This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/XfbSuzWnSJ0R_yOnkIG4F7s1WPk.roa File: XfbSuzWnSJ0R_yOnkIG4F7s1WPk.roa (raw, json) Hash identifier: I7f3HuHYguoVsLgmKIELlpLwLVz1wyD/5cmJZXhghjI= Subject key identifier: 5D:F6:D2:BB:35:A7:48:9D:11:FF:23:A7:90:81:B8:17:BB:35:58:F9 Certificate issuer: /CN=c441738baab988b1d68693bb05e29bfbb4f0f671 Certificate serial: 019B79EBCA8BD890388D73A6DFE37F6AB617 Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/XfbSuzWnSJ0R_yOnkIG4F7s1WPk.roa Signing time: Thu 01 Jan 2026 14:17:34 +0000 ROA not before: Thu 01 Jan 2026 14:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39912 IP address blocks: 37.186.0.0/22 maxlen: 22 37.186.4.0/24 maxlen: 24 37.186.6.0/23 maxlen: 23 37.186.8.0/21 maxlen: 21 37.186.16.0/21 maxlen: 21 77.220.96.0/20 maxlen: 20 77.220.105.0/24 maxlen: 24 77.220.111.0/24 maxlen: 24 77.220.112.0/22 maxlen: 22 77.220.120.0/21 maxlen: 21 78.142.64.0/23 maxlen: 23 78.142.68.0/22 maxlen: 22 78.142.72.0/21 maxlen: 21 78.142.96.0/20 maxlen: 24 78.142.112.0/22 maxlen: 22 78.142.116.0/23 maxlen: 23 78.142.122.0/23 maxlen: 23 78.142.124.0/22 maxlen: 22 81.94.48.0/22 maxlen: 22 81.94.52.0/23 maxlen: 24 81.94.54.0/24 maxlen: 24 81.94.56.0/21 maxlen: 21 81.94.56.0/24 maxlen: 24 91.206.224.0/23 maxlen: 23 92.42.16.0/22 maxlen: 22 92.63.208.0/22 maxlen: 24 92.63.212.0/24 maxlen: 24 92.63.214.0/23 maxlen: 23 92.63.216.0/21 maxlen: 21 92.63.217.0/24 maxlen: 24 92.63.218.0/24 maxlen: 24 93.185.128.0/20 maxlen: 24 95.143.80.0/20 maxlen: 20 195.16.224.0/21 maxlen: 21 195.16.232.0/22 maxlen: 24 195.16.236.0/23 maxlen: 23 195.16.238.0/24 maxlen: 24 195.16.241.0/24 maxlen: 24 195.16.242.0/23 maxlen: 23 195.16.245.0/24 maxlen: 24 195.16.246.0/23 maxlen: 23 195.16.251.0/24 maxlen: 24 195.16.253.0/24 maxlen: 24 195.16.254.0/23 maxlen: 23 195.137.238.0/23 maxlen: 23 195.137.238.0/24 maxlen: 24 195.140.136.0/22 maxlen: 22 213.139.252.0/22 maxlen: 22 2a00:e98::/32 maxlen: 32 2a00:eb0::/32 maxlen: 32 2a01:f8::/32 maxlen: 32 2a01:100::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:ca:8b:d8:90:38:8d:73:a6:df:e3:7f:6a:b6:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671 Validity Not Before: Jan 1 14:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5df6d2bb35a7489d11ff23a79081b817bb3558f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f3:c6:a0:65:67:80:b5:a5:d6:0f:48:79:e8: 48:90:01:e8:ad:a3:53:92:04:8e:92:5c:8c:ff:f6: 95:34:47:f5:e2:3c:72:50:fc:c9:31:31:f4:7c:43: 9b:75:40:ac:79:c9:19:da:68:a8:f0:a6:02:38:1c: 9b:cf:24:73:bb:4d:44:88:34:83:63:be:98:4d:91: f2:34:17:d2:ec:1f:8a:3b:f0:58:9a:b1:80:cd:8e: 28:af:c0:3f:1d:c4:66:0a:2a:2b:32:35:29:da:19: 3b:3c:1c:f1:68:1d:de:66:a4:1f:2a:41:e0:68:78: 84:36:56:5e:66:00:f8:e0:81:a5:31:8e:0e:a3:6f: 93:aa:de:86:62:9d:76:47:f2:b9:9a:e9:11:c5:76: 83:e8:81:9c:20:d0:db:2a:c8:43:27:5f:a4:11:73: de:35:c9:a2:e9:0c:c0:dd:f2:6a:ae:be:08:07:be: d7:41:35:9e:0b:97:b1:88:cc:ff:0a:6e:30:3e:08: c0:8e:d2:2d:b1:8d:78:68:e8:84:80:4c:db:28:75: aa:25:e8:1e:b5:c9:0c:fb:0b:2e:5c:5a:87:f2:8a: cd:56:2e:2a:49:71:92:16:01:46:bf:6d:d7:fe:f4: c3:49:75:9f:43:2f:df:1b:3d:df:3d:c9:42:4d:ef: 7e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F6:D2:BB:35:A7:48:9D:11:FF:23:A7:90:81:B8:17:BB:35:58:F9 X509v3 Authority Key Identifier: keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/XfbSuzWnSJ0R_yOnkIG4F7s1WPk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.186.0.0-37.186.4.255 