This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/qFfR4BwabkEdIuHDb3YSpCgG318.roa File: qFfR4BwabkEdIuHDb3YSpCgG318.roa (raw, json) Hash identifier: 35sGz2BhZx04yisf+cIHm8nknV5jmDKfOswIfuLZxMc= Subject key identifier: A8:57:D1:E0:1C:1A:6E:41:1D:22:E1:C3:6F:76:12:A4:28:06:DF:5F Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692 Certificate serial: 019B7CEE626C446F51E0504FEEF791DFD79C Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/qFfR4BwabkEdIuHDb3YSpCgG318.roa Signing time: Fri 02 Jan 2026 04:19:16 +0000 ROA not before: Fri 02 Jan 2026 04:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2860 IP address blocks: 62.169.64.0/18 maxlen: 18 78.130.0.0/17 maxlen: 17 79.168.0.0/15 maxlen: 15 79.168.0.0/18 maxlen: 18 79.168.64.0/18 maxlen: 18 79.168.128.0/18 maxlen: 18 79.168.192.0/18 maxlen: 18 79.169.0.0/18 maxlen: 18 79.169.64.0/18 maxlen: 18 79.169.128.0/18 maxlen: 18 79.169.192.0/18 maxlen: 18 80.243.80.0/20 maxlen: 20 81.84.0.0/16 maxlen: 16 81.84.0.0/18 maxlen: 18 81.84.64.0/18 maxlen: 18 81.84.128.0/18 maxlen: 18 81.84.192.0/18 maxlen: 18 83.132.0.0/16 maxlen: 16 83.132.0.0/18 maxlen: 18 83.132.64.0/18 maxlen: 18 83.132.128.0/18 maxlen: 18 83.132.192.0/18 maxlen: 18 83.144.128.0/18 maxlen: 18 85.138.0.0/15 maxlen: 15 85.138.0.0/18 maxlen: 18 85.138.64.0/18 maxlen: 18 85.138.128.0/18 maxlen: 18 85.138.192.0/18 maxlen: 18 85.139.0.0/18 maxlen: 18 85.139.64.0/18 maxlen: 18 85.139.128.0/18 maxlen: 18 85.139.192.0/18 maxlen: 18 87.196.0.0/16 maxlen: 16 87.196.0.0/18 maxlen: 18 87.196.64.0/19 maxlen: 19 88.157.0.0/18 maxlen: 18 88.157.134.0/24 maxlen: 24 88.157.230.0/24 maxlen: 24 88.157.231.0/24 maxlen: 24 88.210.64.0/18 maxlen: 18 89.152.0.0/14 maxlen: 14 89.152.0.0/18 maxlen: 18 89.152.64.0/18 maxlen: 18 89.152.128.0/18 maxlen: 18 89.152.192.0/18 maxlen: 18 89.153.0.0/18 maxlen: 18 89.153.64.0/18 maxlen: 18 89.153.128.0/18 maxlen: 18 89.153.192.0/18 maxlen: 18 89.154.0.0/18 maxlen: 18 89.154.64.0/18 maxlen: 18 89.154.128.0/18 maxlen: 18 89.154.192.0/18 maxlen: 18 89.155.0.0/18 maxlen: 18 89.155.64.0/18 maxlen: 18 89.155.128.0/18 maxlen: 18 89.155.192.0/18 maxlen: 18 89.180.0.0/15 maxlen: 15 89.180.0.0/16 maxlen: 16 89.180.128.0/18 maxlen: 18 89.181.0.0/16 maxlen: 16 89.181.128.0/18 maxlen: 18 89.181.192.0/18 maxlen: 18 93.102.0.0/16 maxlen: 16 93.102.0.0/18 maxlen: 18 93.102.64.0/18 maxlen: 18 94.132.0.0/15 maxlen: 15 94.132.0.0/18 maxlen: 18 94.132.64.0/18 maxlen: 18 94.132.128.0/18 maxlen: 18 94.132.192.0/18 maxlen: 18 94.133.0.0/18 maxlen: 18 94.133.64.0/18 maxlen: 18 94.133.128.0/18 maxlen: 18 94.133.192.0/18 maxlen: 18 95.92.0.0/14 maxlen: 14 95.92.0.0/18 maxlen: 18 95.92.64.0/18 maxlen: 18 95.92.128.0/18 maxlen: 18 95.92.192.0/18 maxlen: 