This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/5jc5T6Z_sKI8c_tetBYbSBO_ZFQ.roa File: 5jc5T6Z_sKI8c_tetBYbSBO_ZFQ.roa (raw, json) Hash identifier: Xc3Wpq+ly/TyH3IHLlSjNnz97xwtS4TSE8CIgheZjmI= Subject key identifier: E6:37:39:4F:A6:7F:B0:A2:3C:73:FB:5E:B4:16:1B:48:13:BF:64:54 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B360E2CDF36CE26D2E584BD3AAC9773 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/5jc5T6Z_sKI8c_tetBYbSBO_ZFQ.roa Signing time: Thu 01 Jan 2026 20:18:18 +0000 ROA not before: Thu 01 Jan 2026 20:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 5.1.46.0/24 maxlen: 24 5.57.210.0/24 maxlen: 24 31.216.60.0/24 maxlen: 24 31.222.237.0/24 maxlen: 24 31.222.244.0/24 maxlen: 24 31.222.245.0/24 maxlen: 24 31.222.246.0/24 maxlen: 24 37.140.255.0/24 maxlen: 24 45.129.1.0/24 maxlen: 24 45.129.129.0/24 maxlen: 24 45.129.130.0/24 maxlen: 24 45.129.131.0/24 maxlen: 24 45.132.51.0/24 maxlen: 24 45.135.34.0/24 maxlen: 24 45.138.4.0/24 maxlen: 24 45.138.5.0/24 maxlen: 24 45.138.6.0/24 maxlen: 24 45.138.156.0/24 maxlen: 24 45.140.66.0/24 maxlen: 24 45.140.67.0/24 maxlen: 24 45.142.37.0/24 maxlen: 24 45.144.0.0/24 maxlen: 24 45.146.26.0/24 maxlen: 24 45.159.85.0/24 maxlen: 24 62.3.1.0/24 maxlen: 24 62.3.2.0/24 maxlen: 24 62.3.3.0/24 maxlen: 24 62.3.4.0/24 maxlen: 24 62.3.23.0/24 maxlen: 24 62.68.85.0/24 maxlen: 24 62.106.69.0/24 maxlen: 24 62.204.34.0/24 maxlen: 24 62.204.38.0/24 maxlen: 24 77.246.244.0/24 maxlen: 24 80.68.148.0/24 maxlen: 24 80.68.150.0/24 maxlen: 24 80.73.242.0/24 maxlen: 24 80.73.244.0/24 maxlen: 24 80.91.211.0/24 maxlen: 24 80.91.212.0/24 maxlen: 24 84.246.81.0/24 maxlen: 24 84.246.110.0/24 maxlen: 24 89.107.12.0/24 maxlen: 24 89.248.68.0/24 maxlen: 24 91.213.85.0/24 maxlen: 24 91.242.226.0/24 maxlen: 24 91.242.237.0/24 maxlen: 24 91.242.239.0/24 maxlen: 24 91.247.78.0/24 maxlen: 24 92.119.192.0/24 maxlen: 24 93.93.206.0/24 maxlen: 24 93.157.111.0/24 maxlen: 24 93.190.120.0/24 maxlen: 24 93.190.121.0/24 maxlen: 24 94.103.179.0/24 maxlen: 24 94.103.190.0/24 maxlen: 24 94.124.75.0/24 maxlen: 24 94.124.77.0/24 maxlen: 24 94.143.224.0/24 maxlen: 24 146.19.10.0/24 maxlen: 24 146.19.15.0/24 maxlen: 24 146.19.25.0/24 maxlen: 24 146.19.31.0/24 maxlen: 24 146.19.47.0/24 maxlen: 24 146.19.61.0/24 maxlen: 24 146.19.64.0/24 maxlen: 24 146.19.65.0/24 maxlen: 24 146.19.68.0/24 maxlen: 24 146.19.72.0/24 maxlen: 24 146.19.76.0/24 maxlen: 24 