxlen: 24 82.131.224.0/19 maxlen: 24 82.144.164.0/22 maxlen: 24 82.144.172.0/22 maxlen: 24 82.144.176.0/23 maxlen: 24 82.144.188.0/23 maxlen: 24 84.236.0.0/17 maxlen: 24 85.66.0.0/15 maxlen: 24 85.238.64.0/19 maxlen: 24 87.97.0.0/18 maxlen: 24 87.97.80.0/20 maxlen: 24 87.97.96.0/19 maxlen: 24 89.147.64.0/20 maxlen: 24 89.147.96.0/22 maxlen: 24 89.147.112.0/21 maxlen: 24 89.148.64.0/18 maxlen: 24 89.186.96.0/23 maxlen: 24 89.186.102.0/23 maxlen: 24 89.186.106.0/23 maxlen: 24 89.186.108.0/22 maxlen: 24 89.186.112.0/22 maxlen: 24 89.186.118.0/23 maxlen: 24 89.186.120.0/21 maxlen: 24 91.82.0.0/21 maxlen: 24 91.82.24.0/21 maxlen: 24 91.82.32.0/21 maxlen: 24 91.82.56.0/23 maxlen: 24 91.82.60.0/23 maxlen: 24 91.82.64.0/21 maxlen: 24 91.82.82.0/23 maxlen: 24 91.82.130.0/23 maxlen: 24 91.82.132.0/22 maxlen: 24 91.82.136.0/21 maxlen: 24 91.82.144.0/22 maxlen: 24 91.82.160.0/21 maxlen: 24 91.82.168.0/22 maxlen: 24 91.82.172.0/23 maxlen: 24 91.82.176.0/21 maxlen: 24 91.82.188.0/22 maxlen: 24 91.82.210.0/23 maxlen: 24 91.82.212.0/22 maxlen: 24 91.82.228.0/22 maxlen: 24 91.82.232.0/22 maxlen: 24 91.82.240.0/22 maxlen: 24 91.82.250.0/23 maxlen: 24 91.83.0.0/19 maxlen: 24 91.83.32.0/21 maxlen: 24 91.83.52.0/22 maxlen: 24 91.83.94.0/23 maxlen: 24 91.83.102.0/23 maxlen: 24 91.83.110.0/23 maxlen: 24 91.83.120.0/23 maxlen: 24 91.83.136.0/21 maxlen: 24 91.83.144.0/23 maxlen: 24 91.83.154.0/23 maxlen: 24 91.83.180.0/22 maxlen: 24 91.83.184.0/21 maxlen: 24 91.83.192.0/20 maxlen: 24 91.83.252.0/23 maxlen: 24 92.52.224.0/19 maxlen: 24 92.245.64.0/19 maxlen: 24 92.249.128.0/17 maxlen: 24 94.21.0.0/16 maxlen: 24 94.247.88.0/21 maxlen: 24 176.241.0.0/18 maxlen: 24 178.164.128.0/17 maxlen: 24 185.29.80.0/22 maxlen: 24 185.62.128.0/22 maxlen: 24 188.142.128.0/19 maxlen: 24 188.143.0.0/17 maxlen: 24 193.110.56.0/21 maxlen: 24 193.226.192.0/23 maxlen: 24 193.226.212.0/22 maxlen: 24 193.226.226.0/23 maxlen: 24 193.226.232.0/23 maxlen: 24 193.226.238.0/23 maxlen: 24 193.226.240.0/23 maxlen: 24 193.226.244.0/22 maxlen: 24 193.226.248.0/23 maxlen: 24 195.38.96.0/19 maxlen: 24 212.40.72.0/21 maxlen: 24 212.40.80.0/20 maxlen: 24 213.197.72.0/21 maxlen: 24 213.197.80.0/20 