This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/cOaz0IYXStrL7djjwl4elHYWcxU.roa File: cOaz0IYXStrL7djjwl4elHYWcxU.roa (raw, json) Hash identifier: 3qJYmJj201m0YKbvW4jiIL0+QONvFeC93JZnyZr8gBU= Subject key identifier: 70:E6:B3:D0:86:17:4A:DA:CB:ED:D8:E3:C2:5E:1E:94:76:16:73:15 Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7 Certificate serial: 019B26F37C9BEA1EA2642D4D8F2F88A12ADC Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/cOaz0IYXStrL7djjwl4elHYWcxU.roa Signing time: Tue 16 Dec 2025 11:37:29 +0000 ROA not before: Tue 16 Dec 2025 11:37:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8895 IP address blocks: 45.94.15.0/24 maxlen: 24 91.229.52.0/22 maxlen: 22 212.26.0.0/17 maxlen: 17 212.26.6.0/23 maxlen: 24 212.26.7.0/24 maxlen: 24 212.26.8.0/22 maxlen: 24 212.26.16.0/24 maxlen: 24 212.26.17.0/24 maxlen: 24 212.26.18.0/24 maxlen: 24 212.26.19.0/24 maxlen: 24 212.26.19.20/30 maxlen: 30 212.26.20.0/24 maxlen: 24 212.26.21.0/24 maxlen: 24 212.26.22.0/24 maxlen: 24 212.26.23.0/24 maxlen: 24 212.26.24.0/21 maxlen: 24 212.26.26.0/23 maxlen: 24 212.26.28.0/23 maxlen: 24 212.26.32.0/24 maxlen: 24 212.26.36.0/24 maxlen: 25 212.26.37.0/24 maxlen: 25 212.26.38.0/24 maxlen: 25 212.26.39.0/24 maxlen: 25 212.26.40.0/24 maxlen: 24 212.26.41.0/24 maxlen: 24 212.26.42.0/24 maxlen: 24 212.26.43.0/24 maxlen: 24 212.26.44.0/24 maxlen: 24 212.26.45.0/24 maxlen: 24 212.26.46.0/23 maxlen: 24 212.26.48.0/24 maxlen: 24 212.26.50.0/23 maxlen: 24 212.26.52.0/24 maxlen: 24 212.26.53.0/24 maxlen: 24 212.26.54.0/24 maxlen: 24 212.26.56.0/24 maxlen: 24 212.26.58.0/24 maxlen: 24 212.26.60.0/24 maxlen: 24 212.26.63.0/24 maxlen: 24 212.26.64.0/24 maxlen: 24 212.26.65.0/24 maxlen: 24 212.26.68.0/23 maxlen: 24 212.26.71.0/24 maxlen: 24 212.26.72.0/24 maxlen: 25 212.26.74.0/24 maxlen: 25 212.26.78.0/24 maxlen: 24 212.138.0.0/16 maxlen: 16 212.138.41.0/24 maxlen: 25 212.138.52.0/22 maxlen: 24 212.138.56.0/21 maxlen: 24 212.138.64.0/22 maxlen: 24 212.138.70.0/23 maxlen: 24 212.138.70.0/24 maxlen: 24 212.138.71.0/24 maxlen: 24 212.138.72.0/22 maxlen: 24 212.138.76.0/22 maxlen: 24 212.138.80.0/23 maxlen: 23 212.138.82.0/24 maxlen: 24 212.138.83.0/24 maxlen: 24 212.138.84.0/23 maxlen: 24 212.138.88.0/24 maxlen: 25 212.138.92.0/24 maxlen: 24 212.138.94.0/24 maxlen: 24 212.138.96.0/21 maxlen: 24 212.138.97.0/24 maxlen: 24 212.138.98.0/23 maxlen: 23 212.138.104.0/24 maxlen: 24 212.138.108.0/24 maxlen: 24 212.138.115.0/24 maxlen: 24 212.138.116.0/24 maxlen: 24 212.138.117.0/24 maxlen: 24 212.138.118.0/24 maxlen: 24 212.138.119.0/24 maxlen: 24 212.138.120.0/24 maxlen: 24 212.138.121.0/24 maxlen: 24 212.138.125.0/24 maxlen: 25 212.138.126.0/24 maxlen: 25 212.138.127.0/24 maxlen: 25 212.138.128.0/24 maxlen: 24 212.138.130.0/24 maxlen: 24 212.138.132.0/24 maxlen: 24 212.138.134.0/24 maxlen: 24 212.138.139.0/24 maxlen: 24 