This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/W9Fvlv3duX9DRkDTqbmNDRUAR2w.roa File: W9Fvlv3duX9DRkDTqbmNDRUAR2w.roa (raw, json) Hash identifier: steiQ/OhvjftehInkgiMWqLT5RHndX02Sd+qChnL5N4= Subject key identifier: 5B:D1:6F:96:FD:DD:B9:7F:43:46:40:D3:A9:B9:8D:0D:15:00:47:6C Certificate issuer: /CN=e7fed4e778209c3cae93d4b76d350704462c3aab Certificate serial: 019B7F15B961E9E2D42D3BCD96645567E8BB Authority key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/W9Fvlv3duX9DRkDTqbmNDRUAR2w.roa Signing time: Fri 02 Jan 2026 14:21:28 +0000 ROA not before: Fri 02 Jan 2026 14:21:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39501 IP address blocks: 45.140.28.0/22 maxlen: 22 85.204.30.0/23 maxlen: 23 85.204.76.0/23 maxlen: 23 85.204.104.0/23 maxlen: 23 86.104.232.0/21 maxlen: 21 89.32.196.0/23 maxlen: 23 89.33.18.0/23 maxlen: 23 89.33.204.0/23 maxlen: 23 89.33.234.0/23 maxlen: 23 89.33.240.0/23 maxlen: 23 89.34.20.0/23 maxlen: 23 89.34.88.0/23 maxlen: 23 89.34.94.0/23 maxlen: 23 89.34.168.0/23 maxlen: 23 89.34.176.0/23 maxlen: 23 89.34.200.0/23 maxlen: 23 89.35.58.0/23 maxlen: 23 89.35.132.0/23 maxlen: 23 89.35.156.0/23 maxlen: 23 89.35.176.0/23 maxlen: 23 89.35.194.0/23 maxlen: 23 89.36.16.0/23 maxlen: 23 89.36.194.0/23 maxlen: 23 89.36.226.0/23 maxlen: 23 89.36.252.0/23 maxlen: 23 89.37.30.0/23 maxlen: 23 89.37.42.0/23 maxlen: 23 89.37.102.0/23 maxlen: 23 89.37.198.0/23 maxlen: 23 89.37.218.0/23 maxlen: 23 89.38.24.0/23 maxlen: 23 89.38.102.0/23 maxlen: 23 89.38.242.0/23 maxlen: 23 89.39.186.0/23 maxlen: 23 89.40.38.0/23 maxlen: 23 89.40.78.0/23 maxlen: 23 89.40.90.0/23 maxlen: 23 89.40.106.0/23 maxlen: 23 89.40.110.0/23 maxlen: 23 89.40.128.0/23 maxlen: 23 89.41.8.0/21 maxlen: 21 89.41.16.0/21 maxlen: 22 89.41.16.0/22 maxlen: 23 89.41.20.0/22 maxlen: 23 89.41.32.0/23 maxlen: 23 89.41.58.0/23 maxlen: 23 89.41.240.0/21 maxlen: 21 89.42.32.0/23 maxlen: 23 89.42.56.0/23 maxlen: 23 89.42.68.0/23 maxlen: 23 89.42.150.0/23 maxlen: 23 89.42.228.0/23 maxlen: 23 89.43.36.0/23 maxlen: 23 89.43.70.0/23 maxlen: 23 89.43.88.0/21 maxlen: 21 89.43.96.0/21 maxlen: 21 89.43.182.0/23 maxlen: 23 89.43.188.0/23 maxlen: 23 89.43.204.0/23 maxlen: 23 89.44.146.0/23 maxlen: 23 89.44.190.0/23 maxlen: 