This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/ta7RNijMrlT7XLwISB-DzbnGBEA.roa File: ta7RNijMrlT7XLwISB-DzbnGBEA.roa (raw, json) Hash identifier: htdQ/B3zavFvNHE8jCWCCL+qsSOUQlVeq0UkLWAcUbs= Subject key identifier: B5:AE:D1:36:28:CC:AE:54:FB:5C:BC:08:48:1F:83:CD:B9:C6:04:40 Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d Certificate serial: 019B7AC832BC14E828B8658CEC8CB1674716 Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/ta7RNijMrlT7XLwISB-DzbnGBEA.roa Signing time: Thu 01 Jan 2026 18:18:19 +0000 ROA not before: Thu 01 Jan 2026 18:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212046 IP address blocks: 82.140.133.0/24 maxlen: 24 82.140.152.0/24 maxlen: 24 82.140.171.0/24 maxlen: 24 82.140.176.0/24 maxlen: 24 82.140.179.0/24 maxlen: 24 82.140.184.0/24 maxlen: 24 82.140.185.0/24 maxlen: 24 84.46.136.0/24 maxlen: 24 84.46.146.0/24 maxlen: 24 84.46.147.0/24 maxlen: 24 84.46.148.0/24 maxlen: 24 84.46.149.0/24 maxlen: 24 84.46.160.0/24 maxlen: 24 84.46.161.0/24 maxlen: 24 84.46.162.0/24 maxlen: 24 84.46.163.0/24 maxlen: 24 84.46.168.0/24 maxlen: 24 84.46.169.0/24 maxlen: 24 84.46.204.0/24 maxlen: 24 84.46.205.0/24 maxlen: 24 84.46.207.0/24 maxlen: 24 86.38.6.0/24 maxlen: 24 86.38.18.0/24 maxlen: 24 86.38.28.0/24 maxlen: 24 86.38.29.0/24 maxlen: 24 86.38.30.0/24 maxlen: 24 86.38.31.0/24 maxlen: 24 86.38.33.0/24 maxlen: 24 86.38.36.0/24 maxlen: 24 86.38.38.0/24 maxlen: 24 86.38.39.0/24 maxlen: 24 86.38.152.0/24 maxlen: 24 86.38.153.0/24 maxlen: 24 86.38.154.0/24 maxlen: 24 86.38.161.0/24 maxlen: 24 86.38.165.0/24 maxlen: 24 86.38.166.0/24 maxlen: 24 86.38.167.0/24 maxlen: 24 86.38.168.0/24 maxlen: 24 86.38.169.0/24 maxlen: 24 86.38.171.0/24 maxlen: 24 86.38.173.0/24 maxlen: 24 86.38.174.0/24 maxlen: 24 86.38.176.0/24 maxlen: 24 86.38.188.0/24 maxlen: 24 86.38.201.0/24 maxlen: 24 86.38.215.0/24 maxlen: 24 86.38.234.0/24 maxlen: 24 86.38.236.0/24 maxlen: 24 89.116.14.0/24 maxlen: 24 89.116.71.0/24 maxlen: 24 89.116.77.0/24 maxlen: 24 89.116.78.0/24 maxlen: 24 89.116.90.0/24 maxlen: 24 89.116.93.0/24 maxlen: 24 89.116.97.0/24 maxlen: 24 89.116.124.0/24 maxlen: 24 89.116.129.0/24 maxlen: 24 89.116.143.0/24 maxlen: 24 89.116.151.0/24 maxlen: 24 89.116.155.0/24 maxlen: 24 89.116.160.0/24 maxlen: 24 89.116.162.0/24 maxlen: 24 89.116.174.0/24 maxlen: 24 89.116.176.0/24 maxlen: 24 89.116.178.0/24 maxlen: 24 89.116.232.0/24 maxlen: 24 89.116.235.0/24 maxlen: 24 89.116.238.0/24 maxlen: 24 89.116.240.0/24 maxlen: 24 89.116.245.0/24 maxlen: 24 89.116.249.0/24 maxlen: 24 89.117.10.0/24 maxlen: 24 89.117.14.0/24 maxlen: 24 89.117.69.0/24 maxlen: 24 89.117.125.0/24 maxlen: 24 89.117.127.0/24 maxlen: 24 89.117.128.0/24 maxlen: 24 89.117.137.0/24 maxlen: 24 89.117.138.0/24 maxlen: 24 89.117.140.0/24 maxlen: 24 89.117.165.0/24 maxlen: 24 89.117.219.0/24 maxlen: 24 89.117.223.0/24 maxlen: 24 89.117.247.0/24 maxlen: 24 89.117.249.0/24 maxlen: 24 217.9.240.0/24 maxlen: 24 217.9.