212.138.140.0/24 maxlen: 24 212.138.147.0/24 maxlen: 24 212.138.150.0/24 maxlen: 24 212.138.153.0/24 maxlen: 24 212.138.155.0/24 maxlen: 25 212.138.157.0/24 maxlen: 24 212.138.160.0/24 maxlen: 24 212.138.162.0/24 maxlen: 24 212.138.164.0/24 maxlen: 25 212.138.166.0/24 maxlen: 24 212.138.168.0/24 maxlen: 24 212.138.170.0/24 maxlen: 25 212.138.172.0/24 maxlen: 24 212.138.175.0/24 maxlen: 25 212.138.176.0/24 maxlen: 24 212.138.177.0/24 maxlen: 24 212.138.180.0/24 maxlen: 24 212.138.181.0/24 maxlen: 25 212.138.183.0/24 maxlen: 25 212.138.185.0/24 maxlen: 24 212.138.188.0/24 maxlen: 25 212.138.194.0/24 maxlen: 24 212.138.196.0/24 maxlen: 24 212.138.201.0/24 maxlen: 24 212.138.202.0/24 maxlen: 24 212.138.203.0/24 maxlen: 24 212.138.206.0/24 maxlen: 24 212.138.210.0/24 maxlen: 24 212.138.210.0/28 maxlen: 28 212.138.250.0/24 maxlen: 24 212.138.251.0/24 maxlen: 24 212.138.252.0/24 maxlen: 24 212.138.253.0/24 maxlen: 24 2001:1490::/32 maxlen: 32 2001:1490::/48 maxlen: 48 2001:1490:0:800::/64 maxlen: 64 2001:1490:0:a00::/64 maxlen: 64 2001:1490:0:c00::/64 maxlen: 64 2001:1490:0:1000::/64 maxlen: 64 2001:1490:1::/48 maxlen: 48 2001:1490:1:800::/64 maxlen: 64 2001:1490:1:a00::/64 maxlen: 64 2001:1490:1:c00::/64 maxlen: 64 2001:1490:1:e00::/64 maxlen: 64 2001:1490:1:1000::/64 maxlen: 64 2001:1490:1:1200::/64 maxlen: 64 2001:1490:1:1600::/64 maxlen: 64 2001:1490:1:1a00::/64 maxlen: 64 2001:1490:1:2000::/64 maxlen: 64 2001:1490:100::/48 maxlen: 48 2001:1490:102::/48 maxlen: 48 2001:1490:103::/48 maxlen: 49 2001:1490:106::/48 maxlen: 48 2001:1490:107::/48 maxlen: 48 2001:1490:108::/48 maxlen: 48 2001:1490:110::/48 maxlen: 49 2001:1490:110:8000::/49 maxlen: 49 2001:1490:111::/48 maxlen: 48 2001:1490:112::/48 maxlen: 48 2001:1490:113::/48 maxlen: 48 2001:1490:114::/48 maxlen: 48 2001:1490:115::/48 maxlen: 50 2001:1490:116::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:f3:7c:9b:ea:1e:a2:64:2d:4d:8f:2f:88:a1:2a:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7 Validity Not Before: Dec 16 11:37:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=70e6b3d086174adacbedd8e3c25e1e9476167315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:42:1f:d2:5f:e0:e4:91:21:35:53:33:1c:9e: 4c:99:f8:ee:e4:86:57:19:f9:38:09:f9:4c:e3:c7: 70:14:98:30:e3:ef:a7:c2:b3:05:2d:bb:46:dc:a6: 3c:b9:7f:c9:5b:a9:28:87:f9:a7:50:3d:e1:1f:7c: 78:e1:6d:1a:4c:b0:30:e6:1c:24:a0:41:c1:5d:b3: a8:49:69:e6:36:37:74:13:ee:d8:b1:4e:e3:bd:16: 47:64:5d:a3:ec:2c:37:5a:61:2d:bf:32:6f:d0:62: 66:70:10:3f:79:2c:82:4f:a4:d1:92:6c:5d:95:9e: b6:86:14:ad:dd:93:57:e0:cd:a0:45:c0:af:2a:f8: ee:6a:23:d0:85:ec:65:d9:32:94:56:0d:4a:81:f5: 57:66:ac:c1:34:05:e0:b1:c8:a5:b5:bb:ff:bf:67: f5:6b:27:ad:d1:17:cd:de:e9:bb:b8:e6:8f:3e:a8: 1c:83:c4:b8:12:75:16:03:f5:4c:5f:f4:1f:8e:0c: a6:c0:6b:23:35:02:00:ed:40:8e:51:68:0f:71:e5: 27:da:dd:b8:f2:fd:c0:4e:af:0a:d9:e1:78:fe:cb: 