This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/aoC-ZvnMCthfZmCBWkaYfXp2HWU.roa File: aoC-ZvnMCthfZmCBWkaYfXp2HWU.roa (raw, json) Hash identifier: qB1byLmoDVrfDMsFNXDXSmKBiaAt3PmzXSAiB0JDxI8= Subject key identifier: 6A:80:BE:66:F9:CC:0A:D8:5F:66:60:81:5A:46:98:7D:7A:76:1D:65 Certificate issuer: /CN=0526b03c717184c3680817e55e2455f85d73a413 Certificate serial: 019BEC202DA815C07A777562D1D836C4DC0C Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/aoC-ZvnMCthfZmCBWkaYfXp2HWU.roa Signing time: Fri 23 Jan 2026 18:31:30 +0000 ROA not before: Fri 23 Jan 2026 18:31:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49453 IP address blocks: 37.123.208.0/24 maxlen: 24 37.123.210.0/24 maxlen: 24 45.133.250.0/24 maxlen: 24 109.202.96.0/24 maxlen: 24 109.202.97.0/24 maxlen: 24 109.202.98.0/24 maxlen: 24 109.202.99.0/24 maxlen: 24 109.202.100.0/24 maxlen: 24 109.202.101.0/24 maxlen: 24 109.202.102.0/24 maxlen: 24 109.202.103.0/24 maxlen: 24 109.202.104.0/24 maxlen: 24 109.202.106.0/24 maxlen: 24 109.202.107.0/24 maxlen: 24 109.202.108.0/24 maxlen: 24 109.202.109.0/24 maxlen: 24 109.202.111.0/24 maxlen: 24 109.232.224.0/24 maxlen: 24 109.232.225.0/24 maxlen: 24 109.232.226.0/24 maxlen: 24 109.232.227.0/24 maxlen: 24 109.232.228.0/24 maxlen: 24 109.232.229.0/24 maxlen: 24 109.232.230.0/24 maxlen: 24 109.232.231.0/24 maxlen: 24 134.19.176.0/24 maxlen: 24 134.19.177.0/24 maxlen: 24 134.19.178.0/24 maxlen: 24 134.19.179.0/24 maxlen: 24 134.19.180.0/24 maxlen: 24 134.19.181.0/24 maxlen: 24 134.19.182.0/24 maxlen: 24 134.19.183.0/24 maxlen: 24 134.19.184.0/24 maxlen: 24 134.19.185.0/24 maxlen: 24 134.19.186.0/24 maxlen: 24 134.19.187.0/24 maxlen: 24 134.19.188.0/24 maxlen: 24 134.19.189.0/24 maxlen: 24 134.19.190.0/23 maxlen: 23 185.23.213.0/24 maxlen: 24 185.23.214.0/24 maxlen: 24 185.23.215.0/24 maxlen: 24 188.95.48.0/24 maxlen: 24 188.95.49.0/24 maxlen: 24 188.95.50.0/24 maxlen: 24 188.95.51.0/24 maxlen: 24 188.95.52.0/24 maxlen: 24 188.95.53.0/24 maxlen: 24 188.95.54.0/24 maxlen: 24 188.95.55.0/24 maxlen: 24 213.152.160.0/24 maxlen: 24 213.152.161.0/24 maxlen: 24 213.152.162.0/24 maxlen: 24 213.152.163.0/24 maxlen: 24 213.152.164.0/24 maxlen: 24 213.152.165.0/24 maxlen: 24 213.152.166.0/24 maxlen: 24 213.152.167.0/24 maxlen: 24 213.152.168.0/24 maxlen: 24 213.152.169.0/24 maxlen: 24 213.152.170.0/24 maxlen: 24 213.152.171.0/24 maxlen: 24 213.152.172.0/24 maxlen: 24 213.152.173.0/24 maxlen: 24 213.152.174.0/24 maxlen: 24 213.152.176.0/24 maxlen: 24 213.152.177.0/24 maxlen: 24 213.152.178.0/24 maxlen: 24 213.152.179.0/24 maxlen: 24 213.152.180.0/24 maxlen: 24 213.152.181.0/24 maxlen: 24 213.152.182.0/24 maxlen: 24 213.152.183.0/24 maxlen: 24 213.152.184.0/24 maxlen: 24 213.152.185.0/24 maxlen: 24 213.152.186.0/24 