This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/cfc8AqxUQpHiP5l_Nwt2RxlR31E.roa File: cfc8AqxUQpHiP5l_Nwt2RxlR31E.roa (raw, json) Hash identifier: l4uppHG903ldqi9DaDNBYospFemwSrJP6nlFEmmwSgY= Subject key identifier: 71:F7:3C:02:AC:54:42:91:E2:3F:99:7F:37:0B:76:47:19:51:DF:51 Certificate issuer: /CN=65df379faaf210a7036dac05de6b5772dbe4dd6c Certificate serial: 019B7E37620A4D22DD354E917A55F9E2CB04 Authority key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/cfc8AqxUQpHiP5l_Nwt2RxlR31E.roa Signing time: Fri 02 Jan 2026 10:18:37 +0000 ROA not before: Fri 02 Jan 2026 10:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201838 IP address blocks: 45.12.172.0/22 maxlen: 24 45.81.72.0/22 maxlen: 22 45.86.8.0/22 maxlen: 24 45.89.84.0/22 maxlen: 22 45.89.156.0/22 maxlen: 22 45.90.172.0/22 maxlen: 22 45.91.112.0/22 maxlen: 22 45.93.172.0/22 maxlen: 22 45.94.60.0/22 maxlen: 22 45.94.176.0/22 maxlen: 22 45.95.248.0/22 maxlen: 22 45.117.136.0/22 maxlen: 22 45.128.32.0/22 maxlen: 22 45.128.136.0/22 maxlen: 22 45.132.136.0/21 maxlen: 24 45.133.88.0/22 maxlen: 24 45.141.236.0/22 maxlen: 22 45.144.56.0/22 maxlen: 24 45.144.160.0/22 maxlen: 24 45.146.8.0/22 maxlen: 22 45.146.60.0/22 maxlen: 24 45.148.12.0/22 maxlen: 22 45.148.56.0/22 maxlen: 22 45.148.252.0/22 maxlen: 24 45.149.72.0/22 maxlen: 24 45.149.220.0/22 maxlen: 22 45.150.144.0/22 maxlen: 22 45.152.4.0/22 maxlen: 24 45.153.220.0/22 maxlen: 24 45.159.88.0/22 maxlen: 22 45.159.152.0/22 maxlen: 24 45.248.144.0/22 maxlen: 24 46.102.170.0/23 maxlen: 23 46.102.170.0/24 maxlen: 24 46.102.171.0/24 maxlen: 24 62.133.48.0/22 maxlen: 22 62.197.132.0/22 maxlen: 24 77.75.60.0/22 maxlen: 24 79.171.153.0/24 maxlen: 24 79.171.154.0/23 maxlen: 23 79.171.156.0/22 maxlen: 22 80.76.56.0/22 maxlen: 22 89.36.112.0/20 maxlen: 20 89.43.208.0/21 maxlen: 24 89.45.176.0/20 maxlen: 20 89.222.16.0/20 maxlen: 20 91.209.86.0/24 maxlen: 24 93.113.26.0/23 maxlen: 23 94.176.208.0/23 maxlen: 23 94.177.138.0/23 maxlen: 23 94.247.86.0/23 maxlen: 23 95.214.184.0/22 maxlen: 22 95.214.228.0/22 maxlen: 22 103.7.204.0/22 maxlen: 22 103.205.24.0/22 maxlen: 24 130.255.16.0/22 maxlen: 24 130.255.28.0/22 maxlen: 24 147.12.128.0/17 maxlen: 24 171.22.104.0/22 maxlen: 22 