This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/mPZY1GYZYbQ6yjTCuTRg1ZzMsqw.roa File: mPZY1GYZYbQ6yjTCuTRg1ZzMsqw.roa (raw, json) Hash identifier: BLYdcZ3Gbdmq0apl8BQS+jPj3Rqpg+Sj0dliHzXdyWM= Subject key identifier: 98:F6:58:D4:66:19:61:B4:3A:CA:34:C2:B9:34:60:D5:9C:CC:B2:AC Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Certificate serial: 019B76EBA05068709FE4D89A040F40AB169F Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/mPZY1GYZYbQ6yjTCuTRg1ZzMsqw.roa Signing time: Thu 01 Jan 2026 00:18:32 +0000 ROA not before: Thu 01 Jan 2026 00:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6866 IP address blocks: 31.153.0.0/16 maxlen: 24 31.153.0.0/17 maxlen: 17 31.153.0.0/19 maxlen: 19 31.153.0.0/20 maxlen: 20 31.153.16.0/20 maxlen: 20 31.153.32.0/19 maxlen: 19 31.153.64.0/19 maxlen: 19 31.153.96.0/19 maxlen: 19 31.153.128.0/19 maxlen: 19 31.153.160.0/19 maxlen: 19 31.153.192.0/19 maxlen: 19 31.153.224.0/19 maxlen: 19 37.149.0.0/16 maxlen: 24 46.198.0.0/17 maxlen: 24 46.198.0.0/18 maxlen: 18 46.198.0.0/19 maxlen: 19 46.198.32.0/19 maxlen: 19 46.198.64.0/18 maxlen: 18 46.198.64.0/19 maxlen: 19 46.198.96.0/19 maxlen: 19 46.199.0.0/16 maxlen: 24 46.199.0.0/18 maxlen: 18 46.199.0.0/19 maxlen: 19 46.199.16.0/20 maxlen: 20 46.199.32.0/19 maxlen: 19 46.199.32.0/20 maxlen: 20 46.199.48.0/20 maxlen: 20 46.199.64.0/20 maxlen: 20 46.199.88.0/24 maxlen: 24 46.199.192.0/19 maxlen: 19 46.199.224.0/19 maxlen: 19 62.228.0.0/16 maxlen: 24 62.228.0.0/19 maxlen: 19 62.228.0.0/21 maxlen: 21 62.228.8.0/21 maxlen: 21 62.228.16.0/22 maxlen: 22 62.228.20.0/22 maxlen: 22 62.228.24.0/21 maxlen: 21 62.228.32.0/19 maxlen: 19 62.228.64.0/19 maxlen: 19 62.228.96.0/19 maxlen: 19 62.228.128.0/19 maxlen: 19 62.228.160.0/19 maxlen: 19 62.228.192.0/19 maxlen: 19 62.228.224.0/19 maxlen: 19 62.228.226.0/23 maxlen: 23 62.228.228.0/24 maxlen: 24 62.228.229.0/24 maxlen: 24 62.228.240.0/23 maxlen: 23 81.4.128.0/18 maxlen: 24 81.4.128.0/19 maxlen: 19 81.4.133.0/24 maxlen: 24 81.4.160.0/19 maxlen: 19 81.4.160.0/20 maxlen: 20 81.4.160.0/21 maxlen: 21 81.4.168.0/21 maxlen: 21 81.4.174.0/24 maxlen: 24 81.4.176.0/21 maxlen: 21 83.168.0.0/18 maxlen: 24 83.168.0.0/19 maxlen: 19 83.168.32.0/19 maxlen: 19 87.228.128.0/17 maxlen: 24 87.228.128.0/18 maxlen: 