This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/PeEFQwQ5ZTGfAlmuxStE8RYaNlI.roa File: PeEFQwQ5ZTGfAlmuxStE8RYaNlI.roa (raw, json) Hash identifier: nxjeQvbubuTPT5s/GIj75wHTH0QeD7YlcIOg+93/NXo= Subject key identifier: 3D:E1:05:43:04:39:65:31:9F:02:59:AE:C5:2B:44:F1:16:1A:36:52 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA52903A6375C82EDAB4BD4B5647C08 Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/PeEFQwQ5ZTGfAlmuxStE8RYaNlI.roa Signing time: Thu 01 Jan 2026 22:19:40 +0000 ROA not before: Thu 01 Jan 2026 22:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8866 IP address blocks: 37.157.136.0/21 maxlen: 24 37.157.160.0/19 maxlen: 24 46.10.0.0/16 maxlen: 24 46.10.128.0/19 maxlen: 19 46.10.166.0/23 maxlen: 24 46.10.193.0/24 maxlen: 24 46.249.64.0/19 maxlen: 24 62.73.64.0/18 maxlen: 24 62.176.64.0/19 maxlen: 24 62.176.96.0/19 maxlen: 24 62.176.96.0/23 maxlen: 24 62.176.117.0/24 maxlen: 24 62.176.124.54/32 maxlen: 32 77.78.0.0/18 maxlen: 24 77.85.0.0/16 maxlen: 24 77.85.128.0/19 maxlen: 24 77.85.160.0/21 maxlen: 24 77.85.168.0/22 maxlen: 24 77.85.172.0/23 maxlen: 24 77.85.174.0/24 maxlen: 24 77.85.176.0/20 maxlen: 24 77.85.196.0/24 maxlen: 24 77.85.198.0/24 maxlen: 24 78.154.0.0/19 maxlen: 24 79.100.0.0/16 maxlen: 24 82.137.64.0/18 maxlen: 24 82.146.0.0/22 maxlen: 24 82.146.6.0/23 maxlen: 24 82.146.11.0/24 maxlen: 24 82.146.24.0/23 maxlen: 24 82.146.28.0/23 maxlen: 24 82.146.31.0/24 maxlen: 24 83.148.64.0/18 maxlen: 24 83.228.0.0/17 maxlen: 32 83.228.61.0/24 maxlen: 24 84.40.64.0/18 maxlen: 24 84.40.89.0/24 maxlen: 24 84.238.128.0/22 maxlen: 24 84.238.134.0/23 maxlen: 24 84.238.136.0/22 maxlen: 24 84.238.140.0/23 maxlen: 24 84.238.142.0/23 maxlen: 24 84.238.144.0/21 maxlen: 24 84.238.152.0/22 maxlen: 24 84.238.156.0/22 maxlen: 24 84.238.165.0/24 maxlen: 24 84.238.167.0/24 maxlen: 24 84.238.168.0/21 maxlen: 24 84.238.178.0/23 maxlen: 24 84.238.180.0/22 maxlen: 24 84.238.192.0/22 maxlen: 24 84.238.204.0/22 maxlen: 24 85.187.22.0/23 maxlen: 24 85.187.24.0/21 maxlen: 24 85.187.32.0/21 maxlen: 24 85.187.46.0/23 maxlen: 24 85.187.64.0/18 maxlen: 24 87.116.82.0/24 maxlen: 24 87.126.0.0/16 maxlen: 24 87.126.134.0/24 maxlen: 24 87.243.80.0/20 maxlen: 24 87.243.96.0/21 maxlen: 24 87.243.104.0/21 maxlen: 24 87.243.112.0/22 maxlen: 22 87.243.116.0/22 maxlen: 24 87.243.120.0/21 maxlen: 24 87.254.160.0/19 maxlen: 24 87.254.160.0/23 maxlen: 24 87.254.162.0/23 maxlen: 24 87.254.162.0/24 maxlen: 24 87.254.163.0/24 maxlen: 24 87.254.164.0/23 maxlen: 