This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/8yIZTK-CShWBBUUDfghL2_0Azo8.roa File: 8yIZTK-CShWBBUUDfghL2_0Azo8.roa (raw, json) Hash identifier: zZSu+xq5lR1eG3HkuY9UlS4mVnZgZc2/qAyNAZnjB0Y= Subject key identifier: F3:22:19:4C:AF:82:4A:15:81:05:45:03:7E:08:4B:DB:FD:00:CE:8F Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e Certificate serial: 019B7B3635A10913727C4D18DD0F6C1B78C1 Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/8yIZTK-CShWBBUUDfghL2_0Azo8.roa Signing time: Thu 01 Jan 2026 20:18:28 +0000 ROA not before: Thu 01 Jan 2026 20:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12552 IP address blocks: 62.102.144.0/22 maxlen: 22 62.109.32.0/19 maxlen: 19 62.209.160.0/19 maxlen: 19 65.99.128.0/18 maxlen: 18 80.252.160.0/19 maxlen: 19 82.96.0.0/18 maxlen: 18 82.96.28.0/22 maxlen: 22 82.96.43.0/24 maxlen: 24 82.99.0.0/18 maxlen: 18 83.140.0.0/16 maxlen: 16 83.140.30.0/24 maxlen: 24 83.140.95.0/24 maxlen: 24 83.140.96.0/23 maxlen: 23 83.140.99.0/24 maxlen: 24 83.140.108.0/22 maxlen: 22 83.140.113.0/24 maxlen: 24 83.140.156.0/23 maxlen: 23 83.140.171.0/24 maxlen: 24 83.140.221.0/24 maxlen: 24 83.140.231.0/24 maxlen: 24 83.140.249.0/24 maxlen: 24 83.145.0.0/18 maxlen: 18 85.112.160.0/19 maxlen: 19 85.112.184.0/22 maxlen: 22 93.158.64.0/18 maxlen: 18 93.158.68.0/22 maxlen: 22 93.158.76.0/24 maxlen: 24 93.158.78.0/24 maxlen: 24 93.158.88.0/22 maxlen: 22 93.158.92.0/23 maxlen: 23 93.158.95.0/24 maxlen: 24 93.158.98.0/23 maxlen: 23 93.158.100.0/24 maxlen: 24 93.158.102.0/23 maxlen: 23 93.158.107.0/24 maxlen: 24 93.158.108.0/23 maxlen: 23 93.189.240.0/21 maxlen: 21 94.136.64.0/19 maxlen: 19 94.246.64.0/18 maxlen: 18 146.185.8.0/21 maxlen: 21 178.248.24.0/22 maxlen: 22 185.165.80.0/22 maxlen: 22 185.165.172.0/22 maxlen: 22 185.165.172.0/24 maxlen: 24 185.178.140.0/22 maxlen: 22 185.178.143.0/24 maxlen: 24 185.181.216.0/22 maxlen: 22 185.182.84.0/22 maxlen: 22 185.183.144.0/22 maxlen: 22 185.183.152.0/22 maxlen: 22 185.190.144.0/22 maxlen: 22 185.199.168.0/22 maxlen: 22 185.205.224.0/22 maxlen: 22 185.205.226.0/24 maxlen: 24 185.211.136.0/22 maxlen: 22 195.140.200.0/22 maxlen: 22 212.16.160.0/19 maxlen: 19 212.37.0.0/19 maxlen: 19 212.112.160.0/19 maxlen: 19 213.80.0.0/18 maxlen: 18 213.80.64.0/19 maxlen: 19 213.132.96.0/19 maxlen: 19 213.212.0.0/18 maxlen: 18 217.75.96.0/19 maxlen: 19 217.140.112.0/20 maxlen: 20 2001:16d8::/32 maxlen: 32 2a01:2b0::/29 maxlen: 29 2a01:6d0::/32 maxlen: 32 2a0a:6380::/29 maxlen: 29 