This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/22x8PN_1LTHR6l66GpUqyti_zA0.roa File: 22x8PN_1LTHR6l66GpUqyti_zA0.roa (raw, json) Hash identifier: CSv7c1XejVckeMl+4KVZ0R5JwTwo6hy/rgUnKWrc8iE= Subject key identifier: DB:6C:7C:3C:DF:F5:2D:31:D1:EA:5E:BA:1A:95:2A:CA:D8:BF:CC:0D Certificate issuer: /CN=d588212bf5dace1080dc45e2c55b92ff85c6c192 Certificate serial: 019B76EB692C672CF248000D02FE28A07858 Authority key identifier: D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/22x8PN_1LTHR6l66GpUqyti_zA0.roa Signing time: Thu 01 Jan 2026 00:18:17 +0000 ROA not before: Thu 01 Jan 2026 00:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207266 IP address blocks: 2a01:8840:4::/48 maxlen: 48 2a01:8840:5::/48 maxlen: 48 2a01:8840:15::/48 maxlen: 48 2a01:8840:19::/48 maxlen: 48 2a01:8840:1d::/48 maxlen: 48 2a01:8840:21::/48 maxlen: 48 2a01:8840:25::/48 maxlen: 48 2a01:8840:29::/48 maxlen: 48 2a01:8840:2d::/48 maxlen: 48 2a01:8840:31::/48 maxlen: 48 2a01:8840:35::/48 maxlen: 48 2a01:8840:39::/48 maxlen: 48 2a01:8840:3d::/48 maxlen: 48 2a01:8840:41::/48 maxlen: 48 2a01:8840:45::/48 maxlen: 48 2a01:8840:4d::/48 maxlen: 48 2a01:8840:51::/48 maxlen: 48 2a01:8840:55::/48 maxlen: 48 2a01:8840:59::/48 maxlen: 48 2a01:8840:5d::/48 maxlen: 48 2a01:8840:61::/48 maxlen: 48 2a01:8840:65::/48 maxlen: 48 2a01:8840:69::/48 maxlen: 48 2a01:8840:6d::/48 maxlen: 48 2a01:8840:71::/48 maxlen: 48 2a01:8840:75::/48 maxlen: 48 2a01:8840:79::/48 maxlen: 48 2a01:8840:7d::/48 maxlen: 48 2a01:8840:81::/48 maxlen: 48 2a01:8840:85::/48 maxlen: 48 2a01:8840:89::/48 maxlen: 48 2a01:8840:8d::/48 maxlen: 48 2a01:8840:91::/48 maxlen: 48 2a01:8840:95::/48 maxlen: 48 2a01:8840:99::/48 maxlen: 48 2a01:8840:9d::/48 maxlen: 48 2a01:8840:a1::/48 maxlen: 48 2a01:8840:a5::/48 maxlen: 48 2a01:8840:a9::/48 maxlen: 48 2a01:8840:ad::/48 maxlen: 48 2a01:8840:b1::/48 maxlen: 48 2a01:8840:b5::/48 maxlen: 48 2a01:8840:b9::/48 maxlen: 48 2a01:8840:bd::/48 maxlen: 48 2a01:8840:c1::/48 maxlen: 48 2a01:8840:c5::/48 maxlen: 48 2a01:8840:c9::/48 maxlen: 48 2a01:8840:cd::/48 maxlen: 48 2a01:8840:d1::/48 maxlen: 48 2a01:8840:d5::/48 maxlen: 48 2a01:8840:d9::/48 maxlen: 48 2a01:8840:dd::/48 maxlen: 48 2a01:8840:e1::/48 maxlen: 48 2a01:8840:e5::/48 maxlen: 48 2a01:8840:e9::/48 maxlen: 48 2a01:8840:ed::/48 maxlen: 48 2a01:8840:f1::/48 maxlen: 48 2a01:8840:f5::/48 maxlen: 48 2a01:8840:f7::/48 maxlen: 48 2a01:8840:f9::/48 maxlen: 48 2a01:8840:fb::/48 maxlen: 48 2a01:8840:107::/48 maxlen: 48 2a01:8840:109::/48 maxlen: 48 2a01:8840:10d::/48 maxlen: 48 2a01:8840:10f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:69:2c:67:2c:f2:48:00:0d:02:fe:28:a0:78:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d588212bf5dace1080dc45e2c55b92ff85c6c192 Validity Not Before: Jan 1 00:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db6c7c3cdff52d31d1ea5eba1a952acad8bfcc0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:83:74:9a:ff:10:39:c8:b6:ea:e9:44:03:10: 9d:54:a8:7a:c2:a1:20:f4:7f:64:cd:f4:eb:08:fb: 80:d2:99:83:6d:66:ca:51:c3:22:57:f4:61:e8:0d: f8:c5:74:b0:3e:08:ee:34:78:84:1a:a3:37:3e:e2: 5d:b0:45:ab:88:45:d9:40:8a:e4:95:86:5e:0a:41: 51:9b:48:d8:b6:89:64:31:80:e4:52:8e:ce:bc:df: 05:4d:bb:60:b2:53:40:cd:3c:a8:89:d9:38:cf:47: 8e:a9:dd:63:9e:4d:ad:2e:41:cd:f2:66:c1:09:8d: d4:78:0b:80:75:d8:d6:ee:f7:b1:5b:04:8d:86:75: f8:e7:73:37:1f:8a:c0:7a:28:c7:97:68:9b:a8:c8: 9d:96:32:7d:c3:d7:95:2a:25:eb:f8:78:c8:42:28: 90:32:42:02:44:46:bc:f2:19:41:de:bc:80:c3:4c: 66:e1:ad:73:49:23:c3:da:fa:68:15:85:04:87:25: c2:d1:22:aa:6f:c4:dd:a2:45:6b:b5:7a:40:c2:41: 34:de:f3:d8:ae:3a:31:4c:f5:0a:7c:aa:18:44:b4: 94:fb:07:b1:20:35:4a:6d:df:05:28:2f:ec:9e:71: 48:a9:50:b2:14:4e:0d:59:8b:a2:62:0d:cb:49:16: 3d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:6C:7C:3C:DF:F5:2D:31:D1:EA:5E:BA:1A:95:2A:CA:D8:BF:CC:0D X509v3 Authority Key Identifier: keyid:D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/22x8PN_1LTHR6l66GpUqyti_zA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:8840:4::/47 2a01:8840:15::/48 2a01:8840:19::/48 2a01:8840:1d::/48 2a01:8840:21::/48 2a01:8840:25::/48 2a01:8840:29::/48 2a01:8840:2d::/48 2a01:8840:31::/48 2a01:8840:35::/48 2a01:8840:39::/48 2a01:8840:3d::/48 2a01:8840:41::/48 2a01:8840:45::/48 2a01:8840:4d::/48 2a01:8840:51::/48 2a01:8840:55::/48 2a01:8840:59::/48 2a01:8840:5d::/48 2a01:8840:61::/48 2a01:8840:65::/48 2a01:8840:69::/48 2a01:8840:6d::/48 2a01:8840:71::/48 2a01:8840:75::/48 2a01:8840:79::/48 2a01:8840:7d::/48 2a01:8840:81::/48 2a01:8840:85::/48 2a01:8840:89::/48 2a01:8840:8d::/48 2a01:8840:91::/48 2a01:8840:95::/48 2a01:8840:99::/48 2a01:8840:9d::/48 2a01:8840:a1::/48 2a01:8840:a5::/48 2a01:8840:a9::/48 2a01:8840:ad::/48 2a01:8840:b1::/48 2a01:8840:b5::/48 2a01:8840:b9::/48 2a01:8840:bd::/48 2a01:8840:c1::/48 2a01:8840:c5::/48 2a01:8840:c9::/48 2a01:8840:cd::/48 2a01:8840:d1::/48 2a01:8840:d5::/48 2a01:8840:d9::/48 2a01:8840:dd::/48 2a01:8840:e1::/48 2a01:8840:e5::/48 2a01:8840:e9::/48 2a01:8840:ed::/48 2a01:8840:f1::/48 2a01:8840:f5::/48 2a01:8840:f7::/48 2a01:8840:f9::/48 2a01:8840:fb::/48 2a01:8840:107::/48 2a01:8840:109::/48 2a01:8840:10d::/48 2a01:8840:10f::/48 Signature Algorithm: sha256WithRSAEncryption 6d:52:45:71:33:91:69:e7:4f:5b:32:37:1b:9d:6b:e6:61:00: e7:b3:09:90:bc:f7:99:88:e5:7a:c6:c9:16:06:7c:3a:f4:7b: cd:73:16:52:81:9b:9c:06:33:4f:a7:2a:9c:36:49:1c:73:ab: f6:7e:33:51:cd:1c:0c:c3:69:12:c0:50:ce:58:92:09:9c:ed: 72:b2:0c:c0:c3:09:9e:ef:3a:a6:30:f0:69:f1:88:de:de:6a: f6:70:c9:e3:ec:e0:94:1e:42:fb:45:a1:aa:1e:68:a3:04:59: a6:46:3d:43:4a:85:51:5f:05:a2:d4:2b:98:4e:35:fc:33:be: 