This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/DXoYE9h6-cf7b4kJiKRH-fr7tRE.roa File: DXoYE9h6-cf7b4kJiKRH-fr7tRE.roa (raw, json) Hash identifier: 6BlcLI7rLrM0W5ViObzFw6TFkGBe9ONPKQUf8EQH/Os= Subject key identifier: 0D:7A:18:13:D8:7A:F9:C7:FB:6F:89:09:88:A4:47:F9:FA:FB:B5:11 Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5 Certificate serial: 019B7F158D50CB14C2F43D3A11A32E32DD1E Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/DXoYE9h6-cf7b4kJiKRH-fr7tRE.roa Signing time: Fri 02 Jan 2026 14:21:17 +0000 ROA not before: Fri 02 Jan 2026 14:21:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136787 IP address blocks: 37.156.173.0/24 maxlen: 24 86.105.184.0/24 maxlen: 24 86.105.243.0/24 maxlen: 24 86.106.105.0/24 maxlen: 24 86.106.109.0/24 maxlen: 24 86.106.114.0/24 maxlen: 24 86.106.115.0/24 maxlen: 24 86.106.118.0/24 maxlen: 24 86.106.138.0/24 maxlen: 24 86.106.139.0/24 maxlen: 24 89.33.116.0/24 maxlen: 24 89.33.198.0/24 maxlen: 24 89.33.199.0/24 maxlen: 24 89.33.200.0/24 maxlen: 24 89.33.201.0/24 maxlen: 24 89.35.54.0/24 maxlen: 24 89.36.38.0/24 maxlen: 24 89.36.139.0/24 maxlen: 24 89.37.129.0/24 maxlen: 24 89.37.130.0/24 maxlen: 24 89.37.131.0/24 maxlen: 24 89.37.132.0/24 maxlen: 24 89.37.133.0/24 maxlen: 24 89.37.134.0/24 maxlen: 24 89.39.212.0/24 maxlen: 24 89.39.241.0/24 maxlen: 24 89.40.140.0/24 maxlen: 24 89.41.28.0/24 maxlen: 24 89.41.29.0/24 maxlen: 24 89.41.49.0/24 maxlen: 24 89.41.189.0/24 maxlen: 24 89.41.190.0/24 maxlen: 24 89.41.191.0/24 maxlen: 24 89.42.10.0/24 maxlen: 24 89.42.152.0/24 maxlen: 24 89.42.153.0/24 maxlen: 24 185.80.112.0/24 maxlen: 24 185.80.113.0/24 maxlen: 24 185.80.114.0/24 maxlen: 24 185.80.115.0/24 maxlen: 24 188.172.176.0/24 maxlen: 24 188.172.177.0/24 maxlen: 24 188.172.178.0/24 maxlen: 24 188.172.179.0/24 maxlen: 24 188.172.180.0/24 maxlen: 24 188.172.181.0/24 maxlen: 24 188.172.182.0/24 maxlen: 24 188.172.183.0/24 maxlen: 24 188.172.184.0/24 maxlen: 24 188.172.185.0/24 maxlen: 24 188.172.186.0/24 maxlen: 24 188.172.187.0/24 maxlen: 24 188.172.188.0/24 maxlen: 24 188.172.189.0/24 maxlen: 24 188.172.190.0/24 maxlen: 24 188.172.191.0/24 maxlen: 24 188.211.167.0/24 maxlen: 24 188.212.254.0/24 maxlen: 24 188.214.95.0/24 maxlen: 24 188.241.211.0/24 maxlen: 24 193.254.52.0/24 maxlen: 24 193.254.53.0/24 maxlen: 24 193.254.58.0/24 maxlen: 24 193.254.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:8d:50:cb:14:c2:f4:3d:3a:11:a3:2e:32:dd:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5 Validity Not Before: Jan 2 14:21:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d7a1813d87af9c7fb6f890988a447f9fafbb511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:05:45:5a:23:3b:12:60:37:96:31:a9:b4:52: 3b:a7:77:59:ce:5a:12:64:8e:45:cd:ce:d6:8a:ff: f6:75:58:a8:62:9c:8c:8e:fb:e9:42:ac:58:4c:d8: 74:45:6d:3b:5f:6d:57:03:f6:e8:70:b5:d1:f3:49: 0c:9c:6e:3a:7b:91:5c:89:7e:1e:6d:76:b0:d7:f1: 40:fa:e1:70:08:8a:e3:59:8f:04:db:b4:4f:3a:36: e1:1c:90:c2:c6:a1:0b:21:01:2e:7d:62:28:c7:9e: e5:23:9d:96:33:2c:8a:ba:96:bb:8c:4e:8c:eb:1c: f3:36:df:75:f8:c0:5b:9f:e5:c5:a6:6c:95:30:9e: ba:bf:2a:9a:10:a8:b5:f5:9b:b5:84:e4:08:59:c6: 74:50:d3:68:a9:11:a5:56:98:7a:e3:83:34:b8:28: 77:06:82:d0:4b:38:4b:55:01:87:f6:b4:cf:c3:f0: ba:04:d8:9f:6f:af:a6:49:6e:94:4f:df:5a:45:5f: f8:16:a8:4f:38:55:e3:1c:f8:9d:16:2f:5c:f8:fe: 94:e1:0e:80:97:6f:96:f7:4a:f7:50:30:8d:f0:0d: 