This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/qS5aITzh8bm2lSNZ9w-1v_OwEkM.roa File: qS5aITzh8bm2lSNZ9w-1v_OwEkM.roa (raw, json) Hash identifier: nyRJgnJF5E43/9qDPBbeFHXa4kSfjJ0ENxyk0mTysYQ= Subject key identifier: A9:2E:5A:21:3C:E1:F1:B9:B6:95:23:59:F7:0F:B5:BF:F3:B0:12:43 Certificate issuer: /CN=f7aa039b886b226578bdb6a42781bf59044bb138 Certificate serial: 019B7E380D163FBFC7DF1F5A147AF14BE629 Authority key identifier: F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/qS5aITzh8bm2lSNZ9w-1v_OwEkM.roa Signing time: Fri 02 Jan 2026 10:19:21 +0000 ROA not before: Fri 02 Jan 2026 10:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24739 IP address blocks: 37.143.16.0/20 maxlen: 20 46.228.0.0/20 maxlen: 20 46.252.240.0/20 maxlen: 20 46.252.254.0/24 maxlen: 24 62.181.33.0/24 maxlen: 24 62.181.40.0/22 maxlen: 24 62.181.40.0/24 maxlen: 24 62.181.45.0/24 maxlen: 24 62.181.52.0/24 maxlen: 24 77.232.50.0/23 maxlen: 23 77.232.52.0/22 maxlen: 22 77.232.56.0/21 maxlen: 21 79.99.104.0/21 maxlen: 21 79.99.104.0/24 maxlen: 24 81.23.96.0/19 maxlen: 19 81.24.112.0/20 maxlen: 20 84.47.137.0/24 maxlen: 25 84.47.188.0/24 maxlen: 25 84.242.4.0/24 maxlen: 24 93.174.240.0/21 maxlen: 21 176.32.176.0/20 maxlen: 20 178.238.16.0/20 maxlen: 20 185.7.146.0/24 maxlen: 24 185.7.147.0/24 maxlen: 24 185.58.248.0/24 maxlen: 24 185.124.188.0/22 maxlen: 25 212.59.112.0/22 maxlen: 22 213.135.68.0/24 maxlen: 25 213.135.75.0/24 maxlen: 25 213.135.76.0/24 maxlen: 25 213.135.78.0/24 maxlen: 25 213.135.93.0/24 maxlen: 25 213.208.185.0/24 maxlen: 25 217.197.224.0/20 maxlen: 20 2a00:1020::/32 maxlen: 32 2a00:1020:7::/48 maxlen: 48 2a00:1020:b::/48 maxlen: 48 2a00:1020:c::/48 maxlen: 48 2a00:1020:d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:0d:16:3f:bf:c7:df:1f:5a:14:7a:f1:4b:e6:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7aa039b886b226578bdb6a42781bf59044bb138 Validity Not Before: Jan 2 10:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a92e5a213ce1f1b9b6952359f70fb5bff3b01243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:86:53:7d:b7:f3:ee:7a:09:b2:b0:f1:40:fa: 0f:ca:00:f8:bd:11:a5:50:71:30:72:2c:7f:c5:bf: 4a:05:67:fe:5d:09:ad:40:51:ea:8a:f5:72:36:0c: 50:df:b0:dc:fa:15:cf:44:8e:48:3f:95:0d:60:7c: e0:da:83:0a:d5:57:d5:8b:13:68:2c:de:09:e0:c8: e5:77:27:cc:49:39:f8:78:19:4c:59:87:f5:af:17: 62:e4:b5:1c:86:64:fd:66:8d:df:d2:8a:db:15:3b: 9f:d6:7c:60:41:71:5b:c8:d2:8f:70:00:ff:32:fd: 7f:e4:fe:c3:63:6f:50:2a:d1:e5:e4:89:f7:87:22: 9a:42:9d:4b:a6:98:d0:3a:87:44:2a:fb:2e:f2:6c: 3f:4a:40:29:7f:c1:20:01:b8:94:06:a0:1d:c9:e1: ad:76:19:b3:80:0b:23:cd:cf:05:d6:c9:10:1b:2e: 7c:7e:7b:87:a8:db:4e:1d:63:91:91:d7:32:f4:b2: a7:5f:80:d5:d8:46:96:03:67:f7:e5:a9:4b:f2:a9: 21:9f:8e:c9:c8:93:9e:50:81:f9:5b:48:1f:31:77: 9b:08:af:4d:ef:5d:fa:67:0e:6d:2d:8d:bf:74:b0: b9:eb:a8:62:74:89:64:38:a9:0a:98:34:ab:61:5f: b4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2E:5A:21:3C:E1:F1:B9:B6:95:23:59:F7:0F:B5:BF:F3:B0:12:43 X509v3 Authority Key Identifier: keyid:F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/qS5aITzh8bm2lSNZ9w-1v_OwEkM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.143.16.0/20 46.228.0.0/20 46.252.240.0/20 62.181.33.0/24 62.181.40.0/22 62.181.45.0/24 