This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/mpmrecQwVOYmvfVxaJLiukg9_x4.roa File: mpmrecQwVOYmvfVxaJLiukg9_x4.roa (raw, json) Hash identifier: B1r+y3fZ4meytzh/wyEnCsVKQg/wjvPbZszMmoslI5g= Subject key identifier: 9A:99:AB:79:C4:30:54:E6:26:BD:F5:71:68:92:E2:BA:48:3D:FF:1E Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Certificate serial: 019B7E3888222FF436A7C00A4723E6DE30EA Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/mpmrecQwVOYmvfVxaJLiukg9_x4.roa Signing time: Fri 02 Jan 2026 10:19:52 +0000 ROA not before: Fri 02 Jan 2026 10:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50810 IP address blocks: 5.201.128.0/18 maxlen: 18 5.201.128.0/21 maxlen: 21 5.201.128.0/22 maxlen: 22 5.201.132.0/22 maxlen: 22 5.201.136.0/22 maxlen: 22 5.201.138.0/24 maxlen: 24 5.201.140.0/22 maxlen: 22 5.201.142.0/23 maxlen: 23 5.201.144.0/21 maxlen: 21 5.201.144.0/22 maxlen: 22 5.201.144.0/23 maxlen: 23 5.201.148.0/22 maxlen: 22 5.201.152.0/22 maxlen: 22 5.201.156.0/22 maxlen: 22 5.201.160.0/22 maxlen: 22 5.201.160.0/23 maxlen: 23 5.201.162.0/24 maxlen: 24 5.201.163.0/24 maxlen: 24 5.201.164.0/22 maxlen: 22 5.201.168.0/22 maxlen: 22 5.201.172.0/22 maxlen: 22 5.201.174.0/24 maxlen: 24 5.201.174.240/30 maxlen: 30 5.201.176.0/22 maxlen: 22 5.201.180.0/22 maxlen: 22 5.201.184.0/22 maxlen: 22 5.201.188.0/22 maxlen: 22 37.156.16.0/21 maxlen: 21 37.156.16.0/22 maxlen: 22 37.156.20.0/22 maxlen: 22 37.156.24.0/22 maxlen: 22 37.156.28.0/22 maxlen: 22 37.156.30.0/23 maxlen: 23 37.156.31.0/24 maxlen: 24 45.83.12.0/22 maxlen: 22 45.95.88.0/22 maxlen: 22 45.248.164.0/22 maxlen: 22 46.36.97.0/24 maxlen: 24 46.36.100.0/24 maxlen: 24 46.36.101.0/24 maxlen: 24 46.36.102.0/24 maxlen: 24 46.36.105.0/24 maxlen: 24 46.36.106.0/24 maxlen: 24 80.94.80.0/23 maxlen: 23 89.37.0.0/20 maxlen: 20 89.37.0.0/22 maxlen: 22 89.37.0.0/24 maxlen: 24 89.37.4.0/22 maxlen: 22 89.37.8.0/22 maxlen: 22 89.37.8.0/24 maxlen: 24 89.37.12.0/22 maxlen: 22 89.37.12.0/24 maxlen: 24 89.37.14.0/24 maxlen: 24 89.37.15.0/24 maxlen: 24 89.40.35.0/24 maxlen: 24 89.43.0.0/21 maxlen: 21 89.43.0.0/22 maxlen: 22 89.43.4.0/22 maxlen: 22 89.43.8.0/22 maxlen: 22 89.43.10.0/23 maxlen: 23 89.43.12.0/22 maxlen: 22 89.43.12.0/23 maxlen: 23 91.209.183.0/24 maxlen: 24 91.209.184.0/24 maxlen: 24 91.239.59.0/24 maxlen: 24 92.114.16.0/20 maxlen: 24 92.114.20.0/22 maxlen: 22 92.114.20.0/23 maxlen: 23 92.114.21.0/24 maxlen: 24 92.114.22.0/23 maxlen: 23 92.114.24.0/21 maxlen: 21 92.114.24.0/22 maxlen: 22 92.114.25.0/24 maxlen: 24 92.114.28.0/22 maxlen: 22 94.101.128.0/20 maxlen: 24 94.101.128.0/21 maxlen: 21 94.101.128.0/22 maxlen: 22 94.101.132.0/22 maxlen: 22 94.101.136.0/22 maxlen: 22 94.101.139.0/24 maxlen: 24 94.101.140.0/22 maxlen: 22 94.101.140.0/23 maxlen: 23 94.101.142.0/23 maxlen: 23 94.101.142.0/24 maxlen: 24 103.111.69.0/24 maxlen: 24 103.111.71.0/24 maxlen: 24 103.132.228.0/23 maxlen: 23 