This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/Q4J6rM1f2cA2ya2qZmwp_lxNoTA.roa File: Q4J6rM1f2cA2ya2qZmwp_lxNoTA.roa (raw, json) Hash identifier: HzeL7gFw7OqzTY853HEGPqmy3+Ng776QO9amdUFW2A8= Subject key identifier: 43:82:7A:AC:CD:5F:D9:C0:36:C9:AD:AA:66:6C:29:FE:5C:4D:A1:30 Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270 Certificate serial: 019B7F15E40A9E1299E945ECAD16FF60723A Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/Q4J6rM1f2cA2ya2qZmwp_lxNoTA.roa Signing time: Fri 02 Jan 2026 14:21:39 +0000 ROA not before: Fri 02 Jan 2026 14:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9155 IP address blocks: 62.150.10.0/24 maxlen: 24 62.150.155.0/24 maxlen: 24 62.150.175.0/24 maxlen: 24 62.150.181.0/24 maxlen: 24 62.150.182.0/24 maxlen: 24 78.154.192.0/18 maxlen: 18 78.154.192.0/20 maxlen: 20 78.154.192.0/24 maxlen: 24 78.154.193.0/24 maxlen: 24 78.154.194.0/24 maxlen: 24 78.154.195.0/24 maxlen: 24 78.154.196.0/24 maxlen: 24 78.154.197.0/24 maxlen: 24 78.154.198.0/24 maxlen: 24 78.154.199.0/24 maxlen: 24 78.154.200.0/24 maxlen: 24 78.154.201.0/24 maxlen: 24 78.154.202.0/24 maxlen: 24 78.154.203.0/24 maxlen: 24 78.154.204.0/24 maxlen: 24 78.154.205.0/24 maxlen: 24 78.154.206.0/24 maxlen: 24 78.154.207.0/24 maxlen: 24 78.154.208.0/20 maxlen: 20 78.154.208.0/24 maxlen: 24 78.154.209.0/24 maxlen: 24 78.154.210.0/24 maxlen: 24 78.154.211.0/24 maxlen: 24 78.154.212.0/24 maxlen: 24 78.154.213.0/24 maxlen: 24 78.154.214.0/24 maxlen: 24 78.154.215.0/24 maxlen: 24 78.154.216.0/24 maxlen: 24 78.154.217.0/24 maxlen: 24 78.154.218.0/24 maxlen: 24 78.154.219.0/24 maxlen: 24 78.154.220.0/24 maxlen: 24 78.154.221.0/24 maxlen: 24 78.154.222.0/24 maxlen: 24 78.154.223.0/24 maxlen: 24 78.154.224.0/20 maxlen: 20 78.154.224.0/24 maxlen: 24 78.154.225.0/24 maxlen: 24 78.154.226.0/24 maxlen: 24 78.154.227.0/24 maxlen: 24 78.154.228.0/24 maxlen: 24 78.154.229.0/24 maxlen: 24 78.154.230.0/24 maxlen: 24 78.154.231.0/24 maxlen: 24 78.154.232.0/24 maxlen: 24 78.154.233.0/24 maxlen: 24 78.154.234.0/24 maxlen: 24 78.154.235.0/24 maxlen: 24 78.154.236.0/24 maxlen: 24 78.154.237.0/24 maxlen: 24 78.154.238.0/24 maxlen: 24 78.154.239.0/24 maxlen: 24 78.154.240.0/20 maxlen: 20 78.154.240.0/24 maxlen: 24 78.154.241.0/24 maxlen: 24 78.154.242.0/24 maxlen: 24 78.154.243.0/24 maxlen: 24 78.154.244.0/24 maxlen: 24 78.154.245.0/24 maxlen: 24 78.154.246.0/24 maxlen: 24 78.154.247.0/24 maxlen: 24 78.154.248.0/24 maxlen: 24 78.154.249.0/24 maxlen: 24 78.154.250.0/24 maxlen: 24 78.154.251.0/24 maxlen: 24 78.154.252.0/24 maxlen: 24 78.154.253.0/24 maxlen: 24 78.154.254.0/24 maxlen: 24 78.154.255.0/24 maxlen: 24 195.39.161.0/24 maxlen: 24 195.39.180.0/24 maxlen: 24 195.39.181.0/24 maxlen: 24 195.39.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e4:0a:9e:12:99:e9:45:ec:ad:16:ff:60:72:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270 Validity Not Before: Jan 2 14:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43827aaccd5fd9c036c9adaa666c29fe5c4da130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3d:35:82:07:6b:bb:fc:1c:23:50:a6:bd:d0: 98:9d:7d:b4:a0:48:59:90:6f:4d:f3:3a:b9:85:9b: 04:f3:52:b2:02:7d:a3:43:40:b4:9f:4e:98:d2:e7: 7e:43:63:59:e0:6f:78:10:d8:b8:ca:26:7f:a3:1e: f9:02:fb:99:16:4a:fd:12:54:64:23:d9:03:49:33: 6c:d4:6a:8b:61:5b:86:4c:b4:75:bb:5a:29:3c:d1: 93:2d:8a:3b:3c:c3:78:5e:de:22:d1:4c:60:f5:c7: 