18 87.228.144.0/20 maxlen: 20 87.228.160.0/20 maxlen: 20 87.228.176.0/20 maxlen: 20 87.228.192.0/20 maxlen: 20 87.228.208.0/20 maxlen: 20 87.228.224.0/19 maxlen: 19 87.228.224.0/20 maxlen: 20 87.228.240.0/20 maxlen: 20 93.109.0.0/16 maxlen: 24 93.109.0.0/19 maxlen: 19 93.109.32.0/19 maxlen: 19 93.109.64.0/19 maxlen: 19 93.109.96.0/19 maxlen: 19 93.109.128.0/19 maxlen: 19 93.109.160.0/19 maxlen: 19 93.109.192.0/19 maxlen: 19 93.109.209.0/24 maxlen: 24 93.109.219.0/24 maxlen: 24 93.109.224.0/19 maxlen: 19 93.109.227.0/24 maxlen: 24 93.109.239.0/24 maxlen: 24 128.0.107.0/24 maxlen: 24 128.0.200.0/21 maxlen: 24 128.0.208.0/20 maxlen: 24 128.0.224.0/20 maxlen: 24 128.0.240.0/20 maxlen: 24 176.92.200.0/21 maxlen: 21 176.92.208.0/20 maxlen: 20 176.92.224.0/19 maxlen: 24 176.92.240.0/20 maxlen: 20 185.2.96.0/22 maxlen: 24 185.2.96.0/24 maxlen: 24 185.2.97.0/24 maxlen: 24 185.2.98.0/24 maxlen: 24 185.2.99.0/24 maxlen: 24 195.14.128.0/19 maxlen: 24 195.14.128.0/20 maxlen: 20 195.14.142.0/24 maxlen: 24 195.14.144.0/20 maxlen: 20 195.14.146.0/24 maxlen: 24 195.14.151.0/24 maxlen: 24 195.14.153.0/24 maxlen: 24 212.31.96.0/19 maxlen: 24 212.31.96.0/20 maxlen: 20 212.31.96.0/24 maxlen: 24 212.31.112.0/20 maxlen: 20 212.31.121.0/24 maxlen: 24 212.31.122.0/24 maxlen: 24 212.31.123.0/24 maxlen: 24 212.31.124.0/24 maxlen: 24 212.31.125.0/24 maxlen: 24 212.31.127.0/24 maxlen: 24 213.7.0.0/16 maxlen: 24 213.7.0.0/17 maxlen: 17 213.7.0.0/20 maxlen: 20 213.7.16.0/20 maxlen: 20 213.7.32.0/20 maxlen: 20 213.7.48.0/20 maxlen: 20 213.7.64.0/20 maxlen: 20 213.7.80.0/20 maxlen: 20 213.7.96.0/20 maxlen: 20 213.7.112.0/20 maxlen: 20 213.7.128.0/18 maxlen: 18 213.7.128.0/20 maxlen: 20 213.7.144.0/20 maxlen: 20 213.7.160.0/20 maxlen: 20 213.7.176.0/20 maxlen: 20 213.7.192.0/20 maxlen: 20 213.7.208.0/20 maxlen: 20 213.7.208.0/24 maxlen: 24 213.7.220.0/22 maxlen: 22 213.7.224.0/20 maxlen: 20 213.7.240.0/20 maxlen: 20 213.7.240.0/24 maxlen: 24 213.149.160.0/19 maxlen: 24 213.149.160.0/20 maxlen: 20 213.149.176.0/20 maxlen: 20 2a00:1358::/29 maxlen: 48 2a00:1358::/30 maxlen: 48 2a00:1358::/31 maxlen: 48 2a00:1358::/32 maxlen: 48 2a00:1358:1000::/48 maxlen: 48 2a00:1358:b000::/44 maxlen: 44 2a00:1358:d000::/40 maxlen: 40 2a00:1358:df00::/48 maxlen: 48 