This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/VsDKu8p7jOW_6XSjzPi6HRYFCeE.roa
File: VsDKu8p7jOW_6XSjzPi6HRYFCeE.roa (raw, json)
Hash identifier: meHtFxM6jSoAy9Y7SaMHGYbPp+WrlG0Kpg1DeuyayZE=
Subject key identifier: 56:C0:CA:BB:CA:7B:8C:E5:BF:E9:74:A3:CC:F8:BA:1D:16:05:09:E1
Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial: 019B7834533275E4EB177DC4B819DAD1E82C
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/VsDKu8p7jOW_6XSjzPi6HRYFCeE.roa
Signing time: Thu 01 Jan 2026 06:17:33 +0000
ROA not before: Thu 01 Jan 2026 06:17:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5089
IP address blocks: 62.30.0.0/15 maxlen: 15
62.30.0.0/16 maxlen: 16
62.31.0.0/16 maxlen: 16
62.252.0.0/14 maxlen: 18
62.252.0.0/17 maxlen: 17
62.252.0.0/18 maxlen: 18
62.252.64.0/18 maxlen: 18
62.252.128.0/17 maxlen: 17
62.252.128.0/18 maxlen: 18
62.252.192.0/18 maxlen: 18
62.253.0.0/17 maxlen: 17
62.253.128.0/17 maxlen: 17
62.254.0.0/17 maxlen: 17
62.254.0.0/18 maxlen: 18
62.254.64.0/18 maxlen: 18
62.254.128.0/17 maxlen: 17
62.254.128.0/18 maxlen: 18
62.254.192.0/18 maxlen: 18
62.255.0.0/17 maxlen: 17
62.255.0.0/18 maxlen: 18
62.255.64.0/18 maxlen: 18
62.255.128.0/17 maxlen: 17
62.255.128.0/18 maxlen: 18
62.255.192.0/18 maxlen: 18
77.96.0.0/13 maxlen: 13
77.96.0.0/16 maxlen: 16
77.96.0.0/17 maxlen: 17
77.96.128.0/17 maxlen: 17
77.97.0.0/16 maxlen: 16
77.98.0.0/15 maxlen: 15
77.98.0.0/16 maxlen: 16
77.99.0.0/16 maxlen: 16
77.100.0.0/15 maxlen: 15
77.100.0.0/16 maxlen: 16
77.101.0.0/16 maxlen: 16
77.102.0.0/15 maxlen: 15
77.102.0.0/16 maxlen: 16
77.103.0.0/16 maxlen: 16
80.0.0.0/13 maxlen: 17
80.192.0.0/14 maxlen: 14
80.192.0.0/15 maxlen: 15
80.194.0.0/15 maxlen: 15
80.235.128.0/17 maxlen: 17
80.235.128.0/18 maxlen: 18
80.235.192.0/18 maxlen: 18
81.96.0.0/12 maxlen: 12
81.96.0.0/14 maxlen: 14
81.96.0.0/15 maxlen: 15
81.98.0.0/15 maxlen: 15
81.100.0.0/14 maxlen: 14
81.100.0.0/15 maxlen: 15
81.102.0.0/15 maxlen: 15
81.104.0.0/14 maxlen: 14
81.104.0.0/15 maxlen: 15
81.106.0.0/15 maxlen: 15
81.108.0.0/14 maxlen: 14
81.108.0.0/15 maxlen: 15
81.110.0.0/15 maxlen: 15
82.0.0.0/12 maxlen: 12
82.0.0.0/13 maxlen: 13
82.0.0.0/14 maxlen: 14
82.4.0.0/14 maxlen: 14
82.8.0.0/13 maxlen: 13
82.8.0.0/14 maxlen: 14
82.8.211.0/24 maxlen: 24
82.12.0.0/14 maxlen: 14
82.16.0.0/14 maxlen: 14
82.16.0.0/15 maxlen: 15
82.18.0.0/15 maxlen: 15
82.20.0.0/16 maxlen: 16
82.20.0.0/17 maxlen: 17
82.20.128.0/17 maxlen: 17
82.28.0.0/16 maxlen: 16
82.28.0.0/17 maxlen: 17
82.28.128.0/17 maxlen: 17
82.30.0.0/15 maxlen: 15
82.30.0.0/16 maxlen: 16
