This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/5EjWFnoaIA_ec9mseXZyDFMcQ_A.roa File: 5EjWFnoaIA_ec9mseXZyDFMcQ_A.roa (raw, json) Hash identifier: 6qzHpGrxdIjiu8z1NvLGeZSk8yFo48qK9MNsjEijr88= Subject key identifier: E4:48:D6:16:7A:1A:20:0F:DE:73:D9:AC:79:76:72:0C:53:1C:43:F0 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 019B7CED95D19B2AF2890F1684885BFB7602 Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/5EjWFnoaIA_ec9mseXZyDFMcQ_A.roa Signing time: Fri 02 Jan 2026 04:18:23 +0000 ROA not before: Fri 02 Jan 2026 04:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1680 IP address blocks: 37.26.144.0/21 maxlen: 21 37.26.145.0/24 maxlen: 24 37.26.146.0/24 maxlen: 24 37.26.147.0/24 maxlen: 24 37.26.148.0/24 maxlen: 24 37.26.149.0/24 maxlen: 24 37.26.150.0/24 maxlen: 24 37.26.151.0/24 maxlen: 24 46.116.0.0/16 maxlen: 18 46.117.0.0/16 maxlen: 18 46.210.0.0/16 maxlen: 24 62.0.0.0/16 maxlen: 24 62.0.87.0/24 maxlen: 24 62.0.88.0/22 maxlen: 24 62.0.92.0/23 maxlen: 24 62.0.94.0/24 maxlen: 24 62.0.114.0/23 maxlen: 24 62.0.116.0/22 maxlen: 24 62.0.120.0/21 maxlen: 24 62.0.128.0/23 maxlen: 24 62.90.0.0/16 maxlen: 24 62.90.135.0/24 maxlen: 24 62.90.143.0/24 maxlen: 24 80.250.144.0/20 maxlen: 24 82.166.0.0/16 maxlen: 24 82.166.100.0/22 maxlen: 24 82.166.112.0/21 maxlen: 24 82.166.201.128/25 maxlen: 25 85.64.0.0/16 maxlen: 16 85.65.0.0/16 maxlen: 16 85.250.0.0/16 maxlen: 16 89.138.0.0/16 maxlen: 16 89.139.0.0/16 maxlen: 16 93.172.0.0/16 maxlen: 16 93.173.0.0/16 maxlen: 16 95.35.0.0/16 maxlen: 24 109.186.0.0/16 maxlen: 16 109.253.0.0/16 maxlen: 24 141.226.132.0/24 maxlen: 24 141.226.134.0/24 maxlen: 24 147.161.8.0/21 maxlen: 24 147.234.17.0/24 maxlen: 24 147.234.22.0/24 maxlen: 24 147.234.27.0/24 maxlen: 24 147.234.27.0/25 maxlen: 25 147.234.27.128/25 maxlen: 25 147.234.28.0/24 maxlen: 24 147.234.43.0/24 maxlen: 24 147.234.83.0/24 maxlen: 24 147.234.84.0/24 maxlen: 24 147.234.86.0/24 maxlen: 24 176.12.128.0/17 maxlen: 24 176.13.0.0/16 maxlen: 24 192.115.84.0/22 maxlen: 24 192.115.112.0/20 maxlen: 24 192.115.140.0/22 maxlen: 24 192.115.152.0/21 maxlen: 24 192.115.160.0/22 maxlen: 24 192.115.200.0/21 maxlen: 24 192.116.32.0/19 maxlen: 24 192.118.28.0/22 maxlen: 22 192.118.28.0/23 maxlen: 23 192.118.30.0/23 maxlen: 23 192.118.84.0/22 maxlen: 24 194.90.0.0/16 maxlen: 24 194.90.1.0/24 maxlen: 24 194.90.229.0/24 maxlen: 24 199.203.0.0/16 maxlen: 24 199.203.1.0/24 maxlen: 24 199.203.21.0/24 maxlen: 24 199.203.76.0/24 maxlen: 24 199.203.191.0/24 maxlen: 24 207.232.0.0/18 maxlen: 18 207.232.50.0/24 maxlen: 24 212.29.192.0/18 maxlen: 18 212.29.244.0/24 