This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/GOYn3ymVaxHmJ2T3ZbcL8QvAyQA.roa File: GOYn3ymVaxHmJ2T3ZbcL8QvAyQA.roa (raw, json) Hash identifier: rqvOJltWRx4q6d/VrAvQh/mTTOz5iOYPdlYSMAU6Y9I= Subject key identifier: 18:E6:27:DF:29:95:6B:11:E6:27:64:F7:65:B7:0B:F1:0B:C0:C9:00 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019BEFB67522B32D4FA8CDDC8374DBA2BD9E Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/GOYn3ymVaxHmJ2T3ZbcL8QvAyQA.roa Signing time: Sat 24 Jan 2026 11:14:30 +0000 ROA not before: Sat 24 Jan 2026 11:14:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26383 IP address blocks: 45.144.172.0/24 maxlen: 24 45.144.174.0/24 maxlen: 24 77.81.101.0/24 maxlen: 24 86.107.50.0/24 maxlen: 24 86.107.100.0/24 maxlen: 24 89.37.185.0/24 maxlen: 24 89.125.76.0/24 maxlen: 24 89.125.95.0/24 maxlen: 24 89.125.98.0/24 maxlen: 24 89.125.131.0/24 maxlen: 24 89.125.152.0/24 maxlen: 24 89.125.189.0/24 maxlen: 24 89.125.213.0/24 maxlen: 24 89.125.243.0/24 maxlen: 24 89.125.248.0/24 maxlen: 24 92.114.54.0/24 maxlen: 24 93.113.171.0/24 maxlen: 24 93.115.106.0/24 maxlen: 24 93.119.154.0/24 maxlen: 24 93.119.195.0/24 maxlen: 24 94.177.13.0/24 maxlen: 24 103.56.84.0/24 maxlen: 24 167.17.178.0/24 maxlen: 24 167.17.179.0/24 maxlen: 24 167.17.180.0/24 maxlen: 24 167.17.181.0/24 maxlen: 24 167.17.183.0/24 maxlen: 24 167.17.184.0/24 maxlen: 24 167.17.185.0/24 maxlen: 24 167.17.186.0/24 maxlen: 24 167.17.187.0/24 maxlen: 24 167.17.188.0/24 maxlen: 24 167.17.189.0/24 maxlen: 24 167.17.190.0/24 maxlen: 24 185.72.8.0/24 maxlen: 24 185.141.219.0/24 maxlen: 24 185.193.102.0/24 maxlen: 24 185.198.235.0/24 maxlen: 24 188.64.142.0/24 maxlen: 24 188.212.121.0/24 maxlen: 24 193.124.49.0/24 maxlen: 24 194.58.34.0/24 maxlen: 24 194.58.44.0/24 maxlen: 24 194.58.45.0/24 maxlen: 24 194.58.46.0/24 maxlen: 24 195.88.89.0/24 maxlen: 24 195.133.192.0/24 maxlen: 24 195.133.193.0/24 maxlen: 24 202.71.15.0/24 maxlen: 24 204.77.0.0/24 maxlen: 24 204.77.2.0/24 maxlen: 24 204.77.3.0/24 maxlen: 24 206.245.128.0/24 maxlen: 24 206.245.130.0/24 maxlen: 24 206.245.131.0/24 maxlen: 24 206.245.133.0/24 maxlen: 24 206.245.134.0/24 maxlen: 24 206.245.157.0/24 maxlen: 24 212.192.6.0/24 maxlen: 24 212.192.12.0/24 maxlen: 24 212.192.13.0/24 maxlen: 24 212.192.15.0/24 maxlen: 24 212.192.20.0/24 maxlen: 24 212.192.21.0/24 maxlen: 24 212.192.23.0/24 maxlen: 24 212.192.214.0/24 maxlen: 24 212.192.