178.239.192.0/22 maxlen: 24 178.239.200.0/22 maxlen: 24 178.255.88.0/21 maxlen: 24 185.59.124.0/22 maxlen: 22 185.71.36.0/22 maxlen: 22 185.103.72.0/22 maxlen: 24 185.111.172.0/22 maxlen: 22 185.115.144.0/22 maxlen: 24 185.121.228.0/22 maxlen: 24 185.229.104.0/22 maxlen: 24 185.230.248.0/22 maxlen: 24 185.236.60.0/22 maxlen: 24 185.237.60.0/22 maxlen: 22 185.238.220.0/22 maxlen: 22 185.240.196.0/22 maxlen: 22 185.241.164.0/22 maxlen: 22 185.245.236.0/22 maxlen: 24 188.212.122.0/23 maxlen: 23 188.215.16.0/23 maxlen: 23 188.215.74.0/23 maxlen: 23 188.241.106.0/23 maxlen: 23 192.166.208.0/22 maxlen: 22 192.166.212.0/22 maxlen: 24 193.42.52.0/22 maxlen: 24 193.164.20.0/22 maxlen: 22 194.4.156.0/22 maxlen: 24 212.132.192.0/18 maxlen: 18 213.32.248.0/22 maxlen: 24 2a02:6b60::/28 maxlen: 28 2a02:6b60::/29 maxlen: 29 2a03:3820::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:62:0a:4d:22:dd:35:4e:91:7a:55:f9:e2:cb:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c Validity Not Before: Jan 2 10:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71f73c02ac544291e23f997f370b76471951df51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a9:37:ad:a9:6e:9c:a5:97:7c:34:74:54:0e: ed:cf:f0:83:9d:85:3d:9d:f3:a5:d3:27:00:a5:00: 72:dd:da:f1:a2:11:32:22:d1:5d:f1:10:1f:79:80: 8e:87:15:3c:c0:fa:d6:af:3c:d8:de:2c:8d:3f:da: a0:f0:2f:e8:06:63:7d:94:d9:4f:40:ff:a6:fa:2f: 37:5a:b8:ae:e2:99:20:f2:33:7c:b2:a5:c1:49:2a: 01:91:2a:52:01:b8:27:ff:ee:3e:fa:af:76:10:7b: 78:7e:8c:5c:95:70:7d:94:75:67:20:1a:02:d6:36: 3e:eb:40:59:0b:82:ce:06:20:1e:34:b2:5b:cc:1f: 7f:3e:ec:6d:c2:f1:01:46:73:23:2a:db:e9:ca:0b: 3e:0a:a1:46:51:99:a8:a8:7e:b6:f3:6f:ec:05:e9: d3:46:7a:8e:d2:51:74:31:53:82:10:91:11:96:fd: 12:10:55:eb:ec:7e:2b:ae:05:2e:ae:19:6d:cc:99: bb:9b:d8:06:03:31:84:a4:04:ee:c8:32:29:66:04: b3:f5:59:63:64:2d:92:e2:4a:10:5c:3f:dc:1c:54: ca:8b:00:e8:98:9b:9e:de:a4:09:5e:6e:17:af:8b: ca:b0:1c:28:56:f5:29:ec:93:4c:e8:0d:f2:c7:b6: d8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F7:3C:02:AC:54:42:91:E2:3F:99:7F:37:0B:76:47:19:51:DF:51 X509v3 Authority Key Identifier: keyid:65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/cfc8AqxUQpHiP5l_Nwt2RxlR31E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.172.0/22 