This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/t8cpqd_P40xVdePL3JQ6TR8XHvI.roa File: t8cpqd_P40xVdePL3JQ6TR8XHvI.roa (raw, json) Hash identifier: gpuUfrk0N39e4juiYvB//CsK0sasbeFQSArvH3WS6fw= Subject key identifier: B7:C7:29:A9:DF:CF:E3:4C:55:75:E3:CB:DC:94:3A:4D:1F:17:1E:F2 Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7 Certificate serial: 019B8D37F6FCC6B8995A5C2A416C19BEAEF1 Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/t8cpqd_P40xVdePL3JQ6TR8XHvI.roa Signing time: Mon 05 Jan 2026 08:13:33 +0000 ROA not before: Mon 05 Jan 2026 08:13:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8926 IP address blocks: 5.56.64.0/18 maxlen: 24 37.75.16.0/20 maxlen: 24 37.75.64.0/18 maxlen: 24 46.55.0.0/17 maxlen: 24 85.204.176.0/21 maxlen: 24 86.104.196.0/22 maxlen: 24 86.105.56.0/21 maxlen: 24 86.105.80.0/21 maxlen: 21 86.105.172.0/22 maxlen: 22 86.105.208.0/22 maxlen: 24 86.106.144.0/21 maxlen: 21 86.106.208.0/20 maxlen: 24 86.106.224.0/19 maxlen: 24 86.107.64.0/22 maxlen: 22 86.107.160.0/21 maxlen: 24 89.32.56.0/21 maxlen: 21 89.32.136.0/21 maxlen: 21 89.32.172.0/22 maxlen: 22 89.32.252.0/22 maxlen: 22 89.34.64.0/22 maxlen: 22 89.34.68.0/22 maxlen: 22 89.34.192.0/21 maxlen: 21 89.34.204.0/22 maxlen: 22 89.34.232.0/22 maxlen: 22 89.35.8.0/21 maxlen: 24 89.35.40.0/21 maxlen: 21 89.35.84.0/22 maxlen: 22 89.35.200.0/22 maxlen: 22 89.36.156.0/22 maxlen: 22 89.37.44.0/22 maxlen: 22 89.37.104.0/24 maxlen: 24 89.38.32.0/22 maxlen: 22 89.38.64.0/22 maxlen: 22 89.38.76.0/22 maxlen: 22 89.39.76.0/22 maxlen: 22 89.39.84.0/22 maxlen: 22 89.39.96.0/21 maxlen: 24 89.39.112.0/21 maxlen: 24 89.40.228.0/22 maxlen: 22 89.41.64.0/18 maxlen: 24 89.42.64.0/22 maxlen: 22 89.42.72.0/21 maxlen: 21 89.42.104.0/22 maxlen: 22 89.42.128.0/22 maxlen: 22 89.42.180.0/22 maxlen: 22 89.42.224.0/22 maxlen: 22 89.43.128.0/22 maxlen: 22 89.43.168.0/22 maxlen: 22 89.44.152.0/22 maxlen: 22 89.45.40.0/22 maxlen: 22 89.46.164.0/22 maxlen: 22 92.114.128.0/17 maxlen: 24 92.115.0.0/16 maxlen: 24 93.113.64.0/21 maxlen: 24 93.113.80.0/21 maxlen: 21 93.113.92.0/22 maxlen: 22 93.113.244.0/22 maxlen: 22 93.115.136.0/21 maxlen: 21 93.116.0.0/16 maxlen: 24 93.117.48.0/20 maxlen: 24 93.117.68.0/22 maxlen: 22 93.117.72.0/21 maxlen: 21 93.117.128.0/21 maxlen: 24 93.117.140.0/22 maxlen: 22 93.117.144.0/21 maxlen: 21 93.117.156.0/22 maxlen: 22 93.117.160.0/21 maxlen: 21 93.117.168.0/22 maxlen: 22 93.118.176.0/22 maxlen: 22 93.118.188.0/22 maxlen: 22 93.119.96.0/21 maxlen: 21 