This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/cMI6xFuuN3kOOUkjFl-dw7vQpxk.roa File: cMI6xFuuN3kOOUkjFl-dw7vQpxk.roa (raw, json) Hash identifier: QMhkNofXWtqJpzrnd1DVBgskNLYUlXU/ZSYppiY4PcI= Subject key identifier: 70:C2:3A:C4:5B:AE:37:79:0E:39:49:23:16:5F:9D:C3:BB:D0:A7:19 Certificate issuer: /CN=fdd2b36206439bbce15b363f09eeff1d738cecc7 Certificate serial: 019B7A5B8F2070E36D2B451CA114DCF9545C Authority key identifier: FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/cMI6xFuuN3kOOUkjFl-dw7vQpxk.roa Signing time: Thu 01 Jan 2026 16:19:39 +0000 ROA not before: Thu 01 Jan 2026 16:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16010 IP address blocks: 5.178.128.0/17 maxlen: 24 5.178.128.0/18 maxlen: 18 5.178.192.0/18 maxlen: 18 46.49.0.0/17 maxlen: 24 46.49.0.0/18 maxlen: 18 46.49.64.0/18 maxlen: 18 62.168.160.0/19 maxlen: 24 77.74.40.0/21 maxlen: 21 80.241.240.0/22 maxlen: 22 80.241.248.0/22 maxlen: 22 80.241.253.0/24 maxlen: 24 80.241.254.0/23 maxlen: 23 82.211.128.0/18 maxlen: 19 82.211.128.0/19 maxlen: 19 82.211.160.0/19 maxlen: 19 85.114.224.0/19 maxlen: 24 89.232.32.0/19 maxlen: 24 93.177.128.0/18 maxlen: 24 93.177.128.0/19 maxlen: 19 93.177.160.0/19 maxlen: 19 94.137.160.0/19 maxlen: 24 94.240.192.0/18 maxlen: 24 94.240.192.0/19 maxlen: 19 94.240.224.0/19 maxlen: 19 95.104.0.0/17 maxlen: 24 95.104.0.0/18 maxlen: 18 95.104.64.0/18 maxlen: 18 109.172.128.0/17 maxlen: 24 134.19.224.0/19 maxlen: 24 185.115.4.0/22 maxlen: 22 185.115.4.0/24 maxlen: 24 188.121.192.0/19 maxlen: 24 188.129.128.0/17 maxlen: 24 188.129.192.0/19 maxlen: 19 212.58.96.0/19 maxlen: 24 212.72.128.0/23 maxlen: 24 212.72.131.0/24 maxlen: 24 212.72.132.0/22 maxlen: 24 212.72.136.0/21 maxlen: 24 212.72.144.0/21 maxlen: 21 212.72.152.0/23 maxlen: 23 212.72.154.0/24 maxlen: 24 212.72.156.0/22 maxlen: 22 213.157.192.0/19 maxlen: 24 213.200.0.0/19 maxlen: 24 2a0b:6200::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:8f:20:70:e3:6d:2b:45:1c:a1:14:dc:f9:54:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd2b36206439bbce15b363f09eeff1d738cecc7 Validity Not Before: Jan 1 16:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70c23ac45bae37790e394923165f9dc3bbd0a719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6c:7f:78:70:8d:d1:5d:d4:52:ed:81:14:4c: 38:36:62:78:ac:2e:f1:38:a6:83:38:4a:50:5f:55: fb:b5:97:29:8d:74:a4:fb:b9:c0:5e:d6:0e:d6:91: 8b:53:b0:92:19:22:b2:b9:08:c5:12:a2:02:fe:67: c0:c0:0d:c2:54:a0:52:8b:3f:bc:04:f8:df:0a:e6: ad:b9:96:98:6e:6c:83:41:ff:31:83:f2:fb:ba:f6: 0f:eb:40:e2:4c:09:2a:ed:4f:9c:bd:f3:d7:dd:0e: 56:18:e1:d9:1c:e7:17:e0:c3:4b:74:dc:06:cb:9e: 8b:4f:ad:73:16:e0:7d:de:fa:ab:d4:c6:a3:89:bc: ff:c0:25:ab:22:13:31:09:23:d4:ee:1b:b0:05:fb: 7d:60:7d:c5:61:11:83:3c:3d:35:9a:aa:6c:f6:0e: 51:1d:10:1e:c4:6c:c6:ba:5c:97:15:a2:1a:51:b9: 13:e0:ec:2b:db:76:36:92:a4:38:ce:ee:5c:b9:e9: 80:ac:b8:df:03:66:96:09:dd:b4:e2:9e:3e:21:36: 30:cb:11:65:fa:aa:41:ac:75:e8:26:63:a9:9f:8c: fd:18:3e:d8:65:ea:80:7a:3a:52:7e:19:4c:df:8a: 87:5d:8a:de:50:c6:4a:0b:8e:c1:05:33:0c:60:6f: f3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C2:3A:C4:5B:AE:37:79:0E:39:49:23:16:5F:9D:C3:BB:D0:A7:19 X509v3 Authority Key Identifier: keyid:FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/cMI6xFuuN3kOOUkjFl-dw7vQpxk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.178.128.0/17 