This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Axy-VDMaL0TttuQWr1HwszNqc0I.roa File: Axy-VDMaL0TttuQWr1HwszNqc0I.roa (raw, json) Hash identifier: bbZhwLgQwTeviEfEB8kT+/Hr8GEpDxbaZvVMkhGxoa8= Subject key identifier: 03:1C:BE:54:33:1A:2F:44:ED:B6:E4:16:AF:51:F0:B3:33:6A:73:42 Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714 Certificate serial: 019B7D5B8A5C1E7265AC0B0E322FD023CCA9 Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Axy-VDMaL0TttuQWr1HwszNqc0I.roa Signing time: Fri 02 Jan 2026 06:18:29 +0000 ROA not before: Fri 02 Jan 2026 06:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5617 IP address blocks: 5.184.0.0/15 maxlen: 15 5.184.0.0/16 maxlen: 24 31.60.0.0/14 maxlen: 25 37.47.0.0/16 maxlen: 24 37.108.0.0/16 maxlen: 25 37.225.0.0/16 maxlen: 25 37.228.0.0/18 maxlen: 18 46.134.0.0/16 maxlen: 25 46.170.0.0/15 maxlen: 24 79.162.0.0/15 maxlen: 24 79.163.0.0/16 maxlen: 25 79.163.128.0/17 maxlen: 25 79.184.0.0/13 maxlen: 13 79.184.0.0/16 maxlen: 24 79.185.0.0/16 maxlen: 24 79.186.0.0/16 maxlen: 24 79.187.0.0/16 maxlen: 24 79.188.0.0/16 maxlen: 24 79.189.0.0/16 maxlen: 24 79.190.0.0/16 maxlen: 24 79.191.0.0/16 maxlen: 24 80.48.0.0/13 maxlen: 13 80.48.0.0/14 maxlen: 14 80.48.0.0/16 maxlen: 24 80.49.0.0/16 maxlen: 24 80.50.0.0/16 maxlen: 24 80.51.0.0/16 maxlen: 24 80.51.76.0/24 maxlen: 24 80.51.253.0/24 maxlen: 24 80.52.0.0/16 maxlen: 24 80.53.0.0/16 maxlen: 24 80.54.0.0/16 maxlen: 24 80.55.0.0/16 maxlen: 24 83.0.0.0/11 maxlen: 11 83.0.0.0/13 maxlen: 13 83.0.0.0/16 maxlen: 24 83.1.0.0/16 maxlen: 24 83.2.0.0/16 maxlen: 24 83.3.0.0/16 maxlen: 24 83.4.0.0/16 maxlen: 24 83.5.0.0/16 maxlen: 24 83.6.0.0/16 maxlen: 24 83.7.0.0/16 maxlen: 24 83.8.0.0/13 maxlen: 13 83.8.0.0/16 maxlen: 24 83.9.0.0/16 maxlen: 24 83.10.0.0/16 maxlen: 24 83.11.0.0/16 maxlen: 24 83.12.0.0/16 maxlen: 24 83.13.0.0/16 maxlen: 24 83.14.0.0/16 maxlen: 24 83.15.0.0/16 maxlen: 24 83.16.0.0/13 maxlen: 13 83.16.0.0/16 maxlen: 24 83.17.0.0/16 maxlen: 24 83.18.0.0/16 maxlen: 24 83.19.0.0/16 maxlen: 24 83.20.0.0/16 maxlen: 24 83.21.0.0/16 maxlen: 24 83.22.0.0/16 maxlen: 24 83.23.0.0/16 maxlen: 24 83.24.0.0/13 maxlen: 13 83.24.0.0/16 maxlen: 24 83.25.0.0/16 maxlen: 24 83.26.0.0/16 maxlen: 24 83.27.0.0/16 maxlen: 24 83.28.0.0/16 maxlen: 24 83.29.0.0/16 maxlen: 24 83.30.0.0/16 maxlen: 24 83.31.0.0/16 maxlen: 24 87.96.0.0/17 maxlen: 24 91.94.0.0/16 maxlen: 24 95.48.0.0/14 maxlen: 14 95.48.0.0/16 maxlen: 24 95.49.0.0/16 maxlen: 24 95.50.0.0/16 maxlen: 24 95.51.0.0/16 maxlen: 24 178.42.0.0/15 maxlen: 24 178.56.0.0/16 maxlen: 24 188.47.0.0/16 maxlen: 24 193.110.120.0/22 maxlen: 22 194.204.128.0/18 maxlen: 18 194.204.152.0/24 maxlen: 24 194.204.159.0/24 maxlen: 24 195.116.0.0/16 maxlen: 24 195.117.0.0/16 maxlen: 24 195.205.0.0/16 maxlen: 24 195.205.147.0/24 maxlen: 24 195.205.239.0/24 maxlen: 24 