103.132.228.0/24 maxlen: 24 103.132.229.0/24 maxlen: 24 103.140.128.0/23 maxlen: 23 103.217.124.0/22 maxlen: 22 176.126.223.0/24 maxlen: 24 185.22.30.0/23 maxlen: 23 185.103.84.0/22 maxlen: 22 185.103.84.0/24 maxlen: 24 185.103.85.0/24 maxlen: 24 185.135.228.0/22 maxlen: 22 185.135.230.0/24 maxlen: 24 185.135.231.0/24 maxlen: 24 185.136.100.0/22 maxlen: 22 185.162.40.0/22 maxlen: 22 185.175.76.0/23 maxlen: 23 185.175.78.0/23 maxlen: 23 185.176.32.0/22 maxlen: 22 185.182.220.0/22 maxlen: 22 185.182.220.0/24 maxlen: 24 185.182.221.0/24 maxlen: 24 185.182.222.0/23 maxlen: 23 185.255.98.0/23 maxlen: 23 188.213.64.0/20 maxlen: 21 188.213.64.0/22 maxlen: 22 188.213.64.0/24 maxlen: 24 188.213.68.0/22 maxlen: 22 188.213.71.0/24 maxlen: 24 188.213.72.0/22 maxlen: 22 188.213.72.0/24 maxlen: 24 188.213.73.0/24 maxlen: 24 188.213.74.0/24 maxlen: 24 188.213.75.0/24 maxlen: 24 188.213.76.0/22 maxlen: 22 193.30.30.0/24 maxlen: 24 193.46.214.0/24 maxlen: 24 194.180.238.0/24 maxlen: 24 194.242.22.0/24 maxlen: 24 195.149.127.0/24 maxlen: 24 2a00:5ca0::/29 maxlen: 29 2a00:5ca0::/31 maxlen: 31 2a00:5ca0::/32 maxlen: 32 2a00:5ca2::/31 maxlen: 31 2a00:5ca4::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:88:22:2f:f4:36:a7:c0:0a:47:23:e6:de:30:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Validity Not Before: Jan 2 10:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a99ab79c43054e626bdf5716892e2ba483dff1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0a:5d:80:af:b3:77:9b:0c:0b:7a:88:8b:7d: 68:ff:d2:1c:94:e5:71:c6:b8:c6:bc:b1:e1:2b:e3: a6:b3:5c:8d:fc:c7:31:b3:78:d9:83:ae:f7:bc:2a: 79:3f:ba:be:ab:b6:15:9a:71:ae:25:ed:56:21:02: 20:12:cb:a3:12:54:45:36:e3:46:96:ea:1a:68:c0: 42:08:f2:41:2d:86:ca:9d:75:38:95:f5:bd:ea:50: 9f:db:70:c2:df:9a:df:bf:10:07:eb:fc:05:87:9b: 34:e3:a0:68:ee:55:be:c9:fd:d0:27:f5:48:23:c2: 2e:a3:96:15:0f:e3:55:f9:9a:c0:01:40:a4:c7:80: 50:ae:48:4a:1c:35:fd:6d:86:63:15:c9:7a:7e:7b: d9:f8:e0:26:da:cc:62:0c:e6:3c:40:47:f1:a7:3f: fb:ee:e6:8f:5a:af:c6:a2:15:23:9d:a4:8a:8b:d0: aa:15:c8:59:bb:67:a4:ee:6a:32:85:17:b9:18:01: df:aa:ee:44:22:5b:51:64:66:c3:21:c4:91:e9:bb: 95:79:db:82:55:de:10:c1:29:05:1f:a0:1b:77:16: 25:81:ea:70:5a:6c:2f:89:dd:5d:31:95:5c:fa:b7: 81:ab:b4:86:b9:17:08:1f:fb:42:aa:9f:7a:c4:ac: 19:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:99:AB:79:C4:30:54:E6:26:BD:F5:71:68:92:E2:BA:48:3D:FF:1E X509v3 Authority Key Identifier: keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/mpmrecQwVOYmvfVxaJLiukg9_x4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.201.128.0/18 37.156.16.0/20 45.83.12.0/22 45.95.88.0/22 45.248.164.0/22 46.36.97.0/24 46.36.100.0-46.36.102.255 46.36.105.0-46.36.106.255 80.94.80.0/23 89.37.0.0/20 89.40.35.0/24 89.43.0.0/20 91.209.183.0-91.209.184.255 91.239.59.0/24 92.114.16.0/20 94.101.128.0/20 103.111.69.0/24 103.111.71.0/24 103.132.228.0/23 103.140.128.0/23 103.217.124.0/22 176.126.223.0/24 