This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/V6pUPAZx4470jwTKeTA-fYHdMtQ.roa File: V6pUPAZx4470jwTKeTA-fYHdMtQ.roa (raw, json) Hash identifier: watxb0fxseHry/o2ggIeAlAtm0W/cn0osY+tQtgfRcA= Subject key identifier: 57:AA:54:3C:06:71:E3:8E:F4:8F:04:CA:79:30:3E:7D:81:DD:32:D4 Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Certificate serial: 019B76EB9E0315303E86106A1D8A39E0E645 Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/V6pUPAZx4470jwTKeTA-fYHdMtQ.roa Signing time: Thu 01 Jan 2026 00:18:31 +0000 ROA not before: Thu 01 Jan 2026 00:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43350 IP address blocks: 5.104.136.0/21 maxlen: 24 37.143.32.0/21 maxlen: 24 37.153.168.0/22 maxlen: 22 37.156.228.0/24 maxlen: 24 46.166.128.0/19 maxlen: 24 46.166.176.0/20 maxlen: 24 77.247.176.0/21 maxlen: 21 77.247.176.0/24 maxlen: 24 85.159.232.0/21 maxlen: 24 89.38.160.0/22 maxlen: 22 92.114.100.0/22 maxlen: 22 92.114.100.0/24 maxlen: 24 109.201.128.0/19 maxlen: 19 176.126.232.0/24 maxlen: 24 176.126.233.0/24 maxlen: 24 185.7.76.0/22 maxlen: 24 185.11.144.0/24 maxlen: 24 185.107.36.0/24 maxlen: 24 185.107.37.0/24 maxlen: 24 185.107.38.0/24 maxlen: 24 185.107.44.0/22 maxlen: 24 185.107.45.0/24 maxlen: 24 185.107.56.0/22 maxlen: 22 185.107.68.0/22 maxlen: 22 185.107.80.0/22 maxlen: 22 185.107.92.0/22 maxlen: 22 185.107.100.0/22 maxlen: 24 185.107.116.0/22 maxlen: 24 188.209.55.0/24 maxlen: 24 188.209.56.0/24 maxlen: 24 188.209.57.0/24 maxlen: 24 212.92.104.0/21 maxlen: 21 212.92.112.0/21 maxlen: 21 212.92.120.0/22 maxlen: 22 212.92.124.0/23 maxlen: 23 2a00:1768::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9e:03:15:30:3e:86:10:6a:1d:8a:39:e0:e6:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46 Validity Not Before: Jan 1 00:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57aa543c0671e38ef48f04ca79303e7d81dd32d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:8e:ab:d0:38:c1:4b:83:af:62:79:fc:c7:31: 43:3d:ef:55:b9:0d:50:69:a4:26:71:a3:f3:c2:55: ca:7a:02:ca:8e:ce:81:62:0a:7e:db:77:b6:5c:85: 6a:1f:3b:3d:f9:19:e6:db:57:ba:0c:76:c2:f8:72: ee:32:a1:d1:5f:5b:3a:84:63:a9:74:26:62:65:98: 66:fe:94:75:db:fa:64:ad:a1:be:9b:1c:be:54:b1: 36:a6:6f:0f:64:57:24:1c:b9:87:85:d9:1f:5f:77: b2:cc:69:d4:25:27:e1:91:98:45:87:6b:0e:0e:e7: 7f:4d:12:e3:f6:91:0a:71:e0:9b:79:c5:fc:45:2e: af:69:cc:69:5b:39:75:73:b4:fb:f8:6b:62:27:a6: 23:81:26:fb:4a:da:93:e3:f4:c2:aa:52:4b:f8:be: 6b:26:a5:90:a2:78:72:49:b0:ae:9e:8d:44:3b:67: c0:a4:3d:40:a8:ee:95:fc:6b:6b:2f:d7:54:4b:e5: 7c:36:88:8c:66:1d:64:25:d8:51:62:53:ca:07:26: 60:ba:4f:ab:03:50:ba:bf:99:68:4f:aa:07:fc:7d: 14:e7:ab:fa:c0:bd:08:0b:a4:09:23:ac:76:b2:71: d1:a3:94:14:fd:22:fa:b3:a6:b8:f3:2e:2a:4f:9d: 4d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AA:54:3C:06:71:E3:8E:F4:8F:04:CA:79:30:3E:7D:81:DD:32:D4 X509v3 Authority Key Identifier: keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/V6pUPAZx4470jwTKeTA-fYHdMtQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.136.0/21 