This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/NE2GOUp8VIyuS7uEVlhZkJthz3Q.roa File: NE2GOUp8VIyuS7uEVlhZkJthz3Q.roa (raw, json) Hash identifier: cCvYyHI6VXA2SHqtxY6FdqOa8OINU3B57RbzyCoIYmY= Subject key identifier: 34:4D:86:39:4A:7C:54:8C:AE:4B:BB:84:56:58:59:90:9B:61:CF:74 Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Certificate serial: 019B7DCA275546750881E4A7349838030AF5 Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/NE2GOUp8VIyuS7uEVlhZkJthz3Q.roa Signing time: Fri 02 Jan 2026 08:19:18 +0000 ROA not before: Fri 02 Jan 2026 08:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8359 IP address blocks: 5.144.96.0/19 maxlen: 19 5.144.125.0/24 maxlen: 24 5.189.208.0/21 maxlen: 21 5.227.170.0/23 maxlen: 23 31.40.112.0/20 maxlen: 20 37.208.120.0/21 maxlen: 21 62.118.0.0/16 maxlen: 24 62.168.224.0/19 maxlen: 19 79.171.115.0/24 maxlen: 24 80.80.96.0/19 maxlen: 19 80.83.236.0/24 maxlen: 24 80.83.237.0/24 maxlen: 24 81.91.32.0/19 maxlen: 19 81.91.41.0/24 maxlen: 24 81.195.0.0/16 maxlen: 24 82.96.192.0/18 maxlen: 18 83.237.0.0/16 maxlen: 16 85.140.0.0/15 maxlen: 24 85.235.32.0/19 maxlen: 19 89.175.0.0/16 maxlen: 16 89.175.248.0/21 maxlen: 21 91.76.0.0/14 maxlen: 14 91.195.210.0/23 maxlen: 23 92.43.184.0/21 maxlen: 21 93.90.224.0/20 maxlen: 20 93.90.224.0/22 maxlen: 22 94.77.128.0/18 maxlen: 18 94.77.144.0/22 maxlen: 22 94.140.128.0/19 maxlen: 19 94.243.5.0/24 maxlen: 24 94.243.32.0/24 maxlen: 24 95.153.136.0/22 maxlen: 22 95.169.128.0/19 maxlen: 19 109.198.224.0/19 maxlen: 19 141.105.24.0/21 maxlen: 21 176.222.17.0/24 maxlen: 24 178.141.0.0/16 maxlen: 16 178.155.0.0/17 maxlen: 17 178.155.48.0/22 maxlen: 22 178.159.16.0/20 maxlen: 20 185.168.236.0/22 maxlen: 22 193.104.128.0/24 maxlen: 24 193.169.118.0/23 maxlen: 23 193.189.68.0/23 maxlen: 23 194.126.203.0/24 maxlen: 24 195.34.0.0/19 maxlen: 19 195.34.15.0/24 maxlen: 24 195.34.32.0/19 maxlen: 19 195.34.36.0/24 maxlen: 24 195.34.38.0/24 maxlen: 24 195.34.42.0/24 maxlen: 24 212.188.0.0/17 maxlen: 17 212.188.1.0/24 maxlen: 24 212.188.16.0/24 maxlen: 24 212.188.29.0/24 maxlen: 24 213.27.0.0/17 maxlen: 17 213.87.0.0/16 maxlen: 16 213.87.64.0/22 maxlen: 22 213.87.70.0/23 maxlen: 23 213.87.76.0/23 maxlen: 23 213.87.80.0/20 maxlen: 20 213.87.98.0/23 maxlen: 23 213.87.100.0/24 maxlen: 24 213.87.104.0/24 maxlen: 24 213.87.105.0/24 maxlen: 24 213.87.106.0/23 maxlen: 23 213.87.128.0/19 maxlen: 19 213.87.160.0/22 maxlen: 22 213.87.200.0/22 maxlen: 22 213.87.204.0/22 maxlen: 22 213.87.208.0/23 maxlen: 23 213.87.210.0/23 maxlen: 23 213.87.240.0/22 maxlen: 22 213.87.244.0/23 maxlen: 23 213.87.246.0/24 maxlen: 