2a0a:a040::/29 maxlen: 29 2a0a:a040::/32 maxlen: 32 2a0a:a041::/32 maxlen: 32 2a0a:d381::/32 maxlen: 32 2a0a:d381:100::/40 maxlen: 40 2a0a:d381:200::/40 maxlen: 40 2a0a:d381:400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:35:a1:09:13:72:7c:4d:18:dd:0f:6c:1b:78:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e Validity Not Before: Jan 1 20:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f322194caf824a15810545037e084bdbfd00ce8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fa:b5:b3:84:e4:fd:76:ed:3b:30:35:42:03: 7a:b2:cc:d4:aa:33:b7:89:59:7d:fa:9b:8d:a9:0e: 35:38:7d:11:79:d5:26:44:65:d8:b7:7d:0e:fa:87: 52:9c:2f:2a:13:51:2e:12:53:d2:40:56:be:e5:35: 4f:2c:66:94:39:71:0f:05:13:ee:d2:f4:fd:79:7b: 7d:99:1c:91:a9:c0:13:4c:9f:09:a8:d1:31:e1:32: 8c:91:66:e1:47:02:68:79:a2:6a:eb:7f:1b:9e:6a: 66:39:a6:ec:88:bd:98:12:1d:9f:1d:c2:86:6d:95: de:8c:37:be:3c:e5:c2:55:5c:f7:ab:e5:68:d4:5f: 7d:37:07:a3:c2:78:99:42:41:ec:c2:f2:09:18:d4: 90:93:4b:f2:45:97:ec:2c:d9:85:d6:6b:2f:c4:6a: 63:4d:1f:35:13:0d:26:87:d9:90:9e:cf:6b:47:67: 27:39:1a:34:e6:0e:51:4b:0a:a4:51:74:ca:d1:0d: 57:46:d3:bf:8e:2d:b7:90:10:e1:aa:bd:21:90:2f: b2:89:69:7e:19:77:50:a6:6b:82:3f:28:2f:34:05: 93:d5:9f:e0:66:54:80:ef:30:e9:bb:d6:91:1a:67: f4:76:ae:90:5c:28:ca:73:75:a4:16:a6:dd:fc:8b: 20:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:22:19:4C:AF:82:4A:15:81:05:45:03:7E:08:4B:DB:FD:00:CE:8F X509v3 Authority Key Identifier: keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/8yIZTK-CShWBBUUDfghL2_0Azo8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.102.144.0/22 62.109.32.0/19 62.209.160.0/19 65.99.128.0/18 80.252.160.0/19 82.96.0.0/18 82.99.0.0/18 83.140.0.0/16 83.145.0.0/18 85.112.160.0/19 93.158.64.0/18 93.189.240.0/21 94.136.64.0/19 94.246.64.0/18 146.185.8.0/21 178.248.24.0/22 185.165.80.0/22 185.165.172.0/22 185.178.140.0/22 185.181.216.0/22 185.182.84.0/22 185.183.144.0/22 185.183.152.0/22 185.190.144.0/22 185.199.168.0/22 185.205.224.0/22 185.211.136.0/22 195.140.200.0/22 212.16.160.0/19 212.37.0.0/19 212.112.160.0/19 213.80.0.0-213.80.95.255 213.132.96.0/19 213.212.0.0/18 217.75.96.0/19 217.140.112.0/20 IPv6: 2001:16d8::/32 2a01:2b0::/29 2a01:6d0::/32 2a0a:6380::/29 2a0a:a040::/29 2a0a:d381::/32 Signature Algorithm: sha256WithRSAEncryption ad:c5:e5:66:ad:f2:a7:c0:49:18:3b:d9:1a:3d:01:c5:94:b0: 21:0f:48:b3:82:b0:da:fc:55:ba:a8:56:c6:13:4c:03:df:95: 8a:72:71:7e:0e:32:2e:e3:d1:80:43:c5:c0:95:cd:85:7a:4f: 5e:cf:0f:b5:d6:13:15:10:85:2f:c4:82:09:b6:0a:bd:b2:5a: 