This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/6E2nopckUNUHewAUKPW8gx92zHo.roa File: 6E2nopckUNUHewAUKPW8gx92zHo.roa (raw, json) Hash identifier: LS6Zpyv4rOVmEmOXoIYaM0+fS+EgT9moE2KuNQFvnR0= Subject key identifier: E8:4D:A7:A2:97:24:50:D5:07:7B:00:14:28:F5:BC:83:1F:76:CC:7A Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C764B267368B70D944B7108F40574C Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/6E2nopckUNUHewAUKPW8gx92zHo.roa Signing time: Thu 01 Jan 2026 04:18:34 +0000 ROA not before: Thu 01 Jan 2026 04:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31195 IP address blocks: 31.173.132.0/23 maxlen: 23 31.173.134.0/23 maxlen: 23 31.173.135.0/24 maxlen: 24 31.173.143.0/24 maxlen: 24 31.173.225.0/24 maxlen: 24 31.173.226.0/24 maxlen: 24 31.173.228.0/23 maxlen: 23 31.173.228.0/24 maxlen: 24 31.173.229.0/24 maxlen: 24 31.173.230.0/24 maxlen: 24 31.173.231.0/24 maxlen: 24 31.173.232.0/23 maxlen: 23 31.173.235.0/24 maxlen: 24 31.173.236.0/23 maxlen: 23 31.173.238.0/24 maxlen: 24 31.173.239.0/24 maxlen: 24 37.28.188.0/22 maxlen: 22 37.28.190.0/24 maxlen: 24 37.28.191.0/24 maxlen: 24 37.29.43.0/24 maxlen: 24 37.29.88.0/22 maxlen: 22 37.29.89.0/24 maxlen: 24 37.29.91.0/24 maxlen: 24 37.29.92.0/22 maxlen: 22 37.29.94.0/24 maxlen: 24 37.29.95.0/24 maxlen: 24 78.25.124.0/22 maxlen: 22 78.25.127.0/24 maxlen: 24 83.149.52.0/22 maxlen: 22 83.169.224.0/23 maxlen: 23 83.169.226.0/24 maxlen: 24 83.169.227.0/24 maxlen: 24 83.169.228.0/23 maxlen: 23 83.169.230.0/24 maxlen: 24 85.26.240.0/22 maxlen: 22 85.26.244.0/22 maxlen: 22 85.26.247.0/24 maxlen: 24 94.154.64.0/24 maxlen: 24 94.154.71.0/24 maxlen: 24 94.154.72.0/24 maxlen: 24 94.154.73.0/24 maxlen: 24 94.154.74.0/24 maxlen: 24 94.154.75.0/24 maxlen: 24 94.154.76.0/24 maxlen: 24 178.176.233.0/24 maxlen: 24 178.176.234.0/24 maxlen: 24 178.176.235.0/24 maxlen: 24 178.178.64.0/24 maxlen: 24 178.178.65.0/24 maxlen: 24 178.178.66.0/24 maxlen: 24 178.178.67.0/24 maxlen: 24 178.178.68.0/24 maxlen: 24 178.178.69.0/24 maxlen: 24 178.178.70.0/24 maxlen: 24 178.178.71.0/24 maxlen: 24 178.178.72.0/24 maxlen: 24 178.178.73.0/24 maxlen: 24 178.178.74.0/24 maxlen: 24 178.178.75.0/24 maxlen: 24 178.178.76.0/24 maxlen: 24 178.178.77.0/24 maxlen: 24 188.170.228.0/23 maxlen: 23 188.170.230.0/24 maxlen: 24 188.170.231.0/24 maxlen: 24 188.170.232.0/24 maxlen: 24 188.170.233.0/24 maxlen: 24 188.170.234.0/24 maxlen: 24 188.170.235.0/24 