This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/C0mI0v3AUYRPG8yTqF1QgFx7xU0.roa File: C0mI0v3AUYRPG8yTqF1QgFx7xU0.roa (raw, json) Hash identifier: NZkJ/jcOZzqhSAxEfG1FbsPeSS23tdRhxk92nPlXNFM= Subject key identifier: 0B:49:88:D2:FD:C0:51:84:4F:1B:CC:93:A8:5D:50:80:5C:7B:C5:4D Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f Certificate serial: 019B77C6AA3816D85FAAB8A6A89CEBAF26E1 Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/C0mI0v3AUYRPG8yTqF1QgFx7xU0.roa Signing time: Thu 01 Jan 2026 04:17:46 +0000 ROA not before: Thu 01 Jan 2026 04:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15625 IP address blocks: 145.221.0.0/16 maxlen: 16 145.221.0.0/17 maxlen: 17 145.221.36.0/24 maxlen: 24 145.221.37.0/24 maxlen: 24 145.221.38.0/24 maxlen: 24 145.221.39.0/24 maxlen: 24 145.221.40.0/24 maxlen: 24 145.221.41.0/24 maxlen: 24 145.221.42.0/24 maxlen: 24 145.221.43.0/24 maxlen: 24 145.221.64.0/24 maxlen: 24 145.221.65.0/24 maxlen: 24 145.221.66.0/24 maxlen: 24 145.221.67.0/24 maxlen: 24 145.221.68.0/24 maxlen: 24 145.221.69.0/24 maxlen: 24 145.221.70.0/24 maxlen: 24 145.221.71.0/24 maxlen: 24 145.221.76.0/24 maxlen: 24 145.221.77.0/24 maxlen: 24 145.221.78.0/24 maxlen: 24 145.221.79.0/24 maxlen: 24 145.221.80.0/24 maxlen: 24 145.221.81.0/24 maxlen: 24 145.221.82.0/24 maxlen: 24 145.221.83.0/24 maxlen: 24 145.221.84.0/24 maxlen: 24 145.221.85.0/24 maxlen: 24 145.221.86.0/24 maxlen: 24 145.221.87.0/24 maxlen: 24 145.221.92.0/24 maxlen: 24 145.221.93.0/24 maxlen: 24 145.221.94.0/24 maxlen: 24 145.221.95.0/24 maxlen: 24 145.221.99.0/24 maxlen: 24 145.221.128.0/17 maxlen: 17 145.221.176.0/24 maxlen: 24 145.221.177.0/24 maxlen: 24 145.221.178.0/24 maxlen: 24 145.221.179.0/24 maxlen: 24 145.221.180.0/24 maxlen: 24 145.221.181.0/24 maxlen: 24 145.221.182.0/24 maxlen: 24 145.221.183.0/24 maxlen: 24 145.221.184.0/24 maxlen: 24 145.221.185.0/24 maxlen: 24 145.221.186.0/24 maxlen: 24 145.221.188.0/24 maxlen: 24 145.221.189.0/24 maxlen: 24 145.221.190.0/24 maxlen: 24 145.221.193.0/24 maxlen: 24 145.221.208.0/24 maxlen: 24 145.221.209.0/24 maxlen: 24 145.221.210.0/24 maxlen: 24 145.221.211.0/24 maxlen: 24 145.221.212.0/24 maxlen: 24 145.221.213.0/24 maxlen: 24 145.221.214.0/24 maxlen: 24 145.221.215.0/24 maxlen: 24 145.221.216.0/24 maxlen: 24 145.221.217.0/24 maxlen: 24 145.221.219.0/24 maxlen: 24 