23 89.44.202.0/23 maxlen: 23 89.45.80.0/23 maxlen: 23 89.45.230.0/23 maxlen: 23 89.46.44.0/23 maxlen: 23 89.46.60.0/23 maxlen: 23 89.46.94.0/23 maxlen: 23 89.165.0.0/17 maxlen: 17 89.165.0.0/18 maxlen: 18 89.165.8.0/21 maxlen: 21 89.165.16.0/21 maxlen: 21 89.165.56.0/21 maxlen: 21 89.165.64.0/18 maxlen: 18 89.165.80.0/21 maxlen: 21 89.165.105.0/24 maxlen: 24 94.176.32.0/21 maxlen: 21 94.177.72.0/21 maxlen: 21 185.46.0.0/22 maxlen: 22 188.158.0.0/16 maxlen: 16 188.158.0.0/18 maxlen: 18 188.158.0.0/19 maxlen: 19 188.158.16.0/20 maxlen: 20 188.158.32.0/19 maxlen: 19 188.158.32.0/20 maxlen: 20 188.158.64.0/19 maxlen: 19 188.158.96.0/19 maxlen: 19 188.158.96.0/20 maxlen: 20 188.158.96.0/21 maxlen: 21 188.158.128.0/18 maxlen: 18 188.158.128.0/19 maxlen: 19 188.158.160.0/19 maxlen: 19 188.158.160.0/20 maxlen: 20 188.158.160.0/21 maxlen: 21 188.158.192.0/19 maxlen: 19 188.158.224.0/19 maxlen: 19 188.159.0.0/18 maxlen: 18 188.159.0.0/19 maxlen: 19 188.159.32.0/19 maxlen: 19 188.159.64.0/19 maxlen: 19 188.159.96.0/19 maxlen: 19 188.159.128.0/18 maxlen: 18 188.159.128.0/19 maxlen: 19 188.159.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b9:61:e9:e2:d4:2d:3b:cd:96:64:55:67:e8:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7fed4e778209c3cae93d4b76d350704462c3aab Validity Not Before: Jan 2 14:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bd16f96fdddb97f434640d3a9b98d0d1500476c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:db:c9:97:37:f4:b4:03:78:bd:fe:9b:4f:1b: a6:b9:42:7d:30:68:ce:c0:7d:7e:98:7a:d6:84:97: b8:63:a1:00:e7:8b:7b:75:c3:35:30:1a:ff:8a:a8: e4:da:0f:21:a0:06:e0:49:a2:42:e0:3b:0f:d3:4e: ee:be:55:62:93:4c:d7:e0:7a:89:e8:6c:c1:08:25: 8d:9d:cc:ac:2c:14:71:fa:f4:ed:d9:45:25:7d:b2: d9:43:4d:c2:0d:24:b7:21:57:66:4a:0a:b8:fd:ff: 09:17:35:ea:7e:3a:1b:11:54:5d:d3:d5:8f:3d:1e: 5e:9b:d8:32:39:fc:fe:45:ba:cf:22:36:f8:da:ac: e8:30:f3:57:ae:c8:79:7a:77:03:df:6b:84:53:18: 9f:67:13:ea:6e:df:42:05:3f:40:79:3d:bd:d4:db: 25:89:22:c4:08:47:18:d3:88:96:74:03:a1:c3:84: 37:54:fc:a9:f9:69:f1:c5:9e:82:53:3c:20:8f:98: a7:5c:7c:e9:b0:84:25:24:8c:82:84:5f:da:b7:c9: c7:a0:1b:f1:f1:9a:b8:c1:73:3b:11:dc:26:35:e5: ff:0d:ad:0d:bb:64:6d:51:44:7e:c3:84:21:05:00: d3:47:4a:59:ec:2b:04:79:44:52:1b:a6:3a:0e:64: a8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D1:6F:96:FD:DD:B9:7F:43:46:40:D3:A9:B9:8D:0D:15:00:47:6C X509v3 Authority Key Identifier: keyid:E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/W9Fvlv3duX9DRkDTqbmNDRUAR2w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.28.0/22 85.204.30.0/23 85.204.76.0/23 85.204.104.0/23 86.104.232.0/21 89.32.196.0/23 89.33.18.0/23 89.33.204.0/23 89.33.234.0/23 89.33.240.0/23 89.34.20.0/23 89.34.88.0/23 89.34.94.0/23 89.34.168.0/23 89.34.176.0/23 89.34.200.0/23 89.35.58.0/23 89.35.132.0/23 89.35.156.0/23 89.35.176.0/23 89.35.194.0/23 89.36.16.0/23 89.36.194.0/23 89.36.226.0/23 89.36.252.0/23 89.37.30.0/23 89.37.42.0/23 89.37.102.0/23 89.37.198.0/23 89.37.218.0/23 89.38.24.0/23 89.38.102.0/23 89.38.242.0/23 89.39.186.0/23 89.40.38.0/23 89.40.78.0/23 89.40.90.0/23 89.40.106.0/23 89.40.110.0/23 89.40.128.0/23 89.41.8.0-89.41.23.255 89.41.32.0/23 89.41.58.0/23 89.41.240.0/21 89.42.32.0/23 89.42.56.0/23 89.42.68.0/23 89.42.150.0/23 89.42.228.0/23 89.43.36.0/23 89.43.70.0/23 89.43.88.0-89.43.103.255 89.43.182.0/23 89.43.188.0/23 89.43.204.0/23 89.44.146.0/23 89.44.190.0/23 89.44.202.0/23 89.45.80.0/23 89.45.230.0/23 89.46.44.0/23 89.46.60.0/23 89.46.94.0/23 89.165.0.0/17 94.176.32.0/21 94.177.72.0/21 185.46.0.0/22 188.158.0.0-188.159.223.255 Signature Algorithm: sha256WithRSAEncryption bd:ac:02:0b:a3:02:2a:04:a5:8e:ba:01:96:e5:12:1f:69:21: f1:d0:9a:e3:1d:68:2a:1c:dc:da:84:28:d2:91:b1:36:06:e7: f2:d0:03:82:fe:6f:a7:78:85:f0:d1:30:29:b7:3e:3e:95:1c: ea:61:ff:12:9f:56:eb:79:93:cc:26:39:ef:3c:c3:b6:f8:0f: de:ec:c8:5d:9f:58:91:b3:51:bd:09:d1:c3:88:12:ce:00:6e: 33:e4:43:cc:b4:4f:e6:c5:2a:b3:cc:b7:6d:84:1b:eb:63:fe: 12:b5:ef:3e:82:41:0a:b1:37:81:cd:d0:83:4f:d8:95:3d:e5: 34:44:c6:52:c4:2f:31:b9:de:23:9d:bb:e7:44:a3:35:bb:a6: 57:7d:94:59:83:38:58:11:fc:be:a6:57:8c:7f:53:1d:d4:d2: 37:3d:e9:a2:d6:e2:56:ec:d9:68:08:5c:49:39:7d:9a:8c:02: fd:66:b7:71:7a:5d:62:19:03:01:d0:65:9d:6f:42:66:4b:53: be:41:7e:d7:75:df:12:7c:77:da:64:a2:86:b9:ae:21:3c:08: 79:85:fa:af:9e:4f:c9:71:64:fa:a1:4a:e2:4b:b7:d7:b4:3a: aa:69:6f:ea:42:c8:4d:a0:65:bd:4f:e8:ef:89:83:2b:db:77: f0:f9:41:a3 -----BEGIN