maxlen: 24 217.197.176.0/20 maxlen: 24 2a01:368::/29 maxlen: 48 2a01:368::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:7d:21:c7:42:e5:9a:43:62:ce:dd:32:84:3c:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140 Validity Not Before: Jan 2 18:22:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5c07d9688713ef5b4699f1df6d51c641fe16e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c4:5a:40:57:b7:69:86:ef:04:ef:7e:24:96: cb:a3:4d:9b:d6:75:12:88:de:59:01:8f:e4:a2:40: 45:5b:da:34:de:50:86:71:b2:a1:0b:49:46:3a:a8: e1:43:91:da:06:6c:35:20:ba:b4:0a:86:cf:67:35: c5:21:9e:a4:5e:8a:b8:65:75:46:cd:a8:fa:85:53: 86:f4:21:16:74:73:36:42:ab:49:b4:6c:38:9e:65: da:34:5c:d0:75:23:16:a4:91:05:96:a7:03:71:4c: eb:c8:85:f0:0c:ac:a6:db:8d:84:59:80:82:c5:62: 38:35:c0:0a:d3:d2:0f:b7:9e:e5:c6:25:04:91:a6: 2f:69:3b:bc:85:95:02:90:c3:c3:0e:63:62:24:fc: 3e:31:40:69:fa:7a:ce:5a:fd:89:c2:32:c2:a1:e4: 84:3f:89:36:f2:5b:7d:3a:41:0b:6c:a4:b3:96:91: ab:7a:27:18:c2:4c:87:9b:bd:51:a2:5a:eb:f1:6c: 24:49:6d:b7:fb:28:f5:82:c8:19:55:e5:89:02:46: 0a:16:6c:50:a7:c2:5f:e1:84:1b:3a:e5:10:1d:6e: c1:bc:37:37:93:79:f9:4b:91:26:9c:14:b2:21:1f: 6a:93:f1:87:f0:7a:15:22:7f:07:ff:13:d2:81:9a: 66:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C0:7D:96:88:71:3E:F5:B4:69:9F:1D:F6:D5:1C:64:1F:E1:6E:90 X509v3 Authority Key Identifier: keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/1cB9lohxPvW0aZ8d9tUcZB_hbpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.77.196.0/22 62.77.240.0/23 62.77.248.0/21 62.165.192.0/18 77.234.64.0/19 78.131.0.0/17 79.120.160.0/21 79.120.170.0-79.120.175.255 79.120.248.0/23 79.120.252.0/22 80.95.64.0/19 81.0.82.0-81.0.87.255 81.0.90.0-81.0.95.255 81.0.98.0/23 81.0.108.0/23 81.0.122.0/23 81.0.126.0/23 81.17.176.0/20 82.131.128.0/19 82.131.182.0-82.131.191.255 82.131.196.0-82.131.198.255 82.131.200.0/21 82.131.216.0-82.131.255.255 82.144.164.0/22 82.144.172.0-82.144.177.255 82.144.188.0/23 84.236.0.0/17 85.66.0.0/15 85.238.64.0/19 87.97.0.0/18 87.97.80.0-87.97.127.255 89.147.64.0/20 89.147.96.0/22 89.147.112.0/21 89.148.64.0/18 89.186.96.0/23 89.186.102.0/23 89.186.106.0-89.186.115.255 89.186.118.0-89.186.127.255 91.82.0.0/21 