45.81.72.0/22 45.86.8.0/22 45.89.84.0/22 45.89.156.0/22 45.90.172.0/22 45.91.112.0/22 45.93.172.0/22 45.94.60.0/22 45.94.176.0/22 45.95.248.0/22 45.117.136.0/22 45.128.32.0/22 45.128.136.0/22 45.132.136.0/21 45.133.88.0/22 45.141.236.0/22 45.144.56.0/22 45.144.160.0/22 45.146.8.0/22 45.146.60.0/22 45.148.12.0/22 45.148.56.0/22 45.148.252.0/22 45.149.72.0/22 45.149.220.0/22 45.150.144.0/22 45.152.4.0/22 45.153.220.0/22 45.159.88.0/22 45.159.152.0/22 45.248.144.0/22 46.102.170.0/23 62.133.48.0/22 62.197.132.0/22 77.75.60.0/22 79.171.153.0-79.171.159.255 80.76.56.0/22 89.36.112.0/20 89.43.208.0/21 89.45.176.0/20 89.222.16.0/20 91.209.86.0/24 93.113.26.0/23 94.176.208.0/23 94.177.138.0/23 94.247.86.0/23 95.214.184.0/22 95.214.228.0/22 103.7.204.0/22 103.205.24.0/22 130.255.16.0/22 130.255.28.0/22 147.12.128.0/17 171.22.104.0/22 178.239.192.0/22 178.239.200.0/22 178.255.88.0/21 185.59.124.0/22 185.71.36.0/22 185.103.72.0/22 185.111.172.0/22 185.115.144.0/22 185.121.228.0/22 185.229.104.0/22 185.230.248.0/22 185.236.60.0/22 185.237.60.0/22 185.238.220.0/22 185.240.196.0/22 185.241.164.0/22 185.245.236.0/22 188.212.122.0/23 188.215.16.0/23 188.215.74.0/23 188.241.106.0/23 192.166.208.0/21 193.42.52.0/22 193.164.20.0/22 194.4.156.0/22 212.132.192.0/18 213.32.248.0/22 IPv6: 2a02:6b60::/28 2a03:3820::/32 Signature Algorithm: sha256WithRSAEncryption 67:a3:22:79:1a:2a:7e:89:0e:83:71:14:12:63:3a:54:02:2f: 31:4d:08:a0:da:70:26:1a:34:79:58:e2:d0:57:96:07:0d:f4: 3c:d4:73:f4:40:95:33:7b:21:b3:7d:03:52:2e:fa:41:17:72: df:69:2b:ee:b9:e3:88:88:70:3e:6b:b3:02:a2:a1:ea:fe:ed: 73:7e:4c:e6:4c:1c:4d:f1:c4:3d:ff:87:c3:7d:5e:0d:1e:14: 58:0a:01:56:f2:f6:e9:5f:50:85:da:88:93:35:c9:71:1f:68: 08:03:ff:15:3a:83:3c:c6:d0:d3:3f:56:3b:0a:66:ff:4d:f2: f6:c7:f4:28:84:5b:c7:e9:95:91:f8:5e:e9:68:89:8d:7b:8b: ca:6e:1a:15:58:a8:f4:a2:87:a1:0f:68:f2:a2:f5:0b:cc:7d: b3:d0:dd:64:7e:61:5b:5f:98:b2:1a:71:1c:18:9f:79:8a:c2: a3:a7:3a:8a:8f:5e:6a:c7:84:c0:bc:46:59:5e:97:cd:ac:12: 89:1c:d8:03:38:1f:ee:95:70:66:00:0e:9b:54:97:c2:c4:58: e2:a7:72:1b:b1:fb:2a:0f:a4:08:83:33:6e:30:d4:f3:b9:d4: 54:48:cb:d1:3e:54:84:07:da:dc:1c:be:4f:29:97:72:4e:24: 3b:63:5a:fd -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgISAZt+N2IKTSLdNU6RelX54ssEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZGYzNzlmYWFmMjEwYTcwMzZkYWMwNWRlNmI1NzcyZGJl NGRkNmMwHhcNMjYwMTAyMTAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWY3M2MwMmFjNTQ0MjkxZTIzZjk5N2YzNzBiNzY0NzE5NTFkZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6k3ralunKWXfDR0VA7tz/CDnYU9 nfOl0ycApQBy3drxohEyItFd8RAfeYCOhxU8wPrWrzzY3iyNP9qg8C/oBmN9lNlP QP+m+i83Wriu4pkg8jN8sqXBSSoBkSpSAbgn/+4++q92EHt4foxclXB9lHVnIBoC 1jY+60BZC4LOBiAeNLJbzB9/PuxtwvEBRnMjKtvpygs+CqFGUZmoqH6282/sBenT RnqO0lF0MVOCEJERlv0SEFXr7H4rrgUurhltzJm7m9gGAzGEpATuyDIpZgSz9Vlj ZC2S4koQXD/cHFTKiwDomJue3qQJXm4Xr4vKsBwoVvUp7JNM6A3yx7bYtwIDAQAB o4IEFzCCBBMwHQYDVR0OBBYEFHH3PAKsVEKR4j+ZfzcLdkcZUd9RMB8GA1UdIwQY MBaAFGXfN5+q8hCnA22sBd5rV3Lb5N1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9lZDUxZWMtNzhlNi00ZmYwLWJhNTgt MDc2Yzg4Yjg4MDJmLzEvY2ZjOEFxeFVRcEhpUDVsX053dDJSeGxSMzFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9lZDUxZWMtNzhlNi00ZmYwLWJhNTgtMDc2Yzg4Yjg4MDJm LzEvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICKwYIKwYBBQUHAQcBAf8EggIaMIICFjCCAfwEAgABMIIB 9AMEAi0MrAMEAi1RSAMEAi1WCAMEAi1ZVAMEAi1ZnAMEAi1arAMEAi1bcAMEAi1d rAMEAi1ePAMEAi1esAMEAi1f+AMEAi11iAMEAi2AIAMEAi2AiAMEAy2EiAMEAi2F WAMEAi2N7AMEAi2QOAMEAi2QoAMEAi2SCAMEAi2SPAMEAi2UDAMEAi2UOAMEAi2U /AMEAi2VSAMEAi2V3AMEAi2WkAMEAi2YBAMEAi2Z3AMEAi2fWAMEAi2fmAMEAi34 kAMEAS5mqgMEAj6FMAMEAj7FhAMEAk1LPDAMAwQAT6uZAwQFT6uAAwQCUEw4AwQE WSRwAwQDWSvQAwQEWS2wAwQEWd4QAwQAW9FWAwQBXXEaAwQBXrDQAwQBXrGKAwQB XvdWAwQCX9a4AwQCX9bkAwQCZwfMAwQCZ80YAwQCgv8QAwQCgv8cAwQHkwyAAwQC qxZoAwQCsu/AAwQCsu/IAwQDsv9YAwQCuTt8AwQCuUckAwQCuWdIAwQCuW+sAwQC uXOQAwQCuXnkAwQCueVoAwQCueb4AwQCuew8AwQCue08AwQCue7cAwQCufDEAwQC ufGkAwQCufXsAwQBvNR6AwQBvNcQAwQBvNdKAwQBvPFqAwQDwKbQAwQCwSo0AwQC waQUAwQCwgScAwQG1ITAAwQC1SD4MBQEAgACMA4DBQQqAmtgAwUAKgM4IDANBgkq hkiG9w0BAQsFAAOCAQEAZ6MieRoqfokOg3EUEmM6VAIvMU0IoNpwJho0eVji0FeW Bw30PNRz9ECVM3shs30DUi76QRdy32kr7rnjiIhwPmuzAqKh6v7tc35M5kwcTfHE Pf+Hw31eDR4UWAoBVvL26V9QhdqIkzXJcR9oCAP/FTqDPMbQ0z9WOwpm/03y9sf0 KIRbx+mVkfhe6WiJjXuLym4aFVio9KKHoQ9o8qL1C8x9s9DdZH5hW1+YshpxHBif eYrCo6c6io9easeEwLxGWV6XzawSiRzYAzgf7pVwZgAOm1SXwsRY4qdyG7H7Kg+k CIMzbjDU87nUVEjL0T5UhAfa3By+TymXck4kO2Na/Q== -----END CERTIFICATE-----Generated at Sun Jan 25 17:39:57 2026 by rpki-client