This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/epNTET6BvQ6zhUMoLdSPzHjbIWE.roa File: epNTET6BvQ6zhUMoLdSPzHjbIWE.roa (raw, json) Hash identifier: qxvi55+BDN0SED0a/Y9HgRfeWegI7IGQUucmOAr178Y= Subject key identifier: 7A:93:53:11:3E:81:BD:0E:B3:85:43:28:2D:D4:8F:CC:78:DB:21:61 Certificate issuer: /CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129 Certificate serial: 019B7C809F76ECAE136017BB555B726C07E8 Authority key identifier: D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/epNTET6BvQ6zhUMoLdSPzHjbIWE.roa Signing time: Fri 02 Jan 2026 02:19:22 +0000 ROA not before: Fri 02 Jan 2026 02:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1273 IP address blocks: 62.25.64.0/18 maxlen: 18 62.208.0.0/16 maxlen: 16 62.221.0.0/19 maxlen: 19 141.1.0.0/16 maxlen: 16 185.204.4.0/22 maxlen: 22 193.164.160.0/19 maxlen: 19 193.195.0.0/17 maxlen: 17 193.195.128.0/21 maxlen: 21 193.195.136.0/23 maxlen: 23 193.195.139.0/24 maxlen: 24 193.195.140.0/24 maxlen: 24 193.195.142.0/23 maxlen: 23 193.195.144.0/20 maxlen: 20 193.195.160.0/19 maxlen: 19 193.195.192.0/18 maxlen: 18 194.6.0.0/18 maxlen: 18 194.6.64.0/19 maxlen: 19 194.70.0.0/23 maxlen: 23 194.70.2.0/24 maxlen: 24 194.70.4.0/22 maxlen: 22 194.70.8.0/21 maxlen: 21 194.70.16.0/20 maxlen: 20 194.70.32.0/22 maxlen: 22 194.70.37.0/24 maxlen: 24 194.70.38.0/23 maxlen: 23 194.70.40.0/21 maxlen: 21 194.70.48.0/20 maxlen: 20 194.70.64.0/20 maxlen: 20 194.70.80.0/21 maxlen: 21 194.70.88.0/22 maxlen: 22 194.70.92.0/23 maxlen: 23 194.70.95.0/24 maxlen: 24 194.70.96.0/19 maxlen: 19 194.70.128.0/18 maxlen: 18 194.70.192.0/19 maxlen: 19 194.70.224.0/21 maxlen: 21 194.70.232.0/23 maxlen: 23 194.70.235.0/24 maxlen: 24 194.70.236.0/22 maxlen: 22 194.70.240.0/20 maxlen: 20 194.112.64.0/18 maxlen: 18 194.152.64.0/19 maxlen: 19 194.159.0.0/16 maxlen: 16 194.176.128.0/19 maxlen: 19 194.177.160.0/19 maxlen: 19 194.205.0.0/16 maxlen: 16 194.217.0.0/16 maxlen: 16 194.221.0.0/16 maxlen: 16 195.2.0.0/19 maxlen: 19 195.10.0.0/18 maxlen: 18 195.11.0.0/16 maxlen: 16 195.27.0.0/16 maxlen: 16 195.44.0.0/16 maxlen: 16 195.59.0.0/16 maxlen: 16 195.80.64.0/19 maxlen: 19 195.89.0.0/16 maxlen: 16 195.89.13.0/24 maxlen: 24 195.92.0.0/16 maxlen: 16 195.144.128.0/19 maxlen: 19 195.173.0.0/16 maxlen: 16 195.248.192.0/19 maxlen: 19 212.62.0.0/19 maxlen: 19 212.137.0.0/16 maxlen: 16 212.158.0.0/17 maxlen: 17 212.165.0.0/19 maxlen: 19 212.240.0.0/16 maxlen: 16 213.12.0.0/16 maxlen: 16 213.38.0.0/16 maxlen: 16 213.185.192.0/19 maxlen: 19 213.216.128.0/18 maxlen: 18 217.134.0.0/15 maxlen: 15 217.135.0.0/16 maxlen: 16 217.161.0.0/16 maxlen: 16 