This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/stNr5OlaCfqNnuD6XmuVscuxDns.roa File: stNr5OlaCfqNnuD6XmuVscuxDns.roa (raw, json) Hash identifier: nGcnXVJXoyjj3G69xltC1kz7a5CldclAlqw5d6PpRjQ= Subject key identifier: B2:D3:6B:E4:E9:5A:09:FA:8D:9E:E0:FA:5E:6B:95:B1:CB:B1:0E:7B Certificate issuer: /CN=4cad0397487799e2118ff4cbcf8f159747f35891 Certificate serial: 019B7AC8B28817F8BAC9C01FCA6BE8BE2B37 Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/stNr5OlaCfqNnuD6XmuVscuxDns.roa Signing time: Thu 01 Jan 2026 18:18:51 +0000 ROA not before: Thu 01 Jan 2026 18:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12859 IP address blocks: 87.251.32.0/19 maxlen: 24 87.251.32.0/24 maxlen: 24 87.251.33.0/24 maxlen: 24 87.251.34.0/24 maxlen: 24 87.251.35.0/24 maxlen: 24 87.251.36.0/24 maxlen: 24 87.251.37.0/24 maxlen: 24 87.251.38.0/24 maxlen: 24 87.251.39.0/24 maxlen: 24 87.251.40.0/24 maxlen: 24 87.251.41.0/24 maxlen: 24 87.251.42.0/24 maxlen: 24 87.251.43.0/24 maxlen: 24 87.251.44.0/24 maxlen: 24 87.251.45.0/24 maxlen: 24 87.251.46.0/24 maxlen: 24 87.251.47.0/24 maxlen: 24 87.251.48.0/24 maxlen: 24 87.251.49.0/24 maxlen: 24 87.251.50.0/24 maxlen: 24 87.251.51.0/24 maxlen: 24 87.251.52.0/24 maxlen: 24 87.251.53.0/24 maxlen: 24 87.251.54.0/24 maxlen: 24 87.251.55.0/24 maxlen: 24 87.251.56.0/24 maxlen: 24 87.251.57.0/24 maxlen: 24 87.251.58.0/24 maxlen: 24 87.251.59.0/24 maxlen: 24 87.251.60.0/24 maxlen: 24 87.251.61.0/24 maxlen: 24 87.251.62.0/24 maxlen: 24 87.251.63.0/24 maxlen: 24 185.62.16.0/22 maxlen: 24 185.62.16.0/24 maxlen: 24 185.62.17.0/24 maxlen: 24 185.62.18.0/24 maxlen: 24 185.62.19.0/24 maxlen: 24 193.109.122.0/24 maxlen: 24 212.72.232.0/21 maxlen: 24 212.72.232.0/24 maxlen: 24 212.72.233.0/24 maxlen: 24 212.72.234.0/24 maxlen: 24 212.72.235.0/24 maxlen: 24 212.72.236.0/24 maxlen: 24 212.72.237.0/24 maxlen: 24 212.72.238.0/24 maxlen: 24 212.72.239.0/24 maxlen: 24 212.72.240.0/20 maxlen: 24 212.72.240.0/24 maxlen: 24 212.72.241.0/24 maxlen: 24 212.72.242.0/24 maxlen: 24 212.72.243.0/24 maxlen: 24 212.72.244.0/24 maxlen: 24 212.72.245.0/24 maxlen: 24 212.72.246.0/24 maxlen: 24 212.72.247.0/24 maxlen: 24 212.72.248.0/24 maxlen: 24 212.72.249.0/24 maxlen: 24 212.72.250.0/24 maxlen: 24 212.72.251.0/24 maxlen: 24 212.72.252.0/24 maxlen: 24 212.72.253.0/24 maxlen: 24 