This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_KAxQ1rk5-epsUKQPOX6h1xmnL4.roa File: _KAxQ1rk5-epsUKQPOX6h1xmnL4.roa (raw, json) Hash identifier: faMAB4Opu8c6lkGwn0S2k4SgG1sJ4JosYWrUES9SwIU= Subject key identifier: FC:A0:31:43:5A:E4:E7:E7:A9:B1:42:90:3C:E5:FA:87:5C:66:9C:BE Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B9214405DE79BE89778C299054CB3937A Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_KAxQ1rk5-epsUKQPOX6h1xmnL4.roa Signing time: Tue 06 Jan 2026 06:52:39 +0000 ROA not before: Tue 06 Jan 2026 06:52:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 46.33.64.0/19 maxlen: 24 62.41.0.0/20 maxlen: 24 62.41.16.0/21 maxlen: 24 62.41.24.0/22 maxlen: 24 62.41.32.0/24 maxlen: 24 62.41.37.0/24 maxlen: 24 62.41.56.0/21 maxlen: 24 62.41.64.0/20 maxlen: 24 62.41.80.0/22 maxlen: 24 62.41.84.0/23 maxlen: 24 62.41.102.0/24 maxlen: 24 62.41.160.0/24 maxlen: 24 62.50.128.0/19 maxlen: 19 62.132.0.0/22 maxlen: 22 62.132.16.0/22 maxlen: 22 62.132.24.0/23 maxlen: 23 62.132.28.0/24 maxlen: 24 62.132.42.0/23 maxlen: 23 62.132.114.0/23 maxlen: 23 62.132.116.0/23 maxlen: 23 62.132.132.0/23 maxlen: 23 77.67.0.0/17 maxlen: 24 77.77.128.0/18 maxlen: 24 87.119.64.0/18 maxlen: 24 89.149.128.0/18 maxlen: 24 92.71.0.0/17 maxlen: 17 92.71.128.0/18 maxlen: 18 134.222.0.0/16 maxlen: 16 135.196.48.0/21 maxlen: 24 135.196.228.0/23 maxlen: 24 135.196.232.0/23 maxlen: 24 135.196.238.0/23 maxlen: 24 141.136.96.0/20 maxlen: 20 185.160.40.0/22 maxlen: 22 192.16.202.0/24 maxlen: 24 192.54.104.0/24 maxlen: 24 192.67.190.0/23 maxlen: 23 192.67.192.0/22 maxlen: 22 192.67.196.0/24 maxlen: 24 192.129.32.0/23 maxlen: 23 192.129.36.0/24 maxlen: 24 192.129.43.0/24 maxlen: 24 192.129.44.0/24 maxlen: 24 192.129.46.0/23 maxlen: 23 192.129.48.0/23 maxlen: 23 192.129.54.0/24 maxlen: 24 192.129.56.0/23 maxlen: 24 193.141.0.0/23 maxlen: 23 193.141.2.0/24 maxlen: 24 193.141.40.0/22 maxlen: 22 193.141.44.0/23 maxlen: 23 193.141.140.0/23 maxlen: 23 193.242.80.0/20 maxlen: 20 194.41.62.0/24 maxlen: 24 194.45.4.0/23 maxlen: 23 194.45.12.0/23 maxlen: 23 194.45.47.0/24 maxlen: 24 194.45.98.0/23 maxlen: 23 194.45.182.0/23 maxlen: 23 194.120.0.0/24 maxlen: 24 194.120.43.0/24 maxlen: 24 194.120.112.0/22 maxlen: 22 194.120.120.0/22 maxlen: 22 194.121.52.0/22 maxlen: 22 194.121.104.0/23 maxlen: 23 194.121.123.0/24 maxlen: 24 