24 87.254.164.0/24 maxlen: 24 87.254.165.0/24 maxlen: 24 87.254.166.0/23 maxlen: 24 87.254.168.0/24 maxlen: 24 87.254.169.0/24 maxlen: 24 87.254.170.0/23 maxlen: 24 87.254.172.0/23 maxlen: 24 87.254.172.0/24 maxlen: 24 87.254.173.0/24 maxlen: 24 88.87.0.0/19 maxlen: 24 90.154.128.0/17 maxlen: 24 93.152.128.0/18 maxlen: 24 93.152.192.0/21 maxlen: 24 93.152.200.0/22 maxlen: 24 93.152.204.0/24 maxlen: 24 93.152.236.0/22 maxlen: 24 94.236.144.0/21 maxlen: 24 94.236.144.0/24 maxlen: 24 94.236.146.0/24 maxlen: 24 94.236.149.0/24 maxlen: 24 94.236.151.0/24 maxlen: 24 94.236.152.0/21 maxlen: 24 94.236.152.0/24 maxlen: 24 94.236.153.0/24 maxlen: 24 94.236.154.0/24 maxlen: 24 94.236.160.0/19 maxlen: 24 94.236.160.0/24 maxlen: 24 94.236.161.0/24 maxlen: 24 94.236.163.0/24 maxlen: 24 94.236.164.0/24 maxlen: 24 94.236.170.0/23 maxlen: 24 94.236.172.0/24 maxlen: 24 94.236.173.0/24 maxlen: 24 94.236.174.0/24 maxlen: 24 94.236.175.0/24 maxlen: 24 94.236.176.0/23 maxlen: 24 94.236.179.0/24 maxlen: 24 94.236.180.0/22 maxlen: 24 94.236.184.0/21 maxlen: 24 94.236.204.0/24 maxlen: 24 94.236.205.0/24 maxlen: 24 94.236.228.0/24 maxlen: 24 94.236.229.0/24 maxlen: 24 94.236.231.0/24 maxlen: 24 94.236.234.0/24 maxlen: 24 94.236.235.0/24 maxlen: 24 94.236.238.0/24 maxlen: 24 94.236.240.0/20 maxlen: 24 95.42.0.0/15 maxlen: 24 95.43.0.0/17 maxlen: 24 95.43.206.0/24 maxlen: 24 95.43.220.0/22 maxlen: 24 95.43.224.0/24 maxlen: 32 95.87.192.0/18 maxlen: 24 109.120.192.0/18 maxlen: 24 109.199.128.0/19 maxlen: 24 151.237.140.0/23 maxlen: 24 185.20.156.0/22 maxlen: 24 185.211.200.0/22 maxlen: 24 188.254.254.0/24 maxlen: 24 212.5.128.0/19 maxlen: 24 212.25.32.0/19 maxlen: 24 212.39.64.0/19 maxlen: 24 212.50.64.0/19 maxlen: 24 212.72.198.0/24 maxlen: 24 212.72.199.0/24 maxlen: 24 212.72.202.0/23 maxlen: 24 212.72.212.0/24 maxlen: 24 212.72.214.0/24 maxlen: 24 212.72.221.0/24 maxlen: 24 213.16.32.0/19 maxlen: 24 213.16.60.0/24 maxlen: 24 213.91.128.0/17 maxlen: 24 213.130.64.0/22 maxlen: 24 213.130.76.0/23 maxlen: 24 213.130.77.0/24 maxlen: 24 213.130.78.0/23 maxlen: 24 213.130.92.0/23 maxlen: 24 213.130.95.0/24 maxlen: 24 217.75.139.0/24 maxlen: 24 2a00:e40::/32 maxlen: 64 2a01:5a8::/32 maxlen: 128 2a01:5a8:1:ffff::/64 maxlen: 64 2a01:5a8:2:4::/64 maxlen: 64 2a01:5a8:2:5::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:29:03:a6:37:5c:82:ed:ab:4b:d4:b5:64:7c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3de10543043965319f0259aec52b44f1161a3652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c8:b2:b4:25:40:60:7f:86:cc:f6:69:fe:fb: 