maxlen: 24 213.152.187.0/24 maxlen: 24 213.152.188.0/22 maxlen: 22 213.152.188.0/24 maxlen: 24 213.152.189.0/24 maxlen: 24 213.152.190.0/24 maxlen: 24 2a00:1678:127::/48 maxlen: 48 2a00:1678:a2b::/48 maxlen: 48 2a00:1678:b17::/48 maxlen: 48 2a00:1678:be1::/48 maxlen: 48 2a00:1678:be2::/48 maxlen: 48 2a00:1678:1122::/48 maxlen: 48 2a00:1678:1337::/48 maxlen: 48 2a00:1678:2470::/48 maxlen: 48 2a00:1678:3cc0::/48 maxlen: 48 2a00:1678:5524::/48 maxlen: 48 2a00:1678:5afe::/48 maxlen: 48 2a00:1678:b00b::/48 maxlen: 48 2a00:1678:baba::/48 maxlen: 48 2a00:1678:da7a::/48 maxlen: 48 2a00:1678:dea1::/48 maxlen: 48 2a00:1678:efa5::/48 maxlen: 48 2a00:1678:f113::/48 maxlen: 48 2a00:1678:fa11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ec:20:2d:a8:15:c0:7a:77:75:62:d1:d8:36:c4:dc:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413 Validity Not Before: Jan 23 18:31:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a80be66f9cc0ad85f6660815a46987d7a761d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:13:25:07:cb:6e:12:91:05:7e:b3:2f:24:b7: 46:6d:32:d3:7f:91:02:d4:7b:79:82:5e:f2:84:d0: 75:ad:74:b8:b2:f0:c1:e5:c9:a9:e6:b3:26:44:1a: 11:3f:fb:68:87:7f:3c:00:0c:11:59:b1:37:9e:23: 69:29:4a:be:cd:49:08:18:8c:bc:c6:ff:27:55:30: 7e:5d:23:fb:ea:08:06:84:05:bf:26:4e:ca:b5:ac: e9:24:de:c2:df:28:f0:25:3a:d4:e5:b7:7f:02:ea: ce:8f:de:8c:c2:b3:fc:0f:d7:f8:2f:1c:5a:43:fa: 64:92:78:b3:c9:d2:1c:f0:e3:84:12:5b:dd:86:61: e9:41:e9:c5:91:fb:7a:44:9f:4c:f5:e7:bf:9c:e7: 6a:b3:7d:11:aa:94:45:eb:d4:ab:cb:55:1d:bd:06: 42:de:26:72:29:dd:62:d7:16:13:89:64:a4:7c:32: 02:ac:22:6b:c4:a7:17:e1:f4:18:db:4f:b4:72:b6: fe:ee:3e:58:3e:73:1c:f8:0b:70:bc:54:97:c6:d0: 53:9a:03:8e:22:9f:83:3a:6a:86:12:f8:15:ad:68: 99:82:80:84:8b:46:ac:5b:b3:cc:7a:9a:21:91:17: 47:8c:dd:cc:c7:ca:4b:9a:20:af:ba:03:31:ad:af: ce:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:80:BE:66:F9:CC:0A:D8:5F:66:60:81:5A:46:98:7D:7A:76:1D:65 X509v3 Authority Key Identifier: keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/aoC-ZvnMCthfZmCBWkaYfXp2HWU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.123.208.0/24 37.123.210.0/24 45.133.250.0/24 109.202.96.0-109.202.104.255 109.202.106.0-109.202.109.255 109.202.111.0/24 109.232.224.0/21 134.19.176.0/20 185.23.213.0-185.23.215.255 188.95.48.0/21 213.152.160.0-213.152.174.255 213.152.176.0/20 IPv6: 2a00:1678:127::/48 2a00:1678:a2b::/48 2a00:1678:b17::/48 2a00:1678:be1::-2a00:1678:be2:ffff:ffff:ffff:ffff:ffff 2a00:1678:1122::/48 2a00:1678:1337::/48 2a00:1678:2470::/48 2a00:1678:3cc0::/48 2a00:1678:5524::/48 2a00:1678:5afe::/48 2a00:1678:b00b::/48 2a00:1678:baba::/48 2a00:1678:da7a::/48 2a00:1678:dea1::/48 2a00:1678:efa5::/48 2a00:1678:f113::/48 2a00:1678:fa11::/48 Signature Algorithm: sha256WithRSAEncryption 