16:e3:46:b3:8d:51:d5:35:18:16:95:1d:0e:d3:6a: f4:94:e4:7e:d5:27:05:c7:70:3e:85:98:9c:f8:a8: 83:f2:c0:a2:2e:17:b3:cb:02:b3:1e:24:7b:b2:51: 52:c3:27:be:3e:f8:c1:54:72:76:c2:c8:b7:d3:b7: 57:5b:25:a8:46:2d:b2:10:62:a4:02:57:09:fc:f2: 56:e6:d0:b5:8a:43:d9:d5:21:4e:80:3c:1f:64:8f: 15:79:17:28:5f:68:65:01:23:2f:f2:d9:59:8a:6e: c3:ac:f8:1f:fc:36:3e:17:d7:9b:7c:69:98:26:d2: 4a:a6:6a:e3:15:14:c6:ba:eb:54:70:e4:43:c1:ed: ab:f9:a0:10:ce:08:58:e9:58:f0:54:36:db:c1:d5: 05:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:82:7A:AC:CD:5F:D9:C0:36:C9:AD:AA:66:6C:29:FE:5C:4D:A1:30 X509v3 Authority Key Identifier: keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/Q4J6rM1f2cA2ya2qZmwp_lxNoTA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.150.10.0/24 62.150.155.0/24 62.150.175.0/24 62.150.181.0-62.150.182.255 78.154.192.0/18 195.39.161.0/24 195.39.180.0-195.39.182.255 Signature Algorithm: sha256WithRSAEncryption 40:c2:07:bb:21:cd:0d:e3:4f:7d:fa:b1:ae:89:2a:3c:7c:f4: d5:58:9f:3a:d6:f8:db:6e:c1:05:a4:42:1e:ac:83:c4:94:83: 2b:5d:89:c6:55:86:3f:18:d6:16:87:ed:73:54:5f:04:dc:d3: 52:21:06:5e:23:12:75:f7:44:fc:64:8e:2f:e0:e6:3c:7c:3c: 1f:05:8a:46:1e:1a:d1:e6:14:2d:81:68:76:8d:4b:5e:25:dd: 3c:ec:af:d7:1a:8d:c4:bd:74:d1:14:7e:f7:e4:86:74:4a:ff: 6b:ad:e4:51:1c:26:a4:c2:fa:54:08:95:56:c6:07:b9:ea:f4: 0e:ab:53:48:af:e4:12:86:00:9e:ad:14:89:1a:14:9a:49:1f: 61:0d:a8:e5:01:9c:43:b2:9e:64:19:86:b9:78:3d:a7:81:76: ce:22:57:da:9c:d5:39:c5:db:40:a4:f8:9b:10:3f:98:54:4f: 57:82:1b:75:63:5b:32:e2:f6:3c:36:c5:ec:03:b5:46:84:4a: b0:07:48:8d:9d:b0:dd:23:a3:d4:6a:ef:2e:81:94:c5:28:d9: 3f:dc:5e:91:35:20:d8:76:15:b4:30:21:bd:f6:39:36:be:e7: 77:dd:40:81:7b:b7:7e:06:9e:b9:88:08:e5:80:f3:1b:1e:86: a6:ba:84:43 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZt/FeQKnhKZ6UXsrRb/YHI6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDQzZjdhYWU0N2UwYWIzOGJjZjhkNTM2Y2NhNjAzNTBk MTcyNzAwHhcNMjYwMTAyMTQyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzgyN2FhY2NkNWZkOWMwMzZjOWFkYWE2NjZjMjlmZTVjNGRhMTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD01ggdru/wcI1CmvdCYnX20oEhZ kG9N8zq5hZsE81KyAn2jQ0C0n06Y0ud+Q2NZ4G94ENi4yiZ/ox75AvuZFkr9ElRk I9kDSTNs1GqLYVuGTLR1u1opPNGTLYo7PMN4Xt4i0Uxg9ccW40azjVHVNRgWlR0O 02r0lOR+1ScFx3A+hZic+KiD8sCiLhezywKzHiR7slFSwye+PvjBVHJ2wsi307dX WyWoRi2yEGKkAlcJ/PJW5tC1ikPZ1SFOgDwfZI8VeRcoX2hlASMv8tlZim7DrPgf /DY+F9ebfGmYJtJKpmrjFRTGuutUcORDwe2r+aAQzghY6VjwVDbbwdUFBQIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFEOCeqzNX9nANsmtqmZsKf5cTaEwMB8GA1UdIwQY MBaAFLxEP3quR+CrOLz41TbMpgNQ0XJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83NWI2OGItZmE1Ni00NGI3LWJmYmEt NTAzNGYxOTk1M2EzLzEvUTRKNnJNMWYyY0EyeWEycVptd3BfbHhOb1RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC83NWI2OGItZmE1Ni00NGI3LWJmYmEtNTAzNGYxOTk1M2Ez LzEvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQAPpYKAwQA PpabAwQAPpavMAwDBAA+lrUDBAA+lrYDBAZOmsADBADDJ6EwDAMEAsMntAMEAMMn tjANBgkqhkiG9w0BAQsFAAOCAQEAQMIHuyHNDeNPffqxrokqPHz01VifOtb4227B BaRCHqyDxJSDK12JxlWGPxjWFoftc1RfBNzTUiEGXiMSdfdE/GSOL+DmPHw8HwWK Rh4a0eYULYFodo1LXiXdPOyv1xqNxL100RR+9+SGdEr/a63kURwmpML6VAiVVsYH uer0DqtTSK/kEoYAnq0UiRoUmkkfYQ2o5QGcQ7KeZBmGuXg9p4F2ziJX2pzVOcXb QKT4mxA/mFRPV4IbdWNbMuL2PDbF7AO1RoRKsAdIjZ2w3SOj1GrvLoGUxSjZP9xe kTUg2HYVtDAhvfY5Nr7nd91AgXu3fgaeuYgI5YDzGx6GprqEQw== -----END CERTIFICATE-----Generated at Mon Jan 26 11:05:02 2026 by rpki-client