91.82.24.0-91.82.39.255 91.82.56.0/23 91.82.60.0/23 91.82.64.0/21 91.82.82.0/23 91.82.130.0-91.82.147.255 91.82.160.0-91.82.173.255 91.82.176.0/21 91.82.188.0/22 91.82.210.0-91.82.215.255 91.82.228.0-91.82.235.255 91.82.240.0/22 91.82.250.0/23 91.83.0.0-91.83.39.255 91.83.52.0/22 91.83.94.0/23 91.83.102.0/23 91.83.110.0/23 91.83.120.0/23 91.83.136.0-91.83.145.255 91.83.154.0/23 91.83.180.0-91.83.207.255 91.83.252.0/23 92.52.224.0/19 92.245.64.0/19 92.249.128.0/17 94.21.0.0/16 94.247.88.0/21 176.241.0.0/18 178.164.128.0/17 185.29.80.0/22 185.62.128.0/22 188.142.128.0/19 188.143.0.0/17 193.110.56.0/21 193.226.192.0/23 193.226.212.0/22 193.226.226.0/23 193.226.232.0/23 193.226.238.0-193.226.241.255 193.226.244.0-193.226.249.255 195.38.96.0/19 212.40.72.0-212.40.95.255 213.197.72.0-213.197.95.255 217.197.176.0/20 IPv6: 2a01:368::/29 Signature Algorithm: sha256WithRSAEncryption 0d:dd:5c:d7:1b:84:c7:90:cd:ea:aa:89:8c:d1:22:cb:45:7d: e8:fa:e0:47:33:7a:4c:69:3e:27:03:dd:f1:7f:3f:04:fd:58: 13:f0:0f:13:a0:55:ca:de:d6:c6:c2:59:b0:92:0b:e1:46:b0: 01:2f:b4:c7:bc:9f:4f:a6:93:26:de:50:84:bc:ff:d0:0c:d1: 0c:f6:b5:12:12:2f:31:71:57:1f:3a:0f:9b:50:51:17:d7:79: 31:f5:2d:7a:16:11:9b:c8:c8:39:1e:39:46:b4:e5:d0:a7:1a: cc:12:76:99:00:93:19:4d:5a:67:88:6a:c4:0a:27:c5:02:d7: d5:5d:b5:e7:58:12:03:3c:d9:7c:bb:50:82:f9:8a:15:13:03: 6c:9e:b2:9f:ea:af:8f:29:e0:19:9c:0e:ec:1d:4f:05:c2:69: de:3b:5a:5c:f4:23:25:e8:ea:72:2c:35:c5:f5:c5:e4:52:7b: 97:2f:8f:38:fb:33:03:83:8c:99:d3:d1:9c:bb:8c:2d:73:3d: 59:ad:ce:81:e6:0e:33:90:fe:b5:d9:6c:d2:19:5f:76:9b:d2: 1a:a2:c1:ee:3a:15:aa:d5:87:b8:c8:b6:0d:11:38:61:1d:20: 2c:3a:a3:9c:06:75:63:ad:eb:ef:07:9f:b9:b6:c6:45:8c:2d: 06:21:c7:a6 -----BEGIN CERTIFICATE----- MIIHujCCBqKgAwIBAgISAZt/8n0hx0LlmkNizt0yhDxxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NWMyMzc5ZWZlZDEwMDU2Y2Y4NjVkNTJjMzJlMWUxZWJh OGMxNDAwHhcNMjYwMTAyMTgyMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWMwN2Q5Njg4NzEzZWY1YjQ2OTlmMWRmNmQ1MWM2NDFmZTE2ZTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8RaQFe3aYbvBO9+JJbLo02b1nUS iN5ZAY/kokBFW9o03lCGcbKhC0lGOqjhQ5HaBmw1ILq0CobPZzXFIZ6kXoq4ZXVG zaj6hVOG9CEWdHM2QqtJtGw4nmXaNFzQdSMWpJEFlqcDcUzryIXwDKym242EWYCC