15:f2:fa:a2:9e:fe:80:cc:88:60:26:63:6c:71:dc:27:87:6d: ab:33:67:07:1b:39:e2:45:65:5b:18:46:b8:63:c9:c6:db:5b: 73:2c:1d:9a:12:cf:77:34:2c:18:25:03:bf:a5:43:5b:0c:43: 5a:47:e0:8b:56:6b:b8:1d:1a:68:87:e2:d2:16:b6:39:a7:cf: 56:4f:67:a3:ee:63:6d:d4:b7:45:df:ed:58:34:ff:08:8d:a2: c0:2f:59:79:9a:47:60:b8:0d:3f:7a:16:12:35:96:03:68:b7: bb:a9:e1:56:fb:a0:1f:e7:d2:4e:28:2f:0e:2c:10:31:82:e2: 8e:79:38:90:76:53:81:9a:b5:4c:25:0f:06:fe:b4:a7:48:e2: 06:f8:e9:8f:a8:ef:78:86:26:a4:6d:a9:46:8c:7e:d3:ef:88: 1e:27:3b:27:d2:4e:35:7c:af:a7:30:3b:bc:2a:a6:6b:51:c5: 88:6b:55:dd:03:9f:f8:a2:2f:40:bf:43:59:99:9c:8c:24:b6: f6:b1:38:d5:e2:10:1e:7f:cb:c0:f9:b5:58:bb:07:bd:eb:71: 87:a9:18:0d:d2:8e:fb:dd:5e:b3:82:1f:5b:4d:ea:8a:8f:7f: 94:d9:be:99:f3:c0:f4:79:c9:80:e2:9b:76:6f:a0:d2:8e:69: 79:10:b9:55 -----BEGIN CERTIFICATE----- MIIGEzCCBPugAwIBAgISAZvsIC2oFcB6d3Vi0dg2xNwMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MjZiMDNjNzE3MTg0YzM2ODA4MTdlNTVlMjQ1NWY4NWQ3 M2E0MTMwHhcNMjYwMTIzMTgzMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTgwYmU2NmY5Y2MwYWQ4NWY2NjYwODE1YTQ2OTg3ZDdhNzYxZDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxMlB8tuEpEFfrMvJLdGbTLTf5EC 1Ht5gl7yhNB1rXS4svDB5cmp5rMmRBoRP/toh388AAwRWbE3niNpKUq+zUkIGIy8 xv8nVTB+XSP76ggGhAW/Jk7KtazpJN7C3yjwJTrU5bd/AurOj96MwrP8D9f4Lxxa Q/pkknizydIc8OOEElvdhmHpQenFkft6RJ9M9ee/nOdqs30RqpRF69Sry1UdvQZC 3iZyKd1i1xYTiWSkfDICrCJrxKcX4fQY20+0crb+7j5YPnMc+AtwvFSXxtBTmgOO Ip+DOmqGEvgVrWiZgoCEi0asW7PMepohkRdHjN3Mx8pLmiCvugMxra/ObQIDAQAB o4IDHzCCAxswHQYDVR0OBBYEFGqAvmb5zArYX2ZggVpGmH16dh1lMB8GA1UdIwQY MBaAFAUmsDxxcYTDaAgX5V4kVfhdc6QTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9hMzM4M2EtMDRlYi00M2Y4LWE5NTMt M2JmMDRhMmE5M2Q4LzEvYW9DLVp2bk1DdGhmWm1DQldrYVlmWHAySFdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9hMzM4M2EtMDRlYi00M2Y4LWE5NTMtM2JmMDRhMmE5M2Q4 LzEvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBMwYIKwYBBQUHAQcBAf8EggEiMIIBHjBuBAIAATBoAwQA JXvQAwQAJXvSAwQALYX6MAwDBAVtymADBABtymgwDAMEAW3KagMEAW3KbAMEAG3K bwMEA23o4AMEBIYTsDAMAwQAuRfVAwQDuRfQAwQDvF8wMAwDBAXVmKADBADVmK4D BATVmLAwgasEAgACMIGkAwcAKgAWeAEnAwcAKgAWeAorAwcAKgAWeAsXMBIDBwAq ABZ4C+EDBwAqABZ4C+IDBwAqABZ4ESIDBwAqABZ4EzcDBwAqABZ4JHADBwAqABZ4 PMADBwAqABZ4VSQDBwAqABZ4Wv4DBwAqABZ4sAsDBwAqABZ4uroDBwAqABZ42noD BwAqABZ43qEDBwAqABZ476UDBwAqABZ48RMDBwAqABZ4+hEwDQYJKoZIhvcNAQEL BQADggEBABXy+qKe/oDMiGAmY2xx3CeHbaszZwcbOeJFZVsYRrhjycbbW3MsHZoS z3c0LBglA7+lQ1sMQ1pH4ItWa7gdGmiH4tIWtjmnz1ZPZ6PuY23Ut0Xf7Vg0/wiN osAvWXmaR2C4DT96FhI1lgNot7up4Vb7oB/n0k4oLw4sEDGC4o55OJB2U4GatUwl Dwb+tKdI4gb46Y+o73iGJqRtqUaMftPviB4nOyfSTjV8r6cwO7wqpmtRxYhrVd0D n/iiL0C/Q1mZnIwktvaxONXiEB5/y8D5tVi7B73rcYepGA3SjvvdXrOCH1tN6oqP f5TZvpnzwPR5yYDim3ZvoNKOaXkQuVU= -----END CERTIFICATE-----Generated at Sun Jan 25 16:36:21 2026 by rpki-client