This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/9Bj3qM828fMc3yjQ4tJXC9syH4k.roa File: 9Bj3qM828fMc3yjQ4tJXC9syH4k.roa (raw, json) Hash identifier: OzSczmamPRhCfU6xyVdyY9S95iX3mAETLHzngFaLTqU= Subject key identifier: F4:18:F7:A8:CF:36:F1:F3:1C:DF:28:D0:E2:D2:57:0B:DB:32:1F:89 Certificate issuer: /CN=d79785de62dcf9e7930babd7b1d39c5853d1944f Certificate serial: 019B7DCA3A026C2030F75585086388EBAC0A Authority key identifier: D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/9Bj3qM828fMc3yjQ4tJXC9syH4k.roa Signing time: Fri 02 Jan 2026 08:19:23 +0000 ROA not before: Fri 02 Jan 2026 08:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202196 IP address blocks: 5.57.20.0/23 maxlen: 23 5.57.20.0/24 maxlen: 24 5.57.21.0/24 maxlen: 24 37.10.1.0/24 maxlen: 24 37.10.3.0/24 maxlen: 24 37.10.10.0/24 maxlen: 24 37.10.24.0/23 maxlen: 23 37.10.24.0/24 maxlen: 24 37.10.25.0/24 maxlen: 24 37.10.26.0/24 maxlen: 24 37.10.27.0/24 maxlen: 24 37.10.28.0/24 maxlen: 24 37.10.29.0/24 maxlen: 24 37.10.30.0/23 maxlen: 23 37.10.30.0/24 maxlen: 24 37.10.31.0/24 maxlen: 24 37.10.40.0/24 maxlen: 24 37.10.41.0/24 maxlen: 24 37.10.42.0/24 maxlen: 24 37.10.43.0/24 maxlen: 24 37.10.44.0/22 maxlen: 22 37.10.44.0/23 maxlen: 23 37.10.44.0/24 maxlen: 24 37.10.45.0/24 maxlen: 24 37.10.46.0/24 maxlen: 24 91.195.236.0/24 maxlen: 24 2a01:5041::/32 maxlen: 48 2a01:5041::/48 maxlen: 48 2a01:5041:1::/48 maxlen: 48 2a01:5041:2::/48 maxlen: 48 2a01:5041:3::/48 maxlen: 48 2a01:5041:4::/48 maxlen: 48 2a01:5041:6::/48 maxlen: 48 2a01:5041:7::/48 maxlen: 48 2a01:5041:8::/48 maxlen: 48 2a01:5041:b::/48 maxlen: 48 2a01:5041:e::/48 maxlen: 48 2a01:5041:f::/48 maxlen: 48 2a01:5041:efd::/48 maxlen: 48 2a01:5041:efe::/48 maxlen: 48 2a01:5041:eff::/48 maxlen: 48 2a01:5041:1000::/48 maxlen: 48 2a01:5041:1003::/48 maxlen: 48 2a01:5041:1014::/48 maxlen: 48 2a01:5041:2000::/48 maxlen: 48 2a01:5041:2001::/48 maxlen: 48 2a01:5041:2002::/48 maxlen: 48 2a01:5041:2003::/48 maxlen: 48 2a01:5041:2004::/48 maxlen: 48 2a01:5041:2006::/48 maxlen: 48 2a01:5041:2007::/48 maxlen: 48 2a01:5041:2008::/48 maxlen: 48 2a01:5041:200b::/48 maxlen: 48 2a01:5041:200c::/48 maxlen: 48 2a01:5041:200e::/48 maxlen: 48 2a01:5041:200f::/48 maxlen: 48 2a01:5041:2010::/48 maxlen: 48 2a01:5041:2efd::/48 maxlen: 