This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/tqRuH8AtUL10GIVamWVHWz8fxNg.roa File: tqRuH8AtUL10GIVamWVHWz8fxNg.roa (raw, json) Hash identifier: RZkT6lVI+WQmmrPn0pAsOsM6VyHGnWPmG3xanKfDovc= Subject key identifier: B6:A4:6E:1F:C0:2D:50:BD:74:18:85:5A:99:65:47:5B:3F:1F:C4:D8 Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2 Certificate serial: 019B76EAE340C4ED15CA38D14BC8A939CB1D Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/tqRuH8AtUL10GIVamWVHWz8fxNg.roa Signing time: Thu 01 Jan 2026 00:17:43 +0000 ROA not before: Thu 01 Jan 2026 00:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48011 IP address blocks: 5.172.177.0/24 maxlen: 24 45.89.236.0/22 maxlen: 24 45.93.168.0/22 maxlen: 24 45.93.168.0/24 maxlen: 24 45.252.180.0/23 maxlen: 23 45.252.180.0/24 maxlen: 24 45.252.181.0/24 maxlen: 24 45.252.182.0/23 maxlen: 23 45.252.182.0/24 maxlen: 24 45.252.183.0/24 maxlen: 24 62.204.58.0/24 maxlen: 24 77.87.122.0/24 maxlen: 24 87.236.161.0/24 maxlen: 24 91.247.188.0/24 maxlen: 24 103.5.203.0/24 maxlen: 24 103.92.118.0/23 maxlen: 24 103.130.145.0/24 maxlen: 24 103.130.147.0/24 maxlen: 24 103.215.238.0/23 maxlen: 24 110.172.145.0/24 maxlen: 24 185.104.189.0/24 maxlen: 24 185.182.105.0/24 maxlen: 24 185.211.79.0/24 maxlen: 24 185.217.143.0/24 maxlen: 24 185.227.136.0/24 maxlen: 24 185.227.137.0/24 maxlen: 24 185.227.138.0/24 maxlen: 24 185.227.139.0/24 maxlen: 24 193.163.72.0/24 maxlen: 24 213.217.31.0/24 maxlen: 24 213.232.203.0/24 maxlen: 24 2a0c:6600::/48 maxlen: 48 2a0c:6600:1::/48 maxlen: 48 2a0c:6600:2::/48 maxlen: 48 2a0c:6600:3::/48 maxlen: 48 2a0c:6600:4::/48 maxlen: 48 2a0c:6600:5::/48 maxlen: 48 2a0c:6600:6::/48 maxlen: 48 2a0c:6600:7::/48 maxlen: 48 2a0c:6600:8::/48 maxlen: 48 2a0c:6600:9::/48 maxlen: 48 2a0c:6600:10::/48 maxlen: 48 2a0c:6600:11::/48 maxlen: 48 2a0c:6600:12::/48 maxlen: 48 2a0c:6600:1000::/48 maxlen: 48 2a0c:6600:2000::/48 maxlen: 48 2a0c:6600:3000::/48 maxlen: 48 2a0c:6600:4000::/48 maxlen: 48 2a0c:6600:6000::/48 maxlen: 48 2a0c:6600:6600::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e3:40:c4:ed:15:ca:38:d1:4b:c8:a9:39:cb:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2 Validity Not Before: Jan 1 00:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6a46e1fc02d50bd7418855a9965475b3f1fc4d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:21:ca:b6:09:7f:ff:ed:4c:fc:07:8e:9f:a6: a3:85:58:0d:07:18:eb:1b:14:94:26:82:6e:80:15: ae:62:a4:b7:0a:c7:42:01:27:45:62:d1:90:6f:e2: 86:76:0d:5e:58:04:a3:5f:bf:5b:bf:08:d9:3f:4e: 65:64:c5:26:1c:c7:7e:4f:dc:34:07:06:35:a0:98: 0d:10:01:ec:17:15:19:50:04:dd:1c:2c:e9:ab:c0: 77:d0:87:cc:50:40:a6:e7:88:9b:aa:99:3f:b8:f0: 80:df:8e:85:4f:49:e2:a8:57:50:ce:a4:f7:3b:e5: 1b:d7:24:ac:c1:b5:50:0f:84:28:a5:af:e7:c5:36: a2:66:59:5f:07:75:f4:ae:9f:14:6d:44:20:0a:d0: 94:62:5b:66:1a:3e:23:18:c8:ad:9f:3c:e8:e3:84: b6:fc:06:d2:69:b8:42:ec:4c:d7:e9:d8:48:dd:a9: 75:c1:fb:d2:5e:8e:a6:5f:a5:45:7a:7d:bc:5c:53: a1:29:90:b0:48:56:47:53:6c:f1:0f:c1:75:e6:71: c2:11:b5:d4:23:d9:0d:36:69:43:f3:0f:6a:fe:59: 22:56:54:65:03:e6:b4:cd:82:1c:8c:13:fa:8e:3d: c9:b6:4c:df:f8:3a:53:5b:c7:bf:f8:0c:5a:66:6f: ec:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A4:6E:1F:C0:2D:50:BD:74:18:85:5A:99:65:47:5B:3F:1F:C4:D8 X509v3 Authority Key Identifier: keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/tqRuH8AtUL10GIVamWVHWz8fxNg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.177.0/24 45.89.236.0/22 45.93.168.0/22 45.252.180.0/22 62.204.58.0/24 77.87.122.0/24 87.236.161.0/24 91.247.188.0/24 103.5.203.0/24 103.92.118.0/23 103.130.145.0/24 103.130.147.0/24 103.215.238.0/23 110.172.145.0/24 185.104.189.0/24 185.182.105.0/24 185.211.79.0/24 185.217.143.0/24 185.227.136.0/22 193.163.72.0/24 213.217.31.0/24 213.232.203.0/24 IPv6: 2a0c:6600::-2a0c:6600:9:ffff:ffff:ffff:ffff:ffff 2a0c:6600:10::-2a0c:6600:12:ffff:ffff:ffff:ffff:ffff 2a0c:6600:1000::/48 2a0c:6600:2000::/48 2a0c:6600:3000::/48 2a0c:6600:4000::/48 2a0c:6600:6000::/48 2a0c:6600:6600::/48 Signature Algorithm: sha256WithRSAEncryption 5c:82:e6:ea:51:f2:f7:5a:a6:93:50:cb:33:22:ce:ea:8f:b8: 5d:54:90:17:2e:86:e6:a5:35:0e:f4:35:e4:93:ae:b9:f7:01: 56:70:28:16:3e:a6:6f:5d:f9:92:82:96:16:f8:92:90:77:dc: 9b:c3:0e:d3:ea:b6:22:23:9b:30:b2:1d:19:fc:24:4c:4b:e4: 6a:23:69:da:10:87:d7:a9:db:ed:cd:8b:b5:6d:f8:79:60:1a: 0c:5f:de:54:a0:bb:b7:ba:56:77:08:25:1c:54:a2:a7:73:88: 60:5d:cc:b0:d1:45:69:14:73:4c:0c:ae:d4:bf:3f:e0:bc:0c: 00:5b:2f:ee:86:78:52:35:7f:94:ac:52:a5:b2:a3:0b:82:a7: 78:4e:7b:98:18:55:6f:28:a8:75:09:f5:1e:d8:0c:77:05:46: 