This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/Dz4qudxOOcrQ8QXmqIMD2XiSzUY.roa File: Dz4qudxOOcrQ8QXmqIMD2XiSzUY.roa (raw, json) Hash identifier: FrWcYiJYGSm1u+Ku7WujbY8jd61FJPRUuxdCXEW2jb8= Subject key identifier: 0F:3E:2A:B9:DC:4E:39:CA:D0:F1:05:E6:A8:83:03:D9:78:92:CD:46 Certificate issuer: /CN=e9aab1446100a8fce03df19d755e06329ee24713 Certificate serial: 019B85C76B9DA99237AED273A504DD88EA3F Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/Dz4qudxOOcrQ8QXmqIMD2XiSzUY.roa Signing time: Sat 03 Jan 2026 21:33:17 +0000 ROA not before: Sat 03 Jan 2026 21:33:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42708 IP address blocks: 5.178.72.0/21 maxlen: 21 31.192.224.0/21 maxlen: 21 31.192.228.0/24 maxlen: 24 37.152.56.0/21 maxlen: 21 46.21.96.0/20 maxlen: 24 46.21.100.0/24 maxlen: 24 46.246.0.0/17 maxlen: 17 79.99.0.0/21 maxlen: 21 80.67.0.0/20 maxlen: 20 91.213.246.0/24 maxlen: 24 91.217.189.0/24 maxlen: 24 91.223.232.0/24 maxlen: 24 91.228.193.0/24 maxlen: 24 91.228.194.0/23 maxlen: 23 94.247.168.0/21 maxlen: 21 109.74.0.0/20 maxlen: 20 159.253.24.0/21 maxlen: 21 159.253.28.0/24 maxlen: 24 159.253.29.0/24 maxlen: 24 178.73.192.0/18 maxlen: 18 178.73.224.0/19 maxlen: 19 185.11.96.0/22 maxlen: 22 185.21.88.0/22 maxlen: 22 185.39.144.0/22 maxlen: 22 185.118.36.0/22 maxlen: 22 185.157.220.0/22 maxlen: 22 188.126.64.0/19 maxlen: 19 193.108.196.0/24 maxlen: 24 193.201.96.0/24 maxlen: 24 194.54.164.0/22 maxlen: 22 195.20.206.0/23 maxlen: 23 195.149.101.0/24 maxlen: 24 195.238.76.0/23 maxlen: 23 195.246.120.0/23 maxlen: 23 212.112.0.0/19 maxlen: 19 2a00:1a28::/32 maxlen: 32 2a02:750::/29 maxlen: 48 2a02:750:8::/48 maxlen: 48 2a02:750:10::/48 maxlen: 48 2a02:750:14::/48 maxlen: 48 2a02:e400::/29 maxlen: 29 2a03:5e00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:85:c7:6b:9d:a9:92:37:ae:d2:73:a5:04:dd:88:ea:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713 Validity Not Before: Jan 3 21:33:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f3e2ab9dc4e39cad0f105e6a88303d97892cd46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b8:b2:c9:86:46:1e:5a:76:a3:2c:5c:68:51: f5:8a:c0:88:da:c6:68:06:35:59:ed:bf:5b:5a:77: 1b:fb:ef:b3:09:40:73:9f:b9:4d:75:c1:24:c8:9b: 0b:fd:88:90:5d:6d:22:ee:34:fa:46:75:82:78:d7: dd:23:f9:44:90:bd:eb:82:81:6d:05:0c:9f:5f:cf: 70:80:d2:76:7c:a4:6c:85:77:28:ca:d9:29:dd:56: 2e:a7:1b:a9:a7:db:87:3b:76:42:65:36:cf:ea:12: bb:c0:a1:80:97:95:91:0d:87:db:ec:8b:a3:87:44: 12:6c:b7:40:87:0f:d5:2e:52:00:c0:34:d8:90:a2: 91:fa:1b:40:19:e3:e0:28:1e:bb:82:9c:38:07:d2: 1c:91:d9:3e:5f:f0:62:32:3a:ba:c1:2f:ab:9f:f7: 16:e9:cd:46:34:08:d8:5f:40:2f:8a:2f:5d:4e:22: 38:f0:b8:8b:7b:8c:a0:42:7e:50:09:21:d3:e3:ac: f8:91:6a:be:b7:26:19:7c:11:43:86:08:76:b8:5a: 89:73:d7:f4:8c:2b:3f:f8:21:93:bc:e5:57:44:b6: 7f:e4:de:51:8f:18:ba:79:de:17:ab:9b:9c:42:a1: b9:72:f3:f0:28:c3:65:91:48:31:97:e2:cb:a9:92: 57:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3E:2A:B9:DC:4E:39:CA:D0:F1:05:E6:A8:83:03:D9:78:92:CD:46 X509v3 Authority Key Identifier: keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/Dz4qudxOOcrQ8QXmqIMD2XiSzUY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.178.72.0/21 31.192.224.0/21 