This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/v8v2OaJG7Hdhmb6VYMUj66YcSY0.roa File: v8v2OaJG7Hdhmb6VYMUj66YcSY0.roa (raw, json) Hash identifier: B7Lry8kdmTHVcZ/TVSfBhCUi/wQDju0yT/ymY52jHqM= Subject key identifier: BF:CB:F6:39:A2:46:EC:77:61:99:BE:95:60:C5:23:EB:A6:1C:49:8D Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019B78349F23DC23CD5746801B2DBB9E0CAE Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/v8v2OaJG7Hdhmb6VYMUj66YcSY0.roa Signing time: Thu 01 Jan 2026 06:17:53 +0000 ROA not before: Thu 01 Jan 2026 06:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63119 IP address blocks: 23.92.116.0/24 maxlen: 24 23.92.117.0/24 maxlen: 24 23.92.118.0/24 maxlen: 24 23.92.119.0/24 maxlen: 24 23.92.120.0/24 maxlen: 24 23.92.121.0/24 maxlen: 24 23.92.122.0/24 maxlen: 24 23.92.123.0/24 maxlen: 24 23.92.124.0/24 maxlen: 24 23.92.125.0/24 maxlen: 24 104.160.1.0/24 maxlen: 24 104.160.3.0/24 maxlen: 24 104.160.7.0/24 maxlen: 24 104.160.9.0/24 maxlen: 24 104.160.11.0/24 maxlen: 24 104.160.14.0/24 maxlen: 24 104.160.15.0/24 maxlen: 24 104.160.28.0/22 maxlen: 22 104.160.28.0/24 maxlen: 24 104.160.29.0/24 maxlen: 24 104.160.30.0/24 maxlen: 24 104.160.31.0/24 maxlen: 24 107.150.66.0/24 maxlen: 24 107.150.68.0/24 maxlen: 24 107.150.72.0/24 maxlen: 24 107.150.73.0/24 maxlen: 24 107.150.74.0/24 maxlen: 24 107.150.76.0/22 maxlen: 22 107.150.76.0/24 maxlen: 24 107.150.77.0/24 maxlen: 24 107.150.78.0/24 maxlen: 24 107.150.79.0/24 maxlen: 24 107.150.81.0/24 maxlen: 24 107.150.82.0/23 maxlen: 23 107.150.83.0/24 maxlen: 24 107.150.84.0/22 maxlen: 22 107.150.84.0/24 maxlen: 24 107.150.85.0/24 maxlen: 24 107.150.86.0/24 maxlen: 24 107.150.87.0/24 maxlen: 24 158.222.0.0/24 maxlen: 24 158.222.1.0/24 maxlen: 24 158.222.2.0/24 maxlen: 24 158.222.4.0/24 maxlen: 24 158.222.6.0/24 maxlen: 24 158.222.8.0/24 maxlen: 24 158.222.9.0/24 maxlen: 24 158.222.10.0/24 maxlen: 24 158.222.11.0/24 maxlen: 24 158.222.12.0/24 maxlen: 24 158.222.13.0/24 maxlen: 24 158.222.14.0/24 maxlen: 24 158.222.15.0/24 maxlen: 24 192.40.90.0/24 maxlen: 24 192.40.91.0/24 maxlen: 24 192.40.92.0/23 maxlen: 23 192.40.92.0/24 maxlen: 24 192.40.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:9f:23:dc:23:cd:57:46:80:1b:2d:bb:9e:0c:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Jan 1 06:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfcbf639a246ec776199be9560c523eba61c498d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d0:a7:90:d4:ab:0d:f4:ee:be:ef:6f:14:ab: 27:58:e6:53:ca:2d:62:13:7a:37:d5:ea:7a:fd:0f: cb:c7:d3:b7:2d:30:f6:d8:0d:0c:b5:a2:0c:7f:41: 34:12:ff:a4:4f:cf:0f:d6:d1:81:3b:ca:cd:c7:c0: de:b0:2d:f7:a0:01:f2:ba:7a:4a:1f:da:ba:d6:12: a9:5c:90:91:9c:64:aa:83:20:ab:fd:f7:8c:0d:cf: e9:f0:ab:f6:63:e4:65:53:4c:a0:bf:b6:c3:ac:00: 3b:f7:c4:de:fe:1d:74:36:57:2f:bd:05:0f:b9:01: b9:dc:6b:5f:6a:aa:0f:e8:32:c4:82:93:0d:3e:cd: 01:08:49:fe:0d:91:db:8f:9c:00:c3:1a:ae:82:29: 5a:f7:39:3b:d0:70:78:51:5d:66:bb:77:53:85:af: a5:c1:5d:49:3f:18:f1:5b:fe:53:c3:bf:04:64:90: a4:bc:25:87:9e:4d:15:37:d0:3c:ed:9b:dc:c1:4a: 6f:0e:a3:a2:18:18:a4:40:a4:8f:66:a8:22:fd:b0: df:d4:5c:1e:1a:17:65:5e:83:de:c7:4d:4c:80:ff: da:9d:7a:1d:aa:b1:39:76:30:ee:e8:e2:e0:66:32: 5d:35:46:92:e4:b9:34:fb:a3:ac:42:fb:95:b1:2a: a9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CB:F6:39:A2:46:EC:77:61:99:BE:95:60:C5:23:EB:A6:1C:49:8D X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/v8v2OaJG7Hdhmb6VYMUj66YcSY0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.92.116.0-23.92.125.255 104.160.1.0/24 104.160.3.0/24 104.160.7.0/24 104.160.9.0/24 104.160.11.0/24 104.160.14.0/23 104.160.28.0/22 107.150.66.0/24 107.150.68.0/24 107.150.72.0-107.150.74.255 107.150.76.0/22 107.150.81.0-107.150.87.255 158.222.0.0-158.222.2.255 158.222.4.0/24 158.222.6.0/24 158.222.8.0/21 192.40.90.0-192.40.93.255 Signature Algorithm: sha256WithRSAEncryption 29:b1:df:67:77:ba:c4:42:e7:3d:97:7d:e7:3e:42:e6:96:ba: 89:e5:1f:74:a0:96:f6:82:ee:4f:14:ed:b1:c7:7d:c8:95:11: 92:8c:92:1f:21:77:75:1c:10:0b:5c:0d:fd:6c:30:56:79:60: dd:6d:93:51:50:06:8b:b1:30:54:92:0d:78:14:1c:f4:6e:d6: 7f:97:57:8c:59:c8:fa:42:b4:d5:d3:c6:c3:37:5e:7c:c3:20: 0a:61:8d:29:22:09:35:5a:a9:c9:de:6a:4c:35:93:42:98:f0: f2:17:7f:e4:db:40:83:6e:d9:a8:55:21:98:14:5c:ec:5c:5f: 58:1e:1f:ab:7f:5f:e5:8f:10:df:2d:09:08:43:af:9d:b6:9f: 5f:34:af:47:43:1b:a5:e1:d8:81:b4:ae:08:66:14:60:76:ce: 1f:e9:09:09:03:d8:a1:83:be:21:5f:82:e6:93:a5:38:eb:e2: e9:b6:73:c7:9a:95:30:da:b7:86:fb:ae:f5:37:0e:fd:7b:17: 3a:cb:e7:d9:00:27:cc:08:49:97:a6:d5:05:8b:0b:f1:31:76: 24:8b:b1:44:1b:de:f5:c9:28:b1:c9:66:11:9b:13:eb:3c:df: 09:9c:23:6a:21:b0:88:6b:ba:ed:c6:a2:f3:23:5d:a4:e8:11: 49:89:0d:8a -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt4NJ8j3CPNV0aAGy27ngyuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjYwMTAxMDYxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmNiZjYzOWEyNDZlYzc3NjE5OWJlOTU2MGM1MjNlYmE2MWM0OThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tCnkNSrDfTuvu9vFKsnWOZTyi1i E3o31ep6/Q/Lx9O3LTD22A0MtaIMf0E0Ev+kT88P1tGBO8rNx8DesC33oAHyunpK H9q61hKpXJCRnGSqgyCr/feMDc/p8Kv2Y+RlU0ygv7bDrAA798Te/h10NlcvvQUP uQG53GtfaqoP6DLEgpMNPs0BCEn+DZHbj5wAwxqugila9zk70HB4UV1mu3dTha+l wV1JPxjxW/5Tw78EZJCkvCWHnk0VN9A87ZvcwUpvDqOiGBikQKSPZqgi/bDf1Fwe GhdlXoPex01MgP/anXodqrE5djDu6OLgZjJdNUaS5Lk0+6OsQvuVsSqpEQIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFL/L9jmiRux3YZm+lWDFI+umHEmNMB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvdjh2Mk9hSkc3SGRobWI2VllNVWo2NlljU1kwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGwBggrBgEFBQcBBwEB/wSBoDCBnTCBmgQCAAEwgZMwDAME AhdcdAMEARdcfAMEAGigAQMEAGigAwMEAGigBwMEAGigCQMEAGigCwMEAWigDgME AmigHAMEAGuWQgMEAGuWRDAMAwQDa5ZIAwQAa5ZKAwQCa5ZMMAwDBABrllEDBANr llAwCwMDAZ7eAwQAnt4CAwQAnt4EAwQAnt4GAwQDnt4IMAwDBAHAKFoDBAHAKFww DQYJKoZIhvcNAQELBQADggEBACmx32d3usRC5z2Xfec+QuaWuonlH3SglvaC7k8U 7bHHfciVEZKMkh8hd3UcEAtcDf1sMFZ5YN1tk1FQBouxMFSSDXgUHPRu1n+XV4xZ yPpCtNXTxsM3XnzDIAphjSkiCTVaqcneakw1k0KY8PIXf+TbQINu2ahVIZgUXOxc X1geH6t/X+WPEN8tCQhDr522n180r0dDG6Xh2IG0rghmFGB2zh/pCQkD2KGDviFf guaTpTjr4um2c8ealTDat4b7rvU3Dv17FzrL59kAJ8wISZem1QWLC/ExdiSLsUQb 3vXJKLHJZhGbE+s83wmcI2ohsIhruu3GovMjXaToEUmJDYo= -----END CERTIFICATE-----Generated at Sun Jan 25 22:16:58 2026 by rpki-client