This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/moQuVmxjsR-mYaj7vGqjSq6tBD4.roa File: moQuVmxjsR-mYaj7vGqjSq6tBD4.roa (raw, json) Hash identifier: r12qZYf01z6oZFiID2ggMHEg9yzTBTtove+KMzZqvDA= Subject key identifier: 9A:84:2E:56:6C:63:B1:1F:A6:61:A8:FB:BC:6A:A3:4A:AE:AD:04:3E Certificate issuer: /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea Certificate serial: 019B7C12A3AD92F520E1D60BC028D42EF3AF Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/moQuVmxjsR-mYaj7vGqjSq6tBD4.roa Signing time: Fri 02 Jan 2026 00:19:14 +0000 ROA not before: Fri 02 Jan 2026 00:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60187 IP address blocks: 5.150.22.0/24 maxlen: 24 5.150.23.0/24 maxlen: 24 5.150.62.0/24 maxlen: 24 5.150.64.0/24 maxlen: 24 5.150.65.0/24 maxlen: 24 5.150.66.0/24 maxlen: 24 5.150.67.0/24 maxlen: 24 5.150.68.0/24 maxlen: 24 5.150.69.0/24 maxlen: 24 5.150.70.0/24 maxlen: 24 5.150.71.0/24 maxlen: 24 5.150.74.0/24 maxlen: 24 5.150.76.0/24 maxlen: 24 5.150.80.0/20 maxlen: 20 5.150.96.0/22 maxlen: 22 5.150.96.0/24 maxlen: 24 5.150.97.0/24 maxlen: 24 5.150.98.0/24 maxlen: 24 5.150.99.0/24 maxlen: 24 5.150.100.0/22 maxlen: 22 5.150.100.0/24 maxlen: 24 5.150.101.0/24 maxlen: 24 5.150.102.0/24 maxlen: 24 5.150.103.0/24 maxlen: 24 5.150.104.0/22 maxlen: 22 5.150.104.0/24 maxlen: 24 5.150.105.0/24 maxlen: 24 5.150.106.0/24 maxlen: 24 5.150.107.0/24 maxlen: 24 5.150.108.0/22 maxlen: 22 5.150.108.0/24 maxlen: 24 5.150.109.0/24 maxlen: 24 5.150.110.0/24 maxlen: 24 5.150.111.0/24 maxlen: 24 5.150.112.0/22 maxlen: 22 5.150.112.0/24 maxlen: 24 5.150.113.0/24 maxlen: 24 5.150.114.0/24 maxlen: 24 5.150.115.0/24 maxlen: 24 5.150.116.0/22 maxlen: 22 5.150.116.0/24 maxlen: 24 5.150.117.0/24 maxlen: 24 5.150.118.0/24 maxlen: 24 5.150.119.0/24 maxlen: 24 5.150.120.0/22 maxlen: 22 5.150.120.0/24 maxlen: 24 5.150.121.0/24 maxlen: 24 5.150.122.0/24 maxlen: 24 5.150.123.0/24 maxlen: 24 5.150.124.0/22 maxlen: 24 5.150.124.0/24 maxlen: 24 5.150.125.0/24 maxlen: 24 5.150.126.0/24 maxlen: 24 5.150.127.0/24 maxlen: 24 171.33.192.0/21 maxlen: 21 171.33.192.0/22 maxlen: 22 171.33.192.0/24 maxlen: 24 171.33.193.0/24 maxlen: 24 171.33.194.0/24 maxlen: 24 171.33.195.0/24 maxlen: 24 171.33.196.0/22 maxlen: 22 171.33.196.0/24 maxlen: 24 171.33.197.0/24 maxlen: 24 171.33.198.0/24 maxlen: 24 171.33.199.0/24 