82.31.0.0/16 maxlen: 16
82.32.0.0/15 maxlen: 15
82.32.0.0/16 maxlen: 16
82.33.0.0/16 maxlen: 16
82.34.0.0/15 maxlen: 15
82.34.0.0/16 maxlen: 16
82.35.0.0/16 maxlen: 16
82.36.0.0/15 maxlen: 15
82.36.0.0/16 maxlen: 16
82.37.0.0/16 maxlen: 16
82.42.0.0/15 maxlen: 15
82.42.0.0/16 maxlen: 16
82.43.0.0/16 maxlen: 16
82.44.0.0/15 maxlen: 15
82.44.0.0/16 maxlen: 16
82.45.0.0/16 maxlen: 16
86.0.0.0/11 maxlen: 11
86.0.0.0/13 maxlen: 13
86.0.0.0/14 maxlen: 14
86.0.0.0/15 maxlen: 15
86.0.0.0/16 maxlen: 16
86.1.0.0/16 maxlen: 16
86.2.0.0/15 maxlen: 15
86.4.0.0/16 maxlen: 16
86.5.0.0/16 maxlen: 16
86.5.0.0/17 maxlen: 17
86.5.128.0/17 maxlen: 17
86.6.0.0/16 maxlen: 16
86.6.0.0/17 maxlen: 17
86.6.128.0/17 maxlen: 17
86.7.0.0/16 maxlen: 16
86.8.0.0/13 maxlen: 13
86.8.0.0/16 maxlen: 16
86.8.0.0/17 maxlen: 17
86.8.128.0/17 maxlen: 17
86.9.0.0/16 maxlen: 16
86.10.0.0/16 maxlen: 16
86.10.0.0/17 maxlen: 17
86.10.128.0/17 maxlen: 17
86.11.0.0/16 maxlen: 16
86.12.0.0/16 maxlen: 16
86.12.0.0/17 maxlen: 17
86.12.128.0/17 maxlen: 17
86.13.0.0/16 maxlen: 16
86.14.0.0/15 maxlen: 15
86.16.0.0/13 maxlen: 13
86.16.0.0/14 maxlen: 14
86.20.0.0/16 maxlen: 16
86.21.0.0/16 maxlen: 16
86.21.0.0/17 maxlen: 17
86.21.128.0/17 maxlen: 17
86.22.0.0/15 maxlen: 15
86.24.0.0/13 maxlen: 13
92.232.0.0/15 maxlen: 15
92.232.0.0/16 maxlen: 16
92.233.0.0/16 maxlen: 16
92.234.0.0/16 maxlen: 16
92.234.0.0/17 maxlen: 17
92.234.128.0/17 maxlen: 17
92.236.0.0/14 maxlen: 14
92.236.0.0/15 maxlen: 15
92.238.0.0/15 maxlen: 15
94.173.0.0/16 maxlen: 16
94.173.0.0/17 maxlen: 17
94.173.128.0/17 maxlen: 17
94.174.0.0/15 maxlen: 15
94.174.0.0/16 maxlen: 16
94.175.0.0/16 maxlen: 16
193.38.64.0/18 maxlen: 18
193.38.64.0/19 maxlen: 19
193.38.96.0/19 maxlen: 19
193.39.32.0/19 maxlen: 19
193.39.48.0/20 maxlen: 20
193.39.64.0/24 maxlen: 24
193.193.96.0/19 maxlen: 19
193.193.112.0/20 maxlen: 20
194.117.128.0/19 maxlen: 19
194.117.128.0/20 maxlen: 20
194.117.144.0/20 maxlen: 20
194.117.146.0/24 maxlen: 24
194.168.0.0/16 maxlen: 16
194.168.0.0/17 maxlen: 17
194.168.128.0/17 maxlen: 17
195.188.0.0/16 maxlen: 16
195.188.0.0/17 maxlen: 17
195.188.128.0/17 maxlen: 17
212.24.64.0/19 maxlen: 19
212.24.64.0/20 maxlen: 20
212.24.80.0/20 maxlen: 20
212.250.0.0/16 maxlen: 16
212.250.0.0/17 maxlen: 17
212.250.128.0/17 maxlen: 17
213.48.0.0/16 maxlen: 16
213.48.0.0/17 maxlen: 17
213.48.0.0/18 maxlen: 18
213.48.64.0/18 maxlen: 18
213.48.128.0/17 maxlen: 17
213.48.128.0/18 maxlen: 18
213.48.192.0/18 maxlen: 18
213.81.0.0/17 maxlen: 17
213.81.0.0/18 maxlen: 18
213.81.64.0/18 maxlen: 18
