This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/t8PF2dzz4p808TasTsfwf7JVfCc.roa File: t8PF2dzz4p808TasTsfwf7JVfCc.roa (raw, json) Hash identifier: ouA5VopXvLk7YoGc+RmYEF9pxuL+pu1BO6KzbRP9lbk= Subject key identifier: B7:C3:C5:D9:DC:F3:E2:9F:34:F1:36:AC:4E:C7:F0:7F:B2:55:7C:27 Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d Certificate serial: 019B77592B027560C35DE0210D651B956909 Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/t8PF2dzz4p808TasTsfwf7JVfCc.roa Signing time: Thu 01 Jan 2026 02:18:10 +0000 ROA not before: Thu 01 Jan 2026 02:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21021 IP address blocks: 31.6.128.0/18 maxlen: 18 31.6.192.0/19 maxlen: 19 31.42.16.0/20 maxlen: 20 37.131.128.0/19 maxlen: 19 37.190.128.0/17 maxlen: 17 46.186.0.0/17 maxlen: 17 46.231.56.0/21 maxlen: 21 62.61.32.0/19 maxlen: 19 62.141.192.0/18 maxlen: 18 80.244.128.0/19 maxlen: 19 80.245.176.0/20 maxlen: 20 81.190.0.0/16 maxlen: 16 82.115.64.0/19 maxlen: 19 83.68.64.0/19 maxlen: 19 84.38.80.0/20 maxlen: 20 85.117.0.0/19 maxlen: 19 87.116.192.0/18 maxlen: 18 89.17.224.0/19 maxlen: 19 89.228.0.0/16 maxlen: 16 89.229.0.0/16 maxlen: 16 89.229.64.0/19 maxlen: 19 89.230.0.0/16 maxlen: 16 89.231.0.0/16 maxlen: 16 92.42.112.0/21 maxlen: 21 93.94.184.0/21 maxlen: 21 94.78.128.0/18 maxlen: 18 94.251.128.0/17 maxlen: 17 95.129.224.0/21 maxlen: 21 95.174.32.0/19 maxlen: 19 176.107.112.0/21 maxlen: 21 176.221.96.0/19 maxlen: 19 185.31.184.0/22 maxlen: 22 193.43.240.0/22 maxlen: 22 193.43.242.0/24 maxlen: 24 193.43.243.0/24 maxlen: 24 193.106.76.0/22 maxlen: 22 193.200.118.0/23 maxlen: 23 194.116.132.0/23 maxlen: 23 194.149.240.0/24 maxlen: 24 195.93.134.0/23 maxlen: 23 195.93.222.0/23 maxlen: 23 213.136.224.0/19 maxlen: 19 217.70.48.0/20 maxlen: 20 217.75.48.0/20 maxlen: 20 217.144.192.0/19 maxlen: 19 217.172.224.0/19 maxlen: 19 2a00:1c00::/32 maxlen: 32 2a00:bde0::/34 maxlen: 34 2a00:bde0:4000::/34 maxlen: 34 2a00:bde0:8000::/34 maxlen: 34 2a00:bde0:c000::/34 maxlen: 34 2a02:2a40::/32 maxlen: 32 2a02:2a40::/34 maxlen: 34 2a02:2a40:4000::/34 maxlen: 34 2a02:2a40:8000::/34 maxlen: 34 2a02:2a40:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2b:02:75:60:c3:5d:e0:21:0d:65:1b:95:69:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d Validity Not Before: Jan 1 02:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7c3c5d9dcf3e29f34f136ac4ec7f07fb2557c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:67:e6:64:a5:e8:20:8c:26:2b:76:93:c6:52: f6:0f:e1:63:7e:09:46:f2:13:e6:78:79:9a:25:87: 9e:28:fd:b4:86:a8:0e:db:9f:3b:7e:9b:1e:78:e8: 37:5f:f8:af:5b:ec:bb:2d:8b:4b:d5:63:92:84:2f: 7b:45:9a:d9:d9:fb:47:69:58:4b:78:38:26:89:bc: 1f:3a:df:3c:7d:5b:f4:43:fe:c6:bb:60:3a:e4:c6: 88:4b:af:b1:1e:75:7d:fc:f8:d2:fd:c4:a7:d2:4e: 39:8d:e6:dc:b1:a8:e1:f2:0f:fe:42:6b:f1:8b:7e: 61:e8:ad:de:ff:64:b6:67:53:cd:08:3b:04:80:e1: 73:b7:ac:79:44:62:8f:33:7c:9c:0d:06:cf:9d:2a: 22:41:5d:04:92:04:3b:e5:68:c4:a5:fd:3d:a1:c9: 65:aa:8e:a2:63:45:21:81:18:b5:10:87:d5:a3:c2: 4f:74:42:fc:68:13:e1:11:04:20:23:1c:b8:55:33: 96:50:b5:71:8d:b7:1d:0d:66:00:df:1e:f7:b7:1b: 14:ed:cf:3c:94:47:74:45:32:54:91:2e:37:18:6d: 1e:0d:ba:d9:b1:cb:fc:fb:7e:bb:3f:f9:1e:22:0b: d6:63:62:72:e7:1e:60:6e:c1:5b:fe:12:35:99:5e: 18:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C3:C5:D9:DC:F3:E2:9F:34:F1:36:AC:4E:C7:F0:7F:B2:55:7C:27 X509v3 Authority Key Identifier: keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/t8PF2dzz4p808TasTsfwf7JVfCc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.6.128.0-31.6.223.255 31.42.16.0/20 37.131.128.0/19 37.190.128.0/17 46.186.0.0/17 46.231.56.0/21 62.61.32.0/19 62.141.192.0/18 80.244.128.0/19 80.245.176.0/20 81.190.0.0/16 82.115.64.0/19 83.68.64.0/19 84.38.80.0/20 85.117.0.0/19 87.116.192.0/18 89.17.224.0/19 89.228.0.0/14 92.42.112.0/21 93.94.184.0/21 94.78.128.0/18 94.251.128.0/17 95.129.224.0/21 95.174.32.0/19 176.107.112.0/21 176.221.96.0/19 185.31.184.0/22 193.43.240.0/22 193.106.76.0/22 193.200.118.0/23 194.116.132.0/23 194.149.240.0/24 195.93.134.0/23 195.93.222.0/23 213.136.224.0/19 217.70.48.0/20 217.75.48.0/20 217.144.192.0/19 217.172.224.0/19 IPv6: 2a00:1c00::/32 2a00:bde0::/32 2a02:2a40::/32 Signature Algorithm: sha256WithRSAEncryption 57:43:56:ed:2f:0b:22:3f:b2:e0:bd:65:5e:07:b9:f4:bb:a8: db:da:3e:9c:0d:75:3b:50:b7:53:cd:81:a2:42:3b:da:a9:7a: 06:77:59:cf:30:fe:73:5e:5b:c2:fa:77:4c:55:36:02:df:30: 28:eb:12:30:d2:0d:ce:a0:2a:c3:08:ea:03:52:71:5d:a3:16: e2:93:c1:3e:a4:a4:42:bc:53:57:bd:85:95:e9:ba:ff:41:35: 6f:c9:1a:af:05:de:c2:cb:50:07:a7:5c:49:b0:8e:7f:47:06: b5:3e:3a:6a:7f:f0:cb:1c:05:86:57:f2:42:73:3b:d7:c2:51: f6:cf:12:96:f1:ca:ca:d4:fc:95:8d:2f:4b:0a:0b:ff:78:bc: 98:a3:07:5b:46:dc:35:56:11:19:6e:d2:e8:59:f6:11:08:8c: dd:07:4a:f6:43:62:a4:d9:71:d0:d1:20:ef:d3:40:1a:7e:65: f8:55:d7:67:e4:ef:21:90:a2:dd:ae:1a:d3:66:d6:5a:12:26: 0b:04:ee:f7:71:25:a4:0e:4b:dc:48:ad:82:f7:cb:aa:44:e2: 79:97:2f:c5:fb:0f:13:1e:a9:3f:e1:62:9d:96:cb:83:3d:2b: 00:c4:a7:78:35:76:14:78:f9:f1:2c:45:86:2e:18:59:f7:c0: 76:3a:13:71 -----BEGIN CERTIFICATE----- MIIGDDCCBPSgAwIBAgISAZt3WSsCdWDDXeAhDWUblWkJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMTVkZjY4OGMzYWVhZTNmNjg1ZWQ0NGIzOTZjMjE5ODM5 NTg2MWQwHhcNMjYwMTAxMDIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2MzYzVkOWRjZjNlMjlmMzRmMTM2YWM0ZWM3ZjA3ZmIyNTU3YzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWfmZKXoIIwmK3aTxlL2D+FjfglG 8hPmeHmaJYeeKP20hqgO2587fpseeOg3X/ivW+y7LYtL1WOShC97RZrZ2ftHaVhL eDgmibwfOt88fVv0Q/7Gu2A65MaIS6+xHnV9/PjS/cSn0k45jebcsajh8g/+Qmvx i35h6K3e/2S2Z1PNCDsEgOFzt6x5RGKPM3ycDQbPnSoiQV0EkgQ75WjEpf09ocll qo6iY0UhgRi1EIfVo8JPdEL8aBPhEQQgIxy4VTOWULVxjbcdDWYA3x73txsU7c88 lEd0RTJUkS43GG0eDbrZscv8+367P/keIgvWY2Jy5x5gbsFb/hI1mV4YvQIDAQAB o4IDGDCCAxQwHQYDVR0OBBYEFLfDxdnc8+KfNPE2rE7H8H+yVXwnMB8GA1UdIwQY MBaAFE4V32iMOurj9oXtRLOWwhmDlYYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGhYZmFJdzY2dVAyaGUxRXM1YkNHWU9WaGgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wYmY3YWItNWFhYi00MzM3LWEwMmEt OGE2ZTU1NDE5NmJiLzEvdDhQRjJkeno0cDgwOFRhc1RzZndmN0pWZkNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wYmY3YWItNWFhYi00MzM3LWEwMmEtOGE2ZTU1NDE5NmJi LzEvVGhYZmFJdzY2dVAyaGUxRXM1YkNHWU9WaGgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBLAYIKwYBBQUHAQcBAf8EggEbMIIBFzCB9wQCAAEwgfAw DAMEBx8GgAMEBR8GwAMEBB8qEAMEBSWDgAMEByW+gAMEBy66AAMEAy7nOAMEBT49 IAMEBj6NwAMEBVD0gAMEBFD1sAMDAFG+AwQFUnNAAwQFU0RAAwQEVCZQAwQFVXUA AwQGV3TAAwQFWRHgAwMCWeQDBANcKnADBANdXrgDBAZeToADBAde+4ADBANfgeAD BAVfriADBAOwa3ADBAWw3WADBAK5H7gDBALBK/ADBALBakwDBAHByHYDBAHCdIQD BADClfADBAHDXYYDBAHDXd4DBAXViOADBATZRjADBATZSzADBAXZkMADBAXZrOAw GwQCAAIwFQMFACoAHAADBQAqAL3gAwUAKgIqQDANBgkqhkiG9w0BAQsFAAOCAQEA V0NW7S8LIj+y4L1lXge59Luo29o+nA11O1C3U82BokI72ql6BndZzzD+c15bwvp3 TFU2At8wKOsSMNINzqAqwwjqA1JxXaMW4pPBPqSkQrxTV72Flem6/0E1b8karwXe wstQB6dcSbCOf0cGtT46an/wyxwFhlfyQnM718JR9s8SlvHKytT8lY0vSwoL/3i8 mKMHW0bcNVYRGW7S6Fn2EQiM3QdK9kNipNlx0NEg79NAGn5l+FXXZ+TvIZCi3a4a 02bWWhImCwTu93ElpA5L3EitgvfLqkTieZcvxfsPEx6pP+FinZbLgz0rAMSneDV2 FHj58SxFhi4YWffAdjoTcQ== -----END CERTIFICATE-----Generated at Mon Jan 26 15:16:41 2026 by rpki-client