37.186.6.0-37.186.23.255 77.220.96.0-77.220.115.255 77.220.120.0/21 78.142.64.0/23 78.142.68.0-78.142.79.255 78.142.96.0-78.142.117.255 78.142.122.0-78.142.127.255 81.94.48.0-81.94.54.255 81.94.56.0/21 91.206.224.0/23 92.42.16.0/22 92.63.208.0-92.63.212.255 92.63.214.0-92.63.223.255 93.185.128.0/20 95.143.80.0/20 195.16.224.0-195.16.238.255 195.16.241.0-195.16.243.255 195.16.245.0-195.16.247.255 195.16.251.0/24 195.16.253.0-195.16.255.255 195.137.238.0/23 195.140.136.0/22 213.139.252.0/22 IPv6: 2a00:e98::/32 2a00:eb0::/32 2a01:f8::/32 2a01:100::/32 Signature Algorithm: sha256WithRSAEncryption 56:5b:ee:ee:fd:da:27:6e:a0:24:80:8b:3f:d6:03:23:65:3e: 05:b8:6b:41:85:c3:21:12:88:0e:06:ff:81:5a:e0:8b:d9:46: a2:a4:81:bc:79:b9:c8:69:49:74:fe:a3:97:11:b7:27:b4:b5: 8b:90:2d:35:bd:12:1d:c4:a6:e6:6c:2a:b3:63:d2:55:4f:5c: 3b:51:2f:4c:91:e6:25:67:10:0c:22:dc:d6:34:de:e2:25:53: ae:3f:1b:d4:f9:30:80:d0:7f:2d:1c:c3:f8:96:91:3e:ad:d2: c7:c6:39:51:0d:46:63:ab:98:1b:32:ad:00:f3:c3:22:46:61: 9b:e9:d0:74:3c:f3:29:65:50:af:55:fb:be:6b:90:74:91:b0: 21:fb:c5:8e:87:2d:d2:cb:1d:e3:90:ec:91:79:cb:f5:88:63: 62:a7:69:1e:42:2e:0b:31:1f:9f:ad:3b:48:9a:cc:d3:70:c2: 68:21:ea:9d:eb:4f:42:31:8a:0c:b6:96:ff:f7:fc:ad:ac:5c: 84:f2:96:59:2e:f7:49:da:ac:2e:73:03:ef:8f:c7:ae:c0:8b: 94:2c:f0:9e:d0:b7:5e:f9:32:c6:b6:da:06:cf:14:1f:e0:e4: df:7f:9e:26:c9:1b:af:ce:e1:a5:eb:b3:cd:96:f4:8f:91:19: 14:81:ca:f1 -----BEGIN CERTIFICATE----- MIIGGTCCBQGgAwIBAgISAZt568qL2JA4jXOm3+N/arYXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NDE3MzhiYWFiOTg4YjFkNjg2OTNiYjA1ZTI5YmZiYjRm MGY2NzEwHhcNMjYwMTAxMTQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGY2ZDJiYjM1YTc0ODlkMTFmZjIzYTc5MDgxYjgxN2JiMzU1OGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/PGoGVngLWl1g9IeehIkAHoraNT kgSOklyM//aVNEf14jxyUPzJMTH0fEObdUCseckZ2mio8KYCOBybzyRzu01EiDSD Y76YTZHyNBfS7B+KO/BYmrGAzY4or8A/HcRmCiorMjUp2hk7PBzxaB3eZqQfKkHg aHiENlZeZgD44IGlMY4Oo2+Tqt6GYp12R/K5mukRxXaD6IGcINDbKshDJ1+kEXPe Ncmi6QzA3fJqrr4IB77XQTWeC5exiMz/Cm4wPgjAjtItsY14aOiEgEzbKHWqJege tckM+wsuXFqH8orNVi4qSXGSFgFGv23X/vTDSXWfQy/fGz3fPclCTe9+GwIDAQAB o4IDJTCCAyEwHQYDVR0OBBYEFF320rs1p0idEf8jp5CBuBe7NVj5MB8GA1UdIwQY MBaAFMRBc4uquYix1oaTuwXim/u08PZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUt NGM5OGQ5YTUxNDA1LzEvWGZiU3V6V25TSjBSX3lPbmtJRzRGN3MxV1BrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUtNGM5OGQ5YTUxNDA1 LzEveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBOQYIKwYBBQUHAQcBAf8EggEoMIIBJDCB/QQCAAEwgfYw CwMDASW6AwQAJboEMAwDBAElugYDBAMluhAwDAMEBU3cYAMEAk3ccAMEA03ceAME AU6OQDAMAwQCTo5EAwQETo5AMAwDBAVOjmADBAFOjnQwDAMEAU6OegMEB06OADAM AwQEUV4wAwQAUV42AwQDUV44AwQBW87gAwQCXCoQMAwDBARcP9ADBABcP9QwDAME AVw/1gMEBVw/wAMEBF25gAMEBF+PUDAMAwQFwxDgAwQAwxDuMAwDBADDEPEDBALD EPAwDAMEAMMQ9QMEA8MQ8AMEAMMQ+zALAwQAwxD9AwMAwxADBAHDie4DBALDjIgD BALVi/wwIgQCAAIwHAMFACoADpgDBQAqAA6wAwUAKgEA+AMFACoBAQAwDQYJKoZI hvcNAQELBQADggEBAFZb7u792iduoCSAiz/WAyNlPgW4a0GFwyESiA4G/4Fa4IvZ RqKkgbx5uchpSXT+o5cRtye0tYuQLTW9Eh3EpuZsKrNj0lVPXDtRL0yR5iVnEAwi 3NY03uIlU64/G9T5MIDQfy0cw/iWkT6t0sfGOVENRmOrmBsyrQDzwyJGYZvp0HQ8 8yllUK9V+75rkHSRsCH7xY6HLdLLHeOQ7JF5y/WIY2KnaR5CLgsxH5+tO0iazNNw wmgh6p3rT0Ixigy2lv/3/K2sXITyllku90narC5zA++Px67Ai5Qs8J7Qt175Msa2 2gbPFB/g5N9/nibJG6/O4aXrs82W9I+RGRSByvE= -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:04 2026 by rpki-client