This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/0FDX9W_ecP-vHKFOSB0MRjc3ngQ.roa File: 0FDX9W_ecP-vHKFOSB0MRjc3ngQ.roa (raw, json) Hash identifier: 3QsiysuOvMOsMyazF3nQzfAfmY5KKl1gScNcfKQFhXI= Subject key identifier: D0:50:D7:F5:6F:DE:70:FF:AF:1C:A1:4E:48:1D:0C:46:37:37:9E:04 Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7 Certificate serial: 019B26F37C57650557EAB6273BBE3ABC701F Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/0FDX9W_ecP-vHKFOSB0MRjc3ngQ.roa Signing time: Tue 16 Dec 2025 11:37:29 +0000 ROA not before: Tue 16 Dec 2025 11:37:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 3356 IP address blocks: 45.94.14.0/24 maxlen: 24 45.94.15.0/24 maxlen: 24 91.229.52.0/22 maxlen: 22 212.26.6.0/23 maxlen: 24 212.26.7.0/24 maxlen: 24 212.26.8.0/22 maxlen: 24 212.26.16.0/24 maxlen: 24 212.26.17.0/24 maxlen: 24 212.26.18.0/24 maxlen: 24 212.26.19.0/24 maxlen: 24 212.26.20.0/24 maxlen: 24 212.26.21.0/24 maxlen: 24 212.26.22.0/24 maxlen: 24 212.26.23.0/24 maxlen: 24 212.26.24.0/21 maxlen: 24 212.26.26.0/23 maxlen: 24 212.26.28.0/23 maxlen: 24 212.26.32.0/24 maxlen: 24 212.26.36.0/24 maxlen: 25 212.26.37.0/24 maxlen: 25 212.26.38.0/24 maxlen: 24 212.26.39.0/24 maxlen: 24 212.26.40.0/24 maxlen: 24 212.26.41.0/24 maxlen: 24 212.26.42.0/24 maxlen: 24 212.26.43.0/24 maxlen: 24 212.26.44.0/24 maxlen: 24 212.26.45.0/24 maxlen: 24 212.26.46.0/23 maxlen: 24 212.26.48.0/24 maxlen: 24 212.26.50.0/23 maxlen: 24 212.26.52.0/24 maxlen: 24 212.26.53.0/24 maxlen: 24 212.26.54.0/24 maxlen: 24 212.26.56.0/24 maxlen: 24 212.26.58.0/24 maxlen: 24 212.26.60.0/24 maxlen: 24 212.26.63.0/24 maxlen: 24 212.26.64.0/24 maxlen: 24 212.26.65.0/24 maxlen: 24 212.26.68.0/23 maxlen: 24 212.26.71.0/24 maxlen: 24 212.26.72.0/24 maxlen: 25 212.26.74.0/24 maxlen: 25 212.26.76.0/24 maxlen: 24 212.26.78.0/24 maxlen: 24 212.138.41.0/24 maxlen: 24 212.138.52.0/22 maxlen: 24 212.138.56.0/21 maxlen: 24 212.138.64.0/22 maxlen: 24 212.138.70.0/23 maxlen: 24 212.138.70.0/24 maxlen: 24 212.138.71.0/24 maxlen: 24 212.138.72.0/22 maxlen: 24 212.138.76.0/22 maxlen: 24 212.138.80.0/23 maxlen: 23 212.138.82.0/24 maxlen: 24 212.138.83.0/24 maxlen: 24 212.138.84.0/23 maxlen: 24 212.138.88.0/24 maxlen: 25 212.138.92.0/24 maxlen: 24 212.138.94.0/24 maxlen: 24 212.138.96.0/21 maxlen: 24 212.138.97.0/24 maxlen: 24 212.138.98.0/23 maxlen: 23 212.138.104.0/24 maxlen: 24 212.138.108.0/24 maxlen: 24 212.138.115.0/24 maxlen: 24 212.138.116.0/24 maxlen: 24 212.138.117.0/24 maxlen: 24 