18 95.93.0.0/18 maxlen: 18 95.93.64.0/18 maxlen: 18 95.93.128.0/18 maxlen: 18 95.93.192.0/18 maxlen: 18 95.94.0.0/18 maxlen: 18 95.94.64.0/18 maxlen: 18 95.94.128.0/18 maxlen: 18 95.94.192.0/18 maxlen: 18 95.95.0.0/18 maxlen: 18 95.95.64.0/18 maxlen: 18 95.95.128.0/18 maxlen: 18 95.95.192.0/18 maxlen: 18 109.48.0.0/14 maxlen: 14 109.48.0.0/18 maxlen: 18 109.48.64.0/18 maxlen: 18 109.48.128.0/18 maxlen: 18 109.48.192.0/18 maxlen: 18 109.49.0.0/18 maxlen: 18 109.49.64.0/18 maxlen: 18 109.49.128.0/18 maxlen: 18 109.49.192.0/18 maxlen: 18 109.50.64.0/18 maxlen: 18 109.50.128.0/18 maxlen: 18 109.50.192.0/18 maxlen: 18 109.51.0.0/18 maxlen: 18 109.51.64.0/18 maxlen: 18 109.51.128.0/18 maxlen: 18 109.51.192.0/18 maxlen: 18 185.224.164.0/22 maxlen: 22 212.113.160.0/19 maxlen: 19 213.22.0.0/16 maxlen: 16 213.22.0.0/18 maxlen: 18 213.22.64.0/18 maxlen: 18 213.22.128.0/18 maxlen: 18 213.22.192.0/18 maxlen: 18 217.70.64.0/20 maxlen: 20 2001:1588::/29 maxlen: 29 2a01:8::/29 maxlen: 29 2a01:8:8011::/48 maxlen: 48 2a01:10::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:62:6c:44:6f:51:e0:50:4f:ee:f7:91:df:d7:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692 Validity Not Before: Jan 2 04:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a857d1e01c1a6e411d22e1c36f7612a42806df5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d5:35:3e:5e:a1:10:e4:92:2c:9a:a8:5e:1e: ee:2d:c6:d5:41:5c:4b:b0:64:a6:3d:14:dd:52:16: 6b:9c:27:6b:e2:f3:b2:5d:4e:1d:c6:4f:4d:20:95: d4:bd:b5:83:39:6b:9e:ee:bb:f8:d4:9c:e8:4c:9c: 08:86:31:e1:4b:be:bf:b3:fd:ca:63:c7:96:5f:91: 7d:8d:7e:4a:2c:1c:0b:03:4a:5e:ef:03:2f:bb:33: 23:1f:1d:26:66:7e:f6:14:be:93:a7:27:ea:42:25: 44:4e:7a:2b:50:73:3f:51:b3:ba:cb:22:3b:02:43: fb:b8:bd:bb:01:52:96:05:97:7a:88:6c:9b:5c:0d: 73:03:72:3d:13:39:87:dd:4a:11:f6:c3:cd:6c:7a: d6:23:93:44:ba:c4:a9:38:41:e5:d2:61:15:ee:31: 3f:e1:57:d2:b6:20:93:f7:db:02:d9:33:f3:8c:90: eb:95:fe:2f:d8:eb:a4:c6:33:6f:4b:64:26:c1:62: 3b:c0:d0:60:79:58:ff:3c:ae:3b:7e:e7:de:d2:bb: 97:c1:7b:e8:42:03:af:b0:fa:f6:68:a5:5c:51:96: 88:aa:18:6c:b3:0b:3f:b6:a9:0b:31:d2:fc:32:17: 8f:6d:a3:76:c1:5e:a1:e6:ea:e8:e6:0a:49:ff:e8: 76:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:57:D1:E0:1C:1A:6E:41:1D:22:E1:C3:6F:76:12:A4:28:06:DF:5F X509v3 Authority Key Identifier: keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/qFfR4BwabkEdIuHDb3YSpCgG318.