This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/ABRAxxL1oli5mnqrh6nMzN5qJoc.roa File: ABRAxxL1oli5mnqrh6nMzN5qJoc.roa (raw, json) Hash identifier: gnI6s2Oio3BH8OcYrWXlVYfmT1zmLR+ggLYebo1vYkQ= Subject key identifier: 00:14:40:C7:12:F5:A2:58:B9:9A:7A:AB:87:A9:CC:CC:DE:6A:26:87 Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881 Certificate serial: 019C0E61192F93EDE53070147B1217818BA2 Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/ABRAxxL1oli5mnqrh6nMzN5qJoc.roa Signing time: Fri 30 Jan 2026 10:09:30 +0000 ROA not before: Fri 30 Jan 2026 10:09:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30781 IP address blocks: 5.226.0.0/21 maxlen: 24 31.7.248.0/21 maxlen: 24 31.172.160.0/22 maxlen: 24 31.172.232.0/21 maxlen: 24 37.26.184.0/21 maxlen: 24 37.61.240.0/21 maxlen: 24 37.110.192.0/21 maxlen: 24 37.156.226.0/24 maxlen: 24 46.22.192.0/20 maxlen: 24 46.102.116.0/24 maxlen: 24 46.231.216.0/21 maxlen: 24 46.247.128.0/22 maxlen: 24 46.255.200.0/21 maxlen: 24 77.72.88.0/21 maxlen: 24 77.246.80.0/20 maxlen: 24 78.153.224.0/19 maxlen: 24 82.96.128.0/18 maxlen: 24 82.163.36.0/22 maxlen: 24 82.196.24.0/21 maxlen: 24 85.31.192.0/19 maxlen: 24 87.121.136.0/21 maxlen: 24 88.212.144.0/21 maxlen: 24 89.37.106.0/24 maxlen: 24 89.44.77.0/24 maxlen: 24 89.44.210.0/24 maxlen: 24 91.224.162.0/23 maxlen: 24 91.226.193.0/24 maxlen: 24 91.250.244.0/24 maxlen: 24 94.100.160.0/20 maxlen: 24 95.143.64.0/20 maxlen: 24 149.232.160.0/20 maxlen: 24 176.241.120.0/21 maxlen: 24 185.4.60.0/23 maxlen: 24 185.4.62.0/24 maxlen: 24 185.15.140.0/22 maxlen: 24 185.53.80.0/22 maxlen: 24 185.61.184.0/21 maxlen: 24 185.62.184.0/22 maxlen: 24 185.65.79.0/24 maxlen: 24 185.78.156.0/22 maxlen: 24 185.91.224.0/22 maxlen: 24 185.92.36.0/22 maxlen: 24 185.114.100.0/22 maxlen: 24 185.116.63.0/24 maxlen: 24 185.209.52.0/22 maxlen: 24 193.39.119.0/24 maxlen: 24 193.151.84.0/22 maxlen: 24 193.151.84.0/24 maxlen: 24 193.151.87.0/24 maxlen: 24 193.189.124.0/23 maxlen: 24 194.42.100.0/23 maxlen: 24 194.116.142.0/23 maxlen: 24 195.43.64.0/23 maxlen: 24 195.128.147.0/24 maxlen: 24 195.189.186.0/23 maxlen: 24 195.234.35.0/24 maxlen: 24 212.18.240.0/21 maxlen: 24 212.85.229.0/24 maxlen: 24 212.85.230.0/23 maxlen: 24 2a00:68c0::/32 maxlen: 48 2a00:78c0::/29 maxlen: 48 2a01:240::/32 maxlen: 48 2a01:290::/32 maxlen: 48 2a02:398::/32 maxlen: 48 2a03:bdc0::/32 maxlen: 48 2a04:cc00::/29 maxlen: 48 2a07:5300::/29 maxlen: 48 2a0b:41c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0e:61:19:2f:93:ed:e5:30:70:14:7b:12:17:81:8b:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881 