2d:1a:65:37:c0:bc:e9:b7:32:83:1a:12:ea:a9:fb:f3:d7:6d: ba:f6:54:16:14:75:d4:bf:57:b8:09:b4:9b:c6:8e:ed:8e:2e: cf:5a:be:3b:35:5e:42:a6:5a:89:83:76:1f:c6:f2:52:51:dd: e9:31:17:8f:d8:25:b9:8e:d5:77:ab:5e:14:5c:62:65:22:38: 1c:a7:4f:73:4a:bb:e5:af:df:e1:91:e4:be:1a:fd:d3:2c:e2: 3f:d2:6d:e4 -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgISAZt26uNAxO0VyjjRS8ipOcsdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1OWJkMWU4YzU4ZjY0MWJkOTQ0MzA1ZjExYzU0ZWZlNWYz YTBjZTIwHhcNMjYwMTAxMDAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmE0NmUxZmMwMmQ1MGJkNzQxODg1NWE5OTY1NDc1YjNmMWZjNGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCHKtgl//+1M/AeOn6ajhVgNBxjr GxSUJoJugBWuYqS3CsdCASdFYtGQb+KGdg1eWASjX79bvwjZP05lZMUmHMd+T9w0 BwY1oJgNEAHsFxUZUATdHCzpq8B30IfMUECm54ibqpk/uPCA346FT0niqFdQzqT3 O+Ub1ySswbVQD4Qopa/nxTaiZllfB3X0rp8UbUQgCtCUYltmGj4jGMitnzzo44S2 /AbSabhC7EzX6dhI3al1wfvSXo6mX6VFen28XFOhKZCwSFZHU2zxD8F15nHCEbXU I9kNNmlD8w9q/lkiVlRlA+a0zYIcjBP6jj3Jtkzf+DpTW8e/+AxaZm/shwIDAQAB o4IC8DCCAuwwHQYDVR0OBBYEFLakbh/ALVC9dBiFWpllR1s/H8TYMB8GA1UdIwQY MBaAFMWb0ejFj2Qb2UQwXxHFTv5fOgziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mZDg0NTctODEwZi00ZjdlLTllNTgt NTZjYzM5ZGI2ZWQ2LzEvdHFSdUg4QXRVTDEwR0lWYW1XVkhXejhmeE5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9mZDg0NTctODEwZi00ZjdlLTllNTgtNTZjYzM5ZGI2ZWQ2 LzEveFp2UjZNV1BaQnZaUkRCZkVjVk9fbDg2RE9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBBAYIKwYBBQUHAQcBAf8EgfQwgfEwgYsEAgABMIGEAwQA BayxAwQCLVnsAwQCLV2oAwQCLfy0AwQAPsw6AwQATVd6AwQAV+yhAwQAW/e8AwQA ZwXLAwQBZ1x2AwQAZ4KRAwQAZ4KTAwQBZ9fuAwQAbqyRAwQAuWi9AwQAubZpAwQA udNPAwQAudmPAwQCueOIAwQAwaNIAwQA1dkfAwQA1ejLMGEEAgACMFswDwMEASoM ZgMHASoMZgAACDASAwcEKgxmAAAQAwcAKgxmAAASAwcAKgxmABAAAwcAKgxmACAA AwcAKgxmADAAAwcAKgxmAEAAAwcAKgxmAGAAAwcAKgxmAGYAMA0GCSqGSIb3DQEB CwUAA4IBAQBcgubqUfL3WqaTUMszIs7qj7hdVJAXLobmpTUO9DXkk6659wFWcCgW PqZvXfmSgpYW+JKQd9ybww7T6rYiI5swsh0Z/CRMS+RqI2naEIfXqdvtzYu1bfh5 YBoMX95UoLu3ulZ3CCUcVKKnc4hgXcyw0UVpFHNMDK7Uvz/gvAwAWy/uhnhSNX+U rFKlsqMLgqd4TnuYGFVvKKh1CfUe2Ax3BUYtGmU3wLzptzKDGhLqqfvz12269lQW FHXUv1e4CbSbxo7tji7PWr47NV5CplqJg3YfxvJSUd3pMReP2CW5jtV3q14UXGJl Ijgcp09zSrvlr9/hkeS+Gv3TLOI/0m3k -----END CERTIFICATE-----Generated at Mon Jan 26 07:51:31 2026 by rpki-client