This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/sR6--VSf1TJg6XBqIQJFjdqQwjk.roa File: sR6--VSf1TJg6XBqIQJFjdqQwjk.roa (raw, json) Hash identifier: +a/LmYhJ6hoUTDiKTmsqLp0iqelM6C3OOFZARtNpILA= Subject key identifier: B1:1E:BE:F9:54:9F:D5:32:60:E9:70:6A:21:02:45:8D:DA:90:C2:39 Certificate issuer: /CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d Certificate serial: 019B7AC865C766CE8DFEA8C54B9CBCCD05F9 Authority key identifier: 5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/sR6--VSf1TJg6XBqIQJFjdqQwjk.roa Signing time: Thu 01 Jan 2026 18:18:32 +0000 ROA not before: Thu 01 Jan 2026 18:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34244 IP address blocks: 5.180.0.0/22 maxlen: 22 31.170.24.0/21 maxlen: 21 37.221.104.0/22 maxlen: 22 45.8.152.0/22 maxlen: 22 45.14.4.0/22 maxlen: 22 45.93.232.0/22 maxlen: 22 45.131.188.0/22 maxlen: 22 45.152.172.0/22 maxlen: 22 81.92.196.0/22 maxlen: 22 81.92.220.0/22 maxlen: 22 85.30.128.0/18 maxlen: 18 92.39.32.0/20 maxlen: 20 94.46.136.0/22 maxlen: 22 94.46.240.0/22 maxlen: 22 128.127.184.0/21 maxlen: 21 141.98.236.0/22 maxlen: 22 155.137.24.0/21 maxlen: 21 178.236.64.0/20 maxlen: 24 178.255.112.0/22 maxlen: 22 185.4.8.0/22 maxlen: 22 185.27.96.0/22 maxlen: 22 185.121.44.0/22 maxlen: 22 185.176.28.0/22 maxlen: 22 185.186.32.0/22 maxlen: 22 185.197.224.0/22 maxlen: 22 185.216.152.0/22 maxlen: 22 185.223.236.0/22 maxlen: 22 185.240.208.0/22 maxlen: 22 185.247.236.0/22 maxlen: 22 188.66.48.0/22 maxlen: 22 193.34.202.0/24 maxlen: 24 193.221.93.0/24 maxlen: 24 193.221.120.0/24 maxlen: 24 193.221.123.0/24 maxlen: 24 193.221.219.0/24 maxlen: 24 195.210.52.0/23 maxlen: 23 2a02:80::/29 maxlen: 29 2a02:80::/32 maxlen: 32 2a02:1610::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:65:c7:66:ce:8d:fe:a8:c5:4b:9c:bc:cd:05:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d Validity Not Before: Jan 1 18:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b11ebef9549fd53260e9706a2102458dda90c239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b2:9f:fb:89:45:d3:13:67:c3:04:38:6c:80: 67:a7:ce:f8:a5:72:d1:9f:65:ed:1d:d5:99:ec:a2: ec:10:1e:78:c0:dc:70:bb:89:98:a5:32:13:d2:d0: c2:5b:e6:8f:5b:31:68:cb:fa:e9:39:f1:2a:3e:37: 0c:a2:69:f7:11:40:75:18:e3:a7:ed:39:47:52:71: 99:98:24:fa:24:14:46:f2:63:7d:79:13:52:70:1a: 37:68:91:1e:6b:3a:fd:c0:c5:4f:12:62:27:c3:42: 0a:47:b4:f7:29:25:df:b8:e5:ce:ae:34:bd:e4:b0: 76:d5:ab:2a:1b:c0:3d:a2:f0:d3:ce:98:89:84:f5: 15:da:4e:95:73:3d:66:a8:77:01:30:4a:0b:7d:8c: 2c:64:96:99:3b:92:66:93:4c:08:21:0d:cd:89:a4: 04:71:15:9b:9a:6b:62:3e:d5:ed:88:a6:01:ca:da: 71:8a:1c:2e:76:e4:53:3b:d6:90:63:17:f2:65:e8: fa:43:82:e6:04:df:0f:72:09:c2:d4:79:2d:0e:80: 10:ef:c9:b1:39:87:cd:d3:6d:dc:04:32:71:95:8f: 22:2b:87:c3:9f:79:7b:31:ac:17:4f:e3:e1:f0:39: 7d:26:3b:c8:1f:4a:53:64:26:15:f8:5c:e1:f6:50: 79:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1E:BE:F9:54:9F:D5:32:60:E9:70:6A:21:02:45:8D:DA:90:C2:39 X509v3 Authority Key Identifier: keyid:5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/sR6--VSf1TJg6XBqIQJFjdqQwjk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.0.0/22 31.170.24.0/21 37.221.104.0/22 45.8.152.0/22 45.14.4.0/22 45.93.232.0/22 45.131.188.0/22 45.152.172.0/22 81.92.196.0/22 81.92.220.0/22 85.30.128.0/18 92.39.32.0/20 94.46.136.0/22 