This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/g6immR08ez_PJK8dIgtg7omttDY.roa File: g6immR08ez_PJK8dIgtg7omttDY.roa (raw, json) Hash identifier: jJ6N9+cHhUODYWv28wmzFGIGDb2zfUO8do2oFdmATg4= Subject key identifier: 83:A8:A6:99:1D:3C:7B:3F:CF:24:AF:1D:22:0B:60:EE:89:AD:B4:36 Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019BC5F753E6CBFD041F41B156352187CE1E Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/g6immR08ez_PJK8dIgtg7omttDY.roa Signing time: Fri 16 Jan 2026 08:41:19 +0000 ROA not before: Fri 16 Jan 2026 08:41:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209372 IP address blocks: 5.104.72.0/24 maxlen: 24 5.104.74.0/24 maxlen: 24 31.40.192.0/24 maxlen: 24 31.40.194.0/24 maxlen: 24 45.130.184.0/24 maxlen: 24 45.130.185.0/24 maxlen: 24 45.130.186.0/24 maxlen: 24 45.130.187.0/24 maxlen: 24 45.140.4.0/24 maxlen: 24 45.140.6.0/24 maxlen: 24 45.140.7.0/24 maxlen: 24 45.152.136.0/24 maxlen: 24 45.152.137.0/24 maxlen: 24 45.154.120.0/22 maxlen: 24 77.83.20.0/22 maxlen: 24 77.83.48.0/23 maxlen: 24 77.83.48.0/24 maxlen: 24 77.83.49.0/24 maxlen: 24 77.83.50.0/23 maxlen: 24 84.252.64.0/22 maxlen: 24 85.31.52.0/24 maxlen: 24 86.62.53.0/24 maxlen: 24 86.62.54.0/24 maxlen: 24 88.218.80.0/24 maxlen: 24 88.218.81.0/24 maxlen: 24 88.218.82.0/23 maxlen: 24 88.218.239.0/24 maxlen: 24 91.132.126.0/24 maxlen: 24 91.132.127.0/24 maxlen: 24 91.245.238.0/24 maxlen: 24 91.245.239.0/24 maxlen: 24 93.177.92.0/24 maxlen: 24 93.177.93.0/24 maxlen: 24 95.214.83.0/24 maxlen: 24 95.214.92.0/24 maxlen: 24 95.214.93.0/24 maxlen: 24 95.214.95.0/24 maxlen: 24 95.214.244.0/22 maxlen: 24 176.118.188.0/24 maxlen: 24 176.118.189.0/24 maxlen: 24 176.118.191.0/24 maxlen: 24 185.155.100.0/24 maxlen: 24 185.177.76.0/24 maxlen: 24 185.177.77.0/24 maxlen: 24 193.31.124.0/23 maxlen: 24 193.47.36.0/22 maxlen: 24 193.56.22.0/24 maxlen: 24 193.160.68.0/24 maxlen: 24 193.160.72.0/24 maxlen: 24 193.160.74.0/24 maxlen: 24 193.160.75.0/24 maxlen: 24 194.28.157.0/24 maxlen: 24 194.53.188.0/22 maxlen: 24 194.124.41.0/24 maxlen: 24 212.69.135.0/24 maxlen: 24 213.109.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c5:f7:53:e6:cb:fd:04:1f:41:b1:56:35:21:87:ce:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Jan 16 08:41:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83a8a6991d3c7b3fcf24af1d220b60ee89adb436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:08:80:20:6f:18:d9:23:b7:73:98:5f:b7:09: b5:0a:96:4c:88:e1:55:0c:7e:71:22:1e:4d:55:a8: 11:be:88:4a:eb:0d:39:3b:9b:f6:94:cc:cd:fc:62: a8:45:0a:27:cb:3d:93:fe:55:a3:0b:23:29:52:e1: 4e:c4:4f:03:94:a5:2d:b9:ae:8b:76:6d:f9:e0:8d: 60:84:37:ee:7b:f1:18:c3:48:ab:bb:42:b3:1d:e5: 43:8a:f6:6d:65:4b:fc:cf:4d:99:de:b0:5c:94:4a: 09:8a:7c:46:b3:4f:5b:64:69:67:a7:7b:67:18:59: 4f:5c:30:a8:eb:53:e5:2c:9e:ab:d7:0c:7c:60:44: b8:38:9e:43:93:c9:a9:f5:df:9a:9a:2c:8e:ce:94: e8:ef:e5:a3:e6:d1:cb:e3:cd:f4:02:46:bc:4c:1b: 45:e0:4c:8b:da:d1:bb:a1:22:c5:9c:29:ba:f8:15: 8c:fc:54:67:17:c3:34:4f:76:8c:e0:cf:f4:de:e8: 64:dc:fd:c4:3c:cf:43:c9:12:88:9b:33:4f:c6:c9: af:e6:ae:67:05:1f:4f:9a:03:b6:0f:76:41:b6:ea: 31:a7:f7:eb:1f:e4:40:83:b8:23:c9:fa:39:fc:8d: 8d:80:ec:c7:85:fb:44:61:f2:36:85:3e:cf:32:4d: 29:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A8:A6:99:1D:3C:7B:3F:CF:24:AF:1D:22:0B:60:EE:89:AD:B4:36 