This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/0nOiMnA6NV5WBK1GGQJdf5u0R7Q.roa File: 0nOiMnA6NV5WBK1GGQJdf5u0R7Q.roa (raw, json) Hash identifier: kZAZ+FtKOmvNUJYXZ93DTfdC6kgpQf3D40b45bZU8Bg= Subject key identifier: D2:73:A2:32:70:3A:35:5E:56:04:AD:46:19:02:5D:7F:9B:B4:47:B4 Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b Certificate serial: 019BDAC0B8092D1B1B14CBAE72E3DD5A6C52 Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/0nOiMnA6NV5WBK1GGQJdf5u0R7Q.roa Signing time: Tue 20 Jan 2026 09:33:41 +0000 ROA not before: Tue 20 Jan 2026 09:33:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49628 IP address blocks: 5.187.8.0/21 maxlen: 21 5.187.8.0/24 maxlen: 24 5.187.9.0/24 maxlen: 24 5.187.10.0/24 maxlen: 24 5.187.11.0/24 maxlen: 24 5.187.12.0/24 maxlen: 24 5.187.13.0/24 maxlen: 24 5.187.15.0/24 maxlen: 24 37.75.128.0/21 maxlen: 21 78.40.104.0/22 maxlen: 22 78.40.104.0/24 maxlen: 24 78.40.105.0/24 maxlen: 24 78.40.106.0/24 maxlen: 24 78.40.107.0/24 maxlen: 24 185.46.176.0/22 maxlen: 22 185.46.176.0/24 maxlen: 24 185.46.177.0/24 maxlen: 24 185.46.178.0/24 maxlen: 24 185.46.179.0/24 maxlen: 24 185.81.92.0/22 maxlen: 22 185.81.92.0/24 maxlen: 24 185.81.93.0/24 maxlen: 24 185.81.94.0/24 maxlen: 24 185.81.95.0/24 maxlen: 24 185.168.224.0/22 maxlen: 22 185.168.224.0/24 maxlen: 24 185.168.225.0/24 maxlen: 24 185.168.226.0/24 maxlen: 24 185.168.227.0/24 maxlen: 24 188.227.192.0/22 maxlen: 22 188.227.192.0/24 maxlen: 24 188.227.193.0/24 maxlen: 24 188.227.194.0/24 maxlen: 24 188.227.195.0/24 maxlen: 24 193.176.212.0/22 maxlen: 22 193.176.212.0/24 maxlen: 24 193.176.213.0/24 maxlen: 24 193.176.214.0/24 maxlen: 24 193.176.215.0/24 maxlen: 24 2a01:88e0::/32 maxlen: 32 2a05:86c0::/29 maxlen: 29 2a07:ebc0::/29 maxlen: 29 2a0a:2900::/29 maxlen: 29 2a0a:2907:ffff:1000::/64 maxlen: 64 2a0a:2907:ffff:1100::/64 maxlen: 64 2a0c:6340::/29 maxlen: 29 2a0c:a3c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:c0:b8:09:2d:1b:1b:14:cb:ae:72:e3:dd:5a:6c:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b Validity Not Before: Jan 20 09:33:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d273a232703a355e5604ad4619025d7f9bb447b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ff:62:7e:d5:a1:b6:cb:00:d8:18:8a:75:81: a3:42:21:ca:0a:61:f4:12:a2:fb:8a:08:f4:57:08: 12:05:79:27:e5:e6:72:60:ac:b3:ee:8b:c9:63:57: b9:6c:46:59:0a:be:5b:77:fb:e6:92:d7:7d:7e:de: ef:a4:f9:4e:80:47:ac:1f:6c:7e:96:8c:88:54:87: 59:fb:08:7b:0d:29:1b:a8:64:93:78:17:cb:3a:c3: ee:8d:c8:94:1a:98:54:e9:1e:f1:20:3e:35:99:e2: 81:53:c0:de:33:22:dc:9e:f3:bc:c6:9a:48:d4:d2: 39:85:5c:ea:57:20:18:ee:2e:57:be:73:e5:39:22: 23:e5:d2:73:58:41:98:65:82:38:92:97:bf:be:5a: 9a:12:c7:f1:bb:6c:e9:2a:69:2a:52:89:21:7d:40: ff:e8:b4:ca:4e:0b:30:41:6e:2e:a9:13:72:a6:3a: b0:63:e8:93:44:d6:a1:d2:38:ea:15:21:2e:a7:5f: fc:0c:51:97:10:e1:32:fb:1e:ca:79:c0:3d:5d:7c: 43:f9:a5:66:8d:24:52:c9:a3:93:69:97:53:23:dc: aa:4b:0b:50:34:80:c7:b6:a9:24:4c:7b:6d:41:23: 02:9e:fa:e1:69:a4:a9:13:ec:08:78:89:4d:aa:91: df:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:73:A2:32:70:3A:35:5E:56:04:AD:46:19:02:5D:7F:9B:B4:47:B4 