CERTIFICATE----- MIIGsDCCBZigAwIBAgISAZt/Fblh6eLULTvNlmRVZ+i7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZmVkNGU3NzgyMDljM2NhZTkzZDRiNzZkMzUwNzA0NDYy YzNhYWIwHhcNMjYwMTAyMTQyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmQxNmY5NmZkZGRiOTdmNDM0NjQwZDNhOWI5OGQwZDE1MDA0NzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NvJlzf0tAN4vf6bTxumuUJ9MGjO wH1+mHrWhJe4Y6EA54t7dcM1MBr/iqjk2g8hoAbgSaJC4DsP007uvlVik0zX4HqJ 6GzBCCWNncysLBRx+vTt2UUlfbLZQ03CDSS3IVdmSgq4/f8JFzXqfjobEVRd09WP PR5em9gyOfz+RbrPIjb42qzoMPNXrsh5encD32uEUxifZxPqbt9CBT9AeT291Nsl iSLECEcY04iWdAOhw4Q3VPyp+WnxxZ6CUzwgj5inXHzpsIQlJIyChF/at8nHoBvx 8Zq4wXM7EdwmNeX/Da0Nu2RtUUR+w4QhBQDTR0pZ7CsEeURSG6Y6DmSoVQIDAQAB o4IDvDCCA7gwHQYDVR0OBBYEFFvRb5b93bl/Q0ZA06m5jQ0VAEdsMB8GA1UdIwQY MBaAFOf+1Od4IJw8rpPUt201BwRGLDqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV83VTUzZ2duRHl1azlTM2JUVUhCRVlzT3FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8yMmEzYzctNmZlNS00OWUxLTkzNWQt OGJiODAxNTJhYjM0LzEvVzlGdmx2M2R1WDlEUmtEVHFibU5EUlVBUjJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8yMmEzYzctNmZlNS00OWUxLTkzNWQtOGJiODAxNTJhYjM0 LzEvNV83VTUzZ2duRHl1azlTM2JUVUhCRVlzT3FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIB0AYIKwYBBQUHAQcBAf8EggG/MIIBuzCCAbcEAgABMIIB rwMEAi2MHAMEAVXMHgMEAVXMTAMEAVXMaAMEA1Zo6AMEAVkgxAMEAVkhEgMEAVkh zAMEAVkh6gMEAVkh8AMEAVkiFAMEAVkiWAMEAVkiXgMEAVkiqAMEAVkisAMEAVki yAMEAVkjOgMEAVkjhAMEAVkjnAMEAVkjsAMEAVkjwgMEAVkkEAMEAVkkwgMEAVkk 4gMEAVkk/AMEAVklHgMEAVklKgMEAVklZgMEAVklxgMEAVkl2gMEAVkmGAMEAVkm ZgMEAVkm8gMEAVknugMEAVkoJgMEAVkoTgMEAVkoWgMEAVkoagMEAVkobgMEAVko gDAMAwQDWSkIAwQDWSkQAwQBWSkgAwQBWSk6AwQDWSnwAwQBWSogAwQBWSo4AwQB WSpEAwQBWSqWAwQBWSrkAwQBWSskAwQBWStGMAwDBANZK1gDBANZK2ADBAFZK7YD BAFZK7wDBAFZK8wDBAFZLJIDBAFZLL4DBAFZLMoDBAFZLVADBAFZLeYDBAFZLiwD BAFZLjwDBAFZLl4DBAdZpQADBANesCADBANesUgDBAK5LgAwCwMDAbyeAwQFvJ/A MA0GCSqGSIb3DQEBCwUAA4IBAQC9rAILowIqBKWOugGW5RIfaSHx0JrjHWgqHNza hCjSkbE2Bufy0AOC/m+neIXw0TAptz4+lRzqYf8Sn1breZPMJjnvPMO2+A/e7Mhd n1iRs1G9CdHDiBLOAG4z5EPMtE/mxSqzzLdthBvrY/4Ste8+gkEKsTeBzdCDT9iV PeU0RMZSxC8xud4jnbvnRKM1u6ZXfZRZgzhYEfy+pleMf1Md1NI3Pemi1uJW7Nlo CFxJOX2ajAL9Zrdxel1iGQMB0GWdb0JmS1O+QX7Xdd8SfHfaZKKGua4hPAh5hfqv nk/JcWT6oUriS7fXtDqqaW/qQshNoGW9T+jviYMr23fw+UGj -----END CERTIFICATE-----Generated at Mon Jan 26 02:44:00 2026 by rpki-client