This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/6tH2d7DuA0R1l2Pidcpu6hElWDI.roa File: 6tH2d7DuA0R1l2Pidcpu6hElWDI.roa (raw, json) Hash identifier: CfNi98riUNvkPkY0puJ/adG9NQhrM30w+euigtAJ/Sw= Subject key identifier: EA:D1:F6:77:B0:EE:03:44:75:97:63:E2:75:CA:6E:EA:11:25:58:32 Certificate issuer: /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234 Certificate serial: 019B7DC9FD8DDD940155AA4B0D2643C062B4 Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/6tH2d7DuA0R1l2Pidcpu6hElWDI.roa Signing time: Fri 02 Jan 2026 08:19:08 +0000 ROA not before: Fri 02 Jan 2026 08:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23764 IP address blocks: 5.10.136.0/24 maxlen: 24 5.10.136.112/29 maxlen: 29 5.10.136.208/30 maxlen: 30 5.10.141.8/30 maxlen: 30 5.10.141.136/30 maxlen: 30 5.10.142.0/24 maxlen: 24 5.154.128.0/24 maxlen: 24 5.154.129.0/24 maxlen: 24 5.154.144.0/24 maxlen: 24 5.154.145.0/24 maxlen: 24 5.154.146.0/24 maxlen: 24 5.154.147.0/24 maxlen: 24 5.154.154.0/24 maxlen: 24 5.154.155.0/24 maxlen: 24 5.154.156.0/24 maxlen: 24 5.154.157.0/24 maxlen: 24 5.154.158.0/24 maxlen: 24 5.154.159.0/24 maxlen: 24 79.139.0.0/24 maxlen: 24 79.139.1.0/24 maxlen: 24 79.139.2.0/24 maxlen: 24 79.139.3.0/24 maxlen: 24 79.139.4.0/24 maxlen: 24 79.139.5.0/24 maxlen: 24 79.139.6.0/24 maxlen: 24 79.139.7.0/24 maxlen: 24 79.139.8.0/24 maxlen: 24 79.139.9.0/24 maxlen: 24 79.139.10.0/24 maxlen: 24 79.139.11.0/24 maxlen: 24 79.139.12.0/24 maxlen: 24 79.139.13.0/24 maxlen: 24 79.139.14.0/24 maxlen: 24 79.139.15.0/24 maxlen: 24 87.120.16.0/24 maxlen: 24 87.120.17.0/24 maxlen: 24 87.120.18.0/24 maxlen: 24 87.120.19.0/24 maxlen: 24 87.120.20.0/24 maxlen: 24 87.120.21.0/24 maxlen: 24 87.120.22.0/24 maxlen: 24 87.120.23.0/24 maxlen: 24 87.120.24.0/24 maxlen: 24 87.120.25.0/24 maxlen: 24 87.120.26.0/24 maxlen: 24 87.120.27.0/24 maxlen: 24 95.130.192.0/24 maxlen: 24 95.130.194.0/24 maxlen: 24 95.130.199.0/24 maxlen: 24 145.14.64.0/24 maxlen: 24 145.14.66.0/24 maxlen: 24 145.14.68.0/24 maxlen: 24 145.14.69.0/24 maxlen: 24 145.14.70.0/24 maxlen: 24 145.14.73.0/24 maxlen: 24 145.14.76.0/24 maxlen: 24 145.14.77.0/24 maxlen: 24 145.14.78.0/24 maxlen: 24 145.14.79.0/24 maxlen: 24 145.14.80.0/24 maxlen: 24 145.14.83.0/24 maxlen: 24 145.14.85.0/24 maxlen: 24 145.14.87.0/24 maxlen: 24 145.14.89.0/24 maxlen: 24 145.14.91.0/24 maxlen: 24 145.14.92.0/24 maxlen: 24 145.14.93.0/24 maxlen: 24 185.75.172.0/24 maxlen: 24 2a04:f580:9001::/48 maxlen: 48 2a04:f580:9030:100::/56 maxlen: 56 2a04:f580:9090::/48 maxlen: 48 2a04:f580:9210::/48 maxlen: 48 2a04:f581:110a::/48 maxlen: 48 2a04:f581:110b::/48 maxlen: 48 2a04:f581:8040::/48 maxlen: 48 2a04:f581:8070::/48 maxlen: 48 2a04:f581:8090::/48 maxlen: 48 2a04:f581:80b0::/48 maxlen: 48 2a04:f581:8140::/48 maxlen: 48 2a04:f581:8170::/48 maxlen: 48 2a04:f581:8190::/48 maxlen: 48 2a04:f581:81b0::/48 maxlen: 48 2a04:f581:8240::/48 