This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/t5N2EoYfdm3nfI33nwVWMQWULVI.roa File: t5N2EoYfdm3nfI33nwVWMQWULVI.roa (raw, json) Hash identifier: 7mc6S3ILP8x3cFCCB2TIyYYGnYXqi7HLw7Wm6wHCt+8= Subject key identifier: B7:93:76:12:86:1F:76:6D:E7:7C:8D:F7:9F:05:56:31:05:94:2D:52 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12E7E36C8956E57DCC942E7EF64084 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/t5N2EoYfdm3nfI33nwVWMQWULVI.roa Signing time: Fri 02 Jan 2026 00:19:32 +0000 ROA not before: Fri 02 Jan 2026 00:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 46.245.144.0/21 maxlen: 21 78.110.128.0/20 maxlen: 20 91.216.229.0/24 maxlen: 24 138.187.0.0/16 maxlen: 19 138.188.0.0/16 maxlen: 24 138.190.0.0/16 maxlen: 16 164.128.0.0/16 maxlen: 24 185.39.92.0/22 maxlen: 22 185.84.76.0/22 maxlen: 24 185.106.64.0/22 maxlen: 24 188.92.48.0/21 maxlen: 21 193.5.0.0/24 maxlen: 24 193.5.3.0/24 maxlen: 24 193.5.4.0/23 maxlen: 24 193.5.6.0/23 maxlen: 23 193.5.20.0/24 maxlen: 24 193.5.29.0/24 maxlen: 24 193.5.36.0/24 maxlen: 24 193.5.38.0/24 maxlen: 24 193.5.52.0/24 maxlen: 24 193.5.59.0/24 maxlen: 24 193.5.61.0/24 maxlen: 24 193.5.63.0/24 maxlen: 24 193.5.224.0/20 maxlen: 22 193.47.232.0/24 maxlen: 24 193.134.36.0/22 maxlen: 24 193.134.248.0/23 maxlen: 24 193.134.255.0/24 maxlen: 24 193.135.0.0/23 maxlen: 24 193.135.3.0/24 maxlen: 24 193.135.26.0/23 maxlen: 23 193.135.100.0/24 maxlen: 24 193.135.111.0/24 maxlen: 24 193.135.128.0/22 maxlen: 24 193.135.132.0/24 maxlen: 24 193.135.133.0/24 maxlen: 24 193.135.136.0/24 maxlen: 24 193.135.140.0/24 maxlen: 24 193.135.142.0/23 maxlen: 24 193.135.143.0/24 maxlen: 24 193.135.144.0/23 maxlen: 24 193.135.148.0/23 maxlen: 24 193.135.148.0/24 maxlen: 24 193.135.173.0/24 maxlen: 24 193.135.214.0/23 maxlen: 24 193.135.218.0/24 maxlen: 24 193.135.255.0/24 maxlen: 24 193.222.64.0/19 maxlen: 19 193.223.16.0/20 maxlen: 20 193.223.32.0/19 maxlen: 19 193.246.0.0/23 maxlen: 24 193.246.8.0/22 maxlen: 22 193.246.16.0/21 maxlen: 24 193.246.32.0/20 maxlen: 20 193.246.32.0/21 maxlen: 24 193.246.40.0/21 maxlen: 21 193.246.48.0/23 maxlen: 24 193.246.50.0/24 maxlen: 24 193.246.56.0/24 maxlen: 24 193.246.57.0/24 maxlen: 24 193.246.99.0/24 maxlen: 24 193.246.100.0/24 maxlen: 24 193.246.104.0/24 maxlen: 24 