This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/EN-fsa953aMVETI0PGhysIbF3EE.roa File: EN-fsa953aMVETI0PGhysIbF3EE.roa (raw, json) Hash identifier: frdZjusDaEBzWJUj9JdaF+Kkhr4AdRl43heo7DRLAnE= Subject key identifier: 10:DF:9F:B1:AF:79:DD:A3:15:11:32:34:3C:68:72:B0:86:C5:DC:41 Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70 Certificate serial: 019B9DFF0496AFFDC7AD8701AA2A1A639B52 Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/EN-fsa953aMVETI0PGhysIbF3EE.roa Signing time: Thu 08 Jan 2026 14:24:54 +0000 ROA not before: Thu 08 Jan 2026 14:24:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8560 IP address blocks: 5.250.176.0/20 maxlen: 24 46.16.72.0/21 maxlen: 24 78.137.96.0/21 maxlen: 24 81.173.112.0/22 maxlen: 24 82.165.0.0/16 maxlen: 24 85.184.248.0/22 maxlen: 24 87.106.0.0/16 maxlen: 24 157.97.104.0/21 maxlen: 24 157.97.104.0/24 maxlen: 32 157.97.105.0/24 maxlen: 32 185.48.116.0/22 maxlen: 24 194.126.206.0/24 maxlen: 24 194.164.4.0/22 maxlen: 24 194.164.8.0/22 maxlen: 24 194.164.16.0/20 maxlen: 24 194.164.48.0/20 maxlen: 24 194.164.88.0/21 maxlen: 24 194.164.120.0/21 maxlen: 24 194.164.160.0/20 maxlen: 24 194.164.192.0/20 maxlen: 24 195.20.224.0/19 maxlen: 24 212.132.64.0/18 maxlen: 24 212.227.0.0/16 maxlen: 24 213.165.64.0/19 maxlen: 24 213.165.65.0/24 maxlen: 24 213.165.69.0/24 maxlen: 24 213.165.70.0/23 maxlen: 23 213.165.70.0/24 maxlen: 24 213.165.71.0/24 maxlen: 24 213.165.74.0/24 maxlen: 24 213.165.79.0/24 maxlen: 24 213.165.80.0/23 maxlen: 23 213.165.80.0/24 maxlen: 24 213.165.81.0/24 maxlen: 24 213.165.82.0/23 maxlen: 23 213.165.84.0/24 maxlen: 24 213.165.85.0/24 maxlen: 24 213.165.86.0/23 maxlen: 23 213.165.88.0/22 maxlen: 22 213.165.92.0/24 maxlen: 24 213.165.93.0/24 maxlen: 24 213.165.94.0/23 maxlen: 23 213.244.192.0/24 maxlen: 24 217.72.192.0/20 maxlen: 24 217.154.0.0/21 maxlen: 24 217.154.8.0/22 maxlen: 24 217.154.13.0/24 maxlen: 24 217.154.14.0/23 maxlen: 24 217.154.16.0/21 maxlen: 24 217.154.24.0/24 maxlen: 24 217.154.26.0/23 maxlen: 23 217.154.32.0/22 maxlen: 22 217.154.36.0/23 maxlen: 23 217.154.38.0/24 maxlen: 24 217.154.40.0/22 maxlen: 22 217.154.44.0/23 maxlen: 23 217.154.47.0/24 maxlen: 24 217.154.48.0/24 maxlen: 24 217.154.50.0/23 maxlen: 24 217.154.52.0/22 maxlen: 24 217.154.56.0/21 maxlen: 24 217.154.64.0/21 maxlen: 24 217.154.74.0/23 maxlen: 24 217.154.76.0/22 