This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/MKWEmJirSw3wmRIR8xi7TCm8ATY.roa File: MKWEmJirSw3wmRIR8xi7TCm8ATY.roa (raw, json) Hash identifier: +VYG8Zjz2aYUxOlu/jdFIaid9VbP2EyTDGglQMC2eaY= Subject key identifier: 30:A5:84:98:98:AB:4B:0D:F0:99:12:11:F3:18:BB:4C:29:BC:01:36 Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Certificate serial: 019BB71F83B48612CCF5B53BCFB4838A3FC5 Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/MKWEmJirSw3wmRIR8xi7TCm8ATY.roa Signing time: Tue 13 Jan 2026 11:30:54 +0000 ROA not before: Tue 13 Jan 2026 11:30:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5483 IP address blocks: 5.38.128.0/17 maxlen: 17 5.187.128.0/17 maxlen: 17 31.46.0.0/16 maxlen: 16 31.46.19.0/24 maxlen: 24 37.76.0.0/17 maxlen: 17 46.107.0.0/16 maxlen: 16 46.107.14.0/24 maxlen: 24 46.107.15.0/24 maxlen: 24 46.107.224.0/24 maxlen: 24 46.139.0.0/16 maxlen: 16 62.201.64.0/18 maxlen: 18 78.92.0.0/16 maxlen: 16 79.121.100.0/22 maxlen: 22 79.122.0.0/17 maxlen: 17 80.249.160.0/20 maxlen: 24 80.249.164.0/24 maxlen: 24 80.249.167.0/24 maxlen: 24 80.249.168.0/24 maxlen: 24 80.249.170.0/24 maxlen: 24 80.249.171.0/24 maxlen: 24 80.249.172.0/24 maxlen: 24 80.249.173.0/24 maxlen: 24 80.249.174.0/24 maxlen: 24 81.182.0.0/15 maxlen: 15 84.0.0.0/14 maxlen: 14 84.1.102.0/24 maxlen: 24 84.1.226.0/24 maxlen: 24 84.1.236.0/24 maxlen: 24 84.2.24.0/24 maxlen: 24 84.2.35.0/24 maxlen: 24 84.2.39.0/24 maxlen: 24 84.2.42.0/23 maxlen: 24 84.2.50.0/24 maxlen: 24 84.2.51.0/24 maxlen: 24 84.2.52.0/24 maxlen: 24 84.2.54.0/24 maxlen: 24 84.2.79.0/24 maxlen: 24 84.2.226.0/23 maxlen: 24 84.2.227.0/24 maxlen: 24 84.2.228.0/24 maxlen: 24 84.2.230.0/24 maxlen: 24 84.2.231.0/24 maxlen: 24 86.59.128.0/17 maxlen: 17 87.101.112.0/20 maxlen: 20 91.120.0.0/16 maxlen: 16 91.120.16.0/22 maxlen: 22 91.120.27.0/24 maxlen: 24 91.120.57.0/24 maxlen: 24 91.120.64.0/18 maxlen: 18 91.120.128.0/18 maxlen: 18 93.89.160.0/20 maxlen: 20 94.27.128.0/17 maxlen: 17 134.255.0.0/17 maxlen: 17 145.236.0.0/16 maxlen: 16 145.236.230.0/24 maxlen: 24 149.200.0.0/17 maxlen: 17 158.249.0.0/16 maxlen: 16 185.55.12.0/22 maxlen: 22 185.65.8.0/22 maxlen: 22 188.6.0.0/16 maxlen: 16 188.36.0.0/16 maxlen: 16 188.36.248.0/24 maxlen: 24 188.156.0.0/15 maxlen: 15 194.38.96.0/19 maxlen: 19 194.38.96.0/24 maxlen: 24 194.38.104.0/24 maxlen: 24 194.88.32.0/19 maxlen: 19 194.149.0.0/19 maxlen: 19 194.149.32.0/19 maxlen: 19 194.149.36.0/24 maxlen: 24 194.176.224.0/19 maxlen: 19 195.56.0.0/16 maxlen: 16 195.56.0.0/24 maxlen: 24 195.70.32.0/19 maxlen: 19 195.228.0.0/16 maxlen: 16 195.228.4.0/24 maxlen: 24 195.228.22.0/24 maxlen: 24 195.228.24.0/24 maxlen: 24 195.228.34.0/24 maxlen: 24 195.228.45.0/24 maxlen: 24 195.228.75.0/24 maxlen: 24 195.228.76.0/24 maxlen: 24 195.228.85.0/24 maxlen: 24 