193.246.105.0/24 maxlen: 24 193.246.113.0/24 maxlen: 24 193.246.127.0/24 maxlen: 24 193.246.202.0/23 maxlen: 24 193.246.244.0/24 maxlen: 24 193.246.248.0/22 maxlen: 24 193.247.36.0/22 maxlen: 24 193.247.40.0/24 maxlen: 24 193.247.41.0/24 maxlen: 24 193.247.42.0/24 maxlen: 24 193.247.43.0/24 maxlen: 24 193.247.44.0/22 maxlen: 24 193.247.86.0/24 maxlen: 24 193.247.90.0/24 maxlen: 24 193.247.104.0/23 maxlen: 23 193.247.151.0/24 maxlen: 24 193.247.166.0/23 maxlen: 24 193.247.168.0/21 maxlen: 21 193.247.176.0/22 maxlen: 22 193.247.193.0/24 maxlen: 24 193.247.212.0/24 maxlen: 24 193.247.217.0/24 maxlen: 24 193.247.218.0/23 maxlen: 23 193.247.224.0/21 maxlen: 24 193.247.244.0/23 maxlen: 24 193.247.246.0/24 maxlen: 24 193.247.247.0/24 maxlen: 24 193.247.250.0/24 maxlen: 24 193.247.255.0/24 maxlen: 24 194.6.160.0/19 maxlen: 24 194.11.96.0/20 maxlen: 20 194.11.144.0/21 maxlen: 21 194.209.0.0/16 maxlen: 24 195.35.121.0/24 maxlen: 24 195.65.0.0/16 maxlen: 24 195.144.32.0/19 maxlen: 24 195.176.128.0/19 maxlen: 24 195.176.192.0/19 maxlen: 24 212.117.96.0/19 maxlen: 19 212.243.0.0/16 maxlen: 24 217.192.0.0/15 maxlen: 24 2001:918::/32 maxlen: 48 2001:91a::/32 maxlen: 48 2001:91f::/32 maxlen: 32 2a01:8b00::/32 maxlen: 32 2a02:a90::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e7:e3:6c:89:56:e5:7d:cc:94:2e:7e:f6:40:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7937612861f766de77c8df79f05563105942d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:03:15:ab:dc:8b:07:1d:b2:c4:a6:e9:19:1c: 8f:7c:ee:75:75:5b:22:b7:b6:50:76:05:1a:cb:e3: b0:39:28:99:d6:03:e6:0c:b3:1c:6f:20:c8:94:62: bf:16:77:ad:8f:38:2c:21:eb:ac:bc:74:cb:a0:0d: 42:a9:d1:76:22:b3:be:e7:54:4e:ae:44:60:29:90: f2:e4:7e:e5:00:d6:8f:e0:a1:7d:4c:8b:e0:64:3f: 22:2c:37:93:e9:d0:c4:bc:3e:59:b7:46:22:9a:ca: e0:15:98:dd:59:d9:4e:4c:86:dd:88:d1:30:23:cd: fc:d4:f8:93:ad:12:fa:f3:da:19:c0:d3:94:bf:d5: e0:b5:85:63:a3:17:cb:a7:64:d9:a9:7f:f5:fb:0d: 02:fa:0f:09:02:ec:fd:25:bd:8a:45:18:1a:8c:aa: 72:21:cf:a4:15:ed:64:dc:47:0a:34:9a:26:24:33: 7f:26:06:c5:a8:49:5c:9e:9e:3d:d6:81:6e:f6:64: f7:12:a0:91:71:3d:86:02:11:95:d5:d7:db:d1:df: 1e:95:dc:9f:2b:88:6b:45:d1:d3:d5:52:4b:ab:ca: 4d:7f:e7:56:f0:23:30:70:a1:87:6e:9e:d4:cb:c6: 3c:d1:52:70:54:c5:f5:84:78:9e:00:74:f6:27:a5: 64:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:93:76:12:86:1F:76:6D:E7:7C:8D:F7:9F:05:56:31:05:94:2D:52 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/t5N2EoYfdm3nfI33nwVWMQWULVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.245.144.0/21 78.110.128.0/20 91.216.229.0/24 138.187.0.0-138.188.255.255 138.190.0.0/16 164.128.0.0/16 185.39.92.0/22 185.84.76.0/22 185.106.64.0/22 188.92.48.0/21 193.5.0.0/24 193.5.3.0-193.5.7.255 193.5.20.0/24 193.5.29.0/24 193.5.36.0/24 193.5.38.0/24 193.5.52.0/24 193.5.59.0/24 193.5.61.0/24 193.5.63.0/24 193.5.224.0/20 193.47.232.0/24 193.134.36.0/22 193.134.248.0/23 193.134.255.0-193.135.1.255 193.135.3.0/24 193.135.26.0/23 193.135.100.0/24 193.135.111.0/24 193.135.128.0-193.135.133.255 193.135.136.0/24 193.135.140.0/24 193.135.142.0-193.135.145.255 193.135.148.0/23 193.135.173.0/24 193.135.214.0/23 193.135.218.0/24 193.135.255.0/24 193.222.64.0/19 193.223.16.0-193.223.63.255 193.246.0.0/23 193.246.8.0/22 193.246.16.0/21 193.246.32.0-193.246.50.255 193.246.56.0/23 193.246.99.0-193.246.100.255 193.246.104.0/23 193.246.113.0/24 193.246.127.0/24 193.246.202.0/23 193.246.244.0/24 193.246.248.0/22 193.247.36.0-193.247.47.255 193.247.86.0/24 193.247.90.0/24 193.247.104.0/23 193.247.151.0/24 193.247.166.0-193.247.179.255 193.247.193.0/24 193.247.212.0/24 193.247.217.0-193.247.219.255 193.247.224.0/21 193.247.244.0/22 193.247.250.0/24 193.247.255.0/24 194.6.160.0/19 194.11.96.0/20 194.11.144.0/21 194.209.0.0/16 195.35.121.0/24 195.65.0.0/16 195.144.32.0/19 195.176.128.0/19 195.176.192.0/19 212.117.96.0/19 212.243.0.0/16 217.192.0.0/15 IPv6: 2001:918::/32 2001:91a::/32 2001:91f::/32 2a01:8b00::/32 2a02:a90::/32 Signature Algorithm: sha256WithRSAEncryption 7b:0b:85:42:65:d4:3a:5f:eb:a9:da:ba:62:7d:fd:64:9f:91: e7:f7:65:69:91:43:a4:06:9e:81:6e:e1:8e:b5:48:b3:a9:52: a8:20:36:2a:a9:de:c4:d8:9e:e2:e9:a7:fb:a3:4b:09:69:88: 33:a1:c6:a9:dd:dd:fe:e7:14:05:be:a5:39:08:c4:69:0f:c0: 55:f4:38:f7:16:03:a9:78:97:a0:7d:40:3e:3c:cc:17:27:8b: 66:cf:cf:6f:c6:04:73:bf:04:2e:34:ad:ac:0b:7a:78:16:1c: c7:75:67:d5:90:5e:fc:c3:6e:76:39:6d:ec:09:78:44:98:15: 3d:9a:c7:a6:cb:ef:e7:bf:92:86:ef:8d:97:2f:a6:b3:05:a0: 61:15:75:c9:b0:2f:c2:b1:e2:c7:d4:3f:ce:72:09:f6:99:c7: d4:46:4e:b9:34:e8:1d:a4:64:41:24:42:8a:47:cb:48:7c:54: dc:3b:cb:27:dd:bc:35:5e:cd:b4:30:39:df:23:74:17:2e:ff: 88:93:87:e1:58:dd:c1:b1:99:c9:db:10:32:a9:d4:48:67:7a: df:25:f2:20:f9:eb:64:14:f3:30:ff:97:21:15:f8:da:e6:71: 10:79:9d:32:09:56:dc:c8:36:16:6a:f2:5f:88:23:fa:b3:84: 32:24:a5:6e -----BEGIN CERTIFICATE----- MIIHSjCCBjKgAwIBAgISAZt8EufjbIlW5X3MlC5+9kCEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzkzNzYxMjg2MWY3NjZkZTc3YzhkZjc5ZjA1NTYzMTA1OTQyZDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAMVq9yLBx2yxKbpGRyPfO51dVsi t7ZQdgUay+OwOSiZ1gPmDLMcbyDIlGK/FnetjzgsIeusvHTLoA1CqdF2IrO+51RO rkRgKZDy5H7lANaP4KF9TIvgZD8iLDeT6dDEvD5Zt0YimsrgFZjdWdlOTIbdiNEw I8381PiTrRL689oZwNOUv9XgtYVjoxfLp2TZqX/1+w0C+g8JAuz9Jb2KRRgajKpy Ic+kFe1k3EcKNJomJDN/JgbFqElcnp491oFu9mT3EqCRcT2GAhGV1dfb0d8eldyf K4hrRdHT1VJLq8pNf+dW8CMwcKGHbp7Uy8Y80VJwVMX1hHieAHT2J6VkdQIDAQAB o4IEVjCCBFIwHQYDVR0OBBYEFLeTdhKGH3Zt53yN958FVjEFlC1SMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvdDVOMkVvWWZkbTNuZkkzM253VldNUVdVTFZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICagYIKwYBBQUHAQcBAf8EggJZMIICVTCCAiYEAgABMIIC HgMEAy71kAMEBE5ugAMEAFvY5TAKAwMAirsDAwCKvAMDAIq+AwMApIADBAK5J1wD BAK5VEwDBAK5akADBAO8XDADBADBBQAwDAMEAMEFAwMEA8EFAAMEAMEFFAMEAMEF HQMEAMEFJAMEAMEFJgMEAMEFNAMEAMEFOwMEAMEFPQMEAMEFPwMEBMEF4AMEAMEv 6AMEAsGGJAMEAcGG+DAMAwQAwYb/AwQBwYcAAwQAwYcDAwQBwYcaAwQAwYdkAwQA wYdvMAwDBAfBh4ADBAHBh4QDBADBh4gDBADBh4wwDAMEAcGHjgMEAcGHkAMEAcGH lAMEAMGHrQMEAcGH1gMEAMGH2gMEAMGH/wMEBcHeQDAMAwQEwd8QAwQGwd8AAwQB wfYAAwQCwfYIAwQDwfYQMAwDBAXB9iADBADB9jIDBAHB9jgwDAMEAMH2YwMEAMH2 ZAMEAcH2aAMEAMH2cQMEAMH2fwMEAcH2ygMEAMH29AMEAsH2+DAMAwQCwfckAwQE wfcgAwQAwfdWAwQAwfdaAwQBwfdoAwQAwfeXMAwDBAHB96YDBALB97ADBADB98ED BADB99QwDAMEAMH32QMEAsH32AMEA8H34AMEAsH39AMEAMH3+gMEAMH3/wMEBcIG oAMEBMILYAMEA8ILkAMDAMLRAwQAwyN5AwMAw0EDBAXDkCADBAXDsIADBAXDsMAD BAXUdWADAwDU8wMDAdnAMCkEAgACMCMDBQAgAQkYAwUAIAEJGgMFACABCR8DBQAq AYsAAwUAKgIKkDANBgkqhkiG9w0BAQsFAAOCAQEAewuFQmXUOl/rqdq6Yn39ZJ+R 5/dlaZFDpAaegW7hjrVIs6lSqCA2KqnexNie4umn+6NLCWmIM6HGqd3d/ucUBb6l OQjEaQ/AVfQ49xYDqXiXoH1APjzMFyeLZs/Pb8YEc78ELjStrAt6eBYcx3Vn1ZBe /MNudjlt7Al4RJgVPZrHpsvv57+Shu+Nly+mswWgYRV1ybAvwrHix9Q/znIJ9pnH 1EZOuTToHaRkQSRCikfLSHxU3DvLJ928NV7NtDA53yN0Fy7/iJOH4VjdwbGZydsQ MqnUSGd63yXyIPnrZBTzMP+XIRX42uZxEHmdMglW3Mg2FmryX4gj+rOEMiSlbg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:27 2026 by rpki-client