93.119.108.0/22 maxlen: 22 93.119.128.0/21 maxlen: 21 93.119.140.0/22 maxlen: 22 93.119.144.0/21 maxlen: 24 93.119.160.0/21 maxlen: 21 93.119.196.0/22 maxlen: 22 93.119.200.0/21 maxlen: 24 93.119.228.0/22 maxlen: 22 93.119.232.0/21 maxlen: 24 94.176.64.0/20 maxlen: 24 109.185.0.0/16 maxlen: 24 178.132.112.0/20 maxlen: 24 178.132.128.0/18 maxlen: 24 185.28.104.0/22 maxlen: 24 188.208.96.0/22 maxlen: 22 188.208.104.0/22 maxlen: 22 188.208.112.0/22 maxlen: 22 188.208.120.0/22 maxlen: 24 188.208.126.0/24 maxlen: 24 188.208.127.0/24 maxlen: 24 188.208.192.0/22 maxlen: 22 188.208.204.0/22 maxlen: 22 188.209.216.0/21 maxlen: 24 188.210.240.0/21 maxlen: 21 188.210.248.0/22 maxlen: 22 188.212.0.0/22 maxlen: 22 188.212.8.0/21 maxlen: 21 188.212.24.0/21 maxlen: 21 188.212.40.0/21 maxlen: 21 188.213.36.0/22 maxlen: 22 188.213.52.0/22 maxlen: 22 188.213.220.0/22 maxlen: 22 188.213.236.0/22 maxlen: 22 188.213.244.0/22 maxlen: 22 188.214.60.0/22 maxlen: 22 188.214.136.0/22 maxlen: 24 188.214.146.0/24 maxlen: 24 188.214.147.0/24 maxlen: 24 188.214.200.0/21 maxlen: 21 188.214.228.0/22 maxlen: 24 188.215.236.0/22 maxlen: 24 188.215.252.0/22 maxlen: 22 188.237.0.0/16 maxlen: 24 212.0.192.0/19 maxlen: 32 2a02:a30::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:37:f6:fc:c6:b8:99:5a:5c:2a:41:6c:19:be:ae:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7 Validity Not Before: Jan 5 08:13:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7c729a9dfcfe34c5575e3cbdc943a4d1f171ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3f:67:e0:d5:78:52:88:b4:33:cf:d1:58:23: c8:06:93:1b:b5:0b:8d:41:6c:26:e4:48:ac:e2:0e: a8:c9:b9:33:45:07:6b:b0:0f:6a:51:04:97:97:a0: a8:ed:e4:5e:63:37:3f:ca:02:48:91:04:02:2d:08: 12:d1:6f:fc:6b:df:22:8a:d1:96:a7:90:bd:81:84: e1:cb:70:a8:c9:a9:01:c5:97:13:a6:91:6f:7e:55: 71:19:8b:6f:89:11:0c:33:90:c3:ca:b7:43:9c:1d: 6a:d2:a1:ff:19:fb:17:0e:a1:03:86:6d:b7:a8:62: f1:a3:12:5c:4f:e8:3f:4c:e4:67:99:3c:92:7a:fb: 16:dc:fa:e4:24:a1:06:c2:1e:82:71:94:8c:f9:a1: a5:60:7f:0b:03:6a:0e:93:db:72:20:6a:89:b1:d2: c7:aa:37:fc:1f:e3:7b:9d:c5:18:29:d8:0e:7c:3a: b1:32:55:90:88:bd:53:2f:3c:c8:1a:e6:e5:82:6e: da:a4:6a:5f:54:6f:d6:22:c5:92:b1:ec:ee:2c:88: 6b:30:c6:3a:f1:de:f7:1a:f9:48:f3:4d:cc:db:87: 02:51:ac:60:e3:c3:43:a5:b8:23:8d:98:0d:61:e4: 57:d4:2a:2f:05:88:fc:db:20:24:5a:bf:9a:0c:d2: c2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C7:29:A9:DF:CF:E3:4C:55:75:E3:CB:DC:94:3A:4D:1F:17:1E:F2 X509v3 Authority Key Identifier: keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/t8cpqd_P40xVdePL3JQ6TR8XHvI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.64.0/18 37.75.16.0/20 37.75.64.0/18 46.55.0.0/17 85.204.176.0/21 86.104.196.0/22 86.105.56.0/21 86.105.80.0/21 86.105.172.0/22 86.105.208.0/22 86.106.144.0/21 86.106.208.0-86.106.255.255 86.107.64.0/22 86.107.160.0/21 89.32.56.0/21 89.32.136.0/21 89.32.172.0/22 89.32.252.0/22 89.34.64.0/21 89.34.192.0/21 89.34.204.0/22 89.34.232.0/22 89.35.8.0/21 89.35.40.0/21 89.35.84.0/22 89.35.200.0/22 89.36.156.0/22 89.37.44.0/22 89.37.104.0/24 89.38.32.0/22 89.38.64.0/22 89.38.76.0/22 89.39.76.0/22 89.39.84.0/22 89.39.96.0/21 89.39.112.0/21 89.40.228.0/22 89.41.64.0/18 89.42.64.0/22 89.42.72.0/21 89.42.104.0/22 89.42.128.0/22 89.42.180.0/22 89.42.224.0/22 89.43.128.0/22 89.43.168.0/22 89.44.152.0/22 89.45.40.0/22 89.46.164.0/22 92.114.128.0-92.115.255.255 93.113.64.0/21 93.113.80.0/21 93.113.92.0/22 93.113.244.0/22 93.115.136.0/21 93.116.0.0/16 93.117.48.0/20 93.117.68.0-93.117.79.255 93.117.128.0/21 93.117.140.0-93.117.151.255 93.117.156.0-93.117.171.255 93.118.176.0/22 93.118.188.0/22 93.119.96.0/21 93.119.108.0/22 93.119.128.0/21 93.119.140.0-93.119.151.255 93.119.160.0/21 93.119.196.0-93.119.207.255 93.119.228.0-93.119.239.255 94.176.64.0/20 109.185.0.0/16 178.132.112.0-178.132.191.255 185.28.104.0/22 188.208.96.0/22 188.208.104.0/22 188.208.112.0/22 188.208.120.0/22 188.208.126.0/23 188.208.192.0/22 188.208.204.0/22 188.209.216.0/21 188.210.240.0-188.210.251.255 188.212.0.0/22 188.212.8.0/21 188.212.24.0/21 188.212.40.0/21 188.213.36.0/22 188.213.52.0/22 188.213.220.0/22 188.213.236.0/22 188.213.244.0/22 188.214.60.0/22 188.214.136.0/22 188.214.146.0/23 188.214.200.0/21 188.214.228.0/22 188.215.236.0/22 188.215.252.0/22 188.237.0.0/16 212.0.192.0/19 IPv6: 2a02:a30::/29 Signature Algorithm: sha256WithRSAEncryption 4f:f0:ff:48:81:ed:d2:fc:70:09:b7:50:c1:df:03:3e:b4:b2: d6:62:57:7b:91:89:39:6b:7f:6f:2c:64:e8:73:68:a2:8d:65: 60:10:3e:95:04:ff:d1:1e:ba:82:d2:ed:75:bc:ae:fc:ac:87: 5a:ff:d7:fe:57:d0:74:80:16:61:08:a7:eb:3b:c7:b0:3e:3e: 05:10:1a:04:11:96:9a:d9:ce:66:87:82:17:64:d4:66:a9:4d: 9a:38:38:e6:fa:f2:71:6f:b7:d7:3f:b2:9a:a5:3f:fb:dc:ed: 98:3d:32:d7:ff:c5:9b:bb:e0:66:2f:e9:66:ef:55:40:16:d0: 45:a9:98:89:23:00:c9:58:ba:c1:0d:cc:23:23:c9:5b:f5:a9: bb:09:11:20:3f:77:61:97:47:37:b7:a6:2b:ee:5a:be:d3:21: 07:e1:fc:33:e0:06:48:ba:51:02:06:ce:6d:90:60:cc:59:9d: 45:d2:89:bc:a8:20:d3:d0:5e:e6:54:66:c0:fd:82:54:b8:83: 