37.143.32.0/21 37.153.168.0/22 37.156.228.0/24 46.166.128.0/19 46.166.176.0/20 77.247.176.0/21 85.159.232.0/21 89.38.160.0/22 92.114.100.0/22 109.201.128.0/19 176.126.232.0/23 185.7.76.0/22 185.11.144.0/24 185.107.36.0-185.107.38.255 185.107.44.0/22 185.107.56.0/22 185.107.68.0/22 185.107.80.0/22 185.107.92.0/22 185.107.100.0/22 185.107.116.0/22 188.209.55.0-188.209.57.255 212.92.104.0-212.92.125.255 IPv6: 2a00:1768::/32 Signature Algorithm: sha256WithRSAEncryption d2:1f:ed:e8:c1:72:0c:86:1a:5e:ff:be:e1:84:ac:95:a7:93: 18:10:1a:b7:85:13:d2:4b:ce:9c:4f:72:5d:a9:fb:3b:b5:81: 69:c2:01:26:41:f3:04:67:82:52:69:85:ba:34:76:f9:14:98: 4a:19:70:ec:09:d4:a1:6e:79:9d:68:01:f5:29:8c:83:98:f4: f9:38:91:6b:cb:fe:42:27:50:d2:1b:37:e0:8b:fe:3c:7d:04: 57:96:7a:2f:65:a7:a2:bd:33:7c:b1:c1:66:99:99:a3:e7:bb: ed:c9:bc:68:da:b6:a8:84:3d:ad:c9:8e:a8:36:10:30:f9:f3: bd:fa:37:ab:97:1b:58:7a:9c:a2:da:14:0f:0e:f4:63:ad:b6: be:15:24:7d:cd:7c:a6:7f:8e:7b:cf:93:5b:79:4b:7d:a8:ea: c4:5d:44:ea:c3:c2:0f:3b:8c:51:d7:f8:df:d5:2a:79:82:28: 11:6c:1a:5c:91:0c:35:1a:66:fe:7c:bb:b6:49:58:70:b7:55: 1a:14:89:9c:07:1a:93:2b:27:4d:f7:e6:ca:66:89:da:40:1b: 25:66:22:59:87:1e:43:b5:e2:76:82:ec:a1:88:77:05:1f:36: 5d:5f:1e:86:0d:5f:b4:9f:c5:a6:7d:08:75:80:56:f0:a5:fb: 17:8a:15:97 -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZt2654DFTA+hhBqHYo54OZFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz ZDNmNDYwHhcNMjYwMTAxMDAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2FhNTQzYzA2NzFlMzhlZjQ4ZjA0Y2E3OTMwM2U3ZDgxZGQzMmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA846r0DjBS4OvYnn8xzFDPe9VuQ1Q aaQmcaPzwlXKegLKjs6BYgp+23e2XIVqHzs9+Rnm21e6DHbC+HLuMqHRX1s6hGOp dCZiZZhm/pR12/pkraG+mxy+VLE2pm8PZFckHLmHhdkfX3eyzGnUJSfhkZhFh2sO Dud/TRLj9pEKceCbecX8RS6vacxpWzl1c7T7+GtiJ6YjgSb7StqT4/TCqlJL+L5r JqWQonhySbCuno1EO2fApD1AqO6V/GtrL9dUS+V8NoiMZh1kJdhRYlPKByZguk+r A1C6v5loT6oH/H0U56v6wL0IC6QJI6x2snHRo5QU/SL6s6a48y4qT51NewIDAQAB o4ICvzCCArswHQYDVR0OBBYEFFeqVDwGceOO9I8EynkwPn2B3TLUMB8GA1UdIwQY MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt Njc4NWNkNDU2ODcxLzEvVjZwVVBBWng0NDcwandUS2VUQS1mWUhkTXRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHUBggrBgEFBQcBBwEB/wSBxDCBwTCBrwQCAAEwgagDBAMF aIgDBAMljyADBAIlmagDBAAlnOQDBAUupoADBAQuprADBANN97ADBANVn+gDBAJZ JqADBAJccmQDBAVtyYADBAGwfugDBAK5B0wDBAC5C5AwDAMEArlrJAMEALlrJgME ArlrLAMEArlrOAMEArlrRAMEArlrUAMEArlrXAMEArlrZAMEArlrdDAMAwQAvNE3 AwQBvNE4MAwDBAPUXGgDBAHUXHwwDQQCAAIwBwMFACoAF2gwDQYJKoZIhvcNAQEL BQADggEBANIf7ejBcgyGGl7/vuGErJWnkxgQGreFE9JLzpxPcl2p+zu1gWnCASZB 8wRnglJphbo0dvkUmEoZcOwJ1KFueZ1oAfUpjIOY9Pk4kWvL/kInUNIbN+CL/jx9 BFeWei9lp6K9M3yxwWaZmaPnu+3JvGjatqiEPa3Jjqg2EDD58736N6uXG1h6nKLa FA8O9GOttr4VJH3NfKZ/jnvPk1t5S32o6sRdROrDwg87jFHX+N/VKnmCKBFsGlyR DDUaZv58u7ZJWHC3VRoUiZwHGpMrJ0335spmidpAGyVmIlmHHkO14naC7KGIdwUf Nl1fHoYNX7SfxaZ9CHWAVvCl+xeKFZc= -----END CERTIFICATE-----Generated at Sat Jan 3 03:27:54 2026 by rpki-client