This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/75AwziJR5w1JmorjN6nm2vuye_U.roa File: 75AwziJR5w1JmorjN6nm2vuye_U.roa (raw, json) Hash identifier: P4Uobg4aZmz71V7WcJ/2A9j6g9mMLhAaqFQfuo24nE4= Subject key identifier: EF:90:30:CE:22:51:E7:0D:49:9A:8A:E3:37:A9:E6:DA:FB:B2:7B:F5 Certificate issuer: /CN=ab91d5262561a9dd713dfa39163dec849fee4636 Certificate serial: 019B7DCA6113A395014336B71476B9DB8FD8 Authority key identifier: AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/75AwziJR5w1JmorjN6nm2vuye_U.roa Signing time: Fri 02 Jan 2026 08:19:33 +0000 ROA not before: Fri 02 Jan 2026 08:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2119 IP address blocks: 2.148.0.0/14 maxlen: 14 31.45.0.0/17 maxlen: 17 37.200.0.0/18 maxlen: 18 37.253.0.0/16 maxlen: 16 46.9.0.0/16 maxlen: 16 46.66.0.0/15 maxlen: 15 46.156.0.0/15 maxlen: 15 62.16.128.0/17 maxlen: 17 62.92.0.0/16 maxlen: 16 62.102.160.0/19 maxlen: 19 62.128.224.0/19 maxlen: 19 62.209.64.0/18 maxlen: 18 62.249.160.0/19 maxlen: 19 77.16.0.0/14 maxlen: 14 78.158.224.0/19 maxlen: 19 80.212.0.0/15 maxlen: 15 82.116.64.0/19 maxlen: 19 82.164.0.0/16 maxlen: 16 83.108.0.0/15 maxlen: 15 84.53.0.0/18 maxlen: 18 84.202.0.0/16 maxlen: 16 85.164.0.0/14 maxlen: 14 87.252.64.0/19 maxlen: 19 88.88.0.0/13 maxlen: 13 95.34.0.0/16 maxlen: 16 109.179.0.0/16 maxlen: 16 109.189.0.0/16 maxlen: 16 130.67.0.0/16 maxlen: 16 134.47.0.0/16 maxlen: 16 144.193.0.0/16 maxlen: 16 146.172.0.0/16 maxlen: 16 148.118.0.0/15 maxlen: 15 148.120.0.0/15 maxlen: 15 148.122.0.0/16 maxlen: 16 148.123.0.0/16 maxlen: 16 176.75.0.0/16 maxlen: 16 185.4.172.0/22 maxlen: 22 193.160.192.0/22 maxlen: 22 193.160.196.0/22 maxlen: 22 193.160.200.0/22 maxlen: 22 193.212.0.0/14 maxlen: 14 194.143.0.0/17 maxlen: 17 194.248.0.0/16 maxlen: 16 195.134.32.0/19 maxlen: 19 212.4.32.0/19 maxlen: 19 212.17.128.0/19 maxlen: 19 212.251.128.0/17 maxlen: 17 213.142.64.0/19 maxlen: 19 217.148.144.0/20 maxlen: 20 217.199.32.0/19 maxlen: 19 2001:67c:19e4::/48 maxlen: 48 2001:4600::/24 maxlen: 24 2a02:a38::/32 maxlen: 32 2a02:2120::/30 maxlen: 30 2a02:2640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:61:13:a3:95:01:43:36:b7:14:76:b9:db:8f:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab91d5262561a9dd713dfa39163dec849fee4636 Validity Not Before: Jan 2 08:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef9030ce2251e70d499a8ae337a9e6dafbb27bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fc:8b:09:31:39:2e:dd:be:aa:7c:1a:16:07: 