213.104.0.0/14 maxlen: 14
213.104.0.0/16 maxlen: 16
213.104.0.0/17 maxlen: 17
213.104.128.0/17 maxlen: 17
213.105.0.0/16 maxlen: 16
213.105.0.0/17 maxlen: 17
213.105.128.0/17 maxlen: 17
213.106.0.0/16 maxlen: 16
213.106.0.0/17 maxlen: 17
213.106.128.0/17 maxlen: 17
213.107.0.0/16 maxlen: 16
213.107.0.0/17 maxlen: 17
213.107.128.0/17 maxlen: 17
213.148.32.0/19 maxlen: 19
213.148.32.0/20 maxlen: 20
213.148.48.0/20 maxlen: 20
217.137.0.0/16 maxlen: 16
217.137.0.0/17 maxlen: 17
217.137.128.0/17 maxlen: 17
2a02:8801::/32 maxlen: 32
2a02:8880::/25 maxlen: 25
2a02:88fe::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:53:32:75:e4:eb:17:7d:c4:b8:19:da:d1:e8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Validity
Not Before: Jan 1 06:17:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56c0cabbca7b8ce5bfe974a3ccf8ba1d160509e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:dc:c9:e5:0e:2c:9b:33:b7:15:90:03:1c:2e:
54:d8:45:8c:7e:42:88:78:ff:6c:97:54:82:45:08:
4d:44:91:14:1c:f9:f7:58:8f:14:68:fd:3e:f6:f7:
16:ae:52:a3:57:a8:80:3e:fa:a7:a1:c1:a0:1c:34:
20:b1:f3:bc:d2:21:6d:74:aa:7f:70:90:be:61:75:
96:2a:6a:78:91:3d:fe:ff:02:8b:5b:d8:b4:45:07:
62:a1:77:93:9a:50:f3:65:9c:fd:da:77:38:f0:4d:
bc:ef:13:03:07:7d:9f:89:4c:3b:60:fc:be:6b:ac:
9d:cc:6a:06:af:70:13:e4:7f:ad:11:b4:05:79:f9:
26:de:82:51:08:0b:1e:2e:16:50:ad:17:2b:ed:f3:
bf:0f:8c:4a:53:0e:f4:13:c6:8e:d4:30:e1:81:19:
5e:e2:d5:9b:a9:48:dc:87:ac:05:1d:ad:73:5c:de:
ea:11:82:ce:5e:10:cf:09:ba:d1:61:d9:f0:dd:ad:
f5:0a:74:98:cd:6b:f3:46:6a:46:80:10:c9:47:5a:
8c:fe:ed:2c:03:0e:5a:1b:35:49:dc:ea:56:8e:b4:
d7:a3:0b:49:8f:ef:2b:6b:73:31:70:d8:eb:2a:1f:
90:ea:61:a2:dc:85:5f:3b:b1:03:ce:80:28:25:81:
2f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C0:CA:BB:CA:7B:8C:E5:BF:E9:74:A3:CC:F8:BA:1D:16:05:09:E1
X509v3 Authority Key Identifier:
keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/VsDKu8p7jOW_6XSjzPi6HRYFCeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.30.0.0/15
62.252.0.0/14
77.96.0.0/13
80.0.0.0/13
80.192.0.0/14
80.235.128.0/17
81.96.0.0/12
82.0.0.0-82.20.255.255
82.28.0.0/16
82.30.0.0-82.37.255.255
82.42.0.0-82.45.255.255
86.0.0.0/11
92.232.0.0-92.234.255.255
92.236.0.0/14
94.173.0.0-94.175.255.255
193.38.64.0/18
193.39.32.0-193.39.64.255
193.193.96.0/19
194.117.128.0/19
194.168.0.0/16
195.188.0.0/16
212.24.64.0/19
212.250.0.0/16
213.48.0.0/16
213.81.0.0/17
213.104.0.0/14
213.148.32.0/19
217.137.0.0/16
IPv6:
2a02:8801::/32
2a02:8880::/25
Signature Algorithm: sha256WithRSAEncryption
84:b8:d1:ac:13:f8:97:61:5b:bd:1d:2d:be:31:cd:79:a8:6e:
bb:b4:d4:fa:0a:60:1a:02:e3:98:92:61:ae:4f:61:8d:48:3f:
69:4e:93:2a:65:45:36:b2:d8:b8:4c:1c:d5:b8:75:4d:ef:e3:
e1:73:71:18:68:c2:82:b6:70:4b:3a:ec:77:24:a5:0c:f2:52:
55:e4:4e:ea:db:28:14:b4:51:cb:84:ba:fc:52:f8:b9:60:a1:
8b:71:ab:40:5e:9e:51:68:a9:3f:10:94:fd:d6:df:9e:bf:38:
03:3c:b7:57:fd:71:c4:48:ff:b3:3d:2a:29:15:a7:43:b9:ad:
c5:67:75:95:c1:1d:c1:7f:85:0e:1e:48:c1:e6:dd:ba:21:67:
9f:dd:24:b2:bb:54:4f:ea:4e:31:17:3d:09:15:8d:fe:31:a0:
97:2a:b4:5d:b7:a7:62:c4:c9:6a:01:9a:30:97:50:98:d7:b8:
0f:c7:c9:c3:4c:0f:2d:87:16:40:19:82:23:04:38:e2:fe:34:
fe:99:9a:53:6e:63:95:65:70:df:c3:cc:07:19:2c:d2:03:de:
ac:45:33:ea:05:b3:b2:0b:63:7d:4e:34:1a:40:47:e1:6d:7e:
3a:b2:c4:d0:0c:01:d0:93:19:ae:34:67:76:19:8f:dc:da:5c:
bb:96:35:cb
-----BEGIN CERTIFICATE-----
MIIF0DCCBLigAwIBAgISAZt4NFMydeTrF33EuBna0egsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MzA3ZDI5ZjU1NDNmMjFlYTMwMDliOTUyM2ZlNzFiOGYx
MzY5Y2EwHhcNMjYwMTAxMDYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmMwY2FiYmNhN2I4Y2U1YmZlOTc0YTNjY2Y4YmExZDE2MDUwOWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNzJ5Q4smzO3FZADHC5U2EWMfkKI
eP9sl1SCRQhNRJEUHPn3WI8UaP0+9vcWrlKjV6iAPvqnocGgHDQgsfO80iFtdKp/
cJC+YXWWKmp4kT3+/wKLW9i0RQdioXeTmlDzZZz92nc48E287xMDB32fiUw7YPy+
a6ydzGoGr3AT5H+tEbQFefkm3oJRCAseLhZQrRcr7fO/D4xKUw70E8aO1DDhgRle
4tWbqUjch6wFHa1zXN7qEYLOXhDPCbrRYdnw3a31CnSYzWvzRmpGgBDJR1qM/u0s
Aw5aGzVJ3OpWjrTXowtJj+8ra3MxcNjrKh+Q6mGi3IVfO7EDzoAoJYEvnwIDAQAB
o4IC3DCCAtgwHQYDVR0OBBYEFFbAyrvKe4zlv+l0o8z4uh0WBQnhMB8GA1UdIwQY
MBaAFBYwfSn1VD8h6jAJuVI/5xuPE2nKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2Yt
NGNmZTQwZjA3YTZiLzEvVnNES3U4cDdqT1dfNlhTanpQaTZIUllGQ2VFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2YtNGNmZTQwZjA3YTZi
LzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHxBggrBgEFBQcBBwEB/wSB4TCB3jCBxQQCAAEwgb4DAwE+
HgMDAj78AwMDTWADAwNQAAMDAlDAAwQHUOuAAwMEUWAwCQMCAVIDAwBSFAMDAFIc
MAoDAwFSHgMDAVIkMAoDAwFSKgMDAVIsAwMFVgAwCgMDA1zoAwMAXOoDAwJc7DAK
AwMAXq0DAwReoAMEBsEmQDAMAwQFwScgAwQAwSdAAwQFwcFgAwQFwnWAAwMAwqgD
AwDDvAMEBdQYQAMDANT6AwMA1TADBAfVUQADAwLVaAMEBdWUIAMDANmJMBQEAgAC
MA4DBQAqAogBAwUHKgKIgDANBgkqhkiG9w0BAQsFAAOCAQEAhLjRrBP4l2FbvR0t
vjHNeahuu7TU+gpgGgLjmJJhrk9hjUg/aU6TKmVFNrLYuEwc1bh1Te/j4XNxGGjC
grZwSzrsdySlDPJSVeRO6tsoFLRRy4S6/FL4uWChi3GrQF6eUWipPxCU/dbfnr84
Azy3V/1xxEj/sz0qKRWnQ7mtxWd1lcEdwX+FDh5IwebduiFnn90ksrtUT+pOMRc9
CRWN/jGglyq0XbenYsTJagGaMJdQmNe4D8fJw0wPLYcWQBmCIwQ44v40/pmaU25j
lWVw38PMBxks0gPerEUz6gWzsgtjfU40GkBH4W1+OrLE0AwB0JMZrjRndhmP3Npc
u5Y1yw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:00:28 2026 by rpki-client