maxlen: 24 188.170.236.0/24 maxlen: 24 188.170.237.0/24 maxlen: 24 188.170.239.0/24 maxlen: 24 195.225.160.0/24 maxlen: 24 195.225.161.0/24 maxlen: 24 195.225.162.0/24 maxlen: 24 195.225.163.0/24 maxlen: 24 213.138.208.0/24 maxlen: 24 213.138.209.0/24 maxlen: 24 213.138.211.0/24 maxlen: 24 213.138.212.0/24 maxlen: 24 213.138.213.0/24 maxlen: 24 213.138.215.0/24 maxlen: 24 213.138.221.0/24 maxlen: 24 217.8.86.0/24 maxlen: 24 2a03:d006::/40 maxlen: 40 2a03:d006:100::/40 maxlen: 40 2a03:d006:200::/40 maxlen: 40 2a03:d006:300::/40 maxlen: 40 2a03:d006:400::/40 maxlen: 40 2a03:d006:500::/40 maxlen: 40 2a03:d006:600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:64:b2:67:36:8b:70:d9:44:b7:10:8f:40:57:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e84da7a2972450d5077b001428f5bc831f76cc7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:46:70:ef:53:4f:95:cc:63:37:44:98:e8:eb: 9a:fb:dd:11:e4:55:50:61:00:45:5e:7b:42:d3:cd: 6d:38:31:43:18:ff:1b:78:06:3b:b9:27:1b:77:2a: 42:fe:ac:86:70:68:8e:5a:89:ef:fc:5c:0a:bf:07: 19:c1:ae:f6:7c:d6:72:ec:4a:91:4e:c9:5c:d0:63: 92:ef:89:22:77:77:db:c9:b0:ee:3f:58:96:f4:aa: be:b5:f0:fe:2f:bf:1a:7b:a5:ee:08:9c:93:b8:2b: 26:6d:b5:df:64:e8:48:44:9a:4f:40:41:00:2d:3c: ef:ab:df:7f:4f:db:85:0c:12:8f:74:a6:4b:2f:2a: 09:b8:bb:f1:97:7b:47:ef:48:a3:f6:9c:75:1c:16: eb:78:59:f2:dc:86:62:7c:a8:2d:65:29:99:c7:1b: 41:62:b5:ef:0b:7c:9c:36:fe:e3:07:e2:64:af:36: ff:9c:3b:46:c6:b1:e7:06:91:cf:be:65:20:45:d6: dc:0b:c4:b2:1d:26:3d:14:a0:e9:4c:51:f8:7c:29: b3:63:13:77:f1:b5:e1:88:fe:96:fa:21:b5:d8:0e: 5a:e5:c1:89:d0:e3:d8:89:0e:b8:a7:8b:61:3e:c3: af:f9:ae:63:8b:bd:4e:bc:02:23:fc:60:0f:4d:f7: a8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:4D:A7:A2:97:24:50:D5:07:7B:00:14:28:F5:BC:83:1F:76:CC:7A X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/6E2nopckUNUHewAUKPW8gx92zHo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.173.132.0/22 31.173.143.0/24 31.173.225.0-31.173.226.255 31.173.228.0-31.173.233.255 31.173.235.0-31.173.239.255 37.28.188.0/22 37.29.43.0/24 37.29.88.0/21 78.25.124.0/22 83.149.52.0/22 83.169.224.0-83.169.230.255 85.26.240.0/21 94.154.64.0/24 94.154.71.0-94.154.76.255 178.176.233.0-178.176.235.255 178.178.64.0-178.178.77.255 188.170.228.0-188.170.237.255 188.170.239.0/24 195.225.160.0/22 213.138.208.0/23 213.138.211.0-213.138.213.255 213.138.215.0/24 213.138.221.0/24 217.8.86.0/24 IPv6: 2a03:d006::-2a03:d006:6ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 