This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/EwMyyaVQJ8rfKy51J3WKCF1FKfI.roa File: EwMyyaVQJ8rfKy51J3WKCF1FKfI.roa (raw, json) Hash identifier: QENrigtaKjh6uAPaS8VxygrnvDaJ27VvotLU3ph+Xl8= Subject key identifier: 13:03:32:C9:A5:50:27:CA:DF:2B:2E:75:27:75:8A:08:5D:45:29:F2 Certificate issuer: /CN=77b8cf454b0962d16a4855808fd3abc15852bbd8 Certificate serial: 019B7C125BFFA35EE90A55B9A095802FA0DF Authority key identifier: 77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/EwMyyaVQJ8rfKy51J3WKCF1FKfI.roa Signing time: Fri 02 Jan 2026 00:18:56 +0000 ROA not before: Fri 02 Jan 2026 00:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8426 IP address blocks: 62.173.64.0/18 maxlen: 24 62.231.128.0/19 maxlen: 24 79.123.0.0/17 maxlen: 24 80.168.0.0/16 maxlen: 24 81.171.128.0/17 maxlen: 24 89.206.128.0/17 maxlen: 24 89.206.216.0/22 maxlen: 22 89.206.216.0/23 maxlen: 23 89.206.218.0/23 maxlen: 23 176.52.208.0/21 maxlen: 24 185.22.164.0/23 maxlen: 24 185.39.232.0/23 maxlen: 24 185.77.72.0/22 maxlen: 24 185.77.74.0/24 maxlen: 24 185.77.200.0/22 maxlen: 24 185.78.204.0/22 maxlen: 24 194.88.132.0/23 maxlen: 24 194.112.32.0/19 maxlen: 24 194.119.128.0/18 maxlen: 24 195.8.64.0/19 maxlen: 24 195.58.192.0/19 maxlen: 24 195.102.0.0/16 maxlen: 24 195.157.0.0/16 maxlen: 24 195.216.0.0/19 maxlen: 24 195.245.201.0/24 maxlen: 24 212.49.192.0/18 maxlen: 24 212.125.64.0/19 maxlen: 24 212.126.128.0/19 maxlen: 24 212.169.0.0/18 maxlen: 24 212.188.128.0/17 maxlen: 24 213.2.0.0/16 maxlen: 24 213.165.128.0/19 maxlen: 24 213.253.0.0/18 maxlen: 24 217.158.0.0/16 maxlen: 24 2001:67c:1088::/47 maxlen: 48 2001:67c:1089::/48 maxlen: 48 2001:67c:27dc::/48 maxlen: 48 2001:a88::/32 maxlen: 32 2a00:ed0::/32 maxlen: 32 2a00:62e0::/32 maxlen: 32 2a02:e100::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:5b:ff:a3:5e:e9:0a:55:b9:a0:95:80:2f:a0:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77b8cf454b0962d16a4855808fd3abc15852bbd8 Validity Not Before: Jan 2 00:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=130332c9a55027cadf2b2e7527758a085d4529f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:bb:73:1b:1e:f3:e4:18:97:3d:78:81:f8:30: 4e:83:90:c4:05:f0:ea:c2:6a:b9:62:04:3d:00:37: 53:5d:f1:97:13:ad:2e:26:32:b6:7a:e0:1d:97:e8: 13:47:18:09:39:17:4a:5c:c6:22:66:02:48:c8:f9: b1:2a:bf:ce:51:5d:02:3d:7d:59:15:87:b0:1e:ef: d9:bf:b9:38:02:34:eb:bc:e5:5f:65:1c:87:88:b1: 58:64:e1:ae:68:c4:3f:40:15:1a:0c:41:38:89:69: d3:95:5e:8c:43:cb:3c:03:c0:e5:83:60:7d:66:e2: 6a:f7:a0:73:d8:aa:44:c1:1c:25:42:3a:85:6c:3e: ca:44:4c:89:95:5b:82:67:0d:1d:02:66:ca:75:0e: d2:7f:df:2e:d1:23:6d:4c:33:d4:8e:08:e5:ec:68: 13:71:24:19:f8:5f:97:7e:69:13:56:9d:9a:7e:ce: a3:fa:a3:69:4f:cb:f1:66:3b:bb:4f:9d:49:90:b0: c5:a7:ca:da:c5:e4:0b:d0:aa:c2:30:ca:1a:3d:c3: 02:fa:67:8c:76:9f:61:14:3f:73:3d:b9:3f:2c:be: 1f:28:a0:f6:e4:74:e3:f3:de:79:fe:a7:c3:ca:dc: 4d:69:33:32:dd:d1:62:15:8c:1a:d6:2a:ed:3c:1d: 9c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:03:32:C9:A5:50:27:CA:DF:2B:2E:75:27:75:8A:08:5D:45:29:F2 X509v3 Authority Key Identifier: keyid:77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/EwMyyaVQJ8rfKy51J3WKCF1FKfI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.173.64.0/18 62.231.128.0/19 79.123.0.0/17 80.168.0.0/16 81.171.128.0/17 89.206.128.0/17 176.52.208.0/21 185.22.164.0/23 