This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/7GUveN2wSo-luG052BTtt-k9X3U.roa File: 7GUveN2wSo-luG052BTtt-k9X3U.roa (raw, json) Hash identifier: lG1FL1G9e3xE6rCCYD/WWfyAmy2PT7zZddCBAjsuvEs= Subject key identifier: EC:65:2F:78:DD:B0:4A:8F:A5:B8:6D:39:D8:14:ED:B7:E9:3D:5F:75 Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7 Certificate serial: 019B7F831725B69884C7C327E26945A4693E Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/7GUveN2wSo-luG052BTtt-k9X3U.roa Signing time: Fri 02 Jan 2026 16:20:56 +0000 ROA not before: Fri 02 Jan 2026 16:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8400 IP address blocks: 5.154.225.0/24 maxlen: 24 31.14.33.0/24 maxlen: 24 37.153.174.0/24 maxlen: 24 37.153.175.0/24 maxlen: 24 46.17.120.0/21 maxlen: 21 46.235.96.0/21 maxlen: 21 62.101.128.0/20 maxlen: 20 62.240.24.0/21 maxlen: 21 77.46.128.0/17 maxlen: 17 79.101.0.0/16 maxlen: 16 79.101.0.0/21 maxlen: 21 79.101.21.0/24 maxlen: 24 87.250.32.0/19 maxlen: 19 89.34.2.0/24 maxlen: 24 89.39.144.0/23 maxlen: 23 89.42.12.0/24 maxlen: 24 89.46.126.0/23 maxlen: 23 89.47.40.0/23 maxlen: 23 91.150.64.0/18 maxlen: 18 91.150.64.0/23 maxlen: 23 91.150.66.0/24 maxlen: 24 91.150.91.0/24 maxlen: 24 92.60.224.0/24 maxlen: 24 92.60.225.0/24 maxlen: 24 92.60.226.0/24 maxlen: 24 92.60.227.0/24 maxlen: 24 92.60.228.0/24 maxlen: 24 92.60.229.0/24 maxlen: 24 92.60.230.0/24 maxlen: 24 92.60.231.0/24 maxlen: 24 92.60.232.0/24 maxlen: 24 92.60.233.0/24 maxlen: 24 92.60.234.0/23 maxlen: 23 92.60.236.0/24 maxlen: 24 92.60.237.0/24 maxlen: 24 92.60.238.0/24 maxlen: 24 92.60.239.0/24 maxlen: 24 92.244.128.0/19 maxlen: 19 93.86.0.0/15 maxlen: 15 93.86.0.0/16 maxlen: 16 93.87.0.0/16 maxlen: 16 93.87.38.0/24 maxlen: 24 93.87.39.0/24 maxlen: 24 93.87.50.0/24 maxlen: 24 93.87.58.0/24 maxlen: 24 93.113.250.0/24 maxlen: 24 93.113.251.0/24 maxlen: 24 94.228.224.0/22 maxlen: 22 94.228.229.0/24 maxlen: 24 94.228.230.0/24 maxlen: 24 94.228.231.0/24 maxlen: 24 94.228.232.0/23 maxlen: 23 94.228.234.0/24 maxlen: 24 94.228.235.0/24 maxlen: 24 94.228.236.0/24 maxlen: 24 94.228.237.0/24 maxlen: 24 94.228.238.0/23 maxlen: 23 109.72.48.0/20 maxlen: 20 109.92.0.0/15 maxlen: 15 109.94.228.0/22 maxlen: 22 109.94.232.0/21 maxlen: 21 109.122.64.0/18 maxlen: 24 109.122.77.0/24 maxlen: 24 109.198.0.0/19 maxlen: 19 176.67.192.0/21 maxlen: 21 176.67.200.0/23 maxlen: 23 176.67.202.0/23 maxlen: 23 176.67.204.0/24 maxlen: 24 176.67.205.0/24 maxlen: 24 176.67.206.0/23 maxlen: 23 