This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/oJ_9gZWX0-HZBwO501St9llybTk.roa File: oJ_9gZWX0-HZBwO501St9llybTk.roa (raw, json) Hash identifier: TLUGLY8S71f/0cvwgOTLfE6brs5a4M3ghefdEt5ZM+k= Subject key identifier: A0:9F:FD:81:95:97:D3:E1:D9:07:03:B9:D3:54:AD:F6:59:72:6D:39 Certificate issuer: /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6 Certificate serial: 019B7A5AAE313B0C87F105616939202A872C Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/oJ_9gZWX0-HZBwO501St9llybTk.roa Signing time: Thu 01 Jan 2026 16:18:41 +0000 ROA not before: Thu 01 Jan 2026 16:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8849 IP address blocks: 5.42.206.0/24 maxlen: 24 5.44.249.0/24 maxlen: 24 31.222.226.0/24 maxlen: 24 62.122.187.0/24 maxlen: 24 88.210.36.0/23 maxlen: 24 89.36.162.0/24 maxlen: 24 89.36.163.0/24 maxlen: 24 89.40.226.0/24 maxlen: 24 91.192.81.0/24 maxlen: 24 95.81.85.0/24 maxlen: 24 95.81.86.0/24 maxlen: 24 95.81.107.0/24 maxlen: 24 95.81.110.0/24 maxlen: 24 95.174.68.0/24 maxlen: 24 95.174.69.0/24 maxlen: 24 95.174.70.0/24 maxlen: 24 95.174.71.0/24 maxlen: 24 103.97.91.0/24 maxlen: 24 103.111.112.0/22 maxlen: 24 103.253.36.0/24 maxlen: 24 109.122.200.0/23 maxlen: 24 109.122.207.0/24 maxlen: 24 146.19.196.0/24 maxlen: 24 158.255.76.0/24 maxlen: 24 176.97.192.0/24 maxlen: 24 185.140.210.0/24 maxlen: 24 185.140.211.0/24 maxlen: 24 185.147.53.0/24 maxlen: 24 185.224.249.0/24 maxlen: 24 185.230.245.0/24 maxlen: 24 185.234.144.0/23 maxlen: 23 192.77.248.0/24 maxlen: 24 193.35.224.0/24 maxlen: 24 213.111.130.0/24 maxlen: 24 213.111.131.0/24 maxlen: 24 213.111.142.0/24 maxlen: 24 2a06:f901:4000::/36 maxlen: 36 2a06:f901:8000::/36 maxlen: 36 2a06:f901:c000::/36 maxlen: 36 2a06:f902:4000::/36 maxlen: 36 2a06:f902:8000::/36 maxlen: 36 2a06:f903:4000::/36 maxlen: 36 2a06:f903:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ae:31:3b:0c:87:f1:05:61:69:39:20:2a:87:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6 Validity Not Before: Jan 1 16:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a09ffd819597d3e1d90703b9d354adf659726d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b4:3e:10:38:90:c5:ab:8f:26:73:60:3e:69: 7c:24:38:be:5f:5f:3f:89:7d:b9:30:c8:2c:c7:62: 14:a2:7c:c9:80:78:1e:9f:b7:db:b6:4c:7d:2c:88: 1f:0d:d0:e5:d2:b9:60:ab:a2:92:05:fd:53:3c:9c: 83:b1:6c:4e:fd:01:e2:5a:aa:3b:98:07:e9:57:46: 0b:9c:f4:ff:69:e8:75:b8:5b:bc:c8:3e:a4:ae:af: 8b:d8:28:49:4f:43:27:fc:e4:e3:7a:28:93:ac:98: 39:12:2e:e5:d6:61:fc:85:8e:d6:9c:e3:29:f8:54: 88:e1:68:64:71:b3:cd:d9:0c:23:ef:cc:42:16:ee: c4:6b:ca:7e:d4:9a:8f:30:50:4c:4a:1e:4c:4f:f7: 2b:3f:6f:12:77:d5:c3:af:e9:62:87:61:8e:58:71: a4:d1:81:76:f2:6e:48:0a:5f:32:49:8e:a9:05:89: 50:3a:81:48:55:cb:90:e7:b3:16:70:1c:32:ce:da: 1a:86:49:80:67:f5:60:2f:a7:5f:0f:5e:2d:1f:4b: 64:ba:b9:96:c6:95:82:53:1e:4e:e4:0e:ca:93:10: f6:58:d1:a1:ee:47:85:97:12:08:c8:f5:0e:94:5c: 83:5c:4a:b1:f9:35:15:9f:8d:42:4b:2c:04:03:9b: 39:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9F:FD:81:95:97:D3:E1:D9:07:03:B9:D3:54:AD:F6:59:72:6D:39 X509v3 Authority Key Identifier: keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/oJ_9gZWX0-HZBwO501St9llybTk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.206.0/24 5.44.249.0/24 31.222.226.0/24 62.122.187.0/24 