This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/X8URGrQy5lQVgKZucRbyZdlIJ0A.roa File: X8URGrQy5lQVgKZucRbyZdlIJ0A.roa (raw, json) Hash identifier: v3GGPEKUSmn7q4SXBMTsOj2RRQGTLoKv6ZyqiXOL8do= Subject key identifier: 5F:C5:11:1A:B4:32:E6:54:15:80:A6:6E:71:16:F2:65:D9:48:27:40 Certificate issuer: /CN=547841eeff20c78b33d411dae51a692adb892e31 Certificate serial: 019B7DCB09B6245FB5DFEB833505AEE40D2A Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/X8URGrQy5lQVgKZucRbyZdlIJ0A.roa Signing time: Fri 02 Jan 2026 08:20:16 +0000 ROA not before: Fri 02 Jan 2026 08:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34977 IP address blocks: 37.61.144.0/20 maxlen: 20 37.61.144.0/23 maxlen: 23 37.61.146.0/23 maxlen: 23 37.61.155.0/24 maxlen: 24 37.61.159.0/24 maxlen: 24 46.37.64.0/19 maxlen: 19 46.37.69.0/24 maxlen: 24 46.37.70.0/23 maxlen: 23 46.37.76.0/23 maxlen: 23 46.37.78.0/23 maxlen: 23 46.37.80.0/24 maxlen: 24 46.37.81.0/24 maxlen: 24 46.37.84.0/24 maxlen: 24 46.37.92.0/23 maxlen: 23 46.37.94.0/24 maxlen: 24 86.106.0.0/21 maxlen: 21 86.106.64.0/21 maxlen: 21 88.212.188.0/24 maxlen: 24 88.212.190.0/24 maxlen: 24 89.32.112.0/21 maxlen: 21 89.32.118.0/24 maxlen: 24 89.35.136.0/21 maxlen: 21 89.35.137.0/24 maxlen: 24 89.35.138.0/23 maxlen: 23 89.35.140.0/23 maxlen: 23 89.35.142.0/23 maxlen: 23 89.36.0.0/23 maxlen: 23 89.36.2.0/23 maxlen: 23 89.36.4.0/23 maxlen: 23 89.36.6.0/24 maxlen: 24 89.36.7.0/24 maxlen: 24 89.37.72.0/21 maxlen: 21 89.37.72.0/24 maxlen: 24 89.37.73.0/24 maxlen: 24 89.37.74.0/24 maxlen: 24 89.38.16.0/21 maxlen: 21 89.38.16.0/24 maxlen: 24 89.38.17.0/24 maxlen: 24 89.38.18.0/24 maxlen: 24 89.38.19.0/24 maxlen: 24 89.38.20.0/24 maxlen: 24 89.38.21.0/24 maxlen: 24 89.38.22.0/24 maxlen: 24 89.38.23.0/24 maxlen: 24 89.39.16.0/21 maxlen: 21 89.39.22.0/24 maxlen: 24 89.39.24.0/21 maxlen: 21 89.39.25.0/24 maxlen: 24 89.39.26.0/24 maxlen: 24 89.39.27.0/24 maxlen: 24 89.39.28.0/24 maxlen: 24 89.39.29.0/24 maxlen: 24 89.39.31.0/24 maxlen: 24 89.39.152.0/21 maxlen: 21 89.39.156.0/24 maxlen: 24 89.39.158.0/23 maxlen: 23 91.151.96.0/20 maxlen: 20 91.151.96.0/24 maxlen: 24 91.151.97.0/24 maxlen: 24 91.151.99.0/24 maxlen: 24 91.151.105.0/24 maxlen: 24 91.151.108.0/24 maxlen: 24 91.151.109.0/24 maxlen: 24 91.151.110.0/24 maxlen: 24 91.151.111.0/24 maxlen: 24 93.114.144.0/20 maxlen: 20 93.114.144.0/24 maxlen: 24 93.114.146.0/24 maxlen: 24 93.114.147.0/24 maxlen: 24 93.114.148.0/24 maxlen: 24 93.114.149.0/24 maxlen: 24 93.114.153.0/24 maxlen: 24 93.114.154.0/24 maxlen: 24 93.114.156.0/24 maxlen: 24 93.114.157.0/24 maxlen: 24 93.114.158.0/24 maxlen: 24 171.33.232.0/21 maxlen: 21 185.13.200.0/22 maxlen: 22 185.13.203.0/24 maxlen: 24 195.82.100.0/22 maxlen: 22 195.82.100.0/24 maxlen: 24 195.82.101.0/24 maxlen: 24 195.82.102.0/24 maxlen: 24 195.82.112.0/21 maxlen: 21 195.82.113.0/24 maxlen: 24 195.82.126.0/23 maxlen: 23 