146.19.96.0/24 maxlen: 24 146.19.107.0/24 maxlen: 24 146.19.109.0/24 maxlen: 24 146.19.126.0/24 maxlen: 24 146.19.136.0/24 maxlen: 24 176.100.47.0/24 maxlen: 24 176.116.8.0/24 maxlen: 24 176.116.12.0/24 maxlen: 24 176.116.24.0/24 maxlen: 24 176.116.25.0/24 maxlen: 24 176.116.28.0/24 maxlen: 24 176.222.58.0/24 maxlen: 24 178.212.136.0/24 maxlen: 24 178.212.138.0/24 maxlen: 24 185.81.71.0/24 maxlen: 24 185.140.174.0/24 maxlen: 24 185.187.16.0/24 maxlen: 24 185.187.19.0/24 maxlen: 24 185.207.213.0/24 maxlen: 24 185.222.41.0/24 maxlen: 24 193.32.164.0/24 maxlen: 24 193.32.165.0/24 maxlen: 24 193.32.166.0/24 maxlen: 24 193.32.167.0/24 maxlen: 24 193.36.231.0/24 maxlen: 24 193.53.169.0/24 maxlen: 24 193.58.176.0/24 maxlen: 24 193.58.177.0/24 maxlen: 24 193.160.216.0/24 maxlen: 24 193.160.217.0/24 maxlen: 24 193.160.218.0/24 maxlen: 24 193.163.16.0/24 maxlen: 24 193.163.17.0/24 maxlen: 24 193.163.18.0/24 maxlen: 24 193.163.20.0/24 maxlen: 24 193.201.127.0/24 maxlen: 24 194.26.136.0/24 maxlen: 24 194.26.233.0/24 maxlen: 24 194.104.142.0/24 maxlen: 24 194.104.143.0/24 maxlen: 24 194.104.227.0/24 maxlen: 24 194.104.229.0/24 maxlen: 24 194.104.237.0/24 maxlen: 24 194.104.238.0/24 maxlen: 24 195.64.111.0/24 maxlen: 24 195.96.149.0/24 maxlen: 24 195.191.99.0/24 maxlen: 24 195.225.99.0/24 maxlen: 24 212.52.27.0/24 maxlen: 24 212.52.30.0/24 maxlen: 24 212.52.31.0/24 maxlen: 24 213.109.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:0e:2c:df:36:ce:26:d2:e5:84:bd:3a:ac:97:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e637394fa67fb0a23c73fb5eb4161b4813bf6454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b8:8b:95:1c:8f:21:5e:74:a0:7b:1f:19:f3: 0e:bb:54:54:13:e5:73:12:d9:1c:48:08:87:b7:35: d3:b0:ae:20:f2:8a:4b:b5:e7:cd:d8:4d:01:ef:2a: af:f7:37:a5:c0:da:a0:5f:fd:cd:94:82:4e:38:e9: b8:b2:11:c1:24:ac:89:7f:30:81:24:86:67:9f:ae: 99:fd:9a:66:8d:f6:71:0e:f6:2a:6e:7f:56:81:76: e9:e4:62:14:46:ab:25:3e:45:5e:1d:8c:c6:eb:6b: 6e:47:44:9a:d8:fe:3e:66:e8:40:fa:9e:05:fc:12: fe:52:c7:5e:4c:52:01:03:21:4c:1b:a4:9e:71:2f: d5:f0:f5:eb:d0:ec:46:68:e7:89:df:1b:e7:9a:5f: 9b:a9:cc:21:d0:a9:0e:bd:cc:b5:02:79:44:56:2f: a3:8d:14:52:aa:3e:57:ce:37:e7:10:20:b0:1e:9f: bc:f6:26:20:63:b8:7f:cc:8d:18:07:a5:93:11:2e: 96:38:92:01:23:f7:55:2f:41:9b:1a:46:53:f1:7b: e5:04:82:1b:1f:ff:df:f7:a8:5c:18:f9:fe:9f:72: c7:f2:9c:b2:45:c0:0c:37:75:56:2d:86:a1:db:d5: d4:56:68:9f:78:f2:e1:a6:ce:19:d8:7f:a5:39:83: 38:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:37:39:4F:A6:7F:B0:A2:3C:73:FB:5E:B4:16:1B:48:13:BF:64:54 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/5jc5T6Z_sKI8c_tetBYbSBO_ZFQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.46.0/24 5.57.210.0/24 31.216.60.0/24 31.222.237.0/24 31.222.244.0-31.222.246.255 37.140.255.0/24 45.129.1.0/24 45.129.129.0-45.129.131.255 45.132.51.0/24 45.135.34.0/24 45.138.4.0-45.138.6.255 45.138.156.0/24 45.140.66.0/23 45.142.37.0/24 45.144.0.0/24 45.146.26.0/24 45.159.85.0/24 62.3.1.0-62.3.4.255 62.3.23.0/24 62.68.85.0/24 62.106.69.0/24 62.204.34.0/24 62.204.38.0/24 77.246.244.0/24 80.68.148.0/24 80.68.150.0/24 80.73.242.0/24 80.73.244.0/24 80.91.211.0-80.91.212.255 84.246.81.0/24 84.246.110.0/24 89.107.12.0/24 89.248.68.0/24 91.213.85.0/24 91.242.226.0/24 91.242.237.0/24 91.242.239.0/24 91.247.78.0/24 92.119.192.0/24 93.93.206.0/24 93.157.111.0/24 93.190.120.0/23 94.103.179.0/24 94.103.190.0/24 94.124.75.0/24 94.124.77.0/24 94.143.224.0/24 146.19.10.0/24 146.19.15.0/24 146.19.25.0/24 146.19.31.0/24 146.19.47.0/24 146.19.61.0/24 146.19.64.0/23 146.19.68.0/24 146.19.72.0/24 146.19.76.0/24 146.19.96.0/24 146.19.107.0/24 146.19.109.0/24 146.19.126.0/24 146.19.136.0/24 176.100.47.0/24 176.116.8.0/24 176.116.12.0/24 176.116.24.0/23 176.116.28.0/24 176.222.58.0/24 178.212.136.0/24 178.212.138.0/24 185.81.71.0/24 185.140.174.0/24 185.187.16.0/24 185.187.19.0/24 185.207.213.0/24 185.222.41.0/24 193.32.164.0/22 193.36.231.0/24 193.53.169.0/24 193.58.176.0/23 193.160.216.0-193.160.218.255 193.163.16.0-193.163.18.255 193.163.20.0/24 193.201.127.0/24 194.26.136.0/24 194.26.233.0/24 194.104.142.0/23 194.104.227.0/24 194.104.229.0/24 194.104.237.0-194.104.238.255 195.64.111.0/24 195.96.149.0/24 195.191.99.0/24 195.225.99.0/24 212.52.27.0/24 212.52.30.0/23 213.109.196.0/24 Signature Algorithm: sha256WithRSAEncryption 59:79:9b:16:13:ae:55:97:8f:6c:5d:ae:ac:19:f4:74:c5:75: e9:2e:41:db:ae:d5:c7:4d:d6:11:44:7e:cf:76:04:4f:81:90: 4a:c9:d5:4a:c0:8e:67:ca:d5:d9:d1:95:8f:d1:22:ef:bb:17: 61:2f:75:d6:30:0a:38:fd:84:92:7f:23:e7:fe:0f:c0:ae:ae: f8:30:9d:ed:40:b8:dd:2b:36:11:2a:85:17:10:26:4f:c9:c5: f6:54:78:07:48:35:7a:46:9f:ed:57:00:42:e1:98:1b:fc:fa: bd:ee:84:55:4b:c7:78:a7:aa:da:a7:a2:af:0f:4e:03:86:e2: 1b:7e:9f:69:f4:2d:4c:bd:b0:2a:24:c8:98:3a:b6:c4:c0:50: c4:51:7d:21:31:6f:7e:28:63:d0:1a:5c:f2:e5:8e:77:42:a4: 5d:b1:0d:7c:97:d0:ae:dc:02:81:73:53:bd:7a:f3:19:6b:0d: db:21:c5:ef:59:47:eb:ad:2a:46:56:13:1d:f5:19:46:c7:a3: a4:0a:c6:82:38:9f:08:2f:19:de:63:5f:4d:2e:45:d3:07:f1: 19:72:ae:28:7b:6a:22:5b:a9:5c:b4:8f:a4:e5:c3:0f:46:8e: a2:ce:99:bd:36:8c:0e:ef:c7:01:68:b3:7e:50:9a:cd:b3:ce: da:c9:97:78 -----BEGIN CERTIFICATE----- MIIHhzCCBm+gAwIBAgISAZt7Ng4s3zbOJtLlhL06rJdzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjM3Mzk0ZmE2N2ZiMGEyM2M3M2ZiNWViNDE2MWI0ODEzYmY2NDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbiLlRyPIV50oHsfGfMOu1RUE+Vz EtkcSAiHtzXTsK4g8opLtefN2E0B7yqv9zelwNqgX/3NlIJOOOm4shHBJKyJfzCB JIZnn66Z/ZpmjfZxDvYqbn9WgXbp5GIURqslPkVeHYzG62tuR0Sa2P4+ZuhA+p4F /BL+UsdeTFIBAyFMG6SecS/V8PXr0OxGaOeJ3xvnml+bqcwh0KkOvcy1AnlEVi+j jRRSqj5XzjfnECCwHp+89iYgY7h/zI0YB6WTES6WOJIBI/dVL0GbGkZT8XvlBIIb H//f96hcGPn+n3LH8pyyRcAMN3VWLYah29XUVmifePLhps4Z2H+lOYM4LwIDAQAB o4IEkzCCBI8wHQYDVR0OBBYEFOY3OU+mf7CiPHP7XrQWG0gTv2RUMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvNWpjNVQ2Wl9zS0k4Y190ZXRCWWJTQk9fWkZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICpwYIKwYBBQUHAQcBAf8EggKWMIICkjCCAo4EAgABMIIC hgMEAAUBLgMEAAU50gMEAB/YPAMEAB/e7TAMAwQCH970AwQAH972AwQAJYz/AwQA LYEBMAwDBAAtgYEDBAItgYADBAAthDMDBAAthyIwDAMEAi2KBAMEAC2KBgMEAC2K nAMEAS2MQgMEAC2OJQMEAC2QAAMEAC2SGgMEAC2fVTAMAwQAPgMBAwQAPgMEAwQA PgMXAwQAPkRVAwQAPmpFAwQAPswiAwQAPswmAwQATfb0AwQAUESUAwQAUESWAwQA UEnyAwQAUEn0MAwDBABQW9MDBABQW9QDBABU9lEDBABU9m4DBABZawwDBABZ+EQD BABb1VUDBABb8uIDBABb8u0DBABb8u8DBABb904DBABcd8ADBABdXc4DBABdnW8D BAFdvngDBABeZ7MDBABeZ74DBABefEsDBABefE0DBABej+ADBACSEwoDBACSEw8D BACSExkDBACSEx8DBACSEy8DBACSEz0DBAGSE0ADBACSE0QDBACSE0gDBACSE0wD BACSE2ADBACSE2sDBACSE20DBACSE34DBACSE4gDBACwZC8DBACwdAgDBACwdAwD BAGwdBgDBACwdBwDBACw3joDBACy1IgDBACy1IoDBAC5UUcDBAC5jK4DBAC5uxAD BAC5uxMDBAC5z9UDBAC53ikDBALBIKQDBADBJOcDBADBNakDBAHBOrAwDAMEA8Gg 2AMEAMGg2jAMAwQEwaMQAwQAwaMSAwQAwaMUAwQAwcl/AwQAwhqIAwQAwhrpAwQB wmiOAwQAwmjjAwQAwmjlMAwDBADCaO0DBADCaO4DBADDQG8DBADDYJUDBADDv2MD BADD4WMDBADUNBsDBAHUNB4DBADVbcQwDQYJKoZIhvcNAQELBQADggEBAFl5mxYT rlWXj2xdrqwZ9HTFdekuQduu1cdN1hFEfs92BE+BkErJ1UrAjmfK1dnRlY/RIu+7 F2EvddYwCjj9hJJ/I+f+D8Curvgwne1AuN0rNhEqhRcQJk/JxfZUeAdINXpGn+1X AELhmBv8+r3uhFVLx3inqtqnoq8PTgOG4ht+n2n0LUy9sCokyJg6tsTAUMRRfSEx b34oY9AaXPLljndCpF2xDXyX0K7cAoFzU7168xlrDdshxe9ZR+utKkZWEx31GUbH o6QKxoI4nwgvGd5jX00uRdMH8Rlyrih7aiJbqVy0j6Tlww9GjqLOmb02jA7vxwFo s35Qms2zztrJl3g= -----END CERTIFICATE-----Generated at Thu Jan 15 13:17:54 2026 by rpki-client