58:e1:a0:d9:cc:4d:fc:71:91:5a:e4:5b:82:d1:2f: 95:90:4d:28:12:ee:54:05:59:20:d3:1e:93:e6:52: de:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:7A:18:13:D8:7A:F9:C7:FB:6F:89:09:88:A4:47:F9:FA:FB:B5:11 X509v3 Authority Key Identifier: keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/DXoYE9h6-cf7b4kJiKRH-fr7tRE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.156.173.0/24 86.105.184.0/24 86.105.243.0/24 86.106.105.0/24 86.106.109.0/24 86.106.114.0/23 86.106.118.0/24 86.106.138.0/23 89.33.116.0/24 89.33.198.0-89.33.201.255 89.35.54.0/24 89.36.38.0/24 89.36.139.0/24 89.37.129.0-89.37.134.255 89.39.212.0/24 89.39.241.0/24 89.40.140.0/24 89.41.28.0/23 89.41.49.0/24 89.41.189.0-89.41.191.255 89.42.10.0/24 89.42.152.0/23 185.80.112.0/22 188.172.176.0/20 188.211.167.0/24 188.212.254.0/24 188.214.95.0/24 188.241.211.0/24 193.254.52.0/23 193.254.58.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:ff:17:4d:0b:eb:6e:44:ac:fb:da:61:51:90:fa:a1:00:18: a5:ee:59:a5:91:d7:42:0c:9e:41:f4:fd:29:fd:44:51:ca:a8: ad:ee:1b:8d:f1:30:38:d5:be:89:b4:1f:36:31:39:47:0d:8a: 4f:a2:f8:f2:48:fc:d2:fd:94:bc:83:56:75:da:b9:f9:96:7d: 1b:9e:29:38:a4:ba:ee:bf:c7:38:92:52:db:09:84:f4:44:11: fa:90:6e:fa:0c:f2:ec:50:41:38:7d:75:c7:08:e4:18:59:6c: 6c:56:28:ce:ee:0d:0e:da:1c:86:10:db:29:a2:df:9a:72:55: 9b:84:1e:9b:b2:a8:7f:39:ed:89:26:d0:d0:62:33:87:c5:35: 2e:a7:9c:9b:84:1f:32:e3:cf:73:ed:b5:0f:0e:f2:2f:c6:83: 34:bd:e0:c6:7c:1b:eb:0c:fd:db:42:53:7f:d5:2a:02:28:ce: b0:40:9c:07:d5:04:02:08:2b:99:4a:a6:54:7a:c5:26:99:1e: cf:85:fa:04:58:52:c5:35:f4:e1:dc:54:b0:9c:62:11:34:64: f1:21:d6:13:8d:56:1f:c9:ab:f8:f5:1d:93:5c:66:36:f7:3e: 6b:4a:10:af:90:fe:a2:2d:8f:1c:6c:f2:ae:2a:19:14:f3:98: a0:b3:a1:54 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgISAZt/FY1QyxTC9D06EaMuMt0eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk ZGJkZTUwHhcNMjYwMTAyMTQyMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDdhMTgxM2Q4N2FmOWM3ZmI2Zjg5MDk4OGE0NDdmOWZhZmJiNTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAVFWiM7EmA3ljGptFI7p3dZzloS ZI5Fzc7Wiv/2dVioYpyMjvvpQqxYTNh0RW07X21XA/bocLXR80kMnG46e5FciX4e bXaw1/FA+uFwCIrjWY8E27RPOjbhHJDCxqELIQEufWIox57lI52WMyyKupa7jE6M 6xzzNt91+MBbn+XFpmyVMJ66vyqaEKi19Zu1hOQIWcZ0UNNoqRGlVph644M0uCh3 BoLQSzhLVQGH9rTPw/C6BNifb6+mSW6UT99aRV/4FqhPOFXjHPidFi9c+P6U4Q6A l2+W90r3UDCN8A1Y4aDZzE38cZFa5FuC0S+VkE0oEu5UBVkg0x6T5lLe3QIDAQAB o4IC1DCCAtAwHQYDVR0OBBYEFA16GBPYevnH+2+JCYikR/n6+7URMB8GA1UdIwQY MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt NDM3Mzk0OTM4YzUyLzEvRFhvWUU5aDYtY2Y3YjRrSmlLUkgtZnI3dFJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHpBggrBgEFBQcBBwEB/wSB2TCB1jCB0wQCAAEwgcwDBAAl nK0DBABWabgDBABWafMDBABWamkDBABWam0DBAFWanIDBABWanYDBAFWaooDBABZ IXQwDAMEAVkhxgMEAVkhyAMEAFkjNgMEAFkkJgMEAFkkizAMAwQAWSWBAwQAWSWG AwQAWSfUAwQAWSfxAwQAWSiMAwQBWSkcAwQAWSkxMAwDBABZKb0DBAZZKYADBABZ KgoDBAFZKpgDBAK5UHADBAS8rLADBAC806cDBAC81P4DBAC81l8DBAC88dMDBAHB /jQDBAHB/jowDQYJKoZIhvcNAQELBQADggEBABz/F00L625ErPvaYVGQ+qEAGKXu WaWR10IMnkH0/Sn9RFHKqK3uG43xMDjVvom0HzYxOUcNik+i+PJI/NL9lLyDVnXa ufmWfRueKTikuu6/xziSUtsJhPREEfqQbvoM8uxQQTh9dccI5BhZbGxWKM7uDQ7a HIYQ2ymi35pyVZuEHpuyqH857Ykm0NBiM4fFNS6nnJuEHzLjz3PttQ8O8i/GgzS9 4MZ8G+sM/dtCU3/VKgIozrBAnAfVBAIIK5lKplR6xSaZHs+F+gRYUsU19OHcVLCc YhE0ZPEh1hONVh/Jq/j1HZNcZjb3PmtKEK+Q/qItjxxs8q4qGRTzmKCzoVQ= -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:47 2026 by rpki-client