This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/m07sJicR8BP9Stigsxz37sRfVXc.roa File: m07sJicR8BP9Stigsxz37sRfVXc.roa (raw, json) Hash identifier: x2uYCbOyD0c8CzWc4p7qYByP11pc93XMMw3G/5xlSag= Subject key identifier: 9B:4E:EC:26:27:11:F0:13:FD:4A:D8:A0:B3:1C:F7:EE:C4:5F:55:77 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15E8DA02864A7B0895BE9335580FB4 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/m07sJicR8BP9Stigsxz37sRfVXc.roa Signing time: Fri 02 Jan 2026 14:21:40 +0000 ROA not before: Fri 02 Jan 2026 14:21:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62206 IP address blocks: 5.181.84.0/24 maxlen: 24 5.181.87.0/24 maxlen: 24 45.9.29.0/24 maxlen: 24 45.13.189.0/24 maxlen: 24 45.13.190.0/24 maxlen: 24 45.94.171.0/24 maxlen: 24 45.132.182.0/23 maxlen: 24 146.19.125.0/24 maxlen: 24 185.43.248.0/24 maxlen: 24 185.43.249.0/24 maxlen: 24 185.43.251.0/24 maxlen: 24 185.200.62.0/24 maxlen: 24 185.200.63.0/24 maxlen: 24 193.30.240.0/24 maxlen: 24 193.30.242.0/24 maxlen: 24 193.30.243.0/24 maxlen: 24 193.57.43.0/24 maxlen: 24 194.242.96.0/24 maxlen: 24 194.242.98.0/24 maxlen: 24 194.242.99.0/24 maxlen: 24 195.177.92.0/24 maxlen: 24 195.177.94.0/24 maxlen: 24 195.177.95.0/24 maxlen: 24 195.211.188.0/24 maxlen: 24 195.211.189.0/24 maxlen: 24 195.211.190.0/24 maxlen: 24 195.211.191.0/24 maxlen: 24 2a01:7120::/32 maxlen: 32 2a01:7120:7::/48 maxlen: 48 2a07:9200::/29 maxlen: 32 2a07:9201::/32 maxlen: 32 2a07:9206::/32 maxlen: 32 2a07:9207::/32 maxlen: 32 2a09:340::/32 maxlen: 32 2a09:342::/32 maxlen: 32 2a09:346::/32 maxlen: 32 2a09:c440::/32 maxlen: 32 2a0c:5d40::/32 maxlen: 32 2a0c:a580::/29 maxlen: 32 2a0c:a580::/32 maxlen: 32 2a0c:a581::/32 maxlen: 32 2a0c:a584::/32 maxlen: 32 2a0c:a586::/32 maxlen: 32 2a10:dfc0::/29 maxlen: 32 2a10:dfc0::/32 maxlen: 32 2a10:fac0::/32 maxlen: 32 2a11:580::/29 maxlen: 29 2a11:580::/32 maxlen: 32 2a11:1600::/32 maxlen: 32 2a11:2a80::/32 maxlen: 32 2a11:3900::/32 maxlen: 32 2a11:d680::/32 maxlen: 32 2a12:9f00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e8:da:02:86:4a:7b:08:95:be:93:35:58:0f:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b4eec262711f013fd4ad8a0b31cf7eec45f5577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2a:13:a4:aa:5f:90:14:f1:15:26:ab:21:45: 63:56:7e:27:7b:5d:69:00:19:b3:34:3a:78:0c:51: b3:34:21:89:59:de:4d:75:b5:f0:53:89:ea:1f:35: c9:98:4f:f5:d2:05:8a:6c:08:5c:59:30:e7:9c:ca: 78:19:4f:0c:29:5b:ca:fb:f3:b1:b0:af:63:1b:ed: fa:f9:f9:b2:5f:f9:d0:08:b3:58:93:41:56:2f:1f: 0c:82:3c:12:90:46:cb:cf:35:e6:82:1e:c8:6e:92: b0:ba:23:a9:bc:12:65:c5:ed:9d:9b:b8:d4:45:fb: c8:ee:d8:61:d3:aa:5c:72:27:9f:05:cf:41:a1:74: d8:61:36:1d:18:67:ac:8c:cd:09:c9:28:c1:7d:13: 88:76:01:4b:7d:26:bb:d3:a9:5c:69:a7:ed:a7:e7: 71:85:a2:60:5c:43:f7:9e:6d:c6:85:14:bb:5f:f0: f7:9a:ca:6d:a8:54:5e:22:e5:93:df:05:13:39:5d: f9:bb:02:05:5a:a0:97:16:fe:8f:47:b3:f5:1d:f0: d4:60:ac:f6:41:be:8e:0c:92:1f:51:ce:64:9c:d1: f2:d0:80:04:87:4b:4f:64:b0:70:4c:3e:52:27:7f: 50:c0:18:a9:a5:81:b8:78:df:c4:00:07:8f:ba:ef: 25:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4E:EC:26:27:11:F0:13:FD:4A:D8:A0:B3:1C:F7:EE:C4:5F:55:77 