2001:5000::/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:9f:76:ec:ae:13:60:17:bb:55:5b:72:6c:07:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129 Validity Not Before: Jan 2 02:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a9353113e81bd0eb38543282dd48fcc78db2161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8c:14:6e:e5:04:df:0e:c3:04:37:be:81:6c: 3d:d9:d0:74:48:f9:e3:ca:f5:3d:c3:d1:2c:38:2f: 17:83:31:a9:11:b5:3f:78:8a:15:a8:d8:64:15:2a: d8:7c:50:29:7a:19:fc:38:25:62:8e:4a:3f:7d:f9: 6c:2e:5a:c8:9a:ab:4f:c9:5b:6d:58:87:15:4b:c6: 6c:80:99:fa:cd:49:73:d5:d0:cf:1d:2c:10:b4:5d: ee:97:0d:b7:4e:c3:60:8d:b4:ef:2a:33:15:69:b5: 59:e3:8f:e0:af:4d:81:f7:6c:08:19:c1:27:57:92: a2:c6:c0:10:8f:a4:3f:a9:93:b9:6f:4a:10:28:73: 58:61:48:74:a2:01:9c:bc:76:63:a1:7d:1c:15:ed: 41:58:35:2c:55:64:57:79:10:01:81:5d:8e:58:8b: 92:79:23:45:29:70:2f:62:90:7c:7f:6d:98:9c:6b: 2c:ad:cc:79:f9:9d:74:2a:00:b9:59:ba:45:ae:1d: 4b:09:38:47:0d:f5:a9:1d:cd:ab:56:de:25:85:66: 80:cf:83:6f:0b:dc:2d:26:05:dd:7e:bf:b7:88:7b: 61:60:1a:d9:f2:d8:c9:52:9b:d8:9f:4f:b5:e6:4c: bd:dd:e6:84:a1:39:bd:65:aa:73:af:be:5e:82:31: ba:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:93:53:11:3E:81:BD:0E:B3:85:43:28:2D:D4:8F:CC:78:DB:21:61 X509v3 Authority Key Identifier: keyid:D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/epNTET6BvQ6zhUMoLdSPzHjbIWE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.25.64.0/18 62.208.0.0/16 62.221.0.0/19 141.1.0.0/16 185.204.4.0/22 193.164.160.0/19 193.195.0.0-193.195.137.255 193.195.139.0-193.195.140.255 193.195.142.0-193.195.255.255 194.6.0.0-194.6.95.255 194.70.0.0-194.70.2.255 194.70.4.0-194.70.35.255 194.70.37.0-194.70.93.255 194.70.95.0-194.70.233.255 194.70.235.0-194.70.255.255 194.112.64.0/18 194.152.64.0/19 194.159.0.0/16 194.176.128.0/19 194.177.160.0/19 194.205.0.0/16 194.217.0.0/16 194.221.0.0/16 195.2.0.0/19 195.10.0.0/18 195.11.0.0/16 195.27.0.0/16 195.44.0.0/16 195.59.0.0/16 195.80.64.0/19 195.89.0.0/16 195.92.0.0/16 195.144.128.0/19 195.173.0.0/16 195.248.192.0/19 212.62.0.0/19 212.137.0.0/16 212.158.0.0/17 212.165.0.0/19 212.240.0.0/16 213.12.0.0/16 213.38.0.0/16 213.185.192.0/19 213.216.128.0/18 217.134.0.0/15 217.161.0.0/16 IPv6: 2001:5000::/21 Signature Algorithm: sha256WithRSAEncryption c6:04:e7:1f:c7:9c:c1:2f:0b:85:21:81:a8:be:0b:d0:15:f9: 81:3f:96:07:64:52:1f:26:a3:89:84:8c:83:c8:bc:f6:4e:1b: f5:91:05:99:2a:c4:9c:af:1d:e2:81:e4:9d:9e:0d:e4:3b:6e: a1:e5:b7:e5:ee:51:26:cd:09:6a:63:7c:d3:5e:28:4e:0d:fb: 62:d9:af:26:1c:ef:db:e2:dc:7d:7c:02:cd:7a:da:fb:5d:ab: 72:93:9b:a6:e4:ef:e9:7e:a9:89:cd:f6:01:eb:2a:6a:61:a8: 