X509v3 Authority Key Identifier: keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/0nOiMnA6NV5WBK1GGQJdf5u0R7Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.187.8.0/21 37.75.128.0/21 78.40.104.0/22 185.46.176.0/22 185.81.92.0/22 185.168.224.0/22 188.227.192.0/22 193.176.212.0/22 IPv6: 2a01:88e0::/32 2a05:86c0::/29 2a07:ebc0::/29 2a0a:2900::/29 2a0c:6340::/29 2a0c:a3c0::/29 Signature Algorithm: sha256WithRSAEncryption 24:4d:d8:4e:95:16:5b:c9:d1:9c:21:33:e7:38:ab:2c:5d:5b: b5:50:76:d9:fe:84:ea:a3:0a:62:99:a1:f8:84:c7:4f:9d:3c: ca:06:ac:8a:fd:b0:77:f6:ec:92:d9:e2:5b:99:b0:d3:b8:89: 6d:a1:98:da:b2:32:c7:79:c7:86:d4:25:eb:91:ec:ed:08:e8: e3:ba:11:08:ac:27:41:1a:81:38:7e:b8:65:d2:09:51:6a:e3: e5:c6:21:a3:44:f6:dc:03:b1:59:1a:ad:1e:66:75:ca:14:62: aa:e6:4d:ad:69:3c:56:54:61:f6:81:ba:33:57:25:e4:55:aa: e2:25:33:f9:52:01:1d:18:47:58:2b:b7:e9:35:52:ad:d4:25: cb:5d:c8:31:0d:df:17:8a:aa:b6:ff:bc:fc:8a:6a:8a:7d:45: 54:41:9f:05:a4:a5:35:1e:63:3d:2a:9c:a5:9f:f1:94:58:1c: 8c:48:57:60:70:40:d1:48:fe:34:2c:31:31:c4:43:27:37:c1: 17:9a:5f:d4:25:57:f7:52:78:89:c1:5b:5b:aa:af:6d:e6:56: 97:c2:a8:dc:95:e7:48:54:88:e2:52:ee:38:e2:27:e6:a8:99: 3e:31:75:47:70:d6:ab:1c:4b:1f:ab:27:6e:58:8b:b8:7a:10: a9:0c:39:cc -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgISAZvawLgJLRsbFMuucuPdWmxSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NjkzNjI2NmU5ODBkZDIwM2IyY2JlYjFjOWM0NTcwNjA0 YjkxMWIwHhcNMjYwMTIwMDkzMzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjczYTIzMjcwM2EzNTVlNTYwNGFkNDYxOTAyNWQ3ZjliYjQ0N2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP9iftWhtssA2BiKdYGjQiHKCmH0 EqL7igj0VwgSBXkn5eZyYKyz7ovJY1e5bEZZCr5bd/vmktd9ft7vpPlOgEesH2x+ loyIVIdZ+wh7DSkbqGSTeBfLOsPujciUGphU6R7xID41meKBU8DeMyLcnvO8xppI 1NI5hVzqVyAY7i5XvnPlOSIj5dJzWEGYZYI4kpe/vlqaEsfxu2zpKmkqUokhfUD/ 6LTKTgswQW4uqRNypjqwY+iTRNah0jjqFSEup1/8DFGXEOEy+x7KecA9XXxD+aVm jSRSyaOTaZdTI9yqSwtQNIDHtqkkTHttQSMCnvrhaaSpE+wIeIlNqpHfEwIDAQAB o4ICZTCCAmEwHQYDVR0OBBYEFNJzojJwOjVeVgStRhkCXX+btEe0MB8GA1UdIwQY MBaAFFhpNiZumA3SA7LL6xycRXBgS5EbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0drMkptNllEZElEc3N2ckhKeEZjR0JMa1JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80YzY2Y2MtZmE5YS00ZjU4LWFkMjEt N2RhMTgzZWZmMTE1LzEvMG5PaU1uQTZOVjVXQksxR0dRSmRmNXUwUjdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS80YzY2Y2MtZmE5YS00ZjU4LWFkMjEtN2RhMTgzZWZmMTE1 LzEvV0drMkptNllEZElEc3N2ckhKeEZjR0JMa1JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajA2BAIAATAwAwQDBbsIAwQD JUuAAwQCTihoAwQCuS6wAwQCuVFcAwQCuajgAwQCvOPAAwQCwbDUMDAEAgACMCoD BQAqAYjgAwUDKgWGwAMFAyoH68ADBQMqCikAAwUDKgxjQAMFAyoMo8AwDQYJKoZI hvcNAQELBQADggEBACRN2E6VFlvJ0ZwhM+c4qyxdW7VQdtn+hOqjCmKZofiEx0+d PMoGrIr9sHf27JLZ4luZsNO4iW2hmNqyMsd5x4bUJeuR7O0I6OO6EQisJ0EagTh+ uGXSCVFq4+XGIaNE9twDsVkarR5mdcoUYqrmTa1pPFZUYfaBujNXJeRVquIlM/lS AR0YR1grt+k1Uq3UJctdyDEN3xeKqrb/vPyKaop9RVRBnwWkpTUeYz0qnKWf8ZRY HIxIV2BwQNFI/jQsMTHEQyc3wReaX9QlV/dSeInBW1uqr23mVpfCqNyV50hUiOJS 7jjiJ+aomT4xdUdw1qscSx+rJ25Yi7h6EKkMOcw= -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:14 2026 by rpki-client