195.82.126.0/24 maxlen: 24 212.225.128.0/17 maxlen: 17 212.225.128.0/23 maxlen: 23 212.225.130.0/23 maxlen: 23 212.225.132.0/24 maxlen: 24 212.225.133.0/24 maxlen: 24 212.225.134.0/23 maxlen: 23 212.225.137.0/24 maxlen: 24 212.225.138.0/23 maxlen: 23 212.225.142.0/23 maxlen: 23 212.225.144.0/24 maxlen: 24 212.225.145.0/24 maxlen: 24 212.225.146.0/24 maxlen: 24 212.225.148.0/22 maxlen: 22 212.225.152.0/24 maxlen: 24 212.225.156.0/22 maxlen: 22 212.225.162.0/24 maxlen: 24 212.225.163.0/24 maxlen: 24 212.225.164.0/22 maxlen: 22 212.225.168.0/22 maxlen: 22 212.225.172.0/23 maxlen: 23 212.225.174.0/23 maxlen: 23 212.225.176.0/24 maxlen: 24 212.225.178.0/23 maxlen: 23 212.225.180.0/23 maxlen: 23 212.225.182.0/23 maxlen: 23 212.225.184.0/24 maxlen: 24 212.225.185.0/24 maxlen: 24 212.225.186.0/24 maxlen: 24 212.225.187.0/24 maxlen: 24 212.225.188.0/24 maxlen: 24 212.225.189.0/24 maxlen: 24 212.225.190.0/24 maxlen: 24 212.225.191.0/24 maxlen: 24 212.225.196.0/24 maxlen: 24 212.225.197.0/24 maxlen: 24 212.225.198.0/24 maxlen: 24 212.225.199.0/24 maxlen: 24 212.225.200.0/22 maxlen: 22 212.225.204.0/24 maxlen: 24 212.225.208.0/23 maxlen: 23 212.225.215.0/24 maxlen: 24 212.225.216.0/23 maxlen: 23 212.225.218.0/24 maxlen: 24 212.225.219.0/24 maxlen: 24 212.225.220.0/24 maxlen: 24 212.225.221.0/24 maxlen: 24 212.225.222.0/24 maxlen: 24 212.225.234.0/24 maxlen: 24 212.225.236.0/24 maxlen: 24 212.225.240.0/23 maxlen: 23 212.225.246.0/24 maxlen: 24 212.225.248.0/24 maxlen: 24 212.225.250.0/24 maxlen: 24 212.225.252.0/24 maxlen: 24 212.225.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:09:b6:24:5f:b5:df:eb:83:35:05:ae:e4:0d:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31 Validity Not Before: Jan 2 08:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fc5111ab432e6541580a66e7116f265d9482740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c2:ee:5f:7e:fb:fa:0d:1d:69:fb:81:d4:8b: 97:4c:53:70:eb:35:27:b0:7e:3e:b1:9a:b0:fc:1b: 33:37:88:55:08:25:43:cc:6e:3c:90:93:47:55:62: 84:54:7f:a2:d7:0e:80:8e:c9:7c:64:a7:57:ad:bf: 55:fe:0d:41:0d:fe:ef:6e:ad:e4:2b:93:ec:9a:ec: e6:d1:32:ea:18:69:7d:e5:81:0d:07:07:5d:1f:cc: af:16:33:f1:0d:17:0b:b7:9c:d8:11:bb:2f:3f:1c: 01:5e:d6:36:4c:bf:f4:b6:54:c7:f6:a9:38:1e:c6: 46:2e:dc:aa:ca:23:78:58:7f:04:70:a0:ee:e2:98: 02:db:73:3a:cb:1a:ce:4c:3e:15:45:09:bc:02:d2: f7:3e:35:72:1a:6c:0e:a2:21:17:03:2c:71:d6:70: 5a:e2:27:2a:5d:88:46:4f:74:00:88:6a:c4:55:18: 4a:e2:d6:c8:a1:5d:e9:ed:1f:7b:4d:67:16:cf:b4: fa:0c:b5:87:6f:08:22:ed:33:70:26:e1:8d:c7:06: 1a:ce:2d:a1:05:c8:8e:b0:c6:d5:81:1a:77:5b:a2: bf:f5:a8:ce:39:b7:5b:73:41:de:f1:0a:da:70:13: 1d:22:37:ba:01:15:6d:a5:bc:24:d3:b4:57:4a:f8: ce:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C5:11:1A:B4:32:E6:54:15:80:A6:6E:71:16:F2:65:D9:48:27:40 X509v3 Authority Key Identifier: keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/X8URGrQy5lQVgKZucRbyZdlIJ0A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.61.144.0/20 