This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Bs-fnSzffWXv7ETpXxJ4y2b69mI.roa File: Bs-fnSzffWXv7ETpXxJ4y2b69mI.roa (raw, json) Hash identifier: Q3wFig4cmIilr5Pc9/iaZQ4PomaRBmBNVme0bDRY8Dc= Subject key identifier: 06:CF:9F:9D:2C:DF:7D:65:EF:EC:44:E9:5F:12:78:CB:66:FA:F6:62 Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Certificate serial: 019B7BA39EDFC2C3931801EF5CF9AAD14EA8 Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Bs-fnSzffWXv7ETpXxJ4y2b69mI.roa Signing time: Thu 01 Jan 2026 22:17:59 +0000 ROA not before: Thu 01 Jan 2026 22:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206065 IP address blocks: 31.25.104.0/21 maxlen: 24 31.217.208.0/21 maxlen: 24 37.19.80.0/20 maxlen: 24 37.114.192.0/18 maxlen: 24 37.114.204.0/23 maxlen: 23 37.114.225.0/24 maxlen: 24 37.114.246.0/23 maxlen: 23 37.114.252.0/24 maxlen: 24 37.191.75.0/24 maxlen: 24 37.191.80.0/21 maxlen: 24 37.191.88.0/22 maxlen: 24 37.221.0.0/18 maxlen: 24 37.221.0.0/20 maxlen: 20 37.235.16.0/20 maxlen: 24 37.235.17.0/24 maxlen: 24 45.128.140.0/22 maxlen: 24 45.144.124.0/22 maxlen: 24 46.32.5.0/24 maxlen: 24 46.32.9.0/24 maxlen: 24 46.32.14.0/24 maxlen: 24 46.34.164.0/22 maxlen: 24 46.34.168.0/21 maxlen: 24 46.34.178.0/23 maxlen: 24 46.34.180.0/22 maxlen: 24 46.34.184.0/21 maxlen: 24 46.34.184.0/22 maxlen: 22 46.34.188.0/22 maxlen: 22 78.158.182.0/23 maxlen: 24 79.132.200.0/22 maxlen: 24 79.132.213.0/24 maxlen: 24 79.132.217.0/24 maxlen: 24 79.132.218.0/23 maxlen: 24 79.132.220.0/23 maxlen: 24 80.71.113.0/24 maxlen: 24 80.71.122.0/23 maxlen: 24 80.71.124.0/23 maxlen: 24 80.71.127.0/24 maxlen: 24 81.29.243.0/24 maxlen: 24 81.29.248.0/21 maxlen: 24 81.29.248.0/23 maxlen: 23 81.29.250.0/23 maxlen: 24 81.29.250.0/24 maxlen: 24 81.29.251.0/24 maxlen: 24 81.29.254.0/24 maxlen: 24 81.29.255.0/24 maxlen: 24 81.91.144.0/20 maxlen: 24 81.91.144.0/22 maxlen: 24 81.91.148.0/23 maxlen: 24 81.91.150.0/23 maxlen: 24 81.91.152.0/21 maxlen: 24 86.109.32.0/23 maxlen: 24 86.109.36.0/22 maxlen: 24 86.109.41.0/24 maxlen: 24 86.109.46.0/23 maxlen: 24 86.109.53.0/24 maxlen: 24 86.109.56.0/22 maxlen: 24 86.109.58.0/23 maxlen: 24 86.109.62.0/23 maxlen: 24 87.247.180.0/23 maxlen: 24 91.184.64.0/20 maxlen: 24 92.61.184.0/21 maxlen: 24 92.119.68.0/22 maxlen: 24 94.139.160.0/20 maxlen: 24 109.230.64.0/21 maxlen: 24 109.230.80.0/20 maxlen: 24 109.230.80.0/22 maxlen: 24 109.230.82.0/24 maxlen: 24 109.230.88.0/21 maxlen: 24 109.230.88.0/23 maxlen: 24 109.230.90.0/24 maxlen: 24 109.230.93.0/24 maxlen: 24 176.221.65.0/24 maxlen: 24 185.12.62.0/24 maxlen: 24 185.21.76.0/22 maxlen: 24 185.30.76.0/22 