This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/EUJR4oK_-qO6YAPuLUzPIGrtiic.roa File: EUJR4oK_-qO6YAPuLUzPIGrtiic.roa (raw, json) Hash identifier: YME5zAJYIJBkBPG7Ysa6vw+XFQl03WoNdtgDEh2gs4U= Subject key identifier: 11:42:51:E2:82:BF:FA:A3:BA:60:03:EE:2D:4C:CF:20:6A:ED:8A:27 Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46 Certificate serial: 019B791095ACE4DD5B3731119D401336C5F6 Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/EUJR4oK_-qO6YAPuLUzPIGrtiic.roa Signing time: Thu 01 Jan 2026 10:18:08 +0000 ROA not before: Thu 01 Jan 2026 10:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1759 IP address blocks: 46.132.0.0/16 maxlen: 16 62.71.0.0/16 maxlen: 16 62.73.32.0/19 maxlen: 19 80.74.192.0/19 maxlen: 19 80.220.0.0/14 maxlen: 21 81.16.64.0/20 maxlen: 20 84.34.0.0/16 maxlen: 16 84.248.0.0/14 maxlen: 21 86.114.0.0/16 maxlen: 21 86.115.0.0/16 maxlen: 16 88.86.128.0/19 maxlen: 19 88.192.0.0/14 maxlen: 21 93.106.0.0/16 maxlen: 16 109.240.0.0/16 maxlen: 16 131.177.0.0/16 maxlen: 16 141.208.0.0/16 maxlen: 16 176.72.0.0/16 maxlen: 16 188.238.0.0/16 maxlen: 16 192.58.42.0/23 maxlen: 23 192.58.44.0/22 maxlen: 22 192.58.48.0/21 maxlen: 21 192.58.64.0/20 maxlen: 20 192.58.80.0/21 maxlen: 21 192.58.88.0/23 maxlen: 23 192.83.0.0/18 maxlen: 18 192.83.64.0/19 maxlen: 19 192.83.96.0/22 maxlen: 22 192.83.100.0/24 maxlen: 24 192.89.0.0/16 maxlen: 16 192.89.123.0/24 maxlen: 24 192.103.86.0/24 maxlen: 24 192.103.91.0/24 maxlen: 24 192.103.92.0/24 maxlen: 24 192.103.105.0/24 maxlen: 24 192.103.106.0/24 maxlen: 24 192.103.112.0/22 maxlen: 22 192.103.116.0/24 maxlen: 24 192.130.0.0/16 maxlen: 24 192.194.0.0/16 maxlen: 24 193.178.133.0/24 maxlen: 24 193.208.0.0/14 maxlen: 14 193.210.18.0/24 maxlen: 24 193.210.19.0/24 maxlen: 24 194.89.0.0/16 maxlen: 16 194.111.0.0/16 maxlen: 16 194.137.0.0/16 maxlen: 16 194.142.0.0/16 maxlen: 16 194.197.0.0/16 maxlen: 16 194.197.68.0/24 maxlen: 24 194.215.0.0/16 maxlen: 16 194.251.0.0/16 maxlen: 16 194.252.0.0/16 maxlen: 16 195.156.0.0/16 maxlen: 16 195.165.0.0/16 maxlen: 16 212.83.96.0/19 maxlen: 19 212.149.64.0/18 maxlen: 18 212.182.192.0/18 maxlen: 18 212.213.0.0/16 maxlen: 16 213.28.0.0/16 maxlen: 16 213.140.160.0/19 maxlen: 19 213.173.128.0/19 maxlen: 19 217.140.128.0/17 maxlen: 17 2001:8b8::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:95:ac:e4:dd:5b:37:31:11:9d:40:13:36:c5:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46 