This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/1TUQTU00MEl499XUdrSRL1I8LFk.roa File: 1TUQTU00MEl499XUdrSRL1I8LFk.roa (raw, json) Hash identifier: LR0SWWMB8Awe+6NzalLAwpz6bv1tNIh3m2MbySdjLTs= Subject key identifier: D5:35:10:4D:4D:34:30:49:78:F7:D5:D4:76:B4:91:2F:52:3C:2C:59 Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86 Certificate serial: 019B7C7FCE399D70F9F23B56010F26781611 Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/1TUQTU00MEl499XUdrSRL1I8LFk.roa Signing time: Fri 02 Jan 2026 02:18:29 +0000 ROA not before: Fri 02 Jan 2026 02:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31515 IP address blocks: 161.30.0.0/16 maxlen: 16 161.30.4.0/24 maxlen: 24 161.30.5.0/24 maxlen: 24 161.30.6.0/24 maxlen: 24 161.30.7.0/24 maxlen: 24 161.30.8.0/24 maxlen: 24 161.30.9.0/24 maxlen: 24 161.30.10.0/23 maxlen: 24 161.30.10.0/24 maxlen: 24 161.30.12.0/22 maxlen: 22 161.30.16.0/22 maxlen: 22 161.30.20.0/24 maxlen: 24 161.30.22.0/23 maxlen: 23 161.30.28.0/24 maxlen: 24 161.30.29.0/24 maxlen: 24 161.30.33.0/24 maxlen: 24 161.30.40.0/23 maxlen: 23 161.30.42.0/23 maxlen: 24 161.30.44.0/23 maxlen: 24 161.30.112.0/23 maxlen: 23 161.30.114.0/23 maxlen: 23 161.30.115.0/24 maxlen: 24 161.30.116.0/23 maxlen: 23 161.30.118.0/24 maxlen: 24 161.30.119.0/24 maxlen: 24 161.30.120.0/24 maxlen: 24 161.30.121.0/24 maxlen: 24 161.30.124.0/23 maxlen: 23 161.30.126.0/23 maxlen: 23 161.30.128.0/23 maxlen: 23 161.30.129.0/24 maxlen: 24 161.30.130.0/24 maxlen: 24 161.30.155.0/24 maxlen: 24 161.30.162.0/24 maxlen: 24 161.30.163.0/24 maxlen: 24 161.30.164.0/24 maxlen: 24 161.30.165.0/24 maxlen: 24 161.30.166.0/24 maxlen: 24 161.30.167.0/24 maxlen: 24 161.30.169.0/24 maxlen: 24 161.30.171.0/24 maxlen: 24 161.30.176.0/20 maxlen: 20 161.30.193.0/24 maxlen: 24 161.30.194.0/23 maxlen: 23 161.30.201.0/24 maxlen: 24 161.30.202.0/24 maxlen: 24 161.30.203.0/24 maxlen: 24 161.30.220.0/24 maxlen: 24 161.30.221.0/24 maxlen: 24 161.30.236.0/22 maxlen: 24 161.30.236.0/24 maxlen: 24 161.30.237.0/24 maxlen: 24 161.30.238.0/24 maxlen: 24 161.30.239.0/24 maxlen: 24 161.30.240.0/24 maxlen: 24 161.30.241.0/24 maxlen: 24 161.30.246.0/24 maxlen: 24 161.30.250.0/24 maxlen: 24 161.30.251.0/24 maxlen: 24 2a11:ae00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:ce:39:9d:70:f9:f2:3b:56:01:0f:26:78:16:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86 Validity Not Before: Jan 2 02:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d535104d4d34304978f7d5d476b4912f523c2c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3e:03:f6:54:b7:f4:dd:e9:76:6b:1c:6c:76: 8a:67:52:0e:ea:62:be:01:0d:79:7b:40:42:ff:a2: c8:87:b4:95:5f:62:c3:aa:04:9b:4e:96:2d:e5:68: 64:fe:6f:05:42:42:86:92:87:ef:e1:e4:a7:fc:b1: 27:ed:35:40:33:01:26:5d:a4:dc:fc:f2:ee:8a:2f: e5:75:75:3b:63:d8:05:68:12:47:50:08:6c:67:fa: 5c:35:09:14:49:81:26:0e:2a:6a:98:2c:8d:e4:48: 18:44:3f:21:e8:5d:4c:bb:61:64:3e:cb:67:62:15: 2d:a9:a8:9b:47:0c:25:92:29:0b:48:83:4e:a0:6b: 92:9c:8a:29:dc:e4:a5:d1:44:54:00:b3:98:45:41: 85:63:3b:83:8f:e6:31:09:7b:63:2b:fe:20:83:11: 98:d4:a4:0e:2b:5e:db:d7:27:72:a5:7a:0d:13:a2: 