194.121.203.0/24 maxlen: 24 194.121.220.0/22 maxlen: 22 194.122.76.0/22 maxlen: 22 194.122.80.0/21 maxlen: 21 194.122.120.0/21 maxlen: 21 194.122.224.0/20 maxlen: 20 194.122.248.0/22 maxlen: 22 194.123.122.0/24 maxlen: 24 194.123.164.0/24 maxlen: 24 195.86.28.0/22 maxlen: 24 195.86.32.0/22 maxlen: 24 195.86.44.0/22 maxlen: 24 195.86.52.0/22 maxlen: 24 195.86.164.0/22 maxlen: 24 195.86.176.0/20 maxlen: 24 195.86.224.0/21 maxlen: 24 195.86.236.0/23 maxlen: 24 195.143.0.0/16 maxlen: 24 212.0.224.0/19 maxlen: 19 212.1.0.0/19 maxlen: 19 212.14.64.0/19 maxlen: 19 212.27.160.0/19 maxlen: 19 212.56.0.0/19 maxlen: 19 212.81.64.0/18 maxlen: 18 212.115.128.0/18 maxlen: 24 212.189.0.0/17 maxlen: 17 212.221.0.0/17 maxlen: 24 212.222.0.0/16 maxlen: 24 213.200.64.0/18 maxlen: 18 213.251.0.0/18 maxlen: 24 213.254.192.0/18 maxlen: 24 217.114.112.0/20 maxlen: 20 217.117.160.0/20 maxlen: 20 217.118.112.0/20 maxlen: 20 217.195.224.0/19 maxlen: 19 2001:668::/29 maxlen: 64 2001:680::/32 maxlen: 32 2001:680:12::/48 maxlen: 48 2001:680:16::/48 maxlen: 48 2001:680:19::/48 maxlen: 48 2001:680:20::/48 maxlen: 48 2a00:1750::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 18:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:92:14:40:5d:e7:9b:e8:97:78:c2:99:05:4c:b3:93:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 6 06:52:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fca031435ae4e7e7a9b142903ce5fa875c669cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:86:f8:67:1e:63:17:76:06:1f:66:9b:c3:b0: 81:d7:66:f7:d7:da:83:86:c4:7d:db:85:6d:ec:4e: 31:52:3e:18:9f:19:d4:7a:7d:46:7e:d2:de:76:ae: 66:8a:89:13:f3:6a:8c:24:77:d9:3e:31:52:da:f0: b9:cb:c1:64:97:ab:ec:62:f9:a3:f9:c4:45:63:64: a0:44:a0:e3:3a:f2:f2:ea:4e:ed:ae:7b:51:5f:df: 2a:61:88:64:e1:df:c1:67:13:c3:48:4b:7c:44:f8: 76:20:11:85:df:06:da:6d:16:06:ef:91:86:ce:f0: 96:a9:61:66:b6:46:8e:d6:ea:1d:54:ee:ce:07:71: 42:05:35:c2:cd:1a:16:2e:cf:18:1b:35:fd:79:35: 67:1d:3d:e5:43:38:96:81:11:c5:16:68:b7:30:6d: d2:9d:8b:b7:37:ab:9d:d5:07:82:19:c3:a5:b9:eb: dd:33:dc:28:08:6c:7d:7c:3c:7c:9b:ad:fa:62:37: cb:3f:af:5b:49:72:b3:94:38:e1:47:48:64:93:e0: ec:28:32:7c:49:cd:cb:5b:dd:be:3d:78:44:1c:98: c4:05:ef:53:c7:bb:8a:c8:18:fe:11:a4:2e:7a:ba: ec:5f:aa:4f:f8:6d:5c:93:be:92:94:f4:c0:9a:df: d6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A0:31:43:5A:E4:E7:E7:A9:B1:42:90:3C:E5:FA:87:5C:66:9C:BE