212.138.118.0/24 maxlen: 24 212.138.119.0/24 maxlen: 24 212.138.120.0/24 maxlen: 24 212.138.121.0/24 maxlen: 24 212.138.125.0/24 maxlen: 25 212.138.126.0/24 maxlen: 25 212.138.127.0/24 maxlen: 25 212.138.128.0/24 maxlen: 24 212.138.130.0/24 maxlen: 24 212.138.132.0/24 maxlen: 24 212.138.134.0/24 maxlen: 24 212.138.139.0/24 maxlen: 24 212.138.140.0/24 maxlen: 24 212.138.147.0/24 maxlen: 24 212.138.150.0/24 maxlen: 24 212.138.153.0/24 maxlen: 24 212.138.155.0/24 maxlen: 25 212.138.157.0/24 maxlen: 24 212.138.160.0/24 maxlen: 24 212.138.162.0/24 maxlen: 24 212.138.164.0/24 maxlen: 25 212.138.166.0/24 maxlen: 24 212.138.168.0/24 maxlen: 24 212.138.170.0/24 maxlen: 25 212.138.172.0/24 maxlen: 24 212.138.175.0/24 maxlen: 25 212.138.176.0/24 maxlen: 24 212.138.177.0/24 maxlen: 24 212.138.180.0/24 maxlen: 24 212.138.181.0/24 maxlen: 25 212.138.183.0/24 maxlen: 25 212.138.185.0/24 maxlen: 24 212.138.188.0/24 maxlen: 25 212.138.192.0/24 maxlen: 24 212.138.194.0/24 maxlen: 24 212.138.196.0/24 maxlen: 24 212.138.201.0/24 maxlen: 24 212.138.202.0/24 maxlen: 24 212.138.203.0/24 maxlen: 24 212.138.206.0/24 maxlen: 24 212.138.210.0/24 maxlen: 24 212.138.210.0/28 maxlen: 28 212.138.250.0/24 maxlen: 24 212.138.251.0/24 maxlen: 24 212.138.252.0/24 maxlen: 24 212.138.253.0/24 maxlen: 24 2001:1490::/48 maxlen: 48 2001:1490:1::/48 maxlen: 48 2001:1490:100::/48 maxlen: 48 2001:1490:101::/48 maxlen: 48 2001:1490:102::/48 maxlen: 48 2001:1490:103::/48 maxlen: 49 2001:1490:106::/48 maxlen: 48 2001:1490:107::/48 maxlen: 48 2001:1490:108::/48 maxlen: 48 2001:1490:110::/48 maxlen: 49 2001:1490:110:8000::/49 maxlen: 49 2001:1490:111::/48 maxlen: 48 2001:1490:112::/48 maxlen: 48 2001:1490:113::/48 maxlen: 48 2001:1490:114::/48 maxlen: 48 2001:1490:115::/48 maxlen: 50 2001:1490:116::/48 maxlen: 48 2001:1497:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:f3:7c:57:65:05:57:ea:b6:27:3b:be:3a:bc:70:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7 Validity Not Before: Dec 16 11:37:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d050d7f56fde70ffaf1ca14e481d0c4637379e04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:29:e4:64:b9:1e:59:8a:25:67:93:33:01:ad: d4:71:16:c7:8f:e8:b2:28:bc:5b:dc:11:29:50:c0: 6d:b9:03:d5:2f:33:19:5d:cf:28:c4:49:33:15:bf: 5d:95:70:c3:0c:76:f8:8b:ee:6c:60:74:c4:2d:f9: 71:ed:67:b8:45:b2:ac:62:eb:ea:53:00:e3:c0:aa: 74:da:bd:70:f8:7f:24:b4:ee:0a:6f:b4:de:81:02: 6c:76:46:77:18:7c:2b:43:8c:47:4f:be:c1:97:c1: 18:61:0f:96:7b:f4:29:ee:4d:d8:40:46:57:8a:35: 