This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/1--6A0fn2NhA1NZd62Q5I9zcdB1E.roa File: 1--6A0fn2NhA1NZd62Q5I9zcdB1E.roa (raw, json) Hash identifier: EH25i1o06YPHiAuJedj6ere5DhO1CqohFt6zhHaGS9w= Subject key identifier: FB:EE:80:D1:F9:F6:36:10:35:35:97:7A:D9:0E:48:F7:37:1D:07:51 Certificate issuer: /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6 Certificate serial: 019B78A2B68079872E14581987B3AC460B5D Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/1--6A0fn2NhA1NZd62Q5I9zcdB1E.roa Signing time: Thu 01 Jan 2026 08:18:08 +0000 ROA not before: Thu 01 Jan 2026 08:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20773 IP address blocks: 37.61.208.0/20 maxlen: 24 37.61.212.0/24 maxlen: 24 37.61.214.0/24 maxlen: 24 37.61.215.0/24 maxlen: 24 37.61.221.0/24 maxlen: 24 37.61.223.0/24 maxlen: 24 78.138.96.0/21 maxlen: 24 78.138.97.0/24 maxlen: 24 78.138.104.0/22 maxlen: 24 78.138.126.0/23 maxlen: 24 85.195.64.0/18 maxlen: 24 85.195.75.0/24 maxlen: 24 85.195.76.0/24 maxlen: 24 85.195.82.0/24 maxlen: 24 85.195.83.0/24 maxlen: 24 85.195.85.0/24 maxlen: 24 85.195.86.0/24 maxlen: 24 85.195.88.0/24 maxlen: 24 85.195.89.0/24 maxlen: 24 85.195.90.0/24 maxlen: 24 85.195.91.0/24 maxlen: 24 85.195.92.0/24 maxlen: 24 85.195.93.0/24 maxlen: 24 85.195.95.0/24 maxlen: 24 85.195.96.0/24 maxlen: 24 85.195.98.0/24 maxlen: 24 85.195.99.0/24 maxlen: 24 85.195.100.0/24 maxlen: 24 85.195.102.0/24 maxlen: 24 85.195.103.0/24 maxlen: 24 85.195.107.0/24 maxlen: 24 85.195.109.0/24 maxlen: 24 85.195.110.0/24 maxlen: 24 85.195.114.0/24 maxlen: 24 85.195.115.0/24 maxlen: 24 85.195.116.0/24 maxlen: 24 85.195.119.0/24 maxlen: 24 85.195.120.0/24 maxlen: 24 85.195.124.0/24 maxlen: 24 85.195.127.0/24 maxlen: 24 87.119.195.0/24 maxlen: 24 87.119.220.0/22 maxlen: 24 92.42.104.0/21 maxlen: 24 92.204.160.0/19 maxlen: 24 92.204.162.0/24 maxlen: 24 92.204.186.0/24 maxlen: 24 92.204.194.0/23 maxlen: 24 92.204.240.0/20 maxlen: 24 92.205.32.0/21 maxlen: 24 92.205.112.0/20 maxlen: 24 92.205.152.0/22 maxlen: 24 134.119.182.0/24 maxlen: 24 134.119.207.0/24 maxlen: 24 146.0.224.0/19 maxlen: 24 146.0.226.0/24 maxlen: 24 146.0.227.0/24 maxlen: 24 146.0.228.0/24 maxlen: 24 146.0.230.0/24 maxlen: 24 146.0.232.0/24 maxlen: 24 146.0.234.0/24 maxlen: 24 146.0.235.0/24 maxlen: 24 146.0.236.0/24 maxlen: 24 146.0.237.0/24 maxlen: 24 146.0.245.0/24 maxlen: 24 146.0.247.0/24 maxlen: 24 146.0.249.0/24 maxlen: 24 146.0.250.0/24 maxlen: 24 