This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/wRiMz6n-wmWUoLFkxFSSP8HrU5E.roa File: wRiMz6n-wmWUoLFkxFSSP8HrU5E.roa (raw, json) Hash identifier: gQ8uNZeHK/kIii6trEwXDL6+4QDEEh4ElPmKWLgPx14= Subject key identifier: C1:18:8C:CF:A9:FE:C2:65:94:A0:B1:64:C4:54:92:3F:C1:EB:53:91 Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82 Certificate serial: 019BC11AEE4C7AE83A7B71CCFFA1630C595E Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/wRiMz6n-wmWUoLFkxFSSP8HrU5E.roa Signing time: Thu 15 Jan 2026 10:02:06 +0000 ROA not before: Thu 15 Jan 2026 10:02:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5607 IP address blocks: 2.120.0.0/13 maxlen: 13 2.216.0.0/13 maxlen: 13 5.64.0.0/13 maxlen: 13 46.64.0.0/15 maxlen: 15 51.182.0.0/15 maxlen: 15 51.182.0.0/18 maxlen: 18 51.182.64.0/18 maxlen: 18 51.182.128.0/18 maxlen: 18 51.182.192.0/18 maxlen: 18 51.183.0.0/18 maxlen: 18 51.183.64.0/18 maxlen: 18 51.183.128.0/18 maxlen: 18 51.183.192.0/18 maxlen: 18 51.186.0.0/15 maxlen: 15 51.186.0.0/18 maxlen: 18 51.186.64.0/18 maxlen: 18 51.186.128.0/18 maxlen: 18 51.186.192.0/18 maxlen: 18 51.187.0.0/18 maxlen: 18 51.187.64.0/18 maxlen: 18 51.187.128.0/18 maxlen: 18 51.187.192.0/18 maxlen: 18 51.190.0.0/15 maxlen: 15 51.198.0.0/18 maxlen: 18 51.198.72.0/21 maxlen: 21 51.198.80.0/20 maxlen: 20 51.198.96.0/19 maxlen: 19 51.198.128.0/17 maxlen: 17 51.199.0.0/17 maxlen: 17 51.199.128.0/18 maxlen: 18 51.199.192.0/19 maxlen: 19 51.199.224.0/20 maxlen: 20 51.199.240.0/21 maxlen: 21 51.199.248.0/22 maxlen: 22 78.86.0.0/16 maxlen: 16 90.192.0.0/11 maxlen: 11 93.96.0.0/17 maxlen: 17 93.96.128.0/18 maxlen: 18 93.96.224.0/19 maxlen: 19 93.96.224.0/23 maxlen: 23 93.96.228.0/23 maxlen: 23 94.0.0.0/12 maxlen: 12 149.241.0.0/16 maxlen: 16 151.224.0.0/13 maxlen: 13 176.24.0.0/14 maxlen: 14 176.248.0.0/13 maxlen: 13 176.255.213.0/24 maxlen: 24 176.255.240.0/24 maxlen: 24 176.255.241.0/24 maxlen: 24 176.255.242.0/24 maxlen: 24 2a02:c78::/29 maxlen: 29 2a02:c7a::/32 maxlen: 32 2a02:c7a:1200::/48 maxlen: 48 2a02:c7a:1202::/48 maxlen: 48 2a02:c7b::/32 maxlen: 32 2a02:c7c::/30 maxlen: 30 2a02:c7c::/33 maxlen: 33 2a02:c7c:8000::/33 maxlen: 33 2a02:c7d::/33 maxlen: 33 2a02:c7d:8000::/33 maxlen: 33 2a02:c7e::/33 maxlen: 33 2a02:c7e:8000::/33 maxlen: 33 2a02:c7f::/33 maxlen: 33 2a02:c7f:8000::/33 maxlen: 