212.72.254.0/24 maxlen: 24 212.72.255.0/24 maxlen: 24 212.114.96.0/19 maxlen: 24 212.114.96.0/24 maxlen: 24 212.114.97.0/24 maxlen: 24 212.114.98.0/24 maxlen: 24 212.114.99.0/24 maxlen: 24 212.114.100.0/24 maxlen: 24 212.114.101.0/24 maxlen: 24 212.114.102.0/24 maxlen: 24 212.114.103.0/24 maxlen: 24 212.114.104.0/24 maxlen: 24 212.114.105.0/24 maxlen: 24 212.114.106.0/24 maxlen: 24 212.114.107.0/24 maxlen: 24 212.114.108.0/24 maxlen: 24 212.114.109.0/24 maxlen: 24 212.114.110.0/24 maxlen: 24 212.114.111.0/24 maxlen: 24 212.114.112.0/24 maxlen: 24 212.114.113.0/24 maxlen: 24 212.114.114.0/24 maxlen: 24 212.114.115.0/24 maxlen: 24 212.114.116.0/24 maxlen: 24 212.114.117.0/24 maxlen: 24 212.114.118.0/24 maxlen: 24 212.114.119.0/24 maxlen: 24 212.114.120.0/24 maxlen: 24 212.114.121.0/24 maxlen: 24 212.114.122.0/24 maxlen: 24 212.114.123.0/24 maxlen: 24 212.114.124.0/24 maxlen: 24 212.114.125.0/24 maxlen: 24 212.114.126.0/24 maxlen: 24 212.114.127.0/24 maxlen: 24 213.136.0.0/19 maxlen: 24 213.136.0.0/24 maxlen: 24 213.136.1.0/24 maxlen: 24 213.136.2.0/24 maxlen: 24 213.136.3.0/24 maxlen: 24 213.136.4.0/24 maxlen: 24 213.136.5.0/24 maxlen: 24 213.136.6.0/24 maxlen: 24 213.136.7.0/24 maxlen: 24 213.136.8.0/24 maxlen: 24 213.136.9.0/24 maxlen: 24 213.136.10.0/24 maxlen: 24 213.136.11.0/24 maxlen: 24 213.136.12.0/24 maxlen: 24 213.136.13.0/24 maxlen: 24 213.136.14.0/24 maxlen: 24 213.136.15.0/24 maxlen: 24 213.136.16.0/24 maxlen: 24 213.136.17.0/24 maxlen: 24 213.136.18.0/24 maxlen: 24 213.136.19.0/24 maxlen: 24 213.136.20.0/24 maxlen: 24 213.136.21.0/24 maxlen: 24 213.136.22.0/24 maxlen: 24 213.136.23.0/24 maxlen: 24 213.136.24.0/24 maxlen: 24 213.136.25.0/24 maxlen: 24 213.136.26.0/24 maxlen: 24 213.136.27.0/24 maxlen: 24 213.136.28.0/24 maxlen: 24 213.136.29.0/24 maxlen: 24 213.136.30.0/24 maxlen: 24 213.136.31.0/24 maxlen: 24 213.154.224.0/19 maxlen: 24 213.154.224.0/24 maxlen: 24 213.154.225.0/24 maxlen: 24 213.154.226.0/24 maxlen: 24 213.154.227.0/24 maxlen: 24 213.154.228.0/24 maxlen: 24 213.154.229.0/24 maxlen: 24 213.154.230.0/24 maxlen: 24 213.154.231.0/24 maxlen: 24 213.154.232.0/24 maxlen: 24 213.154.233.0/24 maxlen: 24 213.154.234.0/24 maxlen: 24 213.154.235.0/24 maxlen: 24 213.154.236.0/24 maxlen: 24 213.154.237.0/24 maxlen: 24 213.154.238.0/24 maxlen: 24 213.154.239.0/24 maxlen: 24 