This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/sg07i6-JOjug3g7DuHSiaVsLOnY.roa File: sg07i6-JOjug3g7DuHSiaVsLOnY.roa (raw, json) Hash identifier: e70gFTBvNZi7n90fqu/n/AeaSK7I4IipWoR1Qkkc8Mo= Subject key identifier: B2:0D:3B:8B:AF:89:3A:3B:A0:DE:0E:C3:B8:74:A2:69:5B:0B:3A:76 Certificate issuer: /CN=02bbd4f865a12d79a09a034486ce61ba023882c7 Certificate serial: 019B7A5AA9AA127B05893767DB85586C0B0A Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/sg07i6-JOjug3g7DuHSiaVsLOnY.roa Signing time: Thu 01 Jan 2026 16:18:40 +0000 ROA not before: Thu 01 Jan 2026 16:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198589 IP address blocks: 5.62.128.0/21 maxlen: 21 5.62.128.0/24 maxlen: 24 5.62.129.0/24 maxlen: 24 5.62.130.0/23 maxlen: 23 5.62.130.0/24 maxlen: 24 5.62.131.0/24 maxlen: 24 5.62.132.0/23 maxlen: 23 5.62.132.0/24 maxlen: 24 5.62.133.0/24 maxlen: 24 5.62.134.0/23 maxlen: 23 5.62.134.0/24 maxlen: 24 5.62.135.0/24 maxlen: 24 5.62.136.0/24 maxlen: 24 5.62.137.0/24 maxlen: 24 5.62.138.0/23 maxlen: 23 5.62.138.0/24 maxlen: 24 5.62.139.0/24 maxlen: 24 5.62.140.0/23 maxlen: 23 5.62.140.0/24 maxlen: 24 5.62.141.0/24 maxlen: 24 5.62.142.0/23 maxlen: 23 5.62.142.0/24 maxlen: 24 5.62.143.0/24 maxlen: 24 5.62.144.0/21 maxlen: 21 5.62.144.0/23 maxlen: 23 5.62.144.0/24 maxlen: 24 5.62.145.0/24 maxlen: 24 5.62.146.0/23 maxlen: 23 5.62.146.0/24 maxlen: 24 5.62.147.0/24 maxlen: 24 5.62.148.0/23 maxlen: 23 5.62.148.0/24 maxlen: 24 5.62.149.0/24 maxlen: 24 5.62.150.0/23 maxlen: 23 5.62.150.0/24 maxlen: 24 5.62.151.0/24 maxlen: 24 31.7.80.0/24 maxlen: 24 31.7.81.0/24 maxlen: 24 31.7.82.0/24 maxlen: 24 31.7.83.0/24 maxlen: 24 31.7.84.0/24 maxlen: 24 31.7.85.0/24 maxlen: 24 31.7.86.0/24 maxlen: 24 31.7.87.0/24 maxlen: 24 37.77.48.0/21 maxlen: 21 37.77.49.0/24 maxlen: 24 37.77.50.0/24 maxlen: 24 37.77.51.0/24 maxlen: 24 37.77.52.0/24 maxlen: 24 37.77.53.0/24 maxlen: 24 37.77.54.0/24 maxlen: 24 37.77.55.0/24 maxlen: 24 185.69.4.0/22 maxlen: 22 185.69.4.0/24 maxlen: 24 185.69.5.0/24 maxlen: 24 185.69.6.0/23 maxlen: 23 185.69.6.0/24 maxlen: 24 185.69.7.0/24 maxlen: 24 2a00:c9e0::/32 maxlen: 32 2a00:c9e0:1::/48 maxlen: 48 2a00:c9e0:5::/48 maxlen: 48 2a00:c9e0:8::/48 maxlen: 48 2a00:c9e0:b::/48 maxlen: 48 2a00:c9e0:c::/48 maxlen: 48 2a00:c9e0:8000::/48 maxlen: 48 2a00:c9e0:8001::/48 maxlen: 48 2a00:c9e0:8002::/48 maxlen: 48 2a00:c9e7:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a9:aa:12:7b:05:89:37:67:db:85:58:6c:0b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7 Validity Not Before: Jan 1 16:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b20d3b8baf893a3ba0de0ec3b874a2695b0b3a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ee:c0:53:f7:e6:bf:68:5f:55:e9:39:d9:94: 51:45:a3:fb:e7:f5:06:ce:2f:b9:7b:42:79:45:d8: de:6c:6e:c6:c8:47:d1:bb:1b:ac:14:83:61:d2:e5: 5d:c5:f3:30:ae:bb:ad:00:e1:1c:ed:cd:a7:72:6f: 2e:1b:74:1a:c5:80:73:ca:30:ab:16:62:ab:04:1f: 25:01:09:b8:fe:7c:bd:e4:b9:fa:55:0a:b6:c0:10: b1:26:d4:15:43:18:97:69:ed:94:30:2a:52:a6:19: d0:f7:3e:6f:d3:90:7a:31:b4:c8:24:bc:8c:75:c2: 32:52:6f:3a:7b:80:45:ac:03:ee:33:fc:86:12:a7: 3f:66:68:9a:bc:19:f4:2c:3f:1a:8e:67:be:9e:10: f9:56:b3:e6:3d:98:2d:9b:50:ae:50:af:a3:fb:0a: 73:78:28:82:e0:4f:d9:0a:d0:11:64:3f:96:03:53: a3:9f:a9:90:92:ab:4e:81:82:41:71:4c:f4:28:a1: 32:18:c3:f3:38:99:c5:70:02:86:da:11:b5:88:be: 92:c9:2c:c1:6e:8d:62:0f:49:32:c7:8e:4a:b2:46: d0:c8:2e:4c:08:9d:29:88:1f:ad:53:b6:bd:1d:c6: ff:07:37:9b:7d:72:cb:17:91:de:9c:d4:78:3d:b3: 22:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0D:3B:8B:AF:89:3A:3B:A0:DE:0E:C3:B8:74:A2:69:5B:0B:3A:76 X509v3 Authority Key Identifier: keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/sg07i6-JOjug3g7DuHSiaVsLOnY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.62.128.0-5.62.151.255 31.7.80.0/21 37.77.48.0/21 185.69.4.0/22 IPv6: 2a00:c9e0::/32 2a00:c9e7:1::/48 Signature Algorithm: sha256WithRSAEncryption 03:49:05:ef:5d:f2:c4:d1:7c:8a:0b:61:60:15:83:4a:62:39: a1:c8:a1:4f:63:49:a4:12:ca:a3:a1:9a:86:7a:db:6a:74:71: b4:d4:74:79:46:c6:8c:53:01:76:2c:53:66:ab:91:a6:2a:8b: 39:86:eb:6e:d3:1d:f6:d4:8f:50:22:7c:53:d5:64:95:d2:c3: 31:3e:bf:00:39:d0:89:53:43:26:e7:46:22:08:46:81:0a:59: 57:f8:68:f8:43:9f:21:67:2c:6d:2a:97:56:b1:4d:4c:13:28: 4d:21:7d:67:a1:05:56:70:3d:6f:f3:b8:f3:2b:4c:ad:00:55: ab:98:c3:70:ed:6a:68:8f:a1:fe:64:f2:ab:b5:03:81:30:c1: 7a:7a:99:cb:63:6d:57:fe:37:9d:67:d6:ce:ab:56:86:bd:ff: c1:30:14:a8:e1:28:a5:40:d9:ff:b5:82:f5:3b:e0:09:a3:b6: b4:4f:03:b6:65:7a:8f:f0:71:36:2e:fb:e9:32:e3:26:5a:51: 4e:89:de:c6:dd:e2:b7:5a:45:a0:71:7b:a5:d1:61:49:f5:a0: a3:51:71:ef:f7:a7:35:5b:e5:91:24:13:e6:0c:10:ff:5e:ae: b1:17:c8:11:a7:e7:22:8f:3c:5d:e0:41:46:66:f5:45:4d:5c: 58:3f:17:1a -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt6WqmqEnsFiTdn24VYbAsKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYmJkNGY4NjVhMTJkNzlhMDlhMDM0NDg2Y2U2MWJhMDIz ODgyYzcwHhcNMjYwMTAxMTYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjBkM2I4YmFmODkzYTNiYTBkZTBlYzNiODc0YTI2OTViMGIzYTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO7AU/fmv2hfVek52ZRRRaP75/UG zi+5e0J5RdjebG7GyEfRuxusFINh0uVdxfMwrrutAOEc7c2ncm8uG3QaxYBzyjCr FmKrBB8lAQm4/ny95Ln6VQq2wBCxJtQVQxiXae2UMCpSphnQ9z5v05B6MbTIJLyM dcIyUm86e4BFrAPuM/yGEqc/ZmiavBn0LD8ajme+nhD5VrPmPZgtm1CuUK+j+wpz eCiC4E/ZCtARZD+WA1Ojn6mQkqtOgYJBcUz0KKEyGMPzOJnFcAKG2hG1iL6SySzB bo1iD0kyx45KskbQyC5MCJ0piB+tU7a9Hcb/BzebfXLLF5HenNR4PbMiwwIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFLINO4uviTo7oN4Ow7h0omlbCzp2MB8GA1UdIwQY MBaAFAK71PhloS15oJoDRIbOYboCOILHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXJ2VS1HV2hMWG1nbWdORWhzNWh1Z0k0Z3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jYjgzYjItMzNiNS00NTYwLTg5MzUt MGE5ODA0OGNkZjcyLzEvc2cwN2k2LUpPanVnM2c3RHVIU2lhVnNMT25ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9jYjgzYjItMzNiNS00NTYwLTg5MzUtMGE5ODA0OGNkZjcy LzEvQXJ2VS1HV2hMWG1nbWdORWhzNWh1Z0k0Z3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDAmBAIAATAgMAwDBAcFPoAD BAMFPpADBAMfB1ADBAMlTTADBAK5RQQwFgQCAAIwEAMFACoAyeADBwAqAMnnAAEw DQYJKoZIhvcNAQELBQADggEBAANJBe9d8sTRfIoLYWAVg0piOaHIoU9jSaQSyqOh moZ622p0cbTUdHlGxoxTAXYsU2arkaYqizmG627THfbUj1AifFPVZJXSwzE+vwA5 0IlTQybnRiIIRoEKWVf4aPhDnyFnLG0ql1axTUwTKE0hfWehBVZwPW/zuPMrTK0A VauYw3DtamiPof5k8qu1A4EwwXp6mctjbVf+N51n1s6rVoa9/8EwFKjhKKVA2f+1 gvU74AmjtrRPA7Zleo/wcTYu++ky4yZaUU6J3sbd4rdaRaBxe6XRYUn1oKNRce/3 pzVb5ZEkE+YMEP9errEXyBGn5yKPPF3gQUZm9UVNXFg/Fxo= -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:21 2026 by rpki-client