91:52:ab:e7:39:ff:ef:ae:b1:31:01:0a:9f:e6:73: e9:c4:c6:c6:8b:a5:b4:9a:b0:56:13:76:b0:bd:43: 2f:f1:c3:52:59:58:bc:e5:18:97:49:b0:70:d2:3f: 95:ec:6e:d8:33:46:9c:64:4f:1d:85:04:45:dd:85: de:e7:71:e2:74:51:fc:3f:24:ec:81:8d:5b:76:de: c3:97:27:6d:1b:f3:24:cd:76:dc:57:34:cb:02:78: f0:86:3a:f2:84:f3:84:17:08:dc:fb:78:6e:cc:95: 50:00:fa:15:c9:1b:6a:15:94:6c:12:62:2c:b0:f7: e5:a2:84:84:f9:0a:bb:2a:82:db:55:90:cc:b1:06: cd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:50:D7:F5:6F:DE:70:FF:AF:1C:A1:4E:48:1D:0C:46:37:37:9E:04 X509v3 Authority Key Identifier: keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/0FDX9W_ecP-vHKFOSB0MRjc3ngQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.14.0/23 91.229.52.0/22 212.26.6.0-212.26.11.255 212.26.16.0-212.26.32.255 212.26.36.0-212.26.48.255 212.26.50.0-212.26.54.255 212.26.56.0/24 212.26.58.0/24 212.26.60.0/24 212.26.63.0-212.26.65.255 212.26.68.0/23 212.26.71.0-212.26.72.255 212.26.74.0/24 212.26.76.0/24 212.26.78.0/24 212.138.41.0/24 212.138.52.0-212.138.67.255 212.138.70.0-212.138.85.255 212.138.88.0/24 212.138.92.0/24 212.138.94.0/24 212.138.96.0-212.138.104.255 212.138.108.0/24 212.138.115.0-212.138.121.255 212.138.125.0-212.138.128.255 212.138.130.0/24 212.138.132.0/24 212.138.134.0/24 212.138.139.0-212.138.140.255 212.138.147.0/24 212.138.150.0/24 212.138.153.0/24 212.138.155.0/24 212.138.157.0/24 212.138.160.0/24 212.138.162.0/24 212.138.164.0/24 212.138.166.0/24 212.138.168.0/24 212.138.170.0/24 212.138.172.0/24 212.138.175.0-212.138.177.255 212.138.180.0/23 212.138.183.0/24 212.138.185.0/24 212.138.188.0/24 212.138.192.0/24 212.138.194.0/24 212.138.196.0/24 212.138.201.0-212.138.203.255 212.138.206.0/24 212.138.210.0/24 212.138.250.0-212.138.253.255 IPv6: 2001:1490::/47 2001:1490:100::/46 2001:1490:106::-2001:1490:108:ffff:ffff:ffff:ffff:ffff 2001:1490:110::-2001:1490:116:ffff:ffff:ffff:ffff:ffff 2001:1497:2::/48 Signature Algorithm: sha256WithRSAEncryption ab:21:e1:26:cf:bb:26:4a:38:4e:84:36:27:92:81:e2:d0:32: 79:e4:bd:6c:87:d0:54:6d:ab:d6:15:1a:cd:65:49:f2:38:06: ca:89:f1:e6:b4:7f:84:85:7c:31:65:0d:85:1a:7d:31:fb:d9: 5f:c7:d4:98:3b:c3:f7:3b:28:0b:4e:34:e9:67:e5:59:24:ce: f7:63:dc:e9:08:a1:32:42:34:78:5e:05:5f:d7:6b:fd:15:96: 2b:9e:12:29:0f:c1:3d:4f:2c:3f:9e:0f:09:d4:0b:45:a0:cc: 98:2a:e7:ed:59:e6:df:5a:1d:0f:fc:12:40:b4:e2:8b:51:56: 32:b8:fc:7b:a4:8d:35:e8:5d:84:dd:ed:0c:cb:3f:c7:01:74: 35:ef:74:e6:a3:97:a6:fe:b3:03:66:8f:20:12:f3:2d:da:a6: 68:f7:e4:e3:88:80:ac:8b:f0:f5:98:bc:f8:f8:4d:07:65:8f: 