This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/dGwO4WJpN4KX0BwTJYtIabBzdBU.roa File: dGwO4WJpN4KX0BwTJYtIabBzdBU.roa (raw, json) Hash identifier: 9Dq2E6iLV/+UQl6/0txmPEH61p9nmtpYGc0Ymw+CmpA= Subject key identifier: 74:6C:0E:E1:62:69:37:82:97:D0:1C:13:25:8B:48:69:B0:73:74:15 Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5 Certificate serial: 019B7F158DFF18C87E1C8BEC97D04636F4BE Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/dGwO4WJpN4KX0BwTJYtIabBzdBU.roa Signing time: Fri 02 Jan 2026 14:21:17 +0000 ROA not before: Fri 02 Jan 2026 14:21:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203346 IP address blocks: 37.156.64.0/24 maxlen: 24 37.156.65.0/24 maxlen: 24 46.102.182.0/24 maxlen: 24 46.102.183.0/24 maxlen: 24 77.81.84.0/23 maxlen: 23 77.81.86.0/24 maxlen: 24 77.81.89.0/24 maxlen: 24 86.104.222.0/23 maxlen: 23 86.104.224.0/23 maxlen: 23 86.105.2.0/24 maxlen: 24 86.105.6.0/24 maxlen: 24 86.105.176.0/24 maxlen: 24 86.105.178.0/24 maxlen: 24 86.105.185.0/24 maxlen: 24 86.105.229.0/24 maxlen: 24 86.105.230.0/24 maxlen: 24 86.105.242.0/24 maxlen: 24 86.106.10.0/24 maxlen: 24 86.106.13.0/24 maxlen: 24 86.106.14.0/23 maxlen: 23 86.106.94.0/24 maxlen: 24 86.106.95.0/24 maxlen: 24 86.106.106.0/23 maxlen: 23 86.106.110.0/23 maxlen: 23 86.106.140.0/23 maxlen: 23 86.106.174.0/24 maxlen: 24 86.106.175.0/24 maxlen: 24 86.107.193.0/24 maxlen: 24 86.107.194.0/23 maxlen: 23 89.32.43.0/24 maxlen: 24 89.32.170.0/24 maxlen: 24 89.33.46.0/24 maxlen: 24 89.33.47.0/24 maxlen: 24 89.33.134.0/24 maxlen: 24 89.33.206.0/24 maxlen: 24 89.33.250.0/24 maxlen: 24 89.33.251.0/24 maxlen: 24 89.33.254.0/24 maxlen: 24 89.33.255.0/24 maxlen: 24 89.34.102.0/24 maxlen: 24 89.34.104.0/24 maxlen: 24 89.34.105.0/24 maxlen: 24 89.35.89.0/24 maxlen: 24 89.35.90.0/24 maxlen: 24 89.36.39.0/24 maxlen: 24 89.36.136.0/24 maxlen: 24 89.36.138.0/24 maxlen: 24 89.36.141.0/24 maxlen: 24 89.37.92.0/24 maxlen: 24 89.37.96.0/24 maxlen: 24 89.38.240.0/24 maxlen: 24 89.39.69.0/24 maxlen: 24 89.39.215.0/24 maxlen: 24 89.40.141.0/24 maxlen: 24 89.40.207.0/24 maxlen: 24 89.40.209.0/24 maxlen: 24 89.41.50.0/23 maxlen: 23 89.45.82.0/24 maxlen: 24 89.46.47.0/24 maxlen: 24 91.218.236.0/23 maxlen: 23 91.218.238.0/23 maxlen: 23 91.235.130.0/24 maxlen: 24 91.235.131.0/24 maxlen: 24 93.114.51.0/24 maxlen: 24 93.114.52.0/23 maxlen: 23 93.114.58.0/24 maxlen: 24 93.114.59.0/24 maxlen: 24 93.115.59.0/24 maxlen: 24 93.119.118.0/23 maxlen: 23 93.119.120.0/23 maxlen: 23 93.119.124.0/24 maxlen: 24 94.177.126.0/24 maxlen: 24 176.126.192.0/23 maxlen: 23 176.126.194.0/24 maxlen: 24 176.223.116.0/23 maxlen: 23 176.223.118.0/24 maxlen: 24 176.223.161.0/24 maxlen: 24 188.208.48.0/22 maxlen: 22 188.208.52.0/22 maxlen: 22 188.208.222.0/24 maxlen: 24 188.209.120.0/22 maxlen: 22 188.209.124.0/22 maxlen: 22 188.213.206.0/24 maxlen: 24 188.213.207.0/24 maxlen: 24 188.213.214.0/24 maxlen: 24 188.213.215.0/24 maxlen: 24 188.213.248.0/22 maxlen: 22 188.213.252.0/22 maxlen: 22 193.30.254.0/24 maxlen: 24 193.32.66.0/24 maxlen: 24 193.32.67.0/24 maxlen: 24 193.254.48.0/22 maxlen: 22 193.254.54.0/23 maxlen: 23 193.254.56.0/23 maxlen: 23 193.254.60.0/22 maxlen: 22 194.41.60.0/24 maxlen: 24 194.41.