98:45:1b:ad:79:83:0d:75:dc:fe:7e:64:59:95:80:5a:8a:82: 3f:8b:ed:26:02:20:6b:31:7b:1b:87:b0:82:69:03:2a:76:0d: aa:97:e7:d0:c6:51:4e:61:70:b9:8b:5e:ef:95:83:fc:6b:c5: b3:03:77:fe:d0:0b:45:3f:d3:51:9f:7f:64:de:86:a8:4e:03: e1:d5:c2:db:b0:14:26:77:3d:4e:79:6d:93:b1:01:ba:51:49: 7b:d2:ba:db:50:eb:18:2f:29:52:61:51:87:9d:5a:11:ff:f6: ac:60:65:20:40:d6:7e:0f:b1:c9:7f:f1:e4:15:e7:6f:cd:1f: a4:7f:a3:df -----BEGIN CERTIFICATE----- MIIHQTCCBimgAwIBAgISAZt262ksZyzySAANAv4ooHhYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ODgyMTJiZjVkYWNlMTA4MGRjNDVlMmM1NWI5MmZmODVj NmMxOTIwHhcNMjYwMTAxMDAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjZjN2MzY2RmZjUyZDMxZDFlYTVlYmExYTk1MmFjYWQ4YmZjYzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoN0mv8QOci26ulEAxCdVKh6wqEg 9H9kzfTrCPuA0pmDbWbKUcMiV/Rh6A34xXSwPgjuNHiEGqM3PuJdsEWriEXZQIrk lYZeCkFRm0jYtolkMYDkUo7OvN8FTbtgslNAzTyoidk4z0eOqd1jnk2tLkHN8mbB CY3UeAuAddjW7vexWwSNhnX453M3H4rAeijHl2ibqMidljJ9w9eVKiXr+HjIQiiQ MkICREa88hlB3ryAw0xm4a1zSSPD2vpoFYUEhyXC0SKqb8TdokVrtXpAwkE03vPY rjoxTPUKfKoYRLSU+wexIDVKbd8FKC/snnFIqVCyFE4NWYuiYg3LSRY9FwIDAQAB o4IETTCCBEkwHQYDVR0OBBYEFNtsfDzf9S0x0epeuhqVKsrYv8wNMB8GA1UdIwQY MBaAFNWIISv12s4QgNxF4sVbkv+FxsGSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8yMTEzNTQtZWJlNC00Nzk3LTk4ZjMt MWIyYWMzNWMwOWFhLzEvMjJ4OFBOXzFMVEhSNmw2NkdwVXF5dGlfekEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8yMTEzNTQtZWJlNC00Nzk3LTk4ZjMtMWIyYWMzNWMwOWFh LzEvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICYQYIKwYBBQUHAQcBAf8EggJQMIICTDCCAkgEAgACMIIC QAMHASoBiEAABAMHACoBiEAAFQMHACoBiEAAGQMHACoBiEAAHQMHACoBiEAAIQMH ACoBiEAAJQMHACoBiEAAKQMHACoBiEAALQMHACoBiEAAMQMHACoBiEAANQMHACoB iEAAOQMHACoBiEAAPQMHACoBiEAAQQMHACoBiEAARQMHACoBiEAATQMHACoBiEAA UQMHACoBiEAAVQMHACoBiEAAWQMHACoBiEAAXQMHACoBiEAAYQMHACoBiEAAZQMH ACoBiEAAaQMHACoBiEAAbQMHACoBiEAAcQMHACoBiEAAdQMHACoBiEAAeQMHACoB iEAAfQMHACoBiEAAgQMHACoBiEAAhQMHACoBiEAAiQMHACoBiEAAjQMHACoBiEAA kQMHACoBiEAAlQMHACoBiEAAmQMHACoBiEAAnQMHACoBiEAAoQMHACoBiEAApQMH ACoBiEAAqQMHACoBiEAArQMHACoBiEAAsQMHACoBiEAAtQMHACoBiEAAuQMHACoB iEAAvQMHACoBiEAAwQMHACoBiEAAxQMHACoBiEAAyQMHACoBiEAAzQMHACoBiEAA 0QMHACoBiEAA1QMHACoBiEAA2QMHACoBiEAA3QMHACoBiEAA4QMHACoBiEAA5QMH ACoBiEAA6QMHACoBiEAA7QMHACoBiEAA8QMHACoBiEAA9QMHACoBiEAA9wMHACoB iEAA+QMHACoBiEAA+wMHACoBiEABBwMHACoBiEABCQMHACoBiEABDQMHACoBiEAB DzANBgkqhkiG9w0BAQsFAAOCAQEAbVJFcTORaedPWzI3G51r5mEA57MJkLz3mYjl esbJFgZ8OvR7zXMWUoGbnAYzT6cqnDZJHHOr9n4zUc0cDMNpEsBQzliSCZztcrIM wMMJnu86pjDwafGI3t5q9nDJ4+zglB5C+0Whqh5oowRZpkY9Q0qFUV8FotQrmE41 /DO+mEUbrXmDDXXc/n5kWZWAWoqCP4vtJgIgazF7G4ewgmkDKnYNqpfn0MZRTmFw uYte75WD/GvFswN3/tALRT/TUZ9/ZN6GqE4D4dXC27AUJnc9Tnltk7EBulFJe9K6 21DrGC8pUmFRh51aEf/2rGBlIEDWfg+xyX/x5BXnb80fpH+j3w== -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:02 2026 by rpki-client