This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/ODquW4yfiTrN0BslpesyLROdhCU.roa File: ODquW4yfiTrN0BslpesyLROdhCU.roa (raw, json) Hash identifier: LguXTTUIpUVmRso7Duo92XjODqxY0o7l3A4Aw6gkmmA= Subject key identifier: 38:3A:AE:5B:8C:9F:89:3A:CD:D0:1B:25:A5:EB:32:2D:13:9D:84:25 Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Certificate serial: 019B7834F6B61DCC71E8DBB8A2A72C33B208 Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/ODquW4yfiTrN0BslpesyLROdhCU.roa Signing time: Thu 01 Jan 2026 06:18:15 +0000 ROA not before: Thu 01 Jan 2026 06:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24961 IP address blocks: 5.104.104.0/21 maxlen: 24 5.199.128.0/20 maxlen: 24 37.157.248.0/21 maxlen: 24 46.20.32.0/20 maxlen: 24 46.228.192.0/20 maxlen: 24 62.141.32.0/20 maxlen: 24 78.31.64.0/21 maxlen: 24 80.82.208.0/20 maxlen: 24 81.30.144.0/20 maxlen: 24 83.136.80.0/21 maxlen: 24 85.14.192.0/18 maxlen: 24 85.114.128.0/19 maxlen: 24 89.163.128.0/17 maxlen: 24 91.194.84.0/24 maxlen: 24 91.212.153.0/24 maxlen: 24 91.212.159.0/24 maxlen: 24 91.212.163.0/24 maxlen: 24 93.186.192.0/20 maxlen: 24 146.0.32.0/20 maxlen: 24 146.19.166.0/24 maxlen: 24 152.89.92.0/22 maxlen: 24 185.15.244.0/22 maxlen: 24 185.45.248.0/22 maxlen: 24 185.145.196.0/22 maxlen: 24 185.219.208.0/22 maxlen: 24 193.111.198.0/23 maxlen: 24 194.107.129.0/24 maxlen: 24 194.126.198.0/24 maxlen: 24 195.93.242.0/23 maxlen: 24 213.202.192.0/18 maxlen: 24 217.79.176.0/20 maxlen: 24 2001:4ba0::/32 maxlen: 32 2001:4ba1::/32 maxlen: 32 2001:4ba3::/32 maxlen: 32 2001:4ba4::/32 maxlen: 32 2001:4ba6::/32 maxlen: 32 2a00:c320::/32 maxlen: 48 2a01:480::/32 maxlen: 32 2a0a:db80:1000::/36 maxlen: 36 2a0a:db80:2000::/36 maxlen: 36 2a0a:db80:2000::/40 maxlen: 40 2a0a:db80:3000::/36 maxlen: 36 2a0a:db80:4000::/36 maxlen: 36 2a0a:db80:5000::/36 maxlen: 36 2a0a:db80:8000::/36 maxlen: 36 2a0a:db80:8000::/40 maxlen: 40 2a0a:db80:c000::/36 maxlen: 36 2a0c:6b00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f6:b6:1d:cc:71:e8:db:b8:a2:a7:2c:33:b2:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=383aae5b8c9f893acdd01b25a5eb322d139d8425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4a:f8:c7:25:fe:37:13:84:19:b4:dc:2c:7e: b5:8a:14:2b:60:e0:22:45:76:c5:45:48:4c:70:cf: 80:65:07:5d:ff:f0:7b:ac:d8:51:70:4c:89:6b:e0: 5a:18:ee:1a:82:ba:d1:a4:2f:86:96:ad:36:26:e8: ce:07:ec:89:1b:42:d0:e8:dc:b0:a0:b8:37:7e:93: 8b:3a:f4:8b:a6:ce:f9:0d:4d:a1:12:c1:da:88:45: 3e:c5:85:db:29:5d:86:ed:d0:aa:23:3f:14:59:9f: bd:f8:7f:90:ee:b9:9d:bf:bd:20:e8:89:70:31:14: 22:4a:38:fc:08:70:a0:aa:57:ff:a2:1d:e9:22:6f: d7:3f:9a:57:a1:40:2b:49:f5:d0:8b:20:e0:b0:09: 6d:11:98:30:a9:fb:3e:2a:dd:94:4e:25:d8:2b:b1: 25:56:fc:85:43:c9:28:b2:45:ca:fd:3a:4f:95:3c: dd:34:13:03:3a:a4:b2:c0:d4:2c:79:83:cc:cc:9c: 73:22:aa:83:32:b0:c5:d9:a9:06:12:a0:1d:c4:ba: 80:ba:e2:ef:ee:3f:ec:b2:42:03:c3:b4:1d:d0:3f: 43:61:55:4c:da:39:69:f5:d1:52:e5:68:2d:c4:37: 27:af:e3:ce:dd:09:df:12:e5:65:7f:24:06:33:a5: c0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3A:AE:5B:8C:9F:89:3A:CD:D0:1B:25:A5:EB:32:2D:13:9D:84:25 X509v3 Authority Key Identifier: keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/ODquW4yfiTrN0BslpesyLROdhCU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.104.0/21 5.199.128.0/20 37.157.248.0/21 46.20.32.0/20 