213.154.240.0/24 maxlen: 24 213.154.241.0/24 maxlen: 24 213.154.242.0/24 maxlen: 24 213.154.243.0/24 maxlen: 24 213.154.244.0/24 maxlen: 24 213.154.245.0/24 maxlen: 24 213.154.246.0/24 maxlen: 24 213.154.247.0/24 maxlen: 24 213.154.248.0/24 maxlen: 24 213.154.249.0/24 maxlen: 24 213.154.250.0/24 maxlen: 24 213.154.251.0/24 maxlen: 24 213.154.252.0/24 maxlen: 24 213.154.253.0/24 maxlen: 24 213.154.254.0/24 maxlen: 24 213.154.255.0/24 maxlen: 24 2001:7b8::/29 maxlen: 48 2001:7be::/48 maxlen: 48 2001:7bf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b2:88:17:f8:ba:c9:c0:1f:ca:6b:e8:be:2b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891 Validity Not Before: Jan 1 18:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2d36be4e95a09fa8d9ee0fa5e6b95b1cbb10e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ff:a3:7d:7d:4d:31:6e:50:ec:cc:3b:b6:56: cc:13:c0:3d:77:70:52:40:c0:4c:59:98:f9:95:03: 65:40:00:7d:2f:3b:ea:7a:2a:e4:a0:a4:ad:dd:6c: c2:97:c2:ae:2b:ef:d0:a1:ac:7c:9b:b9:ed:b7:36: d3:18:6f:75:2d:2f:07:b7:dd:e7:4f:de:d3:a3:e5: 6f:97:82:f8:40:a0:a8:2c:c8:92:d6:17:18:46:5a: 6b:51:d7:c4:0a:8f:53:8d:cb:15:b6:69:52:fc:29: 56:4f:92:af:46:34:b0:dd:e7:e8:32:47:e9:38:57: c7:f1:90:32:2c:b9:3d:78:11:da:75:42:a5:c3:09: fd:b6:1a:e5:57:f4:e6:d9:b1:e5:5e:92:5b:d4:5d: 14:7e:30:26:10:5b:b4:6c:80:84:ef:60:a1:23:34: 98:06:a8:56:05:51:5f:dd:ff:0a:83:a9:5e:cd:70: 3e:70:02:ae:33:92:16:e3:c4:cd:ff:28:14:4f:fa: 67:40:ff:1c:e5:65:b1:7c:8d:66:36:d1:78:16:61: 43:74:0a:77:72:84:64:48:8c:d0:23:88:36:4d:87: 0f:43:20:fe:66:bc:9d:bc:cf:dd:e9:96:4a:20:8f: c1:41:b8:63:4a:50:25:1a:4d:94:ab:d1:f3:66:1e: 27:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D3:6B:E4:E9:5A:09:FA:8D:9E:E0:FA:5E:6B:95:B1:CB:B1:0E:7B X509v3 Authority Key Identifier: keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/stNr5OlaCfqNnuD6XmuVscuxDns.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.251.32.0/19 185.62.16.0/22 193.109.122.0/24 212.72.232.0-212.72.255.255 212.114.96.0/19 213.136.0.0/19 213.154.224.0/19 IPv6: 2001:7b8::/29 Signature Algorithm: sha256WithRSAEncryption 67:2f:0f:88:4f:de:68:87:ff:bd:87:c0:34:8c:36:8e:5e:17: d2:e9:d6:b0:7e:96:4f:c4:53:d1:fa:6c:fd:20:92:3a:81:d6: 61:50:e0:c6:4a:3d:e2:7d:ac:38:e2:ae:2d:59:f1:9c:c9:ec: 97:77:fb:36:fc:30:b9:88:71:fd:83:46:e3:12:3e:41:af:72: dd:e2:6d:ca:c0:ce:1e:0d:71:da:7a:db:94:a6:07:18:e7:f4: 