88.210.36.0/23 89.36.162.0/23 89.40.226.0/24 91.192.81.0/24 95.81.85.0-95.81.86.255 95.81.107.0/24 95.81.110.0/24 95.174.68.0/22 103.97.91.0/24 103.111.112.0/22 103.253.36.0/24 109.122.200.0/23 109.122.207.0/24 146.19.196.0/24 158.255.76.0/24 176.97.192.0/24 185.140.210.0/23 185.147.53.0/24 185.224.249.0/24 185.230.245.0/24 185.234.144.0/23 192.77.248.0/24 193.35.224.0/24 213.111.130.0/23 213.111.142.0/24 IPv6: 2a06:f901:4000::/36 2a06:f901:8000::/36 2a06:f901:c000::/36 2a06:f902:4000::/36 2a06:f902:8000::/36 2a06:f903:4000::/36 2a06:f903:8000::/36 Signature Algorithm: sha256WithRSAEncryption be:35:d5:ee:0f:19:a6:6d:d8:d2:d2:b9:c1:57:b8:a5:7d:ab: ce:e9:51:d2:4a:03:6a:aa:43:1c:c1:7f:fd:5a:19:5e:4c:41: 94:32:83:71:f4:4a:05:8e:b7:db:7d:d8:72:06:5d:06:d0:8b: 08:75:d4:de:9a:3e:f8:20:33:c6:0e:35:cc:33:3c:0f:90:c3: 06:7a:52:99:36:9b:90:60:db:35:5a:73:79:20:6b:9d:d4:f6: ed:ff:bd:3d:84:e6:0d:6d:92:81:62:30:ec:46:fd:ae:45:7a: fe:60:1a:4a:f8:92:ce:58:f0:82:e7:5e:28:d9:88:ba:96:c1: 4d:5d:57:0c:66:61:81:fa:1f:ab:98:d3:5e:b2:5b:79:f4:0c: ae:df:a2:b5:62:f3:a6:cc:cd:ae:6d:c6:6c:53:0d:42:06:11: 21:11:9f:3a:50:0d:e0:d8:a8:9e:16:5b:e4:90:15:73:66:17: 28:ae:cb:6a:1d:8a:0e:d4:7b:95:8c:5e:11:3a:c8:8e:e7:b6: 67:77:32:0b:ba:e9:f7:4f:70:6a:22:0d:9d:ea:ce:0a:40:25: 42:48:94:7e:c7:0c:39:ab:dc:d6:8c:0b:56:d6:f1:d9:a7:8e: 27:94:f3:4c:7d:a9:f7:f6:43:cd:61:25:68:d5:0c:55:93:74: 49:d9:2c:d4 -----BEGIN CERTIFICATE----- MIIF9TCCBN2gAwIBAgISAZt6Wq4xOwyH8QVhaTkgKocsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZWJmYmZkNmY5MzdjNWFlMzllM2UzOGU4YWI4Mzg0MTA3 NDIxYTYwHhcNMjYwMTAxMTYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDlmZmQ4MTk1OTdkM2UxZDkwNzAzYjlkMzU0YWRmNjU5NzI2ZDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybQ+EDiQxauPJnNgPml8JDi+X18/ iX25MMgsx2IUonzJgHgen7fbtkx9LIgfDdDl0rlgq6KSBf1TPJyDsWxO/QHiWqo7 mAfpV0YLnPT/aeh1uFu8yD6krq+L2ChJT0Mn/OTjeiiTrJg5Ei7l1mH8hY7WnOMp +FSI4WhkcbPN2Qwj78xCFu7Ea8p+1JqPMFBMSh5MT/crP28Sd9XDr+lih2GOWHGk 0YF28m5ICl8ySY6pBYlQOoFIVcuQ57MWcBwyztoahkmAZ/VgL6dfD14tH0tkurmW xpWCUx5O5A7KkxD2WNGh7keFlxIIyPUOlFyDXEqx+TUVn41CSywEA5s5sQIDAQAB o4IDATCCAv0wHQYDVR0OBBYEFKCf/YGVl9Ph2QcDudNUrfZZcm05MB8GA1UdIwQY MBaAFA/r+/1vk3xa454+OOirg4QQdCGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGIt N2Q3MDM3NGQ3NmQyLzEvb0pfOWdaV1gwLUhaQndPNTAxU3Q5bGx5YlRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGItN2Q3MDM3NGQ3NmQy LzEvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBFQYIKwYBBQUHAQcBAf8EggEEMIIBADCBvQQCAAEwgbYD BAAFKs4DBAAFLPkDBAAf3uIDBAA+ersDBAFY0iQDBAFZJKIDBABZKOIDBABbwFEw DAMEAF9RVQMEAF9RVgMEAF9RawMEAF9RbgMEAl+uRAMEAGdhWwMEAmdvcAMEAGf9 JAMEAW16yAMEAG16zwMEAJITxAMEAJ7/TAMEALBhwAMEAbmM0gMEALmTNQMEALng +QMEALnm9QMEAbnqkAMEAMBN+AMEAMEj4AMEAdVvggMEANVvjjA+BAIAAjA4AwYE Kgb5AUADBgQqBvkBgAMGBCoG+QHAAwYEKgb5AkADBgQqBvkCgAMGBCoG+QNAAwYE Kgb5A4AwDQYJKoZIhvcNAQELBQADggEBAL411e4PGaZt2NLSucFXuKV9q87pUdJK A2qqQxzBf/1aGV5MQZQyg3H0SgWOt9t92HIGXQbQiwh11N6aPvggM8YONcwzPA+Q wwZ6Upk2m5Bg2zVac3kga53U9u3/vT2E5g1tkoFiMOxG/a5Fev5gGkr4ks5Y8ILn XijZiLqWwU1dVwxmYYH6H6uY016yW3n0DK7forVi86bMza5txmxTDUIGESERnzpQ DeDYqJ4WW+SQFXNmFyiuy2odig7Ue5WMXhE6yI7ntmd3Mgu66fdPcGoiDZ3qzgpA JUJIlH7HDDmr3NaMC1bW8dmnjieU80x9qff2Q81hJWjVDFWTdEnZLNQ= -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:15 2026 by rpki-client