185.22.30.0/23 185.103.84.0/22 185.135.228.0/22 185.136.100.0/22 185.162.40.0/22 185.175.76.0/22 185.176.32.0/22 185.182.220.0/22 185.255.98.0/23 188.213.64.0/20 193.30.30.0/24 193.46.214.0/24 194.180.238.0/24 194.242.22.0/24 195.149.127.0/24 IPv6: 2a00:5ca0::/29 Signature Algorithm: sha256WithRSAEncryption 16:21:4a:7c:15:9c:4a:f7:a0:a1:25:92:69:cb:fa:70:c3:a9: fe:83:4b:a7:94:b4:73:d1:17:8c:a9:ba:75:8e:5d:14:aa:32: 36:0e:5a:3b:dd:e6:fb:fa:6d:73:4b:5c:84:dd:e7:24:64:c5: 20:bf:aa:03:1f:11:e8:b6:b7:c9:24:31:10:96:82:85:be:2a: 83:39:e7:45:98:07:d9:70:04:18:57:70:b8:c4:6a:2a:f3:d7: 25:85:63:c4:c9:7f:a7:17:45:c8:24:dd:44:ec:0b:57:e0:f7: 0d:26:be:8e:09:2e:f7:bd:3a:50:d6:dc:89:d4:1f:1a:ac:68: 3e:d0:fb:0b:2a:b7:e9:15:78:ba:c7:32:e8:55:65:fe:17:23: df:25:76:e7:ea:40:0c:73:84:5b:43:b4:b4:bf:22:c4:71:65: cd:85:59:46:d0:03:80:96:59:bd:41:e6:70:0c:b2:39:1e:a0: 7a:d1:44:97:d3:c0:73:7d:69:a2:dc:cd:b1:58:8a:b8:61:33: 22:eb:bb:82:a6:5c:f7:27:e7:0c:6f:93:61:48:04:ba:d9:03: 10:07:35:85:9d:b9:32:93:e8:ed:05:20:3d:e8:a2:76:6f:17: 67:bc:a0:1c:ae:cb:c4:c1:e1:46:f4:d8:96:ea:d0:20:6d:24: e5:3c:7f:91 -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgISAZt+OIgiL/Q2p8AKRyPm3jDqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4 OTk1YWIwHhcNMjYwMTAyMTAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTk5YWI3OWM0MzA1NGU2MjZiZGY1NzE2ODkyZTJiYTQ4M2RmZjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQpdgK+zd5sMC3qIi31o/9IclOVx xrjGvLHhK+Oms1yN/Mcxs3jZg673vCp5P7q+q7YVmnGuJe1WIQIgEsujElRFNuNG luoaaMBCCPJBLYbKnXU4lfW96lCf23DC35rfvxAH6/wFh5s046Bo7lW+yf3QJ/VI I8Iuo5YVD+NV+ZrAAUCkx4BQrkhKHDX9bYZjFcl6fnvZ+OAm2sxiDOY8QEfxpz/7 7uaPWq/GohUjnaSKi9CqFchZu2ek7moyhRe5GAHfqu5EIltRZGbDIcSR6buVeduC Vd4QwSkFH6AbdxYlgepwWmwvid1dMZVc+reBq7SGuRcIH/tCqp96xKwZLwIDAQAB o4IDEDCCAwwwHQYDVR0OBBYEFJqZq3nEMFTmJr31cWiS4rpIPf8eMB8GA1UdIwQY MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt NDBiNmQ2N2ZjZDk0LzEvbXBtcmVjUXdWT1ltdmZWeGFKTGl1a2c5X3g0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0 LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBJAYIKwYBBQUHAQcBAf8EggETMIIBDzCB/QQCAAEwgfYD BAYFyYADBAQlnBADBAItUwwDBAItX1gDBAIt+KQDBAAuJGEwDAMEAi4kZAMEAC4k ZjAMAwQALiRpAwQALiRqAwQBUF5QAwQEWSUAAwQAWSgjAwQEWSsAMAwDBABb0bcD BABb0bgDBABb7zsDBARcchADBAReZYADBABnb0UDBABnb0cDBAFnhOQDBAFnjIAD BAJn2XwDBACwft8DBAG5Fh4DBAK5Z1QDBAK5h+QDBAK5iGQDBAK5oigDBAK5r0wD BAK5sCADBAK5ttwDBAG5/2IDBAS81UADBADBHh4DBADBLtYDBADCtO4DBADC8hYD BADDlX8wDQQCAAIwBwMFAyoAXKAwDQYJKoZIhvcNAQELBQADggEBABYhSnwVnEr3 oKElkmnL+nDDqf6DS6eUtHPRF4ypunWOXRSqMjYOWjvd5vv6bXNLXITd5yRkxSC/ qgMfEei2t8kkMRCWgoW+KoM550WYB9lwBBhXcLjEairz1yWFY8TJf6cXRcgk3UTs C1fg9w0mvo4JLve9OlDW3InUHxqsaD7Q+wsqt+kVeLrHMuhVZf4XI98ldufqQAxz hFtDtLS/IsRxZc2FWUbQA4CWWb1B5nAMsjkeoHrRRJfTwHN9aaLczbFYirhhMyLr u4KmXPcn5wxvk2FIBLrZAxAHNYWduTKT6O0FID3oonZvF2e8oByuy8TB4Ub02Jbq 0CBtJOU8f5E= -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:38 2026 by rpki-client