86:55:5b:e0:16:35:b1:df:ca:e8:9b:5c:f1:10:78:00:42:57: e6:93:11:58:21:52:f2:d9:03:24:30:b4:1e:35:74:20:a2:1e: 9a:6f:44:9a:0f:a2:d7:db:ea:f9:9b:4c:c7:56:5f:23:f7:3b: 07:9e:04:64:0d:a7:74:86:84:d9:a3:09:40:3f:99:2d:40:62: a3:a8:e0:f3:fd:82:99:69:85:14:29:0f:26:24:8e:35:91:46: 89:94:27:4a:71:77:cf:28:f2:ce:92:ad:f2:3c:40:b0:e8:67: 3e:76:71:97:2d:28:b2:b7:ad:8f:ce:ab:da:0a:a1:6e:23:2d: 83:57:b8:ea:25:6b:a3:45:34:47:9a:ea:d4:c0:e1:dd:d7:65: 22:ef:8a:67:f6:63:a2:a3:c2:97:c3:2e:03:97:8f:07:32:e2: 86:91:c2:f6 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt6yLKIF/i6ycAfymvovis3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYWQwMzk3NDg3Nzk5ZTIxMThmZjRjYmNmOGYxNTk3NDdm MzU4OTEwHhcNMjYwMTAxMTgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmQzNmJlNGU5NWEwOWZhOGQ5ZWUwZmE1ZTZiOTViMWNiYjEwZTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6v+jfX1NMW5Q7Mw7tlbME8A9d3BS QMBMWZj5lQNlQAB9LzvqeirkoKSt3WzCl8KuK+/Qoax8m7nttzbTGG91LS8Ht93n T97To+Vvl4L4QKCoLMiS1hcYRlprUdfECo9TjcsVtmlS/ClWT5KvRjSw3efoMkfp OFfH8ZAyLLk9eBHadUKlwwn9thrlV/Tm2bHlXpJb1F0UfjAmEFu0bICE72ChIzSY BqhWBVFf3f8Kg6lezXA+cAKuM5IW48TN/ygUT/pnQP8c5WWxfI1mNtF4FmFDdAp3 coRkSIzQI4g2TYcPQyD+ZrydvM/d6ZZKII/BQbhjSlAlGk2Uq9HzZh4ngQIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFLLTa+TpWgn6jZ7g+l5rlbHLsQ57MB8GA1UdIwQY MBaAFEytA5dId5niEY/0y8+PFZdH81iRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEswRGwwaDNtZUlSal9UTHo0OFZsMGZ6V0pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lYTAxOTYtYWI3OS00MmNmLWFiMmIt ZmM0YjAzNzEwYWUwLzEvc3ROcjVPbGFDZnFObnVENlhtdVZzY3V4RG5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9lYTAxOTYtYWI3OS00MmNmLWFiMmItZmM0YjAzNzEwYWUw LzEvVEswRGwwaDNtZUlSal9UTHo0OFZsMGZ6V0pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDA3BAIAATAxAwQFV/sgAwQC uT4QAwQAwW16MAsDBAPUSOgDAwDUSAMEBdRyYAMEBdWIAAMEBdWa4DANBAIAAjAH AwUDIAEHuDANBgkqhkiG9w0BAQsFAAOCAQEAZy8PiE/eaIf/vYfANIw2jl4X0unW sH6WT8RT0fps/SCSOoHWYVDgxko94n2sOOKuLVnxnMnsl3f7NvwwuYhx/YNG4xI+ Qa9y3eJtysDOHg1x2nrblKYHGOf0hlVb4BY1sd/K6Jtc8RB4AEJX5pMRWCFS8tkD JDC0HjV0IKIemm9Emg+i19vq+ZtMx1ZfI/c7B54EZA2ndIaE2aMJQD+ZLUBio6jg 8/2CmWmFFCkPJiSONZFGiZQnSnF3zyjyzpKt8jxAsOhnPnZxly0osretj86r2gqh biMtg1e46iVro0U0R5rq1MDh3ddlIu+KZ/ZjoqPCl8MuA5ePBzLihpHC9g== -----END CERTIFICATE-----Generated at Sun Jan 25 19:38:35 2026 by rpki-client