This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/bzUa7NEiA_5NRDl90cnCdsjL1Rs.roa File: bzUa7NEiA_5NRDl90cnCdsjL1Rs.roa (raw, json) Hash identifier: NiCf8zzCJ9eXhX1Fd4Y2de/rDnwxD0woJrstmZeYHQw= Subject key identifier: 6F:35:1A:EC:D1:22:03:FE:4D:44:39:7D:D1:C9:C2:76:C8:CB:D5:1B Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019C4662E86681E8F38B4665C159C5667938 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/bzUa7NEiA_5NRDl90cnCdsjL1Rs.roa Signing time: Tue 10 Feb 2026 07:10:13 +0000 ROA not before: Tue 10 Feb 2026 07:10:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62206 IP address blocks: 5.181.84.0/24 maxlen: 24 5.181.87.0/24 maxlen: 24 45.9.29.0/24 maxlen: 24 45.13.189.0/24 maxlen: 24 45.13.190.0/24 maxlen: 24 45.81.112.0/24 maxlen: 24 45.94.171.0/24 maxlen: 24 45.132.182.0/23 maxlen: 24 146.19.125.0/24 maxlen: 24 185.43.248.0/24 maxlen: 24 185.43.249.0/24 maxlen: 24 185.43.251.0/24 maxlen: 24 185.200.62.0/24 maxlen: 24 185.200.63.0/24 maxlen: 24 193.30.240.0/24 maxlen: 24 193.30.241.0/24 maxlen: 24 193.30.242.0/24 maxlen: 24 193.30.243.0/24 maxlen: 24 193.57.43.0/24 maxlen: 24 194.242.96.0/24 maxlen: 24 194.242.98.0/24 maxlen: 24 194.242.99.0/24 maxlen: 24 195.177.92.0/24 maxlen: 24 195.177.94.0/24 maxlen: 24 195.177.95.0/24 maxlen: 24 195.211.188.0/24 maxlen: 24 195.211.189.0/24 maxlen: 24 195.211.190.0/24 maxlen: 24 195.211.191.0/24 maxlen: 24 2a01:7120::/32 maxlen: 32 2a01:7120:7::/48 maxlen: 48 2a07:9200::/29 maxlen: 32 2a07:9201::/32 maxlen: 32 2a07:9206::/32 maxlen: 32 2a07:9207::/32 maxlen: 32 2a09:340::/32 maxlen: 32 2a09:342::/32 maxlen: 32 2a09:346::/32 maxlen: 32 2a09:c440::/32 maxlen: 32 2a0c:5d40::/32 maxlen: 32 2a0c:a580::/29 maxlen: 32 2a0c:a580::/32 maxlen: 32 2a0c:a581::/32 maxlen: 32 2a0c:a584::/32 maxlen: 32 2a0c:a586::/32 maxlen: 32 2a10:dfc0::/29 maxlen: 32 2a10:dfc0::/32 maxlen: 32 2a10:fac0::/32 maxlen: 32 2a11:580::/29 maxlen: 29 2a11:580::/32 maxlen: 32 2a11:1600::/32 maxlen: 32 2a11:2a80::/32 maxlen: 32 2a11:3900::/32 maxlen: 32 2a11:d680::/32 maxlen: 32 2a12:9f00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 12 Feb 2026 01:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:46:62:e8:66:81:e8:f3:8b:46:65:c1:59:c5:66:79:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Feb 10 07:10:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f351aecd12203fe4d44397dd1c9c276c8cbd51b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:41:fb:dc:be:8c:bd:a5:e4:dd:b5:dc:6e:73: e2:af:42:2d:b3:05:bd:c0:14:38:70:9e:ca:3e:13: f0:71:91:68:ca:78:58:a7:0a:8c:c1:91:2f:1f:3d: 0d:95:81:56:96:22:89:d0:c8:9e:99:7d:ca:26:32: 47:22:a2:5f:a6:79:83:87:9d:b4:48:25:10:f7:f6: ea:0b:66:6e:56:d3:73:9e:81:81:ab:f4:9d:6c:89: ca:cf:73:fb:8c:86:57:2e:3a:30:11:91:d0:7a:6e: e3:45:a7:30:c4:60:4e:62:6c:ea:88:06:bc:f0:0a: 0a:83:56:e5:d7:28:22:a5:ac:96:b3:2c:22:53:55: 84:7c:08:60:29:b9:ff:0a:f1:4d:62:1f:88:14:29: e8:06:91:11:62:e6:13:18:e0:29:41:0d:06:b8:c2: d4:8b:be:fe:af:9e:42:a2:c4:44:eb:e5:ba:b4:75: 78:bd:2c:7a:aa:1c:14:bc:f6:93:a0:3b:f4:d0:1d: fb:90:00:ad:84:b3:ae:3d:74:ee:5a:7b:ae:ff:8e: 9c:be:61:2d:5d:30:3e:a8:7a:ed:21:e2:86:f8:1d: d8:9b:a3:5a:d0:6b:36:70:79:22:09:7b:0e:2d:4d: 5c:69:cf:99:8d:5e:ad:55:59:1f:94:87:30:d8:59: d6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:35:1A:EC:D1:22:03:FE:4D:44:39:7D:D1:C9:C2:76:C8:CB:D5:1B X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/bzUa7NEiA_5NRDl90cnCdsjL1Rs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.84.0/24 5.181.87.0/24 45.9.29.0/24 45.13.189.0-45.13.190.255 45.81.112.0/24 45.94.171.0/24 45.132.182.0/23 146.19.125.0/24 185.43.248.0/23 185.43.251.0/24 185.200.62.0/23 193.30.240.0/22 193.57.43.0/24 194.242.96.0/24 194.242.98.0/23 195.177.92.0/24 195.177.94.0/23 195.211.188.0/22 IPv6: 2a01:7120::/32 2a07:9200::/29 2a09:340::/32 2a09:342::/32 2a09:346::/32 2a09:c440::/32 2a0c:5d40::/32 2a0c:a580::/29 2a10:dfc0::/29 2a10:fac0::/32 2a11:580::/29 2a11:1600::/32 2a11:2a80::/32 2a11:3900::/32 2a11:d680::/32 2a12:9f00::/32 Signature Algorithm: sha256WithRSAEncryption 52:14:4f:9e:e1:07:98:a8:1d:af:ac:af:24:08:4b:29:34:0f: 8c:a6:09:0e:15:98:5b:9a:c3:28:ba:85:b1:fb:7c:61:4b:7c: dd:46:ff:3c:64:25:f2:b0:e4:b6:5b:f2:66:62:0a:d9:20:a1: cd:46:92:ec:ce:f8:4c:c1:e2:2e:11:5c:cd:df:eb:3f:4b:dd: 76:18:87:3b:cd:c4:bc:61:5c:82:4a:d7:c3:f1:07:d6:f0:15: 38:2a:e7:f9:dd:7f:f6:04:b2:fd:fc:bd:49:be:63:15:c1:7f: 5c:ab:20:28:ac:1f:53:2b:05:3c:91:22:3b:39:55:09:5d:e5: 63:44:da:9e:77:2a:9d:39:9e:26:71:c3:13:58:f9:6f:fe:3e: c3:98:11:a7:92:1e:57:21:9e:e6:c8:01:b1:af:14:ce:e3:29: f4:79:a4:6a:64:a5:13:b3:de:dd:7b:3b:b1:bf:4e:ea:89:87: dd:19:97:c8:91:9e:b2:a1:2e:19:3b:54:18:99:eb:55:bc:e7: 8e:a3:97:86:f0:1d:9b:98:bb:60:a5:05:ea:7f:f7:c7:14:91: ab:61:81:47:d3:b3:6c:38:2e:e6:76:ac:aa:1d:26:05:bb:5a: ab:02:34:9f:82:ea:8f:af:f6:d3:e2:6f:5d:51:54:ac:e7:82: 19:ae:14:fe -----BEGIN CERTIFICATE----- MIIF5zCCBM+gAwIBAgISAZxGYuhmgejzi0ZlwVnFZnk4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMjEwMDcxMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjM1MWFlY2QxMjIwM2ZlNGQ0NDM5N2RkMWM5YzI3NmM4Y2JkNTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUH73L6MvaXk3bXcbnPir0ItswW9 wBQ4cJ7KPhPwcZFoynhYpwqMwZEvHz0NlYFWliKJ0MiemX3KJjJHIqJfpnmDh520 SCUQ9/bqC2ZuVtNznoGBq/SdbInKz3P7jIZXLjowEZHQem7jRacwxGBOYmzqiAa8 8AoKg1bl1ygipayWsywiU1WEfAhgKbn/CvFNYh+IFCnoBpERYuYTGOApQQ0GuMLU i77+r55CosRE6+W6tHV4vSx6qhwUvPaToDv00B37kACthLOuPXTuWnuu/46cvmEt XTA+qHrtIeKG+B3Ym6Na0Gs2cHkiCXsOLU1cac+ZjV6tVVkflIcw2FnWQwIDAQAB o4IC8zCCAu8wHQYDVR0OBBYEFG81GuzRIgP+TUQ5fdHJwnbIy9UbMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvYnpVYTdORWlBXzVOUkRsOTBjbkNkc2pMMVJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBBwYIKwYBBQUHAQcBAf8EgfcwgfQwegQCAAEwdAMEAAW1 VAMEAAW1VwMEAC0JHTAMAwQALQ29AwQALQ2+AwQALVFwAwQALV6rAwQBLYS2AwQA khN9AwQBuSv4AwQAuSv7AwQBucg+AwQCwR7wAwQAwTkrAwQAwvJgAwQBwvJiAwQA w7FcAwQBw7FeAwQCw9O8MHYEAgACMHADBQAqAXEgAwUDKgeSAAMFACoJA0ADBQAq CQNCAwUAKgkDRgMFACoJxEADBQAqDF1AAwUDKgylgAMFAyoQ38ADBQAqEPrAAwUD KhEFgAMFACoRFgADBQAqESqAAwUAKhE5AAMFACoR1oADBQAqEp8AMA0GCSqGSIb3 DQEBCwUAA4IBAQBSFE+e4QeYqB2vrK8kCEspNA+MpgkOFZhbmsMouoWx+3xhS3zd Rv88ZCXysOS2W/JmYgrZIKHNRpLszvhMweIuEVzN3+s/S912GIc7zcS8YVyCStfD 8QfW8BU4Kuf53X/2BLL9/L1JvmMVwX9cqyAorB9TKwU8kSI7OVUJXeVjRNqedyqd OZ4mccMTWPlv/j7DmBGnkh5XIZ7myAGxrxTO4yn0eaRqZKUTs97dezuxv07qiYfd GZfIkZ6yoS4ZO1QYmetVvOeOo5eG8B2bmLtgpQXqf/fHFJGrYYFH07NsOC7mdqyq HSYFu1qrAjSfguqPr/bT4m9dUVSs54IZrhT+ -----END CERTIFICATE-----Generated at Wed Feb 11 10:51:27 2026 by rpki-client