This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/FwbhXP-8NmRciDVYWAM8EtmEeGQ.roa File: FwbhXP-8NmRciDVYWAM8EtmEeGQ.roa (raw, json) Hash identifier: uhNahwa7UM2PHvQnn2W5Ig6XYNN1X6M9iOv7kDjS3Os= Subject key identifier: 17:06:E1:5C:FF:BC:36:64:5C:88:35:58:58:03:3C:12:D9:84:78:64 Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019B797F307F2DC6E8E5B585714AA9B35347 Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/FwbhXP-8NmRciDVYWAM8EtmEeGQ.roa Signing time: Thu 01 Jan 2026 12:18:57 +0000 ROA not before: Thu 01 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8648 IP address blocks: 5.11.48.0/21 maxlen: 24 5.44.96.0/20 maxlen: 24 31.47.240.0/20 maxlen: 24 37.218.248.0/21 maxlen: 24 37.228.152.0/21 maxlen: 24 45.87.136.0/22 maxlen: 24 46.243.88.0/21 maxlen: 24 77.75.248.0/21 maxlen: 24 81.88.16.0/20 maxlen: 24 81.88.32.0/20 maxlen: 24 82.141.0.0/18 maxlen: 24 84.254.120.0/24 maxlen: 24 85.158.176.0/21 maxlen: 24 89.22.96.0/19 maxlen: 24 91.151.16.0/21 maxlen: 24 91.203.108.0/22 maxlen: 24 91.203.212.0/22 maxlen: 24 91.206.142.0/23 maxlen: 24 91.220.49.0/24 maxlen: 24 91.226.88.0/22 maxlen: 24 93.90.176.0/20 maxlen: 24 93.190.64.0/21 maxlen: 24 94.154.148.0/22 maxlen: 24 95.130.248.0/21 maxlen: 24 109.75.176.0/20 maxlen: 24 109.237.128.0/20 maxlen: 24 128.127.64.0/21 maxlen: 24 141.101.32.0/21 maxlen: 24 178.20.96.0/21 maxlen: 24 178.250.8.0/21 maxlen: 24 178.250.168.0/21 maxlen: 24 185.3.232.0/22 maxlen: 24 185.32.116.0/22 maxlen: 24 185.39.220.0/22 maxlen: 24 185.51.8.0/22 maxlen: 24 185.61.40.0/22 maxlen: 24 185.65.88.0/22 maxlen: 24 185.80.92.0/22 maxlen: 24 185.84.80.0/22 maxlen: 24 185.84.82.0/24 maxlen: 24 185.117.248.0/22 maxlen: 24 185.137.168.0/22 maxlen: 24 185.143.164.0/22 maxlen: 24 185.158.212.0/22 maxlen: 24 185.207.228.0/22 maxlen: 24 185.211.60.0/22 maxlen: 24 188.64.40.0/21 maxlen: 24 192.162.84.0/22 maxlen: 24 193.22.255.0/24 maxlen: 24 193.25.114.0/23 maxlen: 24 193.38.156.0/22 maxlen: 24 194.116.186.0/23 maxlen: 24 194.145.226.0/24 maxlen: 24 195.5.120.0/23 maxlen: 24 195.34.82.0/23 maxlen: 24 195.42.120.0/23 maxlen: 24 195.62.96.0/19 maxlen: 24 195.82.152.0/23 maxlen: 24 195.110.42.0/23 maxlen: 24 195.225.133.0/24 maxlen: 24 212.110.96.0/19 maxlen: 24 213.146.96.0/19 maxlen: 24 2001:880::/32 maxlen: 32 2a00:12c0::/29 maxlen: 48 2a00:5300::/32 maxlen: 48 2a00:fa40::/32 maxlen: 48 2a01:64c0::/32 maxlen: 48 2a01:aee0::/32 maxlen: 48 2a02:248::/32 maxlen: 48 2a02:248:101::/48 maxlen: 48 2a02:a60::/32 maxlen: 48 2a02:2b80::/32 maxlen: 48 2a04:4cc0::/29 maxlen: 48 2a04:ff40::/29 maxlen: 48 2a0b:2a40::/29 maxlen: 48 2a0b:6340::/29 maxlen: 