This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/j2oU6HUcGyqWuziuZf7B0ic6Sjg.roa File: j2oU6HUcGyqWuziuZf7B0ic6Sjg.roa (raw, json) Hash identifier: 9fcFEJQrReh9PGtwsr/lc94aRL+YhT093KUUSLavpPE= Subject key identifier: 8F:6A:14:E8:75:1C:1B:2A:96:BB:38:AE:65:FE:C1:D2:27:3A:4A:38 Certificate issuer: /CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5 Certificate serial: 019B79EC675C2CF260EF829E99369361491E Authority key identifier: AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/j2oU6HUcGyqWuziuZf7B0ic6Sjg.roa Signing time: Thu 01 Jan 2026 14:18:14 +0000 ROA not before: Thu 01 Jan 2026 14:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200000 IP address blocks: 37.139.64.0/21 maxlen: 21 45.154.218.0/24 maxlen: 24 46.247.80.0/21 maxlen: 21 89.19.128.0/19 maxlen: 19 91.105.208.0/21 maxlen: 21 109.205.96.0/21 maxlen: 21 173.242.48.0/20 maxlen: 20 185.25.116.0/22 maxlen: 22 185.39.224.0/22 maxlen: 22 185.65.244.0/22 maxlen: 22 185.68.16.0/22 maxlen: 22 185.68.16.0/24 maxlen: 24 185.69.152.0/22 maxlen: 22 185.104.44.0/22 maxlen: 22 185.104.45.0/24 maxlen: 24 185.124.8.0/22 maxlen: 22 185.130.120.0/22 maxlen: 22 185.149.40.0/22 maxlen: 22 185.209.168.0/22 maxlen: 22 185.225.212.0/22 maxlen: 22 185.226.24.0/22 maxlen: 22 185.233.36.0/22 maxlen: 22 185.233.40.0/22 maxlen: 22 185.233.44.0/22 maxlen: 22 185.233.116.0/22 maxlen: 22 185.233.120.0/22 maxlen: 22 185.233.136.0/22 maxlen: 22 185.233.152.0/22 maxlen: 23 185.234.176.0/22 maxlen: 22 185.235.168.0/22 maxlen: 22 185.239.180.0/22 maxlen: 22 217.173.208.0/20 maxlen: 20 2a00:7a60::/32 maxlen: 32 2a04:8000::/29 maxlen: 29 2a05:480::/29 maxlen: 29 2a06:6440::/29 maxlen: 29 2a0c:680::/29 maxlen: 29 2a0c:681::/32 maxlen: 32 2a0c:682::/31 maxlen: 31 2a0c:684::/30 maxlen: 30 2a0c:780::/29 maxlen: 29 2a0c:880::/29 maxlen: 29 2a0c:a80::/29 maxlen: 29 2a0c:c80::/29 maxlen: 29 2a0c:d80::/29 maxlen: 29 2a0c:e80::/29 maxlen: 29 2a0c:6080::/29 maxlen: 29 2a0d:1100::/29 maxlen: 29 2a0d:6500::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:67:5c:2c:f2:60:ef:82:9e:99:36:93:61:49:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5 Validity Not Before: Jan 1 14:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f6a14e8751c1b2a96bb38ae65fec1d2273a4a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3e:b5:95:e2:79:e0:2c:f8:8c:f8:fa:aa:cb: 