This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/9FK8AiK80G_7KFI6X10HnQFqglk.roa File: 9FK8AiK80G_7KFI6X10HnQFqglk.roa (raw, json) Hash identifier: lpiusd7gwKuCMv6bONvOxtgK+offHNiYddyAB+ChmB0= Subject key identifier: F4:52:BC:02:22:BC:D0:6F:FB:28:52:3A:5F:5D:07:9D:01:6A:82:59 Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E38FEBDA07B87D9C40ED3300372582D Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/9FK8AiK80G_7KFI6X10HnQFqglk.roa Signing time: Fri 02 Jan 2026 10:20:22 +0000 ROA not before: Fri 02 Jan 2026 10:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3267 IP address blocks: 80.250.160.0/19 maxlen: 24 82.137.128.0/18 maxlen: 24 82.137.176.0/20 maxlen: 22 82.179.32.0/20 maxlen: 24 82.179.63.0/24 maxlen: 24 82.179.64.0/19 maxlen: 24 82.179.140.0/23 maxlen: 23 82.179.160.0/20 maxlen: 24 82.179.192.0/19 maxlen: 24 83.149.192.0/18 maxlen: 24 85.142.8.0/21 maxlen: 21 85.142.16.0/20 maxlen: 24 85.142.32.0/21 maxlen: 24 85.142.52.0/22 maxlen: 24 85.142.56.0/22 maxlen: 24 85.142.102.0/23 maxlen: 24 85.142.104.0/21 maxlen: 24 85.142.116.0/22 maxlen: 24 85.142.120.0/21 maxlen: 24 85.142.148.0/23 maxlen: 24 85.142.153.0/24 maxlen: 24 85.142.162.0/23 maxlen: 24 85.143.0.0/20 maxlen: 24 85.143.18.0/23 maxlen: 24 85.143.26.0/24 maxlen: 24 85.143.96.0/22 maxlen: 24 85.143.112.0/22 maxlen: 24 85.143.124.0/22 maxlen: 24 85.143.224.0/21 maxlen: 21 85.143.239.0/24 maxlen: 24 86.110.96.0/24 maxlen: 24 86.110.101.0/24 maxlen: 24 86.110.102.0/23 maxlen: 24 86.110.118.0/24 maxlen: 24 185.71.96.0/22 maxlen: 22 185.141.124.0/22 maxlen: 22 188.93.107.0/24 maxlen: 24 193.27.214.0/23 maxlen: 24 194.85.32.0/20 maxlen: 20 194.85.168.0/23 maxlen: 23 194.85.174.0/23 maxlen: 23 194.149.64.0/24 maxlen: 24 194.149.70.0/23 maxlen: 24 194.190.232.0/21 maxlen: 24 194.190.240.0/23 maxlen: 24 194.190.247.0/24 maxlen: 24 194.190.249.0/24 maxlen: 24 194.190.254.0/23 maxlen: 23 194.226.192.0/19 maxlen: 24 195.209.224.0/22 maxlen: 22 195.209.234.0/24 maxlen: 24 195.209.236.0/23 maxlen: 23 195.209.240.0/22 maxlen: 22 2001:b08:22::/48 maxlen: 48 2001:b08:26::/48 maxlen: 48 2a00:db8::/32 maxlen: 48 2a07:a6c0::/29 maxlen: 29 