This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/SSpWF7_mFd5aLq1v7cUlO_7MUeg.roa File: SSpWF7_mFd5aLq1v7cUlO_7MUeg.roa (raw, json) Hash identifier: sS4G3ab1K8SPkh8ckCRuErQYvrEjmRohAAhZp3pf6ig= Subject key identifier: 49:2A:56:17:BF:E6:15:DE:5A:2E:AD:6F:ED:C5:25:3B:FE:CC:51:E8 Certificate issuer: /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e Certificate serial: 019B7FF1B1A7BD9AF612040698E42149574C Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/SSpWF7_mFd5aLq1v7cUlO_7MUeg.roa Signing time: Fri 02 Jan 2026 18:21:44 +0000 ROA not before: Fri 02 Jan 2026 18:21:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29518 IP address blocks: 5.44.192.0/20 maxlen: 20 5.172.144.0/21 maxlen: 21 31.192.192.0/20 maxlen: 20 31.208.0.0/16 maxlen: 16 31.209.0.0/18 maxlen: 18 37.17.248.0/21 maxlen: 21 46.162.64.0/18 maxlen: 18 46.236.64.0/18 maxlen: 18 62.182.0.0/21 maxlen: 21 62.220.160.0/19 maxlen: 19 77.53.0.0/16 maxlen: 16 79.138.0.0/17 maxlen: 17 80.244.64.0/19 maxlen: 19 81.88.0.0/20 maxlen: 20 81.186.240.0/20 maxlen: 20 82.117.96.0/19 maxlen: 19 82.209.128.0/18 maxlen: 18 83.209.0.0/16 maxlen: 16 83.219.192.0/19 maxlen: 19 83.233.0.0/16 maxlen: 16 85.8.0.0/18 maxlen: 18 85.30.0.0/18 maxlen: 18 85.235.0.0/19 maxlen: 19 85.235.17.0/24 maxlen: 24 85.235.18.0/23 maxlen: 23 85.235.20.0/22 maxlen: 22 85.235.24.0/24 maxlen: 24 85.238.192.0/19 maxlen: 19 87.96.128.0/17 maxlen: 17 87.236.88.0/21 maxlen: 21 87.241.64.0/18 maxlen: 18 87.251.192.0/19 maxlen: 19 87.253.64.0/19 maxlen: 19 88.83.32.0/19 maxlen: 19 88.129.0.0/16 maxlen: 16 89.160.0.0/17 maxlen: 17 89.233.192.0/18 maxlen: 18 89.236.0.0/18 maxlen: 18 89.236.0.0/23 maxlen: 23 89.236.2.0/23 maxlen: 23 89.236.4.0/22 maxlen: 22 89.236.8.0/23 maxlen: 23 89.236.11.0/24 maxlen: 24 89.236.15.0/24 maxlen: 24 89.236.17.0/24 maxlen: 24 89.236.18.0/23 maxlen: 23 89.236.20.0/22 maxlen: 22 89.236.24.0/23 maxlen: 23 89.236.26.0/24 maxlen: 24 89.236.35.0/24 maxlen: 24 89.236.36.0/23 maxlen: 23 89.236.38.0/24 maxlen: 24 89.236.47.0/24 maxlen: 24 89.236.48.0/24 maxlen: 24 89.236.53.0/24 maxlen: 24 89.236.54.0/23 maxlen: 23 89.236.56.0/22 maxlen: 22 91.232.59.0/24 maxlen: 24 91.232.60.0/23 maxlen: 23 94.198.64.0/21 maxlen: 21 