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:32:bc:14:e8:28:b8:65:8c:ec:8c:b1:67:47:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d Validity Not Before: Jan 1 18:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5aed13628ccae54fb5cbc08481f83cdb9c60440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:35:50:9e:b2:a9:4d:ea:ba:73:cd:66:70:21: 5b:b9:69:05:37:ca:a6:b5:b6:85:e6:9f:bf:f9:bb: 18:b9:ed:8f:7e:f3:2a:59:24:2e:de:6e:01:b5:2d: a1:cd:4b:d0:70:79:e6:a5:e2:3f:99:79:51:c8:76: 62:1a:35:29:58:e4:06:0e:62:d6:3f:54:6d:80:79: ee:fc:a8:d5:1a:a0:f9:98:95:41:13:1f:cc:e1:c0: 34:3e:40:da:7f:3d:07:5d:3f:33:b4:30:17:b1:23: 39:9b:9d:e3:1e:72:ca:71:ae:57:9f:32:76:78:c9: db:02:7d:29:4f:e4:59:97:7c:80:46:72:84:d6:b5: 7b:27:6f:04:61:ce:08:89:f2:c5:8f:ad:f5:c2:d9: 8b:dd:47:7f:7f:85:f0:4a:51:d7:ce:d5:c6:0d:cc: 5d:78:3b:97:8b:e6:39:5e:3b:68:b3:21:42:2b:2e: bc:2f:cc:f0:e3:47:93:de:d7:82:86:10:b3:aa:30: 4c:3d:17:a7:d1:35:ae:ee:4d:40:8a:7a:a8:ca:f5: 47:18:12:be:72:1d:a1:9b:71:89:f3:3c:db:d6:52: 2a:59:11:91:c9:69:77:13:1d:3f:66:50:97:ab:ef: 5d:49:a2:14:8b:e3:ad:71:a1:77:4a:ae:93:4d:b7: 2d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AE:D1:36:28:CC:AE:54:FB:5C:BC:08:48:1F:83:CD:B9:C6:04:40 X509v3 Authority Key Identifier: keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/ta7RNijMrlT7XLwISB-DzbnGBEA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.140.133.0/24 82.140.152.0/24 82.140.171.0/24 82.140.176.0/24 82.140.179.0/24 82.140.184.0/23 84.46.136.0/24 84.46.146.0-84.46.149.255 84.46.160.0/22 84.46.168.0/23 84.46.204.0/23 84.46.207.0/24 86.38.6.0/24 86.38.18.0/24 86.38.28.0/22 86.38.33.0/24 86.38.36.0/24 86.38.38.0/23 86.38.152.0-86.38.154.255 86.38.161.0/24 86.38.165.0-86.38.169.255 86.38.171.0/24 86.38.173.0-86.38.174.255 86.38.176.0/24 86.38.188.0/24 86.38.201.0/24 86.38.215.0/24 86.38.234.0/24 86.38.236.0/24 89.116.14.0/24 89.116.71.0/24 89.116.77.0-89.116.78.255 89.116.90.0/24 89.116.93.0/24 89.116.97.0/24 89.116.124.0/24 89.116.129.0/24 89.116.143.0/24 89.116.151.0/24 89.116.155.0/24 89.116.160.0/24 89.116.162.0/24 89.116.174.0/24 89.116.176.0/24 89.116.178.0/24 89.116.232.0/24 89.116.235.0/24 89.116.238.0/24 89.116.240.0/24 89.116.245.0/24 89.116.249.0/24 89.117.10.0/24 89.117.14.0/24 89.117.69.0/24 89.117.125.0/24 89.117.127.0-89.117.128.255 89.117.137.0-89.117.138.255 89.117.140.0/24 89.117.165.0/24 89.117.219.0/24 89.117.223.0/24 89.117.247.0/24 89.117.249.0/24 217.9.240.0/24 217.9.243.0/24 Signature Algorithm: sha256WithRSAEncryption 60:b3:60:12:fa:7d:5e:22:e8:00:65:d6:6e:50:d9:02:b9:ae: 