This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/pK0mMMe5ncDdJyEM3KOt8j_7Zcs.roa File: pK0mMMe5ncDdJyEM3KOt8j_7Zcs.roa (raw, json) Hash identifier: 8ZQHloVRiSWPixW3ad8FKTPEwof+cMjzacDIHLOrqQY= Subject key identifier: A4:AD:26:30:C7:B9:9D:C0:DD:27:21:0C:DC:A3:AD:F2:3F:FB:65:CB Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8 Certificate serial: 019B783538B5C1291AC9347EA1E535F8BC69 Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/pK0mMMe5ncDdJyEM3KOt8j_7Zcs.roa Signing time: Thu 01 Jan 2026 06:18:32 +0000 ROA not before: Thu 01 Jan 2026 06:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59711 IP address blocks: 5.149.248.0/23 maxlen: 23 5.149.254.0/23 maxlen: 23 77.83.196.0/24 maxlen: 24 77.83.197.0/24 maxlen: 24 77.83.198.0/24 maxlen: 24 79.141.164.0/23 maxlen: 23 79.141.174.0/23 maxlen: 23 85.158.108.0/24 maxlen: 24 85.158.109.0/24 maxlen: 24 85.158.110.0/24 maxlen: 24 89.44.80.0/24 maxlen: 24 89.150.40.0/24 maxlen: 24 89.150.45.0/24 maxlen: 24 89.150.48.0/24 maxlen: 24 89.150.57.0/24 maxlen: 24 91.193.18.0/24 maxlen: 24 91.220.8.0/24 maxlen: 24 94.126.224.0/24 maxlen: 24 94.126.225.0/24 maxlen: 24 185.40.86.0/24 maxlen: 24 185.80.52.0/23 maxlen: 23 185.80.54.0/23 maxlen: 23 185.81.114.0/23 maxlen: 23 185.81.114.0/24 maxlen: 24 185.81.115.0/24 maxlen: 24 185.104.192.0/24 maxlen: 24 185.104.193.0/24 maxlen: 24 185.104.194.0/24 maxlen: 24 185.117.88.0/23 maxlen: 23 185.117.90.0/23 maxlen: 23 185.123.102.0/24 maxlen: 24 185.174.133.0/24 maxlen: 24 185.174.135.0/24 maxlen: 24 185.221.222.0/24 maxlen: 24 185.221.223.0/24 maxlen: 24 185.223.57.0/24 maxlen: 24 185.235.137.0/24 maxlen: 24 185.235.138.0/24 maxlen: 24 185.253.116.0/24 maxlen: 24 185.253.117.0/24 maxlen: 24 185.253.118.0/24 maxlen: 24 193.42.36.0/24 maxlen: 24 193.42.39.0/24 maxlen: 24 193.111.208.0/24 maxlen: 24 195.95.155.0/24 maxlen: 24 2a01:8640::/48 maxlen: 48 2a01:8640:2::/48 maxlen: 48 2a01:8640:6::/48 maxlen: 48 2a01:8640:9::/48 maxlen: 48 2a01:8640:a::/48 maxlen: 48 2a01:8640:f::/48 maxlen: 48 2a01:8640:11::/48 maxlen: 48 2a01:8640:12::/48 maxlen: 48 2a01:8640:13::/48 maxlen: 48 2a01:8640:14::/48 maxlen: 48 2a01:8640:15::/48 maxlen: 48 2a01:8640:17::/48 maxlen: 48 2a01:8640:18::/48 maxlen: 48 2a01:8640:1a::/48 maxlen: 48 2a01:8640:1b::/48 maxlen: 48 2a01:8640:1c::/48 maxlen: 48 2a01:8640:1d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:38:b5:c1:29:1a:c9:34:7e:a1:e5:35:f8:bc:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8 