maxlen: 24 217.154.80.0/21 maxlen: 24 217.154.88.0/23 maxlen: 24 217.154.91.0/24 maxlen: 24 217.154.92.0/22 maxlen: 24 217.154.97.0/24 maxlen: 24 217.154.98.0/23 maxlen: 23 217.154.100.0/23 maxlen: 23 217.154.102.0/24 maxlen: 24 217.154.105.0/24 maxlen: 24 217.154.106.0/23 maxlen: 23 217.154.108.0/24 maxlen: 24 217.154.112.0/21 maxlen: 21 217.154.120.0/23 maxlen: 23 217.154.124.0/23 maxlen: 23 217.154.126.0/24 maxlen: 24 217.154.142.0/23 maxlen: 24 217.154.144.0/22 maxlen: 24 217.154.148.0/23 maxlen: 24 217.154.150.0/24 maxlen: 24 217.154.152.0/22 maxlen: 24 217.154.156.0/24 maxlen: 24 217.154.159.0/24 maxlen: 24 217.154.160.0/20 maxlen: 20 217.154.177.0/24 maxlen: 24 217.154.178.0/23 maxlen: 24 217.154.180.0/22 maxlen: 24 217.154.184.0/23 maxlen: 24 217.154.186.0/24 maxlen: 24 217.154.188.0/22 maxlen: 24 217.154.192.0/20 maxlen: 20 217.154.208.0/24 maxlen: 24 217.154.210.0/23 maxlen: 23 217.154.212.0/22 maxlen: 22 217.154.216.0/23 maxlen: 23 217.154.218.0/24 maxlen: 24 217.154.220.0/24 maxlen: 24 217.154.222.0/23 maxlen: 23 217.154.224.0/22 maxlen: 22 217.154.228.0/23 maxlen: 23 217.154.231.0/24 maxlen: 24 217.154.232.0/22 maxlen: 22 217.154.237.0/24 maxlen: 24 217.154.238.0/23 maxlen: 23 217.154.240.0/22 maxlen: 24 217.154.244.0/23 maxlen: 24 217.154.247.0/24 maxlen: 24 217.154.248.0/21 maxlen: 24 217.154.248.0/24 maxlen: 24 217.160.0.0/16 maxlen: 24 217.160.124.0/23 maxlen: 24 217.160.150.0/23 maxlen: 32 2001:8d8::/29 maxlen: 48 2a02:2478::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:ff:04:96:af:fd:c7:ad:87:01:aa:2a:1a:63:9b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70 Validity Not Before: Jan 8 14:24:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10df9fb1af79dda3151132343c6872b086c5dc41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:79:ea:19:ad:71:60:b0:db:fb:2c:7e:e4:5f: 66:f4:c3:32:c5:96:f8:95:c5:01:03:6d:a3:92:ce: 5f:2c:d3:a4:8b:47:85:15:50:b9:7c:d3:8e:46:ee: 61:07:a0:3a:0a:0a:d8:ac:38:f0:2f:e1:01:8f:f6: 17:12:54:d6:67:c7:2c:b9:82:99:d7:76:cf:ac:f8: fb:fe:65:37:03:bb:ac:ff:44:fe:2d:b5:56:38:c4: d9:80:47:84:39:df:72:49:59:e8:a6:ff:15:3f:79: 0e:72:0d:0c:79:1a:ec:df:09:d4:9f:a8:c8:fd:bb: 30:44:b1:97:bc:64:33:97:fb:0f:2c:49:50:56:5c: 06:61:ca:fa:49:30:16:ab:ec:be:17:c3:ea:e8:b1: 55:ae:87:16:e5:24:b4:7b:81:e2:11:85:24:c7:9e: cd:1d:50:db:d1:eb:d6:89:93:1e:7e:6a:06:17:2f: bd:f9:37:0f:fb:ab:19:0d:e5:8a:ea:52:cb:b9:c2: 33:08:59:8d:ca:0e:7d:61:f9:ec:44:db:40:9f:ec: 20:b3:10:c4:5f:e1:0b:d6:81:dc:86:04:0e:e7:ea: 2c:35:dc:a8:ec:c1:71:ac:7f:3e:ca:cf:81:e4:0f: 0c:44:39:00:a1:71:e3:0f:5a:6e:2b:cb:6c:5c:de: 28:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DF:9F:B1:AF:79:DD:A3:15:11:32:34:3C:68:72:B0:86:C5:DC:41 X509v3 Authority Key Identifier: keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/EN-fsa953aMVETI0PGhysIbF3EE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.250.176.0/20 46.16.72.0/21 78.137.96.0/21 81.173.112.0/22 82.165.0.0/16 85.184.248.0/22 87.106.0.0/16 157.97.104.0/21 185.48.116.0/22 194.126.206.0/24 194.164.4.0-194.164.11.255 194.164.16.0/20 194.164.48.0/20 194.164.88.0/21 194.164.120.0/21 194.164.160.0/20 194.164.192.0/20 195.20.224.0/19 212.132.64.0/18 212.227.0.0/16 213.165.64.0/19 213.244.192.0/24 217.72.192.0/20 217.154.0.0-217.154.11.255 217.154.13.0-217.154.24.255 217.154.26.0/23 217.154.32.0-217.154.38.255 217.154.40.0-217.154.45.255 217.154.47.0-217.154.48.255 217.154.50.0-217.154.71.255 217.154.74.0-217.154.89.255 217.154.91.0-217.154.95.255 217.154.97.0-217.154.102.255 217.154.105.0-217.154.108.255 217.154.112.0-217.154.121.255 217.154.124.0-217.154.126.255 217.154.142.0-217.154.150.255 217.154.152.0-217.154.156.255 217.154.159.0-217.154.175.255 217.154.177.0-217.154.186.255 217.154.188.0-217.154.208.255 217.154.210.0-217.154.218.255 217.154.220.0/24 217.154.222.0-217.154.229.255 217.154.231.0-217.154.235.255 217.154.237.0-217.154.245.255 217.154.247.0-217.154.255.255 217.160.0.0/16 IPv6: 2001:8d8::/29 2a02:2478::/29 Signature Algorithm: sha256WithRSAEncryption 04:d2:e1:ee:85:92:bc:23:d9:bd:84:54:5d:11:ce:0d:91:f3: 32:61:79:c9:85:dc:13:80:1d:34:ab:4d:44:b9:95:d1:66:aa: 0f:6f:5d:83:ca:30:06:1d:df:02:05:1f:95:27:c9:6e:64:bc: 67:7f:61:4c:5f:12:13:bd:15:b4:e3:5d:ed:3d:ff:bf:bb:36: 89:cd:2b:d3:34:7a:bb:68:20:fb:e9:73:4a:2c:35:0c:d0:b1: c3:0f:b6:27:35:a8:56:4c:9c:9f:99:3b:97:16:37:50:95:e3: 3b:ef:e0:cf:d6:d0:32:bc:0d:2f:1a:a6:9e:d0:a5:49:9d:b5: 35:96:38:69:20:b8:47:07:61:db:5f:97:50:6c:c6:71:ac:c3: 41:25:89:f2:54:6f:67:0d:cd:b3:f8:a1:45:60:68:25:bb:af: dc:4f:56:4b:99:02:b3:1a:05:bb:82:26:48:88:87:84:02:f8: 59:8d:d4:9b:6f:a0:45:92:dc:05:c6:b0:08:ab:11:56:27:06: cf:c6:12:a0:2e:7c:5f:5a:70:29:55:3a:c6:1c:90:07:f2:ac: fc:3a:a8:f1:6c:e2:f8:7b:cf:82:86:80:6c:11:5c:f6:3b:ac: 