94.245.0.0/18 maxlen: 18 94.245.0.0/20 maxlen: 20 94.245.16.0/20 maxlen: 20 94.245.48.0/20 maxlen: 20 94.255.128.0/17 maxlen: 17 95.155.192.0/18 maxlen: 18 109.124.128.0/18 maxlen: 18 109.225.64.0/18 maxlen: 18 146.247.80.0/21 maxlen: 21 178.132.248.0/21 maxlen: 21 178.251.240.0/21 maxlen: 21 185.18.164.0/22 maxlen: 22 185.52.180.0/22 maxlen: 22 185.58.144.0/22 maxlen: 22 185.113.96.0/22 maxlen: 22 188.120.160.0/19 maxlen: 19 188.122.128.0/19 maxlen: 19 193.23.57.0/24 maxlen: 24 195.78.224.0/22 maxlen: 22 195.238.255.0/24 maxlen: 24 213.21.64.0/18 maxlen: 18 213.142.0.0/19 maxlen: 19 213.185.0.0/19 maxlen: 19 213.185.4.0/24 maxlen: 24 213.185.6.0/24 maxlen: 24 213.185.7.0/24 maxlen: 24 213.185.8.0/23 maxlen: 23 213.185.10.0/24 maxlen: 24 213.185.12.0/22 maxlen: 22 213.185.16.0/23 maxlen: 23 213.185.20.0/23 maxlen: 23 213.185.24.0/24 maxlen: 24 213.185.26.0/24 maxlen: 24 217.72.48.0/20 maxlen: 20 217.72.52.0/23 maxlen: 23 217.72.54.0/24 maxlen: 24 217.72.56.0/22 maxlen: 22 217.72.60.0/23 maxlen: 23 217.72.62.0/24 maxlen: 24 217.76.80.0/20 maxlen: 20 217.115.32.0/19 maxlen: 19 2001:7a0::/32 maxlen: 32 2001:9c8::/29 maxlen: 29 2a00:1598::/29 maxlen: 29 2a00:8280::/32 maxlen: 32 2a01:b700::/32 maxlen: 32 2a02:7b8::/32 maxlen: 32 2a02:23c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:b1:a7:bd:9a:f6:12:04:06:98:e4:21:49:57:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e Validity Not Before: Jan 2 18:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=492a5617bfe615de5a2ead6fedc5253bfecc51e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:49:fc:22:28:06:8a:89:f0:28:78:3f:d6:f1: bd:59:0a:cb:ef:53:31:12:fb:8a:40:90:c7:ad:37: d8:59:e5:a1:f5:62:99:f6:0b:eb:64:39:67:95:5a: 80:14:ce:b9:f5:7e:0d:32:ea:ec:f8:e7:a9:3b:f9: ad:b3:2d:88:e2:76:55:bd:a1:3c:6d:9e:7b:73:47: d5:85:2c:12:2d:13:bd:61:4a:ac:da:35:d1:67:a5: 32:aa:cc:20:56:88:bb:4a:80:ef:41:fb:26:03:46: 47:41:69:bf:46:ae:47:ef:8b:66:46:ef:4c:4c:2f: 9b:51:3d:50:27:24:95:7a:c8:9d:5f:98:b5:bc:bd: 0b:bf:02:21:e8:2b:ee:9d:32:51:58:4d:f6:98:c5: 55:b2:86:f9:62:91:e8:c9:c0:42:b1:f3:b6:18:70: 3b:27:de:36:87:60:bd:df:9d:80:8e:46:3d:bc:ed: a2:ba:3b:a3:41:bd:f3:ed:2b:3b:4a:bd:82:c0:0e: 0e:98:5a:0a:e2:f6:64:3b:fc:19:cd:ab:9d:43:4e: ac:fc:ef:cb:34:45:fb:e1:dd:08:e8:83:88:0a:60: 4d:c9:e6:d5:d4:b1:75:be:f9:a5:7e:86:4a:ef:6b: a6:0f:e4:a6:6e:66:3a:2e:e5:2f:a9:f9:9f:96:44: e6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2A:56:17:BF:E6:15:DE:5A:2E:AD:6F:ED:C5:25:3B:FE:CC:51:E8 X509v3 Authority Key Identifier: keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/SSpWF7_mFd5aLq1v7cUlO_7MUeg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.44.192.0/20 5.172.144.0/21 31.192.192.0/20 31.208.0.0-31.209.63.255 37.17.248.0/21 46.162.64.0/18 46.236.64.0/18 62.182.0.0/21 62.220.160.0/19 77.53.0.0/16 79.138.0.0/17 80.244.64.0/19 81.88.0.0/20 81.186.240.0/20 82.117.96.0/19 82.209.128.0/18 83.209.0.0/16 83.219.192.0/19 83.233.0.0/16 85.8.0.0/18 85.30.0.0/18 85.235.0.0/19 85.238.192.0/19 87.96.128.0/17 87.236.88.0/21 87.241.64.0/18 87.251.192.0/19 87.253.64.0/19 88.83.32.0/19 88.129.0.0/16 89.160.0.0/17 89.233.192.0/18 89.236.0.0/18 91.232.59.0-91.232.61.255 94.198.64.0/21 94.245.0.0/18 94.255.128.0/17 95.155.192.0/18 109.124.128.0/18 109.225.64.0/18 146.247.80.0/21 178.132.248.0/21 178.251.240.0/21 185.18.164.0/22 185.52.180.0/22 185.58.144.0/22 185.113.96.0/22 188.120.160.0/19 188.122.128.0/19 193.23.57.0/24 195.78.224.0/22 195.238.255.0/24 213.21.64.0/18 213.142.0.0/19 213.185.0.0/19 217.72.48.0/20 217.76.80.0/20 217.115.32.0/19 IPv6: 2001:7a0::/32 2001:9c8::/29 2a00:1598::/29 2a00:8280::/32 2a01:b700::/32 2a02:7b8::/32 2a02:23c0::/32 Signature Algorithm: sha256WithRSAEncryption 29:94:e6:f2:46:50:25:fd:64:57:d3:86:7b:2a:32:da:36:91: 90:30:eb:54:45:63:b1:b5:f3:80:93:80:f2:99:70:2c:57:21: 11:07:e4:2a:e6:61:a8:40:54:c8:3e:ae:c5:e5:f4:3b:6f:9e: eb:c5:e0:45:46:73:34:97:fd:db:36:26:70:f4:eb:a5:a1:b2: 64:21:8e:2a:dc:f4:82:28:98:b5:bc:41:8d:27:41:49:d0:d1: 0d:20:98:eb:dc:28:02:f3:b4:33:35:b6:68:06:be:2e:2d:c1: 46:1c:79:04:e4:7c:e1:19:cf:6b:2b:22:ea:36:12:fd:3e:21: 17:11:5b:c3:5c:43:10:55:48:82:0f:71:c9:1a:13:f4:a3:9f: d1:54:ea:00:f4:8c:84:b0:ae:95:6f:2e:55:a7:c3:bb:0c:b9: 73:ec:18:dc:9f:b6:3a:7f:a4:5e:f5:09:70:a8:37:c5:10:ea: 45:06:4f:f2:f9:3b:69:97:a1:5f:d1:d4:9a:56:9e:fa:ff:e2: 08:de:52:21:95:d1:42:67:82:d1:26:b0:87:0b:56:53:bd:bf: 8e:c9:19:5f:47:54:54:4c:fa:93:f1:5c:ab:d4:81:ef:39:fc: 