62.181.52.0/24 77.232.50.0-77.232.63.255 79.99.104.0/21 81.23.96.0/19 81.24.112.0/20 84.47.137.0/24 84.47.188.0/24 84.242.4.0/24 93.174.240.0/21 176.32.176.0/20 178.238.16.0/20 185.7.146.0/23 185.58.248.0/24 185.124.188.0/22 212.59.112.0/22 213.135.68.0/24 213.135.75.0-213.135.76.255 213.135.78.0/24 213.135.93.0/24 213.208.185.0/24 217.197.224.0/20 IPv6: 2a00:1020::/32 Signature Algorithm: sha256WithRSAEncryption a8:d0:4c:35:48:ad:bf:b6:29:38:58:6a:0b:9a:62:e6:cb:ba: cb:63:1b:27:6f:f4:5c:93:7a:b8:d7:ba:3d:89:9e:9a:b3:1d: 0b:94:40:a2:ed:d5:55:a4:8a:2b:07:9d:da:ac:1b:3b:b6:45: db:85:f5:aa:1f:e9:d3:36:f9:86:1c:04:05:f3:c1:42:c8:c3: 79:ab:48:94:f1:bb:c2:69:5e:3c:f5:6d:d9:3f:7f:ab:3c:e5: b3:a4:d7:40:fe:22:77:e3:35:34:61:bc:93:ae:b7:5a:46:46: 6f:7c:ab:9b:ae:cf:8b:94:2a:01:d1:7d:6c:8d:d1:c0:6d:ea: 2c:da:59:03:a4:0f:3f:97:35:8e:df:bc:2a:41:24:5f:b4:01: 86:8b:47:11:62:39:75:36:3e:4b:57:4f:1d:15:ac:45:14:90: 14:0c:cb:08:ec:37:a1:d8:10:35:e7:af:e4:0a:29:42:71:7a: 07:84:f9:16:c5:c3:f3:0c:fd:9b:99:47:a4:09:9a:fd:6a:86: da:c8:ae:4e:3e:90:3a:79:05:43:e4:0f:e9:20:51:12:30:3d: c1:5d:a2:16:e8:60:44:9b:20:97:28:ac:05:89:0e:1b:59:6c: b4:96:8b:39:a3:db:32:b6:85:8d:f8:14:8a:75:90:ad:67:b4: f8:19:31:cf -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZt+OA0WP7/H3x9aFHrxS+YpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YWEwMzliODg2YjIyNjU3OGJkYjZhNDI3ODFiZjU5MDQ0 YmIxMzgwHhcNMjYwMTAyMTAxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTJlNWEyMTNjZTFmMWI5YjY5NTIzNTlmNzBmYjViZmYzYjAxMjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YZTfbfz7noJsrDxQPoPygD4vRGl UHEwcix/xb9KBWf+XQmtQFHqivVyNgxQ37Dc+hXPRI5IP5UNYHzg2oMK1VfVixNo LN4J4MjldyfMSTn4eBlMWYf1rxdi5LUchmT9Zo3f0orbFTuf1nxgQXFbyNKPcAD/ Mv1/5P7DY29QKtHl5In3hyKaQp1LppjQOodEKvsu8mw/SkApf8EgAbiUBqAdyeGt dhmzgAsjzc8F1skQGy58fnuHqNtOHWORkdcy9LKnX4DV2EaWA2f35alL8qkhn47J yJOeUIH5W0gfMXebCK9N7136Zw5tLY2/dLC566hidIlkOKkKmDSrYV+0QwIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFKkuWiE84fG5tpUjWfcPtb/zsBJDMB8GA1UdIwQY MBaAFPeqA5uIayJleL22pCeBv1kES7E4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTZvRG00aHJJbVY0dmJha0o0R19XUVJMc1RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80YmJkNmMtOTFlZi00NDYxLTgyMWIt NmY2MjFkNzM2YWZmLzEvcVM1YUlUemg4Ym0ybFNOWjl3LTF2X093RWtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS80YmJkNmMtOTFlZi00NDYxLTgyMWItNmY2MjFkNzM2YWZm LzEvOTZvRG00aHJJbVY0dmJha0o0R19XUVJMc1RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHeBggrBgEFBQcBBwEB/wSBzjCByzCBuQQCAAEwgbIDBAQl jxADBAQu5AADBAQu/PADBAA+tSEDBAI+tSgDBAA+tS0DBAA+tTQwDAMEAU3oMgME Bk3oAAMEA09jaAMEBVEXYAMEBFEYcAMEAFQviQMEAFQvvAMEAFTyBAMEA12u8AME BLAgsAMEBLLuEAMEAbkHkgMEALk6+AMEArl8vAMEAtQ7cAMEANWHRDAMAwQA1YdL AwQA1YdMAwQA1YdOAwQA1YddAwQA1dC5AwQE2cXgMA0EAgACMAcDBQAqABAgMA0G CSqGSIb3DQEBCwUAA4IBAQCo0Ew1SK2/tik4WGoLmmLmy7rLYxsnb/Rck3q417o9 iZ6asx0LlECi7dVVpIorB53arBs7tkXbhfWqH+nTNvmGHAQF88FCyMN5q0iU8bvC aV489W3ZP3+rPOWzpNdA/iJ34zU0YbyTrrdaRkZvfKubrs+LlCoB0X1sjdHAbeos 2lkDpA8/lzWO37wqQSRftAGGi0cRYjl1Nj5LV08dFaxFFJAUDMsI7Deh2BA156/k CilCcXoHhPkWxcPzDP2bmUekCZr9aobayK5OPpA6eQVD5A/pIFESMD3BXaIW6GBE myCXKKwFiQ4bWWy0los5o9sytoWN+BSKdZCtZ7T4GTHP -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:37 2026 by rpki-client