94.46.240.0/22 128.127.184.0/21 141.98.236.0/22 155.137.24.0/21 178.236.64.0/20 178.255.112.0/22 185.4.8.0/22 185.27.96.0/22 185.121.44.0/22 185.176.28.0/22 185.186.32.0/22 185.197.224.0/22 185.216.152.0/22 185.223.236.0/22 185.240.208.0/22 185.247.236.0/22 188.66.48.0/22 193.34.202.0/24 193.221.93.0/24 193.221.120.0/24 193.221.123.0/24 193.221.219.0/24 195.210.52.0/23 IPv6: 2a02:80::/29 2a02:1610::/32 Signature Algorithm: sha256WithRSAEncryption 8b:f9:57:61:02:44:9f:dd:45:f5:46:8f:ed:2c:c6:9b:bd:32: 2b:ce:bf:f8:4a:8c:d5:b7:c8:79:dc:24:b7:d2:77:3c:e9:11: 0f:e2:d1:11:20:e2:04:d7:97:e7:ed:a2:64:53:a5:61:93:6c: c9:48:23:51:99:f0:60:70:da:5c:b8:23:db:e3:55:bd:b7:8b: d8:07:12:fd:32:4b:9b:f2:42:f4:9a:58:69:5c:62:0e:59:d6: bc:ef:41:25:fd:e2:cd:4c:3d:7c:25:2c:01:ad:0f:dc:3a:d3: 99:b2:b9:91:60:e8:7c:5b:ac:62:45:a8:d1:91:e1:6e:65:6c: e1:83:18:92:84:a2:d0:a1:48:b6:89:76:65:69:d7:68:d9:7a: 38:6d:bb:ac:cf:db:bc:f2:d7:95:92:7b:a8:9d:d2:25:7a:60: 60:7d:03:c1:b4:19:33:24:08:65:a9:be:3a:d8:f4:d9:5a:01: f8:09:35:ba:3d:fc:0d:64:b2:1f:90:b2:2b:d8:37:2e:73:f9: d8:ac:8d:96:fd:bb:83:09:91:bf:98:0e:7b:4b:5b:86:8b:fb: 82:b9:3f:7e:fa:2b:67:fd:26:d0:86:70:96:3b:8c:ca:85:b4: b5:c0:99:48:ce:46:4e:7b:1f:5e:2a:fc:c4:71:cc:1c:42:5f: 64:67:07:eb -----BEGIN CERTIFICATE----- MIIF6zCCBNOgAwIBAgISAZt6yGXHZs6N/qjFS5y8zQX5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMWZhMDZkNWRiYWRhNDNkZTQ0ZjRlNGIxZGM5NDkyYmIy ODdjOWQwHhcNMjYwMTAxMTgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTFlYmVmOTU0OWZkNTMyNjBlOTcwNmEyMTAyNDU4ZGRhOTBjMjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLKf+4lF0xNnwwQ4bIBnp874pXLR n2XtHdWZ7KLsEB54wNxwu4mYpTIT0tDCW+aPWzFoy/rpOfEqPjcMomn3EUB1GOOn 7TlHUnGZmCT6JBRG8mN9eRNScBo3aJEeazr9wMVPEmInw0IKR7T3KSXfuOXOrjS9 5LB21asqG8A9ovDTzpiJhPUV2k6Vcz1mqHcBMEoLfYwsZJaZO5Jmk0wIIQ3NiaQE cRWbmmtiPtXtiKYBytpxihwuduRTO9aQYxfyZej6Q4LmBN8PcgnC1HktDoAQ78mx OYfN023cBDJxlY8iK4fDn3l7MawXT+Ph8Dl9JjvIH0pTZCYV+Fzh9lB5ywIDAQAB o4IC9zCCAvMwHQYDVR0OBBYEFLEevvlUn9UyYOlwaiECRY3akMI5MB8GA1UdIwQY MBaAFF8foG1dutpD3kT05LHclJK7KHydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHgtZ2JWMjYya1BlUlBUa3NkeVVrcnNvZkowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84NDdkMTctYmE3Yy00ZWFlLTlkNTUt MjU4NDZkNTlmZDYwLzEvc1I2LS1WU2YxVEpnNlhCcUlRSkZqZHFRd2prLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84NDdkMTctYmE3Yy00ZWFlLTlkNTUtMjU4NDZkNTlmZDYw LzEvWHgtZ2JWMjYya1BlUlBUa3NkeVVrcnNvZkowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBCwYIKwYBBQUHAQcBAf8Egfswgfgwgd8EAgABMIHYAwQC BbQAAwQDH6oYAwQCJd1oAwQCLQiYAwQCLQ4EAwQCLV3oAwQCLYO8AwQCLZisAwQC UVzEAwQCUVzcAwQGVR6AAwQEXCcgAwQCXi6IAwQCXi7wAwQDgH+4AwQCjWLsAwQD m4kYAwQEsuxAAwQCsv9wAwQCuQQIAwQCuRtgAwQCuXksAwQCubAcAwQCubogAwQC ucXgAwQCudiYAwQCud/sAwQCufDQAwQCuffsAwQCvEIwAwQAwSLKAwQAwd1dAwQA wd14AwQAwd17AwQAwd3bAwQBw9I0MBQEAgACMA4DBQMqAgCAAwUAKgIWEDANBgkq hkiG9w0BAQsFAAOCAQEAi/lXYQJEn91F9UaP7SzGm70yK86/+EqM1bfIedwkt9J3 POkRD+LRESDiBNeX5+2iZFOlYZNsyUgjUZnwYHDaXLgj2+NVvbeL2AcS/TJLm/JC 9JpYaVxiDlnWvO9BJf3izUw9fCUsAa0P3DrTmbK5kWDofFusYkWo0ZHhbmVs4YMY koSi0KFItol2ZWnXaNl6OG27rM/bvPLXlZJ7qJ3SJXpgYH0DwbQZMyQIZam+Otj0 2VoB+Ak1uj38DWSyH5CyK9g3LnP52KyNlv27gwmRv5gOe0tbhov7grk/fvorZ/0m 0IZwljuMyoW0tcCZSM5GTnsfXir8xHHMHEJfZGcH6w== -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:14 2026 by rpki-client