46.228.192.0/20 62.141.32.0/20 78.31.64.0/21 80.82.208.0/20 81.30.144.0/20 83.136.80.0/21 85.14.192.0/18 85.114.128.0/19 89.163.128.0/17 91.194.84.0/24 91.212.153.0/24 91.212.159.0/24 91.212.163.0/24 93.186.192.0/20 146.0.32.0/20 146.19.166.0/24 152.89.92.0/22 185.15.244.0/22 185.45.248.0/22 185.145.196.0/22 185.219.208.0/22 193.111.198.0/23 194.107.129.0/24 194.126.198.0/24 195.93.242.0/23 213.202.192.0/18 217.79.176.0/20 IPv6: 2001:4ba0::/31 2001:4ba3::-2001:4ba4:ffff:ffff:ffff:ffff:ffff:ffff 2001:4ba6::/32 2a00:c320::/32 2a01:480::/32 2a0a:db80:1000::-2a0a:db80:5fff:ffff:ffff:ffff:ffff:ffff 2a0a:db80:8000::/36 2a0a:db80:c000::/36 2a0c:6b00::/32 Signature Algorithm: sha256WithRSAEncryption 9f:39:20:a4:e5:52:d3:77:48:cb:f0:c0:cf:77:57:2f:0c:88: 6c:51:e5:76:33:d3:f8:85:13:83:04:d1:a6:84:b1:b5:d0:ee: d3:32:de:19:93:1b:28:ba:5c:dd:bb:8c:e2:71:db:66:85:f1: c7:4f:54:f2:bd:fe:79:50:e3:b9:8f:cf:94:3e:46:7a:ad:89: c5:ca:cb:9b:89:d4:d9:c2:32:df:01:80:8d:0e:b3:5e:a6:aa: de:6b:c6:c5:4d:29:9b:0f:48:ba:66:78:0e:f5:a1:01:2d:97: 5a:02:3a:e5:1d:1b:28:ff:6c:88:3e:dd:93:f4:9d:6d:46:de: d1:15:4f:9b:48:4a:29:50:b9:8a:12:75:01:2d:88:e9:93:e6: 63:67:aa:25:63:22:08:01:5b:20:cc:82:01:d1:18:d4:c2:f9: f7:7f:37:90:cb:7f:f4:1c:43:ad:12:bd:dc:7c:6e:c9:22:ca: 78:b7:8f:8a:95:28:b4:89:b5:3c:3d:96:79:ee:3a:87:78:2c: 92:cf:1e:48:3e:54:e4:99:57:52:9d:2b:6f:9e:52:c8:07:1b: 35:c9:78:e1:34:e1:ee:49:ba:72:4a:25:ee:5a:79:af:65:db: 01:42:1c:d4:87:93:3a:ee:9a:2a:96:bd:eb:a7:49:b3:c6:34: e8:f6:a0:bc -----BEGIN CERTIFICATE----- MIIGFjCCBP6gAwIBAgISAZt4NPa2Hcxx6Nu4oqcsM7IIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj NTBkMjAwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODNhYWU1YjhjOWY4OTNhY2RkMDFiMjVhNWViMzIyZDEzOWQ4NDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30r4xyX+NxOEGbTcLH61ihQrYOAi RXbFRUhMcM+AZQdd//B7rNhRcEyJa+BaGO4agrrRpC+Glq02JujOB+yJG0LQ6Nyw oLg3fpOLOvSLps75DU2hEsHaiEU+xYXbKV2G7dCqIz8UWZ+9+H+Q7rmdv70g6Ilw MRQiSjj8CHCgqlf/oh3pIm/XP5pXoUArSfXQiyDgsAltEZgwqfs+Kt2UTiXYK7El VvyFQ8koskXK/TpPlTzdNBMDOqSywNQseYPMzJxzIqqDMrDF2akGEqAdxLqAuuLv 7j/sskIDw7Qd0D9DYVVM2jlp9dFS5WgtxDcnr+PO3QnfEuVlfyQGM6XAQQIDAQAB o4IDIjCCAx4wHQYDVR0OBBYEFDg6rluMn4k6zdAbJaXrMi0TnYQlMB8GA1UdIwQY MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt YTY4NzNiMzc0ZTI2LzEvT0RxdVc0eWZpVHJOMEJzbHBlc3lMUk9kaENVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2 LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBNgYIKwYBBQUHAQcBAf8EggElMIIBITCBwQQCAAEwgboD BAMFaGgDBAQFx4ADBAMlnfgDBAQuFCADBAQu5MADBAQ+jSADBANOH0ADBARQUtAD BARRHpADBANTiFADBAZVDsADBAVVcoADBAdZo4ADBABbwlQDBABb1JkDBABb1J8D BABb1KMDBARdusADBASSACADBACSE6YDBAKYWVwDBAK5D/QDBAK5LfgDBAK5kcQD BAK529ADBAHBb8YDBADCa4EDBADCfsYDBAHDXfIDBAbVysADBATZT7AwWwQCAAIw VQMFASABS6AwDgMFACABS6MDBQAgAUukAwUAIAFLpgMFACoAwyADBQAqAQSAMBAD BgQqCtuAEAMGBSoK24BAAwYEKgrbgIADBgQqCtuAwAMFACoMawAwDQYJKoZIhvcN AQELBQADggEBAJ85IKTlUtN3SMvwwM93Vy8MiGxR5XYz0/iFE4ME0aaEsbXQ7tMy 3hmTGyi6XN27jOJx22aF8cdPVPK9/nlQ47mPz5Q+RnqticXKy5uJ1NnCMt8BgI0O s16mqt5rxsVNKZsPSLpmeA71oQEtl1oCOuUdGyj/bIg+3ZP0nW1G3tEVT5tISilQ uYoSdQEtiOmT5mNnqiVjIggBWyDMggHRGNTC+fd/N5DLf/QcQ60Svdx8bskiyni3 j4qVKLSJtTw9lnnuOod4LJLPHkg+VOSZV1KdK2+eUsgHGzXJeOE04e5JunJKJe5a ea9l2wFCHNSHkzrumiqWveunSbPGNOj2oLw= -----END CERTIFICATE-----Generated at Wed Jan 21 09:21:33 2026 by rpki-client