1b:84:cb:c8:d3:57:7d:19:9a:5f:38:91:ca:0c:5e:a5:d9:48: 67:89:14:0d:ca:83:2b:a9:ff:26:6e:c6:d3:03:8a:b6:51:ea: 3b:8f:8a:70:b9:5a:9f:34:bb:2e:85:ae:6e:f6:7d:cd:1d:11: f2:f2:5a:f2:ec:b1:92:33:ae:6a:11:88:83:97:c0:3c:eb:c8: 8f:93:d0:89 -----BEGIN CERTIFICATE----- MIIHAjCCBeqgAwIBAgISAZsm83xXZQVX6rYnO746vHAfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NGRmNTJhZjQ2MGNhNmZhOGM5MjNhNDlmNWNiNzk1ZWE2 NzA3ZjcwHhcNMjUxMjE2MTEzNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDUwZDdmNTZmZGU3MGZmYWYxY2ExNGU0ODFkMGM0NjM3Mzc5ZTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SnkZLkeWYolZ5MzAa3UcRbHj+iy KLxb3BEpUMBtuQPVLzMZXc8oxEkzFb9dlXDDDHb4i+5sYHTELflx7We4RbKsYuvq UwDjwKp02r1w+H8ktO4Kb7TegQJsdkZ3GHwrQ4xHT77Bl8EYYQ+We/Qp7k3YQEZX ijWRUqvnOf/vrrExAQqf5nPpxMbGi6W0mrBWE3awvUMv8cNSWVi85RiXSbBw0j+V 7G7YM0acZE8dhQRF3YXe53HidFH8PyTsgY1bdt7DlydtG/MkzXbcVzTLAnjwhjry hPOEFwjc+3huzJVQAPoVyRtqFZRsEmIssPflooSE+Qq7KoLbVZDMsQbNDwIDAQAB o4IEDjCCBAowHQYDVR0OBBYEFNBQ1/Vv3nD/rxyhTkgdDEY3N54EMB8GA1UdIwQY MBaAFOhN9Sr0YMpvqMkjpJ9ct5XqZwf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUt OTRjMmZkYTM5ZWFkLzEvMEZEWDlXX2VjUC12SEtGT1NCME1SamMzbmdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUtOTRjMmZkYTM5ZWFk LzEvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICIgYIKwYBBQUHAQcBAf8EggIRMIICDTCCAb4EAgABMIIB tgMEAS1eDgMEAlvlNDAMAwQB1BoGAwQC1BoIMAwDBATUGhADBADUGiAwDAMEAtQa JAMEANQaMDAMAwQB1BoyAwQA1Bo2AwQA1Bo4AwQA1Bo6AwQA1Bo8MAwDBADUGj8D BAHUGkADBAHUGkQwDAMEANQaRwMEANQaSAMEANQaSgMEANQaTAMEANQaTgMEANSK KTAMAwQC1Io0AwQC1IpAMAwDBAHUikYDBAHUilQDBADUilgDBADUilwDBADUil4w DAMEBdSKYAMEANSKaAMEANSKbDAMAwQA1IpzAwQB1Ip4MAwDBADUin0DBADUioAD BADUioIDBADUioQDBADUioYwDAMEANSKiwMEANSKjAMEANSKkwMEANSKlgMEANSK mQMEANSKmwMEANSKnQMEANSKoAMEANSKogMEANSKpAMEANSKpgMEANSKqAMEANSK qgMEANSKrDAMAwQA1IqvAwQB1IqwAwQB1Iq0AwQA1Iq3AwQA1Iq5AwQA1Iq8AwQA 1IrAAwQA1IrCAwQA1IrEMAwDBADUiskDBALUisgDBADUis4DBADUitIwDAMEAdSK +gMEAdSK/DBJBAIAAjBDAwcBIAEUkAAAAwcCIAEUkAEAMBIDBwEgARSQAQYDBwAg ARSQAQgwEgMHBCABFJABEAMHACABFJABFgMHACABFJcAAjANBgkqhkiG9w0BAQsF AAOCAQEAqyHhJs+7Jko4ToQ2J5KB4tAyeeS9bIfQVG2r1hUazWVJ8jgGyonx5rR/ hIV8MWUNhRp9MfvZX8fUmDvD9zsoC0406WflWSTO92Pc6QihMkI0eF4FX9dr/RWW K54SKQ/BPU8sP54PCdQLRaDMmCrn7Vnm31odD/wSQLTii1FWMrj8e6SNNehdhN3t DMs/xwF0Ne905qOXpv6zA2aPIBLzLdqmaPfk44iArIvw9Zi8+PhNB2WPG4TLyNNX fRmaXziRygxepdlIZ4kUDcqDK6n/Jm7G0wOKtlHqO4+KcLlanzS7LoWubvZ9zR0R 8vJa8uyxkjOuahGIg5fAPOvIj5PQiQ== -----END CERTIFICATE-----Generated at Fri Dec 19 23:21:51 2025 by rpki-client