maxlen: 24 185.40.240.0/22 maxlen: 24 185.45.188.0/22 maxlen: 24 185.70.60.0/22 maxlen: 24 185.82.164.0/23 maxlen: 24 185.85.68.0/22 maxlen: 24 185.104.228.0/24 maxlen: 24 185.133.152.0/22 maxlen: 24 185.142.233.0/24 maxlen: 24 185.142.234.0/23 maxlen: 24 185.172.0.0/22 maxlen: 24 185.190.20.0/22 maxlen: 24 185.197.68.0/22 maxlen: 24 185.208.150.0/23 maxlen: 24 188.75.92.0/24 maxlen: 24 188.75.94.0/24 maxlen: 24 188.75.102.0/23 maxlen: 24 188.75.107.0/24 maxlen: 24 188.75.110.0/23 maxlen: 24 188.75.113.0/24 maxlen: 24 188.75.114.0/23 maxlen: 24 188.75.116.0/23 maxlen: 24 188.75.122.0/23 maxlen: 24 188.121.128.0/19 maxlen: 24 188.121.128.0/23 maxlen: 24 188.121.128.0/24 maxlen: 24 188.121.129.0/24 maxlen: 24 188.121.136.0/21 maxlen: 24 188.121.144.0/20 maxlen: 24 188.121.144.0/22 maxlen: 24 188.121.146.0/24 maxlen: 24 188.121.148.0/23 maxlen: 24 188.121.152.0/22 maxlen: 24 188.121.156.0/24 maxlen: 24 188.121.157.0/24 maxlen: 24 188.121.158.0/23 maxlen: 24 188.136.134.0/24 maxlen: 24 188.136.141.0/24 maxlen: 24 188.136.145.0/24 maxlen: 24 188.136.148.0/24 maxlen: 24 188.136.151.0/24 maxlen: 24 188.136.157.0/24 maxlen: 24 188.136.158.0/23 maxlen: 24 188.136.174.0/24 maxlen: 24 188.136.175.0/24 maxlen: 24 188.136.176.0/21 maxlen: 24 188.136.184.0/24 maxlen: 24 188.136.185.0/24 maxlen: 24 188.136.186.0/23 maxlen: 24 188.136.188.0/23 maxlen: 24 188.136.192.0/22 maxlen: 24 188.136.192.0/23 maxlen: 24 188.136.194.0/24 maxlen: 24 188.136.195.0/24 maxlen: 24 188.136.197.0/24 maxlen: 24 188.136.198.0/23 maxlen: 24 188.136.200.0/24 maxlen: 24 188.136.201.0/24 maxlen: 24 188.136.202.0/23 maxlen: 24 188.136.204.0/22 maxlen: 24 188.136.208.0/24 maxlen: 24 188.136.209.0/24 maxlen: 24 188.136.212.0/22 maxlen: 24 188.136.216.0/22 maxlen: 24 188.136.218.0/23 maxlen: 24 188.136.220.0/23 maxlen: 24 188.136.222.0/23 maxlen: 24 213.195.16.0/22 maxlen: 24 213.207.192.0/20 maxlen: 24 217.66.196.0/23 maxlen: 24 217.66.208.0/24 maxlen: 24 217.66.211.0/24 maxlen: 24 2a0c:100::/29 maxlen: 48 2a0c:104::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:9e:df:c2:c3:93:18:01:ef:5c:f9:aa:d1:4e:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Validity Not Before: Jan 1 22:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06cf9f9d2cdf7d65efec44e95f1278cb66faf662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:42:9b:68:9e:3f:cf:d4:f4:eb:69:ff:64:ec: 87:25:57:51:21:51:f2:96:49:a4:42:4b:dd:41:ea: 02:bf:80:2f:01:83:8c:f3:0a:9e:43:38:5a:0d:e0: d5:7c:a8:70:9d:af:f6:98:6f:e1:1d:65:69:e2:eb: b6:b9:16:bc:9e:f6:d0:78:42:4e:80:44:4a:9e:cf: d0:9d:2f:a3:13:3b:58:d6:30:d1:62:3b:35:a1:b1: 