maxlen: 24 212.143.0.0/16 maxlen: 24 212.143.194.0/24 maxlen: 24 212.150.0.0/16 maxlen: 24 212.235.0.0/17 maxlen: 24 217.132.0.0/16 maxlen: 16 2001:4df0::/29 maxlen: 32 2001:4df0::/32 maxlen: 32 2001:4df1::/32 maxlen: 32 2001:4df2::/32 maxlen: 32 2001:4df3::/32 maxlen: 32 2001:4df4::/32 maxlen: 32 2001:4df5::/32 maxlen: 32 2001:4df6::/32 maxlen: 32 2001:4df7::/32 maxlen: 32 2a02:148::/29 maxlen: 32 2a02:148::/32 maxlen: 32 2a02:149::/32 maxlen: 32 2a02:14a::/32 maxlen: 32 2a02:14b::/32 maxlen: 32 2a02:14c::/32 maxlen: 32 2a02:14d::/32 maxlen: 32 2a02:14e::/32 maxlen: 32 2a02:14f::/32 maxlen: 32 2a03:c5c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:95:d1:9b:2a:f2:89:0f:16:84:88:5b:fb:76:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Jan 2 04:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e448d6167a1a200fde73d9ac7976720c531c43f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:26:11:0f:c7:fe:ab:ab:0a:f4:d6:49:5d:e6: ee:e7:23:c5:d0:2d:3a:b1:a2:2f:ad:e2:c2:4e:e2: a9:1b:d5:28:1a:08:d4:c2:52:dd:6b:30:71:88:33: 17:a0:85:d3:63:4d:46:30:e9:df:df:05:45:a6:6f: f3:06:c7:ef:b0:fe:3b:25:52:1d:d0:a8:b4:a0:da: 82:2e:29:aa:60:3f:42:ba:69:92:23:25:b9:2b:1a: 38:b8:6d:fc:25:33:35:7c:f3:c4:e1:23:dd:7b:33: c6:1c:ac:80:89:95:b7:22:41:c9:b1:6c:8e:1a:ad: 12:c6:e7:ad:68:3d:46:bc:8b:9b:57:15:37:df:8d: ce:13:5b:eb:19:55:ac:14:7c:1e:67:98:46:7b:a4: 32:ec:b1:98:3e:28:40:83:38:d1:8b:93:e3:7c:0d: bf:d9:0c:d1:a5:88:2f:3d:21:62:6a:01:ed:b6:81: e8:74:3a:35:18:b1:c5:95:a1:66:e5:bd:36:e8:c8: f5:09:30:26:82:8d:20:68:69:2b:9c:21:c2:29:18: c0:db:25:6b:0d:12:7f:9c:80:8b:d2:50:d6:77:9f: 98:e9:28:69:4d:83:ea:d4:97:63:74:14:2a:c1:a0: 3c:46:e9:5d:f4:47:1f:8f:ce:b0:49:74:da:cf:3c: a9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:48:D6:16:7A:1A:20:0F:DE:73:D9:AC:79:76:72:0C:53:1C:43:F0 X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/5EjWFnoaIA_ec9mseXZyDFMcQ_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.26.144.0/21 46.116.0.0/15 46.210.0.0/16 62.0.0.0/16 62.90.0.0/16 80.250.144.0/20 82.166.0.0/16 85.64.0.0/15 85.250.0.0/16 89.138.0.0/15 93.172.0.0/15 95.35.0.0/16 109.186.0.0/16 109.253.0.0/16 141.226.132.0/24 141.226.134.0/24 147.161.8.0/21 147.234.17.0/24 147.234.22.0/24 147.234.27.0-147.234.28.255 147.234.43.0/24 147.234.83.0-147.234.84.255 147.234.86.0/24 176.12.128.0-176.13.255.255 192.115.84.0/22 192.115.112.0/20 192.115.140.0/22 192.115.152.0-192.115.163.255 192.115.200.0/21 192.116.32.0/19 192.118.28.0/22 192.118.84.0/22 194.90.0.0/16 199.203.0.0/16 207.232.0.0/18 212.29.192.0/18 212.143.0.0/16 212.150.0.0/16 212.235.0.0/17 217.132.0.0/16 IPv6: 