Validity Not Before: Jan 1 06:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4ad2630c7b99dc0dd27210cdca3adf23ffb65cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d1:63:b2:1d:7d:ee:c7:5b:d4:5e:09:30:e0: 5d:cb:fa:95:ca:a4:0c:05:27:f8:9b:b0:45:e1:75: d2:4d:d3:6f:db:a1:40:85:11:42:bd:a5:54:56:5a: c0:1d:1c:6a:60:6d:bc:5b:aa:66:57:b0:3a:aa:d6: 4d:f4:c0:a2:2f:0c:97:68:88:04:65:48:ce:d7:f5: 06:6f:3a:b6:96:d7:b4:d4:1a:4e:ea:60:3c:d3:0c: 95:4f:d1:7e:d5:c7:ca:b5:7c:a2:f9:34:e8:74:06: 54:a2:fa:43:1c:73:23:a5:54:55:42:69:d1:06:40: 36:86:0b:a3:7c:54:b0:11:1f:eb:12:b3:bc:05:4e: 5d:54:88:31:03:41:18:88:26:04:7b:f2:09:a5:88: e9:70:89:59:ad:20:2e:1f:33:5d:5b:3b:ce:33:6e: 57:b3:ef:50:e0:1e:10:cc:f7:05:f1:a0:5d:77:e5: 02:36:87:da:10:ec:24:10:66:fc:28:b6:aa:e4:cd: 3c:66:e3:b4:da:77:fb:9e:cd:fc:16:59:c0:66:75: 92:09:3c:b2:56:f3:99:fa:40:c8:9e:58:e8:99:57: f5:54:60:ff:72:56:6c:5e:5e:29:9b:8e:78:5a:02: 77:65:7e:67:1e:b1:42:c8:d3:98:2b:01:40:04:d3: 58:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:AD:26:30:C7:B9:9D:C0:DD:27:21:0C:DC:A3:AD:F2:3F:FB:65:CB X509v3 Authority Key Identifier: keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/pK0mMMe5ncDdJyEM3KOt8j_7Zcs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.149.248.0/23 5.149.254.0/23 77.83.196.0-77.83.198.255 79.141.164.0/23 79.141.174.0/23 85.158.108.0-85.158.110.255 89.44.80.0/24 89.150.40.0/24 89.150.45.0/24 89.150.48.0/24 89.150.57.0/24 91.193.18.0/24 91.220.8.0/24 94.126.224.0/23 185.40.86.0/24 185.80.52.0/22 185.81.114.0/23 185.104.192.0-185.104.194.255 185.117.88.0/22 185.123.102.0/24 185.174.133.0/24 185.174.135.0/24 185.221.222.0/23 185.223.57.0/24 185.235.137.0-185.235.138.255 185.253.116.0-185.253.118.255 193.42.36.0/24 193.42.39.0/24 193.111.208.0/24 195.95.155.0/24 IPv6: 2a01:8640::/48 2a01:8640:2::/48 2a01:8640:6::/48 2a01:8640:9::-2a01:8640:a:ffff:ffff:ffff:ffff:ffff 2a01:8640:f::/48 2a01:8640:11::-2a01:8640:15:ffff:ffff:ffff:ffff:ffff 2a01:8640:17::-2a01:8640:18:ffff:ffff:ffff:ffff:ffff 2a01:8640:1a::-2a01:8640:1d:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 71:d4:22:97:e0:6b:9b:42:ba:1e:25:20:a7:39:5b:60:02:42: bb:78:11:22:73:4d:52:b0:64:39:38:59:c3:0d:c4:95:9e:81: da:49:8d:a1:46:c9:88:ef:5d:98:02:57:bd:e6:91:91:e7:01: 78:70:c5:83:7d:45:19:9f:fb:ee:46:77:8b:80:af:d3:93:f5: cc:5d:39:a3:16:96:6e:bf:af:0e:c0:d9:49:a5:12:9a:0d:0c: 42:ae:3c:82:53:c0:ba:fa:47:62:4d:77:25:51:cb:bf:99:51: 