Validity Not Before: Jan 1 10:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=114251e282bffaa3ba6003ee2d4ccf206aed8a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5a:30:1d:f4:93:0d:5c:b3:b3:ac:b3:69:f8: ba:98:c0:62:b3:aa:1f:b6:94:ef:0c:5e:f7:f1:63: 98:bc:bb:23:6c:12:61:85:93:bc:2d:28:4c:a8:16: ec:1b:ad:79:1a:2e:33:dd:f3:39:bb:6b:c5:d7:26: 5f:4f:45:bd:a1:89:92:75:fc:66:91:31:d9:8b:47: f1:93:ad:1a:d8:a4:1d:67:47:e1:48:32:26:ea:7d: 4f:17:ec:e4:07:ef:e4:bd:28:3d:35:22:5f:d8:a0: 6d:e4:af:a6:dd:d1:9a:75:2c:2d:d0:1a:f2:cf:83: be:f3:a7:fc:a1:9e:c5:cf:74:15:18:53:94:f9:94: eb:3a:12:1d:8f:0d:d4:03:ce:f7:6b:79:2d:10:00: 7b:83:61:dc:6a:49:4f:5e:f2:81:7c:f9:d5:ef:7f: 67:75:de:3e:5c:29:6c:32:2b:5d:c2:1d:64:e8:25: 13:6d:4a:17:ee:aa:6d:47:82:0a:ee:f8:1f:7a:76: 28:c9:6f:c0:59:39:0b:62:55:ac:f0:a9:67:6f:ac: 74:b7:bc:f1:0a:70:ae:f9:9d:72:5a:58:7b:e0:46: b9:18:54:9b:b3:55:5d:10:6d:c0:34:7b:17:dd:62: b2:63:9d:8c:20:3f:3f:b7:68:b0:6e:19:62:93:9c: 82:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:42:51:E2:82:BF:FA:A3:BA:60:03:EE:2D:4C:CF:20:6A:ED:8A:27 X509v3 Authority Key Identifier: keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/EUJR4oK_-qO6YAPuLUzPIGrtiic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.132.0.0/16 62.71.0.0/16 62.73.32.0/19 80.74.192.0/19 80.220.0.0/14 81.16.64.0/20 84.34.0.0/16 84.248.0.0/14 86.114.0.0/15 88.86.128.0/19 88.192.0.0/14 93.106.0.0/16 109.240.0.0/16 131.177.0.0/16 141.208.0.0/16 176.72.0.0/16 188.238.0.0/16 192.58.42.0-192.58.55.255 192.58.64.0-192.58.89.255 192.83.0.0-192.83.100.255 192.89.0.0/16 192.103.86.0/24 192.103.91.0-192.103.92.255 192.103.105.0-192.103.106.255 192.103.112.0-192.103.116.255 192.130.0.0/16 192.194.0.0/16 193.178.133.0/24 193.208.0.0/14 194.89.0.0/16 194.111.0.0/16 194.137.0.0/16 194.142.0.0/16 194.197.0.0/16 194.215.0.0/16 194.251.0.0-194.252.255.255 195.156.0.0/16 195.165.0.0/16 212.83.96.0/19 212.149.64.0/18 212.182.192.0/18 212.213.0.0/16 213.28.0.0/16 213.140.160.0/19 213.173.128.0/19 217.140.128.0/17 IPv6: 2001:8b8::/29 Signature Algorithm: sha256WithRSAEncryption 8f:a4:c6:91:cf:50:79:0b:2f:28:60:eb:c9:b8:a8:cd:12:e4: 44:14:0a:4c:8a:08:d4:10:7c:31:50:6a:a8:54:f4:07:a0:a4: 66:69:88:c9:f4:c5:7e:6b:89:94:df:22:d6:33:3a:30:70:2b: 4c:64:fb:68:f6:c4:da:82:5b:f6:5d:10:1c:25:e3:df:4e:3c: 