maxlen: 48 2a04:f581:8270::/48 maxlen: 48 2a04:f581:8290::/48 maxlen: 48 2a04:f581:82b0::/48 maxlen: 48 2a04:f581:a00e:a001::/64 maxlen: 64 2a04:f581:a00e:a002::/64 maxlen: 64 2a04:f581:a00e:a003::/64 maxlen: 64 2a04:f581:a00e:a004::/64 maxlen: 64 2a04:f581:a00f::/48 maxlen: 48 2a04:f581:a111::/48 maxlen: 48 2a04:f581:a123::/48 maxlen: 48 2a04:f581:a125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 17:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:fd:8d:dd:94:01:55:aa:4b:0d:26:43:c0:62:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234 Validity Not Before: Jan 2 08:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ead1f677b0ee0344759763e275ca6eea11255832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:03:7b:07:68:81:4f:bb:a5:64:f2:31:bb:ba: 00:fc:8c:db:54:d6:54:61:42:07:e9:df:8a:09:bc: 24:10:28:0b:5d:33:5f:ec:8d:00:01:fa:28:6c:fb: 9c:05:fb:79:fe:18:d7:42:90:00:3f:3a:70:39:2a: 09:f5:8a:aa:d6:cd:a4:85:f0:e1:a6:da:c2:25:24: 5f:c2:60:28:03:4b:47:36:88:a3:26:21:f5:48:4c: 6e:a7:26:4d:28:8f:95:54:45:9c:56:bd:98:8a:56: 96:df:f6:ac:56:c8:c0:48:f2:16:9a:7c:d2:1b:6a: e1:06:e6:e9:70:3c:44:d2:68:50:c9:5c:e9:fa:e0: c7:d1:2e:37:33:9d:a0:20:76:bb:c8:12:e5:e1:58: 46:89:0b:65:aa:e6:da:53:59:f5:4d:85:eb:13:d5: 6c:97:ae:24:d3:2e:60:87:09:1c:2c:9e:62:b6:e2: 07:e7:b1:96:45:48:a8:56:cc:d3:bc:91:f9:8b:1b: 3b:05:2f:52:c1:3c:2b:9e:50:1c:d0:3c:b7:c2:db: 5e:3c:e1:fe:10:ee:09:05:4c:c8:21:bc:3d:3e:62: 85:dc:04:d4:4c:cb:54:35:65:2c:78:f1:f0:30:2c: 10:e2:4c:55:25:f7:5f:b0:ab:eb:d1:31:15:96:b9: e1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D1:F6:77:B0:EE:03:44:75:97:63:E2:75:CA:6E:EA:11:25:58:32 X509v3 Authority Key Identifier: keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/6tH2d7DuA0R1l2Pidcpu6hElWDI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.136.0/24 5.10.141.8/30 5.10.141.136/30 5.10.142.0/24 5.154.128.0/23 5.154.144.0/22 5.154.154.0-5.154.159.255 79.139.0.0/20 87.120.16.0-87.120.27.255 95.130.192.0/24 95.130.194.0/24 95.130.199.0/24 145.14.64.0/24 145.14.66.0/24 145.14.68.0-145.14.70.255 145.14.73.0/24 145.14.76.0-145.14.80.255 145.14.83.0/24 145.14.85.0/24 145.14.87.0/24 145.14.89.0/24 145.14.91.0-145.14.93.255 185.75.172.0/24 IPv6: 2a04:f580:9001::/48 2a04:f580:9030:100::/56 2a04:f580:9090::/48 2a04:f580:9210::/48 2a04:f581:110a::/47 2a04:f581:8040::/48 2a04:f581:8070::/48 2a04:f581:8090::/48 2a04:f581:80b0::/48 2a04:f581:8140::/48 2a04:f581:8170::/48 2a04:f581:8190::/48 2a04:f581:81b0::/48 2a04:f581:8240::/48 2a04:f581:8270::/48 2a04:f581:8290::/48 2a04:f581:82b0::/48 2a04:f581:a00e:a001::-2a04:f581:a00e:a004:ffff:ffff:ffff:ffff 2a04:f581:a00f::/48 2a04:f581:a111::/48 2a04:f581:a123::/48 2a04:f581:a125::/48 Signature Algorithm: sha256WithRSAEncryption 38:98:35:56:2a:5e:56:e0:ae:e6:e5:5e:94:e0:1e:54:81:26: 72:05:f4:57:11:6c:3c:92:05:de:04:ac:e7:f2:c3:b5:62:9a: 7e:d8:09:70:9f:51:d7:a3:b5:83:af:e9:da:42:20:d8:1a:4b: 