2a00:1358:f000::/40 maxlen: 40 2a00:1358:f000::/41 maxlen: 41 2a00:1358:f080::/41 maxlen: 41 2a00:1359::/32 maxlen: 48 2a00:135a::/31 maxlen: 48 2a00:135a::/32 maxlen: 48 2a00:135b::/32 maxlen: 48 2a00:135c::/30 maxlen: 48 2a00:135c::/31 maxlen: 48 2a00:135c::/32 maxlen: 48 2a00:135d::/32 maxlen: 48 2a00:135e::/31 maxlen: 48 2a00:135e::/32 maxlen: 48 2a00:135f::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a0:50:68:70:9f:e4:d8:9a:04:0f:40:ab:16:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Validity Not Before: Jan 1 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98f658d4661961b43aca34c2b93460d59cccb2ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:83:82:f5:9b:1f:d7:89:09:fa:37:6f:9a:08: 21:5d:f9:fd:58:59:16:5f:1c:e4:da:5a:13:43:61: 42:6b:c5:80:c9:cb:6c:c8:ba:b4:f7:83:96:2a:02: 09:94:ae:75:bf:93:02:0d:a8:ee:a3:d5:20:46:cd: af:39:f4:e7:5c:4e:bb:49:11:08:63:a3:a4:ab:8a: d3:e3:f0:72:6e:e0:c1:d1:01:a3:cc:62:9d:45:a4: e7:5b:47:49:5e:62:c9:5e:38:4b:00:22:d5:a9:7a: ba:99:06:5a:21:d8:4a:2e:1d:01:b0:64:9f:33:3b: 59:e9:87:0b:be:fe:4a:de:12:5d:50:e5:e9:f1:d8: cf:38:a6:fe:1f:03:75:fc:c6:3c:23:7f:aa:1d:f4: c2:a0:2b:c5:50:9e:d3:3b:b9:f8:99:c5:d0:af:e5: ac:d7:b0:45:b8:3a:2c:35:50:1d:c8:78:e1:0a:aa: 09:78:ea:dc:4f:67:8f:a5:be:fe:6d:82:f4:79:80: 34:3c:1e:71:83:9d:6a:11:32:49:2e:e6:97:bb:6c: 9e:44:f7:16:a1:ca:93:56:a7:6e:f6:32:42:ea:b2: 1b:a0:b8:12:d9:5b:78:08:b8:4c:71:ce:36:7f:7b: 6a:01:16:dc:a5:24:af:b2:0e:29:eb:65:06:6e:43: 3d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F6:58:D4:66:19:61:B4:3A:CA:34:C2:B9:34:60:D5:9C:CC:B2:AC X509v3 Authority Key Identifier: keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/mPZY1GYZYbQ6yjTCuTRg1ZzMsqw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.153.0.0/16 37.149.0.0/16 46.198.0.0/17 46.199.0.0/16 62.228.0.0/16 81.4.128.0/18 83.168.0.0/18 87.228.128.0/17 93.109.0.0/16 128.0.107.0/24 128.0.200.0-128.0.255.255 176.92.200.0-176.92.255.255 185.2.96.0/22 195.14.128.0/19 212.31.96.0/19 213.7.0.0/16 213.149.160.0/19 IPv6: 2a00:1358::/29 Signature Algorithm: sha256WithRSAEncryption 5a:91:3b:23:af:55:ac:4c:1e:61:9e:94:81:d0:69:6a:63:8a: e1:9d:91:f4:14:fd:9a:02:39:e7:b0:1a:39:99:5d:70:aa:43: c1:b6:78:c6:92:64:a1:24:11:0f:51:d8:ed:a7:6f:11:7b:06: 24:24:d2:c5:87:49:da:e4:f3:80:13:20:5b:20:a2:fd:25:9f: 