8c:72:bd:ab:33:2f:44:7d:04:c6:07:f5:a9:60:cc: 35:d7:11:53:b0:db:61:42:ac:37:ac:88:51:f6:97: 37:3b:c9:24:19:21:51:be:b7:31:ae:0c:16:38:80: 35:d4:62:49:58:dc:8f:d8:7b:21:03:8c:73:b9:d0: 2b:3f:41:a0:ce:41:9e:a3:96:90:37:10:cd:f7:72: 6a:8f:27:39:1b:a1:bd:e2:e1:71:c6:52:ff:ff:95: 1b:b1:ea:f9:90:2b:60:64:54:d3:8a:b0:e8:f9:d5: 2d:6b:5e:80:ff:95:a9:41:76:45:61:d7:fc:b2:4b: 00:14:4a:74:21:21:c5:d3:ae:14:d9:22:14:df:70: 19:7e:15:27:07:33:67:a4:44:11:20:fd:ed:bf:ff: 27:6c:56:73:5d:bc:a3:28:55:c8:25:6d:c4:b9:9b: 84:21:62:5f:47:da:8f:52:d7:8a:bd:19:05:99:96: cb:8c:97:80:51:d4:66:72:c7:e4:ed:ee:49:70:e4: 32:f0:86:69:6c:f7:15:24:ef:e3:67:af:03:ed:3d: 58:11:f2:18:95:4a:a9:f9:9d:76:1a:47:6e:2f:51: e4:60:82:fb:4d:d8:89:44:3e:a7:81:ca:37:b8:8d: 51:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E1:05:43:04:39:65:31:9F:02:59:AE:C5:2B:44:F1:16:1A:36:52 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/PeEFQwQ5ZTGfAlmuxStE8RYaNlI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.157.136.0/21 37.157.160.0/19 46.10.0.0/16 46.249.64.0/19 62.73.64.0/18 62.176.64.0/18 77.78.0.0/18 77.85.0.0/16 78.154.0.0/19 79.100.0.0/16 82.137.64.0/18 82.146.0.0/22 82.146.6.0/23 82.146.11.0/24 82.146.24.0/23 82.146.28.0/23 82.146.31.0/24 83.148.64.0/18 83.228.0.0/17 84.40.64.0/18 84.238.128.0/22 84.238.134.0-84.238.159.255 84.238.165.0/24 84.238.167.0-84.238.175.255 84.238.178.0-84.238.183.255 84.238.192.0/22 84.238.204.0/22 85.187.22.0-85.187.39.255 85.187.46.0/23 85.187.64.0/18 87.116.82.0/24 87.126.0.0/16 87.243.80.0-87.243.127.255 87.254.160.0/19 88.87.0.0/19 90.154.128.0/17 93.152.128.0-93.152.204.255 93.152.236.0/22 94.236.144.0-94.236.191.255 94.236.204.0/23 94.236.228.0/23 94.236.231.0/24 94.236.234.0/23 94.236.238.0/24 94.236.240.0/20 95.42.0.0/15 95.87.192.0/18 109.120.192.0/18 109.199.128.0/19 151.237.140.0/23 185.20.156.0/22 185.211.200.0/22 188.254.254.0/24 212.5.128.0/19 212.25.32.0/19 212.39.64.0/19 212.50.64.0/19 212.72.198.0/23 212.72.202.0/23 212.72.212.0/24 212.72.214.0/24 212.72.221.0/24 213.16.32.0/19 213.91.128.0/17 213.130.64.0/22 213.130.76.0/22 213.130.92.0/23 213.130.95.0/24 217.75.139.0/24 IPv6: 2a00:e40::/32 2a01:5a8::/32 Signature Algorithm: sha256WithRSAEncryption 3e:66:ef:e7:df:cb:cc:1f:60:3b:f7:d6:1a:46:e3:4d:f4:50: 72:1b:79:b7:ca:68:3b:a8:b0:47:d3:aa:8a:9d:60:95:72:6e: a8:04:c8:a3:e8:f4:bf:34:41:a9:90:14:33:56:a1:b7:0a:5a: 9b:00:03:91:47:dc:5c:a5:9d:08:4d:49:b6:59:05:c0:a2:9b: 