95:4c:6c:86:c0:5d:a1:e3:b0:1d:c2:27:af:67:c2:ac:fa:e3: c3:15:b1:20 -----BEGIN CERTIFICATE----- MIIGoTCCBYmgAwIBAgISAZt/8bGnvZr2EgQGmOQhSVdMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTEzMDhlYWQ2YWRiMWQwODVlN2U1OTEwYTBjYjJkZTU2 YWEzMmUwHhcNMjYwMTAyMTgyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTJhNTYxN2JmZTYxNWRlNWEyZWFkNmZlZGM1MjUzYmZlY2M1MWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEn8IigGionwKHg/1vG9WQrL71Mx EvuKQJDHrTfYWeWh9WKZ9gvrZDlnlVqAFM659X4NMurs+OepO/mtsy2I4nZVvaE8 bZ57c0fVhSwSLRO9YUqs2jXRZ6UyqswgVoi7SoDvQfsmA0ZHQWm/Rq5H74tmRu9M TC+bUT1QJySVesidX5i1vL0LvwIh6CvunTJRWE32mMVVsob5YpHoycBCsfO2GHA7 J942h2C9352AjkY9vO2iujujQb3z7Ss7Sr2CwA4OmFoK4vZkO/wZzaudQ06s/O/L NEX74d0I6IOICmBNyebV1LF1vvmlfoZK72umD+SmbmY6LuUvqfmflkTm9wIDAQAB o4IDrTCCA6kwHQYDVR0OBBYEFEkqVhe/5hXeWi6tb+3FJTv+zFHoMB8GA1UdIwQY MBaAFAzhMI6tatsdCF5+WRCgyy3laqMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84OTkzODAtYWQyNy00NGViLThjMmUt YjBiYWQxOGYwMmQwLzEvU1NwV0Y3X21GZDVhTHExdjdjVWxPXzdNVWVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84OTkzODAtYWQyNy00NGViLThjMmUtYjBiYWQxOGYwMmQw LzEvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBwQYIKwYBBQUHAQcBAf8EggGwMIIBrDCCAW8EAgABMIIB ZwMEBAUswAMEAwWskAMEBB/AwDALAwMEH9ADBAYf0QADBAMlEfgDBAYuokADBAYu 7EADBAM+tgADBAU+3KADAwBNNQMEB0+KAAMEBVD0QAMEBFFYAAMEBFG68AMEBVJ1 YAMEBlLRgAMDAFPRAwQFU9vAAwMAU+kDBAZVCAADBAZVHgADBAVV6wADBAVV7sAD BAdXYIADBANX7FgDBAZX8UADBAVX+8ADBAVX/UADBAVYUyADAwBYgQMEB1mgAAME BlnpwAMEBlnsADAMAwQAW+g7AwQBW+g8AwQDXsZAAwQGXvUAAwQHXv+AAwQGX5vA AwQGbXyAAwQGbeFAAwQDkvdQAwQDsoT4AwQDsvvwAwQCuRKkAwQCuTS0AwQCuTqQ AwQCuXFgAwQFvHigAwQFvHqAAwQAwRc5AwQCw07gAwQAw+7/AwQG1RVAAwQF1Y4A AwQF1bkAAwQE2UgwAwQE2UxQAwQF2XMgMDcEAgACMDEDBQAgAQegAwUDIAEJyAMF AyoAFZgDBQAqAIKAAwUAKgG3AAMFACoCB7gDBQAqAiPAMA0GCSqGSIb3DQEBCwUA A4IBAQAplObyRlAl/WRX04Z7KjLaNpGQMOtURWOxtfOAk4DymXAsVyERB+Qq5mGo QFTIPq7F5fQ7b57rxeBFRnM0l/3bNiZw9OulobJkIY4q3PSCKJi1vEGNJ0FJ0NEN IJjr3CgC87QzNbZoBr4uLcFGHHkE5HzhGc9rKyLqNhL9PiEXEVvDXEMQVUiCD3HJ GhP0o5/RVOoA9IyEsK6Vby5Vp8O7DLlz7Bjcn7Y6f6Re9QlwqDfFEOpFBk/y+Ttp l6Ff0dSaVp76/+II3lIhldFCZ4LRJrCHC1ZTvb+OyRlfR1RUTPqT8Vyr1IHvOfyV TGyGwF2h47AdwievZ8Ks+uPDFbEg -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:28 2026 by rpki-client