212.160.0.0/16 maxlen: 24 212.160.172.0/24 maxlen: 24 212.244.0.0/16 maxlen: 24 212.244.226.0/24 maxlen: 24 213.25.0.0/16 maxlen: 24 213.25.92.0/24 maxlen: 24 213.25.125.0/24 maxlen: 24 213.25.164.0/24 maxlen: 24 213.25.166.0/24 maxlen: 24 213.76.0.0/16 maxlen: 24 213.76.129.0/24 maxlen: 24 213.76.135.0/24 maxlen: 24 213.76.140.0/24 maxlen: 24 213.76.143.0/24 maxlen: 24 213.76.146.0/24 maxlen: 24 213.77.0.0/16 maxlen: 24 213.77.0.0/17 maxlen: 17 213.77.5.0/24 maxlen: 24 213.77.20.0/24 maxlen: 24 213.77.34.0/24 maxlen: 24 213.77.68.0/24 maxlen: 24 213.77.68.192/26 maxlen: 26 217.96.0.0/14 maxlen: 14 217.96.0.0/16 maxlen: 24 217.97.0.0/16 maxlen: 24 217.98.0.0/16 maxlen: 24 217.99.0.0/16 maxlen: 24 217.116.96.0/20 maxlen: 20 217.116.100.0/22 maxlen: 22 2a00:f40::/29 maxlen: 29 2a01:1000::/21 maxlen: 21 2a01:1100::/28 maxlen: 28 2a01:1110::/28 maxlen: 28 2a01:1120::/28 maxlen: 28 2a01:1130::/28 maxlen: 28 2a01:1140::/28 maxlen: 28 2a01:1150::/28 maxlen: 28 2a01:1160::/28 maxlen: 28 2a01:1170::/28 maxlen: 28 2a01:1180::/28 maxlen: 28 2a01:1190::/28 maxlen: 28 2a01:11a0::/28 maxlen: 28 2a01:11b0::/28 maxlen: 28 2a01:11c0::/28 maxlen: 28 2a01:11d0::/28 maxlen: 28 2a01:1700:2::/48 maxlen: 48 2a01:1700:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:8a:5c:1e:72:65:ac:0b:0e:32:2f:d0:23:cc:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714 Validity Not Before: Jan 2 06:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=031cbe54331a2f44edb6e416af51f0b3336a7342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:54:20:19:7d:d2:9a:f6:b0:ba:d5:3d:94:54: ee:f1:a0:fa:c6:f1:8f:c8:b9:db:58:1f:38:12:38: 09:d2:b3:b6:4a:12:08:38:5b:93:db:9c:54:57:c1: 30:df:44:ad:de:20:67:b3:18:25:4a:7f:44:c1:0a: 31:e9:ab:31:4a:09:31:44:81:b6:b8:70:c2:45:1f: 9b:d2:c8:97:84:e2:ba:57:3b:7b:16:0e:77:de:b1: 9d:17:a6:35:7c:16:84:8e:0e:51:b6:06:09:1a:58: 1b:f6:4a:61:f1:e0:55:06:bf:ed:df:08:f6:7c:5f: d6:0f:9e:4f:84:8d:43:06:e3:b6:8b:97:c8:77:33: ce:79:92:0c:2d:89:4c:70:4a:0d:22:5e:6a:ca:e9: 97:26:9f:90:ff:cf:2c:f1:56:d9:2f:b7:2f:1b:46: 03:f8:d9:13:0c:98:57:78:bc:70:cb:58:e5:fa:a4: 8d:c6:50:d6:b9:ea:e5:c3:14:28:5e:9a:d4:20:22: 49:b2:ee:a9:09:34:cd:bd:65:fd:46:bb:59:fa:c2: f7:00:55:5e:ed:4d:ab:5b:09:62:49:b0:20:fd:02: e8:82:b4:8b:4e:75:14:97:be:48:5a:61:9e:85:2a: 08:d2:2f:4d:16:ee:50:bc:1a:9a:4a:ec:d6:9a:9b: 04:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:1C:BE:54:33:1A:2F:44:ED:B6:E4:16:AF:51:F0:B3:33:6A:73:42 X509v3 Authority Key Identifier: keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Axy-VDMaL0TttuQWr1HwszNqc0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.184.0.0/15 31.60.0.0/14 37.47.0.0/16 37.108.0.0/16 37.225.0.0/16 37.228.0.0/18 46.134.0.0/16 46.170.0.0/15 79.162.0.0/15 79.184.0.0/13 80.48.0.0/13 83.0.0.0/11 87.96.0.0/17 91.94.0.0/16 95.48.0.0/14 178.42.0.0/15 178.56.0.0/16 