185.39.232.0/23 185.77.72.0/22 185.77.200.0/22 185.78.204.0/22 194.88.132.0/23 194.112.32.0/19 194.119.128.0/18 195.8.64.0/19 195.58.192.0/19 195.102.0.0/16 195.157.0.0/16 195.216.0.0/19 195.245.201.0/24 212.49.192.0/18 212.125.64.0/19 212.126.128.0/19 212.169.0.0/18 212.188.128.0/17 213.2.0.0/16 213.165.128.0/19 213.253.0.0/18 217.158.0.0/16 IPv6: 2001:67c:1088::/47 2001:67c:27dc::/48 2001:a88::/32 2a00:ed0::/32 2a00:62e0::/32 2a02:e100::/29 Signature Algorithm: sha256WithRSAEncryption 15:95:6a:98:35:24:d6:91:9b:fc:58:44:b4:23:3e:5a:80:14: 3b:e1:0e:5d:6b:91:d7:73:49:ea:1e:ef:b1:19:ad:39:2a:5e: 84:c0:57:35:77:ba:8e:60:4a:de:cf:57:00:6b:8b:a8:fd:7d: 46:5f:37:da:1d:73:fe:76:13:df:10:43:cd:df:4c:88:8d:e1: 09:41:1f:c8:e3:7d:bf:a6:60:53:33:94:a5:c5:5a:6d:ca:93: 2c:3d:6d:fa:d5:31:62:9b:84:07:e9:0a:c1:bc:17:d3:f2:25: 00:4f:c9:2c:5c:4f:b0:95:36:ea:f8:89:69:9e:7c:6a:36:3d: 99:ad:f7:48:48:8b:32:ef:fa:c1:ff:52:98:ba:cf:18:c3:ec: 5f:3b:3b:d6:6c:e7:02:6f:06:af:84:93:f8:75:53:d9:f5:74: 87:44:60:ec:7b:c9:06:c5:4b:2d:4e:ab:04:0f:18:58:af:67: 37:14:69:d4:38:23:61:09:3f:06:0a:24:85:80:67:14:a1:a5: 2f:d9:e5:4f:a4:29:99:fd:ea:a8:c8:70:87:93:47:ca:82:d4: 52:3f:1c:39:fa:86:99:0a:ba:14:a0:af:dd:b5:10:ee:04:66: 82:20:85:d7:4d:79:85:32:6a:14:39:7a:6c:93:f4:fd:81:cc: c9:c3:0d:98 -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgISAZt8Elv/o17pClW5oJWAL6DfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YjhjZjQ1NGIwOTYyZDE2YTQ4NTU4MDhmZDNhYmMxNTg1 MmJiZDgwHhcNMjYwMTAyMDAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzAzMzJjOWE1NTAyN2NhZGYyYjJlNzUyNzc1OGEwODVkNDUyOWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+btzGx7z5BiXPXiB+DBOg5DEBfDq wmq5YgQ9ADdTXfGXE60uJjK2euAdl+gTRxgJORdKXMYiZgJIyPmxKr/OUV0CPX1Z FYewHu/Zv7k4AjTrvOVfZRyHiLFYZOGuaMQ/QBUaDEE4iWnTlV6MQ8s8A8Dlg2B9 ZuJq96Bz2KpEwRwlQjqFbD7KREyJlVuCZw0dAmbKdQ7Sf98u0SNtTDPUjgjl7GgT cSQZ+F+XfmkTVp2afs6j+qNpT8vxZju7T51JkLDFp8raxeQL0KrCMMoaPcMC+meM dp9hFD9zPbk/LL4fKKD25HTj8955/qfDytxNaTMy3dFiFYwa1irtPB2cFwIDAQAB o4IC7jCCAuowHQYDVR0OBBYEFBMDMsmlUCfK3ysudSd1ighdRSnyMB8GA1UdIwQY MBaAFHe4z0VLCWLRakhVgI/Tq8FYUrvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDdqUFJVc0pZdEZxU0ZXQWo5T3J3VmhTdTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jMTcxY2EtNGIxYi00MTg3LWJhNDYt YTRmYzllMjQ1OGVjLzEvRXdNeXlhVlFKOHJmS3k1MUozV0tDRjFGS2ZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9jMTcxY2EtNGIxYi00MTg3LWJhNDYtYTRmYzllMjQ1OGVj LzEvZDdqUFJVc0pZdEZxU0ZXQWo5T3J3VmhTdTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBAgYIKwYBBQUHAQcBAf8EgfIwge8wgbYEAgABMIGvAwQG Pq1AAwQFPueAAwQHT3sAAwMAUKgDBAdRq4ADBAdZzoADBAOwNNADBAG5FqQDBAG5 J+gDBAK5TUgDBAK5TcgDBAK5TswDBAHCWIQDBAXCcCADBAbCd4ADBAXDCEADBAXD OsADAwDDZgMDAMOdAwQFw9gAAwQAw/XJAwQG1DHAAwQF1H1AAwQF1H6AAwQG1KkA AwQH1LyAAwMA1QIDBAXVpYADBAbV/QADAwDZnjA0BAIAAjAuAwcBIAEGfBCIAwcA IAEGfCfcAwUAIAEKiAMFACoADtADBQAqAGLgAwUDKgLhADANBgkqhkiG9w0BAQsF AAOCAQEAFZVqmDUk1pGb/FhEtCM+WoAUO+EOXWuR13NJ6h7vsRmtOSpehMBXNXe6 jmBK3s9XAGuLqP19Rl832h1z/nYT3xBDzd9MiI3hCUEfyON9v6ZgUzOUpcVabcqT LD1t+tUxYpuEB+kKwbwX0/IlAE/JLFxPsJU26viJaZ58ajY9ma33SEiLMu/6wf9S mLrPGMPsXzs71mznAm8Gr4ST+HVT2fV0h0Rg7HvJBsVLLU6rBA8YWK9nNxRp1Dgj YQk/BgokhYBnFKGlL9nlT6Qpmf3qqMhwh5NHyoLUUj8cOfqGmQq6FKCv3bUQ7gRm giCF1015hTJqFDl6bJP0/YHMycMNmA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:59 2026 by rpki-client