25:f9:1b:8d:50:06:67:a8:5f:1c:fa:5e:29:ec:55:fe:31:28: 40:39:4a:da:9d:b3:86:c1:86:7f:1b:ab:75:9e:64:e5:37:29: d8:1a:f8:d3:5d:f2:44:65:56:b2:3a:69:e1:e2:e9:01:91:52: 38:58:64:80:ff:c5:0e:a1:95:4e:2a:93:94:e4:d6:e1:19:0c: d2:fe:78:b9:d9:3e:b2:47:83:59:dc:fa:49:04:dd:70:e3:7a: c2:2a:e8:c4:c1:8d:b2:7c:e5:81:58:1d:43:9e:da:68:dd:d6: 22:61:31:52:12:1e:bd:8f:0f:b9:f9:41:96:d9:0f:0b:23:e5: 98:2d:02:3c:e8:2b:bc:65:a1:26:6d:56:81:8d:c1:66:b2:57: a5:ee:6f:59:5a:94:6c:11:75:73:2c:b0:27:4e:ae:46:d9:f0: cc:0e:a3:8d:db:4c:5a:18:55:90:8e:9b:52:c5:fa:9f:8e:2c: ac:d8:23:2e:a2:5b:00:b6:e3:ec:68:e3:c7:cb:20:79:13:b8: dd:74:a6:f6 -----BEGIN CERTIFICATE----- MIIGkzCCBXugAwIBAgISAZt9yf2N3ZQBVapLDSZDwGK0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZjNlZjNlMGVhOTVhOTc1NTM3ZDVjMjVkOTNjYjc2YWY2 ODcyMzQwHhcNMjYwMTAyMDgxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWQxZjY3N2IwZWUwMzQ0NzU5NzYzZTI3NWNhNmVlYTExMjU1ODMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wN7B2iBT7ulZPIxu7oA/IzbVNZU YUIH6d+KCbwkECgLXTNf7I0AAfoobPucBft5/hjXQpAAPzpwOSoJ9Yqq1s2khfDh ptrCJSRfwmAoA0tHNoijJiH1SExupyZNKI+VVEWcVr2YilaW3/asVsjASPIWmnzS G2rhBubpcDxE0mhQyVzp+uDH0S43M52gIHa7yBLl4VhGiQtlqubaU1n1TYXrE9Vs l64k0y5ghwkcLJ5ituIH57GWRUioVszTvJH5ixs7BS9SwTwrnlAc0Dy3wttePOH+ EO4JBUzIIbw9PmKF3ATUTMtUNWUsePHwMCwQ4kxVJfdfsKvr0TEVlrnh+wIDAQAB o4IDnzCCA5swHQYDVR0OBBYEFOrR9new7gNEdZdj4nXKbuoRJVgyMB8GA1UdIwQY MBaAFAHz7z4OqVqXVTfVwl2Ty3avaHI0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWZQdlBnNnBXcGRWTjlYQ1haUExkcTlvY2pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NDE3YTAtMDc3Ny00NDZlLTk3ZTEt MzUzYjNhNjMzYWRhLzEvNnRIMmQ3RHVBMFIxbDJQaWRjcHU2aEVsV0RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84NDE3YTAtMDc3Ny00NDZlLTk3ZTEtMzUzYjNhNjMzYWRh LzEvQWZQdlBnNnBXcGRWTjlYQ1haUExkcTlvY2pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBswYIKwYBBQUHAQcBAf8EggGiMIIBnjCBuwQCAAEwgbQD BAAFCogDBQIFCo0IAwUCBQqNiAMEAAUKjgMEAQWagAMEAgWakDAMAwQBBZqaAwQF BZqAAwQET4sAMAwDBARXeBADBAJXeBgDBABfgsADBABfgsIDBABfgscDBACRDkAD BACRDkIwDAMEApEORAMEAJEORgMEAJEOSTAMAwQCkQ5MAwQAkQ5QAwQAkQ5TAwQA kQ5VAwQAkQ5XAwQAkQ5ZMAwDBACRDlsDBAGRDlwDBAC5S6wwgd0EAgACMIHWAwcA KgT1gJABAwgAKgT1gJAwAQMHACoE9YCQkAMHACoE9YCSEAMHASoE9YERCgMHACoE 9YGAQAMHACoE9YGAcAMHACoE9YGAkAMHACoE9YGAsAMHACoE9YGBQAMHACoE9YGB cAMHACoE9YGBkAMHACoE9YGBsAMHACoE9YGCQAMHACoE9YGCcAMHACoE9YGCkAMH ACoE9YGCsDAWAwkAKgT1gaAOoAEDCQAqBPWBoA6gBAMHACoE9YGgDwMHACoE9YGh EQMHACoE9YGhIwMHACoE9YGhJTANBgkqhkiG9w0BAQsFAAOCAQEAOJg1VipeVuCu 5uVelOAeVIEmcgX0VxFsPJIF3gSs5/LDtWKaftgJcJ9R16O1g6/p2kIg2BpLJfkb jVAGZ6hfHPpeKexV/jEoQDlK2p2zhsGGfxurdZ5k5Tcp2Br4013yRGVWsjpp4eLp AZFSOFhkgP/FDqGVTiqTlOTW4RkM0v54udk+skeDWdz6SQTdcON6wiroxMGNsnzl gVgdQ57aaN3WImExUhIevY8PuflBltkPCyPlmC0CPOgrvGWhJm1WgY3BZrJXpe5v WVqUbBF1cyywJ06uRtnwzA6jjdtMWhhVkI6bUsX6n44srNgjLqJbALbj7Gjjx8sg eRO43XSm9g== -----END CERTIFICATE-----Generated at Sun Jan 18 04:08:27 2026 by rpki-client