96:49:01:0b:17:1d:b1:87:1b:8f:25:69:5c:55:fc:b5:14:9b: 74:ef:e7:0b:cf:ce:78:cb:c7:de:d0:01:7d:e8:12:77:71:59: ed:a4:bf:d2:82:46:6f:da:4d:e2:a1:3a:9e:4e:e0:c3:47:31: cc:0f:5c:8c:25:c6:c0:28:71:83:6f:f3:48:3c:aa:53:8a:54: 55:8e:63:c3:6d:a6:f2:80:69:2d:e5:33:05:83:1b:eb:3e:05: 0e:bf:3e:a3:be:e9:f0:d7:a3:89:f8:03:9b:fe:fa:14:a0:d5: c5:ab:76:89:a8:eb:92:2f:5f:c9:06:df:62:45:e5:b7:3c:fa: 86:b9:ab:83:70:42:38:02:76:6a:7a:41:e1:01:b1:bb:45:6a: 55:f0:d2:d6:9a:ee:c1:36:2a:6f:55:a0:e5:b1:dc:1d:df:6d: ce:03:3f:31:1f:0b:ba:bb:2c:03:cd:b7:23:7a:c3:69:54:c7: e1:84:e0:f8:e0:8d:53:11:74:fb:43:f6:0d:b0:ec:26:7b:70: aa:6a:42:80:a3:51:54:16:67:36:5b:56:39:33:f9:87:33:b5: df:ce:8f:1a:35:6f:b5:9a:ac:11:60:92:13:08:c1:42:a9:7a: 6f:06:5f:8e:d0:f3:1e:9c:3d:a5:53:ba:58:83:23:d0:c6:77: 45:35:06:41 -----BEGIN CERTIFICATE----- MIIF7jCCBNagAwIBAgISAZt3x2SyZzaLcNlEtxCPQFdMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODRkYTdhMjk3MjQ1MGQ1MDc3YjAwMTQyOGY1YmM4MzFmNzZjYzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUZw71NPlcxjN0SY6Oua+90R5FVQ YQBFXntC081tODFDGP8beAY7uScbdypC/qyGcGiOWonv/FwKvwcZwa72fNZy7EqR Tslc0GOS74kid3fbybDuP1iW9Kq+tfD+L78ae6XuCJyTuCsmbbXfZOhIRJpPQEEA LTzvq99/T9uFDBKPdKZLLyoJuLvxl3tH70ij9px1HBbreFny3IZifKgtZSmZxxtB YrXvC3ycNv7jB+Jkrzb/nDtGxrHnBpHPvmUgRdbcC8SyHSY9FKDpTFH4fCmzYxN3 8bXhiP6W+iG12A5a5cGJ0OPYiQ64p4thPsOv+a5ji71OvAIj/GAPTfeoNQIDAQAB o4IC+jCCAvYwHQYDVR0OBBYEFOhNp6KXJFDVB3sAFCj1vIMfdsx6MB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvNkUybm9wY2tVTlVIZXdBVUtQVzhneDkyekhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBDgYIKwYBBQUHAQcBAf8Egf4wgfswgd8EAgABMIHYAwQC H62EAwQAH62PMAwDBAAfreEDBAAfreIwDAMEAh+t5AMEAR+t6DAMAwQAH63rAwQE H63gAwQCJRy8AwQAJR0rAwQDJR1YAwQCThl8AwQCU5U0MAwDBAVTqeADBABTqeYD BANVGvADBABemkAwDAMEAF6aRwMEAF6aTDAMAwQAsrDpAwQCsrDoMAwDBAayskAD BAGyskwwDAMEAryq5AMEAbyq7AMEALyq7wMEAsPhoAMEAdWK0DAMAwQA1YrTAwQB 1YrUAwQA1YrXAwQA1YrdAwQA2QhWMBcEAgACMBEwDwMFASoD0AYDBgAqA9AGBjAN BgkqhkiG9w0BAQsFAAOCAQEAlkkBCxcdsYcbjyVpXFX8tRSbdO/nC8/OeMvH3tAB fegSd3FZ7aS/0oJGb9pN4qE6nk7gw0cxzA9cjCXGwChxg2/zSDyqU4pUVY5jw22m 8oBpLeUzBYMb6z4FDr8+o77p8NejifgDm/76FKDVxat2iajrki9fyQbfYkXltzz6 hrmrg3BCOAJ2anpB4QGxu0VqVfDS1pruwTYqb1Wg5bHcHd9tzgM/MR8LurssA823 I3rDaVTH4YTg+OCNUxF0+0P2DbDsJntwqmpCgKNRVBZnNltWOTP5hzO1386PGjVv tZqsEWCSEwjBQql6bwZfjtDzHpw9pVO6WIMj0MZ3RTUGQQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:45 2026 by rpki-client