This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/d2ATao2dWyO-rAxWbP6Z2EkoIO8.roa File: d2ATao2dWyO-rAxWbP6Z2EkoIO8.roa (raw, json) Hash identifier: nerdIRaMGszG2WfY8kmlFia43UIoriRI54MHvrKiwq4= Subject key identifier: 77:60:13:6A:8D:9D:5B:23:BE:AC:0C:56:6C:FE:99:D8:49:28:20:EF Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba Certificate serial: 019B7EA65FDEA89E464452BB3ECD0A850482 Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/d2ATao2dWyO-rAxWbP6Z2EkoIO8.roa Signing time: Fri 02 Jan 2026 12:19:51 +0000 ROA not before: Fri 02 Jan 2026 12:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5578 IP address blocks: 62.65.160.0/19 maxlen: 19 62.152.224.0/19 maxlen: 19 62.168.64.0/18 maxlen: 18 62.197.192.0/18 maxlen: 18 62.197.222.0/24 maxlen: 24 80.250.240.0/20 maxlen: 20 81.88.128.0/20 maxlen: 20 82.119.224.0/20 maxlen: 20 83.168.128.0/18 maxlen: 18 84.245.64.0/18 maxlen: 18 84.245.94.0/24 maxlen: 24 84.245.97.0/24 maxlen: 24 84.245.126.0/24 maxlen: 24 85.248.0.0/16 maxlen: 16 85.248.234.0/24 maxlen: 24 85.248.235.0/24 maxlen: 24 85.248.240.0/24 maxlen: 24 92.60.56.0/21 maxlen: 21 94.124.144.0/21 maxlen: 21 185.130.220.0/22 maxlen: 22 185.220.120.0/22 maxlen: 22 193.58.192.0/22 maxlen: 22 193.58.196.0/23 maxlen: 23 193.110.186.0/23 maxlen: 23 194.1.172.0/22 maxlen: 22 194.1.224.0/24 maxlen: 24 194.1.225.0/24 maxlen: 24 194.1.226.0/24 maxlen: 24 194.1.227.0/24 maxlen: 24 194.1.228.0/24 maxlen: 24 194.1.229.0/24 maxlen: 24 194.1.230.0/24 maxlen: 24 194.1.231.0/24 maxlen: 24 195.12.128.0/19 maxlen: 19 195.46.64.0/19 maxlen: 19 195.72.0.0/19 maxlen: 19 195.98.0.0/19 maxlen: 19 195.168.0.0/16 maxlen: 16 212.26.160.0/19 maxlen: 19 212.26.176.0/20 maxlen: 20 212.81.0.0/19 maxlen: 19 213.215.64.0/18 maxlen: 18 213.215.72.0/22 maxlen: 22 217.67.16.0/20 maxlen: 20 217.75.64.0/19 maxlen: 19 217.75.82.0/23 maxlen: 23 217.118.96.0/20 maxlen: 20 217.172.144.0/20 maxlen: 20 2001:1ba0::/32 maxlen: 32 2a00:1298::/32 maxlen: 32 2a02:770::/32 maxlen: 32 2a06:dbc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:5f:de:a8:9e:46:44:52:bb:3e:cd:0a:85:04:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba Validity Not Before: Jan 2 12:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7760136a8d9d5b23beac0c566cfe99d8492820ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bb:4b:bc:1c:89:d1:43:21:d5:2c:f1:ed:69: d6:d8:ef:e7:05:29:be:61:ad:61:38:77:76:c6:82: 2b:e1:54:d6:c2:9e:23:39:5c:e5:9c:18:32:bd:7f: 14:ed:29:65:2f:ae:fe:a0:68:f8:35:d4:96:a7:ed: 78:ab:2d:bb:db:79:3d:b3:5b:f1:8f:61:d8:0a:e0: 44:8a:16:0a:1f:84:97:53:72:d2:de:bf:8f:01:98: 6b:ce:3f:e0:0c:a1:e8:70:b8:71:3e:66:64:f8:1a: f3:f6:db:0f:6e:10:cd:9e:d3:d0:31:01:67:09:8f: c1:4b:52:3b:09:74:e2:72:4f:80:25:19:7d:c2:59: 1f:d5:cd:4c:ec:fd:34:9f:df:a2:39:17:cf:54:14: 61:1a:3b:cb:e2:6a:4b:87:e8:05:d5:b0:a5:07:2f: d3:99:b9:06:74:27:af:bb:fe:d2:0b:19:df:cc:a1: cc:25:30:52:c7:9e:70:e4:c1:4b:17:89:67:5a:c0: 6c:de:c2:c6:c5:00:b8:a0:bd:6e:fc:e7:97:be:72: db:fa:ca:8a:8d:ee:cb:3d:50:f6:22:26:8d:15:a3: b4:b3:b9:d4:fc:9a:fb:03:e4:43:e4:0d:ae:35:7c: 91:b8:c8:bb:17:94:7c:9c:40:0c:63:ea:d4:33:d9: 4e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:60:13:6A:8D:9D:5B:23:BE:AC:0C:56:6C:FE:99:D8:49:28:20:EF X509v3 Authority Key Identifier: keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/d2ATao2dWyO-rAxWbP6Z2EkoIO8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.65.160.0/19 62.152.224.0/19 62.168.64.0/18 62.197.192.0/18 80.250.240.0/20 81.88.128.0/20 82.119.224.0/20 83.168.128.0/18 84.245.64.0/18 85.248.0.0/16 92.60.56.0/21 94.124.144.0/21 185.130.220.0/22 185.220.120.0/22 193.58.192.0-193.58.197.255 193.110.186.0/23 194.1.172.0/22 194.1.224.0/21 195.12.128.0/19 195.46.64.0/19 195.72.0.0/19 195.98.0.0/19 195.168.0.0/16 212.26.160.0/19 212.81.0.0/19 213.215.64.0/18 217.67.16.0/20 217.75.64.0/19 217.118.96.0/20 217.172.144.0/20 IPv6: 2001:1ba0::/32 2a00:1298::/32 2a02:770::/32 2a06:dbc0::/29 Signature Algorithm: sha256WithRSAEncryption 64:e6:ac:c9:2b:ac:5a:f6:48:fc:1e:54:66:2a:e4:71:87:5d: fb:63:55:c5:bb:85:5e:e1:8c:4b:a9:a9:68:78:d2:12:19:b5: 5c:00:4c:5d:76:60:79:a1:6b:16:ea:52:14:63:0d:ca:40:cd: ce:c7:3d:ba:59:ab:a6:bb:75:00:d8:7d:3a:dd:1c:8d:00:97: ed:6a:55:f0:cf:dc:8a:17:e6:8f:f4:a1:03:d3:b0:6e:87:3a: a6:f9:ff:f4:c2:c2:0f:6b:f1:c1:f1:e2:bf:02:8c:68:92:92: 82:e9:ef:c6:14:42:d2:8e:06:05:df:8e:40:de:5a:3f:ab:ac: a1:08:cb:d9:f8:c3:35:45:49:14:a8:05:52:14:f3:92:d0:96: 4e:cd:26:d3:a4:f6:a5:47:79:3f:0b:9c:79:35:c2:98:76:fc: 0c:44:02:d0:9f:b3:11:3a:86:2d:dc:4a:fe:00:cc:e8:27:a9: 03:17:0d:59:cf:63:3f:b3:2b:2a:00:ec:a7:d3:16:90:a3:63: 92:49:d1:f3:a6:f8:3c:58:11:9a:ef:40:c0:2b:d1:83:d6:ec: ad:58:8b:89:e9:6a:6a:31:10:28:11:fb:e0:79:b0:57:23:13: af:47:3c:0b:90:4a:be:f2:ee:e8:bb:1b:e9:68:26:12:52:c9: 2e:2b:b6:bf -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgISAZt+pl/eqJ5GRFK7Ps0KhQSCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Zjg4MTQwMWFiYWNjODhjOTQxZmRmNzQwZjFhYjE1MzZm MDVkYmEwHhcNMjYwMTAyMTIxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzYwMTM2YThkOWQ1YjIzYmVhYzBjNTY2Y2ZlOTlkODQ5MjgyMGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrtLvByJ0UMh1Szx7WnW2O/nBSm+ Ya1hOHd2xoIr4VTWwp4jOVzlnBgyvX8U7SllL67+oGj4NdSWp+14qy2723k9s1vx j2HYCuBEihYKH4SXU3LS3r+PAZhrzj/gDKHocLhxPmZk+Brz9tsPbhDNntPQMQFn CY/BS1I7CXTick+AJRl9wlkf1c1M7P00n9+iORfPVBRhGjvL4mpLh+gF1bClBy/T mbkGdCevu/7SCxnfzKHMJTBSx55w5MFLF4lnWsBs3sLGxQC4oL1u/OeXvnLb+sqK je7LPVD2IiaNFaO0s7nU/Jr7A+RD5A2uNXyRuMi7F5R8nEAMY+rUM9lO8wIDAQAB o4IC5jCCAuIwHQYDVR0OBBYEFHdgE2qNnVsjvqwMVmz+mdhJKCDvMB8GA1UdIwQY MBaAFOf4gUAausyIyUH990DxqxU28F26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmIt ZTJmYmMzYTY4ODAwLzEvZDJBVGFvMmRXeU8tckF4V2JQNloyRWtvSU84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmItZTJmYmMzYTY4ODAw LzEvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH7BggrBgEFBQcBBwEB/wSB6zCB6DCBwQQCAAEwgboDBAU+ QaADBAU+mOADBAY+qEADBAY+xcADBARQ+vADBARRWIADBARSd+ADBAZTqIADBAZU 9UADAwBV+AMEA1w8OAMEA158kAMEArmC3AMEArnceDAMAwQGwTrAAwQBwTrEAwQB wW66AwQCwgGsAwQDwgHgAwQFwwyAAwQFwy5AAwQFw0gAAwQFw2IAAwMAw6gDBAXU GqADBAXUUQADBAbV10ADBATZQxADBAXZS0ADBATZdmADBATZrJAwIgQCAAIwHAMF ACABG6ADBQAqABKYAwUAKgIHcAMFAyoG28AwDQYJKoZIhvcNAQELBQADggEBAGTm rMkrrFr2SPweVGYq5HGHXftjVcW7hV7hjEupqWh40hIZtVwATF12YHmhaxbqUhRj DcpAzc7HPbpZq6a7dQDYfTrdHI0Al+1qVfDP3IoX5o/0oQPTsG6HOqb5//TCwg9r 8cHx4r8CjGiSkoLp78YUQtKOBgXfjkDeWj+rrKEIy9n4wzVFSRSoBVIU85LQlk7N JtOk9qVHeT8LnHk1wph2/AxEAtCfsxE6hi3cSv4AzOgnqQMXDVnPYz+zKyoA7KfT FpCjY5JJ0fOm+DxYEZrvQMAr0YPW7K1Yi4npamoxECgR++B5sFcjE69HPAuQSr7y 7ui7G+loJhJSyS4rtr8= -----END CERTIFICATE-----Generated at Mon Jan 26 12:15:44 2026 by rpki-client