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.169.64.0/18 78.130.0.0/17 79.168.0.0/15 80.243.80.0/20 81.84.0.0/16 83.132.0.0/16 83.144.128.0/18 85.138.0.0/15 87.196.0.0/16 88.157.0.0/18 88.157.134.0/24 88.157.230.0/23 88.210.64.0/18 89.152.0.0/14 89.180.0.0/15 93.102.0.0/16 94.132.0.0/15 95.92.0.0/14 109.48.0.0/14 185.224.164.0/22 212.113.160.0/19 213.22.0.0/16 217.70.64.0/20 IPv6: 2001:1588::/29 2a01:8::-2a01:17:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 2a:c8:77:44:4b:c6:4e:1b:7c:ea:bb:ce:76:f8:9e:6d:17:ad: 7b:a6:53:49:5a:e5:59:c3:d3:89:b7:5f:95:ad:e4:5e:11:4d: 9f:46:77:fd:e9:1b:db:72:9d:77:0b:98:09:90:ae:e8:9b:3a: 24:78:e7:d6:b6:d7:94:75:f7:bc:01:7b:91:9f:6f:fd:a9:f3: 4f:4d:bd:89:f6:08:24:0e:ab:39:33:59:d1:63:be:e2:80:44: f1:91:78:78:62:14:55:97:89:c5:dc:e6:25:0e:70:38:75:14: 57:9a:62:46:d1:46:c0:84:f8:cd:c2:23:3b:6b:29:99:b0:7c: 86:d4:2e:71:8c:39:b7:1e:a1:0e:55:dc:9b:9a:61:c6:2b:92: 6d:56:29:1a:40:c1:d9:0a:ac:a1:6d:ec:81:9f:4a:1e:a9:e7: 37:0a:d6:52:bd:f8:48:ca:93:ac:e4:20:be:e1:fd:46:4d:65: 73:5e:3d:a6:bf:a7:ce:d7:37:be:9e:f9:6e:dc:43:13:bd:11: ab:8e:4d:6b:d6:f1:df:ec:c2:7c:3e:c6:02:80:9f:95:71:f9: 4d:df:6d:27:94:96:9b:4e:bf:8f:d6:5a:70:92:d1:03:3b:25: fc:10:02:b7:47:10:cf:3f:4e:e1:1e:16:7d:ad:3e:8e:db:1d: c7:2e:16:f9 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgISAZt87mJsRG9R4FBP7veR39ecMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTlmMDUyYmM5ZTcyODQ4ODgwNzQzOTBjOWQwYmMxMjc2 MDY2OTIwHhcNMjYwMTAyMDQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODU3ZDFlMDFjMWE2ZTQxMWQyMmUxYzM2Zjc2MTJhNDI4MDZkZjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtU1Pl6hEOSSLJqoXh7uLcbVQVxL sGSmPRTdUhZrnCdr4vOyXU4dxk9NIJXUvbWDOWue7rv41JzoTJwIhjHhS76/s/3K Y8eWX5F9jX5KLBwLA0pe7wMvuzMjHx0mZn72FL6TpyfqQiVETnorUHM/UbO6yyI7 AkP7uL27AVKWBZd6iGybXA1zA3I9EzmH3UoR9sPNbHrWI5NEusSpOEHl0mEV7jE/ 4VfStiCT99sC2TPzjJDrlf4v2OukxjNvS2QmwWI7wNBgeVj/PK47fufe0ruXwXvo QgOvsPr2aKVcUZaIqhhssws/tqkLMdL8MhePbaN2wV6h5uro5gpJ/+h2UQIDAQAB o4ICpDCCAqAwHQYDVR0OBBYEFKhX0eAcGm5BHSLhw292EqQoBt9fMB8GA1UdIwQY MBaAFBMZ8FK8nnKEiIB0OQydC8EnYGaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kNWJiY2UtNDIyMC00ZWM0LThhZjUt MmMxYTc3MzBiZDI1LzEvcUZmUjRCd2Fia0VkSXVIRGIzWVNwQ2dHMzE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kNWJiY2UtNDIyMC00ZWM0LThhZjUtMmMxYTc3MzBiZDI1 LzEvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG5BggrBgEFBQcBBwEB/wSBqTCBpjCBhAQCAAEwfgMEBj6p QAMEB06CAAMDAU+oAwQEUPNQAwMAUVQDAwBThAMEBlOQgAMDAVWKAwMAV8QDBAZY nQADBABYnYYDBAFYneYDBAZY0kADAwJZmAMDAVm0AwMAXWYDAwFehAMDAl9cAwMC bTADBAK54KQDBAXUcaADAwDVFgMEBNlGQDAdBAIAAjAXAwUDIAEViDAOAwUDKgEA CAMFAyoBABAwDQYJKoZIhvcNAQELBQADggEBACrId0RLxk4bfOq7znb4nm0XrXum U0la5VnD04m3X5Wt5F4RTZ9Gd/3pG9tynXcLmAmQruibOiR459a215R197wBe5Gf b/2p809NvYn2CCQOqzkzWdFjvuKARPGReHhiFFWXicXc5iUOcDh1FFeaYkbRRsCE +M3CIztrKZmwfIbULnGMObceoQ5V3JuaYcYrkm1WKRpAwdkKrKFt7IGfSh6p5zcK 1lK9+EjKk6zkIL7h/UZNZXNePaa/p87XN76e+W7cQxO9EauOTWvW8d/swnw+xgKA n5Vx+U3fbSeUlptOv4/WWnCS0QM7JfwQArdHEM8/TuEeFn2tPo7bHccuFvk= -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:11 2026 by rpki-client