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/m07sJicR8BP9Stigsxz37sRfVXc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.84.0/24 5.181.87.0/24 45.9.29.0/24 45.13.189.0-45.13.190.255 45.94.171.0/24 45.132.182.0/23 146.19.125.0/24 185.43.248.0/23 185.43.251.0/24 185.200.62.0/23 193.30.240.0/24 193.30.242.0/23 193.57.43.0/24 194.242.96.0/24 194.242.98.0/23 195.177.92.0/24 195.177.94.0/23 195.211.188.0/22 IPv6: 2a01:7120::/32 2a07:9200::/29 2a09:340::/32 2a09:342::/32 2a09:346::/32 2a09:c440::/32 2a0c:5d40::/32 2a0c:a580::/29 2a10:dfc0::/29 2a10:fac0::/32 2a11:580::/29 2a11:1600::/32 2a11:2a80::/32 2a11:3900::/32 2a11:d680::/32 2a12:9f00::/32 Signature Algorithm: sha256WithRSAEncryption 44:7d:09:a9:c1:0f:ab:f3:ab:69:68:9e:43:fa:ca:fe:85:f0: 6a:53:5f:97:43:38:b1:a0:64:60:55:f3:46:c8:06:4a:47:89: db:56:0b:35:fa:80:03:8f:71:92:81:62:d8:a4:ad:fe:6a:48: d7:c4:93:33:da:5b:ad:40:1f:7a:2c:cf:b8:a6:27:5b:d0:db: a6:53:99:fc:23:c2:df:f2:a3:65:cc:01:00:3a:f8:27:e8:5e: 9d:74:e8:3f:69:1b:92:22:32:65:df:d7:2e:52:02:cb:1f:fa: 98:99:2d:a1:c3:26:21:61:cb:2e:80:a4:e6:10:01:fb:a5:a5: cc:e4:89:4d:e5:1f:66:20:be:30:14:ed:9b:e3:4d:ca:7b:92: a8:76:9d:3e:65:b5:57:6c:f7:87:d0:db:8d:7d:86:8a:5b:f1: c2:1a:48:f2:96:47:9d:3c:a9:f9:40:3b:6a:cd:34:46:4d:2f: c1:ba:d3:e1:3c:80:f9:a6:e6:36:b9:7d:83:c7:29:e7:e2:96: 74:44:31:85:f9:f5:0c:7b:4e:9c:47:cd:46:00:9a:86:6f:12: 98:c0:30:f2:1c:7c:02:0c:66:d5:f1:ac:bf:28:d9:d0:84:60: ac:c3:fc:da:4b:bb:4d:7f:9c:b1:0f:55:c4:26:48:61:38:1c: 00:41:91:6d -----BEGIN CERTIFICATE----- MIIF5zCCBM+gAwIBAgISAZt/FejaAoZKewiVvpM1WA+0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjRlZWMyNjI3MTFmMDEzZmQ0YWQ4YTBiMzFjZjdlZWM0NWY1NTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSoTpKpfkBTxFSarIUVjVn4ne11p ABmzNDp4DFGzNCGJWd5NdbXwU4nqHzXJmE/10gWKbAhcWTDnnMp4GU8MKVvK+/Ox sK9jG+36+fmyX/nQCLNYk0FWLx8MgjwSkEbLzzXmgh7IbpKwuiOpvBJlxe2dm7jU RfvI7thh06pcciefBc9BoXTYYTYdGGesjM0JySjBfROIdgFLfSa706lcaaftp+dx haJgXEP3nm3GhRS7X/D3msptqFReIuWT3wUTOV35uwIFWqCXFv6PR7P1HfDUYKz2 Qb6ODJIfUc5knNHy0IAEh0tPZLBwTD5SJ39QwBippYG4eN/EAAePuu8l0QIDAQAB o4IC8zCCAu8wHQYDVR0OBBYEFJtO7CYnEfAT/UrYoLMc9+7EX1V3MB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvbTA3c0ppY1I4QlA5U3RpZ3N4ejM3c1JmVlhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBBwYIKwYBBQUHAQcBAf8EgfcwgfQwegQCAAEwdAMEAAW1 VAMEAAW1VwMEAC0JHTAMAwQALQ29AwQALQ2+AwQALV6rAwQBLYS2AwQAkhN9AwQB uSv4AwQAuSv7AwQBucg+AwQAwR7wAwQBwR7yAwQAwTkrAwQAwvJgAwQBwvJiAwQA w7FcAwQBw7FeAwQCw9O8MHYEAgACMHADBQAqAXEgAwUDKgeSAAMFACoJA0ADBQAq CQNCAwUAKgkDRgMFACoJxEADBQAqDF1AAwUDKgylgAMFAyoQ38ADBQAqEPrAAwUD KhEFgAMFACoRFgADBQAqESqAAwUAKhE5AAMFACoR1oADBQAqEp8AMA0GCSqGSIb3 DQEBCwUAA4IBAQBEfQmpwQ+r86tpaJ5D+sr+hfBqU1+XQzixoGRgVfNGyAZKR4nb Vgs1+oADj3GSgWLYpK3+akjXxJMz2lutQB96LM+4pidb0NumU5n8I8Lf8qNlzAEA Ovgn6F6ddOg/aRuSIjJl39cuUgLLH/qYmS2hwyYhYcsugKTmEAH7paXM5IlN5R9m IL4wFO2b403Ke5Kodp0+ZbVXbPeH0NuNfYaKW/HCGkjylkedPKn5QDtqzTRGTS/B utPhPID5puY2uX2Dxynn4pZ0RDGF+fUMe06cR81GAJqGbxKYwDDyHHwCDGbV8ay/ KNnQhGCsw/zaS7tNf5yxD1XEJkhhOBwAQZFt -----END CERTIFICATE-----Generated at Tue Jan 6 20:51:28 2026 by rpki-client