This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/6DeN01ACaOk4UT4cNyp6go_l9cA.roa File: 6DeN01ACaOk4UT4cNyp6go_l9cA.roa (raw, json) Hash identifier: Tnr/zZaEXUElLJBlgdEv3aoEsmGDmbMF/eY6+kGdmsE= Subject key identifier: E8:37:8D:D3:50:02:68:E9:38:51:3E:1C:37:2A:7A:82:8F:E5:F5:C0 Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d Certificate serial: 019B7F8250D76D0299E0773E8C04A94B4E3C Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/6DeN01ACaOk4UT4cNyp6go_l9cA.roa Signing time: Fri 02 Jan 2026 16:20:05 +0000 ROA not before: Fri 02 Jan 2026 16:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34295 IP address blocks: 77.76.144.0/24 maxlen: 24 77.76.145.0/24 maxlen: 24 77.76.146.0/24 maxlen: 24 77.76.147.0/24 maxlen: 24 77.76.148.0/24 maxlen: 24 77.76.149.0/24 maxlen: 24 77.76.160.0/24 maxlen: 24 77.76.161.0/24 maxlen: 24 77.76.162.0/24 maxlen: 24 77.76.163.0/24 maxlen: 24 77.76.164.0/24 maxlen: 24 77.76.165.0/24 maxlen: 24 77.76.166.0/24 maxlen: 24 77.76.167.0/24 maxlen: 24 77.76.168.0/24 maxlen: 24 77.76.169.0/24 maxlen: 24 77.76.170.0/24 maxlen: 24 77.76.171.0/24 maxlen: 24 77.76.172.0/24 maxlen: 24 77.76.173.0/24 maxlen: 24 77.76.174.0/24 maxlen: 24 77.76.175.0/24 maxlen: 24 77.76.180.0/24 maxlen: 24 77.76.181.0/24 maxlen: 24 77.76.182.0/24 maxlen: 24 77.76.183.0/24 maxlen: 24 94.139.192.0/22 maxlen: 22 94.139.192.0/24 maxlen: 24 94.139.196.0/22 maxlen: 22 94.139.196.0/24 maxlen: 24 94.139.197.0/24 maxlen: 24 94.139.198.0/24 maxlen: 24 94.139.199.0/24 maxlen: 24 94.139.200.0/21 maxlen: 21 94.139.200.0/22 maxlen: 22 94.139.200.0/24 maxlen: 24 94.139.201.0/24 maxlen: 24 94.139.202.0/24 maxlen: 24 94.139.203.0/24 maxlen: 24 109.107.64.0/24 maxlen: 24 109.107.65.0/24 maxlen: 24 109.107.66.0/24 maxlen: 24 109.107.67.0/24 maxlen: 24 109.107.68.0/23 maxlen: 23 109.107.68.0/24 maxlen: 24 109.107.69.0/24 maxlen: 24 109.107.80.0/24 maxlen: 24 109.107.81.0/24 maxlen: 24 109.107.82.0/24 maxlen: 24 109.107.83.0/24 maxlen: 24 109.107.84.0/24 maxlen: 24 109.107.85.0/24 maxlen: 24 109.107.86.0/24 maxlen: 24 109.107.87.0/24 maxlen: 24 178.75.192.0/22 maxlen: 22 178.75.192.0/24 maxlen: 24 178.75.193.0/24 maxlen: 24 178.75.194.0/24 maxlen: 24 178.75.195.0/24 maxlen: 24 178.75.200.0/24 maxlen: 24 178.75.201.0/24 maxlen: 24 178.75.202.0/24 maxlen: 24 178.75.203.0/24 maxlen: 24 178.75.204.0/22 maxlen: 22 178.75.204.0/24 maxlen: 24 178.75.205.0/24 maxlen: 24 178.75.206.0/24 maxlen: 24 178.75.207.0/24 maxlen: 24 178.75.208.0/22 maxlen: 22 178.75.208.0/24 maxlen: 24 178.75.209.0/24 maxlen: 24 178.75.210.0/24 maxlen: 24 178.75.211.0/24 maxlen: 24 178.75.212.0/22 maxlen: 22 178.75.212.0/24 maxlen: 24 178.75.213.0/24 maxlen: 24 178.75.214.0/24 maxlen: 24 178.75.215.0/24 maxlen: 24 178.75.216.0/22 maxlen: 22 