0e:4c:f1:4d:f1:66:52:86:fc:02:fb:17:b3:29:13: 4d:bb:91:d1:5e:bb:30:09:6b:f9:79:36:e2:ce:0f: 51:ba:e6:df:6f:f5:32:66:b6:3b:49:d7:de:f2:ec: f9:4c:06:fd:85:4c:2a:c0:aa:97:9f:64:22:c0:19: 52:46:d0:3e:f1:97:a5:0b:0c:03:25:c3:7f:66:32: cb:f7:bf:d7:d2:e1:f8:6b:77:78:10:80:db:c9:d1: 3b:6d:5b:c7:fd:36:ed:4a:88:21:5d:57:95:e0:ed: 5e:64:ae:0f:2f:ab:29:6d:77:67:b2:1d:73:0f:63: 00:8a:60:d4:0f:29:90:25:6d:1e:34:fe:4f:9d:34: 8b:cd:c2:cd:f5:fb:1a:a3:14:11:b2:92:b5:52:05: 0d:b6:a3:d1:09:46:0a:86:26:ce:10:be:3f:6d:49: c9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CF:9F:9D:2C:DF:7D:65:EF:EC:44:E9:5F:12:78:CB:66:FA:F6:62 X509v3 Authority Key Identifier: keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Bs-fnSzffWXv7ETpXxJ4y2b69mI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.104.0/21 31.217.208.0/21 37.19.80.0/20 37.114.192.0/18 37.191.75.0/24 37.191.80.0-37.191.91.255 37.221.0.0/18 37.235.16.0/20 45.128.140.0/22 45.144.124.0/22 46.32.5.0/24 46.32.9.0/24 46.32.14.0/24 46.34.164.0-46.34.175.255 46.34.178.0-46.34.191.255 78.158.182.0/23 79.132.200.0/22 79.132.213.0/24 79.132.217.0-79.132.221.255 80.71.113.0/24 80.71.122.0-80.71.125.255 80.71.127.0/24 81.29.243.0/24 81.29.248.0/21 81.91.144.0/20 86.109.32.0/23 86.109.36.0/22 86.109.41.0/24 86.109.46.0/23 86.109.53.0/24 86.109.56.0/22 86.109.62.0/23 87.247.180.0/23 91.184.64.0/20 92.61.184.0/21 92.119.68.0/22 94.139.160.0/20 109.230.64.0/21 109.230.80.0/20 176.221.65.0/24 185.12.62.0/24 185.21.76.0/22 185.30.76.0/22 185.40.240.0/22 185.45.188.0/22 185.70.60.0/22 185.82.164.0/23 185.85.68.0/22 185.104.228.0/24 185.133.152.0/22 185.142.233.0-185.142.235.255 185.172.0.0/22 185.190.20.0/22 185.197.68.0/22 185.208.150.0/23 188.75.92.0/24 188.75.94.0/24 188.75.102.0/23 188.75.107.0/24 188.75.110.0/23 188.75.113.0-188.75.117.255 188.75.122.0/23 188.121.128.0/19 188.136.134.0/24 188.136.141.0/24 188.136.145.0/24 188.136.148.0/24 188.136.151.0/24 188.136.157.0-188.136.159.255 188.136.174.0-188.136.189.255 188.136.192.0/22 188.136.197.0-188.136.209.255 188.136.212.0-188.136.223.255 213.195.16.0/22 213.207.192.0/20 217.66.196.0/23 217.66.208.0/24 217.66.211.0/24 IPv6: 2a0c:100::/29 Signature Algorithm: sha256WithRSAEncryption 2d:c3:94:8d:dc:86:d4:3c:d7:40:a5:d0:94:42:91:61:5d:11: b1:5a:c7:ad:b7:fc:a4:cf:6f:39:14:19:87:21:aa:67:79:47: 51:7d:a7:0d:f7:46:6b:29:df:33:f8:e0:45:02:1c:f9:9e:e6: 04:14:f9:b3:2f:2d:7b:83:39:67:d2:72:84:c2:07:c8:56:3b: 91:93:49:18:77:5f:38:c4:c3:e1:8d:95:ce:16:dc:8f:82:fe: 17:be:ef:9d:5b:44:07:39:07:1d:ee:45:e2:4f:55:25:1d:c2: da:89:e5:b0:14:c4:ff:22:63:9b:d8:97:38:a4:19:ec:21:e1: 