2a07:a6c4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:fe:bd:a0:7b:87:d9:c4:0e:d3:30:03:72:58:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f452bc0222bcd06ffb28523a5f5d079d016a8259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:49:4d:56:71:b9:00:5f:ef:86:ab:94:25:9e: 8e:03:aa:71:e5:c2:b3:89:aa:68:6c:e4:64:fd:15: 99:42:07:df:59:c1:b8:3f:f7:b4:ed:44:27:da:07: 6c:52:37:80:31:65:ef:4d:b1:fd:32:2b:8e:c6:f9: 32:ed:51:c5:d8:1d:ab:1c:0f:a1:ec:ee:9d:3a:c1: 07:e5:b8:04:19:b5:90:ac:a8:c5:43:f0:6a:da:98: ef:56:91:cb:9f:c1:e9:27:4c:23:c5:3e:24:3d:e0: 1b:82:cb:00:3c:89:95:b6:71:cf:ff:49:1e:87:c0: 5b:95:1f:8e:84:61:d8:3c:6e:0d:5a:fa:81:21:c7: d8:93:f1:72:ee:0e:6f:51:18:d9:ac:16:af:4e:79: 04:4e:eb:c6:c8:4a:8f:86:97:cd:c8:4d:ed:ab:3a: 4e:67:59:5a:27:18:58:75:71:c1:4a:10:f5:bc:2f: 83:b8:5a:0f:5f:47:cf:ca:7a:a6:fe:10:9b:df:95: bb:d9:ae:12:cb:4e:8b:45:a9:72:4f:88:c2:d2:32: 8e:ad:f8:bc:7f:20:0a:e5:95:9d:79:cb:06:68:d0: 01:41:6d:51:de:60:9e:7b:8d:1a:ac:b9:c0:3a:3b: 41:b0:c2:9e:0a:47:c0:93:f1:66:4f:80:2d:e5:d8: 4d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:52:BC:02:22:BC:D0:6F:FB:28:52:3A:5F:5D:07:9D:01:6A:82:59 X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/9FK8AiK80G_7KFI6X10HnQFqglk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.250.160.0/19 82.137.128.0/18 82.179.32.0/20 82.179.63.0-82.179.95.255 82.179.140.0/23 82.179.160.0/20 82.179.192.0/19 83.149.192.0/18 85.142.8.0-85.142.39.255 85.142.52.0-85.142.59.255 85.142.102.0-85.142.111.255 85.142.116.0-85.142.127.255 85.142.148.0/23 85.142.153.0/24 85.142.162.0/23 85.143.0.0/20 85.143.18.0/23 85.143.26.0/24 85.143.96.0/22 85.143.112.0/22 85.143.124.0/22 85.143.224.0/21 85.143.239.0/24 86.110.96.0/24 86.110.101.0-86.110.103.255 86.110.118.0/24 185.71.96.0/22 185.141.124.0/22 188.93.107.0/24 193.27.214.0/23 194.85.32.0/20 194.85.168.0/23 194.85.174.0/23 194.149.64.0/24 194.149.70.0/23 194.190.232.0-194.190.241.255 194.190.247.0/24 194.190.249.0/24 194.190.254.0/23 194.226.192.0/19 195.209.224.0/22 195.209.234.0/24 195.209.236.0/23 195.209.240.0/22 IPv6: 2001:b08:22::/48 2001:b08:26::/48 2a00:db8::/32 2a07:a6c0::/29 Signature Algorithm: sha256WithRSAEncryption 67:88:a9:ab:d5:63:23:59:1a:27:bd:e0:24:b9:ed:0e:bf:bb: b5:37:28:38:dc:90:99:29:e5:75:30:98:6a:59:b6:d0:31:7b: e2:66:e8:91:4d:80:f3:95:0a:55:da:64:8a:9b:41:74:5f:76: e2:ba:ad:f5:52:14:fd:80:c0:87:74:02:b2:50:9b:7d:f7:6a: 31:f5:eb:ac:38:d5:a9:23:a9:8f:8b:41:09:07:72:ce:ee:43: 