2e:64:1b:63:26:19:9b:34:5c:15:87:a0:38:88:cb:16:8a:2d: cf:60:5d:2c:0c:08:6e:d0:46:4c:aa:02:42:1f:0b:59:f2:43: 48:ff:3d:66:f0:1a:1e:99:2c:9c:ae:f2:35:d0:68:72:8f:1e: 26:60:9a:17:f8:91:c3:24:ae:f6:22:4a:a7:78:c7:fa:56:b8: ef:a3:b0:9f:ee:68:be:ba:bb:54:84:cb:08:be:ea:aa:b4:a2: 13:9d:18:8f:12:a3:2b:f0:9c:3d:f0:6d:ae:a1:fe:b9:72:40: 17:ff:a1:0c:ba:11:f7:cc:fc:2f:77:ba:f7:31:f9:cb:93:eb: da:5c:40:0c:12:0b:4c:f2:20:9c:5c:43:02:1c:62:9b:b9:c3: c6:b3:af:fd:8b:1f:a9:37:a2:61:87:03:ba:b9:be:77:4e:55: 64:f0:77:47:c7:f1:58:d2:d2:ae:10:d9:0a:4e:37:f7:79:d1: 16:5f:ab:fc -----BEGIN CERTIFICATE----- MIIGPjCCBSagAwIBAgISAZt5EJWs5N1bNzERnUATNsX2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj NWRiNDYwHhcNMjYwMTAxMTAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTQyNTFlMjgyYmZmYWEzYmE2MDAzZWUyZDRjY2YyMDZhZWQ4YTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFowHfSTDVyzs6yzafi6mMBis6of tpTvDF738WOYvLsjbBJhhZO8LShMqBbsG615Gi4z3fM5u2vF1yZfT0W9oYmSdfxm kTHZi0fxk60a2KQdZ0fhSDIm6n1PF+zkB+/kvSg9NSJf2KBt5K+m3dGadSwt0Bry z4O+86f8oZ7Fz3QVGFOU+ZTrOhIdjw3UA873a3ktEAB7g2HcaklPXvKBfPnV739n dd4+XClsMitdwh1k6CUTbUoX7qptR4IK7vgfenYoyW/AWTkLYlWs8Klnb6x0t7zx CnCu+Z1yWlh74Ea5GFSbs1VdEG3ANHsX3WKyY52MID8/t2iwbhlik5yCVwIDAQAB o4IDSjCCA0YwHQYDVR0OBBYEFBFCUeKCv/qjumAD7i1MzyBq7YonMB8GA1UdIwQY MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt YTRjYThiOWMyMDViLzEvRVVKUjRvS18tcU82WUFQdUxVelBJR3J0aWljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBXgYIKwYBBQUHAQcBAf8EggFNMIIBSTCCATYEAgABMIIB LgMDAC6EAwMAPkcDBAU+SSADBAVQSsADAwJQ3AMEBFEQQAMDAFQiAwMCVPgDAwFW cgMEBVhWgAMDAljAAwMAXWoDAwBt8AMDAIOxAwMAjdADAwCwSAMDALzuMAwDBAHA OioDBAPAOjAwDAMEBsA6QAMEAcA6WDALAwMAwFMDBADAU2QDAwDAWQMEAMBnVjAM AwQAwGdbAwQAwGdcMAwDBADAZ2kDBADAZ2owDAMEBMBncAMEAMBndAMDAMCCAwMA wMIDBADBsoUDAwLB0AMDAMJZAwMAwm8DAwDCiQMDAMKOAwMAwsUDAwDC1zAKAwMA wvsDAwDC/AMDAMOcAwMAw6UDBAXUU2ADBAbUlUADBAbUtsADAwDU1QMDANUcAwQF 1YygAwQF1a2AAwQH2YyAMA0EAgACMAcDBQMgAQi4MA0GCSqGSIb3DQEBCwUAA4IB AQCPpMaRz1B5Cy8oYOvJuKjNEuREFApMigjUEHwxUGqoVPQHoKRmaYjJ9MV+a4mU 3yLWMzowcCtMZPto9sTaglv2XRAcJePfTjwuZBtjJhmbNFwVh6A4iMsWii3PYF0s DAhu0EZMqgJCHwtZ8kNI/z1m8BoemSycrvI10Ghyjx4mYJoX+JHDJK72IkqneMf6 Vrjvo7Cf7mi+urtUhMsIvuqqtKITnRiPEqMr8Jw98G2uof65ckAX/6EMuhH3zPwv d7r3MfnLk+vaXEAMEgtM8iCcXEMCHGKbucPGs6/9ix+pN6JhhwO6ub53TlVk8HdH x/FY0tKuENkKTjf3edEWX6v8 -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:59 2026 by rpki-client