48 2a01:5041:2efe::/48 maxlen: 48 2a01:5041:2eff::/48 maxlen: 48 2a01:5041:3000::/48 maxlen: 48 2a01:5041:3003::/48 maxlen: 48 2a01:5041:3014::/48 maxlen: 48 2a01:5041:4000::/48 maxlen: 48 2a01:5041:4003::/48 maxlen: 48 2a01:5041:4007::/48 maxlen: 48 2a01:5041:400b::/48 maxlen: 48 2a01:5041:400e::/48 maxlen: 48 2a01:5041:4efd::/48 maxlen: 48 2a01:5041:4efe::/48 maxlen: 48 2a01:5041:4eff::/48 maxlen: 48 2a01:5041:5000::/48 maxlen: 48 2a01:5041:5002::/48 maxlen: 48 2a01:5041:5003::/48 maxlen: 48 2a01:5041:500e::/48 maxlen: 48 2a01:5041:6000::/48 maxlen: 48 2a01:5041:6003::/48 maxlen: 48 2a01:5041:6004::/48 maxlen: 48 2a01:5041:6006::/48 maxlen: 48 2a01:5041:6008::/48 maxlen: 48 2a01:5041:600e::/48 maxlen: 48 2a01:5041:7001::/48 maxlen: 48 2a01:5041:ea09::/48 maxlen: 48 2a01:5041:ea14::/48 maxlen: 48 2a01:5041:ea15::/48 maxlen: 48 2a01:5041:ea16::/48 maxlen: 48 2a01:5041:ea20::/48 maxlen: 48 2a01:5042::/48 maxlen: 48 2a01:5042:1::/48 maxlen: 48 2a01:5042:3::/48 maxlen: 48 2a01:5042:7::/48 maxlen: 48 2a01:5042:b::/48 maxlen: 48 2a01:5042:e::/48 maxlen: 48 2a01:5042:efd::/48 maxlen: 48 2a01:5042:eff::/48 maxlen: 48 2a01:5042:2000::/48 maxlen: 48 2a01:5042:2001::/48 maxlen: 48 2a01:5042:2003::/48 maxlen: 48 2a01:5042:2007::/48 maxlen: 48 2a01:5042:200b::/48 maxlen: 48 2a01:5042:200e::/48 maxlen: 48 2a01:5042:2efd::/48 maxlen: 48 2a01:5042:2eff::/48 maxlen: 48 2a01:5043::/48 maxlen: 48 2a01:5043:3::/48 maxlen: 48 2a01:5043:7::/48 maxlen: 48 2a01:5043:b::/48 maxlen: 48 2a01:5043:e::/48 maxlen: 48 2a01:5043:efd::/48 maxlen: 48 2a01:5043:eff::/48 maxlen: 48 2a01:5043:2000::/48 maxlen: 48 2a01:5043:2003::/48 maxlen: 48 2a01:5043:2007::/48 maxlen: 48 2a01:5043:2efd::/48 maxlen: 48 2a01:5043:2eff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.crl rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.mft rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:3a:02:6c:20:30:f7:55:85:08:63:88:eb:ac:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d79785de62dcf9e7930babd7b1d39c5853d1944f Validity Not Before: Jan 2 08:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f418f7a8cf36f1f31cdf28d0e2d2570bdb321f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ba:72:0b:6d:52:ed:b0:7c:d4:59:6d:7f:38: 08:c6:41:f9:98:db:41:70:65:66:9a:bc:87:4e:06: 