48 2a0d:6940::/29 maxlen: 48 2a0e:fe80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:30:7f:2d:c6:e8:e5:b5:85:71:4a:a9:b3:53:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1706e15cffbc36645c88355858033c12d9847864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:93:9f:92:79:17:68:b3:c3:1d:ca:99:bf:5b: 3a:01:df:1c:62:05:18:aa:e7:39:75:ff:bc:c5:a9: ce:f0:19:f9:34:69:26:c1:7c:f3:23:26:4a:fd:59: 0c:00:31:09:f5:0b:f6:07:da:31:54:e3:0f:33:ed: 83:d8:9a:91:53:a2:d3:6a:94:22:10:2b:1b:43:10: ba:8c:ea:06:01:0d:89:f0:e9:88:31:59:e7:e1:9b: ac:cb:78:ea:32:2c:10:a7:34:25:70:ef:86:d1:86: f9:3a:f7:31:fb:f2:35:3a:5c:ff:cd:93:b4:33:36: 5d:52:c3:75:48:26:ef:bd:40:05:e7:1d:d5:b4:19: 4e:5f:fd:6f:88:f5:2c:ec:86:a9:72:c3:61:ec:8b: 55:89:32:83:86:7c:aa:06:36:bb:f3:a8:48:8b:43: a0:e3:bd:47:28:a7:21:2a:0f:77:3d:9c:d1:36:14: ad:b1:01:27:f0:c1:65:b3:c6:b1:32:ff:ad:73:34: 53:08:9e:dc:0a:cd:50:f7:db:6b:ab:09:74:3b:32: 7a:6b:ff:49:9f:a4:89:27:41:05:17:e6:88:f7:7e: 16:f6:5c:f9:3a:69:d3:59:fd:7e:bb:a1:c3:13:59: 99:d8:e2:69:24:59:3c:aa:44:18:19:bc:c1:52:1e: f9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:06:E1:5C:FF:BC:36:64:5C:88:35:58:58:03:3C:12:D9:84:78:64 X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/FwbhXP-8NmRciDVYWAM8EtmEeGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.11.48.0/21 5.44.96.0/20 31.47.240.0/20 37.218.248.0/21 37.228.152.0/21 45.87.136.0/22 46.243.88.0/21 77.75.248.0/21 81.88.16.0-81.88.47.255 82.141.0.0/18 84.254.120.0/24 85.158.176.0/21 89.22.96.0/19 91.151.16.0/21 91.203.108.0/22 91.203.212.0/22 91.206.142.0/23 91.220.49.0/24 91.226.88.0/22 93.90.176.0/20 93.190.64.0/21 94.154.148.0/22 95.130.248.0/21 109.75.176.0/20 109.237.128.0/20 128.127.64.0/21 141.101.32.0/21 178.20.96.0/21 178.250.8.0/21 178.250.168.0/21 185.3.232.0/22 185.32.116.0/22 185.39.220.0/22 185.51.8.0/22 185.61.40.0/22 185.65.88.0/22 185.80.92.0/22 185.84.80.0/22 185.117.248.0/22 185.137.168.0/22 185.143.164.0/22 185.158.212.0/22 185.207.228.0/22 185.211.60.0/22 188.64.40.0/21 192.162.84.0/22 193.22.255.0/24 193.25.114.0/23 193.38.156.0/22 194.116.186.0/23 194.145.226.0/24 195.5.120.0/23 195.34.82.0/23 195.42.120.0/23 195.62.96.0/19 195.82.152.0/23 195.110.42.0/23 195.225.133.0/24 212.110.96.0/19 213.146.96.0/19 IPv6: 2001:880::/32 2a00:12c0::/29 2a00:5300::/32 2a00:fa40::/32 2a01:64c0::/32 2a01:aee0::/32 2a02:248::/32 2a02:a60::/32 2a02:2b80::/32 2a04:4cc0::/29 2a04:ff40::/29 2a0b:2a40::/29 2a0b:6340::/29 2a0d:6940::/29 2a0e:fe80::/29 Signature Algorithm: sha256WithRSAEncryption 59:9e:e0:ba:f5:da:36:3d:b6:15:1c:82:6c:dc:bc:92:f6:a9: f3:4a:71:90:26:06:04:23:fb:77:07:7b:ec:8b:20:29:b0:30: ea:32:e9:3d:7a:89:59:11:62:8f:47:04:30:29:a9:d3:41:ef: 5b:3d:16:08:b4:6c:34:87:29:f8:fd:b9:a3:1a:92:c0:dc:c9: a2:ec:a2:7d:01:81:de:ce:ad:e0:d9:38:db:28:f2:6e:8e:26: e1:bc:66:cd:17:da:0d:8d:2d:1a:78:11:3d:a8:b5:f8:08:60: f1:86:04:46:4f:6a:4d:50:9c:bf:56:cd:61:bc:04:c0:8d:0a: fd:83:57:d1:48:7d:4d:30:63:c7:da:5d:10:29:f4:0f:b9:62: 12:36:11:c0:e5:0e:0e:b3:33:1c:b5:79:c3:49:6e:f9:6a:2d: 71:73:78:19:ea:3f:7f:97:33:cd:cb:91:3b:0f:35:6c:a6:fa: b0:03:53:98:41:95:4a:58:6a:a5:7e:a2:4c:f9:35:b5:5e:0f: bd:df:56:fa:26:0c:7c:2e:29:8d:4d:90:86:1f:ad:29:6f:5c: 4d:ba:35:a9:98:b3:cc:eb:60:51:2b:de:c5:ef:f0:d2:2b:d5: ad:ba:f5:72:68:14:83:c9:e2:26:3b:58:99:22:8a:4f:c5:9a: 90:17:c0:a7 -----BEGIN CERTIFICATE----- MIIG4jCCBcqgAwIBAgISAZt5fzB/Lcbo5bWFcUqps1NHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzA2ZTE1Y2ZmYmMzNjY0NWM4ODM1NTg1ODAzM2MxMmQ5ODQ3ODY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpOfknkXaLPDHcqZv1s6Ad8cYgUY quc5df+8xanO8Bn5NGkmwXzzIyZK/VkMADEJ9Qv2B9oxVOMPM+2D2JqRU6LTapQi ECsbQxC6jOoGAQ2J8OmIMVnn4Zusy3jqMiwQpzQlcO+G0Yb5Ovcx+/I1Olz/zZO0 MzZdUsN1SCbvvUAF5x3VtBlOX/1viPUs7IapcsNh7ItViTKDhnyqBja786hIi0Og 471HKKchKg93PZzRNhStsQEn8MFls8axMv+tczRTCJ7cCs1Q99trqwl0OzJ6a/9J n6SJJ0EFF+aI934W9lz5OmnTWf1+u6HDE1mZ2OJpJFk8qkQYGbzBUh75VwIDAQAB o4ID7jCCA+owHQYDVR0OBBYEFBcG4Vz/vDZkXIg1WFgDPBLZhHhkMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEvRndiaFhQLThObVJjaURWWVdBTThFdG1FZUdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICAgYIKwYBBQUHAQcBAf8EggHxMIIB7TCCAXgEAgABMIIB cAMEAwULMAMEBAUsYAMEBB8v8AMEAyXa+AMEAyXkmAMEAi1XiAMEAy7zWAMEA01L +DAMAwQEUVgQAwQEUVggAwQGUo0AAwQAVP54AwQDVZ6wAwQFWRZgAwQDW5cQAwQC W8tsAwQCW8vUAwQBW86OAwQAW9wxAwQCW+JYAwQEXVqwAwQDXb5AAwQCXpqUAwQD X4L4AwQEbUuwAwQEbe2AAwQDgH9AAwQDjWUgAwQDshRgAwQDsvoIAwQDsvqoAwQC uQPoAwQCuSB0AwQCuSfcAwQCuTMIAwQCuT0oAwQCuUFYAwQCuVBcAwQCuVRQAwQC uXX4AwQCuYmoAwQCuY+kAwQCuZ7UAwQCuc/kAwQCudM8AwQDvEAoAwQCwKJUAwQA wRb/AwQBwRlyAwQCwSacAwQBwnS6AwQAwpHiAwQBwwV4AwQBwyJSAwQBwyp4AwQF wz5gAwQBw1KYAwQBw24qAwQAw+GFAwQF1G5gAwQF1ZJgMG8EAgACMGkDBQAgAQiA AwUDKgASwAMFACoAUwADBQAqAPpAAwUAKgFkwAMFACoBruADBQAqAgJIAwUAKgIK YAMFACoCK4ADBQMqBEzAAwUDKgT/QAMFAyoLKkADBQMqC2NAAwUDKg1pQAMFAyoO /oAwDQYJKoZIhvcNAQELBQADggEBAFme4Lr12jY9thUcgmzcvJL2qfNKcZAmBgQj +3cHe+yLICmwMOoy6T16iVkRYo9HBDApqdNB71s9Fgi0bDSHKfj9uaMaksDcyaLs on0Bgd7OreDZONso8m6OJuG8Zs0X2g2NLRp4ET2otfgIYPGGBEZPak1QnL9WzWG8 BMCNCv2DV9FIfU0wY8faXRAp9A+5YhI2EcDlDg6zMxy1ecNJbvlqLXFzeBnqP3+X M83LkTsPNWym+rADU5hBlUpYaqV+okz5NbVeD73fVvomDHwuKY1NkIYfrSlvXE26 NamYs8zrYFEr3sXv8NIr1a269XJoFIPJ4iY7WJkiik/FmpAXwKc= -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:09 2026 by rpki-client