176.67.208.0/23 maxlen: 23 176.67.210.0/24 maxlen: 24 176.67.211.0/24 maxlen: 24 176.67.212.0/23 maxlen: 23 176.67.214.0/24 maxlen: 24 176.67.215.0/24 maxlen: 24 176.67.216.0/24 maxlen: 24 176.67.217.0/24 maxlen: 24 176.67.218.0/24 maxlen: 24 176.67.219.0/24 maxlen: 24 176.67.220.0/24 maxlen: 24 176.67.221.0/24 maxlen: 24 176.67.222.0/24 maxlen: 24 176.67.223.0/24 maxlen: 24 178.17.16.0/21 maxlen: 21 178.17.24.0/22 maxlen: 22 178.17.28.0/23 maxlen: 23 178.17.30.0/24 maxlen: 24 178.17.31.0/24 maxlen: 24 178.79.0.0/18 maxlen: 18 178.79.16.0/23 maxlen: 23 178.220.0.0/15 maxlen: 15 178.222.0.0/16 maxlen: 16 178.223.0.0/17 maxlen: 17 178.223.128.0/18 maxlen: 18 178.223.192.0/19 maxlen: 19 178.237.208.0/20 maxlen: 20 178.250.136.0/21 maxlen: 21 185.10.140.0/22 maxlen: 22 185.26.172.0/22 maxlen: 22 185.27.128.0/24 maxlen: 24 185.27.129.0/24 maxlen: 24 185.27.130.0/23 maxlen: 23 185.34.92.0/22 maxlen: 22 185.36.255.0/24 maxlen: 24 185.71.88.0/22 maxlen: 22 185.103.136.0/22 maxlen: 22 185.112.20.0/22 maxlen: 22 185.157.104.0/22 maxlen: 22 185.179.136.0/22 maxlen: 22 185.190.152.0/22 maxlen: 22 188.215.30.0/24 maxlen: 24 188.240.88.0/24 maxlen: 24 188.240.200.0/24 maxlen: 24 188.240.201.0/24 maxlen: 24 195.178.32.0/19 maxlen: 19 195.252.82.0/24 maxlen: 24 195.252.88.0/24 maxlen: 24 195.252.92.0/22 maxlen: 22 212.62.59.0/24 maxlen: 24 212.200.0.0/16 maxlen: 16 212.200.0.0/17 maxlen: 17 212.200.0.0/21 maxlen: 21 212.200.8.0/22 maxlen: 22 212.200.12.0/23 maxlen: 23 212.200.45.0/24 maxlen: 24 212.200.50.0/24 maxlen: 24 212.200.51.0/24 maxlen: 24 212.200.52.0/24 maxlen: 24 212.200.123.0/24 maxlen: 24 212.200.128.0/17 maxlen: 17 212.200.128.0/18 maxlen: 18 212.200.132.0/24 maxlen: 24 212.200.192.0/19 maxlen: 19 212.200.224.0/24 maxlen: 24 212.200.225.0/24 maxlen: 24 212.200.226.0/23 maxlen: 23 212.200.228.0/22 maxlen: 22 212.200.232.0/21 maxlen: 21 212.200.240.0/20 maxlen: 20 213.196.96.0/20 maxlen: 20 2a00:e90::/32 maxlen: 32 2a00:8720::/32 maxlen: 32 2a01:b800::/32 maxlen: 32 2a02:61a0::/32 maxlen: 32 2a03:fc40::/32 maxlen: 32 2a04:1dc0::/29 maxlen: 29 2a06:5b00::/29 maxlen: 29 2a06:63c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:17:25:b6:98:84:c7:c3:27:e2:69:45:a4:69:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7 Validity Not Before: Jan 2 16:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec652f78ddb04a8fa5b86d39d814edb7e93d5f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:88:ef:11:1f:4a:f5:a0:30:88:b3:a1:2b:d9: ac:6e:2d:d4:dc:4d:70:c9:6a:2b:ac:1f:e9:45:9b: 91:78:c9:18:bd:7e:eb:67:74:34:ff:59:68:1e:1e: bc:cd:c8:09:a5:3a:ba:27:35:6c:32:63:39:69:27: 42:ff:b0:a7:c2:1d:49:eb:4f:29:b6:cb:f8:60:db: 9c:e2:74:c1:a3:32:e2:63:99:89:76:b8:56:bb:70: c6:ba:f6:78:71:a2:b1:bb:fc:75:fe:a1:1c:4e:25: 97:c6:b2:4e:89:17:68:1d:f4:4a:a3:29:bf:59:ec: 8f:c7:ea:96:40:f2:e2:7b:8c:9a:4e:0a:e5:ea:d4: 5a:f8:ae:ac:82:1a:97:57:23:98:19:dd:cc:d6:7a: ff:21:b5:e0:7a:7e:c0:7b:08:e7:8c:0b:46:42:79: 41:da:58:27:df:22:2e:fe:c5:99:6a:63:0e:09:5b: 58:2a:28:c0:13:88:92:32:0a:dc:1f:24:ea:ca:b3: 16:71:f0:24:d3:6b:c4:5c:0a:88:99:9f:7f:22:4c: dc:09:78:ac:72:bd:71:40:b9:f0:f9:97:8c:68:4f: 09:08:f9:ad:c7:13:82:b3:80:51:f4:00:97:be:bb: 93:98:41:0d:dd:68:75:f3:29:73:e1:26:ba:8a:fe: ea:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:65:2F:78:DD:B0:4A:8F:A5:B8:6D:39:D8:14:ED:B7:E9:3D:5F:75 X509v3 Authority Key Identifier: keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/7GUveN2wSo-luG052BTtt-k9X3U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.225.0/24 31.14.33.0/24 37.153.174.0/23 46.17.120.0/21 46.235.96.0/21 62.101.128.0/20 62.240.24.0/21 77.46.128.0/17 79.101.0.0/16 87.250.32.0/19 89.34.2.0/24 89.39.144.0/23 89.42.12.0/24 89.46.126.0/23 89.47.40.0/23 91.150.64.0/18 92.60.224.0/20 92.244.128.0/19 93.86.0.0/15 93.113.250.0/23 94.228.224.0/22 94.228.229.0-94.228.239.255 109.72.48.0/20 109.92.0.0/15 109.94.228.0-109.94.239.255 109.122.64.0/18 109.198.0.0/19 176.67.192.0/19 178.17.16.0/20 178.79.0.0/18 178.220.0.0-178.223.223.255 178.237.208.0/20 178.250.136.0/21 185.10.140.0/22 185.26.172.0/22 185.27.128.0/22 185.34.92.0/22 185.36.255.0/24 185.71.88.0/22 185.103.136.0/22 185.112.20.0/22 185.157.104.0/22 185.179.136.0/22 185.190.152.0/22 188.215.30.0/24 188.240.88.0/24 188.240.200.0/23 195.178.32.0/19 195.252.82.0/24 195.252.88.0/24 195.252.92.0/22 212.62.59.0/24 212.200.0.0/16 213.196.96.0/20 IPv6: 2a00:e90::/32 2a00:8720::/32 2a01:b800::/32 2a02:61a0::/32 2a03:fc40::/32 2a04:1dc0::/29 2a06:5b00::/29 2a06:63c0::/29 Signature Algorithm: sha256WithRSAEncryption 0f:58:fc:31:e3:17:fa:f1:9f:7e:52:d3:ea:5e:a6:c6:64:49: bd:21:44:ee:34:d1:e0:c3:71:55:09:fa:b4:cf:64:d0:b1:7c: cd:12:37:92:71:5e:0e:59:8b:21:d0:d8:0b:bf:80:61:05:60: 69:f3:2e:8c:6c:17:58:91:06:69:b3:b4:1f:c7:ae:06:83:c2: e1:27:58:09:29:52:4b:8e:e6:81:49:fa:57:91:3a:ab:64:f4: 54:bf:78:db:fc:66:01:1c:14:d6:cf:f1:df:88:e1:fa:bb:24: e0:bb:a5:e2:bd:09:41:88:9a:1e:44:80:ff:e3:18:4a:36:84: 