This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/dRLWJJJWtaMJwJ-7QVmS2vO-40U.roa File: dRLWJJJWtaMJwJ-7QVmS2vO-40U.roa (raw, json) Hash identifier: snMfS0NzpvgvzsEk9xinwWRzUEGK3X1jVB+Z3LPURqA= Subject key identifier: 75:12:D6:24:92:56:B5:A3:09:C0:9F:BB:41:59:92:DA:F3:BE:E3:45 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019BFF7586720DC3CA91106A338FC9CC36E6 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/dRLWJJJWtaMJwJ-7QVmS2vO-40U.roa Signing time: Tue 27 Jan 2026 12:37:30 +0000 ROA not before: Tue 27 Jan 2026 12:37:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62206 IP address blocks: 5.181.84.0/24 maxlen: 24 5.181.87.0/24 maxlen: 24 45.9.29.0/24 maxlen: 24 45.13.189.0/24 maxlen: 24 45.13.190.0/24 maxlen: 24 45.94.171.0/24 maxlen: 24 45.132.182.0/23 maxlen: 24 146.19.125.0/24 maxlen: 24 185.43.248.0/24 maxlen: 24 185.43.249.0/24 maxlen: 24 185.43.251.0/24 maxlen: 24 185.200.62.0/24 maxlen: 24 185.200.63.0/24 maxlen: 24 193.30.240.0/24 maxlen: 24 193.30.241.0/24 maxlen: 24 193.30.242.0/24 maxlen: 24 193.30.243.0/24 maxlen: 24 193.57.43.0/24 maxlen: 24 194.242.96.0/24 maxlen: 24 194.242.98.0/24 maxlen: 24 194.242.99.0/24 maxlen: 24 195.177.92.0/24 maxlen: 24 195.177.94.0/24 maxlen: 24 195.177.95.0/24 maxlen: 24 195.211.188.0/24 maxlen: 24 195.211.189.0/24 maxlen: 24 195.211.190.0/24 maxlen: 24 195.211.191.0/24 maxlen: 24 2a01:7120::/32 maxlen: 32 2a01:7120:7::/48 maxlen: 48 2a07:9200::/29 maxlen: 32 2a07:9201::/32 maxlen: 32 2a07:9206::/32 maxlen: 32 2a07:9207::/32 maxlen: 32 2a09:340::/32 maxlen: 32 2a09:342::/32 maxlen: 32 2a09:346::/32 maxlen: 32 2a09:c440::/32 maxlen: 32 2a0c:5d40::/32 maxlen: 32 2a0c:a580::/29 maxlen: 32 2a0c:a580::/32 maxlen: 32 2a0c:a581::/32 maxlen: 32 2a0c:a584::/32 maxlen: 32 2a0c:a586::/32 maxlen: 32 2a10:dfc0::/29 maxlen: 32 2a10:dfc0::/32 maxlen: 32 2a10:fac0::/32 maxlen: 32 2a11:580::/29 maxlen: 29 2a11:580::/32 maxlen: 32 2a11:1600::/32 maxlen: 32 2a11:2a80::/32 maxlen: 32 2a11:3900::/32 maxlen: 32 2a11:d680::/32 maxlen: 32 2a12:9f00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 20:55:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:75:86:72:0d:c3:ca:91:10:6a:33:8f:c9:cc:36:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 27 12:37:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7512d6249256b5a309c09fbb415992daf3bee345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b3:1d:73:15:00:6d:36:5b:89:2e:32:45:59: 35:4c:3c:f2:bd:d5:fb:a7:d3:ec:b3:32:fc:35:a6: 0c:a5:95:53:5e:ce:55:2a:ca:ba:37:01:f6:ed:b2: 1e:ef:0f:78:52:ca:d3:39:b2:1c:11:11:5f:96:01: 7d:4d:1f:15:b2:35:cc:2a:ff:e9:c3:58:47:49:6c: 29:15:01:2d:c7:4e:20:ed:41:08:76:8e:60:11:05: f2:27:6f:ac:3f:23:90:b3:bc:2d:4d:24:a4:34:05: e1:f4:7d:de:26:b0:1c:5c:b9:54:65:e0:6f:8b:68: 8d:4b:3c:40:b1:53:74:ba:41:77:58:3a:cc:78:3e: ef:d1:0b:3c:71:48:dd:08:9f:50:fb:be:7e:f8:4b: ba:fc:56:63:97:5d:02:4a:f1:f6:ba:7e:71:40:2c: 71:69:6c:f0:2c:c0:f9:93:1e:ec:17:95:6b:52:6f: 03:2a:5a:c8:d5:40:8b:e2:04:cf:a0:17:b0:f7:6d: f5:3b:70:7e:3d:06:f3:4c:df:97:6d:16:9e:dc:17: 6a:48:e0:f0:4e:99:0e:c5:81:83:a5:b2:19:f8:d2: 7a:5f:aa:9f:28:92:9d:ae:5c:e6:28:d4:30:7e:96: ac:01:07:af:81:3c:4b:f3:35:ce:f0:03:ee:23:73: 27:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:12:D6:24:92:56:B5:A3:09:C0:9F:BB:41:59:92:DA:F3:BE:E3:45 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/dRLWJJJWtaMJwJ-7QVmS2vO-40U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.84.0/24 5.181.87.0/24 45.9.29.0/24 45.13.189.0-45.13.190.255 45.94.171.0/24 45.132.182.0/23 146.19.125.0/24 185.43.248.0/23 185.43.251.0/24 185.200.62.0/23 193.30.240.0/22 193.57.43.0/24 194.242.96.0/24 194.242.98.0/23 195.177.92.0/24 195.177.94.0/23 195.211.188.0/22 IPv6: 2a01:7120::/32 2a07:9200::/29 2a09:340::/32 2a09:342::/32 2a09:346::/32 2a09:c440::/32 2a0c:5d40::/32 2a0c:a580::/29 2a10:dfc0::/29 2a10:fac0::/32 2a11:580::/29 2a11:1600::/32 2a11:2a80::/32 2a11:3900::/32 2a11:d680::/32 2a12:9f00::/32 Signature Algorithm: sha256WithRSAEncryption 0a:70:c6:f3:ec:99:7d:ef:05:23:83:f8:75:08:ab:67:1a:48: 93:f1:05:bd:58:b0:c7:60:fd:a3:f4:37:2e:37:fe:8c:d0:e4: 0f:47:b7:b0:69:c7:20:f8:75:3c:4f:6a:d4:96:73:f8:25:63: 8a:93:cd:da:8c:1b:5e:dc:af:d7:04:e5:61:49:25:14:da:9a: 3f:60:f2:b4:8f:0d:44:9e:e9:52:91:05:2a:4d:46:3b:dc:b6: cf:fa:17:d6:f3:c3:44:64:6d:4f:a3:f7:b7:cd:a9:1f:f5:b5: 69:c5:62:81:42:08:8f:82:16:af:d7:c0:6f:ab:9e:cb:04:f6: fc:a1:63:9c:f5:06:35:10:8c:67:ee:23:1f:58:c2:2f:42:89: da:07:77:b6:b2:38:2f:8f:13:3f:ba:63:ab:13:4d:ad:92:2f: de:e1:d5:6e:0f:f7:61:a4:18:83:d8:b6:0c:7d:67:c5:1a:f2: 2a:79:2e:e8:4a:e6:b0:99:ad:ab:43:46:05:ca:67:4d:b5:df: 31:8f:ce:74:23:a5:54:f9:a9:1e:25:d6:b7:4e:31:68:10:01: f1:1b:cd:21:ce:e3:77:6e:b5:06:72:22:dc:5a:2b:39:94:70: c0:7a:36:63:eb:e1:bd:4c:db:ca:fa:bd:ca:1e:8d:67:e0:8e: 33:cd:2a:80 -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgISAZv/dYZyDcPKkRBqM4/JzDbmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTI3MTIzNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTEyZDYyNDkyNTZiNWEzMDljMDlmYmI0MTU5OTJkYWYzYmVlMzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07MdcxUAbTZbiS4yRVk1TDzyvdX7 p9PsszL8NaYMpZVTXs5VKsq6NwH27bIe7w94UsrTObIcERFflgF9TR8VsjXMKv/p w1hHSWwpFQEtx04g7UEIdo5gEQXyJ2+sPyOQs7wtTSSkNAXh9H3eJrAcXLlUZeBv i2iNSzxAsVN0ukF3WDrMeD7v0Qs8cUjdCJ9Q+75++Eu6/FZjl10CSvH2un5xQCxx aWzwLMD5kx7sF5VrUm8DKlrI1UCL4gTPoBew9231O3B+PQbzTN+XbRae3BdqSODw TpkOxYGDpbIZ+NJ6X6qfKJKdrlzmKNQwfpasAQevgTxL8zXO8APuI3MnSwIDAQAB o4IC7TCCAukwHQYDVR0OBBYEFHUS1iSSVrWjCcCfu0FZktrzvuNFMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvZFJMV0pKSld0YU1Kd0otN1FWbVMydk8tNDBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBAQYIKwYBBQUHAQcBAf8EgfEwge4wdAQCAAEwbgMEAAW1 VAMEAAW1VwMEAC0JHTAMAwQALQ29AwQALQ2+AwQALV6rAwQBLYS2AwQAkhN9AwQB uSv4AwQAuSv7AwQBucg+AwQCwR7wAwQAwTkrAwQAwvJgAwQBwvJiAwQAw7FcAwQB w7FeAwQCw9O8MHYEAgACMHADBQAqAXEgAwUDKgeSAAMFACoJA0ADBQAqCQNCAwUA KgkDRgMFACoJxEADBQAqDF1AAwUDKgylgAMFAyoQ38ADBQAqEPrAAwUDKhEFgAMF ACoRFgADBQAqESqAAwUAKhE5AAMFACoR1oADBQAqEp8AMA0GCSqGSIb3DQEBCwUA A4IBAQAKcMbz7Jl97wUjg/h1CKtnGkiT8QW9WLDHYP2j9DcuN/6M0OQPR7ewaccg +HU8T2rUlnP4JWOKk83ajBte3K/XBOVhSSUU2po/YPK0jw1EnulSkQUqTUY73LbP +hfW88NEZG1Po/e3zakf9bVpxWKBQgiPghav18Bvq57LBPb8oWOc9QY1EIxn7iMf WMIvQonaB3e2sjgvjxM/umOrE02tki/e4dVuD/dhpBiD2LYMfWfFGvIqeS7oSuaw ma2rQ0YFymdNtd8xj850I6VU+akeJda3TjFoEAHxG80hzuN3brUGciLcWis5lHDA ejZj6+G9TNvK+r3KHo1n4I4zzSqA -----END CERTIFICATE-----Generated at Tue Feb 3 05:53:29 2026 by rpki-client