73:52:76:c4:dd:88:96:92:18:f1:8a:f9:68:11:bd:23:ba:2d: dd:12:fc:b0:a6:f2:50:35:7b:5a:7e:77:d3:0d:d2:60:39:e7: 16:e1:81:82:d8:72:a8:b4:3a:37:1d:d0:ef:66:da:d9:57:a9: b3:2c:08:77:24:de:f6:26:b1:2b:2f:4a:8b:d4:77:23:48:d1: 76:ae:7d:2c:93:62:fb:5e:37:50:8c:4e:39:49:72:c5:d1:3e: 9f:ea:54:57:f0:90:4e:43:16:50:46:17:1b:0c:9e:c2:39:ed: 2d:51:ac:72:9a:c5:fe:48:b9:6b:a0:8b:dd:f3:0a:90:09:bb: 6b:c1:f2:e9:c0:d9:e2:f6:5f:3f:25:6c:28:9d:6a:37:1d:f9: a9:71:4f:39 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgISAZt8gJ927K4TYBe7VVtybAfoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYWE0YTFhN2EzYWQyM2ZhYWUyYWVhZTlmYTYxOTRmMDIx MjgxMjkwHhcNMjYwMTAyMDIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTkzNTMxMTNlODFiZDBlYjM4NTQzMjgyZGQ0OGZjYzc4ZGIyMTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYwUbuUE3w7DBDe+gWw92dB0SPnj yvU9w9EsOC8XgzGpEbU/eIoVqNhkFSrYfFApehn8OCVijko/fflsLlrImqtPyVtt WIcVS8ZsgJn6zUlz1dDPHSwQtF3ulw23TsNgjbTvKjMVabVZ44/gr02B92wIGcEn V5KixsAQj6Q/qZO5b0oQKHNYYUh0ogGcvHZjoX0cFe1BWDUsVWRXeRABgV2OWIuS eSNFKXAvYpB8f22YnGssrcx5+Z10KgC5WbpFrh1LCThHDfWpHc2rVt4lhWaAz4Nv C9wtJgXdfr+3iHthYBrZ8tjJUpvYn0+15ky93eaEoTm9Zapzr75egjG6/QIDAQAB o4IDXzCCA1swHQYDVR0OBBYEFHqTUxE+gb0Os4VDKC3Uj8x42yFhMB8GA1UdIwQY MBaAFNCqShp6OtI/quKurp+mGU8CEoEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEtwS0dubzYwai1xNHE2dW42WVpUd0lTZ1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83NjU1NmUtYTFkOC00ZTBhLTg0Njgt MjIxNGYxOGViMzI5LzEvZXBOVEVUNkJ2UTZ6aFVNb0xkU1B6SGpiSVdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS83NjU1NmUtYTFkOC00ZTBhLTg0NjgtMjIxNGYxOGViMzI5 LzEvMEtwS0dubzYwai1xNHE2dW42WVpUd0lTZ1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBcwYIKwYBBQUHAQcBAf8EggFiMIIBXjCCAUwEAgABMIIB RAMEBj4ZQAMDAD7QAwQFPt0AAwMAjQEDBAK5zAQDBAXBpKAwCwMDAMHDAwQBwcOI MAwDBADBw4sDBADBw4wwCwMEAcHDjgMDAsHAMAsDAwHCBgMEBcIGQDALAwMBwkYD BADCRgIwDAMEAsJGBAMEAsJGIDAMAwQAwkYlAwQBwkZcMAwDBADCRl8DBAHCRugw CwMEAMJG6wMDAMJGAwQGwnBAAwQFwphAAwMAwp8DBAXCsIADBAXCsaADAwDCzQMD AMLZAwMAwt0DBAXDAgADBAbDCgADAwDDCwMDAMMbAwMAwywDAwDDOwMEBcNQQAMD AMNZAwMAw1wDBAXDkIADAwDDrQMEBcP4wAMEBdQ+AAMDANSJAwQH1J4AAwQF1KUA AwMA1PADAwDVDAMDANUmAwQF1bnAAwQG1diAAwMB2YYDAwDZoTAMBAIAAjAGAwQD IAFQMA0GCSqGSIb3DQEBCwUAA4IBAQDGBOcfx5zBLwuFIYGovgvQFfmBP5YHZFIf JqOJhIyDyLz2Thv1kQWZKsScrx3igeSdng3kO26h5bfl7lEmzQlqY3zTXihODfti 2a8mHO/b4tx9fALNetr7Xatyk5um5O/pfqmJzfYB6ypqYahzUnbE3YiWkhjxivlo Eb0jui3dEvywpvJQNXtafnfTDdJgOecW4YGC2HKotDo3HdDvZtrZV6mzLAh3JN72 JrErL0qL1HcjSNF2rn0sk2L7XjdQjE45SXLF0T6f6lRX8JBOQxZQRhcbDJ7COe0t UaxymsX+SLlroIvd8wqQCbtrwfLpwNni9l8/JWwonWo3HfmpcU85 -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:53 2026 by rpki-client