This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/z6e33QVjM1ScX3giRZexUYMNouw.roa File: z6e33QVjM1ScX3giRZexUYMNouw.roa (raw, json) Hash identifier: RQo5RgCZDa+nBXPpaf7nM7lEm2o0WPSM85UQMqPSXpc= Subject key identifier: CF:A7:B7:DD:05:63:33:54:9C:5F:78:22:45:97:B1:51:83:0D:A2:EC Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA76585E06F3A7874128BA9949EA8AD Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/z6e33QVjM1ScX3giRZexUYMNouw.roa Signing time: Fri 02 Jan 2026 12:20:58 +0000 ROA not before: Fri 02 Jan 2026 12:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25490 IP address blocks: 62.183.0.0/19 maxlen: 19 62.183.0.0/23 maxlen: 23 62.183.3.0/24 maxlen: 24 62.183.4.0/22 maxlen: 22 62.183.8.0/23 maxlen: 23 62.183.10.0/24 maxlen: 24 62.183.12.0/22 maxlen: 22 62.183.16.0/22 maxlen: 22 62.183.20.0/24 maxlen: 24 62.183.23.0/24 maxlen: 24 62.183.24.0/23 maxlen: 23 62.183.28.0/23 maxlen: 23 62.183.31.0/24 maxlen: 24 62.183.32.0/20 maxlen: 20 62.183.48.0/23 maxlen: 23 62.183.50.0/24 maxlen: 24 62.183.52.0/22 maxlen: 22 62.183.56.0/22 maxlen: 22 62.183.60.0/22 maxlen: 22 62.183.64.0/21 maxlen: 21 62.183.64.0/24 maxlen: 24 62.183.72.0/22 maxlen: 22 62.183.88.0/22 maxlen: 22 62.183.92.0/22 maxlen: 22 62.183.96.0/22 maxlen: 22 83.239.0.0/18 maxlen: 18 83.239.0.0/20 maxlen: 20 83.239.16.0/20 maxlen: 20 83.239.32.0/19 maxlen: 19 83.239.32.0/21 maxlen: 21 83.239.40.0/22 maxlen: 22 83.239.48.0/20 maxlen: 20 83.239.64.0/19 maxlen: 19 83.239.96.0/20 maxlen: 20 83.239.200.0/21 maxlen: 24 83.239.224.0/20 maxlen: 20 83.239.240.0/22 maxlen: 22 83.239.244.0/22 maxlen: 22 85.172.0.0/19 maxlen: 19 85.172.32.0/19 maxlen: 19 85.172.64.0/21 maxlen: 21 85.172.72.0/22 maxlen: 22 85.172.79.0/24 maxlen: 24 85.172.82.0/23 maxlen: 23 85.172.84.0/22 maxlen: 22 85.172.96.0/21 maxlen: 21 85.172.104.0/22 maxlen: 22 85.172.108.0/23 maxlen: 23 85.172.160.0/21 maxlen: 21 85.173.4.0/22 maxlen: 22 85.173.144.0/20 maxlen: 23 85.173.150.0/23 maxlen: 23 85.173.152.0/22 maxlen: 22 85.174.128.0/22 maxlen: 22 85.174.132.0/23 maxlen: 23 85.174.134.0/24 maxlen: 24 85.174.136.0/24 maxlen: 24 85.174.143.0/24 maxlen: 24 85.174.190.0/23 maxlen: 23 85.174.224.0/20 maxlen: 20 85.174.224.0/24 maxlen: 24 85.174.227.0/24 maxlen: 24 85.174.230.0/23 maxlen: 23 85.174.232.0/21 maxlen: 21 85.174.240.0/20 maxlen: 20 85.174.240.0/23 maxlen: 23 85.174.250.0/23 maxlen: 23 85.174.252.0/22 maxlen: 22 85.175.0.0/16 