46.37.64.0/19 86.106.0.0/21 86.106.64.0/21 88.212.188.0/24 88.212.190.0/24 89.32.112.0/21 89.35.136.0/21 89.36.0.0/21 89.37.72.0/21 89.38.16.0/21 89.39.16.0/20 89.39.152.0/21 91.151.96.0/20 93.114.144.0/20 171.33.232.0/21 185.13.200.0/22 195.82.100.0/22 195.82.112.0/21 195.82.126.0/23 212.225.128.0/17 Signature Algorithm: sha256WithRSAEncryption af:31:fe:cc:c8:f4:07:58:47:92:a5:3c:9c:2e:bf:08:50:09: 1e:8f:3b:51:11:02:3e:c7:61:dc:10:28:61:cc:b8:a2:3a:34: 2e:fd:11:1a:c6:fb:97:96:7c:50:5a:f4:b1:32:44:a3:40:f9: a8:f5:6c:58:35:21:69:6c:30:fb:33:38:f1:4d:67:6b:36:37: 34:e1:8d:1c:89:1b:38:96:6f:0a:c1:2a:f4:84:9e:cf:4a:ee: f6:17:07:c4:3c:f9:5d:27:cc:19:fe:d1:9a:81:69:5d:47:d3: 6e:d8:75:82:c8:0a:cb:27:b3:54:8c:95:75:c0:20:3f:5d:7a: 81:7b:31:0b:f0:41:d6:c5:d4:58:04:09:ad:d8:8c:aa:97:a1: f4:4a:d1:78:12:39:f1:70:ec:44:18:8d:e4:68:d7:9e:44:ea: dd:79:42:be:98:a0:bf:31:75:d7:b8:40:9b:6c:65:ac:3d:ad: 42:b7:93:81:16:a9:e5:03:83:78:ac:34:47:e2:94:59:b5:5d: b0:a4:03:d9:88:62:ae:6e:e8:9f:6c:4f:95:cb:29:0b:30:d1: 8b:71:cb:8c:05:07:4b:4c:24:eb:9a:d7:c9:c5:75:16:26:b8: c9:bf:06:e0:ab:02:71:0d:82:17:7f:93:1a:a5:be:44:e0:9c: c5:70:9e:db -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt9ywm2JF+13+uDNQWu5A0qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Nzg0MWVlZmYyMGM3OGIzM2Q0MTFkYWU1MWE2OTJhZGI4 OTJlMzEwHhcNMjYwMTAyMDgyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmM1MTExYWI0MzJlNjU0MTU4MGE2NmU3MTE2ZjI2NWQ5NDgyNzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMLuX377+g0dafuB1IuXTFNw6zUn sH4+sZqw/BszN4hVCCVDzG48kJNHVWKEVH+i1w6Ajsl8ZKdXrb9V/g1BDf7vbq3k K5Psmuzm0TLqGGl95YENBwddH8yvFjPxDRcLt5zYEbsvPxwBXtY2TL/0tlTH9qk4 HsZGLtyqyiN4WH8EcKDu4pgC23M6yxrOTD4VRQm8AtL3PjVyGmwOoiEXAyxx1nBa 4icqXYhGT3QAiGrEVRhK4tbIoV3p7R97TWcWz7T6DLWHbwgi7TNwJuGNxwYazi2h BciOsMbVgRp3W6K/9ajOObdbc0He8QracBMdIje6ARVtpbwk07RXSvjOgQIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFF/FERq0MuZUFYCmbnEW8mXZSCdAMB8GA1UdIwQY MBaAFFR4Qe7/IMeLM9QR2uUaaSrbiS4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmIt MzY2YmExNzAwZmUwLzEvWDhVUkdyUXk1bFFWZ0tadWNSYnlaZGxJSjBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmItMzY2YmExNzAwZmUw LzEvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEBCU9 kAMEBS4lQAMEA1ZqAAMEA1ZqQAMEAFjUvAMEAFjUvgMEA1kgcAMEA1kjiAMEA1kk AAMEA1klSAMEA1kmEAMEBFknEAMEA1knmAMEBFuXYAMEBF1ykAMEA6sh6AMEArkN yAMEAsNSZAMEA8NScAMEAcNSfgMEB9ThgDANBgkqhkiG9w0BAQsFAAOCAQEArzH+ zMj0B1hHkqU8nC6/CFAJHo87URECPsdh3BAoYcy4ojo0Lv0RGsb7l5Z8UFr0sTJE o0D5qPVsWDUhaWww+zM48U1nazY3NOGNHIkbOJZvCsEq9ISez0ru9hcHxDz5XSfM Gf7RmoFpXUfTbth1gsgKyyezVIyVdcAgP116gXsxC/BB1sXUWAQJrdiMqpeh9ErR eBI58XDsRBiN5GjXnkTq3XlCvpigvzF117hAm2xlrD2tQreTgRap5QODeKw0R+KU WbVdsKQD2Yhirm7on2xPlcspCzDRi3HLjAUHS0wk65rXycV1Fia4yb8G4KsCcQ2C F3+TGqW+ROCcxXCe2w== -----END CERTIFICATE-----Generated at Sun Jan 25 21:28:42 2026 by rpki-client