24 213.87.248.0/22 maxlen: 22 213.147.32.0/19 maxlen: 19 213.176.228.0/22 maxlen: 22 217.74.244.0/22 maxlen: 22 217.74.248.0/21 maxlen: 21 2a00:1fa0::/29 maxlen: 29 2a00:1fa0::/33 maxlen: 33 2a00:1fa0:8000::/33 maxlen: 33 2a00:1fa1::/33 maxlen: 33 2a00:1fa2::/33 maxlen: 33 2a00:1fa3::/33 maxlen: 33 2a00:1fa3:8000::/40 maxlen: 40 2a02:28::/29 maxlen: 29 2a02:28::/32 maxlen: 32 2a02:28:1::/48 maxlen: 48 2a02:28:a::/48 maxlen: 48 2a02:29::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:27:55:46:75:08:81:e4:a7:34:98:38:03:0a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Validity Not Before: Jan 2 08:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=344d86394a7c548cae4bbb84565859909b61cf74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:81:df:7c:6f:09:29:9e:0c:58:a8:24:d1:a0: 2e:81:6d:a9:d9:d9:3e:70:a8:90:f2:32:9f:dd:bc: 36:27:11:c9:17:5c:50:cc:7e:3f:2a:a0:0f:14:e4: a0:d4:c0:cd:2a:0c:7c:9f:a4:bf:23:7b:a0:1f:6c: bf:b7:33:12:33:f0:8e:be:1f:80:fa:9e:70:45:e3: df:2e:e6:ea:f8:a0:c4:bb:c7:3f:28:53:91:a4:15: 10:59:fe:c3:f3:fe:d3:73:2b:4e:5c:9d:c9:41:88: 14:f2:e4:27:37:4e:6f:e5:a1:8f:03:b0:e7:0e:a2: 56:de:3e:8a:31:4a:4c:25:96:42:24:22:54:72:e7: fa:91:5a:1a:6b:72:03:e6:32:1a:4d:b2:72:a9:3e: 13:08:4b:3b:fe:01:14:48:d8:08:9e:66:e2:56:ea: 55:f1:89:43:d1:21:22:0d:86:ee:d9:e1:3c:31:88: 0e:33:89:13:e0:8e:46:e9:73:bc:74:ec:74:eb:f6: c6:13:4c:3f:71:19:52:e6:7f:95:f2:9e:05:42:54: dd:60:2e:7b:59:aa:fc:50:6f:a5:df:cb:e7:6a:ce: 18:79:29:6f:93:6e:2a:07:15:16:2f:b9:73:de:cd: 2d:ed:20:5d:c3:b7:d9:d7:b7:5d:83:29:8f:b8:1a: 3d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4D:86:39:4A:7C:54:8C:AE:4B:BB:84:56:58:59:90:9B:61:CF:74 X509v3 Authority Key Identifier: keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/NE2GOUp8VIyuS7uEVlhZkJthz3Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.144.96.0/19 5.189.208.0/21 5.227.170.0/23 31.40.112.0/20 37.208.120.0/21 62.118.0.0/16 62.168.224.0/19 79.171.115.0/24 80.80.96.0/19 80.83.236.0/23 81.91.32.0/19 81.195.0.0/16 82.96.192.0/18 83.237.0.0/16 85.140.0.0/15 85.235.32.0/19 89.175.0.0/16 91.76.0.0/14 91.195.210.0/23 92.43.184.0/21 93.90.224.0/20 94.77.128.0/18 94.140.128.0/19 94.243.5.0/24 94.243.32.0/24 95.153.136.0/22 95.169.128.0/19 109.198.224.0/19 141.105.24.0/21 176.222.17.0/24 178.141.0.0/16 178.155.0.0/17 178.159.16.0/20 185.168.236.0/22 193.104.128.0/24 193.169.118.0/23 193.189.68.0/23 194.126.203.0/24 195.34.0.0/18 212.188.0.0/17 213.27.0.0/17 213.87.0.0/16 213.147.32.0/19 213.176.228.0/22 217.74.244.0-217.74.255.255 IPv6: 2a00:1fa0::/29 2a02:28::/29 Signature Algorithm: sha256WithRSAEncryption 