This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/QQ6BZL9pdLWdMCsND6z5GbDh-Yk.roa File: QQ6BZL9pdLWdMCsND6z5GbDh-Yk.roa (raw, json) Hash identifier: qsYqn+mGbAc4f6KFKdVSBVAMVsZbB4AOWJMik+LOkF4= Subject key identifier: 41:0E:81:64:BF:69:74:B5:9D:30:2B:0D:0F:AC:F9:19:B0:E1:F9:89 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B0651521BFFE07E818C0E9BDA6221 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/QQ6BZL9pdLWdMCsND6z5GbDh-Yk.roa Signing time: Fri 02 Jan 2026 06:17:56 +0000 ROA not before: Fri 02 Jan 2026 06:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31083 IP address blocks: 5.104.175.0/24 maxlen: 24 77.76.0.0/24 maxlen: 24 77.76.14.0/24 maxlen: 24 78.128.1.0/24 maxlen: 24 78.128.6.0/24 maxlen: 24 78.128.7.0/24 maxlen: 24 78.128.8.0/24 maxlen: 24 78.128.9.0/24 maxlen: 24 78.128.42.0/24 maxlen: 24 78.128.43.0/24 maxlen: 24 78.128.60.0/24 maxlen: 24 78.128.62.0/24 maxlen: 24 78.128.76.0/24 maxlen: 24 78.128.77.0/24 maxlen: 24 78.128.78.0/24 maxlen: 24 78.128.80.0/24 maxlen: 24 78.128.81.0/24 maxlen: 24 78.128.118.0/24 maxlen: 24 78.128.126.0/24 maxlen: 24 78.142.6.0/24 maxlen: 24 78.142.32.0/24 maxlen: 24 78.142.47.0/24 maxlen: 24 78.142.51.0/24 maxlen: 24 78.142.56.0/24 maxlen: 24 78.142.57.0/24 maxlen: 24 78.142.58.0/24 maxlen: 24 78.142.59.0/24 maxlen: 24 78.142.62.0/24 maxlen: 24 78.142.63.0/24 maxlen: 24 79.124.4.0/24 maxlen: 24 79.124.5.0/24 maxlen: 24 79.124.6.0/24 maxlen: 24 79.124.13.0/24 maxlen: 24 79.124.14.0/24 maxlen: 24 79.124.16.0/24 maxlen: 24 79.124.17.0/24 maxlen: 24 79.124.22.0/24 maxlen: 24 79.124.31.0/24 maxlen: 24 79.124.44.0/24 maxlen: 24 79.124.52.0/24 maxlen: 24 79.124.55.0/24 maxlen: 24 79.124.63.0/24 maxlen: 24 79.124.64.0/24 maxlen: 24 79.124.65.0/24 maxlen: 24 79.124.66.0/24 maxlen: 24 79.124.67.0/24 maxlen: 24 79.124.75.0/24 maxlen: 24 79.124.76.0/24 maxlen: 24 79.124.84.0/24 maxlen: 24 79.124.90.0/24 maxlen: 24 82.118.229.0/24 maxlen: 24 82.118.243.0/24 maxlen: 24 83.222.185.0/24 maxlen: 24 91.148.148.0/24 maxlen: 24 91.148.168.0/24 maxlen: 24 94.72.136.0/22 maxlen: 24 130.185.225.0/24 maxlen: 24 130.185.232.0/24 maxlen: 24 178.132.86.0/24 maxlen: 24 178.132.87.0/24 maxlen: 24 185.197.152.0/22 maxlen: 24 185.232.156.0/23 maxlen: 24 217.174.146.0/23 maxlen: 24 217.174.148.0/23 maxlen: 24 217.174.151.0/24 maxlen: 24 217.174.152.0/23 maxlen: 24 217.174.155.0/24 maxlen: 24 217.174.