48:e1:8c:1f:f2:fe:af:6f:75:76:1b:69:1a:60:b5:d8:c8:ae: 6a:4a:da:b6:d6:92:15:42:f4:b2:02:bc:a5:f4:48:e1:e4:8a: e2:4b:d7:64:15:fa:40:04:f5:66:85:24:ee:77:5b:94:58:4e: cd:cd:18:e9:55:3a:9a:ca:0f:4d:4f:ad:07:1f:58:57:db:36: 5d:57:94:9a:c2:88:e1:65:ad:32:54:37:16:bd:d5:81:fe:72: cb:4c:c5:19:bb:c1:21:c5:b9:98:95:47:e2:6e:2a:96:c3:8d: 59:50:07:4b:33:90:03:23:92:e2:7a:1b:05:30:42:96:35:6c: 72:e3:3c:ba:6d:c3:fd:6b:5d:6a:9f:f3:e2:e4:c0:62:8a:8b: d6:7e:89:95:6c:ad:79:e2:83:83:5b:6a:21:bf:1c:89:1a:2a: d1:89:96:9c:3e:0d:ec:6e:7d:24:73:52:2b:1b:f9:21:6a:98: 82:9d:3b:7d -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgISAZt7pSkDpjdcgu2rS9S1ZHwIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGUxMDU0MzA0Mzk2NTMxOWYwMjU5YWVjNTJiNDRmMTE2MWEzNjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3siytCVAYH+GzPZp/vuMcr2rMy9E fQTGB/WpYMw11xFTsNthQqw3rIhR9pc3O8kkGSFRvrcxrgwWOIA11GJJWNyP2Hsh A4xzudArP0GgzkGeo5aQNxDN93Jqjyc5G6G94uFxxlL//5Ubser5kCtgZFTTirDo +dUta16A/5WpQXZFYdf8sksAFEp0ISHF064U2SIU33AZfhUnBzNnpEQRIP3tv/8n bFZzXbyjKFXIJW3EuZuEIWJfR9qPUteKvRkFmZbLjJeAUdRmcsfk7e5JcOQy8IZp bPcVJO/jZ68D7T1YEfIYlUqp+Z12GkduL1HkYIL7TdiJRD6ngco3uI1RnQIDAQAB o4ID9DCCA/AwHQYDVR0OBBYEFD3hBUMEOWUxnwJZrsUrRPEWGjZSMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvUGVFRlF3UTVaVEdmQWxtdXhTdEU4UllhTmxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICCAYIKwYBBQUHAQcBAf8EggH3MIIB8zCCAdkEAgABMIIB 0QMEAyWdiAMEBSWdoAMDAC4KAwQFLvlAAwQGPklAAwQGPrBAAwQGTU4AAwMATVUD BAVOmgADAwBPZAMEBlKJQAMEAlKSAAMEAVKSBgMEAFKSCwMEAVKSGAMEAVKSHAME AFKSHwMEBlOUQAMEB1PkAAMEBlQoQAMEAlTugDAMAwQBVO6GAwQFVO6AAwQAVO6l MAwDBABU7qcDBARU7qAwDAMEAVTusgMEA1TusAMEAlTuwAMEAlTuzDAMAwQBVbsW AwQDVbsgAwQBVbsuAwQGVbtAAwQAV3RSAwMAV34wDAMEBFfzUAMEB1fzAAMEBVf+ oAMEBVhXAAMEB1qagDAMAwQHXZiAAwQAXZjMAwQCXZjsMAwDBARe7JADBAZe7IAD BAFe7MwDBAFe7OQDBABe7OcDBAFe7OoDBABe7O4DBARe7PADAwFfKgMEBl9XwAME Bm14wAMEBW3HgAMEAZftjAMEArkUnAMEArnTyAMEALz+/gMEBdQFgAMEBdQZIAME BdQnQAMEBdQyQAMEAdRIxgMEAdRIygMEANRI1AMEANRI1gMEANRI3QMEBdUQIAME B9VbgAMEAtWCQAMEAtWCTAMEAdWCXAMEANWCXwMEANlLizAUBAIAAjAOAwUAKgAO QAMFACoBBagwDQYJKoZIhvcNAQELBQADggEBAD5m7+ffy8wfYDv31hpG4030UHIb ebfKaDuosEfTqoqdYJVybqgEyKPo9L80QamQFDNWobcKWpsAA5FH3FylnQhNSbZZ BcCim0jhjB/y/q9vdXYbaRpgtdjIrmpK2rbWkhVC9LICvKX0SOHkiuJL12QV+kAE 9WaFJO53W5RYTs3NGOlVOprKD01PrQcfWFfbNl1XlJrCiOFlrTJUNxa91YH+cstM xRm7wSHFuZiVR+JuKpbDjVlQB0szkAMjkuJ6GwUwQpY1bHLjPLptw/1rXWqf8+Lk wGKKi9Z+iZVsrXnig4NbaiG/HIkaKtGJlpw+DexufSRzUisb+SFqmIKdO30= -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:04 2026 by rpki-client