2001:4df0::/29 2a02:148::/29 2a03:c5c0::/32 Signature Algorithm: sha256WithRSAEncryption 58:36:12:ee:2f:29:99:df:d4:65:20:5f:62:b9:12:af:da:35: 85:5f:98:1f:15:e8:3f:45:b7:d6:72:66:20:27:ea:cb:c9:14: aa:a0:3e:de:3e:4e:36:4b:3c:df:96:07:e7:c2:f4:35:57:7d: 65:bc:7d:f9:23:56:d3:cf:85:9c:2f:6d:63:b1:4f:3c:76:00: eb:6b:b2:81:ed:78:94:ad:c6:54:9e:f7:3f:a1:2d:00:73:09: 4e:16:c9:2c:63:97:f2:9c:d7:44:e4:2e:14:b4:9a:16:37:e9: d2:ed:d8:28:ab:b0:e2:73:ac:1d:4f:50:b7:33:68:ea:c0:7c: a2:13:7d:8d:5d:df:0e:3f:87:80:04:01:fa:a2:08:17:1a:80: 76:d6:11:91:84:d1:e3:1d:0c:15:e8:ae:8c:87:e9:67:f1:c6: 33:a3:42:4e:d1:41:da:90:dc:0f:aa:83:d0:f9:b0:38:3e:bf: 81:11:de:99:3d:22:1f:7f:40:61:c2:61:5e:e8:05:1f:99:55: 1c:00:3d:db:22:2d:16:80:65:e2:dd:79:76:41:7b:33:70:d4: 62:43:74:0b:c7:f0:c2:49:0b:d2:05:b2:97:07:a0:c2:c9:6e: 74:a3:a5:a0:7e:a0:fc:24:e8:9e:66:56:02:b7:3e:1f:92:08: e7:c1:cf:fb -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgISAZt87ZXRmyryiQ8WhIhb+3YCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjYwMTAyMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDQ4ZDYxNjdhMWEyMDBmZGU3M2Q5YWM3OTc2NzIwYzUzMWM0M2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiYRD8f+q6sK9NZJXebu5yPF0C06 saIvreLCTuKpG9UoGgjUwlLdazBxiDMXoIXTY01GMOnf3wVFpm/zBsfvsP47JVId 0Ki0oNqCLimqYD9CummSIyW5Kxo4uG38JTM1fPPE4SPdezPGHKyAiZW3IkHJsWyO Gq0SxuetaD1GvIubVxU3343OE1vrGVWsFHweZ5hGe6Qy7LGYPihAgzjRi5PjfA2/ 2QzRpYgvPSFiagHttoHodDo1GLHFlaFm5b026Mj1CTAmgo0gaGkrnCHCKRjA2yVr DRJ/nICL0lDWd5+Y6ShpTYPq1JdjdBQqwaA8Ruld9Ecfj86wSXTazzypBQIDAQAB o4IDJzCCAyMwHQYDVR0OBBYEFORI1hZ6GiAP3nPZrHl2cgxTHEPwMB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvNUVqV0Zub2FJQV9lYzltc2VYWnlERk1jUV9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBOwYIKwYBBQUHAQcBAf8EggEqMIIBJjCCAQUEAgABMIH+ AwQDJRqQAwMBLnQDAwAu0gMDAD4AAwMAPloDBARQ+pADAwBSpgMDAVVAAwMAVfoD AwFZigMDAV2sAwMAXyMDAwBtugMDAG39AwQAjeKEAwQAjeKGAwQDk6EIAwQAk+oR AwQAk+oWMAwDBACT6hsDBACT6hwDBACT6iswDAMEAJPqUwMEAJPqVAMEAJPqVjAL AwQHsAyAAwMBsAwDBALAc1QDBATAc3ADBALAc4wwDAMEA8BzmAMEAsBzoAMEA8Bz yAMEBcB0IAMEAsB2HAMEAsB2VAMDAMJaAwMAx8sDBAbP6AADBAbUHcADAwDUjwMD ANSWAwQH1OsAAwMA2YQwGwQCAAIwFQMFAyABTfADBQMqAgFIAwUAKgPFwDANBgkq hkiG9w0BAQsFAAOCAQEAWDYS7i8pmd/UZSBfYrkSr9o1hV+YHxXoP0W31nJmICfq y8kUqqA+3j5ONks835YH58L0NVd9Zbx9+SNW08+FnC9tY7FPPHYA62uyge14lK3G VJ73P6EtAHMJThbJLGOX8pzXROQuFLSaFjfp0u3YKKuw4nOsHU9QtzNo6sB8ohN9 jV3fDj+HgAQB+qIIFxqAdtYRkYTR4x0MFeiujIfpZ/HGM6NCTtFB2pDcD6qD0Pmw OD6/gRHemT0iH39AYcJhXugFH5lVHAA92yItFoBl4t15dkF7M3DUYkN0C8fwwkkL 0gWylwegwsludKOloH6g/CTonmZWArc+H5II58HP+w== -----END CERTIFICATE-----Generated at Sun Jan 25 18:22:27 2026 by rpki-client