37.152.56.0/21 46.21.96.0/20 46.246.0.0/17 79.99.0.0/21 80.67.0.0/20 91.213.246.0/24 91.217.189.0/24 91.223.232.0/24 91.228.193.0-91.228.195.255 94.247.168.0/21 109.74.0.0/20 159.253.24.0/21 178.73.192.0/18 185.11.96.0/22 185.21.88.0/22 185.39.144.0/22 185.118.36.0/22 185.157.220.0/22 188.126.64.0/19 193.108.196.0/24 193.201.96.0/24 194.54.164.0/22 195.20.206.0/23 195.149.101.0/24 195.238.76.0/23 195.246.120.0/23 212.112.0.0/19 IPv6: 2a00:1a28::/32 2a02:750::/29 2a02:e400::/29 2a03:5e00::/32 Signature Algorithm: sha256WithRSAEncryption 75:8d:74:e0:a6:7b:a8:88:3a:f0:66:2a:c7:b9:fe:e4:7a:49: 6d:31:4a:3d:24:38:25:15:f4:94:b9:1d:2f:f3:07:14:f2:f1: d2:3a:70:ea:d7:3c:03:95:71:b8:b0:59:a5:1f:34:b8:42:8f: 45:59:73:f9:ed:1e:e7:ae:88:02:e0:c2:6b:e5:3e:d1:58:5b: 42:49:56:db:9d:be:5e:13:12:7b:64:11:fe:9e:7c:ad:7e:25: e7:32:bb:33:0f:8a:c4:60:13:3e:b2:63:b2:2e:5b:b0:99:92: d3:06:6f:4e:df:dd:55:6c:98:e0:61:d3:5b:69:29:11:0f:17: b4:f7:35:e5:50:60:81:aa:0c:41:8e:1c:f7:d5:26:ea:bb:f4: 69:d5:e1:3a:a3:56:af:99:39:0f:cb:4f:d9:8c:ab:b1:df:20: 19:92:41:cf:6e:39:97:3f:0e:36:30:17:81:d5:d5:9b:4d:cf: f3:0c:b8:87:01:2c:76:68:30:10:4c:d0:3e:1d:25:1f:51:45: 64:76:9b:3a:c3:d9:5c:79:4c:f9:9a:21:66:82:82:60:1f:26: 86:66:a0:f6:b6:87:41:22:86:b0:6c:93:4c:5a:ff:8b:70:8d: b3:d9:a4:b1:e8:79:00:4b:e3:c4:e6:4b:fb:54:4d:5a:98:1d: ff:59:3d:15 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgISAZuFx2udqZI3rtJzpQTdiOo/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5YWFiMTQ0NjEwMGE4ZmNlMDNkZjE5ZDc1NWUwNjMyOWVl MjQ3MTMwHhcNMjYwMTAzMjEzMzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjNlMmFiOWRjNGUzOWNhZDBmMTA1ZTZhODgzMDNkOTc4OTJjZDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7iyyYZGHlp2oyxcaFH1isCI2sZo BjVZ7b9bWncb+++zCUBzn7lNdcEkyJsL/YiQXW0i7jT6RnWCeNfdI/lEkL3rgoFt BQyfX89wgNJ2fKRshXcoytkp3VYupxupp9uHO3ZCZTbP6hK7wKGAl5WRDYfb7Iuj h0QSbLdAhw/VLlIAwDTYkKKR+htAGePgKB67gpw4B9Ickdk+X/BiMjq6wS+rn/cW 6c1GNAjYX0Avii9dTiI48LiLe4ygQn5QCSHT46z4kWq+tyYZfBFDhgh2uFqJc9f0 jCs/+CGTvOVXRLZ/5N5Rjxi6ed4Xq5ucQqG5cvPwKMNlkUgxl+LLqZJXTwIDAQAB o4IC4jCCAt4wHQYDVR0OBBYEFA8+KrncTjnK0PEF5qiDA9l4ks1GMB8GA1UdIwQY MBaAFOmqsURhAKj84D3xnXVeBjKe4kcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYt YTBkYzM1NGY0Y2EzLzEvRHo0cXVkeE9PY3JROFFYbXFJTUQyWGlTelVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYtYTBkYzM1NGY0Y2Ez LzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH3BggrBgEFBQcBBwEB/wSB5zCB5DCBvQQCAAEwgbYDBAMF skgDBAMfwOADBAMlmDgDBAQuFWADBAcu9gADBANPYwADBARQQwADBABb1fYDBABb 2b0DBABb3+gwDAMEAFvkwQMEAlvkwAMEA173qAMEBG1KAAMEA5/9GAMEBrJJwAME ArkLYAMEArkVWAMEArknkAMEArl2JAMEArmd3AMEBbx+QAMEAMFsxAMEAMHJYAME AsI2pAMEAcMUzgMEAMOVZQMEAcPuTAMEAcP2eAMEBdRwADAiBAIAAjAcAwUAKgAa KAMFAyoCB1ADBQMqAuQAAwUAKgNeADANBgkqhkiG9w0BAQsFAAOCAQEAdY104KZ7 qIg68GYqx7n+5HpJbTFKPSQ4JRX0lLkdL/MHFPLx0jpw6tc8A5VxuLBZpR80uEKP RVlz+e0e566IAuDCa+U+0VhbQklW252+XhMSe2QR/p58rX4l5zK7Mw+KxGATPrJj si5bsJmS0wZvTt/dVWyY4GHTW2kpEQ8XtPc15VBggaoMQY4c99Um6rv0adXhOqNW r5k5D8tP2Yyrsd8gGZJBz245lz8ONjAXgdXVm03P8wy4hwEsdmgwEEzQPh0lH1FF ZHabOsPZXHlM+ZohZoKCYB8mhmag9raHQSKGsGyTTFr/i3CNs9mkseh5AEvjxOZL +1RNWpgd/1k9FQ== -----END CERTIFICATE-----Generated at Mon Jan 19 17:50:12 2026 by rpki-client