20:a8:b9:cb:f1:0d:87:a9:1f:be:da:95:df:af:a9: 5c:8a:a8:0b:bf:bc:d4:6a:b3:a3:64:f0:35:36:1a: a3:4e:43:4a:72:9f:7a:96:d4:47:02:af:8a:d6:e0: 59:aa:4a:ee:e6:c4:58:90:05:0e:cb:06:d3:90:c6: 34:37:8d:6d:da:af:45:39:9d:bd:1e:71:e7:67:55: 67:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:35:10:4D:4D:34:30:49:78:F7:D5:D4:76:B4:91:2F:52:3C:2C:59 X509v3 Authority Key Identifier: keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/1TUQTU00MEl499XUdrSRL1I8LFk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.30.0.0/16 IPv6: 2a11:ae00::/32 Signature Algorithm: sha256WithRSAEncryption 35:50:dc:7b:cf:20:1a:cd:63:af:e3:d8:c2:eb:c7:a0:d1:a6: 17:ce:c3:f4:97:0a:ba:3b:37:fe:92:4a:8f:50:ce:7d:82:a5: f9:2f:31:53:fa:da:90:be:1a:18:95:65:2c:d7:4e:d8:0e:e5: 9e:e1:27:ff:7b:58:c6:a8:b1:29:89:87:a2:73:51:95:02:d4: 1b:47:92:9e:f6:83:84:25:9e:1a:34:c9:56:a0:77:bb:1f:47: 18:c0:91:1c:4f:aa:31:c0:19:7e:db:8d:dc:dd:7a:25:45:4a: 89:07:7f:31:ba:a4:5c:86:10:1c:e9:d3:80:46:ca:ee:9f:e0: db:24:67:44:a3:1d:eb:31:a8:d5:40:63:6f:d7:ad:dd:79:15: 27:82:e4:7c:a4:22:6e:60:32:fb:01:78:8b:ca:09:73:d9:dc: b5:f7:8c:e6:89:34:d3:d1:1e:6e:b1:73:1c:64:ea:9a:78:c2: 67:3a:47:5a:9f:13:1a:48:fa:ab:4a:08:61:b9:9a:4e:8d:2b: af:98:e9:c1:39:dd:26:07:47:f3:9c:d0:4f:5a:78:a7:57:7a: 93:35:14:1e:61:74:5b:27:ad:82:ed:a3:c2:cf:f0:1c:5c:7f: 32:5b:d4:8a:c0:fb:41:14:00:ba:c0:87:52:ba:c8:48:67:72: 2a:74:b6:71 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt8f845nXD58jtWAQ8meBYRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZTU1MThlNjg0NjdiNDI5MGMzNTA5MjY4YjZkNmQ2NjQ5 NjJjODYwHhcNMjYwMTAyMDIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTM1MTA0ZDRkMzQzMDQ5NzhmN2Q1ZDQ3NmI0OTEyZjUyM2MyYzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD4D9lS39N3pdmscbHaKZ1IO6mK+ AQ15e0BC/6LIh7SVX2LDqgSbTpYt5Whk/m8FQkKGkofv4eSn/LEn7TVAMwEmXaTc /PLuii/ldXU7Y9gFaBJHUAhsZ/pcNQkUSYEmDipqmCyN5EgYRD8h6F1Mu2FkPstn YhUtqaibRwwlkikLSINOoGuSnIop3OSl0URUALOYRUGFYzuDj+YxCXtjK/4ggxGY 1KQOK17b1ydypXoNE6IgqLnL8Q2HqR++2pXfr6lciqgLv7zUarOjZPA1NhqjTkNK cp96ltRHAq+K1uBZqkru5sRYkAUOywbTkMY0N41t2q9FOZ29HnHnZ1Vn0wIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFNU1EE1NNDBJePfV1Ha0kS9SPCxZMB8GA1UdIwQY MBaAFAnlUY5oRntCkMNQkmi21tZkliyGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2VWUmptaEdlMEtRdzFDU2FMYlcxbVNXTElZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8zMDI4MmMtM2M4Mi00NzMwLWI5NWUt ZTc0NTk0ODk4M2VkLzEvMVRVUVRVMDBNRWw0OTlYVWRyU1JMMUk4TEZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8zMDI4MmMtM2M4Mi00NzMwLWI5NWUtZTc0NTk0ODk4M2Vk LzEvQ2VWUmptaEdlMEtRdzFDU2FMYlcxbVNXTElZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDALBAIAATAFAwMAoR4wDQQC AAIwBwMFACoRrgAwDQYJKoZIhvcNAQELBQADggEBADVQ3HvPIBrNY6/j2MLrx6DR phfOw/SXCro7N/6SSo9Qzn2CpfkvMVP62pC+GhiVZSzXTtgO5Z7hJ/97WMaosSmJ h6JzUZUC1BtHkp72g4Qlnho0yVagd7sfRxjAkRxPqjHAGX7bjdzdeiVFSokHfzG6 pFyGEBzp04BGyu6f4NskZ0SjHesxqNVAY2/Xrd15FSeC5HykIm5gMvsBeIvKCXPZ 3LX3jOaJNNPRHm6xcxxk6pp4wmc6R1qfExpI+qtKCGG5mk6NK6+Y6cE53SYHR/Oc 0E9aeKdXepM1FB5hdFsnrYLto8LP8BxcfzJb1IrA+0EUALrAh1K6yEhncip0tnE= -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:14 2026 by rpki-client