188.47.0.0/16 193.110.120.0/22 194.204.128.0/18 195.116.0.0/15 195.205.0.0/16 212.160.0.0/16 212.244.0.0/16 213.25.0.0/16 213.76.0.0/15 217.96.0.0/14 217.116.96.0/20 IPv6: 2a00:f40::/29 2a01:1000::/21 Signature Algorithm: sha256WithRSAEncryption 62:54:cb:b8:7a:e9:8a:03:9c:f2:67:07:c1:07:ab:bf:6e:05: 72:7c:a0:48:25:5a:5d:f1:01:c7:04:34:b9:ab:d1:2a:ad:f2: b5:83:42:b0:00:17:36:96:dd:bf:d7:25:02:63:25:cb:0c:f4: 7e:83:40:21:09:07:6e:e5:d3:1e:0f:95:23:80:8e:af:35:a3: 9f:60:63:c0:d2:76:84:0b:53:d9:26:49:2f:76:23:dc:5d:6c: 20:15:6c:b5:c8:e7:74:3d:aa:b6:d2:2e:e3:e4:3e:35:5e:8c: 91:b1:b9:57:6d:f6:b1:ac:15:00:38:3c:86:9e:b9:a6:fe:e2: 7a:28:01:a4:0a:7f:d3:e4:40:56:86:52:73:22:98:12:24:42: de:9d:25:33:dc:9f:6e:c0:c7:d3:f3:ff:27:4c:08:bd:0c:8f: 50:f7:d3:c1:6d:74:ea:3c:42:22:8d:2e:c8:ce:18:b0:4c:e7: 49:b2:f7:d8:9e:fd:b7:62:58:1c:f3:6a:2e:c6:b0:ef:04:3f: d1:a1:34:52:2a:4e:4e:b2:e6:a4:73:86:11:9c:e8:68:51:05: 85:80:5e:f2:b2:4a:e7:ea:8f:c0:99:78:21:b7:3e:fe:20:30: db:7c:24:72:8b:2e:6d:64:5e:24:a6:52:be:70:9f:74:3e:5d: 36:88:7e:eb -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt9W4pcHnJlrAsOMi/QI8ypMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlY2Y1MzAwN2M3OWNjNWUyZjJkNzM1NmJhOTEyMWE3OGMw Yzc3MTQwHhcNMjYwMTAyMDYxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzFjYmU1NDMzMWEyZjQ0ZWRiNmU0MTZhZjUxZjBiMzMzNmE3MzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1QgGX3SmvawutU9lFTu8aD6xvGP yLnbWB84EjgJ0rO2ShIIOFuT25xUV8Ew30St3iBnsxglSn9EwQox6asxSgkxRIG2 uHDCRR+b0siXhOK6Vzt7Fg533rGdF6Y1fBaEjg5RtgYJGlgb9kph8eBVBr/t3wj2 fF/WD55PhI1DBuO2i5fIdzPOeZIMLYlMcEoNIl5qyumXJp+Q/88s8VbZL7cvG0YD +NkTDJhXeLxwy1jl+qSNxlDWuerlwxQoXprUICJJsu6pCTTNvWX9RrtZ+sL3AFVe 7U2rWwliSbAg/QLogrSLTnUUl75IWmGehSoI0i9NFu5QvBqaSuzWmpsEYwIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFAMcvlQzGi9E7bbkFq9R8LMzanNCMB8GA1UdIwQY MBaAFE7PUwB8ecxeLy1zVrqRIaeMDHcUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEt Y2I4YjNhMDk0MjA5LzEvQXh5LVZETWFMMFR0dHVRV3IxSHdzek5xYzBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEtY2I4YjNhMDk0MjA5 LzEvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHDBggrBgEFBQcBBwEB/wSBszCBsDCBmAQCAAEwgZEDAwEF uAMDAh88AwMAJS8DAwAlbAMDACXhAwQGJeQAAwMALoYDAwEuqgMDAU+iAwMDT7gD AwNQMAMDBVMAAwQHV2AAAwMAW14DAwJfMAMDAbIqAwMAsjgDAwC8LwMEAsFueAME BsLMgAMDAcN0AwMAw80DAwDUoAMDANT0AwMA1RkDAwHVTAMDAtlgAwQE2XRgMBME AgACMA0DBQMqAA9AAwQDKgEQMA0GCSqGSIb3DQEBCwUAA4IBAQBiVMu4eumKA5zy ZwfBB6u/bgVyfKBIJVpd8QHHBDS5q9EqrfK1g0KwABc2lt2/1yUCYyXLDPR+g0Ah CQdu5dMeD5UjgI6vNaOfYGPA0naEC1PZJkkvdiPcXWwgFWy1yOd0Paq20i7j5D41 XoyRsblXbfaxrBUAODyGnrmm/uJ6KAGkCn/T5EBWhlJzIpgSJELenSUz3J9uwMfT 8/8nTAi9DI9Q99PBbXTqPEIijS7IzhiwTOdJsvfYnv23Ylgc82ouxrDvBD/RoTRS Kk5Osuakc4YRnOhoUQWFgF7yskrn6o/AmXghtz7+IDDbfCRyiy5tZF4kplK+cJ90 Pl02iH7r -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:46 2026 by rpki-client