maxlen: 24 171.33.200.0/21 maxlen: 21 171.33.200.0/24 maxlen: 24 171.33.201.0/24 maxlen: 24 171.33.202.0/24 maxlen: 24 171.33.203.0/24 maxlen: 24 171.33.204.0/24 maxlen: 24 171.33.205.0/24 maxlen: 24 171.33.206.0/24 maxlen: 24 171.33.207.0/24 maxlen: 24 171.33.208.0/21 maxlen: 21 171.33.208.0/24 maxlen: 24 171.33.209.0/24 maxlen: 24 171.33.210.0/24 maxlen: 24 171.33.211.0/24 maxlen: 24 171.33.212.0/24 maxlen: 24 171.33.213.0/24 maxlen: 24 171.33.214.0/24 maxlen: 24 171.33.215.0/24 maxlen: 24 171.33.216.0/21 maxlen: 21 2a02:af40::/29 maxlen: 29 2a02:af40::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:a3:ad:92:f5:20:e1:d6:0b:c0:28:d4:2e:f3:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea Validity Not Before: Jan 2 00:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a842e566c63b11fa661a8fbbc6aa34aaead043e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:99:96:09:72:02:ae:83:d1:c1:20:ef:29:05: d5:2e:7d:0f:0f:49:ad:cf:8f:d5:ba:ae:85:68:96: 5d:e6:0b:41:42:82:24:01:48:e3:e0:da:2b:2b:13: ac:4a:cf:3f:0e:9e:c2:ef:8c:63:0b:39:d5:e6:ab: a2:ed:8f:02:cd:48:19:33:05:ff:4d:8d:16:70:e6: 39:4d:22:74:71:71:87:3b:d3:6e:bf:4f:37:5a:f4: 88:75:0d:3c:b1:cc:4f:5c:81:92:fe:52:81:38:69: 33:2d:67:73:c6:eb:ac:53:f1:49:74:f0:e4:87:7f: 0b:3d:64:4a:de:f4:36:86:1c:93:67:f8:b8:b6:8a: 7b:b0:7a:ed:c1:07:ff:da:a9:27:fb:97:67:0b:e5: ea:76:43:ee:be:a1:3e:60:66:ef:a0:10:4b:af:87: 09:c3:8a:c7:f8:40:f7:07:c7:a2:47:da:b1:10:b4: 2e:3d:f6:f8:15:88:3f:f3:e7:46:05:f3:8e:84:75: f2:b0:22:3d:a6:f2:7f:f7:e2:65:e2:3f:a3:ee:33: ce:3b:e2:97:8d:da:d7:a9:7d:0c:b6:50:c1:00:9a: d4:13:a6:36:22:6b:0c:15:50:a7:d8:14:27:96:9b: 5b:d8:c9:05:34:c1:a5:c5:4f:f2:88:07:87:70:fc: ca:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:84:2E:56:6C:63:B1:1F:A6:61:A8:FB:BC:6A:A3:4A:AE:AD:04:3E X509v3 Authority Key Identifier: keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/moQuVmxjsR-mYaj7vGqjSq6tBD4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.150.22.0/23 5.150.62.0/24 5.150.64.0/21 5.150.74.0/24 5.150.76.0/24 5.150.80.0-5.150.127.255 171.33.192.0/19 IPv6: 2a02:af40::/29 Signature Algorithm: sha256WithRSAEncryption b9:51:4b:07:d7:7e:d7:73:47:73:4e:1c:dc:5e:47:eb:da:91: 1f:55:c3:6b:41:1e:b7:7b:b5:fc:e6:cc:ff:4a:2c:1d:9c:f9: dc:81:79:cc:7d:eb:b0:0d:29:38:aa:15:5c:56:37:f6:e6:52: fa:71:66:65:67:3f:b3:99:5b:0d:01:2f:d4:1a:70:28:60:93: 