This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/8bHRc8tr2a4XBd3O15Qoano2tfQ.roa File: 8bHRc8tr2a4XBd3O15Qoano2tfQ.roa (raw, json) Hash identifier: orjr1SLl5fYCt3s+uAWK9iZFvIcZNLQi4CUpABQKDvk= Subject key identifier: F1:B1:D1:73:CB:6B:D9:AE:17:05:DD:CE:D7:94:28:6A:7A:36:B5:F4 Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d Certificate serial: 019B77592B389A4F590A35070A0D55BC63EF Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/8bHRc8tr2a4XBd3O15Qoano2tfQ.roa Signing time: Thu 01 Jan 2026 02:18:11 +0000 ROA not before: Thu 01 Jan 2026 02:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29314 IP address blocks: 31.6.128.0/18 maxlen: 18 31.6.192.0/19 maxlen: 19 31.6.218.0/24 maxlen: 24 31.42.16.0/20 maxlen: 20 37.131.128.0/19 maxlen: 19 37.190.128.0/17 maxlen: 17 37.190.144.0/20 maxlen: 20 37.190.224.0/20 maxlen: 20 46.186.48.0/20 maxlen: 20 46.186.64.0/19 maxlen: 19 62.61.32.0/19 maxlen: 19 62.141.192.0/18 maxlen: 18 80.244.128.0/19 maxlen: 19 80.245.176.0/20 maxlen: 20 81.190.0.0/16 maxlen: 16 82.115.64.0/19 maxlen: 19 83.68.64.0/19 maxlen: 19 84.38.80.0/20 maxlen: 20 85.117.0.0/19 maxlen: 19 87.116.192.0/18 maxlen: 18 89.17.224.0/19 maxlen: 19 89.228.0.0/16 maxlen: 16 89.229.0.0/16 maxlen: 16 89.229.32.0/20 maxlen: 20 89.229.64.0/19 maxlen: 19 89.229.192.0/20 maxlen: 20 89.230.0.0/16 maxlen: 16 89.231.0.0/16 maxlen: 16 89.231.96.0/19 maxlen: 19 92.42.112.0/21 maxlen: 21 93.94.184.0/21 maxlen: 21 94.78.128.0/18 maxlen: 18 94.251.128.0/17 maxlen: 17 94.251.168.0/24 maxlen: 24 95.129.224.0/21 maxlen: 21 95.174.32.0/19 maxlen: 19 176.107.112.0/21 maxlen: 21 176.221.96.0/19 maxlen: 19 185.31.184.0/22 maxlen: 22 193.43.240.0/22 maxlen: 22 193.106.76.0/22 maxlen: 22 193.200.118.0/23 maxlen: 23 194.116.132.0/23 maxlen: 23 194.149.240.0/24 maxlen: 24 195.93.134.0/23 maxlen: 23 195.93.222.0/23 maxlen: 23 213.136.224.0/19 maxlen: 19 217.70.48.0/20 maxlen: 20 217.75.48.0/20 maxlen: 20 217.144.192.0/19 maxlen: 19 217.172.224.0/19 maxlen: 19 2a00:bde0::/34 maxlen: 34 2a00:bde0:4000::/34 maxlen: 34 2a00:bde0:8000::/34 maxlen: 34 2a00:bde0:c000::/34 maxlen: 34 2a02:2a40::/32 maxlen: 32 2a02:2a40::/34 maxlen: 34 2a02:2a40:4000::/34 maxlen: 34 2a02:2a40:8000::/34 maxlen: 34 2a02:2a40:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2b:38:9a:4f:59:0a:35:07:0a:0d:55:bc:63:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d Validity