8b:68:a2:8f:0f:0b:dd:be:c8:68:5d:2e:84:93:92:e5:2e:a6: 7e:a0:85:36:7b:99:58:4e:80:78:ca:55:55:07:26:5c:d7:d7: a1:de:fa:5a:8c:dd:89:bc:20:d5:af:29:9a:4e:c1:42:ab:ae: 4e:ea:51:cb:30:a5:11:86:e2:94:86:ab:7c:c4:30:81:83:20: 87:35:3a:0a:f5:da:31:43:dd:62:d7:05:0d:c2:97:68:28:74: cf:87:ca:af:84:76:a7:cd:b9:a9:01:47:6c:b4:02:a1:9a:6d: 9c:ca:21:f7:fe:c6:17:af:f4:42:ec:16:b6:73:51:de:76:5b: 17:37:d2:7b:ff:96:dd:3d:da:f7:39:34:25:27:95:68:fe:39: 34:f5:8a:38:ed:38:6e:00:42:4b:ae:aa:9d:03:47:c7:99:80: 79:ec:02:84:2b:5a:3e:c0:e1:5c:fb:ad:01:ad:89:77:00:1b: 10:a0:61:34:12:18:43:7a:9d:74:05:cd:55:b2:a9:25:e0:ba: a9:bf:77:24:04:9b:8f:4e:b3:25:40:98:3f:20:39:6e:37:75: 38:71:02:89:59:3b:cf:5e:a1:c2:2c:43:13:76:f0:26:d1:5d: 88:9c:0d:b2 -----BEGIN CERTIFICATE----- MIIGvzCCBaegAwIBAgISAZt6yDK8FOgouGWM7IyxZ0cWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3 MTE4MGQwHhcNMjYwMTAxMTgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWFlZDEzNjI4Y2NhZTU0ZmI1Y2JjMDg0ODFmODNjZGI5YzYwNDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjVQnrKpTeq6c81mcCFbuWkFN8qm tbaF5p+/+bsYue2PfvMqWSQu3m4BtS2hzUvQcHnmpeI/mXlRyHZiGjUpWOQGDmLW P1RtgHnu/KjVGqD5mJVBEx/M4cA0PkDafz0HXT8ztDAXsSM5m53jHnLKca5XnzJ2 eMnbAn0pT+RZl3yARnKE1rV7J28EYc4IifLFj631wtmL3Ud/f4XwSlHXztXGDcxd eDuXi+Y5XjtosyFCKy68L8zw40eT3teChhCzqjBMPRen0TWu7k1AinqoyvVHGBK+ ch2hm3GJ8zzb1lIqWRGRyWl3Ex0/ZlCXq+9dSaIUi+OtcaF3Sq6TTbcthQIDAQAB o4IDyzCCA8cwHQYDVR0OBBYEFLWu0TYozK5U+1y8CEgfg825xgRAMB8GA1UdIwQY MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt MDQ2ODA0MjQ4NmRjLzEvdGE3Uk5pak1ybFQ3WEx3SVNCLUR6Ym5HQkVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIB3wYIKwYBBQUHAQcBAf8EggHOMIIByjCCAcYEAgABMIIB vgMEAFKMhQMEAFKMmAMEAFKMqwMEAFKMsAMEAFKMswMEAVKMuAMEAFQuiDAMAwQB VC6SAwQBVC6UAwQCVC6gAwQBVC6oAwQBVC7MAwQAVC7PAwQAViYGAwQAViYSAwQC ViYcAwQAViYhAwQAViYkAwQBViYmMAwDBANWJpgDBABWJpoDBABWJqEwDAMEAFYm pQMEAVYmqAMEAFYmqzAMAwQAViatAwQAViauAwQAViawAwQAVia8AwQAVibJAwQA VibXAwQAVibqAwQAVibsAwQAWXQOAwQAWXRHMAwDBABZdE0DBABZdE4DBABZdFoD BABZdF0DBABZdGEDBABZdHwDBABZdIEDBABZdI8DBABZdJcDBABZdJsDBABZdKAD BABZdKIDBABZdK4DBABZdLADBABZdLIDBABZdOgDBABZdOsDBABZdO4DBABZdPAD BABZdPUDBABZdPkDBABZdQoDBABZdQ4DBABZdUUDBABZdX0wDAMEAFl1fwMEAFl1 gDAMAwQAWXWJAwQAWXWKAwQAWXWMAwQAWXWlAwQAWXXbAwQAWXXfAwQAWXX3AwQA WXX5AwQA2QnwAwQA2QnzMA0GCSqGSIb3DQEBCwUAA4IBAQBgs2AS+n1eIugAZdZu UNkCua6LaKKPDwvdvshoXS6Ek5LlLqZ+oIU2e5lYToB4ylVVByZc19eh3vpajN2J vCDVrymaTsFCq65O6lHLMKURhuKUhqt8xDCBgyCHNToK9doxQ91i1wUNwpdoKHTP h8qvhHanzbmpAUdstAKhmm2cyiH3/sYXr/RC7Ba2c1HedlsXN9J7/5bdPdr3OTQl J5Vo/jk09Yo47ThuAEJLrqqdA0fHmYB57AKEK1o+wOFc+60BrYl3ABsQoGE0EhhD ep10Bc1Vsqkl4Lqpv3ckBJuPTrMlQJg/IDluN3U4cQKJWTvPXqHCLEMTdvAm0V2I nA2y -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:06 2026 by rpki-client