08:a6:49:d0:4d:f6:e0:b8:d2:4c:ef:5e:aa:89:19:a7:8e:69: f7:ee:b1:1a:be:b6:d4:ec:0b:e7:58:4a:b8:a3:c6:84:d5:87: 5e:8d:70:8b:b0:87:d6:1d:5f:18:bf:f7:ad:00:f0:84:36:e9: af:fe:c7:83:aa:0f:a3:60:07:1f:38:bd:f7:1e:53:ba:d4:d5: 99:3f:81:68:05:8c:5c:ce:b8:0a:f6:1b:24:2d:a4:e6:b4:bd: ca:b0:11:22:40:d7:95:9f:00:c1:a7:6a:f3:c6:2c:b1:b0:99: fb:93:b1:6f:4b:51:7f:d5:f5:47:93:68:e3:e4:b9:3c:02:8b: f7:d1:b7:51:bd:11:96:4a:71:ee:7f:b8:13:2e:05:7f:96:7f: 73:80:7b:e9:77:cd:1d:9a:48:5f:2e:b3:6c:a5:99:ab:dc:9c: 5b:80:06:30:99:ba:c9:68:d2:a7:04:6d:e2:cd:4a:6c:b8:6c: bd:e6:65:41 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISAZt8EqOtkvUg4dYLwCjULvOvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YmNkZTMxOWEzZGNhMmNmNjc0NGQyODgxY2E5MWI4M2Ri OWJkZWEwHhcNMjYwMTAyMDAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTg0MmU1NjZjNjNiMTFmYTY2MWE4ZmJiYzZhYTM0YWFlYWQwNDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZmWCXICroPRwSDvKQXVLn0PD0mt z4/Vuq6FaJZd5gtBQoIkAUjj4NorKxOsSs8/Dp7C74xjCznV5qui7Y8CzUgZMwX/ TY0WcOY5TSJ0cXGHO9Nuv083WvSIdQ08scxPXIGS/lKBOGkzLWdzxuusU/FJdPDk h38LPWRK3vQ2hhyTZ/i4top7sHrtwQf/2qkn+5dnC+XqdkPuvqE+YGbvoBBLr4cJ w4rH+ED3B8eiR9qxELQuPfb4FYg/8+dGBfOOhHXysCI9pvJ/9+Jl4j+j7jPOO+KX jdrXqX0MtlDBAJrUE6Y2ImsMFVCn2BQnlptb2MkFNMGlxU/yiAeHcPzKRQIDAQAB o4ICRDCCAkAwHQYDVR0OBBYEFJqELlZsY7EfpmGo+7xqo0qurQQ+MB8GA1UdIwQY MBaAFAW83jGaPcos9nRNKIHKkbg9ub3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJ6ZU1abzl5aXoyZEUwb2djcVJ1RDI1dmVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9lZDI4ZDUtNzhkMy00NWUyLWE3ZDMt Njg2N2M0YWUzMTYxLzEvbW9RdVZteGpzUi1tWWFqN3ZHcWpTcTZ0QkQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9lZDI4ZDUtNzhkMy00NWUyLWE3ZDMtNjg2N2M0YWUzMTYx LzEvQmJ6ZU1abzl5aXoyZEUwb2djcVJ1RDI1dmVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTA4BAIAATAyAwQBBZYWAwQA BZY+AwQDBZZAAwQABZZKAwQABZZMMAwDBAQFllADBAcFlgADBAWrIcAwDQQCAAIw BwMFAyoCr0AwDQYJKoZIhvcNAQELBQADggEBALlRSwfXftdzR3NOHNxeR+vakR9V w2tBHrd7tfzmzP9KLB2c+dyBecx967ANKTiqFVxWN/bmUvpxZmVnP7OZWw0BL9Qa cChgkwimSdBN9uC40kzvXqqJGaeOaffusRq+ttTsC+dYSrijxoTVh16NcIuwh9Yd Xxi/960A8IQ26a/+x4OqD6NgBx84vfceU7rU1Zk/gWgFjFzOuAr2GyQtpOa0vcqw ESJA15WfAMGnavPGLLGwmfuTsW9LUX/V9UeTaOPkuTwCi/fRt1G9EZZKce5/uBMu BX+Wf3OAe+l3zR2aSF8us2ylmavcnFuABjCZuslo0qcEbeLNSmy4bL3mZUE= -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:36 2026 by rpki-client