This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tzCJIkpYH8oGExG22pdkrISTSM0.roa File: tzCJIkpYH8oGExG22pdkrISTSM0.roa (raw, json) Hash identifier: /ksuiORNqnJx4jZaNPFb1D5vDBF7rb5r00Ow/Gmy5mY= Subject key identifier: B7:30:89:22:4A:58:1F:CA:06:13:11:B6:DA:97:64:AC:84:93:48:CD Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BEC403EA47EADC4B87F822ACE8A60A548 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tzCJIkpYH8oGExG22pdkrISTSM0.roa Signing time: Fri 23 Jan 2026 19:06:31 +0000 ROA not before: Fri 23 Jan 2026 19:06:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 37.202.212.0/24 maxlen: 24 151.240.29.0/24 maxlen: 24 151.240.146.0/24 maxlen: 24 151.240.147.0/24 maxlen: 24 151.240.148.0/24 maxlen: 24 151.240.149.0/24 maxlen: 24 151.240.150.0/24 maxlen: 24 151.240.154.0/24 maxlen: 24 151.240.161.0/24 maxlen: 24 151.240.169.0/24 maxlen: 24 151.240.179.0/24 maxlen: 24 151.240.251.0/24 maxlen: 24 151.240.252.0/24 maxlen: 24 151.240.253.0/24 maxlen: 24 151.241.9.0/24 maxlen: 24 151.241.13.0/24 maxlen: 24 151.241.168.0/24 maxlen: 24 151.241.213.0/24 maxlen: 24 151.241.222.0/24 maxlen: 24 151.241.223.0/24 maxlen: 24 151.242.101.0/24 maxlen: 24 151.242.105.0/24 maxlen: 24 151.242.143.0/24 maxlen: 24 151.243.138.0/23 maxlen: 24 151.243.144.0/23 maxlen: 24 151.243.148.0/24 maxlen: 24 151.243.166.0/23 maxlen: 24 151.243.173.0/24 maxlen: 24 151.243.176.0/24 maxlen: 24 151.243.177.0/24 maxlen: 24 151.243.178.0/23 maxlen: 24 151.243.182.0/24 maxlen: 24 151.243.190.0/24 maxlen: 24 151.243.196.0/24 maxlen: 24 151.243.200.0/24 maxlen: 24 151.243.207.0/24 maxlen: 24 151.243.208.0/24 maxlen: 24 151.243.209.0/24 maxlen: 24 151.243.224.0/24 maxlen: 24 151.243.225.0/24 maxlen: 24 151.243.247.0/24 maxlen: 24 151.245.60.0/24 maxlen: 24 151.245.68.0/24 maxlen: 24 151.245.88.0/24 maxlen: 24 151.245.89.0/24 maxlen: 24 151.245.91.0/24 maxlen: 24 151.245.98.0/24 maxlen: 24 151.245.122.0/24 maxlen: 24 151.245.123.0/24 maxlen: 24 151.245.124.0/24 maxlen: 24 151.245.125.0/24 maxlen: 24 151.245.126.0/24 maxlen: 24 151.245.148.0/24 maxlen: 24 151.245.150.0/24 maxlen: 24 151.245.194.0/24 maxlen: 24 151.245.226.0/23 maxlen: 24 151.245.230.0/24 maxlen: 24 151.246.164.0/23 maxlen: 24 151.246.246.0/23 maxlen: 24 151.246.250.0/23 maxlen: 24 151.247.112.0/24 maxlen: 24 151.247.113.0/24 maxlen: 24 151.247.114.0/24 maxlen: 24 151.247.116.0/24 maxlen: 24 151.247.117.0/24 maxlen: 24 151.247.118.0/24 maxlen: 24 151.247.119.0/24 maxlen: 24 151.247.137.0/24 maxlen: 24 151.247.161.0/24 maxlen: 24 151.247.165.0/24 maxlen: 24 151.247.177.0/24 maxlen: 24 151.247.250.0/24 maxlen: 24 151.247.253.0/24 maxlen: 24 151.247.