xWI4NcAK09IPt57lxiUEkaYvaTu8hZUCkMPDDmNiJPw+MUBp+nrOWv2JwjLCoeSE P4k28lt9OkELbKSzlpGreicYwkyHm71Rolrr8WwkSW23+yj1gsgZVeWJAkYKFmxQ p8Jf4YQbOuUQHW7BvDc3k3n5S5EmnBSyIR9qk/GH8HoVIn8H/xPSgZpmZwIDAQAB o4IExjCCBMIwHQYDVR0OBBYEFNXAfZaIcT71tGmfHfbVHGQf4W6QMB8GA1UdIwQY MBaAFIRcI3nv7RAFbPhl1Swy4eHrqMFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZ3amVlX3RFQVZzLUdYVkxETGg0ZXVvd1VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82MGU4ZmEtZWM1Yy00NTk0LTllYzQt YmU3YTFhMDAxY2NmLzEvMWNCOWxvaHhQdlcwYVo4ZDl0VWNaQl9oYnBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS82MGU4ZmEtZWM1Yy00NTk0LTllYzQtYmU3YTFhMDAxY2Nm LzEvaEZ3amVlX3RFQVZzLUdYVkxETGg0ZXVvd1VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIC2gYIKwYBBQUHAQcBAf8EggLJMIICxTCCArIEAgABMIIC qgMEAj5NxAMEAT5N8AMEAz5N+AMEBj6lwAMEBU3qQAMEB06DAAMEA094oDAMAwQB T3iqAwQET3igAwQBT3j4AwQCT3j8AwQFUF9AMAwDBAFRAFIDBANRAFAwDAMEAVEA WgMEBVEAQAMEAVEAYgMEAVEAbAMEAVEAegMEAVEAfgMEBFERsAMEBVKDgDAMAwQB UoO2AwQGUoOAMAwDBAJSg8QDBABSg8YDBANSg8gwCwMEA1KD2AMDAlKAAwQCUpCk MAwDBAJSkKwDBAFSkLADBAFSkLwDBAdU7AADAwFVQgMEBVXuQAMEBldhADAMAwQE V2FQAwQHV2EAAwQEWZNAAwQCWZNgAwQDWZNwAwQGWZRAAwQBWbpgAwQBWbpmMAwD BAFZumoDBAJZunAwDAMEAVm6dgMEB1m6AAMEA1tSADAMAwQDW1IYAwQDW1IgAwQB W1I4AwQBW1I8AwQDW1JAAwQBW1JSMAwDBAFbUoIDBAJbUpAwDAMEBVtSoAMEAVtS rAMEA1tSsAMEAltSvDAMAwQBW1LSAwQDW1LQMAwDBAJbUuQDBAJbUugDBAJbUvAD BAFbUvowCwMDAFtTAwQDW1MgAwQCW1M0AwQBW1NeAwQBW1NmAwQBW1NuAwQBW1N4 MAwDBANbU4gDBAFbU5ADBAFbU5owDAMEAltTtAMEBFtTwAMEAVtT/AMEBVw04AME BVz1QAMEB1z5gAMDAF4VAwQDXvdYAwQGsPEAAwQHsqSAAwQCuR1QAwQCuT6AAwQF vI6AAwQHvI8AAwQDwW44AwQBweLAAwQCweLUAwQBweLiAwQBweLoMAwDBAHB4u4D BAHB4vAwDAMEAsHi9AMEAcHi+AMEBcMmYDAMAwQD1ChIAwQF1ChAMAwDBAPVxUgD BAXVxUADBATZxbAwDQQCAAIwBwMFAyoBA2gwDQYJKoZIhvcNAQELBQADggEBAA3d XNcbhMeQzeqqiYzRIstFfej64EczekxpPicD3fF/PwT9WBPwDxOgVcre1sbCWbCS C+FGsAEvtMe8n0+mkybeUIS8/9AM0Qz2tRISLzFxVx86D5tQURfXeTH1LXoWEZvI yDkeOUa05dCnGswSdpkAkxlNWmeIasQKJ8UC19VdtedYEgM82Xy7UIL5ihUTA2ye sp/qr48p4BmcDuwdTwXCad47Wlz0IyXo6nIsNcX1xeRSe5cvjzj7MwODjJnT0Zy7 jC1zPVmtzoHmDjOQ/rXZbNIZX3ab0hqiwe46FarVh7jItg0ROGEdICw6o5wGdWOt 6+8Hn7m2xkWMLQYhx6Y= -----END CERTIFICATE-----Generated at Sun Jan 25 17:39:55 2026 by rpki-client