178.75.216.0/24 maxlen: 24 178.75.217.0/24 maxlen: 24 178.75.218.0/24 maxlen: 24 178.75.219.0/24 maxlen: 24 178.75.220.0/22 maxlen: 22 178.75.220.0/24 maxlen: 24 178.75.221.0/24 maxlen: 24 178.75.222.0/24 maxlen: 24 178.75.223.0/24 maxlen: 24 178.75.240.0/23 maxlen: 23 178.75.240.0/24 maxlen: 24 178.75.241.0/24 maxlen: 24 178.75.242.0/24 maxlen: 24 178.75.243.0/24 maxlen: 24 178.75.244.0/24 maxlen: 24 178.75.245.0/24 maxlen: 24 178.75.246.0/24 maxlen: 24 178.75.247.0/24 maxlen: 24 178.75.248.0/22 maxlen: 22 178.75.248.0/24 maxlen: 24 178.75.249.0/24 maxlen: 24 178.75.250.0/24 maxlen: 24 178.75.251.0/24 maxlen: 24 185.52.49.0/24 maxlen: 24 188.124.64.0/24 maxlen: 24 188.124.65.0/24 maxlen: 24 188.124.66.0/24 maxlen: 24 188.124.67.0/24 maxlen: 24 188.124.68.0/24 maxlen: 24 188.124.69.0/24 maxlen: 24 188.124.70.0/24 maxlen: 24 188.124.71.0/24 maxlen: 24 188.124.72.0/24 maxlen: 24 188.124.73.0/24 maxlen: 24 188.124.74.0/24 maxlen: 24 188.124.75.0/24 maxlen: 24 188.124.76.0/24 maxlen: 24 188.124.77.0/24 maxlen: 24 188.124.78.0/24 maxlen: 24 188.124.79.0/24 maxlen: 24 188.124.80.0/22 maxlen: 22 188.124.80.0/24 maxlen: 24 188.124.81.0/24 maxlen: 24 188.124.82.0/24 maxlen: 24 188.124.83.0/24 maxlen: 24 188.124.84.0/24 maxlen: 24 188.124.85.0/24 maxlen: 24 188.124.86.0/24 maxlen: 24 188.124.87.0/24 maxlen: 24 188.124.88.0/24 maxlen: 24 188.124.89.0/24 maxlen: 24 188.124.90.0/24 maxlen: 24 188.124.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:50:d7:6d:02:99:e0:77:3e:8c:04:a9:4b:4e:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d Validity Not Before: Jan 2 16:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8378dd3500268e938513e1c372a7a828fe5f5c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4a:8e:5f:18:18:98:71:3d:92:a4:0c:19:03: 9a:81:fc:8c:6a:23:01:59:13:5c:8b:a3:e3:ae:3b: 5e:67:c5:f3:b4:18:1d:e2:19:d3:06:a4:fd:66:8c: 51:8c:9d:87:86:b0:15:75:be:8a:d5:88:a2:04:44: 9a:63:95:5b:32:38:1f:f1:28:02:76:25:16:49:1e: b2:7f:25:91:6d:28:3c:1c:35:90:3f:15:b6:38:f8: eb:58:ac:c9:53:64:c3:4c:57:6e:dd:83:36:85:af: d1:60:3c:2b:b2:b7:3d:0d:e7:49:89:07:18:aa:ac: a7:46:08:74:d8:3b:8c:42:8b:a1:10:4a:c1:5b:d0: fb:27:1f:8b:0d:c5:55:23:ed:7a:19:36:64:56:fd: cc:a6:44:14:3c:6d:5f:be:09:19:02:7c:a8:4f:97: 15:aa:97:b4:46:5d:7e:d7:49:35:c9:94:4f:c5:31: 6c:99:7b:d4:bb:83:d0:06:ba:f1:55:c2:28:85:15: 21:10:47:e1:db:06:4d:88:0d:56:ee:23:fb:ab:3d: e0:7b:e7:80:47:3f:94:09:24:39:3d:4c:93:74:7a: b5:0f:59:88:86:17:b7:92:23:9d:9b:c2:5e:e4:15: 2a:90:cc:57:36:8f:8f:d7:68:fd:4f:c6:87:d1:a3: 14:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:37:8D:D3:50:02:68:E9:38:51:3E:1C:37:2A:7A:82:8F:E5:F5:C0 X509v3 Authority Key Identifier: keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/6DeN01ACaOk4UT4cNyp6go_l9cA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.76.144.0-77.76.149.255 