maxlen: 23 85.175.0.0/19 maxlen: 19 85.175.1.0/24 maxlen: 24 85.175.2.0/24 maxlen: 24 85.175.32.0/21 maxlen: 21 85.175.46.0/24 maxlen: 24 85.175.62.0/23 maxlen: 23 85.175.65.0/24 maxlen: 24 85.175.66.0/23 maxlen: 23 85.175.72.0/22 maxlen: 22 85.175.82.0/23 maxlen: 23 85.175.91.0/24 maxlen: 24 85.175.96.0/22 maxlen: 22 85.175.100.0/23 maxlen: 23 85.175.152.0/23 maxlen: 23 85.175.170.0/23 maxlen: 23 85.175.171.0/24 maxlen: 24 85.175.194.0/23 maxlen: 24 85.175.200.0/21 maxlen: 24 85.175.216.0/22 maxlen: 22 85.175.226.0/23 maxlen: 23 85.175.236.0/24 maxlen: 24 94.233.144.0/21 maxlen: 21 94.233.160.0/20 maxlen: 20 109.172.72.0/24 maxlen: 24 178.34.0.0/17 maxlen: 17 2a02:8040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:65:85:e0:6f:3a:78:74:12:8b:a9:94:9e:a8:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfa7b7dd056333549c5f78224597b151830da2ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b3:6b:13:7c:04:be:db:8c:02:53:72:85:2c: 10:66:4f:00:d8:b7:4d:9e:36:41:cb:b0:28:8f:d1: 69:e8:36:21:9b:12:8a:ed:c3:b7:c9:3d:ce:94:57: 3b:52:5a:da:3d:18:66:92:76:48:df:3c:0a:43:09: 87:f9:e1:43:c0:64:18:a9:78:07:7e:60:49:d5:d0: cf:43:50:16:f5:4a:13:db:79:66:aa:80:41:bf:9d: 8c:ce:48:b6:b4:02:34:4a:7a:6a:64:96:0f:f2:15: ec:ba:06:38:af:ca:56:c0:01:84:cd:9e:59:16:0b: 07:93:6b:ef:f1:5f:fd:fa:40:04:d5:68:0f:07:51: c7:49:b0:92:87:d1:c6:26:20:f9:d1:de:c1:f8:a6: 28:e1:09:f0:34:cf:97:55:95:d1:08:b8:85:b9:b8: d1:f0:99:1b:fd:55:bf:87:57:fb:23:0f:ea:ab:1f: c6:de:bd:ab:55:73:0b:8b:0b:42:85:ec:a3:00:de: 16:de:3d:00:3e:dc:d6:bb:70:e5:0b:36:0d:6d:2a: 7d:91:32:5a:2d:ee:90:65:42:ce:6f:e6:1e:a4:9f: c2:ad:4d:74:2a:e6:3d:23:e0:69:32:8e:41:88:e4: 76:3f:63:91:63:e6:e6:a3:3c:0e:76:b8:b4:ac:fb: aa:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A7:B7:DD:05:63:33:54:9C:5F:78:22:45:97:B1:51:83:0D:A2:EC X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/z6e33QVjM1ScX3giRZexUYMNouw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.183.0.0-62.183.50.255 62.183.52.0-62.183.75.255 62.183.88.0-62.183.99.255 83.239.0.0-83.239.111.255 83.239.200.0/21 83.239.224.0-83.239.247.255 85.172.0.0-85.172.75.255 85.172.79.0/24 85.172.82.0-85.172.87.255 85.172.96.0-85.172.109.255 85.172.160.0/21 85.173.4.0/22 85.173.144.0/20 85.174.128.0-85.174.134.255 85.174.136.0/24 85.174.143.0/24 85.174.190.0/23 85.174.224.0-85.175.255.255 94.233.144.0/21 94.233.160.0/20 109.172.72.0/24 178.34.0.0/17 IPv6: 2a02:8040::/32 