145.221.220.0/24 maxlen: 24 145.221.221.0/24 maxlen: 24 145.221.222.0/24 maxlen: 24 145.221.252.0/24 maxlen: 24 145.221.253.0/24 maxlen: 24 145.221.254.0/24 maxlen: 24 145.221.255.0/24 maxlen: 24 156.114.128.0/18 maxlen: 18 156.114.128.0/19 maxlen: 19 156.114.128.0/24 maxlen: 24 156.114.129.0/24 maxlen: 24 156.114.130.0/24 maxlen: 24 156.114.131.0/24 maxlen: 24 156.114.132.0/24 maxlen: 24 156.114.133.0/24 maxlen: 24 156.114.134.0/24 maxlen: 24 156.114.135.0/24 maxlen: 24 156.114.136.0/24 maxlen: 24 156.114.153.0/24 maxlen: 24 156.114.154.0/24 maxlen: 24 156.114.155.0/24 maxlen: 24 156.114.160.0/19 maxlen: 19 156.114.160.0/24 maxlen: 24 156.114.161.0/24 maxlen: 24 156.114.162.0/24 maxlen: 24 156.114.163.0/24 maxlen: 24 156.114.164.0/24 maxlen: 24 156.114.165.0/24 maxlen: 24 156.114.167.0/24 maxlen: 24 156.114.168.0/24 maxlen: 24 156.114.185.0/24 maxlen: 24 156.114.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:aa:38:16:d8:5f:aa:b8:a6:a8:9c:eb:af:26:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f Validity Not Before: Jan 1 04:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b4988d2fdc051844f1bcc93a85d50805c7bc54d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:86:3e:69:1e:9a:58:14:d4:e4:d1:ae:de:6e: 56:a1:c3:fc:4b:d7:2c:95:02:f6:87:8a:11:b4:d7: 1c:95:24:e4:c5:d7:52:1f:9a:f5:fa:1f:7c:01:cd: 50:fd:62:01:5a:a1:c0:3c:86:40:88:5f:b9:16:b7: 1d:b3:cd:09:59:6a:74:62:d6:aa:ae:8e:80:f3:7a: bb:67:6a:fd:f5:23:15:f3:f5:c6:f8:71:9c:fb:43: be:83:6d:73:72:d6:c3:bb:5d:0e:29:21:c0:89:33: c6:dd:2a:35:24:d1:d1:ed:67:5e:96:0c:b8:44:b3: a8:39:96:83:2d:33:f4:c9:2b:f2:9a:db:ba:ea:33: 7f:74:d9:a5:e8:23:53:b9:68:6f:88:ec:cd:3b:27: a4:4b:bc:42:c8:b0:c8:18:ae:42:33:0b:7f:1f:65: e5:13:6f:f6:a8:ca:d1:5a:da:f4:8b:6b:69:89:ac: e9:f2:89:c4:30:f6:26:5e:cd:cc:01:cf:39:4c:c6: b9:ca:16:0a:52:71:e4:08:8d:19:7c:87:bb:8e:6e: cf:d1:09:10:04:15:79:23:75:0c:bd:e2:0b:7b:c1: fe:aa:83:ae:42:b9:ad:e7:fa:0e:46:80:44:f6:b7: 13:24:df:f3:d2:10:06:33:b7:74:6c:99:77:c7:9a: 98:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:49:88:D2:FD:C0:51:84:4F:1B:CC:93:A8:5D:50:80:5C:7B:C5:4D X509v3 Authority Key Identifier: keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/C0mI0v3AUYRPG8yTqF1QgFx7xU0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.221.0.0/16 156.114.128.0/18 Signature Algorithm: sha256WithRSAEncryption 