8f:61:8a:4d:bc:b6:1f:b5:71:94:76:2d:07:50:12:94:34:44: 82:11:e2:cc:c5:20:67:4d:c4:f7:6e:fe:4b:9c:52:e8:fe:6f: 8f:cf:fe:b5:0a:fe:13:2e:02:89:14:15:5e:ab:f5:15:23:7d: e8:fb:d3:d3:88:b8:f1:3a:b6:c2:63:a5:3a:57:de:45:e1:be: 80:00:69:cf:d3:0b:85:0b:e7:68:4c:01:16:16:2f:72:0f:76: 12:d0:a1:c8:f2:20:e2:f6:02:e4:d0:2d:b2:20:d8:98:af:10: d9:c2:c1:7b:d3:41:1b:88:22:6e:24:d9:96:ec:c7:bf:fa:dd: c8:26:e6:ef -----BEGIN CERTIFICATE----- MIIHPDCCBiSgAwIBAgISAZt7o57fwsOTGAHvXPmq0U6oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi YjgwZTEwHhcNMjYwMTAxMjIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmNmOWY5ZDJjZGY3ZDY1ZWZlYzQ0ZTk1ZjEyNzhjYjY2ZmFmNjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEKbaJ4/z9T062n/ZOyHJVdRIVHy lkmkQkvdQeoCv4AvAYOM8wqeQzhaDeDVfKhwna/2mG/hHWVp4uu2uRa8nvbQeEJO gERKns/QnS+jEztY1jDRYjs1obEOTPFN8WZShvwC+xezKRNNu5HRXrswCWv5eTbi zg9Ruubfb/UyZrY7Sdfe8uz5TAb9hUwqwKqXn2QiwBlSRtA+8ZelCwwDJcN/ZjLL 97/X0uH4a3d4EIDbydE7bVvH/TbtSoghXVeV4O1eZK4PL6spbXdnsh1zD2MAimDU DymQJW0eNP5PnTSLzcLN9fsaoxQRspK1UgUNtqPRCUYKhibOEL4/bUnJxQIDAQAB o4IESDCCBEQwHQYDVR0OBBYEFAbPn50s331l7+xE6V8SeMtm+vZiMB8GA1UdIwQY MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt Y2MyZmFmZTNhOGI0LzEvQnMtZm5TemZmV1h2N0VUcFh4SjR5MmI2OW1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0 LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICXAYIKwYBBQUHAQcBAf8EggJLMIICRzCCAjQEAgABMIIC LAMEAx8ZaAMEAx/Z0AMEBCUTUAMEBiVywAMEACW/SzAMAwQEJb9QAwQCJb9YAwQG Jd0AAwQEJesQAwQCLYCMAwQCLZB8AwQALiAFAwQALiAJAwQALiAOMAwDBAIuIqQD BAQuIqAwDAMEAS4isgMEBi4igAMEAU6etgMEAk+EyAMEAE+E1TAMAwQAT4TZAwQB T4TcAwQAUEdxMAwDBAFQR3oDBAFQR3wDBABQR38DBABRHfMDBANRHfgDBARRW5AD BAFWbSADBAJWbSQDBABWbSkDBAFWbS4DBABWbTUDBAJWbTgDBAFWbT4DBAFX97QD BARbuEADBANcPbgDBAJcd0QDBARei6ADBANt5kADBARt5lADBACw3UEDBAC5DD4D BAK5FUwDBAK5HkwDBAK5KPADBAK5LbwDBAK5RjwDBAG5UqQDBAK5VUQDBAC5aOQD BAK5hZgwDAMEALmO6QMEArmO6AMEArmsAAMEArm+FAMEArnFRAMEAbnQlgMEALxL XAMEALxLXgMEAbxLZgMEALxLawMEAbxLbjAMAwQAvEtxAwQBvEt0AwQBvEt6AwQF vHmAAwQAvIiGAwQAvIiNAwQAvIiRAwQAvIiUAwQAvIiXMAwDBAC8iJ0DBAW8iIAw DAMEAbyIrgMEAbyIvAMEAryIwDAMAwQAvIjFAwQBvIjQMAwDBAK8iNQDBAW8iMAD BALVwxADBATVz8ADBAHZQsQDBADZQtADBADZQtMwDQQCAAIwBwMFAyoMAQAwDQYJ KoZIhvcNAQELBQADggEBAC3DlI3chtQ810Cl0JRCkWFdEbFax623/KTPbzkUGYch qmd5R1F9pw33Rmsp3zP44EUCHPme5gQU+bMvLXuDOWfScoTCB8hWO5GTSRh3XzjE w+GNlc4W3I+C/he+751bRAc5Bx3uReJPVSUdwtqJ5bAUxP8iY5vYlzikGewh4Y9h ik28th+1cZR2LQdQEpQ0RIIR4szFIGdNxPdu/kucUuj+b4/P/rUK/hMuAokUFV6r 9RUjfej709OIuPE6tsJjpTpX3kXhvoAAac/TC4UL52hMARYWL3IPdhLQocjyIOL2 AuTQLbIg2JivENnCwXvTQRuIIm4k2Zbsx7/63cgm5u8= -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:36 2026 by rpki-client