58:b6:b0:be:06:6b:3f:cc:7d:4a:8c:54:4c:9e:01: 12:a4:b5:24:6b:5a:39:3c:ab:84:52:23:92:68:8f: ad:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E6:B3:D0:86:17:4A:DA:CB:ED:D8:E3:C2:5E:1E:94:76:16:73:15 X509v3 Authority Key Identifier: keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/cOaz0IYXStrL7djjwl4elHYWcxU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.15.0/24 91.229.52.0/22 212.26.0.0/17 212.138.0.0/16 IPv6: 2001:1490::/32 Signature Algorithm: sha256WithRSAEncryption a2:e4:04:d4:07:35:8c:8d:71:9b:c6:62:51:e7:4b:dc:c1:a8: 26:ed:0b:22:7b:99:7c:a2:a7:f8:aa:60:5f:97:49:08:bc:db: d7:fb:8e:c9:c8:63:8f:3f:44:5b:f7:b6:b9:01:c3:82:f0:63: 04:2e:31:8c:ae:8c:58:3e:6a:65:db:e9:5d:5d:8a:45:e3:64: 02:ec:af:29:fb:55:07:51:af:ba:44:8a:71:d6:1d:f0:19:ec: 78:cf:78:d9:ae:05:18:6f:e5:70:76:dd:9a:18:7b:f8:f7:01: ce:b9:2f:46:e7:ba:8e:2c:ea:4a:22:40:21:37:32:02:8d:48: eb:10:f3:a0:1d:43:e4:07:3a:0b:4f:be:ad:88:df:c3:08:e9: c5:1d:24:4a:38:71:bf:f8:42:59:30:53:74:86:6b:db:28:a2: 36:9b:88:06:a2:49:9a:54:22:26:2d:1e:d4:12:e9:59:c1:7f: 5c:e4:9a:8b:85:d0:24:8a:76:ea:de:8e:87:f9:ba:c1:d6:9b: 3b:ea:8f:d7:56:ab:23:a1:eb:54:fa:8c:cd:23:22:f8:f1:0e: 09:bc:44:5e:d4:2f:fd:84:e8:6a:8a:84:8e:ef:82:2d:3b:69: ee:a2:72:de:77:dd:fc:e1:3a:ee:41:d6:0b:c2:68:08:8c:98: 18:16:39:31 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZsm83yb6h6iZC1Njy+IoSrcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NGRmNTJhZjQ2MGNhNmZhOGM5MjNhNDlmNWNiNzk1ZWE2 NzA3ZjcwHhcNMjUxMjE2MTEzNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGU2YjNkMDg2MTc0YWRhY2JlZGQ4ZTNjMjVlMWU5NDc2MTY3MzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEIf0l/g5JEhNVMzHJ5Mmfju5IZX Gfk4CflM48dwFJgw4++nwrMFLbtG3KY8uX/JW6koh/mnUD3hH3x44W0aTLAw5hwk oEHBXbOoSWnmNjd0E+7YsU7jvRZHZF2j7Cw3WmEtvzJv0GJmcBA/eSyCT6TRkmxd lZ62hhSt3ZNX4M2gRcCvKvjuaiPQhexl2TKUVg1KgfVXZqzBNAXgsciltbv/v2f1 ayet0RfN3um7uOaPPqgcg8S4EnUWA/VMX/QfjgymwGsjNQIA7UCOUWgPceUn2t24 8v3ATq8K2eF4/stYtrC+Bms/zH1KjFRMngESpLUka1o5PKuEUiOSaI+txQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFHDms9CGF0ray+3Y48JeHpR2FnMVMB8GA1UdIwQY MBaAFOhN9Sr0YMpvqMkjpJ9ct5XqZwf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUt OTRjMmZkYTM5ZWFkLzEvY09hejBJWVhTdHJMN2RqandsNGVsSFlXY3hVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUtOTRjMmZkYTM5ZWFk LzEvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAdBAIAATAXAwQALV4PAwQC W+U0AwQH1BoAAwMA1IowDQQCAAIwBwMFACABFJAwDQYJKoZIhvcNAQELBQADggEB AKLkBNQHNYyNcZvGYlHnS9zBqCbtCyJ7mXyip/iqYF+XSQi829f7jsnIY48/RFv3 trkBw4LwYwQuMYyujFg+amXb6V1dikXjZALsryn7VQdRr7pEinHWHfAZ7HjPeNmu BRhv5XB23ZoYe/j3Ac65L0bnuo4s6koiQCE3MgKNSOsQ86AdQ+QHOgtPvq2I38MI 6cUdJEo4cb/4QlkwU3SGa9soojabiAaiSZpUIiYtHtQS6VnBf1zkmouF0CSKdure jof5usHWmzvqj9dWqyOh61T6jM0jIvjxDgm8RF7UL/2E6GqKhI7vgi07ae6ict53 3fzhOu5B1gvCaAiMmBgWOTE= -----END CERTIFICATE-----Generated at Sun Dec 21 12:55:05 2025 by rpki-client