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ef:b6:75:22:b3:2d:4f:a8:cd:dc:83:74:db:a2:bd:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 24 11:14:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18e627df29956b11e62764f765b70bf10bc0c900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:46:fe:fd:ee:e1:9e:99:25:71:9d:8e:56:ad: 0e:3c:ac:30:ba:cf:51:ca:50:c2:8e:d7:ce:ea:d3: c9:ef:33:97:73:c5:ed:22:56:15:fb:95:57:ec:16: 6a:e2:4c:8e:50:61:c3:a2:5e:9e:25:c4:b6:ed:bf: d8:6e:ad:ff:39:4f:55:28:ef:86:ab:7a:b8:55:fa: 30:da:86:42:4f:fa:af:e3:1c:95:0f:60:6e:ce:47: c8:c5:39:d7:0c:10:5c:3d:9d:79:95:0c:d8:fc:f9: d9:d5:1d:af:15:53:a2:2c:c4:7a:d0:1b:3b:ea:7d: d6:c4:83:f4:e9:2d:4a:86:16:ae:88:7b:0b:06:c7: b0:e9:55:9a:9b:83:b8:2f:3f:49:b5:75:7e:50:41: 14:57:6c:ee:2a:f6:73:84:0f:67:a6:a0:73:37:9e: 2d:41:9b:db:ea:7c:3f:ce:de:02:99:7c:54:04:cf: e4:c0:25:d7:83:b2:b6:fe:26:fa:c2:12:7d:22:08: ba:e5:53:67:32:54:02:1b:24:36:12:69:75:8a:d7: 70:65:64:81:17:32:fb:c3:e2:c1:53:8c:55:94:88: 3a:12:6a:48:c5:6e:e3:8c:98:ba:63:cb:4e:e7:a3: 87:61:19:c7:f4:33:e9:7b:53:d9:0f:9a:9d:9c:a0: fe:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E6:27:DF:29:95:6B:11:E6:27:64:F7:65:B7:0B:F1:0B:C0:C9:00 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/GOYn3ymVaxHmJ2T3ZbcL8QvAyQA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.172.0/24 45.144.174.0/24 77.81.101.0/24 86.107.50.0/24 86.107.100.0/24 89.37.185.0/24 89.125.76.0/24 89.125.95.0/24 89.125.98.0/24 89.125.131.0/24 89.125.152.0/24 89.125.189.0/24 89.125.213.0/24 89.125.243.0/24 89.125.248.0/24 92.114.54.0/24 93.113.171.0/24 93.115.106.0/24 93.119.154.0/24 93.119.195.0/24 94.177.13.0/24 103.56.84.0/24 167.17.178.0-167.17.181.255 167.17.183.0-167.17.190.255 185.72.8.0/24 185.141.219.0/24 185.193.102.0/24 185.198.235.0/24 188.64.142.0/24 188.212.121.0/24 193.124.49.0/24 194.58.34.0/24 194.58.44.0-194.58.46.255 195.88.89.0/24 195.133.192.0/23 202.71.15.0/24 204.77.0.0/24 204.77.2.0/23 206.245.128.0/24 206.245.130.0/23 206.245.133.0-206.245.134.255 206.245.157.0/24 212.192.6.0/24 212.192.12.0/23 212.192.15.0/24 212.192.20.0/23 212.192.23.0/24 212.192.214.0/23 Signature Algorithm: sha256WithRSAEncryption 02:c4:27:11:23:58:e4:1e:b4:80:8d:4e:40:f0:87:81:11:12: 13:b5:3a:e5:e0:65:82:7e:e1:a9:da:34:c2:7b:80:06:33:32: 5c:4b:e2:7b:c7:a5:bd:9d:d0:cc:68:f3:2b:a5:51:e3:8e:41: ad:52:5f:42:db:25:1b:e9:79:f6:d9:c5:14:6a:ab:8c:08:eb: 32:7d:c1:1f:54:78:f7:56:4a:6c:82:30:2e:7b:d1:06:b6:a6: 53:63:fb:d4:16:bc:6a:2c:8a:73:55:ab:0c:0a:8b:cb:6d:3f: f8:11:e2:85:87:be:43:28:16:dd:51:3d:02:7a:fa:07:bb:85: 7a:f0:18:87:05:f7:e8:d3:54:2d:80:87:ef:f2:84:78:b0:a7: 58:56:a2:95:44:1a:e6:37:3e:23:a7:58:16:0d:81:78:22:2c: dc:4e:a6:cd:fc:76:f1:ea:7f:55:78:7a:dc:55:8d:bd:56:9f: e6:42:f5:c5:23:ce:b3:2f:91:5e:89:19:84:16:47:bc:1a:90: c6:ca:f2:8b:b6:5e:ac:4c:a7:56:86:75:e8:b0:37:62:dd:3b: a1:11:1f:fe:72:1c:e8:a5:47:62:a4:7d:97:8e:2f:be:e2:16: 1c:c7:a9:5c:05:a8:12:b2:6f:d7:74:69:33:08:57:b1:63:02: 17:04:46:7e -----BEGIN CERTIFICATE----- MIIGQTCCBSmgAwIBAgISAZvvtnUisy1PqM3cg3Tbor2eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTI0MTExNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGU2MjdkZjI5OTU2YjExZTYyNzY0Zjc2NWI3MGJmMTBiYzBjOTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkb+/e7hnpklcZ2OVq0OPKwwus9R ylDCjtfO6tPJ7zOXc8XtIlYV+5VX7BZq4kyOUGHDol6eJcS27b/Ybq3/OU9VKO+G q3q4Vfow2oZCT/qv4xyVD2BuzkfIxTnXDBBcPZ15lQzY/PnZ1R2vFVOiLMR60Bs7 6n3WxIP06S1KhhauiHsLBsew6VWam4O4Lz9JtXV+UEEUV2zuKvZzhA9npqBzN54t QZvb6nw/zt4CmXxUBM/kwCXXg7K2/ib6whJ9Igi65VNnMlQCGyQ2Eml1itdwZWSB FzL7w+LBU4xVlIg6EmpIxW7jjJi6Y8tO56OHYRnH9DPpe1PZD5qdnKD+rQIDAQAB o4IDTTCCA0kwHQYDVR0OBBYEFBjmJ98plWsR5idk92W3C/ELwMkAMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvR09ZbjN5bVZheEhtSjJUM1piY0w4UXZBeVFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBYQYIKwYBBQUHAQcBAf8EggFQMIIBTDCCAUgEAgABMIIB QAMEAC2QrAMEAC2QrgMEAE1RZQMEAFZrMgMEAFZrZAMEAFkluQMEAFl9TAMEAFl9 XwMEAFl9YgMEAFl9gwMEAFl9mAMEAFl9vQMEAFl91QMEAFl98wMEAFl9+AMEAFxy NgMEAF1xqwMEAF1zagMEAF13mgMEAF13wwMEAF6xDQMEAGc4VDAMAwQBpxGyAwQB pxG0MAwDBACnEbcDBACnEb4DBAC5SAgDBAC5jdsDBAC5wWYDBAC5xusDBAC8QI4D BAC81HkDBADBfDEDBADCOiIwDAMEAsI6LAMEAMI6LgMEAMNYWQMEAcOFwAMEAMpH DwMEAMxNAAMEAcxNAgMEAM71gAMEAc71gjAMAwQAzvWFAwQAzvWGAwQAzvWdAwQA 1MAGAwQB1MAMAwQA1MAPAwQB1MAUAwQA1MAXAwQB1MDWMA0GCSqGSIb3DQEBCwUA A4IBAQACxCcRI1jkHrSAjU5A8IeBERITtTrl4GWCfuGp2jTCe4AGMzJcS+J7x6W9 ndDMaPMrpVHjjkGtUl9C2yUb6Xn22cUUaquMCOsyfcEfVHj3VkpsgjAue9EGtqZT Y/vUFrxqLIpzVasMCovLbT/4EeKFh75DKBbdUT0CevoHu4V68BiHBffo01QtgIfv 8oR4sKdYVqKVRBrmNz4jp1gWDYF4IizcTqbN/Hbx6n9VeHrcVY29Vp/mQvXFI86z L5FeiRmEFke8GpDGyvKLtl6sTKdWhnXosDdi3TuhER/+chzopUdipH2Xji++4hYc x6lcBagSsm/XdGkzCFexYwIXBEZ+ -----END CERTIFICATE-----Generated at Sun Jan 25 08:48:48 2026 by rpki-client