07:8a:37:16:c7:4e:2c:81:5d:59:a8:d4:a6:86:35:96:e1:44: 3c:5a:7f:2a:fc:71:a5:f7:fe:57:5a:94:74:e2:68:d2:c3:bf: b2:d4:7d:6e:af:a4:e3:95:1b:76:72:6a:ee:03:89:e8:35:eb: 44:dc:08:2b:b4:24:89:8f:6e:f4:74:a0:cf:0e:99:34:07:9e: d7:e1:dc:20:11:a2:48:c9:34:11:67:85:ce:c8:af:17:14:6e: 15:bd:f6:d5:0f:48:75:c5:95:ce:d6:6f:c3:c6:b8:fc:8f:3b: 3a:4f:06:56:70:31:50:e7:d9:af:9f:75:55:e5:6d:7a:4e:22: 02:d5:25:f2:c3:29:4f:59:81:b7:aa:ae:3c:3d:d3:56:75:fa: 63:a5:bf:e9:d4:0d:d6:86:c5:c0:b2:e7:9f:29:db:64:38:b7: c3:98:ed:d5:bb:30:bd:66:fe:80:86:99:41:04:d8:14:d3:d8: 53:b4:b7:48 -----BEGIN CERTIFICATE----- MIIGDzCCBPegAwIBAgISAZt7NjWhCRNyfE0Y3Q9sG3jBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmOTM4NTAzZDcyOTMxNjI2ZGNiOGQxZTk0NmIyYWUwNmE3 M2QwMmUwHhcNMjYwMTAxMjAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzIyMTk0Y2FmODI0YTE1ODEwNTQ1MDM3ZTA4NGJkYmZkMDBjZThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvq1s4Tk/XbtOzA1QgN6sszUqjO3 iVl9+puNqQ41OH0RedUmRGXYt30O+odSnC8qE1EuElPSQFa+5TVPLGaUOXEPBRPu 0vT9eXt9mRyRqcATTJ8JqNEx4TKMkWbhRwJoeaJq638bnmpmOabsiL2YEh2fHcKG bZXejDe+POXCVVz3q+Vo1F99NwejwniZQkHswvIJGNSQk0vyRZfsLNmF1msvxGpj TR81Ew0mh9mQns9rR2cnORo05g5RSwqkUXTK0Q1XRtO/ji23kBDhqr0hkC+yiWl+ GXdQpmuCPygvNAWT1Z/gZlSA7zDpu9aRGmf0dq6QXCjKc3WkFqbd/IsgUQIDAQAB o4IDGzCCAxcwHQYDVR0OBBYEFPMiGUyvgkoVgQVFA34IS9v9AM6PMB8GA1UdIwQY MBaAFK+ThQPXKTFibcuNHpRrKuBqc9AuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYt M2I4YjBkMWE1OWE5LzEvOHlJWlRLLUNTaFdCQlVVRGZnaEwyXzBBem84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYtM2I4YjBkMWE1OWE5 LzEvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBLwYIKwYBBQUHAQcBAf8EggEeMIIBGjCB5QQCAAEwgd4D BAI+ZpADBAU+bSADBAU+0aADBAZBY4ADBAVQ/KADBAZSYAADBAZSYwADAwBTjAME BlORAAMEBVVwoAMEBl2eQAMEA1298AMEBV6IQAMEBl72QAMEA5K5CAMEArL4GAME ArmlUAMEArmlrAMEArmyjAMEArm12AMEArm2VAMEArm3kAMEArm3mAMEArm+kAME ArnHqAMEArnN4AMEArnTiAMEAsOMyAMEBdQQoAMEBdQlAAMEBdRwoDALAwME1VAD BAXVUEADBAXVhGADBAbV1AADBAXZS2ADBATZjHAwMAQCAAIwKgMFACABFtgDBQMq AQKwAwUAKgEG0AMFAyoKY4ADBQMqCqBAAwUAKgrTgTANBgkqhkiG9w0BAQsFAAOC AQEArcXlZq3yp8BJGDvZGj0BxZSwIQ9Is4Kw2vxVuqhWxhNMA9+VinJxfg4yLuPR gEPFwJXNhXpPXs8PtdYTFRCFL8SCCbYKvbJaB4o3FsdOLIFdWajUpoY1luFEPFp/ Kvxxpff+V1qUdOJo0sO/stR9bq+k45UbdnJq7gOJ6DXrRNwIK7QkiY9u9HSgzw6Z NAee1+HcIBGiSMk0EWeFzsivFxRuFb321Q9IdcWVztZvw8a4/I87Ok8GVnAxUOfZ r591VeVtek4iAtUl8sMpT1mBt6quPD3TVnX6Y6W/6dQN1obFwLLnnynbZDi3w5jt 1bswvWb+gIaZQQTYFNPYU7S3SA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:03 2026 by rpki-client