2d:28:c6:86:ef:56:ab:6a:f8:ae:18:0c:64:41:ec:35:98:10: 31:65:f3:e9:50:3d:7a:2d:11:75:b3:d5:5d:81:a9:0e:ba:21: fe:4b:78:82:0a:10:bc:02:02:8a:58:58:0b:5c:b0:91:72:f7: 2b:3e:1c:7b:46:52:62:10:ff:9f:ce:8a:7e:cf:41:b3:2c:74: 8a:f4:c5:72:bd:d6:17:46:69:24:eb:53:b0:57:71:82:9a:7e: 2c:03:a7:b2:fe:66:31:39:23:58:7f:57:2d:ef:ee:41:f8:e7: 9e:5b:f7:f2:d8:2d:73:81:a2:95:24:d0:dd:c8:37:65:41:22: de:68:63:d6 -----BEGIN CERTIFICATE----- MIIGmDCCBYCgAwIBAgISAZt/gxcltpiEx8Mn4mlFpGk+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5YjEzMjBmYmMyNGQ2ZjQzNjZjYjY0ZmNmNWVkMmQ3YjFi NmJkZjcwHhcNMjYwMTAyMTYyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzY1MmY3OGRkYjA0YThmYTViODZkMzlkODE0ZWRiN2U5M2Q1Zjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuojvER9K9aAwiLOhK9msbi3U3E1w yWorrB/pRZuReMkYvX7rZ3Q0/1loHh68zcgJpTq6JzVsMmM5aSdC/7Cnwh1J608p tsv4YNuc4nTBozLiY5mJdrhWu3DGuvZ4caKxu/x1/qEcTiWXxrJOiRdoHfRKoym/ WeyPx+qWQPLie4yaTgrl6tRa+K6sghqXVyOYGd3M1nr/IbXgen7AewjnjAtGQnlB 2lgn3yIu/sWZamMOCVtYKijAE4iSMgrcHyTqyrMWcfAk02vEXAqImZ9/IkzcCXis cr1xQLnw+ZeMaE8JCPmtxxOCs4BR9ACXvruTmEEN3Wh18ylz4Sa6iv7qAQIDAQAB o4IDpDCCA6AwHQYDVR0OBBYEFOxlL3jdsEqPpbhtOdgU7bfpPV91MB8GA1UdIwQY MBaAFOmxMg+8JNb0Nmy2T89e0textr33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUt ZDNlMjgwMGJkNjQwLzEvN0dVdmVOMndTby1sdUcwNTJCVHR0LWs5WDNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUtZDNlMjgwMGJkNjQw LzEvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBuAYIKwYBBQUHAQcBAf8EggGnMIIBozCCAV8EAgABMIIB VwMEAAWa4QMEAB8OIQMEASWZrgMEAy4ReAMEAy7rYAMEBD5lgAMEAz7wGAMEB00u gAMDAE9lAwQFV/ogAwQAWSICAwQBWSeQAwQAWSoMAwQBWS5+AwQBWS8oAwQGW5ZA AwQEXDzgAwQFXPSAAwMBXVYDBAFdcfoDBAJe5OAwDAMEAF7k5QMEBF7k4AMEBG1I MAMDAW1cMAwDBAJtXuQDBARtXuADBAZtekADBAVtxgADBAWwQ8ADBASyERADBAay TwAwCwMDArLcAwQFst/AAwQEsu3QAwQDsvqIAwQCuQqMAwQCuRqsAwQCuRuAAwQC uSJcAwQAuST/AwQCuUdYAwQCuWeIAwQCuXAUAwQCuZ1oAwQCubOIAwQCub6YAwQA vNceAwQAvPBYAwQBvPDIAwQFw7IgAwQAw/xSAwQAw/xYAwQCw/xcAwQA1D47AwMA 1MgDBATVxGAwPgQCAAIwOAMFACoADpADBQAqAIcgAwUAKgG4AAMFACoCYaADBQAq A/xAAwUDKgQdwAMFAyoGWwADBQMqBmPAMA0GCSqGSIb3DQEBCwUAA4IBAQAPWPwx 4xf68Z9+UtPqXqbGZEm9IUTuNNHgw3FVCfq0z2TQsXzNEjeScV4OWYsh0NgLv4Bh BWBp8y6MbBdYkQZps7Qfx64Gg8LhJ1gJKVJLjuaBSfpXkTqrZPRUv3jb/GYBHBTW z/HfiOH6uyTgu6XivQlBiJoeRID/4xhKNoQtKMaG71araviuGAxkQew1mBAxZfPp UD16LRF1s9VdgakOuiH+S3iCChC8AgKKWFgLXLCRcvcrPhx7RlJiEP+fzop+z0Gz LHSK9MVyvdYXRmkk61OwV3GCmn4sA6ey/mYxOSNYf1ct7+5B+OeeW/fy2C1zgaKV JNDdyDdlQSLeaGPW -----END CERTIFICATE-----Generated at Sun Jan 25 21:02:57 2026 by rpki-client