Validity Not Before: Jan 30 10:09:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=001440c712f5a258b99a7aab87a9ccccde6a2687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2e:e4:06:14:cd:22:e3:43:60:56:25:11:12: 7c:3a:82:a8:a3:4c:8d:35:6a:59:62:17:e4:bb:56: 30:31:d3:7c:f1:0b:dc:68:19:b2:94:9b:4a:64:1d: 65:f6:b0:b9:1b:b1:ef:3d:cb:b2:5a:30:79:cd:81: 58:2f:a4:78:c8:c7:0c:ee:de:0a:12:c6:45:a5:5f: b2:44:0e:41:5e:fb:9a:d1:f7:85:82:5c:7c:3f:72: 4f:2f:f1:23:dc:c2:bd:af:89:86:a8:21:db:f3:36: 73:d4:38:a3:05:2e:58:35:5c:3b:63:75:bb:0c:7a: 52:82:b4:04:62:60:73:7f:51:bc:47:be:9b:25:0a: b4:dd:46:59:7c:6c:5e:e1:76:e7:b4:1f:26:04:b0: 47:dc:6f:ce:f6:c9:fc:d1:6a:fc:a0:c2:b6:03:67: 20:0b:0c:f8:fb:4f:1b:fa:39:ec:b5:b8:61:82:80: 91:bb:cc:57:09:4b:80:f8:21:54:54:79:af:14:a9: 1f:a5:8e:b1:ad:d6:6a:70:19:72:1d:f4:06:71:c4: 20:4d:e5:48:b9:b9:6f:a3:24:ac:dc:b8:16:af:41: 17:3a:00:a3:f8:79:28:21:d4:fd:3d:97:d0:3d:bb: 37:06:47:ce:f4:6e:96:1d:70:92:4b:f2:e3:4d:21: 2f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:14:40:C7:12:F5:A2:58:B9:9A:7A:AB:87:A9:CC:CC:DE:6A:26:87 X509v3 Authority Key Identifier: keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/ABRAxxL1oli5mnqrh6nMzN5qJoc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.226.0.0/21 31.7.248.0/21 31.172.160.0/22 31.172.232.0/21 37.26.184.0/21 37.61.240.0/21 37.110.192.0/21 37.156.226.0/24 46.22.192.0/20 46.102.116.0/24 46.231.216.0/21 46.247.128.0/22 46.255.200.0/21 77.72.88.0/21 77.246.80.0/20 78.153.224.0/19 82.96.128.0/18 82.163.36.0/22 82.196.24.0/21 85.31.192.0/19 87.121.136.0/21 88.212.144.0/21 89.37.106.0/24 89.44.77.0/24 89.44.210.0/24 91.224.162.0/23 91.226.193.0/24 91.250.244.0/24 94.100.160.0/20 95.143.64.0/20 149.232.160.0/20 176.241.120.0/21 185.4.60.0-185.4.62.255 185.15.140.0/22 185.53.80.0/22 185.61.184.0/21 185.62.184.0/22 185.65.79.0/24 185.78.156.0/22 185.91.224.0/22 185.92.36.0/22 185.114.100.0/22 185.116.63.0/24 185.209.52.0/22 193.39.119.0/24 193.151.84.0/22 193.189.124.0/23 194.42.100.0/23 194.116.142.0/23 195.43.64.0/23 195.128.147.0/24 195.189.186.0/23 195.234.35.0/24 212.18.240.0/21 212.85.229.0-212.85.231.255 IPv6: 2a00:68c0::/32 2a00:78c0::/29 2a01:240::/32 2a01:290::/32 2a02:398::/32 2a03:bdc0::/32 2a04:cc00::/29 2a07:5300::/29 2a0b:41c0::/29 Signature Algorithm: sha256WithRSAEncryption 10:c9:db:bc:aa:ce:90:55:ef:3f:d9:dc:16:ba:5a:b0:47:d8: cd:1b:23:78:f3:df:7f:dc:34:4b:fb:a0:e3:a0:45:94:d7:d2: e9:e4:c6:a9:5e:9e:a1:2c:fc:f7:21:cd:70:24:a9:fa:a4:d3: 