77.76.160.0/20 77.76.180.0/22 94.139.192.0/20 109.107.64.0-109.107.69.255 109.107.80.0/21 178.75.192.0/22 178.75.200.0-178.75.223.255 178.75.240.0-178.75.251.255 185.52.49.0/24 188.124.64.0-188.124.91.255 Signature Algorithm: sha256WithRSAEncryption e5:32:5b:93:a5:b6:08:57:3f:78:12:50:90:b5:e0:65:19:89: ba:a2:35:77:24:af:32:ec:77:40:4a:57:35:ac:df:74:cb:50: b7:09:37:61:de:b7:e2:e5:9e:b7:30:05:69:fb:ef:be:2f:d5: c9:17:07:51:17:33:be:ad:0e:a6:69:ac:27:ec:06:18:dd:d9: 62:2e:1a:fe:be:6f:0e:79:2a:cb:55:0b:a4:43:8e:77:4a:b5: 43:83:81:3b:c7:48:f2:3d:1b:72:1b:c0:15:6e:61:b4:b5:15: db:0f:c8:63:0d:e2:f5:07:b4:f8:0d:85:f6:18:6c:3f:93:b4: a5:10:fa:69:7e:25:ca:aa:ce:f9:1f:75:77:f9:ca:71:23:7a: 29:7f:d1:62:82:59:2c:2b:88:37:d6:cb:74:ea:ad:63:d2:de: 8a:3c:c2:63:a6:d2:e9:cb:7c:92:bd:77:8c:74:1f:92:fe:c6: e3:14:04:d1:f2:70:4a:dc:12:09:05:47:fb:f2:32:6e:45:31: aa:b1:b4:e0:28:06:b4:03:d6:76:82:ad:97:d4:e4:84:0d:b1: be:59:ed:f6:17:f3:fb:cd:a3:ae:af:d1:a1:47:56:08:63:5b: 03:d5:e5:de:42:c1:c1:56:3f:a0:ea:15:97:d5:88:d3:9c:6d: ef:8c:bf:66 -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgISAZt/glDXbQKZ4Hc+jASpS048MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ODE2Nzc0YjdjNTY2NWQ2N2E4NmMyMGNlYjY0ODdiNWI3 OGIzOGQwHhcNMjYwMTAyMTYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODM3OGRkMzUwMDI2OGU5Mzg1MTNlMWMzNzJhN2E4MjhmZTVmNWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEqOXxgYmHE9kqQMGQOagfyMaiMB WRNci6PjrjteZ8XztBgd4hnTBqT9ZoxRjJ2HhrAVdb6K1YiiBESaY5VbMjgf8SgC diUWSR6yfyWRbSg8HDWQPxW2OPjrWKzJU2TDTFdu3YM2ha/RYDwrsrc9DedJiQcY qqynRgh02DuMQouhEErBW9D7Jx+LDcVVI+16GTZkVv3MpkQUPG1fvgkZAnyoT5cV qpe0Rl1+10k1yZRPxTFsmXvUu4PQBrrxVcIohRUhEEfh2wZNiA1W7iP7qz3ge+eA Rz+UCSQ5PUyTdHq1D1mIhhe3kiOdm8Je5BUqkMxXNo+P12j9T8aH0aMU+QIDAQAB o4ICbjCCAmowHQYDVR0OBBYEFOg3jdNQAmjpOFE+HDcqeoKP5fXAMB8GA1UdIwQY MBaAFGWBZ3S3xWZdZ6hsIM62SHtbeLONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYt NmIxNDY5YzNiOTVhLzEvNkRlTjAxQUNhT2s0VVQ0Y055cDZnb19sOWNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYtNmIxNDY5YzNiOTVh LzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwajAMAwQETUyQ AwQBTUyUAwQETUygAwQCTUy0AwQEXovAMAwDBAZta0ADBAFta0QDBANta1ADBAKy S8AwDAMEA7JLyAMEBbJLwDAMAwQEskvwAwQCskv4AwQAuTQxMAwDBAa8fEADBAK8 fFgwDQYJKoZIhvcNAQELBQADggEBAOUyW5OltghXP3gSUJC14GUZibqiNXckrzLs d0BKVzWs33TLULcJN2Het+LlnrcwBWn7774v1ckXB1EXM76tDqZprCfsBhjd2WIu Gv6+bw55KstVC6RDjndKtUODgTvHSPI9G3IbwBVuYbS1FdsPyGMN4vUHtPgNhfYY bD+TtKUQ+ml+JcqqzvkfdXf5ynEjeil/0WKCWSwriDfWy3TqrWPS3oo8wmOm0unL fJK9d4x0H5L+xuMUBNHycErcEgkFR/vyMm5FMaqxtOAoBrQD1naCrZfU5IQNsb5Z 7fYX8/vNo66v0aFHVghjWwPV5d5CwcFWP6DqFZfViNOcbe+Mv2Y= -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:17 2026 by rpki-client