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:06:51:52:1b:ff:e0:7e:81:8c:0e:9b:da:62:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=410e8164bf6974b59d302b0d0facf919b0e1f989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:97:47:7c:41:99:59:6e:dc:74:9c:5b:9f:eb: 08:2f:5c:82:8a:4f:fd:7c:9e:62:af:7c:9d:98:ca: b9:f2:a8:3e:9e:cb:0a:76:6d:30:3b:ce:8d:13:03: 7f:44:02:33:d9:5d:8f:2e:de:bc:14:4c:26:2e:2e: 43:90:96:ad:8d:9d:e5:cc:50:f2:13:15:34:00:ca: 50:ea:cd:20:0c:11:a9:22:4a:1b:a8:2c:b5:54:ad: 0a:84:22:60:09:60:66:15:2f:ba:d6:b1:18:1d:c7: ca:13:a2:29:d6:ad:29:b9:9b:4b:e9:72:00:32:6e: b8:71:a7:cd:ae:6a:f4:c3:f8:93:b2:6d:c5:fd:7e: bf:56:17:7f:c3:0a:86:75:ca:ed:cf:43:ec:09:16: fa:56:e0:77:71:51:f9:8a:59:46:c9:05:ce:b8:1e: 02:6a:c5:a0:a7:7d:6a:45:30:96:60:f5:5b:02:71: e1:d3:38:f0:7f:6c:c2:98:8e:31:41:2f:42:90:88: 99:f0:e1:18:ce:e6:25:29:f0:17:49:14:08:6f:92: fd:a5:1e:7c:a4:da:39:e9:10:e9:15:ad:c9:35:15: 29:4f:c2:e6:40:2f:bf:ad:fc:86:c4:63:c3:3f:0e: 7c:1f:08:94:e8:d3:42:a1:ca:69:5d:6d:f3:67:8f: 4f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0E:81:64:BF:69:74:B5:9D:30:2B:0D:0F:AC:F9:19:B0:E1:F9:89 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/QQ6BZL9pdLWdMCsND6z5GbDh-Yk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.175.0/24 77.76.0.0/24 77.76.14.0/24 78.128.1.0/24 78.128.6.0-78.128.9.255 78.128.42.0/23 78.128.60.0/24 78.128.62.0/24 78.128.76.0-78.128.78.255 78.128.80.0/23 78.128.118.0/24 78.128.126.0/24 78.142.6.0/24 78.142.32.0/24 78.142.47.0/24 78.142.51.0/24 78.142.56.0/22 78.142.62.0/23 79.124.4.0-79.124.6.255 79.124.13.0-79.124.14.255 79.124.16.0/23 79.124.22.0/24 79.124.31.0/24 79.124.44.0/24 79.124.52.0/24 79.124.55.0/24 79.124.63.0-79.124.67.255 79.124.75.0-79.124.76.255 79.124.84.0/24 79.124.90.0/24 82.118.229.0/24 82.118.243.0/24 83.222.185.0/24 91.148.148.0/24 91.148.168.0/24 94.72.136.0/22 130.185.225.0/24 130.185.232.0/24 178.132.86.0/23 185.197.152.0/22 185.232.156.0/23 217.174.146.0-217.174.149.255 217.174.151.0-217.174.153.255 217.174.155.0-217.174.156.255 Signature Algorithm: sha256WithRSAEncryption bf:73:a6:ae:e9:ea:4b:fb:15:3f:97:df:ce:a2:e9:52:42:6a: 4e:67:f4:3c:bb:0a:f1:08:9c:27:6e:17:f7:66:cf:03:3d:42: 27:71:58:d8:9a:05:ec:58:7b:e8:0b:b3:4b:97:be:0c:21:2e: 0f:a1:7d:5a:71:71:e1:b4:34:eb:95:d3:38:23:dc:88:c0:ff: ad:39:7e:f1:64:8f:75:4b:55:c5:42:cb:d0:b6:d2:72:9b:56: 26:17:6c:b2:9e:22:65:5e:a4:2a:ae:a8:8d:60:ab:5d:4b:e4: b1:d6:b7:a6:80:e8:29:0d:ef:13:a7:b4:ab:cc:f1:3f:6c:7e: 49:59:5c:5f:90:1c:cd:74:41:2d:ab:59:a4:ab:9d:6f:f2:69: 26:ff:68:42:95:25:8f:57:29:1b:fa:3f:a5:7e:31:2b:76:0c: e8:17:df:14:42:49:44:b0:6a:93:83:b6:f9:cc:2a:16:ac:0f: f1:4b:a6:e9:3c:e2:58:ef:1a:11:30:c2:1d:14:d1:12:94:66: d9:75:c1:35:d4:ce:37:d4:e8:18:30:f4:b1:38:bc:28:25:38: f6:47:29:30:b7:86:45:03:cb:c7:3f:71:a4:eb:23:df:4b:54: 20:16:b7:b1:15:84:29:fc:10:e5:9a:9a:e8:6c:d1:b6:fa:13: f5:b2:57:8c -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgISAZt9WwZRUhv/4H6BjA6b2mIhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTBlODE2NGJmNjk3NGI1OWQzMDJiMGQwZmFjZjkxOWIwZTFmOTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpdHfEGZWW7cdJxbn+sIL1yCik/9 fJ5ir3ydmMq58qg+nssKdm0wO86NEwN/RAIz2V2PLt68FEwmLi5DkJatjZ3lzFDy ExU0AMpQ6s0gDBGpIkobqCy1VK0KhCJgCWBmFS+61rEYHcfKE6Ip1q0puZtL6XIA Mm64cafNrmr0w/iTsm3F/X6/Vhd/wwqGdcrtz0PsCRb6VuB3cVH5illGyQXOuB4C asWgp31qRTCWYPVbAnHh0zjwf2zCmI4xQS9CkIiZ8OEYzuYlKfAXSRQIb5L9pR58 pNo56RDpFa3JNRUpT8LmQC+/rfyGxGPDPw58HwiU6NNCocppXW3zZ49PtQIDAQAB o4IDXTCCA1kwHQYDVR0OBBYEFEEOgWS/aXS1nTArDQ+s+Rmw4fmJMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvUVE2QlpMOXBkTFdkTUNzTkQ2ejVHYkRoLVlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBcQYIKwYBBQUHAQcBAf8EggFgMIIBXDCCAVgEAgABMIIB UAMEAAVorwMEAE1MAAMEAE1MDgMEAE6AATAMAwQBToAGAwQBToAIAwQBToAqAwQA ToA8AwQAToA+MAwDBAJOgEwDBABOgE4DBAFOgFADBABOgHYDBABOgH4DBABOjgYD BABOjiADBABOji8DBABOjjMDBAJOjjgDBAFOjj4wDAMEAk98BAMEAE98BjAMAwQA T3wNAwQAT3wOAwQBT3wQAwQAT3wWAwQAT3wfAwQAT3wsAwQAT3w0AwQAT3w3MAwD BABPfD8DBAJPfEAwDAMEAE98SwMEAE98TAMEAE98VAMEAE98WgMEAFJ25QMEAFJ2 8wMEAFPeuQMEAFuUlAMEAFuUqAMEAl5IiAMEAIK54QMEAIK56AMEAbKEVgMEArnF mAMEAbnonDAMAwQB2a6SAwQB2a6UMAwDBADZrpcDBAHZrpgwDAMEANmumwMEANmu nDANBgkqhkiG9w0BAQsFAAOCAQEAv3OmrunqS/sVP5ffzqLpUkJqTmf0PLsK8Qic J24X92bPAz1CJ3FY2JoF7Fh76AuzS5e+DCEuD6F9WnFx4bQ065XTOCPciMD/rTl+ 8WSPdUtVxULL0LbScptWJhdssp4iZV6kKq6ojWCrXUvksda3poDoKQ3vE6e0q8zx P2x+SVlcX5AczXRBLatZpKudb/JpJv9oQpUlj1cpG/o/pX4xK3YM6BffFEJJRLBq k4O2+cwqFqwP8Uum6TziWO8aETDCHRTREpRm2XXBNdTON9ToGDD0sTi8KCU49kcp MLeGRQPLxz9xpOsj30tUIBa3sRWEKfwQ5Zqa6GzRtvoT9bJXjA== -----END CERTIFICATE-----Generated at Fri Jan 23 18:49:11 2026 by rpki-client