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:8d:ff:18:c8:7e:1c:8b:ec:97:d0:46:36:f4:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5 Validity Not Before: Jan 2 14:21:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=746c0ee16269378297d01c13258b4869b0737415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:58:5c:06:e0:b9:bf:e5:88:f0:56:4e:78:df: 10:e0:ae:12:2f:43:ee:69:6d:08:9d:f4:f3:51:e9: cf:46:04:f7:73:7a:4e:25:3e:ec:ff:4a:55:ba:be: 1c:fe:8b:0b:21:90:8b:b1:76:6f:53:6b:f1:d7:9b: bf:75:f8:9b:5a:05:8d:2d:4b:6b:1e:f1:2e:2d:fc: 27:63:96:10:c7:bf:ad:d8:f6:5b:0d:4f:23:52:0c: 79:7c:53:af:52:6f:a8:ef:54:9e:87:4c:bc:15:e0: 83:d4:ad:97:83:de:30:52:40:88:35:0c:7e:87:a6: a7:59:33:ce:7c:e5:98:34:79:72:79:29:bf:51:21: ca:51:1a:5c:96:44:44:c3:cc:52:86:0a:79:a6:e8: 92:de:68:c1:13:69:43:be:0a:68:45:af:98:a9:03: 7c:78:90:d7:18:40:78:af:99:c2:1a:a6:5b:7d:ff: 5d:de:ec:a8:29:42:b7:5f:c2:45:bb:6a:94:d7:29: e7:4b:a7:97:de:4d:81:1e:71:c7:4f:32:00:00:94: d9:58:a8:00:13:55:5b:63:20:17:34:b8:94:7a:fc: c9:5a:7b:4b:0f:ef:98:2c:f8:fa:97:ac:d9:bf:25: 75:af:c6:0c:0d:93:52:3e:4f:cb:23:18:74:01:a1: 1a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:6C:0E:E1:62:69:37:82:97:D0:1C:13:25:8B:48:69:B0:73:74:15 X509v3 Authority Key Identifier: keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/dGwO4WJpN4KX0BwTJYtIabBzdBU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.156.64.0/23 46.102.182.0/23 77.81.84.0-77.81.86.255 77.81.89.0/24 86.104.222.0-86.104.225.255 86.105.2.0/24 86.105.6.0/24 86.105.176.0/24 86.105.178.0/24 86.105.185.0/24 86.105.229.0-86.105.230.255 86.105.242.0/24 86.106.10.0/24 86.106.13.0-86.106.15.255 86.106.94.0/23 86.106.106.0/23 86.106.110.0/23 86.106.140.0/23 86.106.174.0/23 86.107.193.0-86.107.195.255 89.32.43.0/24 89.32.170.0/24 89.33.46.0/23 89.33.134.0/24 89.33.206.0/24 89.33.250.0/23 89.33.254.0/23 89.34.102.0/24 89.34.104.0/23 89.35.89.0-89.35.90.255 89.36.39.0/24 89.36.136.0/24 89.36.138.0/24 89.36.141.0/24 89.37.92.0/24 89.37.96.0/24 89.38.240.0/24 89.39.69.0/24 89.39.215.0/24 89.40.141.0/24 89.40.207.0/24 89.40.209.0/24 89.41.50.0/23 89.45.82.0/24 89.46.47.0/24 91.218.236.0/22 91.235.130.0/23 93.114.51.0-93.114.53.255 93.114.58.0/23 93.115.59.0/24 93.119.118.0-93.119.121.255 93.119.124.0/24 94.177.126.0/24 176.126.192.0-176.126.194.255 176.223.116.0-176.223.118.255 176.223.161.0/24 188.208.48.0/21 188.208.222.0/24 188.209.120.0/21 188.213.206.0/23 188.213.214.0/23 188.213.248.0/21 193.30.254.0/24 193.32.66.0/23 193.254.48.0/22 193.254.54.0-193.254.57.255 193.254.60.0/22 194.41.60.0/23 Signature