5b:00:62:a4:25:6e:00:77:03:31:f0:f1:2f:7a:28:62:bb:5e: 94:bb:31:69:cc:d3:c8:21:a7:15:c5:c4:52:da:5f:3c:9e:be: d5:ba:d3:c8:74:dc:bf:2e:43:ef:e2:3d:92:2d:16:92:e7:a2: 5f:2d:c5:49:ad:bb:fb:c5:78:ba:c5:5e:79:bd:e2:85:43:d2: 2f:d2:ac:6e:65:80:b5:98:0a:63:d1:69:1c:40:20:ab:ba:12: d9:f2:1d:11:8e:33:b8:d6:a8:73:24:4b:93:a5:13:fc:ef:88: eb:07:7a:18:da:a8:b1:aa:ee:c9:4d:41:e0:be:30:7d:a6:35: 32:d6:ba:bb:8d:44:b2:9d:aa:4a:17:dc:d2:4e:33:0d:0c:58: c2:11:5b:b2 -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgISAZt4NTi1wSkayTR+oeU1+LxpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MTI0MmMzM2JjMmUyZTllNDU4NTBhMGZjNjRhYjJjNzUw NmE0YjgwHhcNMjYwMTAxMDYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGFkMjYzMGM3Yjk5ZGMwZGQyNzIxMGNkY2EzYWRmMjNmZmI2NWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9Fjsh197sdb1F4JMOBdy/qVyqQM BSf4m7BF4XXSTdNv26FAhRFCvaVUVlrAHRxqYG28W6pmV7A6qtZN9MCiLwyXaIgE ZUjO1/UGbzq2lte01BpO6mA80wyVT9F+1cfKtXyi+TTodAZUovpDHHMjpVRVQmnR BkA2hgujfFSwER/rErO8BU5dVIgxA0EYiCYEe/IJpYjpcIlZrSAuHzNdWzvOM25X s+9Q4B4QzPcF8aBdd+UCNofaEOwkEGb8KLaq5M08ZuO02nf7ns38FlnAZnWSCTyy VvOZ+kDInljomVf1VGD/clZsXl4pm454WgJ3ZX5nHrFCyNOYKwFABNNYcQIDAQAB o4IDYzCCA18wHQYDVR0OBBYEFKStJjDHuZ3A3SchDNyjrfI/+2XLMB8GA1UdIwQY MBaAFGkSQsM7wuLp5FhQoPxkqyx1BqS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjkt MzYyZmZlOGVlMjcwLzEvcEswbU1NZTVuY0RkSnlFTTNLT3Q4al83WmNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjktMzYyZmZlOGVlMjcw LzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBdwYIKwYBBQUHAQcBAf8EggFmMIIBYjCB4wQCAAEwgdwD BAEFlfgDBAEFlf4wDAMEAk1TxAMEAE1TxgMEAU+NpAMEAU+NrjAMAwQCVZ5sAwQA VZ5uAwQAWSxQAwQAWZYoAwQAWZYtAwQAWZYwAwQAWZY5AwQAW8ESAwQAW9wIAwQB Xn7gAwQAuShWAwQCuVA0AwQBuVFyMAwDBAa5aMADBAC5aMIDBAK5dVgDBAC5e2YD BAC5roUDBAC5rocDBAG53d4DBAC53zkwDAMEALnriQMEALnrijAMAwQCuf10AwQA uf12AwQAwSokAwQAwSonAwQAwW/QAwQAw1+bMHoEAgACMHQDBwAqAYZAAAADBwAq AYZAAAIDBwAqAYZAAAYwEgMHACoBhkAACQMHACoBhkAACgMHACoBhkAADzASAwcA KgGGQAARAwcBKgGGQAAUMBIDBwAqAYZAABcDBwAqAYZAABgwEgMHASoBhkAAGgMH ASoBhkAAHDANBgkqhkiG9w0BAQsFAAOCAQEAcdQil+Brm0K6HiUgpzlbYAJCu3gR InNNUrBkOThZww3ElZ6B2kmNoUbJiO9dmAJXveaRkecBeHDFg31FGZ/77kZ3i4Cv 05P1zF05oxaWbr+vDsDZSaUSmg0MQq48glPAuvpHYk13JVHLv5lRWwBipCVuAHcD MfDxL3ooYrtelLsxaczTyCGnFcXEUtpfPJ6+1brTyHTcvy5D7+I9ki0WkueiXy3F Sa27+8V4usVeeb3ihUPSL9KsbmWAtZgKY9FpHEAgq7oS2fIdEY4zuNaocyRLk6UT /O+I6wd6GNqosaruyU1B4L4wfaY1Mta6u41Esp2qShfc0k4zDQxYwhFbsg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:32:51 2026 by rpki-client