6a:b0:14:73:b8:97:57:86:ab:0c:63:0f:0f:52:ed:43:16:87: eb:61:db:9c:5b:42:2e:1b:39:e6:68:e7:df:5b:44:39:9b:f8: 89:34:fd:c1:b2:e1:a2:e1:5c:4b:a4:d6:86:9a:57:73:e0:31: e1:44:3c:a4:03:a3:32:24:ba:a8:98:4b:68:5d:3a:21:d8:38: da:4f:57:dd:e0:63:40:5d:54:f8:3f:fb:d9:a2:f7:b1:39:4d: ba:6a:cf:c6:c9:7f:ed:6a:43:10:50:a9:23:07:e3:3d:6f:0a: e1:e9:55:4b:7f:ab:18:a2:74:65:a3:17:3a:82:2f:98:1a:6e: 81:1c:90:d7:3b:0f:56:23:ae:d3:ec:73:eb:88:a0:90:24:5d: cd:95:e2:3d:6a:ab:89:8d:c5:d4:f5:38:56:4d:85:7f:9e:07: 80:5a:68:cf:08:83:76:31:56:f5:c7:c0:7d:04:66:f8:68:53: a4:06:f5:54:1d:c2:47:fe:9f:b5:a2:76:b7:df:6e:37:cb:51: b9:f3:2f:ca:15:f3:9c:7b:0e:e3:c2:d2:f8:73:bf:e5:d8:c8: 5b:e8:46:ae:9c:73:3a:11:c0:02:7b:2d:58:ad:d5:bd:9c:d6: 48:02:d3:82:63:90:76:9a:c1:ea:b7:b4:89:ab:f3:01:3c:c3: 0e:a4:51:27 -----BEGIN CERTIFICATE----- MIIGJDCCBQygAwIBAgISAZt9yidVRnUIgeSnNJg4Awr1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl NmI3ZTUwHhcNMjYwMTAyMDgxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDRkODYzOTRhN2M1NDhjYWU0YmJiODQ1NjU4NTk5MDliNjFjZjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4HffG8JKZ4MWKgk0aAugW2p2dk+ cKiQ8jKf3bw2JxHJF1xQzH4/KqAPFOSg1MDNKgx8n6S/I3ugH2y/tzMSM/COvh+A +p5wRePfLubq+KDEu8c/KFORpBUQWf7D8/7TcytOXJ3JQYgU8uQnN05v5aGPA7Dn DqJW3j6KMUpMJZZCJCJUcuf6kVoaa3ID5jIaTbJyqT4TCEs7/gEUSNgInmbiVupV 8YlD0SEiDYbu2eE8MYgOM4kT4I5G6XO8dOx06/bGE0w/cRlS5n+V8p4FQlTdYC57 War8UG+l38vnas4YeSlvk24qBxUWL7lz3s0t7SBdw7fZ17ddgymPuBo9MQIDAQAB o4IDMDCCAywwHQYDVR0OBBYEFDRNhjlKfFSMrku7hFZYWZCbYc90MB8GA1UdIwQY MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt NDI4NDU4Njc5Y2U0LzEvTkUyR09VcDhWSXl1Uzd1RVZsaFprSnRoejNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0 LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBRAYIKwYBBQUHAQcBAf8EggEzMIIBLzCCARUEAgABMIIB DQMEBQWQYAMEAwW90AMEAQXjqgMEBB8ocAMEAyXQeAMDAD52AwQFPqjgAwQAT6tz AwQFUFBgAwQBUFPsAwQFUVsgAwMAUcMDBAZSYMADAwBT7QMDAVWMAwQFVesgAwMA Wa8DAwJbTAMEAVvD0gMEA1wruAMEBF1a4AMEBl5NgAMEBV6MgAMEAF7zBQMEAF7z IAMEAl+ZiAMEBV+pgAMEBW3G4AMEA41pGAMEALDeEQMDALKNAwQHspsAAwQEsp8Q AwQCuajsAwQAwWiAAwQBwal2AwQBwb1EAwQAwn7LAwQGwyIAAwQH1LwAAwQH1RsA AwMA1VcDBAXVkyADBALVsOQwCwMEAtlK9AMDANlKMBQEAgACMA4DBQMqAB+gAwUD KgIAKDANBgkqhkiG9w0BAQsFAAOCAQEAarAUc7iXV4arDGMPD1LtQxaH62HbnFtC Lhs55mjn31tEOZv4iTT9wbLhouFcS6TWhppXc+Ax4UQ8pAOjMiS6qJhLaF06Idg4 2k9X3eBjQF1U+D/72aL3sTlNumrPxsl/7WpDEFCpIwfjPW8K4elVS3+rGKJ0ZaMX OoIvmBpugRyQ1zsPViOu0+xz64igkCRdzZXiPWqriY3F1PU4Vk2Ff54HgFpozwiD djFW9cfAfQRm+GhTpAb1VB3CR/6ftaJ2t99uN8tRufMvyhXznHsO48LS+HO/5djI W+hGrpxzOhHAAnstWK3VvZzWSALTgmOQdprB6re0iavzATzDDqRRJw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:13 2026 by rpki-client