6c:e6:7e:2f:33:59:8d:92:0e:f6:3e:11:53:ba:cd:e0:9b:f1: 31:6b:8b:a4:96:70:bf:c3:33:4a:0b:a3:26:4c:3c:cf:10:6d: 60:2d:a1:4a:38:a2:d3:89:c2:37:93:ea:ef:84:4d:64:d8:6a: 20:69:a6:ab:34:0d:06:06:2d:b9:c3:1a:b5:22:cc:e5:ac:20: 16:40:68:4e:4a:f1:7e:27:4a:81:bd:88:a4:fd:38:bc:0d:fe: d2:a8:eb:01:26:44:71:9b:44:60:cb:c4:85:80:7b:db:9c:d1: e5:3c:3f:cb:a0:58:34:7a:ce:62:68:95:eb:0d:6a:c6:8b:73: 46:39:e2:31:a0:70:0e:d8:b8:5b:bc:60:54:e4:3a:9a:e1:64: 18:ce:13:a3:cb:5f:4a:1b:c1:01:09:5a:31:64:26:ca:44:f1: bc:a8:da:bd -----BEGIN CERTIFICATE----- MIIGaTCCBVGgAwIBAgISAZt+OP69oHuH2cQO0zADclgtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDUyYmMwMjIyYmNkMDZmZmIyODUyM2E1ZjVkMDc5ZDAxNmE4MjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0lNVnG5AF/vhquUJZ6OA6px5cKz iapobORk/RWZQgffWcG4P/e07UQn2gdsUjeAMWXvTbH9MiuOxvky7VHF2B2rHA+h 7O6dOsEH5bgEGbWQrKjFQ/Bq2pjvVpHLn8HpJ0wjxT4kPeAbgssAPImVtnHP/0ke h8BblR+OhGHYPG4NWvqBIcfYk/Fy7g5vURjZrBavTnkETuvGyEqPhpfNyE3tqzpO Z1laJxhYdXHBShD1vC+DuFoPX0fPynqm/hCb35W72a4Sy06LRalyT4jC0jKOrfi8 fyAK5ZWdecsGaNABQW1R3mCee40arLnAOjtBsMKeCkfAk/FmT4At5dhNTQIDAQAB o4IDdTCCA3EwHQYDVR0OBBYEFPRSvAIivNBv+yhSOl9dB50BaoJZMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvOUZLOEFpSzgwR183S0ZJNlgxMEhuUUZxZ2xrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBiQYIKwYBBQUHAQcBAf8EggF4MIIBdDCCAUgEAgABMIIB QAMEBVD6oAMEBlKJgAMEBFKzIDAMAwQAUrM/AwQFUrNAAwQBUrOMAwQEUrOgAwQF UrPAAwQGU5XAMAwDBANVjggDBANVjiAwDAMEAlWONAMEAlWOODAMAwQBVY5mAwQE VY5gMAwDBAJVjnQDBAdVjgADBAFVjpQDBABVjpkDBAFVjqIDBARVjwADBAFVjxID BABVjxoDBAJVj2ADBAJVj3ADBAJVj3wDBANVj+ADBABVj+8DBABWbmAwDAMEAFZu ZQMEA1ZuYAMEAFZudgMEArlHYAMEArmNfAMEALxdawMEAcEb1gMEBMJVIAMEAcJV qAMEAcJVrgMEAMKVQAMEAcKVRjAMAwQDwr7oAwQBwr7wAwQAwr73AwQAwr75AwQB wr7+AwQFwuLAAwQCw9HgAwQAw9HqAwQBw9HsAwQCw9HwMCYEAgACMCADBwAgAQsI ACIDBwAgAQsIACYDBQAqAA24AwUDKgemwDANBgkqhkiG9w0BAQsFAAOCAQEAZ4ip q9VjI1kaJ73gJLntDr+7tTcoONyQmSnldTCYalm20DF74mbokU2A85UKVdpkiptB dF924rqt9VIU/YDAh3QCslCbffdqMfXrrDjVqSOpj4tBCQdyzu5DbOZ+LzNZjZIO 9j4RU7rN4JvxMWuLpJZwv8MzSgujJkw8zxBtYC2hSjii04nCN5Pq74RNZNhqIGmm qzQNBgYtucMatSLM5awgFkBoTkrxfidKgb2IpP04vA3+0qjrASZEcZtEYMvEhYB7 25zR5Tw/y6BYNHrOYmiV6w1qxotzRjniMaBwDti4W7xgVOQ6muFkGM4To8tfShvB AQlaMWQmykTxvKjavQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:48 2026 by rpki-client