8b:b3:18:7d:7b:c3:6d:08:74:66:0b:a0:c4:d4:12:06:b7:5a: 3f:72:4a:48:ba:e8:63:f6:6a:45:80:a3:ad:b7:37:95:e5:e4: 27:f1:44:7f:a3:e5:b5:6c:98:b8:94:09:91:af:93:f5:35:0f: 58:0a:0b:f3:9f:1e:3b:57:45:6f:55:d7:99:59:c9:7b:e5:a5: eb:d1:de:c3:01:79:20:f1:50:ee:83:ca:d3:81:60:28:de:ec: ed:ea:a9:92:c6:7a:32:8f:d2:f7:76:a2:40:f6:28:89:8b:f7: 66:8e:31:f2:a7:c0:a9:1c:66:6a:8f:5d:a1:98:bb:03:19:ae: 27:91:7c:12:35:91:d3:ad:fa:2d:64:85:95:18:a7:df:20:5f: df:26:df:6d:5d:03:80:e4:cf:02:09:ca:a1:91:7e:6e:e8:b9: 92:a8:9b:f8:d3:0c:af:40:d3:ce:0e:6b:cd:97:0f:c6:ce:4d: 09:f3:55:e6:fd:77:88:60:32:2e:44:ef:2c:15:70:ea:59:b8: 45:e3:b0:3b -----BEGIN CERTIFICATE----- MIIGojCCBYqgAwIBAgISAZwOYRkvk+3lMHAUexIXgYuiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5 ODk4ODEwHhcNMjYwMTMwMTAwOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDE0NDBjNzEyZjVhMjU4Yjk5YTdhYWI4N2E5Y2NjY2RlNmEyNjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi7kBhTNIuNDYFYlERJ8OoKoo0yN NWpZYhfku1YwMdN88QvcaBmylJtKZB1l9rC5G7HvPcuyWjB5zYFYL6R4yMcM7t4K EsZFpV+yRA5BXvua0feFglx8P3JPL/Ej3MK9r4mGqCHb8zZz1DijBS5YNVw7Y3W7 DHpSgrQEYmBzf1G8R76bJQq03UZZfGxe4XbntB8mBLBH3G/O9sn80Wr8oMK2A2cg Cwz4+08b+jnstbhhgoCRu8xXCUuA+CFUVHmvFKkfpY6xrdZqcBlyHfQGccQgTeVI ublvoySs3LgWr0EXOgCj+HkoIdT9PZfQPbs3BkfO9G6WHXCSS/LjTSEvawIDAQAB o4IDrjCCA6owHQYDVR0OBBYEFAAUQMcS9aJYuZp6q4epzMzeaiaHMB8GA1UdIwQY MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt ZGQxMTVmOWUzMzAxLzEvQUJSQXh4TDFvbGk1bW5xcmg2bk16TjVxSm9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBwgYIKwYBBQUHAQcBAf8EggGxMIIBrTCCAWIEAgABMIIB WgMEAwXiAAMEAx8H+AMEAh+soAMEAx+s6AMEAyUauAMEAyU98AMEAyVuwAMEACWc 4gMEBC4WwAMEAC5mdAMEAy7n2AMEAi73gAMEAy7/yAMEA01IWAMEBE32UAMEBU6Z 4AMEBlJggAMEAlKjJAMEA1LEGAMEBVUfwAMEA1d5iAMEA1jUkAMEAFklagMEAFks TQMEAFks0gMEAVvgogMEAFviwQMEAFv69AMEBF5koAMEBF+PQAMEBJXooAMEA7Dx eDAMAwQCuQQ8AwQAuQQ+AwQCuQ+MAwQCuTVQAwQDuT24AwQCuT64AwQAuUFPAwQC uU6cAwQCuVvgAwQCuVwkAwQCuXJkAwQAuXQ/AwQCudE0AwQAwSd3AwQCwZdUAwQB wb18AwQBwipkAwQBwnSOAwQBwytAAwQAw4CTAwQBw726AwQAw+ojAwQD1BLwMAwD BADUVeUDBAPUVeAwRQQCAAIwPwMFACoAaMADBQMqAHjAAwUAKgECQAMFACoBApAD BQAqAgOYAwUAKgO9wAMFAyoEzAADBQMqB1MAAwUDKgtBwDANBgkqhkiG9w0BAQsF AAOCAQEAEMnbvKrOkFXvP9ncFrpasEfYzRsjePPff9w0S/ug46BFlNfS6eTGqV6e oSz89yHNcCSp+qTTi7MYfXvDbQh0ZgugxNQSBrdaP3JKSLroY/ZqRYCjrbc3leXk J/FEf6PltWyYuJQJka+T9TUPWAoL858eO1dFb1XXmVnJe+Wl69HewwF5IPFQ7oPK 04FgKN7s7eqpksZ6Mo/S93aiQPYoiYv3Zo4x8qfAqRxmao9doZi7AxmuJ5F8EjWR 0636LWSFlRin3yBf3ybfbV0DgOTPAgnKoZF+bui5kqib+NMMr0DTzg5rzZcPxs5N CfNV5v13iGAyLkTvLBVw6lm4ReOwOw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:06 2026 by rpki-client