Algorithm: sha256WithRSAEncryption 36:13:7f:f7:b4:13:a5:31:6b:75:22:06:2d:4d:c0:57:1f:3b: 2d:6c:07:75:fa:55:39:f4:c6:9e:23:e1:64:1e:1d:54:eb:f5: 71:4b:80:91:9a:bf:d8:68:36:bb:62:a5:51:0c:1f:3d:85:43: 67:84:7b:18:df:3e:2f:37:fc:61:ef:41:5f:3f:d8:c3:1b:51: f4:4f:03:f0:d3:7c:15:08:27:79:db:d9:72:bc:1b:e4:e8:48: c0:18:4f:80:84:b8:5a:3d:30:67:45:d7:70:ca:77:66:fe:57: b7:d5:55:87:ec:d7:62:66:e4:7d:85:f5:b8:82:44:3c:1d:78: a0:db:01:47:17:48:45:23:70:b7:9d:1c:1c:8c:36:83:98:a1: ec:88:ea:63:e7:11:54:e8:7c:29:29:d2:f4:0d:78:f6:21:a6: a7:32:48:6f:ff:66:e8:38:ef:c2:21:76:23:0d:d4:b8:2d:5e: 0e:cf:4b:7d:d6:2b:20:9e:d8:05:9c:0b:25:55:84:c2:ac:a7: 9a:c2:2f:26:e4:86:31:ed:93:80:44:fe:b9:21:97:41:42:c8: e3:36:a6:6e:09:bb:fe:f3:83:ed:1c:53:43:93:c0:8c:c7:90: 95:8c:5e:e2:e1:66:3b:1c:66:ab:5c:b8:08:2a:19:ba:48:ac: 7c:80:a8:c9 -----BEGIN CERTIFICATE----- MIIG8TCCBdmgAwIBAgISAZt/FY3/GMh+HIvsl9BGNvS+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk ZGJkZTUwHhcNMjYwMTAyMTQyMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDZjMGVlMTYyNjkzNzgyOTdkMDFjMTMyNThiNDg2OWIwNzM3NDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVhcBuC5v+WI8FZOeN8Q4K4SL0Pu aW0InfTzUenPRgT3c3pOJT7s/0pVur4c/osLIZCLsXZvU2vx15u/dfibWgWNLUtr HvEuLfwnY5YQx7+t2PZbDU8jUgx5fFOvUm+o71Seh0y8FeCD1K2Xg94wUkCINQx+ h6anWTPOfOWYNHlyeSm/USHKURpclkREw8xShgp5puiS3mjBE2lDvgpoRa+YqQN8 eJDXGEB4r5nCGqZbff9d3uyoKUK3X8JFu2qU1ynnS6eX3k2BHnHHTzIAAJTZWKgA E1VbYyAXNLiUevzJWntLD++YLPj6l6zZvyV1r8YMDZNSPk/LIxh0AaEapQIDAQAB o4ID/TCCA/kwHQYDVR0OBBYEFHRsDuFiaTeCl9AcEyWLSGmwc3QVMB8GA1UdIwQY MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt NDM3Mzk0OTM4YzUyLzEvZEd3TzRXSnBONEtYMEJ3VEpZdElhYkJ6ZEJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICEQYIKwYBBQUHAQcBAf8EggIAMIIB/DCCAfgEAgABMIIB 8AMEASWcQAMEAS5mtjAMAwQCTVFUAwQATVFWAwQATVFZMAwDBAFWaN4DBAFWaOAD BABWaQIDBABWaQYDBABWabADBABWabIDBABWabkwDAMEAFZp5QMEAFZp5gMEAFZp 8gMEAFZqCjAMAwQAVmoNAwQEVmoAAwQBVmpeAwQBVmpqAwQBVmpuAwQBVmqMAwQB VmquMAwDBABWa8EDBAJWa8ADBABZICsDBABZIKoDBAFZIS4DBABZIYYDBABZIc4D BAFZIfoDBAFZIf4DBABZImYDBAFZImgwDAMEAFkjWQMEAFkjWgMEAFkkJwMEAFkk iAMEAFkkigMEAFkkjQMEAFklXAMEAFklYAMEAFkm8AMEAFknRQMEAFkn1wMEAFko jQMEAFkozwMEAFko0QMEAVkpMgMEAFktUgMEAFkuLwMEAlva7AMEAVvrgjAMAwQA XXIzAwQBXXI0AwQBXXI6AwQAXXM7MAwDBAFdd3YDBAFdd3gDBABdd3wDBABesX4w DAMEBrB+wAMEALB+wjAMAwQCsN90AwQAsN92AwQAsN+hAwQDvNAwAwQAvNDeAwQD vNF4AwQBvNXOAwQBvNXWAwQDvNX4AwQAwR7+AwQBwSBCAwQCwf4wMAwDBAHB/jYD BAHB/jgDBALB/jwDBAHCKTwwDQYJKoZIhvcNAQELBQADggEBADYTf/e0E6Uxa3Ui Bi1NwFcfOy1sB3X6VTn0xp4j4WQeHVTr9XFLgJGav9hoNrtipVEMHz2FQ2eEexjf Pi83/GHvQV8/2MMbUfRPA/DTfBUIJ3nb2XK8G+ToSMAYT4CEuFo9MGdF13DKd2b+ V7fVVYfs12Jm5H2F9biCRDwdeKDbAUcXSEUjcLedHByMNoOYoeyI6mPnEVTofCkp 0vQNePYhpqcySG//Zug478IhdiMN1LgtXg7PS33WKyCe2AWcCyVVhMKsp5rCLybk hjHtk4BE/rkhl0FCyOM2pm4Ju/7zg+0cU0OTwIzHkJWMXuLhZjscZqtcuAgqGbpI rHyAqMk= -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:22 2026 by rpki-client