4f:49:25:28:fd:4c:67:d0:c0:ab:d1:69:13:aa:fa: 35:5d:cf:00:8e:17:69:f4:ad:d9:5c:25:56:a3:60: e0:1c:11:8b:bd:35:c5:22:00:c9:5d:9e:0a:37:b8: f0:f0:1b:f6:9a:c1:ba:59:7c:b1:9d:4f:2e:bf:19: 85:b0:77:55:08:79:fd:2d:4a:74:4a:ac:5b:f0:aa: 72:0e:40:93:d5:83:26:1f:e8:46:45:2d:d1:26:ee: 48:eb:b0:af:9e:0b:a0:f6:f5:02:14:a9:aa:ad:2c: ce:af:5f:31:18:9f:e8:43:51:2b:75:a7:9a:64:c4: b6:e9:ab:0b:7d:bc:48:52:36:95:eb:9b:fc:2b:3a: fc:56:49:51:29:8f:13:72:f8:d3:51:6d:2b:5c:a5: b0:c1:81:36:6e:f3:0e:fe:8e:b2:ba:e7:ab:fa:93: 41:43:76:08:60:29:f1:ee:f8:8e:fc:21:12:e9:57: 5f:9a:17:56:5e:b0:9c:3f:73:01:69:7b:9f:aa:4c: d3:a0:28:21:81:17:bf:14:3f:d4:27:df:d9:92:c9: 49:a6:f4:29:5b:9d:e3:a4:7c:ea:21:8c:ba:51:65: 82:0b:38:c9:0c:5b:d2:55:33:a2:9f:53:d6:70:13: a1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6A:14:E8:75:1C:1B:2A:96:BB:38:AE:65:FE:C1:D2:27:3A:4A:38 X509v3 Authority Key Identifier: keyid:AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/j2oU6HUcGyqWuziuZf7B0ic6Sjg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.139.64.0/21 45.154.218.0/24 46.247.80.0/21 89.19.128.0/19 91.105.208.0/21 109.205.96.0/21 173.242.48.0/20 185.25.116.0/22 185.39.224.0/22 185.65.244.0/22 185.68.16.0/22 185.69.152.0/22 185.104.44.0/22 185.124.8.0/22 185.130.120.0/22 185.149.40.0/22 185.209.168.0/22 185.225.212.0/22 185.226.24.0/22 185.233.36.0-185.233.47.255 185.233.116.0-185.233.123.255 185.233.136.0/22 185.233.152.0/22 185.234.176.0/22 185.235.168.0/22 185.239.180.0/22 217.173.208.0/20 IPv6: 2a00:7a60::/32 2a04:8000::/29 2a05:480::/29 2a06:6440::/29 2a0c:680::/29 2a0c:780::/29 2a0c:880::/29 2a0c:a80::/29 2a0c:c80::/29 2a0c:d80::/29 2a0c:e80::/29 2a0c:6080::/29 2a0d:1100::/29 2a0d:6500::/29 Signature Algorithm: sha256WithRSAEncryption 51:ca:94:7f:a4:1d:90:57:1f:4c:14:84:64:1b:27:a5:24:b0: 01:26:0d:92:45:62:70:eb:90:8a:86:06:a9:45:48:94:a6:a8: a4:ef:ef:3d:0a:71:cf:3e:46:ba:8b:91:fb:66:09:12:16:0b: 0a:d6:f9:46:40:a9:17:e9:a0:e0:7d:73:a2:03:02:77:c2:81: fd:f6:76:63:20:41:6b:40:77:c8:ac:cf:eb:29:0a:4e:81:b3: f8:a3:b9:bf:5d:4a:6c:59:ac:c4:e1:94:63:6f:e5:71:21:03: 48:14:d1:b8:62:c9:43:29:46:03:90:28:00:3e:c2:94:68:ea: d5:bc:49:2a:4a:64:e7:a9:88:b9:46:c1:cb:7f:80:ed:84:56: 2f:f9:1c:a0:06:93:e4:f4:af:5d:23:64:b8:62:43:aa:20:79: f0:6c:96:b7:67:da:ff:14:66:8a:e3:89:17:d6:1b:b1:51:5e: df:94:9b:ac:71:05:25:85:89:1c:10:0e:6f:90:af:40:e0:ad: 99:7e:c5:50:4c:a9:52:ae:56:43:8a:4f:82:c5:ca:16:a1:40: 39:ce:ab:c9:be:ef:db:22:d6:49:f4:c2:23:92:75:aa:f5:e7: c1:f2:c1:31:ae:41:18:78:40:9e:6f:80:4c:83:11:76:23:69: e0:4c:3c:e5 -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgISAZt57GdcLPJg74KemTaTYUkeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOGEwZTBiMWIyMWYwOTMzMzNjMDc0ODE0NWIxNjI4NDE4 Y2YyYjUwHhcNMjYwMTAxMTQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjZhMTRlODc1MWMxYjJhOTZiYjM4YWU2NWZlYzFkMjI3M2E0YTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD61leJ54Cz4jPj6qstPSSUo/Uxn 0MCr0WkTqvo1Xc8Ajhdp9K3ZXCVWo2DgHBGLvTXFIgDJXZ4KN7jw8Bv2msG6WXyx nU8uvxmFsHdVCHn9LUp0Sqxb8KpyDkCT1YMmH+hGRS3RJu5I67Cvngug9vUCFKmq rSzOr18xGJ/oQ1ErdaeaZMS26asLfbxIUjaV65v8Kzr8VklRKY8TcvjTUW0rXKWw wYE2bvMO/o6yuuer+pNBQ3YIYCnx7viO/CES6VdfmhdWXrCcP3MBaXufqkzToCgh gRe/FD/UJ9/ZkslJpvQpW53jpHzqIYy6UWWCCzjJDFvSVTOin1PWcBOhNQIDAQAB o4IDJzCCAyMwHQYDVR0OBBYEFI9qFOh1HBsqlrs4rmX+wdInOko4MB8GA1UdIwQY MBaAFKyKDgsbIfCTMzwHSBRbFihBjPK1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcklvT0N4c2g4Sk16UEFkSUZGc1dLRUdNOHJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84Y2U2YTEtMTMwYy00ODBlLWE5MDMt ZGI4ZWZmMWIxMWEwLzEvajJvVTZIVWNHeXFXdXppdVpmN0IwaWM2U2pnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84Y2U2YTEtMTMwYy00ODBlLWE5MDMtZGI4ZWZmMWIxMWEw LzEvcklvT0N4c2g4Sk16UEFkSUZGc1dLRUdNOHJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBOwYIKwYBBQUHAQcBAf8EggEqMIIBJjCBuQQCAAEwgbID BAMli0ADBAAtmtoDBAMu91ADBAVZE4ADBANbadADBANtzWADBASt8jADBAK5GXQD BAK5J+ADBAK5QfQDBAK5RBADBAK5RZgDBAK5aCwDBAK5fAgDBAK5gngDBAK5lSgD BAK50agDBAK54dQDBAK54hgwDAMEArnpJAMEBLnpIDAMAwQCuel0AwQCuel4AwQC uemIAwQCuemYAwQCueqwAwQCueuoAwQCue+0AwQE2a3QMGgEAgACMGIDBQAqAHpg AwUDKgSAAAMFAyoFBIADBQMqBmRAAwUDKgwGgAMFAyoMB4ADBQMqDAiAAwUDKgwK gAMFAyoMDIADBQMqDA2AAwUDKgwOgAMFAyoMYIADBQMqDREAAwUDKg1lADANBgkq hkiG9w0BAQsFAAOCAQEAUcqUf6QdkFcfTBSEZBsnpSSwASYNkkVicOuQioYGqUVI lKaopO/vPQpxzz5GuouR+2YJEhYLCtb5RkCpF+mg4H1zogMCd8KB/fZ2YyBBa0B3 yKzP6ykKToGz+KO5v11KbFmsxOGUY2/lcSEDSBTRuGLJQylGA5AoAD7ClGjq1bxJ Kkpk56mIuUbBy3+A7YRWL/kcoAaT5PSvXSNkuGJDqiB58GyWt2fa/xRmiuOJF9Yb sVFe35SbrHEFJYWJHBAOb5CvQOCtmX7FUEypUq5WQ4pPgsXKFqFAOc6ryb7v2yLW SfTCI5J1qvXnwfLBMa5BGHhAnm+ATIMRdiNp4Ew85Q== -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:15 2026 by rpki-client