195.228.86.0/24 maxlen: 24 195.228.87.0/24 maxlen: 24 195.228.112.0/24 maxlen: 24 195.228.135.0/24 maxlen: 24 195.228.152.0/24 maxlen: 24 195.228.155.0/24 maxlen: 24 195.228.156.0/24 maxlen: 24 195.228.224.0/23 maxlen: 23 195.228.240.0/24 maxlen: 24 195.228.244.0/24 maxlen: 24 195.228.245.0/24 maxlen: 24 195.228.247.0/24 maxlen: 24 195.228.248.0/24 maxlen: 24 195.228.249.0/24 maxlen: 24 195.228.250.0/24 maxlen: 24 195.228.251.0/24 maxlen: 24 195.228.253.0/24 maxlen: 24 195.228.254.0/24 maxlen: 24 195.228.255.0/24 maxlen: 24 212.51.64.0/18 maxlen: 18 212.51.79.0/24 maxlen: 24 212.51.91.0/24 maxlen: 24 212.51.110.0/24 maxlen: 24 212.51.125.0/24 maxlen: 24 213.178.96.0/19 maxlen: 19 217.20.128.0/20 maxlen: 20 217.65.96.0/19 maxlen: 19 217.65.96.0/23 maxlen: 23 217.116.32.0/20 maxlen: 20 2001:4c48::/29 maxlen: 29 2001:4c48::/30 maxlen: 30 2001:4c48::/32 maxlen: 32 2001:4c48::/46 maxlen: 48 2001:4c4c::/30 maxlen: 30 2a00:10d0::/32 maxlen: 32 2a00:1110::/29 maxlen: 29 2a02:738::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b7:1f:83:b4:86:12:cc:f5:b5:3b:cf:b4:83:8a:3f:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Validity Not Before: Jan 13 11:30:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=30a5849898ab4b0df0991211f318bb4c29bc0136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8b:5f:9e:58:8d:b7:96:11:5d:9e:97:83:5a: 9e:87:7e:14:7a:19:ec:d7:76:53:53:fa:83:c0:34: 02:5f:ec:03:98:70:4f:7e:1c:6b:02:28:e9:61:fe: e5:a6:34:4c:d0:86:8d:32:75:8e:46:d9:f3:43:47: bb:01:df:9a:eb:9f:53:2c:1e:10:1c:aa:5b:d3:fd: b8:8c:16:ba:ec:8d:2d:d1:ec:53:30:d9:9c:6c:80: bf:43:b7:27:21:29:27:58:3f:af:28:90:f9:5c:6e: 90:3f:a7:6c:d7:d7:07:7e:a5:1c:00:6e:6e:58:3f: 3d:7f:cc:13:e7:10:15:e7:e2:93:b6:13:97:f7:27: 6b:d6:48:51:29:08:5d:61:32:c1:c6:f6:57:2f:60: 30:99:27:1c:38:e5:d7:6f:36:5c:53:53:05:21:05: 7f:ff:62:fb:0f:ff:a9:31:89:00:7c:98:8b:d7:6e: 32:7c:3d:21:1e:27:5d:99:66:3a:8e:9d:1f:32:e2: 4b:76:c8:d3:a9:81:ea:7f:98:0f:e3:47:d0:37:12: 8a:ae:cf:f5:84:2e:78:49:20:1a:9a:bd:b5:7e:58: a4:ea:72:29:a5:61:b6:81:b3:03:2f:f5:18:75:71: 5b:ca:c0:bb:46:28:ea:da:ee:5a:29:a6:97:f4:09: fe:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A5:84:98:98:AB:4B:0D:F0:99:12:11:F3:18:BB:4C:29:BC:01:36 X509v3 Authority Key Identifier: keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/MKWEmJirSw3wmRIR8xi7TCm8ATY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.38.128.0/17 5.187.128.0/17 31.46.0.0/16 37.76.0.0/17 46.107.0.0/16 46.139.0.0/16 62.201.64.0/18 78.92.0.0/16 79.121.100.0/22 79.122.0.0/17 80.249.160.0/20 81.182.0.0/15 84.0.0.0/14 86.59.128.0/17 87.101.112.0/20 91.120.0.0/16 93.89.160.0/20 94.27.128.0/17 134.255.0.0/17 145.236.0.0/16 149.200.0.0/17 158.249.0.0/16 185.55.12.0/22 185.65.8.0/22 188.6.0.0/16 188.36.0.0/16 188.156.0.0/15 194.38.96.0/19 194.88.32.0/19 