98:d6:33:f8:bd:82:49:d7:3c:73:71:14:07:da:ba:eb:08:55: 3e:15:61:9d:56:3c:4c:1e:34:b4:c0:9c:75:8c:9b:f4:13:0c: b8:58:33:ee:d2:27:7f:02:37:79:88:a6:f5:6c:e1:99:cc:c4: 29:60:85:4b -----BEGIN CERTIFICATE----- MIIHuTCCBqGgAwIBAgISAZuNN/b8xriZWlwqQWwZvq7xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk OGIyZjcwHhcNMjYwMTA1MDgxMzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2M3MjlhOWRmY2ZlMzRjNTU3NWUzY2JkYzk0M2E0ZDFmMTcxZWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1z9n4NV4Uoi0M8/RWCPIBpMbtQuN QWwm5Eis4g6oybkzRQdrsA9qUQSXl6Co7eReYzc/ygJIkQQCLQgS0W/8a98iitGW p5C9gYThy3CoyakBxZcTppFvflVxGYtviREMM5DDyrdDnB1q0qH/GfsXDqEDhm23 qGLxoxJcT+g/TORnmTySevsW3PrkJKEGwh6CcZSM+aGlYH8LA2oOk9tyIGqJsdLH qjf8H+N7ncUYKdgOfDqxMlWQiL1TLzzIGublgm7apGpfVG/WIsWSsezuLIhrMMY6 8d73GvlI803M24cCUaxg48NDpbgjjZgNYeRX1CovBYj82yAkWr+aDNLCfwIDAQAB o4IExTCCBMEwHQYDVR0OBBYEFLfHKanfz+NMVXXjy9yUOk0fFx7yMB8GA1UdIwQY MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct YmJlYTI5MThlMTAyLzEvdDhjcHFkX1A0MHhWZGVQTDNKUTZUUjhYSHZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIC2QYIKwYBBQUHAQcBAf8EggLIMIICxDCCArEEAgABMIIC qQMEBgU4QAMEBCVLEAMEBiVLQAMEBy43AAMEA1XMsAMEAlZoxAMEA1ZpOAMEA1Zp UAMEAlZprAMEAlZp0AMEA1ZqkDALAwQEVmrQAwMAVmoDBAJWa0ADBANWa6ADBANZ IDgDBANZIIgDBAJZIKwDBAJZIPwDBANZIkADBANZIsADBAJZIswDBAJZIugDBANZ IwgDBANZIygDBAJZI1QDBAJZI8gDBAJZJJwDBAJZJSwDBABZJWgDBAJZJiADBAJZ JkADBAJZJkwDBAJZJ0wDBAJZJ1QDBANZJ2ADBANZJ3ADBAJZKOQDBAZZKUADBAJZ KkADBANZKkgDBAJZKmgDBAJZKoADBAJZKrQDBAJZKuADBAJZK4ADBAJZK6gDBAJZ LJgDBAJZLSgDBAJZLqQwCwMEB1xygAMDAlxwAwQDXXFAAwQDXXFQAwQCXXFcAwQC XXH0AwQDXXOIAwMAXXQDBARddTAwDAMEAl11RAMEBF11QAMEA111gDAMAwQCXXWM AwQDXXWQMAwDBAJddZwDBAJddagDBAJddrADBAJddrwDBANdd2ADBAJdd2wDBANd d4AwDAMEAl13jAMEA113kAMEA113oDAMAwQCXXfEAwQEXXfAMAwDBAJdd+QDBARd d+ADBAResEADAwBtuTAMAwQEsoRwAwQGsoSAAwQCuRxoAwQCvNBgAwQCvNBoAwQC vNBwAwQCvNB4AwQBvNB+AwQCvNDAAwQCvNDMAwQDvNHYMAwDBAS80vADBAK80vgD BAK81AADBAO81AgDBAO81BgDBAO81CgDBAK81SQDBAK81TQDBAK81dwDBAK81ewD BAK81fQDBAK81jwDBAK81ogDBAG81pIDBAO81sgDBAK81uQDBAK81+wDBAK81/wD AwC87QMEBdQAwDANBAIAAjAHAwUDKgIKMDANBgkqhkiG9w0BAQsFAAOCAQEAT/D/ SIHt0vxwCbdQwd8DPrSy1mJXe5GJOWt/byxk6HNooo1lYBA+lQT/0R66gtLtdbyu /KyHWv/X/lfQdIAWYQin6zvHsD4+BRAaBBGWmtnOZoeCF2TUZqlNmjg45vrycW+3 1z+ymqU/+9ztmD0y1//Fm7vgZi/pZu9VQBbQRamYiSMAyVi6wQ3MIyPJW/WpuwkR ID93YZdHN7emK+5avtMhB+H8M+AGSLpRAgbObZBgzFmdRdKJvKgg09Be5lRmwP2C VLiDmNYz+L2CSdc8c3EUB9q66whVPhVhnVY8TB40tMCcdYyb9BMMuFgz7tInfwI3 eYim9WzhmczEKWCFSw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:33 2026 by rpki-client