3a:fa:b7:2e:ea:50:1c:b7:b9:2b:83:bc:f8:61:b9: 62:f8:b6:c1:95:ff:49:9a:f9:c6:4d:cb:d5:58:fa: fd:1b:d1:70:3e:dc:55:de:3f:9b:ca:ca:3b:1d:14: 09:d4:ab:7c:47:9f:de:ce:55:ba:42:5c:7f:01:ce: d1:54:bd:70:f2:75:76:e9:f8:9c:b5:41:4b:f8:8e: 67:8f:67:d3:e6:8d:c1:ba:c7:8c:72:60:6d:7e:34: 56:10:f9:3e:5d:69:85:a4:9f:7d:34:fb:3e:42:78: cf:f7:59:b3:60:69:bd:95:0e:6d:8f:20:10:26:33: 69:a5:2b:92:b7:f8:75:df:f0:fc:cf:d4:14:19:7f: 0f:fa:c9:87:46:29:0b:51:ae:af:a3:aa:b5:f6:f5: 17:b7:5a:48:44:85:d1:16:43:5a:19:0d:9c:97:04: e7:e4:c7:a1:c0:c9:42:c2:dc:cd:88:80:ee:92:1f: 00:3d:76:c7:45:fc:78:f2:99:12:e4:ec:a5:d6:24: 77:ce:3f:3a:7a:d4:0e:78:f1:0f:9c:66:f3:06:34: 4b:d3:f4:4c:e7:1f:e8:11:13:d4:dc:b6:c0:4e:f3: 77:55:72:8e:9c:a7:1b:02:45:67:e5:3c:99:86:c9: eb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:90:30:CE:22:51:E7:0D:49:9A:8A:E3:37:A9:E6:DA:FB:B2:7B:F5 X509v3 Authority Key Identifier: keyid:AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/75AwziJR5w1JmorjN6nm2vuye_U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.148.0.0/14 31.45.0.0/17 37.200.0.0/18 37.253.0.0/16 46.9.0.0/16 46.66.0.0/15 46.156.0.0/15 62.16.128.0/17 62.92.0.0/16 62.102.160.0/19 62.128.224.0/19 62.209.64.0/18 62.249.160.0/19 77.16.0.0/14 78.158.224.0/19 80.212.0.0/15 82.116.64.0/19 82.164.0.0/16 83.108.0.0/15 84.53.0.0/18 84.202.0.0/16 85.164.0.0/14 87.252.64.0/19 88.88.0.0/13 95.34.0.0/16 109.179.0.0/16 109.189.0.0/16 130.67.0.0/16 134.47.0.0/16 144.193.0.0/16 146.172.0.0/16 148.118.0.0-148.123.255.255 176.75.0.0/16 185.4.172.0/22 193.160.192.0-193.160.203.255 193.212.0.0/14 194.143.0.0/17 194.248.0.0/16 195.134.32.0/19 212.4.32.0/19 212.17.128.0/19 212.251.128.0/17 213.142.64.0/19 217.148.144.0/20 217.199.32.0/19 IPv6: 2001:67c:19e4::/48 2001:4600::/24 2a02:a38::/32 2a02:2120::/30 2a02:2640::/32 Signature Algorithm: sha256WithRSAEncryption 1e:a9:df:cc:72:b9:b8:c9:c1:e7:d5:35:c8:ba:6a:f5:99:44: ec:11:73:15:6f:4a:c3:b7:30:29:93:bb:67:ed:6b:d6:3f:26: df:72:28:c3:18:7c:56:75:ac:91:f2:4e:c3:11:b9:25:23:53: 38:6a:35:9e:fd:3b:9c:70:d8:1a:5d:63:9f:63:a6:27:7f:2e: 30:ee:6f:be:e0:e3:e4:9d:59:5d:36:e1:56:52:bd:b9:99:75: 5b:e6:75:af:82:90:9e:d4:b0:ae:b0:fc:8f:78:0b:37:fd:20: 58:20:a0:bb:6c:ea:91:fb:a4:04:56:77:41:ea:68:25:f5:ed: 55:03:18:f1:99:fa:ba:ad:b0:5f:8d:4f:b1:89:4a:e2:25:77: 61:91:f2:13:cc:bd:b9:87:ec:9d:87:7d:57:3d:ca:29:09:75: b2:b5:db:de:ca:6d:15:4a:7d:ff:eb:05:ca:8e:c4:8a:b8:e9: 64:00:5e:77:73:9c:3d:8c:ec:62:c9:d5:90:cc:03:9c:54:b0: 1c:c4:ae:9e:29:97:7a:4a:32:b5:b5:4b:fa:fa:53:37:7f:49: c6:5b:5f:58:ff:79:ba:28:86:84:b4:8e:6b:50:a5:cd:33:c2: dc:3a:8e:81:50:3c:4e:bf:63:a2:bd:82:86:a8:f8:10:9a:7e: 38:69:2c:e5 -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgISAZt9ymETo5UBQza3FHa524/YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOTFkNTI2MjU2MWE5ZGQ3MTNkZmEzOTE2M2RlYzg0OWZl ZTQ2MzYwHhcNMjYwMTAyMDgxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjkwMzBjZTIyNTFlNzBkNDk5YThhZTMzN2E5ZTZkYWZiYjI3YmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvyLCTE5Lt2+qnwaFgc6+rcu6lAc t7krg7z4Ybli+LbBlf9JmvnGTcvVWPr9G9FwPtxV3j+byso7HRQJ1Kt8R5/ezlW6 Qlx/Ac7RVL1w8nV26fictUFL+I5nj2fT5o3BuseMcmBtfjRWEPk+XWmFpJ99NPs+ QnjP91mzYGm9lQ5tjyAQJjNppSuSt/h13/D8z9QUGX8P+smHRikLUa6vo6q19vUX t1pIRIXRFkNaGQ2clwTn5MehwMlCwtzNiIDukh8APXbHRfx48pkS5Oyl1iR3zj86 etQOePEPnGbzBjRL0/RM5x/oERPU3LbATvN3VXKOnKcbAkVn5TyZhsnrCwIDAQAB o4IDPjCCAzowHQYDVR0OBBYEFO+QMM4iUecNSZqK4zep5tr7snv1MB8GA1UdIwQY MBaAFKuR1SYlYandcT36ORY97ISf7kY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTVIVkppVmhxZDF4UGZvNUZqM3NoSl91UmpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85MWU4ODItYmE4YS00NGM1LTliMGQt Mjc1MjQyYWE2Nzc1LzEvNzVBd3ppSlI1dzFKbW9yak42bm0ydnV5ZV9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi85MWU4ODItYmE4YS00NGM1LTliMGQtMjc1MjQyYWE2Nzc1 LzEvcTVIVkppVmhxZDF4UGZvNUZqM3NoSl91UmpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBUgYIKwYBBQUHAQcBAf8EggFBMIIBPTCCAQ0EAgABMIIB BQMDAgKUAwQHHy0AAwQGJcgAAwMAJf0DAwAuCQMDAS5CAwMBLpwDBAc+EIADAwA+ XAMEBT5moAMEBT6A4AMEBj7RQAMEBT75oAMDAk0QAwQFTp7gAwMBUNQDBAVSdEAD AwBSpAMDAVNsAwQGVDUAAwMAVMoDAwJVpAMEBVf8QAMDA1hYAwMAXyIDAwBtswMD AG29AwMAgkMDAwCGLwMDAJDBAwMAkqwwCgMDAZR2AwMClHgDAwCwSwMEArkErDAM AwQGwaDAAwQCwaDIAwMCwdQDBAfCjwADAwDC+AMEBcOGIAMEBdQEIAMEBdQRgAME B9T7gAMEBdWOQAMEBNmUkAMEBdnHIDAqBAIAAjAkAwcAIAEGfBnkAwQAIAFGAwUA KgIKOAMFAioCISADBQAqAiZAMA0GCSqGSIb3DQEBCwUAA4IBAQAeqd/Mcrm4ycHn 1TXIumr1mUTsEXMVb0rDtzApk7tn7WvWPybfcijDGHxWdayR8k7DEbklI1M4ajWe /TuccNgaXWOfY6Ynfy4w7m++4OPknVldNuFWUr25mXVb5nWvgpCe1LCusPyPeAs3 /SBYIKC7bOqR+6QEVndB6mgl9e1VAxjxmfq6rbBfjU+xiUriJXdhkfITzL25h+yd h31XPcopCXWytdveym0VSn3/6wXKjsSKuOlkAF53c5w9jOxiydWQzAOcVLAcxK6e KZd6SjK1tUv6+lM3f0nGW19Y/3m6KIaEtI5rUKXNM8LcOo6BUDxOv2OivYKGqPgQ mn44aSzl -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:36 2026 by rpki-client