01:f0:74:af:72:c3:0f:6c:97:95:e6:56:12:f7:3a: 4e:4a:88:4d:95:ce:63:c8:7a:2d:4d:27:c2:56:43: 1f:a6:29:cb:d4:ac:04:dd:20:41:17:59:b6:3e:c5: 3b:cb:e0:d6:d1:6b:67:d7:1d:4c:67:48:70:be:23: 60:4f:c1:aa:86:79:6e:90:4b:d5:45:2a:5a:43:51: 1c:ac:87:f8:d2:1b:ea:04:ab:fb:5a:b8:5c:ee:05: fa:50:d4:05:f6:18:09:41:7a:ba:73:46:ae:0c:a2: f7:55:50:6c:62:9d:b3:0b:f6:4e:5a:ac:6b:06:13: 4c:80:0f:13:86:e6:53:7f:ea:79:3a:6e:e1:a9:6e: 3a:f0:9c:2c:4e:0b:f1:9f:36:89:1a:d3:05:8b:5e: 1e:51:99:ac:c3:09:52:69:c4:f9:85:a7:c1:17:b3: 14:68:e7:83:86:37:17:dc:10:00:99:f3:b0:00:ed: b2:7a:46:5d:d3:3d:10:02:27:1e:01:c7:9a:2a:df: c5:e9:4c:9d:42:5e:b2:0a:64:94:af:9f:e9:42:70: 84:e7:15:53:d0:96:a1:28:82:36:16:a9:eb:27:4f: 4b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:18:F7:A8:CF:36:F1:F3:1C:DF:28:D0:E2:D2:57:0B:DB:32:1F:89 X509v3 Authority Key Identifier: keyid:D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/9Bj3qM828fMc3yjQ4tJXC9syH4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.57.20.0/23 37.10.1.0/24 37.10.3.0/24 37.10.10.0/24 37.10.24.0/21 37.10.40.0/21 91.195.236.0/24 IPv6: 2a01:5041::-2a01:5042:1:ffff:ffff:ffff:ffff:ffff 2a01:5042:3::/48 2a01:5042:7::/48 2a01:5042:b::/48 2a01:5042:e::/48 2a01:5042:efd::/48 2a01:5042:eff::/48 2a01:5042:2000::/47 2a01:5042:2003::/48 2a01:5042:2007::/48 2a01:5042:200b::/48 2a01:5042:200e::/48 2a01:5042:2efd::/48 2a01:5042:2eff::/48 2a01:5043::/48 2a01:5043:3::/48 2a01:5043:7::/48 2a01:5043:b::/48 2a01:5043:e::/48 2a01:5043:efd::/48 2a01:5043:eff::/48 2a01:5043:2000::/48 2a01:5043:2003::/48 2a01:5043:2007::/48 2a01:5043:2efd::/48 2a01:5043:2eff::/48 Signature Algorithm: sha256WithRSAEncryption 91:46:eb:94:30:3b:a8:55:8d:b2:f1:6d:a4:25:b8:0b:83:0b: 6b:24:57:1b:78:bf:50:08:e4:f8:61:fc:53:d9:c6:64:6b:ce: 39:27:7b:e2:2e:8a:29:43:28:60:f3:42:23:ca:66:7b:ed:b2: c9:e6:e7:ff:11:f2:95:85:c4:a3:ad:66:58:75:d3:ea:ed:7e: ca:17:c0:74:23:65:15:cf:d0:f3:2d:42:07:64:a1:9a:ae:13: 92:76:bb:c8:14:43:d7:0c:f5:ec:a1:1e:a9:c3:06:8b:96:a9: e4:85:24:47:0e:17:10:78:7d:96:44:15:cc:4b:7b:e0:8b:85: fd:8e:93:60:4d:3d:e4:96:e6:70:c9:0b:8a:7d:51:b1:52:ca: 6f:a5:34:49:35:dd:14:17:d5:68:e0:b6:ad:0e:d7:ff:25:d7: ee:8a:64:46:20:3f:5e:0f:fc:8b:95:05:df:a0:f7:90:0e:3a: e3:98:01:db:df:c7:4b:49:d9:b1:6d:6a:54:ec:1d:27:93:18: 