54:ea:92:34:bc:d4:fd:db:3e:a5:bb:a0:d8:23:35:20:27:46: 46:2f:eb:e9 -----BEGIN CERTIFICATE----- MIIG6TCCBdGgAwIBAgISAZud/wSWr/3HrYcBqioaY5tSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyOTViMWYxZGNkOGZhNmFjMWVmNzg4Mjc4YzQ4OWUxNWVh Y2FlNzAwHhcNMjYwMTA4MTQyNDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGRmOWZiMWFmNzlkZGEzMTUxMTMyMzQzYzY4NzJiMDg2YzVkYzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nnqGa1xYLDb+yx+5F9m9MMyxZb4 lcUBA22jks5fLNOki0eFFVC5fNOORu5hB6A6CgrYrDjwL+EBj/YXElTWZ8csuYKZ 13bPrPj7/mU3A7us/0T+LbVWOMTZgEeEOd9ySVnopv8VP3kOcg0MeRrs3wnUn6jI /bswRLGXvGQzl/sPLElQVlwGYcr6STAWq+y+F8Pq6LFVrocW5SS0e4HiEYUkx57N HVDb0evWiZMefmoGFy+9+TcP+6sZDeWK6lLLucIzCFmNyg59YfnsRNtAn+wgsxDE X+EL1oHchgQO5+osNdyo7MFxrH8+ys+B5A8MRDkAoXHjD1puK8tsXN4obwIDAQAB o4ID9TCCA/EwHQYDVR0OBBYEFBDfn7Gved2jFREyNDxocrCGxdxBMB8GA1UdIwQY MBaAFJKVsfHc2Ppqwe94gnjEieFerK5wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wZmJjMmUtZmQ4OC00ZGYyLWFhZTMt OWViNDBjYzVmNjhiLzEvRU4tZnNhOTUzYU1WRVRJMFBHaHlzSWJGM0VFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8wZmJjMmUtZmQ4OC00ZGYyLWFhZTMtOWViNDBjYzVmNjhi LzEva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICCQYIKwYBBQUHAQcBAf8EggH4MIIB9DCCAdoEAgABMIIB 0gMEBAX6sAMEAy4QSAMEA06JYAMEAlGtcAMDAFKlAwQCVbj4AwMAV2oDBAOdYWgD BAK5MHQDBADCfs4wDAMEAsKkBAMEAsKkCAMEBMKkEAMEBMKkMAMEA8KkWAMEA8Kk eAMEBMKkoAMEBMKkwAMEBcMU4AMEBtSEQAMDANTjAwQF1aVAAwQA1fTAAwQE2UjA MAsDAwHZmgMEAtmaCDAMAwQA2ZoNAwQA2ZoYAwQB2ZoaMAwDBAXZmiADBADZmiYw DAMEA9maKAMEAdmaLDAMAwQA2ZovAwQA2ZowMAwDBAHZmjIDBAPZmkAwDAMEAdma SgMEAdmaWDAMAwQA2ZpbAwQF2ZpAMAwDBADZmmEDBADZmmYwDAMEANmaaQMEANma bDAMAwQE2ZpwAwQB2Zp4MAwDBALZmnwDBADZmn4wDAMEAdmajgMEANmaljAMAwQD 2ZqYAwQA2ZqcMAwDBADZmp8DBATZmqAwDAMEANmasQMEANmaujAMAwQC2Zq8AwQA 2ZrQMAwDBAHZmtIDBADZmtoDBADZmtwwDAMEAdma3gMEAdma5DAMAwQA2ZrnAwQC 2ZroMAwDBADZmu0DBAHZmvQwCwMEANma9wMDANmaAwMA2aAwFAQCAAIwDgMFAyAB CNgDBQMqAiR4MA0GCSqGSIb3DQEBCwUAA4IBAQAE0uHuhZK8I9m9hFRdEc4NkfMy YXnJhdwTgB00q01EuZXRZqoPb12DyjAGHd8CBR+VJ8luZLxnf2FMXxITvRW0413t Pf+/uzaJzSvTNHq7aCD76XNKLDUM0LHDD7YnNahWTJyfmTuXFjdQleM77+DP1tAy vA0vGqae0KVJnbU1ljhpILhHB2HbX5dQbMZxrMNBJYnyVG9nDc2z+KFFYGglu6/c T1ZLmQKzGgW7giZIiIeEAvhZjdSbb6BFktwFxrAIqxFWJwbPxhKgLnxfWnApVTrG HJAH8qz8OqjxbOL4e8+ChoBsEVz2O6xU6pI0vNT92z6lu6DYIzUgJ0ZGL+vp -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:55 2026 by rpki-client