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ec:40:3e:a4:7e:ad:c4:b8:7f:82:2a:ce:8a:60:a5:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 23 19:06:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b73089224a581fca061311b6da9764ac849348cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:47:ae:cc:88:b1:61:57:9f:57:42:51:ca:c3: 49:de:16:d9:aa:ee:03:6c:63:e8:69:74:4c:45:d5: 44:80:42:37:3c:b6:f2:3a:ec:50:43:a5:bf:e2:b2: 5b:1f:48:0d:b0:de:e9:f4:e2:36:21:01:0f:5e:35: d3:ce:1b:87:28:2b:e5:77:44:e0:53:c2:b5:78:c3: f1:f9:41:5f:d3:5a:7c:2c:cc:de:6b:a7:5a:f1:1f: b5:b7:15:50:61:4f:a9:04:a6:3b:4f:2c:66:04:56: 9d:e8:f7:09:8e:fe:f7:c5:80:21:39:f4:14:6f:fb: f5:56:fc:ea:dd:06:9b:f4:95:b8:9d:fa:8e:81:98: c9:4e:82:84:49:2b:2c:55:19:22:30:14:21:41:72: 55:a9:76:d6:74:50:f8:33:48:e2:cd:45:53:dd:da: 43:66:32:83:c3:65:76:9b:03:21:f5:87:ce:0d:36: 0d:09:a8:7d:62:79:3c:1f:e8:cc:0d:6f:8a:fb:bb: 5e:79:9c:70:f0:2c:33:8c:81:05:12:d2:14:a1:d5: 08:a0:a1:6c:57:3c:53:33:a5:87:04:49:7a:13:b6: 2c:64:6e:64:3b:97:bc:a2:21:7f:b1:9c:1c:bb:79: 86:93:f3:f9:92:e6:70:69:3f:40:2b:be:59:82:c1: 58:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:30:89:22:4A:58:1F:CA:06:13:11:B6:DA:97:64:AC:84:93:48:CD X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tzCJIkpYH8oGExG22pdkrISTSM0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.212.0/24 151.240.29.0/24 151.240.146.0-151.240.150.255 151.240.154.0/24 151.240.161.0/24 151.240.169.0/24 151.240.179.0/24 151.240.251.0-151.240.253.255 151.241.9.0/24 151.241.13.0/24 151.241.168.0/24 151.241.213.0/24 151.241.222.0/23 151.242.101.0/24 151.242.105.0/24 151.242.143.0/24 151.243.138.0/23 151.243.144.0/23 151.243.148.0/24 151.243.166.0/23 151.243.173.0/24 151.243.176.0/22 151.243.182.0/24 151.243.190.0/24 151.243.196.0/24 151.243.200.0/24 151.243.207.0-151.243.209.255 151.243.224.0/23 151.243.247.0/24 151.245.60.0/24 151.245.68.0/24 151.245.88.0/23 151.245.91.0/24 151.245.98.0/24 151.245.122.0-151.245.126.255 151.245.148.0/24 151.245.150.0/24 151.245.194.0/24 151.245.226.0/23 151.245.230.0/24 151.246.164.0/23 151.246.246.0/23 151.246.250.0/23 151.247.112.0-151.247.114.255 151.247.116.0/22 151.247.137.0/24 151.247.161.0/24 151.247.165.0/24 151.247.177.0/24 151.247.250.0/24 151.247.253.0-151.247.254.255 Signature Algorithm: sha256WithRSAEncryption 77:08:1e:7e:be:70:5d:96:27:db:af:ef:1f:b2:06:13:c6:ff: ba:c8:b4:fe:0d:59:34:46:79:24:7d:a4:50:de:22:81:79:54: de:12:c2:ea:db:a9:8c:cb:0c:ee:bc:e7:09:cf:b0:f4:d5:08: 18:ae:e1:ea:7a:b5:54:7a:df:14:39:64:4e:f6:0d:71:79:1f: a2:86:98:2a:84:3d:ee:97:9c:b7:14:67:d6:b9:a8:3c:8a:8e: c2:f2:78:49:82:ca:11:e6:b3:66:dd:d0:30:72:79:f4:18:c1: f0:ce:d8:aa:e8:1d:5e:21:16:5e:92:7d:cc:89:ed:06:c3:43: 51:ca:f8:04:f1:12:ba:37:6c:c5:ed:06:df:5b:39:cd:91:46: fb:d5:e5:58:91:67:20:33:f6:46:8e:21:78:a8:74:a1:64:70: d0:83:3b:36:4c:2c:73:47:db:4f:9a:09:62:99:d9:99:ad:5d: bb:82:e8:77:36:7a:57:95:44:39:d7:f0:89:55:9b:b6:4c:3e: 84:38:99:e9:66:f2:89:38:6b:82:f5:bb:15:b6:3a:f2:1a:4f: 4b:f0:5b:2e:0e:eb:c5:ee:6c:40:88:7f:7e:b0:38:c0:27:91: b6:f2:4e:05:85:b2:c9:4c:be:58:00:b0:6a:f9:a1:48:dc:80: 87:86:c6:92 -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgISAZvsQD6kfq3EuH+CKs6KYKVIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTIzMTkwNjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzMwODkyMjRhNTgxZmNhMDYxMzExYjZkYTk3NjRhYzg0OTM0OGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEeuzIixYVefV0JRysNJ3hbZqu4D bGPoaXRMRdVEgEI3PLbyOuxQQ6W/4rJbH0gNsN7p9OI2IQEPXjXTzhuHKCvld0Tg U8K1eMPx+UFf01p8LMzea6da8R+1txVQYU+pBKY7TyxmBFad6PcJjv73xYAhOfQU b/v1Vvzq3Qab9JW4nfqOgZjJToKESSssVRkiMBQhQXJVqXbWdFD4M0jizUVT3dpD ZjKDw2V2mwMh9YfODTYNCah9Ynk8H+jMDW+K+7teeZxw8CwzjIEFEtIUodUIoKFs VzxTM6WHBEl6E7YsZG5kO5e8oiF/sZwcu3mGk/P5kuZwaT9AK75ZgsFYQwIDAQAB o4IDbzCCA2swHQYDVR0OBBYEFLcwiSJKWB/KBhMRttqXZKyEk0jNMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvdHpDSklrcFlIOG9HRXhHMjJwZGtySVNUU00wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBgwYIKwYBBQUHAQcBAf8EggFyMIIBbjCCAWoEAgABMIIB YgMEACXK1AMEAJfwHTAMAwQBl/CSAwQAl/CWAwQAl/CaAwQAl/ChAwQAl/CpAwQA l/CzMAwDBACX8PsDBAGX8PwDBACX8QkDBACX8Q0DBACX8agDBACX8dUDBAGX8d4D BACX8mUDBACX8mkDBACX8o8DBAGX84oDBAGX85ADBACX85QDBAGX86YDBACX860D BAKX87ADBACX87YDBACX874DBACX88QDBACX88gwDAMEAJfzzwMEAZfz0AMEAZfz 4AMEAJfz9wMEAJf1PAMEAJf1RAMEAZf1WAMEAJf1WwMEAJf1YjAMAwQBl/V6AwQA l/V+AwQAl/WUAwQAl/WWAwQAl/XCAwQBl/XiAwQAl/XmAwQBl/akAwQBl/b2AwQB l/b6MAwDBASX93ADBACX93IDBAKX93QDBACX94kDBACX96EDBACX96UDBACX97ED BACX9/owDAMEAJf3/QMEAJf3/jANBgkqhkiG9w0BAQsFAAOCAQEAdwgefr5wXZYn 26/vH7IGE8b/usi0/g1ZNEZ5JH2kUN4igXlU3hLC6tupjMsM7rznCc+w9NUIGK7h 6nq1VHrfFDlkTvYNcXkfooaYKoQ97pectxRn1rmoPIqOwvJ4SYLKEeazZt3QMHJ5 9BjB8M7YqugdXiEWXpJ9zIntBsNDUcr4BPESujdsxe0G31s5zZFG+9XlWJFnIDP2 Ro4heKh0oWRw0IM7Nkwsc0fbT5oJYpnZma1du4LodzZ6V5VEOdfwiVWbtkw+hDiZ 6WbyiThrgvW7FbY68hpPS/BbLg7rxe5sQIh/frA4wCeRtvJOBYWyyUy+WACwavmh SNyAh4bGkg== -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:09 2026 by rpki-client