Signature Algorithm: sha256WithRSAEncryption 1e:d2:89:4f:53:c5:47:a0:05:ce:27:88:4d:85:5d:de:b8:85: c7:09:7f:79:84:20:02:9b:72:5d:cf:8c:5c:5b:82:d3:29:fe: 24:78:3b:f4:b9:8f:1a:45:96:db:32:9e:57:68:d2:bd:b8:fe: d2:e3:ab:84:fd:6f:02:66:1b:3a:56:87:0a:f6:46:f7:34:e4: 95:2a:f7:27:6c:72:9e:2a:2d:4f:f9:20:a7:0c:58:20:05:d4: 6d:33:29:0a:d3:13:0d:d3:09:7b:c6:f3:14:94:a1:0c:ab:7c: 2e:9d:1a:63:6f:3a:16:a8:9f:da:2d:04:87:47:c8:ad:0d:4f: 21:ca:c6:18:9d:fd:e5:39:d8:34:91:2d:08:38:2c:eb:c1:52: 2b:5c:f5:91:b2:7e:9c:61:78:e3:cf:d0:3d:92:24:19:2a:5c: 3a:f1:72:54:50:c1:ed:09:ab:bd:89:1a:6e:3b:27:11:cb:1f: e7:dd:f9:c5:f0:28:60:56:26:b5:79:74:63:0f:0d:a8:93:69: 83:6b:2e:d8:81:03:b2:3c:32:17:17:f4:27:56:8f:d2:f1:6d: af:65:b8:27:de:86:72:da:44:ae:b0:ca:df:12:7c:72:5c:fd: a5:46:7d:27:97:28:f4:5c:ab:50:a4:bf:34:06:e5:b9:bd:b3: 75:e7:07:02 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgISAZt+p2WF4G86eHQSi6mUnqitMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmE3YjdkZDA1NjMzMzU0OWM1Zjc4MjI0NTk3YjE1MTgzMGRhMmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbNrE3wEvtuMAlNyhSwQZk8A2LdN njZBy7Aoj9Fp6DYhmxKK7cO3yT3OlFc7UlraPRhmknZI3zwKQwmH+eFDwGQYqXgH fmBJ1dDPQ1AW9UoT23lmqoBBv52Mzki2tAI0SnpqZJYP8hXsugY4r8pWwAGEzZ5Z FgsHk2vv8V/9+kAE1WgPB1HHSbCSh9HGJiD50d7B+KYo4QnwNM+XVZXRCLiFubjR 8Jkb/VW/h1f7Iw/qqx/G3r2rVXMLiwtCheyjAN4W3j0APtzWu3DlCzYNbSp9kTJa Le6QZULOb+YepJ/CrU10KuY9I+BpMo5BiOR2P2ORY+bmozwOdri0rPuqJQIDAQAB o4IC5zCCAuMwHQYDVR0OBBYEFM+nt90FYzNUnF94IkWXsVGDDaLsMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvejZlMzNRVmpNMVNjWDNnaVJaZXhVWU1Ob3V3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH8BggrBgEFBQcBBwEB/wSB7DCB6TCB1wQCAAEwgdAwCwMD AD63AwQAPrcyMAwDBAI+tzQDBAI+t0gwDAMEAz63WAMEAj63YDALAwMAU+8DBART 72ADBANT78gwDAMEBVPv4AMEA1Pv8DALAwMCVawDBAJVrEgDBABVrE8wDAMEAVWs UgMEA1WsUDAMAwQFVaxgAwQBVaxsAwQDVaygAwQCVa0EAwQEVa2QMAwDBAdVroAD BABVroYDBABVrogDBABVro8DBAFVrr4wCwMEBVWu4AMDBFWgAwQDXumQAwQEXumg AwQAbaxIAwQHsiIAMA0EAgACMAcDBQAqAoBAMA0GCSqGSIb3DQEBCwUAA4IBAQAe 0olPU8VHoAXOJ4hNhV3euIXHCX95hCACm3Jdz4xcW4LTKf4keDv0uY8aRZbbMp5X aNK9uP7S46uE/W8CZhs6VocK9kb3NOSVKvcnbHKeKi1P+SCnDFggBdRtMykK0xMN 0wl7xvMUlKEMq3wunRpjbzoWqJ/aLQSHR8itDU8hysYYnf3lOdg0kS0IOCzrwVIr XPWRsn6cYXjjz9A9kiQZKlw68XJUUMHtCau9iRpuOycRyx/n3fnF8ChgVia1eXRj Dw2ok2mDay7YgQOyPDIXF/QnVo/S8W2vZbgn3oZy2kSusMrfEnxyXP2lRn0nlyj0 XKtQpL80BuW5vbN15wcC -----END CERTIFICATE-----Generated at Mon Jan 26 01:41:27 2026 by rpki-client