42:a8:e1:f0:06:d5:df:34:c0:19:ae:e9:62:98:21:1f:e7:24: 15:5d:51:41:ef:13:25:ec:74:3b:2b:26:91:26:a6:e1:b8:0a: 06:15:9f:a4:f4:57:44:e2:2b:e8:7b:c3:cc:f7:c7:41:24:d6: 7f:94:c7:0c:7f:1b:e4:a3:a1:47:5b:46:d2:73:ab:e3:f9:e4: 93:7c:b1:04:e3:fa:38:48:a8:30:6f:66:bc:a2:00:96:da:84: 68:fe:c0:1c:62:b1:23:12:e0:5e:98:ee:f4:d9:27:dd:19:e7: 42:21:2a:f5:2a:97:68:17:d8:30:70:c9:a7:01:04:1a:a0:e3: f8:c6:78:47:b5:99:7f:fb:4d:7f:01:0e:a3:59:8d:05:a4:c0: 68:bb:54:1c:bf:4f:aa:3e:be:06:bb:ed:34:6a:d8:dd:90:e1: eb:8b:54:ca:ec:26:79:9c:d2:33:ef:2e:3c:6b:af:55:f1:d7: 3d:6c:e7:d1:ba:4e:10:21:fa:ea:2e:af:39:00:4c:e7:27:9d: ca:a4:7a:62:36:b7:1e:a8:fe:47:99:ea:87:6b:29:9c:0b:61: 24:56:7e:3f:d9:6a:09:98:f5:1e:d5:95:01:6e:96:83:db:79: c1:4c:37:eb:55:9c:2e:d2:7c:cd:89:72:b9:20:f0:da:17:5d: 15:c0:25:e7 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt3xqo4FthfqrimqJzrrybhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZWNlNDFjYmMyYzMwNjI2ZWYyYTI4ZDE4MzlmMmQ2YzQ3 NTdmM2YwHhcNMjYwMTAxMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjQ5ODhkMmZkYzA1MTg0NGYxYmNjOTNhODVkNTA4MDVjN2JjNTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioY+aR6aWBTU5NGu3m5WocP8S9cs lQL2h4oRtNcclSTkxddSH5r1+h98Ac1Q/WIBWqHAPIZAiF+5Frcds80JWWp0Ytaq ro6A83q7Z2r99SMV8/XG+HGc+0O+g21zctbDu10OKSHAiTPG3So1JNHR7Wdelgy4 RLOoOZaDLTP0ySvymtu66jN/dNml6CNTuWhviOzNOyekS7xCyLDIGK5CMwt/H2Xl E2/2qMrRWtr0i2tpiazp8onEMPYmXs3MAc85TMa5yhYKUnHkCI0ZfIe7jm7P0QkQ BBV5I3UMveILe8H+qoOuQrmt5/oORoBE9rcTJN/z0hAGM7d0bJl3x5qYUQIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFAtJiNL9wFGETxvMk6hdUIBce8VNMB8GA1UdIwQY MBaAFMrs5By8LDBibvKijRg58tbEdX8/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MzBjYmUtY2UwMS00NjRkLTgyZWIt ZDg1MWU0MGQ1N2JmLzEvQzBtSTB2M0FVWVJQRzh5VHFGMVFnRng3eFUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82MzBjYmUtY2UwMS00NjRkLTgyZWItZDg1MWU0MGQ1N2Jm LzEveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAkd0DBAac coAwDQYJKoZIhvcNAQELBQADggEBAEKo4fAG1d80wBmu6WKYIR/nJBVdUUHvEyXs dDsrJpEmpuG4CgYVn6T0V0TiK+h7w8z3x0Ek1n+Uxwx/G+SjoUdbRtJzq+P55JN8 sQTj+jhIqDBvZryiAJbahGj+wBxisSMS4F6Y7vTZJ90Z50IhKvUql2gX2DBwyacB BBqg4/jGeEe1mX/7TX8BDqNZjQWkwGi7VBy/T6o+vga77TRq2N2Q4euLVMrsJnmc 0jPvLjxrr1Xx1z1s59G6ThAh+uourzkATOcnncqkemI2tx6o/keZ6odrKZwLYSRW fj/ZagmY9R7VlQFuloPbecFMN+tVnC7SfM2Jcrkg8NoXXRXAJec= -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:34 2026 by rpki-client