1a:2a:6d:2a:ff:6d:db:e1:41:ec:1d:43:e0:2a:12:46:49:32: 2e:0a:38:f9:c0:f9:29:8e:45:09:0e:28:56:ce:90:4e:62:93: b4:fc:90:00:c9:d0:a9:8a:e7:ac:22:29:dd:d2:dd:3e:70:a9: 65:05:28:99:3b:4e:4b:17:b1:0f:e1:5b:2c:cb:e6:8d:01:39: 27:ec:4c:cc:06:6d:ae:25:ae:c8:f1:a6:aa:c2:be:7e:33:cb: fd:f1:82:3e:da:99:31:b7:e7:bb:0f:67:8f:e1:82:a4:e1:9e: 60:d3:9a:5c:63:81:fa:e7:65:f8:c0:a5:0e:d1:7d:3e:11:9c: 50:dc:51:98:37:03:40:07:e5:f1:69:f3:a8:a8:8c:f9:2d:7c: f2:07:01:e7:7a:f0:91:bb:fe:c6:cc:a9:4f:c0:52:d0:73:db: 9a:72:e7:24:91:c7:d7:20:0f:53:99:62:7a:e0:f9:af:37:4b: 11:20:2e:ad -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt266BQaHCf5NiaBA9AqxafMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MTFhYmM0YzA0NjhhYjI4OTFlYWFjYWRiYTBkYzAzNzc5 MzZmZDUwHhcNMjYwMTAxMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGY2NThkNDY2MTk2MWI0M2FjYTM0YzJiOTM0NjBkNTljY2NiMmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YOC9Zsf14kJ+jdvmgghXfn9WFkW Xxzk2loTQ2FCa8WAyctsyLq094OWKgIJlK51v5MCDajuo9UgRs2vOfTnXE67SREI Y6Okq4rT4/BybuDB0QGjzGKdRaTnW0dJXmLJXjhLACLVqXq6mQZaIdhKLh0BsGSf MztZ6YcLvv5K3hJdUOXp8djPOKb+HwN1/MY8I3+qHfTCoCvFUJ7TO7n4mcXQr+Ws 17BFuDosNVAdyHjhCqoJeOrcT2ePpb7+bYL0eYA0PB5xg51qETJJLuaXu2yeRPcW ocqTVqdu9jJC6rIboLgS2Vt4CLhMcc42f3tqARbcpSSvsg4p62UGbkM9YQIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFJj2WNRmGWG0Oso0wrk0YNWczLKsMB8GA1UdIwQY MBaAFNQRq8TARoqyiR6qytug3AN3k2/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt YjBmNGI5YzM3ZTQ5LzEvbVBaWTFHWVpZYlE2eWpUQ3VUUmcxWnpNc3F3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5 LzEvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTB0BAIAATBuAwMAH5kD AwAllQMEBy7GAAMDAC7HAwMAPuQDBAZRBIADBAZTqAADBAdX5IADAwBdbQMEAIAA azALAwQDgADIAwMAgAAwCwMEA7BcyAMDALBcAwQCuQJgAwQFww6AAwQF1B9gAwMA 1QcDBAXVlaAwDQQCAAIwBwMFAyoAE1gwDQYJKoZIhvcNAQELBQADggEBAFqROyOv VaxMHmGelIHQaWpjiuGdkfQU/ZoCOeewGjmZXXCqQ8G2eMaSZKEkEQ9R2O2nbxF7 BiQk0sWHSdrk84ATIFsgov0lnxoqbSr/bdvhQewdQ+AqEkZJMi4KOPnA+SmORQkO KFbOkE5ik7T8kADJ0KmK56wiKd3S3T5wqWUFKJk7TksXsQ/hWyzL5o0BOSfsTMwG ba4lrsjxpqrCvn4zy/3xgj7amTG357sPZ4/hgqThnmDTmlxjgfrnZfjApQ7RfT4R nFDcUZg3A0AH5fFp86iojPktfPIHAed68JG7/sbMqU/AUtBz25py5ySRx9cgD1OZ Ynrg+a83SxEgLq0= -----END CERTIFICATE-----Generated at Sun Jan 25 12:01:46 2026 by rpki-client