146.0.251.0/24 maxlen: 24 146.0.255.0/24 maxlen: 24 151.106.14.0/24 maxlen: 24 151.106.31.0/24 maxlen: 24 151.106.57.0/24 maxlen: 24 185.19.216.0/22 maxlen: 24 185.19.216.0/24 maxlen: 24 185.19.217.0/24 maxlen: 24 185.19.218.0/24 maxlen: 24 185.19.219.0/24 maxlen: 24 185.136.156.0/22 maxlen: 24 185.136.158.0/24 maxlen: 24 185.136.160.0/21 maxlen: 24 185.136.160.0/22 maxlen: 24 185.136.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:b6:80:79:87:2e:14:58:19:87:b3:ac:46:0b:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6 Validity Not Before: Jan 1 08:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbee80d1f9f636103535977ad90e48f7371d0751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b2:97:4b:79:b8:6c:c1:0c:2b:6f:77:21:76: 40:5c:7d:6e:e6:9f:50:6b:64:29:15:bb:09:4d:0c: 49:f8:03:01:62:79:d8:94:44:d8:48:7d:9b:89:15: 2d:e3:c2:e7:2b:3e:15:09:6b:aa:be:3b:4b:08:de: e4:83:a2:56:d9:81:59:26:8e:4e:4d:4e:cd:5d:7e: 3c:c0:2e:21:9e:24:19:f2:1e:14:5e:1e:9c:83:cf: 5b:8c:80:50:ab:0d:aa:9f:2f:07:7c:bd:4d:b9:eb: ec:fd:77:ef:ea:cf:5f:15:ff:fd:bc:68:5d:dc:e8: 87:2b:5a:94:3c:2c:36:e5:cd:af:b3:ca:09:a6:f5: 95:48:7e:24:ed:f7:36:98:4d:d7:97:63:ca:f6:88: c5:8f:72:eb:b5:d8:09:22:1e:46:f6:08:d9:f1:29: df:c3:89:31:4a:20:58:29:04:c1:11:30:c2:ec:a8: b0:42:94:c6:1b:22:d9:0e:b7:f1:10:e0:ca:2f:fc: d9:8b:16:9b:8c:47:a2:15:db:a7:f7:eb:7f:a1:25: 6b:a4:a4:9e:41:ce:25:c5:13:32:e6:03:cf:3c:25: 12:65:ce:e8:0e:69:c1:6e:68:6d:9f:09:40:48:50: a8:6a:fb:da:25:ad:0f:3b:45:4e:e3:23:07:e3:88: 40:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EE:80:D1:F9:F6:36:10:35:35:97:7A:D9:0E:48:F7:37:1D:07:51 X509v3 Authority Key Identifier: keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/1--6A0fn2NhA1NZd62Q5I9zcdB1E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.61.208.0/20 78.138.96.0-78.138.107.255 78.138.126.0/23 85.195.64.0/18 87.119.195.0/24 87.119.220.0/22 92.42.104.0/21 92.204.160.0/19 92.204.194.0/23 92.204.240.0/20 92.205.32.0/21 92.205.112.0/20 92.205.152.0/22 134.119.182.0/24 134.119.207.0/24 146.0.224.0/19 151.106.14.0/24 151.106.31.0/24 151.106.57.0/24 185.19.216.0/22 185.136.156.0-185.136.167.255 Signature Algorithm: sha256WithRSAEncryption 70:53:0e:82:ae:57:d5:25:7c:12:95:fd:82:79:e3:35:d2:59: c8:7a:7a:fe:02:37:57:34:45:f9:e5:35:0d:00:5d:86:55:2a: 08:ad:a1:93:c6:60:fc:ed:3d:c9:64:cd:f3:4b:cf:57:2d:a3: a4:04:92:5a:4d:77:45:a4:82:a2:61:17:97:63:91:6f:5d:fc: a7:35:a3:ac:46:fe:e1:9e:c8:c1:55:c7:6c:b6:c1:6f:2e:97: d8:a8:c9:af:64:fd:2b:73:31:76:2b:c8:d8:c4:ea:5a:c8:9d: 36:81:f2:7d:2b:97:76:c8:dc:a9:64:56:a4:2b:61:16:05:24: c0:22:a5:02:05:fd:7c:f1:83:8c:bd:5e:99:d5:40:97:e5:33: 3a:a7:2d:0f:1c:16:49:aa:16:0c:f4:2e:74:86:27:91:14:a3: 75:03:1f:18:40:9a:9a:79:66:f6:8a:5e:02:db:91:67:23:fa: 89:cc:0b:c1:04:67:02:c0:ba:b4:79:d9:a5:ef:6c:74:75:f6: 89:86:79:9e:a6:f4:8b:01:99:c1:37:ba:0e:52:16:a5:a7:2b: 99:6d:48:61:3a:e0:41:ce:2b:a6:c3:12:30:91:ef:00:7d:79: 21:c1:97:9c:86:f8:3c:be:dc:7e:01:b9:aa:88:38:8d:ca:86: f6:c4:c8:b8 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgISAZt4oraAeYcuFFgZh7OsRgtdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZTQ5MThmYzdmZGZiNzNiYmE4Y2Y1OGQ0Y2I1ZmU0NDlj ZjgzZjYwHhcNMjYwMTAxMDgxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmVlODBkMWY5ZjYzNjEwMzUzNTk3N2FkOTBlNDhmNzM3MWQwNzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrKXS3m4bMEMK293IXZAXH1u5p9Q a2QpFbsJTQxJ+AMBYnnYlETYSH2biRUt48LnKz4VCWuqvjtLCN7kg6JW2YFZJo5O TU7NXX48wC4hniQZ8h4UXh6cg89bjIBQqw2qny8HfL1Nuevs/Xfv6s9fFf/9vGhd 3OiHK1qUPCw25c2vs8oJpvWVSH4k7fc2mE3Xl2PK9ojFj3LrtdgJIh5G9gjZ8Snf w4kxSiBYKQTBETDC7KiwQpTGGyLZDrfxEODKL/zZixabjEeiFdun9+t/oSVrpKSe Qc4lxRMy5gPPPCUSZc7oDmnBbmhtnwlASFCoavvaJa0PO0VO4yMH44hAMwIDAQAB o4IClzCCApMwHQYDVR0OBBYEFPvugNH59jYQNTWXetkOSPc3HQdRMB8GA1UdIwQY MBaAFKjkkY/H/ftzu6jPWNTLX+RJz4P2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcU9TUmo4ZjktM083cU05WTFNdGY1RW5QZ19ZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xODVlYjMtMmFiMi00NWI1LWFhMzMt MDE1ZWE1MDE5NTIwLzEvMS0tNkEwZm4yTmhBMU5aZDYyUTVJOXpjZEIxRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDcvMTg1ZWIzLTJhYjItNDViNS1hYTMzLTAxNWVhNTAxOTUy MC8xL3FPU1JqOGY5LTNPN3FNOVkxTXRmNUVuUGdfWS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCBqwYIKwYBBQUHAQcBAf8EgZswgZgwgZUEAgABMIGOAwQE JT3QMAwDBAVOimADBAJOimgDBAFOin4DBAZVw0ADBABXd8MDBAJXd9wDBANcKmgD BAVczKADBAFczMIDBARczPADBANczSADBARczXADBAJczZgDBACGd7YDBACGd88D BAWSAOADBACXag4DBACXah8DBACXajkDBAK5E9gwDAMEArmInAMEA7mIoDANBgkq hkiG9w0BAQsFAAOCAQEAcFMOgq5X1SV8EpX9gnnjNdJZyHp6/gI3VzRF+eU1DQBd hlUqCK2hk8Zg/O09yWTN80vPVy2jpASSWk13RaSComEXl2ORb138pzWjrEb+4Z7I wVXHbLbBby6X2KjJr2T9K3MxdivI2MTqWsidNoHyfSuXdsjcqWRWpCthFgUkwCKl AgX9fPGDjL1emdVAl+UzOqctDxwWSaoWDPQudIYnkRSjdQMfGECamnlm9opeAtuR ZyP6icwLwQRnAsC6tHnZpe9sdHX2iYZ5nqb0iwGZwTe6DlIWpacrmW1IYTrgQc4r psMSMJHvAH15IcGXnIb4PL7cfgG5qog4jcqG9sTIuA== -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:18 2026 by rpki-client