46.49.0.0/17 62.168.160.0/19 77.74.40.0/21 80.241.240.0/22 80.241.248.0/22 80.241.253.0-80.241.255.255 82.211.128.0/18 85.114.224.0/19 89.232.32.0/19 93.177.128.0/18 94.137.160.0/19 94.240.192.0/18 95.104.0.0/17 109.172.128.0/17 134.19.224.0/19 185.115.4.0/22 188.121.192.0/19 188.129.128.0/17 212.58.96.0/19 212.72.128.0/23 212.72.131.0-212.72.154.255 212.72.156.0/22 213.157.192.0/19 213.200.0.0/19 IPv6: 2a0b:6200::/29 Signature Algorithm: sha256WithRSAEncryption 73:99:16:c9:9e:61:e6:b5:cd:7a:c8:5d:2e:81:ab:b0:b7:d5: d9:54:b1:f0:3d:a8:62:72:7f:6b:1d:d7:e9:99:ab:2a:3f:bd: d0:f3:68:e3:1c:c2:62:b4:fb:66:77:6d:4d:b4:7e:b3:81:d4: 4f:1b:8e:f0:5e:93:4c:24:e4:2b:48:6e:cf:49:9e:61:39:69: 63:17:5a:b7:b3:35:1b:5b:a1:cf:d1:5a:05:53:00:e0:eb:53: 87:20:d7:0f:28:92:6a:63:8f:ba:6c:5e:a7:e1:2c:6a:00:1e: 96:97:91:58:7b:a7:ca:d6:04:48:0d:eb:6f:89:a0:01:38:71: 34:20:94:89:9d:58:95:6e:6e:8c:c6:5d:33:51:ae:9b:b7:b5: b1:eb:33:56:fb:bd:72:63:e4:46:4d:e6:ea:80:e8:a5:a2:1a: 13:4f:23:09:c7:38:06:35:69:1d:03:89:1f:e5:0d:bd:c5:38: 4c:61:dc:e2:ac:4a:af:c2:51:6a:0c:59:bf:ea:85:00:80:2d: 69:83:34:48:8e:8e:7e:dd:6e:d3:41:ab:10:cf:96:22:df:94: 46:0c:fc:31:ca:f8:66:f2:8c:bf:c6:11:43:1d:71:2d:34:34: f4:aa:ff:b3:69:91:fd:77:cd:ab:d4:85:e1:23:52:47:cc:6e: df:26:11:37 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt6W48gcONtK0UcoRTc+VRcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDJiMzYyMDY0MzliYmNlMTViMzYzZjA5ZWVmZjFkNzM4 Y2VjYzcwHhcNMjYwMTAxMTYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGMyM2FjNDViYWUzNzc5MGUzOTQ5MjMxNjVmOWRjM2JiZDBhNzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2x/eHCN0V3UUu2BFEw4NmJ4rC7x OKaDOEpQX1X7tZcpjXSk+7nAXtYO1pGLU7CSGSKyuQjFEqIC/mfAwA3CVKBSiz+8 BPjfCuatuZaYbmyDQf8xg/L7uvYP60DiTAkq7U+cvfPX3Q5WGOHZHOcX4MNLdNwG y56LT61zFuB93vqr1Majibz/wCWrIhMxCSPU7huwBft9YH3FYRGDPD01mqps9g5R HRAexGzGulyXFaIaUbkT4Owr23Y2kqQ4zu5cuemArLjfA2aWCd204p4+ITYwyxFl +qpBrHXoJmOpn4z9GD7YZeqAejpSfhlM34qHXYreUMZKC47BBTMMYG/zlQIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFHDCOsRbrjd5DjlJIxZfncO70KcZMB8GA1UdIwQY MBaAFP3Ss2IGQ5u84Vs2Pwnu/x1zjOzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RLellnWkRtN3poV3pZX0NlN19IWE9NN01jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS82MmI5MDktMWUzZS00YTFiLTllMjQt YjAxZTAyOTdiMDcwLzEvY01JNnhGdXVOM2tPT1VrakZsLWR3N3ZRcHhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS82MmI5MDktMWUzZS00YTFiLTllMjQtYjAxZTAyOTdiMDcw LzEvX2RLellnWkRtN3poV3pZX0NlN19IWE9NN01jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHRBggrBgEFBQcBBwEB/wSBwTCBvjCBrAQCAAEwgaUDBAcF soADBAcuMQADBAU+qKADBANNSigDBAJQ8fADBAJQ8fgwCwMEAFDx/QMDAVDwAwQG UtOAAwQFVXLgAwQFWeggAwQGXbGAAwQFXomgAwQGXvDAAwQHX2gAAwQHbayAAwQF hhPgAwQCuXMEAwQFvHnAAwQHvIGAAwQF1DpgAwQB1EiAMAwDBADUSIMDBADUSJoD BALUSJwDBAXVncADBAXVyAAwDQQCAAIwBwMFAyoLYgAwDQYJKoZIhvcNAQELBQAD ggEBAHOZFsmeYea1zXrIXS6Bq7C31dlUsfA9qGJyf2sd1+mZqyo/vdDzaOMcwmK0 +2Z3bU20frOB1E8bjvBek0wk5CtIbs9JnmE5aWMXWrezNRtboc/RWgVTAODrU4cg 1w8okmpjj7psXqfhLGoAHpaXkVh7p8rWBEgN62+JoAE4cTQglImdWJVubozGXTNR rpu3tbHrM1b7vXJj5EZN5uqA6KWiGhNPIwnHOAY1aR0DiR/lDb3FOExh3OKsSq/C UWoMWb/qhQCALWmDNEiOjn7dbtNBqxDPliLflEYM/DHK+GbyjL/GEUMdcS00NPSq /7Npkf13zavUheEjUkfMbt8mETc= -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:09 2026 by rpki-client