X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_KAxQ1rk5-epsUKQPOX6h1xmnL4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.33.64.0/19 62.41.0.0-62.41.27.255 62.41.32.0/24 62.41.37.0/24 62.41.56.0-62.41.85.255 62.41.102.0/24 62.41.160.0/24 62.50.128.0/19 62.132.0.0/22 62.132.16.0/22 62.132.24.0/23 62.132.28.0/24 62.132.42.0/23 62.132.114.0-62.132.117.255 62.132.132.0/23 77.67.0.0/17 77.77.128.0/18 87.119.64.0/18 89.149.128.0/18 92.71.0.0-92.71.191.255 134.222.0.0/16 135.196.48.0/21 135.196.228.0/23 135.196.232.0/23 135.196.238.0/23 141.136.96.0/20 185.160.40.0/22 192.16.202.0/24 192.54.104.0/24 192.67.190.0-192.67.196.255 192.129.32.0/23 192.129.36.0/24 192.129.43.0-192.129.44.255 192.129.46.0-192.129.49.255 192.129.54.0/24 192.129.56.0/23 193.141.0.0-193.141.2.255 193.141.40.0-193.141.45.255 193.141.140.0/23 193.242.80.0/20 194.41.62.0/24 194.45.4.0/23 194.45.12.0/23 194.45.47.0/24 194.45.98.0/23 194.45.182.0/23 194.120.0.0/24 194.120.43.0/24 194.120.112.0/22 194.120.120.0/22 194.121.52.0/22 194.121.104.0/23 194.121.123.0/24 194.121.203.0/24 194.121.220.0/22 194.122.76.0-194.122.87.255 194.122.120.0/21 194.122.224.0/20 194.122.248.0/22 194.123.122.0/24 194.123.164.0/24 195.86.28.0-195.86.35.255 195.86.44.0/22 195.86.52.0/22 195.86.164.0/22 195.86.176.0/20 195.86.224.0/21 195.86.236.0/23 195.143.0.0/16 212.0.224.0-212.1.31.255 212.14.64.0/19 212.27.160.0/19 212.56.0.0/19 212.81.64.0/18 212.115.128.0/18 212.189.0.0/17 212.221.0.0/17 212.222.0.0/16 213.200.64.0/18 213.251.0.0/18 213.254.192.0/18 217.114.112.0/20 217.117.160.0/20 217.118.112.0/20 217.195.224.0/19 IPv6: 2001:668::/29 2001:680::/32 2a00:1750::/32 Signature Algorithm: sha256WithRSAEncryption 86:5d:a2:21:bc:c6:e9:7a:de:34:93:5a:56:99:98:ff:85:2e: 07:6c:46:42:36:35:59:eb:d6:8b:97:b1:10:6b:38:a8:0b:4d: d5:57:d8:04:00:f9:2c:52:43:39:5d:ff:b7:01:f0:86:2f:93: ed:7b:03:54:f3:5b:48:c4:23:7d:cd:24:e6:a8:6a:f8:47:52: 2d:4f:78:19:2a:43:38:f1:5d:80:a8:03:be:52:7d:62:69:a4: ea:33:a1:a2:ec:7f:62:49:f8:17:ad:7a:8a:19:91:43:5d:7c: 1c:50:8e:d8:72:6a:f1:89:1b:aa:c9:e6:93:c4:96:ac:de:76: ec:87:8a:27:e1:73:26:ef:3f:aa:de:ae:39:db:fe:4d:56:e3: 4e:89:91:c5:dd:cf:c7:4c:55:c2:73:97:b0:67:dd:1a:ca:aa: cb:28:f7:84:b7:f1:98:e2:a7:6c:57:2d:c4:d3:e4:fd:b7:77: b1:9c:5b:9a:18:75:3e:40:49:fd:99:41:12:95:81:e3:c2:87: dd:44:16:01:a6:af:9f:8b:7d:1c:f7:86:0d:ff:3d:c9:b7:a3: 4c:00:6d:f6:70:e2:71:cc:6a:e1:45:0e:c0:17:2a:0b:1e:bd: 16:eb:90:e3:1d:72:82:97:75:b6:59:99:30:aa:4f:20:fe:1d: 24:a4:1c:94 -----BEGIN CERTIFICATE----- MIIHdjCCBl6gAwIBAgISAZuSFEBd55vol3jCmQVMs5N6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTA2MDY1MjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2EwMzE0MzVhZTRlN2U3YTliMTQyOTAzY2U1ZmE4NzVjNjY5Y2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIb4Zx5jF3YGH2abw7CB12b319qD hsR924Vt7E4xUj4YnxnUen1GftLedq5miokT82qMJHfZPjFS2vC5y8Fkl6vsYvmj +cRFY2SgRKDjOvLy6k7trntRX98qYYhk4d/BZxPDSEt8RPh2IBGF3wbabRYG75GG zvCWqWFmtkaO1uodVO7OB3FCBTXCzRoWLs8YGzX9eTVnHT3lQziWgRHFFmi3MG3S nYu3N6ud1QeCGcOluevdM9woCGx9fDx8m636YjfLP69bSXKzlDjhR0hkk+DsKDJ8 Sc3LW92+PXhEHJjEBe9Tx7uKyBj+EaQuerrsX6pP+G1ck76SlPTAmt/W0wIDAQAB o4IEgjCCBH4wHQYDVR0OBBYEFPygMUNa5OfnqbFCkDzl+odcZpy+MB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvX0tBeFExcms1LWVwc1VLUVBPWDZoMXhtbkw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIClgYIKwYBBQUHAQcBAf8EggKFMIICgTCCAmAEAgABMIIC WAMEBS4hQDALAwMAPikDBAI+KRgDBAA+KSADBAA+KSUwDAMEAz4pOAMEAT4pVAME AD4pZgMEAD4poAMEBT4ygAMEAj6EAAMEAj6EEAMEAT6EGAMEAD6EHAMEAT6EKjAM AwQBPoRyAwQBPoR0AwQBPoSEAwQHTUMAAwQGTU2AAwQGV3dAAwQGWZWAMAsDAwBc RwMEBlxHgAMDAIbeAwQDh8QwAwQBh8TkAwQBh8ToAwQBh8TuAwQEjYhgAwQCuaAo AwQAwBDKAwQAwDZoMAwDBAHAQ74DBADAQ8QDBAHAgSADBADAgSQwDAMEAMCBKwME AMCBLDAMAwQBwIEuAwQBwIEwAwQAwIE2AwQBwIE4MAsDAwDBjQMEAMGNAjAMAwQD wY0oAwQBwY0sAwQBwY2MAwQEwfJQAwQAwik+AwQBwi0EAwQBwi0MAwQAwi0vAwQB wi1iAwQBwi22AwQAwngAAwQAwngrAwQCwnhwAwQCwnh4AwQCwnk0AwQBwnloAwQA wnl7AwQAwnnLAwQCwnncMAwDBALCekwDBAPCelADBAPCengDBATCeuADBALCevgD BADCe3oDBADCe6QwDAMEAsNWHAMEAsNWIAMEAsNWLAMEAsNWNAMEAsNWpAMEBMNW sAMEA8NW4AMEAcNW7AMDAMOPMAwDBAXUAOADBAXUAQADBAXUDkADBAXUG6ADBAXU OAADBAbUUUADBAbUc4ADBAfUvQADBAfU3QADAwDU3gMEBtXIQAMEBtX7AAMEBtX+ wAMEBNlycAMEBNl1oAMEBNl2cAMEBdnD4DAbBAIAAjAVAwUDIAEGaAMFACABBoAD BQAqABdQMA0GCSqGSIb3DQEBCwUAA4IBAQCGXaIhvMbpet40k1pWmZj/hS4HbEZC NjVZ69aLl7EQazioC03VV9gEAPksUkM5Xf+3AfCGL5PtewNU81tIxCN9zSTmqGr4 R1ItT3gZKkM48V2AqAO+Un1iaaTqM6Gi7H9iSfgXrXqKGZFDXXwcUI7YcmrxiRuq yeaTxJas3nbsh4on4XMm7z+q3q452/5NVuNOiZHF3c/HTFXCc5ewZ90ayqrLKPeE t/GY4qdsVy3E0+T9t3exnFuaGHU+QEn9mUESlYHjwofdRBYBpq+fi30c94YN/z3J t6NMAG32cOJxzGrhRQ7AFyoLHr0W65DjHXKCl3W2WZkwqk8g/h0kpByU -----END CERTIFICATE-----Generated at Sat Jan 17 02:51:22 2026 by rpki-client