194.149.0.0/18 194.176.224.0/19 195.56.0.0/16 195.70.32.0/19 195.228.0.0/16 212.51.64.0/18 213.178.96.0/19 217.20.128.0/20 217.65.96.0/19 217.116.32.0/20 IPv6: 2001:4c48::/29 2a00:10d0::/32 2a00:1110::/29 2a02:738::/32 Signature Algorithm: sha256WithRSAEncryption 05:61:ae:d0:3c:1e:55:c1:dc:2c:90:01:1e:7a:3c:ef:5a:59: 29:e4:ba:8d:4e:a7:50:33:cc:da:a2:1e:7d:24:cf:50:4b:09: 22:c1:68:69:a0:a7:ba:c5:1f:de:95:b9:88:b5:8b:05:ca:ad: a9:17:37:77:35:95:0d:ae:19:16:5c:d9:0f:2f:46:bd:95:e5: 5e:d8:a1:24:35:e3:f1:54:4a:c0:c2:65:b8:a5:7b:6e:11:69: b2:f6:3b:69:0e:5e:33:3f:e7:c7:70:e7:36:c9:9c:c9:84:3b: f6:15:9e:dd:16:a2:15:4f:0d:d7:b7:de:1b:e8:55:8a:ae:0b: a9:90:db:8f:25:15:6f:d0:c3:79:6e:68:86:8c:cc:3c:7c:33: c9:3a:22:6b:0b:88:1e:f2:97:c6:13:13:2e:ac:09:04:2a:e8: ab:a6:0b:7c:6d:8e:6f:22:19:d5:56:e1:2c:a0:ba:d6:95:b0: d6:ab:fb:69:88:c9:d9:72:e9:4e:01:f9:3b:32:d3:78:06:b0: 0b:57:c8:c7:49:88:63:6f:89:e5:5f:e5:09:01:82:d9:d5:3c: 10:1e:29:ff:0c:0a:c9:6e:de:61:de:cc:1f:c1:e5:43:cd:d4: 9f:54:8c:5c:f0:34:13:f9:c1:39:e9:9d:b5:67:6b:48:0d:eb: cf:40:b7:53 -----BEGIN CERTIFICATE----- MIIF/zCCBOegAwIBAgISAZu3H4O0hhLM9bU7z7SDij/FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4 YWFlN2IwHhcNMjYwMTEzMTEzMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMGE1ODQ5ODk4YWI0YjBkZjA5OTEyMTFmMzE4YmI0YzI5YmMwMTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4tfnliNt5YRXZ6Xg1qeh34Uehns 13ZTU/qDwDQCX+wDmHBPfhxrAijpYf7lpjRM0IaNMnWORtnzQ0e7Ad+a659TLB4Q HKpb0/24jBa67I0t0exTMNmcbIC/Q7cnISknWD+vKJD5XG6QP6ds19cHfqUcAG5u WD89f8wT5xAV5+KTthOX9ydr1khRKQhdYTLBxvZXL2AwmSccOOXXbzZcU1MFIQV/ /2L7D/+pMYkAfJiL124yfD0hHiddmWY6jp0fMuJLdsjTqYHqf5gP40fQNxKKrs/1 hC54SSAamr21flik6nIppWG2gbMDL/UYdXFbysC7Rijq2u5aKaaX9An+BQIDAQAB o4IDCzCCAwcwHQYDVR0OBBYEFDClhJiYq0sN8JkSEfMYu0wpvAE2MB8GA1UdIwQY MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt MjkyYWU0NmU2MzAyLzEvTUtXRW1KaXJTdzN3bVJJUjh4aTdUQ204QVRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBHwYIKwYBBQUHAQcBAf8EggEOMIIBCjCB4wQCAAEwgdwD BAcFJoADBAcFu4ADAwAfLgMEByVMAAMDAC5rAwMALosDBAY+yUADAwBOXAMEAk95 ZAMEB096AAMEBFD5oAMDAVG2AwMCVAADBAdWO4ADBARXZXADAwBbeAMEBF1ZoAME B14bgAMEB4b/AAMDAJHsAwQHlcgAAwMAnvkDBAK5NwwDBAK5QQgDAwC8BgMDALwk AwMBvJwDBAXCJmADBAXCWCADBAbClQADBAXCsOADAwDDOAMEBcNGIAMDAMPkAwQG 1DNAAwQF1bJgAwQE2RSAAwQF2UFgAwQE2XQgMCIEAgACMBwDBQMgAUxIAwUAKgAQ 0AMFAyoAERADBQAqAgc4MA0GCSqGSIb3DQEBCwUAA4IBAQAFYa7QPB5VwdwskAEe ejzvWlkp5LqNTqdQM8zaoh59JM9QSwkiwWhpoKe6xR/elbmItYsFyq2pFzd3NZUN rhkWXNkPL0a9leVe2KEkNePxVErAwmW4pXtuEWmy9jtpDl4zP+fHcOc2yZzJhDv2 FZ7dFqIVTw3Xt94b6FWKrgupkNuPJRVv0MN5bmiGjMw8fDPJOiJrC4ge8pfGExMu rAkEKuirpgt8bY5vIhnVVuEsoLrWlbDWq/tpiMnZculOAfk7MtN4BrALV8jHSYhj b4nlX+UJAYLZ1TwQHin/DArJbt5h3swfweVDzdSfVIxc8DQT+cE56Z21Z2tIDevP QLdT -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:09 2026 by rpki-client