X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/g6immR08ez_PJK8dIgtg7omttDY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.72.0/24 5.104.74.0/24 31.40.192.0/24 31.40.194.0/24 45.130.184.0/22 45.140.4.0/24 45.140.6.0/23 45.152.136.0/23 45.154.120.0/22 77.83.20.0/22 77.83.48.0/22 84.252.64.0/22 85.31.52.0/24 86.62.53.0-86.62.54.255 88.218.80.0/22 88.218.239.0/24 91.132.126.0/23 91.245.238.0/23 93.177.92.0/23 95.214.83.0/24 95.214.92.0/23 95.214.95.0/24 95.214.244.0/22 176.118.188.0/23 176.118.191.0/24 185.155.100.0/24 185.177.76.0/23 193.31.124.0/23 193.47.36.0/22 193.56.22.0/24 193.160.68.0/24 193.160.72.0/24 193.160.74.0/23 194.28.157.0/24 194.53.188.0/22 194.124.41.0/24 212.69.135.0/24 213.109.188.0/22 Signature Algorithm: sha256WithRSAEncryption 36:cb:0a:f0:ac:ca:c5:e8:03:ec:9b:fb:62:be:a7:30:2b:52: e5:f9:a7:7c:82:51:7e:32:26:2f:9c:b6:99:60:0b:cc:d8:90: 86:0a:04:66:be:69:28:af:60:8d:04:62:6a:bb:bc:63:a0:c6: c3:81:98:36:97:ee:22:41:99:1f:91:75:4e:15:94:35:39:60: 73:7e:8a:2e:14:45:70:96:7d:86:da:ac:f0:7c:e9:c0:bc:f5: 5f:7d:9c:5c:2c:8e:f7:57:bd:c5:b2:56:a1:f5:b8:30:d5:61: 2c:b5:bc:02:7d:98:84:a3:cc:2e:64:5f:96:c0:6d:04:ae:ce: 1c:fe:a9:3e:55:0b:4a:06:ce:33:51:e7:6c:b9:37:34:36:65: 3c:64:b2:4b:c4:c8:b5:25:c4:a7:65:aa:1b:4e:64:ff:11:50: a0:47:df:d6:e3:d4:a7:fe:32:ab:40:c1:a1:1f:e7:57:3a:bd: ce:75:94:bd:04:3c:f6:62:36:11:7c:dc:ed:ee:26:5f:e4:7d: b6:d0:b3:ba:a0:b0:aa:f9:0f:0f:9e:28:b8:11:35:b7:61:a7: d3:9a:8b:c5:6f:93:31:2a:be:2e:b9:af:3b:10:a9:8d:20:70: ba:cb:43:d6:bb:67:44:2e:f0:db:3f:8b:a0:f9:79:51:bf:94: 08:da:f0:45 -----BEGIN CERTIFICATE----- MIIF6TCCBNGgAwIBAgISAZvF91Pmy/0EH0GxVjUhh84eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjYwMTE2MDg0MTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2E4YTY5OTFkM2M3YjNmY2YyNGFmMWQyMjBiNjBlZTg5YWRiNDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgiAIG8Y2SO3c5hftwm1CpZMiOFV DH5xIh5NVagRvohK6w05O5v2lMzN/GKoRQonyz2T/lWjCyMpUuFOxE8DlKUtua6L dm354I1ghDfue/EYw0iru0KzHeVDivZtZUv8z02Z3rBclEoJinxGs09bZGlnp3tn GFlPXDCo61PlLJ6r1wx8YES4OJ5Dk8mp9d+amiyOzpTo7+Wj5tHL4830Aka8TBtF 4EyL2tG7oSLFnCm6+BWM/FRnF8M0T3aM4M/03uhk3P3EPM9DyRKImzNPxsmv5q5n BR9PmgO2D3ZBtuoxp/frH+RAg7gjyfo5/I2NgOzHhftEYfI2hT7PMk0p7wIDAQAB o4IC9TCCAvEwHQYDVR0OBBYEFIOoppkdPHs/zySvHSILYO6JrbQ2MB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvZzZpbW1SMDhlel9QSks4ZElndGc3b210dERZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBCQYIKwYBBQUHAQcBAf8EgfkwgfYwgfMEAgABMIHsAwQA BWhIAwQABWhKAwQAHyjAAwQAHyjCAwQCLYK4AwQALYwEAwQBLYwGAwQBLZiIAwQC LZp4AwQCTVMUAwQCTVMwAwQCVPxAAwQAVR80MAwDBABWPjUDBABWPjYDBAJY2lAD BABY2u8DBAFbhH4DBAFb9e4DBAFdsVwDBABf1lMDBAFf1lwDBABf1l8DBAJf1vQD BAGwdrwDBACwdr8DBAC5m2QDBAG5sUwDBAHBH3wDBALBLyQDBADBOBYDBADBoEQD BADBoEgDBAHBoEoDBADCHJ0DBALCNbwDBADCfCkDBADURYcDBALVbbwwDQYJKoZI hvcNAQELBQADggEBADbLCvCsysXoA+yb+2K+pzArUuX5p3yCUX4yJi+ctplgC8zY kIYKBGa+aSivYI0EYmq7vGOgxsOBmDaX7iJBmR+RdU4VlDU5YHN+ii4URXCWfYba rPB86cC89V99nFwsjvdXvcWyVqH1uDDVYSy1vAJ9mISjzC5kX5bAbQSuzhz+qT5V C0oGzjNR52y5NzQ2ZTxkskvEyLUlxKdlqhtOZP8RUKBH39bj1Kf+MqtAwaEf51c6 vc51lL0EPPZiNhF83O3uJl/kfbbQs7qgsKr5Dw+eKLgRNbdhp9Oai8VvkzEqvi65 rzsQqY0gcLrLQ9a7Z0Qu8Ns/i6D5eVG/lAja8EU= -----END CERTIFICATE-----Generated at Mon Jan 19 21:26:20 2026 by rpki-client