33 2a06:5900::/32 maxlen: 32 2a06:5900::/34 maxlen: 34 2a06:5900:4000::/34 maxlen: 34 2a06:5900:8000::/34 maxlen: 34 2a06:5900:c000::/34 maxlen: 34 2a06:5901::/33 maxlen: 33 2a06:5902::/31 maxlen: 31 2a06:5904::/31 maxlen: 31 2a06:5906::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c1:1a:ee:4c:7a:e8:3a:7b:71:cc:ff:a1:63:0c:59:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82 Validity Not Before: Jan 15 10:02:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1188ccfa9fec26594a0b164c454923fc1eb5391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:00:6d:1a:05:9e:c3:f7:ee:d0:8d:d8:35:4f: d9:f2:0a:90:26:c7:1b:57:2b:30:28:bd:16:17:9c: d9:63:8d:37:18:02:31:8e:11:e3:fe:61:b0:b0:ce: 5d:48:a8:ea:d5:85:72:9f:7f:98:96:f9:23:7f:0d: 22:58:95:76:4b:6f:4b:f5:80:92:24:dc:3b:a2:76: a1:ed:9a:67:92:71:3f:58:c4:3f:80:8e:2a:13:37: 3a:e8:de:9c:ec:eb:e7:ee:30:96:58:c5:7e:0d:60: 59:61:6e:8a:91:a8:b4:d6:02:66:5c:5e:fd:a8:37: 32:17:36:e9:f7:08:62:00:05:b6:d6:e8:ec:50:3a: f8:06:84:f2:07:09:86:ee:16:fa:a8:a3:5b:75:c3: d1:b7:42:ae:3f:f5:54:6c:e0:8e:fa:f8:27:7b:1f: d6:90:74:53:c3:f9:b9:77:82:a1:0d:77:0b:af:15: 79:a9:96:13:f1:97:32:93:89:26:81:91:48:f8:b6: 2c:6e:a9:f0:d1:c5:76:d1:ea:68:5a:48:59:f2:6f: 59:ea:72:76:85:de:e8:ff:5b:ad:e2:0b:df:80:21: fc:11:87:ea:69:00:7f:0a:e1:d5:ed:b6:6a:ba:00: c1:6b:92:b3:07:fc:d4:29:0d:30:d9:67:76:16:cf: 3e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:18:8C:CF:A9:FE:C2:65:94:A0:B1:64:C4:54:92:3F:C1:EB:53:91 X509v3 Authority Key Identifier: keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/wRiMz6n-wmWUoLFkxFSSP8HrU5E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.120.0.0/13 2.216.0.0/13 5.64.0.0/13 46.64.0.0/15 51.182.0.0/15 51.186.0.0/15 51.190.0.0/15 51.198.0.0/18 51.198.72.0-51.199.251.255 78.86.0.0/16 90.192.0.0/11 93.96.0.0-93.96.191.255 93.96.224.0/19 94.0.0.0/12 149.241.0.0/16 151.224.0.0/13 176.24.0.0/14 176.248.0.0/13 IPv6: 2a02:c78::/29 2a06:5900::-2a06:5901:7fff:ffff:ffff:ffff:ffff:ffff 2a06:5902::-2a06:5907:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 99:21:12:6e:f4:51:b2:35:52:3c:ae:98:30:b0:90:fb:8e:13: 25:e1:a6:ae:53:62:84:51:57:6c:4f:99:db:b6:01:94:b5:80: ad:47:7d:32:51:43:2a:59:93:47:6d:c6:22:e7:ed:18:16:a7: e5:e6:d5:b8:97:b6:45:6e:fc:e6:b5:c1:15:39:fb:9d:39:a2: f3:1b:25:c4:63:2c:f9:4d:9e:82:a5:ab:06:5f:9a:44:4a:28: 