Not Before: Jan 1 02:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1b1d173cb6bd9ae1705ddced794286a7a36b5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e3:33:25:1c:ac:a8:b3:84:5c:e4:d8:7c:a7: bf:4e:7d:0d:92:c8:1d:d4:c4:73:55:08:c7:5c:8d: 47:ad:e5:87:5b:c0:6f:a1:69:c4:f4:4f:e2:b7:b9: b4:aa:5b:ae:cd:dd:4e:a1:80:58:cc:6a:fa:87:bf: a7:60:08:68:05:d2:d1:96:75:31:67:de:de:9d:3c: 9f:21:97:29:53:ea:58:3c:10:f6:62:66:26:69:b7: 75:f6:ee:7c:03:f8:46:e2:53:85:d1:59:57:7d:29: f1:62:e6:30:cc:a4:65:c6:2c:23:10:fa:7a:2f:51: fd:0c:77:5a:db:66:43:88:77:d4:84:1f:66:45:fa: 81:be:13:f6:06:0f:ed:89:f7:96:24:0c:f5:32:e0: 4a:cc:c5:07:fe:2e:07:67:09:8c:aa:7c:71:06:7a: 8a:b2:12:c1:53:63:56:f6:a7:3c:36:3e:67:e6:d4: 32:ea:76:36:95:c6:28:48:0d:53:53:5e:93:2f:58: f9:cc:16:48:d2:6f:b8:fa:9c:9d:11:35:2d:94:55: 04:8f:f6:15:b2:d8:6d:08:1c:2e:52:86:f7:3d:fb: 1c:37:e2:dd:11:8b:d8:0f:95:34:79:4b:43:5f:2f: 80:5f:ce:04:36:81:34:df:f4:8e:a9:65:f5:f4:2f: 07:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B1:D1:73:CB:6B:D9:AE:17:05:DD:CE:D7:94:28:6A:7A:36:B5:F4 X509v3 Authority Key Identifier: keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/8bHRc8tr2a4XBd3O15Qoano2tfQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.6.128.0-31.6.223.255 31.42.16.0/20 37.131.128.0/19 37.190.128.0/17 46.186.48.0-46.186.95.255 62.61.32.0/19 62.141.192.0/18 80.244.128.0/19 80.245.176.0/20 81.190.0.0/16 82.115.64.0/19 83.68.64.0/19 84.38.80.0/20 85.117.0.0/19 87.116.192.0/18 89.17.224.0/19 89.228.0.0/14 92.42.112.0/21 93.94.184.0/21 94.78.128.0/18 94.251.128.0/17 95.129.224.0/21 95.174.32.0/19 176.107.112.0/21 176.221.96.0/19 185.31.184.0/22 193.43.240.0/22 193.106.76.0/22 193.200.118.0/23 194.116.132.0/23 194.149.240.0/24 195.93.134.0/23 195.93.222.0/23 213.136.224.0/19 217.70.48.0/20 217.75.48.0/20 217.144.192.0/19 217.172.224.0/19 IPv6: 2a00:bde0::/32 2a02:2a40::/32 Signature Algorithm: sha256WithRSAEncryption 08:04:dc:90:1c:2e:ac:de:dd:58:40:cd:c7:68:27:35:20:7d: d4:17:6c:68:0f:35:46:b1:c3:ec:0b:20:41:8e:f6:3e:28:63: bc:c0:87:55:ec:a7:2c:d3:0f:21:d8:97:92:3f:67:20:44:84: 01:3e:a5:48:c3:45:fe:30:d7:5d:b9:3a:2e:80:a2:78:3e:28: c3:21:ea:81:6d:c9:32:23:60:6a:09:d3:01:d3:14:1e:b2:80: c6:eb:09:90:3d:a3:76:f9:68:af:1d:63:23:ed:d2:30:8b:57: c2:24:16:f8:27:a2:86:2c:87:72:ee:a1:f9:a1:4a:86:63:2f: 44:47:ce:55:bc:48:f2:06:aa:0d:08:f6:07:7a:f0:88:e8:99: 32:37:a2:11:a4:7e:5e:e7:71:c3:fd:84:51:1d:41:58:6a:22: 