This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/QkhImUlabBvoP-47i6jR8V2oEgM.roa File: QkhImUlabBvoP-47i6jR8V2oEgM.roa (raw, json) Hash identifier: aS8EXv5nV7k0kw18tli5p9ISnbsphNVdHneKw7IidrU= Subject key identifier: 42:48:48:99:49:5A:6C:1B:E8:3F:EE:3B:8B:A8:D1:F1:5D:A8:12:03 Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B7758F5C9C473562DACF318C4DEFD15AC Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/QkhImUlabBvoP-47i6jR8V2oEgM.roa Signing time: Thu 01 Jan 2026 02:17:57 +0000 ROA not before: Thu 01 Jan 2026 02:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43939 IP address blocks: 5.57.128.0/18 maxlen: 20 62.69.192.0/18 maxlen: 18 77.87.136.0/21 maxlen: 24 77.88.128.0/18 maxlen: 24 78.9.32.0/21 maxlen: 21 78.11.243.0/24 maxlen: 24 80.238.64.0/19 maxlen: 25 83.142.56.0/21 maxlen: 21 83.143.96.0/21 maxlen: 24 84.38.96.0/20 maxlen: 24 84.234.0.0/20 maxlen: 24 84.234.32.0/20 maxlen: 24 85.202.208.0/20 maxlen: 24 87.99.0.0/18 maxlen: 24 87.99.32.0/19 maxlen: 19 87.239.72.0/21 maxlen: 21 89.187.224.0/19 maxlen: 24 89.200.152.0/21 maxlen: 24 90.156.0.0/17 maxlen: 24 91.142.192.0/20 maxlen: 24 91.145.128.0/18 maxlen: 25 91.146.192.0/18 maxlen: 24 91.150.128.0/19 maxlen: 24 91.195.232.0/23 maxlen: 24 91.202.172.0/22 maxlen: 24 91.215.228.0/22 maxlen: 24 91.220.225.0/24 maxlen: 24 93.181.128.0/18 maxlen: 24 95.155.64.0/18 maxlen: 24 178.214.128.0/19 maxlen: 19 178.252.0.0/18 maxlen: 25 185.2.36.0/22 maxlen: 24 188.114.95.0/24 maxlen: 24 193.19.122.0/23 maxlen: 24 193.58.232.0/24 maxlen: 24 193.105.180.0/24 maxlen: 24 193.107.196.0/22 maxlen: 22 193.138.140.0/22 maxlen: 22 193.151.64.0/22 maxlen: 24 193.151.64.0/23 maxlen: 23 193.227.100.0/24 maxlen: 24 193.238.40.0/22 maxlen: 24 193.239.224.0/23 maxlen: 24 194.6.204.0/22 maxlen: 24 194.33.185.0/24 maxlen: 24 194.146.128.0/22 maxlen: 24 194.150.238.0/23 maxlen: 24 194.187.180.0/22 maxlen: 24 194.242.0.0/23 maxlen: 24 195.74.56.0/22 maxlen: 24 195.128.180.0/23 maxlen: 24 195.222.100.0/22 maxlen: 24 195.225.248.0/22 maxlen: 24 217.197.64.0/20 maxlen: 24 2a00:1d18::/32 maxlen: 32 2a02:2270::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f5:c9:c4:73:56:2d:ac:f3:18:c4:de:fd:15:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42484899495a6c1be83fee3b8ba8d1f15da81203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ea:16:76:bb:82:a7:c4:0a:12:6c:cd:6a:2b: e1:72:1f:1b:f5:54:d6:2b:5b:be:96:b1:95:08:42: 1b:74:5a:fb:02:e1:b5:ef:d6:c9:6e:cb:5a:4c:be: 68:c3:b5:25:38:4b:b4:39:ac:46:54:39:47:f3:86: c5:52:3f:d8:42:38:56:c1:01:6a:f2:54:3f:b5:8f: f4:33:b3:d4:95:6a:89:00:6a:f2:eb:6d:c0:e5:f2: 04:24:d5:63:f5:e3:52:93:4c:c3:b0:44:73:54:d9: 98:92:11:35:bf:7b:24:2b:d2:26:7c:5c:84:0a:5b: db:04:71:23:f9:e1:72:94:97:9b:99:33:72:7c:ed: 98:e8:d4:95:30:a7:62:13:35:b3:80:d6:c9:4e:37: 77:1f:de:83:8c:79:14:45:17:c9:da:e1:97:d1:25: 2c:be:87:ff:6d:51:03:f9:1e:e5:9a:c4:01:37:5b: 26:58:2f:20:dc:46:01:7a:dd:c5:d9:61:81:a8:5a: c1:62:29:46:a1:46:03:00:68:95:45:69:8d:c4:55: 07:b3:da:5e:91:f8:ec:9a:45:1f:27:17:5e:f7:a5: bb:c9:34:20:5b:3e:13:4e:a1:c7:c8:e0:45:c5:1c: 06:75:0f:e8:9c:8d:0e:84:2f:39:3a:9a:00:6d:4c: f0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:48:48:99:49:5A:6C:1B:E8:3F:EE:3B:8B:A8:D1:F1:5D:A8:12:03 X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/QkhImUlabBvoP-47i6jR8V2oEgM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.57.128.0/18 62.69.192.0/18 77.87.136.0/21 77.88.128.0/18 78.9.32.0/21 78.11.243.0/24 80.238.64.0/19 83.142.56.0/21 83.143.96.0/21 84.38.96.0/20 84.234.0.0/20 84.234.32.0/20 85.202.208.0/20 87.99.0.0/18 87.239.72.0/21 89.187.224.0/19 89.200.152.0/21 90.156.0.0/17 91.142.192.0/20 91.145.128.0/18 91.146.192.0/18 91.150.128.0/19 91.195.232.0/23 91.202.172.0/22 91.215.228.0/22 91.220.225.0/24 93.181.128.0/18 95.155.64.0/18 178.214.128.0/19 178.252.0.0/18 185.2.36.0/22 188.114.95.0/24 193.19.122.0/23 193.58.232.0/24 193.105.180.0/24 193.107.196.0/22 193.138.140.0/22 193.151.64.0/22 193.227.100.0/24 193.238.40.0/22 193.239.224.0/23 194.6.204.0/22 194.33.185.0/24 194.146.128.0/22 194.150.238.0/23 194.187.180.0/22 194.242.0.0/23 195.74.56.0/22 195.128.180.0/23 195.222.100.0/22 195.225.248.0/22 217.197.64.0/20 IPv6: 2a00:1d18::/32 2a02:2270::/32 Signature Algorithm: sha256WithRSAEncryption 30:62:df:92:e7:b7:33:cd:3a:35:60:a2:27:14:aa:63:40:bb: 75:a3:99:b6:e3:e8:b8:0c:31:08:06:06:59:55:7d:0d:cd:c5: 07:c6:6e:90:f0:ae:1a:5d:96:01:98:45:fa:63:93:2a:97:e6: 99:df:07:ec:26:03:f9:fb:fe:2b:19:c1:06:be:3c:96:5e:e7: 06:4b:33:63:a6:5c:e4:18:2f:c2:7f:63:80:80:2f:2b:48:7d: f0:55:b6:ee:94:ab:06:35:62:09:6a:c2:c2:41:c0:4a:83:6a: 01:52:f3:ea:82:6c:97:f0:1f:fa:04:7b:97:ec:3e:aa:e2:1d: 85:12:75:3e:1f:13:2a:8e:6b:94:34:fc:61:c5:f2:b7:d5:05: 8c:8e:65:ab:7d:82:fb:ed:ab:41:1e:93:3a:7b:40:ea:e9:64: ec:71:0b:94:f3:62:b3:bb:5e:f3:48:a1:dc:79:33:80:3a:3a: 49:c6:69:f0:99:d8:49:f3:cf:8f:8b:29:02:d3:c2:e8:58:ce: 86:ed:53:5c:c7:72:3b:82:8e:60:5f:1f:8a:a6:28:fa:fc:43: 1c:47:f9:f3:a4:81:bc:37:dc:78:26:48:08:ef:7b:d2:86:c6: b6:fb:5c:df:29:13:58:c2:77:eb:0e:8b:a2:61:1d:f9:ff:a9: a5:a1:4d:6b -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgISAZt3WPXJxHNWLazzGMTe/RWsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjQ4NDg5OTQ5NWE2YzFiZTgzZmVlM2I4YmE4ZDFmMTVkYTgxMjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleoWdruCp8QKEmzNaivhch8b9VTW K1u+lrGVCEIbdFr7AuG179bJbstaTL5ow7UlOEu0OaxGVDlH84bFUj/YQjhWwQFq 8lQ/tY/0M7PUlWqJAGry623A5fIEJNVj9eNSk0zDsERzVNmYkhE1v3skK9ImfFyE ClvbBHEj+eFylJebmTNyfO2Y6NSVMKdiEzWzgNbJTjd3H96DjHkURRfJ2uGX0SUs vof/bVED+R7lmsQBN1smWC8g3EYBet3F2WGBqFrBYilGoUYDAGiVRWmNxFUHs9pe kfjsmkUfJxde96W7yTQgWz4TTqHHyOBFxRwGdQ/onI0OhC85OpoAbUzwUwIDAQAB o4IDWzCCA1cwHQYDVR0OBBYEFEJISJlJWmwb6D/uO4uo0fFdqBIDMB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvUWtoSW1VbGFiQnZvUC00N2k2alI4VjJvRWdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBbwYIKwYBBQUHAQcBAf8EggFeMIIBWjCCAUAEAgABMIIB OAMEBgU5gAMEBj5FwAMEA01XiAMEBk1YgAMEA04JIAMEAE4L8wMEBVDuQAMEA1OO OAMEA1OPYAMEBFQmYAMEBFTqAAMEBFTqIAMEBFXK0AMEBldjAAMEA1fvSAMEBVm7 4AMEA1nImAMEB1qcAAMEBFuOwAMEBluRgAMEBluSwAMEBVuWgAMEAVvD6AMEAlvK rAMEAlvX5AMEAFvc4QMEBl21gAMEBl+bQAMEBbLWgAMEBrL8AAMEArkCJAMEALxy XwMEAcETegMEAME66AMEAMFptAMEAsFrxAMEAsGKjAMEAsGXQAMEAMHjZAMEAsHu KAMEAcHv4AMEAsIGzAMEAMIhuQMEAsKSgAMEAcKW7gMEAsK7tAMEAcLyAAMEAsNK OAMEAcOAtAMEAsPeZAMEAsPh+AMEBNnFQDAUBAIAAjAOAwUAKgAdGAMFACoCInAw DQYJKoZIhvcNAQELBQADggEBADBi35LntzPNOjVgoicUqmNAu3Wjmbbj6LgMMQgG BllVfQ3NxQfGbpDwrhpdlgGYRfpjkyqX5pnfB+wmA/n7/isZwQa+PJZe5wZLM2Om XOQYL8J/Y4CALytIffBVtu6UqwY1YglqwsJBwEqDagFS8+qCbJfwH/oEe5fsPqri HYUSdT4fEyqOa5Q0/GHF8rfVBYyOZat9gvvtq0Eekzp7QOrpZOxxC5TzYrO7XvNI odx5M4A6OknGafCZ2Enzz4+LKQLTwuhYzobtU1zHcjuCjmBfH4qmKPr8QxxH+fOk gbw33HgmSAjve9KGxrb7XN8pE1jCd+sOi6JhHfn/qaWhTWs= -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:21 2026 by rpki-client