8d:ce:b1:61:7f:c8:90:d3:06:8e:a2:ba:e7:01:97:3d:73:ae: 4c:96:05:b0:66:1a:67:73:03:1e:ad:c4:ca:ee:3e:3e:fc:86: 68:5d:50:94:43:7d:60:e4:7b:fe:62:d4:8d:2f:30:7e:81:a4: 23:f4:86:44:f5:f3:6a:37:5d:d8:75:4f:13:be:96:5e:d7:aa: ec:8b:20:6c:1d:9d:b4:f0:fc:a2:7c:d4:c9:fe:26:3f:b8:9b: 7d:a6:cf:0c:b3:f1:ac:90:5f:e4:7d:fc:62:1f:9f:ad:23:f2: c5:57:a9:12:7a:99:c5:e2:74:9e:7f:26:27:8c:b2:d2:6d:dc: 62:15:81:c9:1b:fb:7c:91:c4:fd:b1:76:48:b2:50:83:71:b8: 65:49:b4:d3:f1:cf:9c:88:a4:12:f5:75:26:bb:3d:ce:20:a5: 68:e0:7d:4c -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgISAZvBGu5Meug6e3HM/6FjDFleMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MWQ0YTQzNzRkZjIyMmFjMzIzNWI5NjAyMjA2ZDk2YmYx ZGFjODIwHhcNMjYwMTE1MTAwMjA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTE4OGNjZmE5ZmVjMjY1OTRhMGIxNjRjNDU0OTIzZmMxZWI1MzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQBtGgWew/fu0I3YNU/Z8gqQJscb VyswKL0WF5zZY403GAIxjhHj/mGwsM5dSKjq1YVyn3+Ylvkjfw0iWJV2S29L9YCS JNw7onah7ZpnknE/WMQ/gI4qEzc66N6c7Ovn7jCWWMV+DWBZYW6Kkai01gJmXF79 qDcyFzbp9whiAAW21ujsUDr4BoTyBwmG7hb6qKNbdcPRt0KuP/VUbOCO+vgnex/W kHRTw/m5d4KhDXcLrxV5qZYT8Zcyk4kmgZFI+LYsbqnw0cV20epoWkhZ8m9Z6nJ2 hd7o/1ut4gvfgCH8EYfqaQB/CuHV7bZqugDBa5KzB/zUKQ0w2Wd2Fs8+UwIDAQAB o4ICojCCAp4wHQYDVR0OBBYEFMEYjM+p/sJllKCxZMRUkj/B61ORMB8GA1UdIwQY MBaAFPcdSkN03yIqwyNblgIgbZa/HayCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NzM5ZGMtMTEzMi00ODM3LTliODUt ZTlhYzJiMDAzMTZhLzEvd1JpTXo2bi13bVdVb0xGa3hGU1NQOEhyVTVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NzM5ZGMtMTEzMi00ODM3LTliODUtZTlhYzJiMDAzMTZh LzEvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG3BggrBgEFBQcBBwEB/wSBpzCBpDBzBAIAATBtAwMDAngD AwMC2AMDAwVAAwMBLkADAwEztgMDATO6AwMBM74DBAYzxgAwDAMEAzPGSAMEAjPH +AMDAE5WAwMFWsAwCwMDBV1gAwQGXWCAAwQFXWDgAwMEXgADAwCV8QMDA5fgAwMC sBgDAwOw+DAtBAIAAjAnAwUDKgIMeDAOAwQAKgZZAwYHKgZZAQAwDgMFASoGWQID BQMqBlkAMA0GCSqGSIb3DQEBCwUAA4IBAQCZIRJu9FGyNVI8rpgwsJD7jhMl4aau U2KEUVdsT5nbtgGUtYCtR30yUUMqWZNHbcYi5+0YFqfl5tW4l7ZFbvzmtcEVOfud OaLzGyXEYyz5TZ6CpasGX5pESiiNzrFhf8iQ0waOorrnAZc9c65MlgWwZhpncwMe rcTK7j4+/IZoXVCUQ31g5Hv+YtSNLzB+gaQj9IZE9fNqN13YdU8TvpZe16rsiyBs HZ208PyifNTJ/iY/uJt9ps8Ms/GskF/kffxiH5+tI/LFV6kSepnF4nSefyYnjLLS bdxiFYHJG/t8kcT9sXZIslCDcbhlSbTT8c+ciKQS9XUmuz3OIKVo4H1M -----END CERTIFICATE-----Generated at Tue Jan 20 23:29:28 2026 by rpki-client