65:b3:2d:29:24:eb:9b:67:73:32:f6:61:6f:fa:59:4b:f1:5d: 6c:1d:3f:71:bf:88:83:e3:d2:b9:8e:3e:27:81:9e:1f:82:f1: 6b:83:13:91:02:35:44:9b:50:f1:b2:cc:d3:dc:99:8e:1c:66: a9:84:53:87:40:83:80:1d:55:32:d2:a1:58:0c:b9:3b:18:c6: f6:53:5c:f5:a2:98:18:7a:21:25:49:6c:a6:3e:72:3e:48:8e: c6:27:da:c3 -----BEGIN CERTIFICATE----- MIIGBzCCBO+gAwIBAgISAZt3WSs4mk9ZCjUHCg1VvGPvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMTVkZjY4OGMzYWVhZTNmNjg1ZWQ0NGIzOTZjMjE5ODM5 NTg2MWQwHhcNMjYwMTAxMDIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWIxZDE3M2NiNmJkOWFlMTcwNWRkY2VkNzk0Mjg2YTdhMzZiNWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+MzJRysqLOEXOTYfKe/Tn0Nksgd 1MRzVQjHXI1HreWHW8BvoWnE9E/it7m0qluuzd1OoYBYzGr6h7+nYAhoBdLRlnUx Z97enTyfIZcpU+pYPBD2YmYmabd19u58A/hG4lOF0VlXfSnxYuYwzKRlxiwjEPp6 L1H9DHda22ZDiHfUhB9mRfqBvhP2Bg/tifeWJAz1MuBKzMUH/i4HZwmMqnxxBnqK shLBU2NW9qc8Nj5n5tQy6nY2lcYoSA1TU16TL1j5zBZI0m+4+pydETUtlFUEj/YV sthtCBwuUob3PfscN+LdEYvYD5U0eUtDXy+AX84ENoE03/SOqWX19C8HKwIDAQAB o4IDEzCCAw8wHQYDVR0OBBYEFPGx0XPLa9muFwXdzteUKGp6NrX0MB8GA1UdIwQY MBaAFE4V32iMOurj9oXtRLOWwhmDlYYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGhYZmFJdzY2dVAyaGUxRXM1YkNHWU9WaGgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wYmY3YWItNWFhYi00MzM3LWEwMmEt OGE2ZTU1NDE5NmJiLzEvOGJIUmM4dHIyYTRYQmQzTzE1UW9hbm8ydGZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wYmY3YWItNWFhYi00MzM3LWEwMmEtOGE2ZTU1NDE5NmJi LzEvVGhYZmFJdzY2dVAyaGUxRXM1YkNHWU9WaGgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBJwYIKwYBBQUHAQcBAf8EggEWMIIBEjCB+QQCAAEwgfIw DAMEBx8GgAMEBR8GwAMEBB8qEAMEBSWDgAMEByW+gDAMAwQELrowAwQFLrpAAwQF Pj0gAwQGPo3AAwQFUPSAAwQEUPWwAwMAUb4DBAVSc0ADBAVTREADBARUJlADBAVV dQADBAZXdMADBAVZEeADAwJZ5AMEA1wqcAMEA11euAMEBl5OgAMEB177gAMEA1+B 4AMEBV+uIAMEA7BrcAMEBbDdYAMEArkfuAMEAsEr8AMEAsFqTAMEAcHIdgMEAcJ0 hAMEAMKV8AMEAcNdhgMEAcNd3gMEBdWI4AMEBNlGMAMEBNlLMAMEBdmQwAMEBdms 4DAUBAIAAjAOAwUAKgC94AMFACoCKkAwDQYJKoZIhvcNAQELBQADggEBAAgE3JAc Lqze3VhAzcdoJzUgfdQXbGgPNUaxw+wLIEGO9j4oY7zAh1XspyzTDyHYl5I/ZyBE hAE+pUjDRf4w1125Oi6Aong+KMMh6oFtyTIjYGoJ0wHTFB6ygMbrCZA9o3b5aK8d YyPt0jCLV8IkFvgnooYsh3LuofmhSoZjL0RHzlW8SPIGqg0I9gd68IjomTI3ohGk fl7nccP9hFEdQVhqImWzLSkk65tnczL2YW/6WUvxXWwdP3G/iIPj0rmOPieBnh+C 8WuDE5ECNUSbUPGyzNPcmY4cZqmEU4dAg4AdVTLSoVgMuTsYxvZTXPWimBh6ISVJ bKY+cj5IjsYn2sM= -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:53 2026 by rpki-client