9e:ef:5b:46:14:f2:37:e5:91:e6:d0:d0:5e:9f:99:ec:24:d7: 23:eb:f8:e5:a3:05:aa:7c:a5:bd:23:af:b6:88:51:95:fe:fc: 46:5c:80:0d:25:ff:c8:ff:e9:59:32:c1:ab:b7:d9:97:b6:04: c4:cf:5e:4d -----BEGIN CERTIFICATE----- MIIGJDCCBQygAwIBAgISAZt9yjoCbCAw91WFCGOI66wKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OTc4NWRlNjJkY2Y5ZTc5MzBiYWJkN2IxZDM5YzU4NTNk MTk0NGYwHhcNMjYwMTAyMDgxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDE4ZjdhOGNmMzZmMWYzMWNkZjI4ZDBlMmQyNTcwYmRiMzIxZjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8bpyC21S7bB81FltfzgIxkH5mNtB cGVmmryHTgYB8HSvcsMPbJeV5lYS9zpOSohNlc5jyHotTSfCVkMfpinL1KwE3SBB F1m2PsU7y+DW0Wtn1x1MZ0hwviNgT8GqhnlukEvVRSpaQ1EcrIf40hvqBKv7Wrhc 7gX6UNQF9hgJQXq6c0auDKL3VVBsYp2zC/ZOWqxrBhNMgA8ThuZTf+p5Om7hqW46 8JwsTgvxnzaJGtMFi14eUZmswwlSacT5hafBF7MUaOeDhjcX3BAAmfOwAO2yekZd 0z0QAiceAceaKt/F6UydQl6yCmSUr5/pQnCE5xVT0JahKII2FqnrJ09LpwIDAQAB o4IDMDCCAywwHQYDVR0OBBYEFPQY96jPNvHzHN8o0OLSVwvbMh+JMB8GA1UdIwQY MBaAFNeXhd5i3Pnnkwur17HTnFhT0ZRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTVlRjNtTGMtZWVUQzZ2WHNkT2NXRlBSbEU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83Zjk3MjgtOTU1OS00MjYzLWJjZmEt NzU4NTVkYjcxNTFmLzEvOUJqM3FNODI4Zk1jM3lqUTR0SlhDOXN5SDRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi83Zjk3MjgtOTU1OS00MjYzLWJjZmEtNzU4NTVkYjcxNTFm LzEvMTVlRjNtTGMtZWVUQzZ2WHNkT2NXRlBSbEU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBRAYIKwYBBQUHAQcBAf8EggEzMIIBLzAwBAIAATAqAwQB BTkUAwQAJQoBAwQAJQoDAwQAJQoKAwQDJQoYAwQDJQooAwQAW8PsMIH6BAIAAjCB 8zAQAwUAKgFQQQMHASoBUEIAAAMHACoBUEIAAwMHACoBUEIABwMHACoBUEIACwMH ACoBUEIADgMHACoBUEIO/QMHACoBUEIO/wMHASoBUEIgAAMHACoBUEIgAwMHACoB UEIgBwMHACoBUEIgCwMHACoBUEIgDgMHACoBUEIu/QMHACoBUEIu/wMHACoBUEMA AAMHACoBUEMAAwMHACoBUEMABwMHACoBUEMACwMHACoBUEMADgMHACoBUEMO/QMH ACoBUEMO/wMHACoBUEMgAAMHACoBUEMgAwMHACoBUEMgBwMHACoBUEMu/QMHACoB UEMu/zANBgkqhkiG9w0BAQsFAAOCAQEAkUbrlDA7qFWNsvFtpCW4C4MLayRXG3i/ UAjk+GH8U9nGZGvOOSd74i6KKUMoYPNCI8pme+2yyebn/xHylYXEo61mWHXT6u1+ yhfAdCNlFc/Q8y1CB2Shmq4Tkna7yBRD1wz17KEeqcMGi5ap5IUkRw4XEHh9lkQV zEt74IuF/Y6TYE095JbmcMkLin1RsVLKb6U0STXdFBfVaOC2rQ7X/yXX7opkRiA/ Xg/8i5UF36D3kA4645gB29/HS0nZsW1qVOwdJ5MYnu9bRhTyN+WR5tDQXp+Z7CTX I+v45aMFqnylvSOvtohRlf78RlyADSX/yP/pWTLBq7fZl7YExM9eTQ== -----END CERTIFICATE-----Generated at Sun Jan 25 10:52:31 2026 by rpki-client