This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/KXLTLwTPKBiZN6esiKG0y1Vkb_A.roa File: KXLTLwTPKBiZN6esiKG0y1Vkb_A.roa (raw, json) Hash identifier: 5MjMmws8ncjSHeVa5J4LmPdEnI2b6Mjqn9vh8n6pFxs= Subject key identifier: 29:72:D3:2F:04:CF:28:18:99:37:A7:AC:88:A1:B4:CB:55:64:6F:F0 Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Certificate serial: 019C3CF93E3F7275DCBA13BA559DFDD88246 Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/KXLTLwTPKBiZN6esiKG0y1Vkb_A.roa Signing time: Sun 08 Feb 2026 11:18:13 +0000 ROA not before: Sun 08 Feb 2026 11:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50810 IP address blocks: 5.201.128.0/18 maxlen: 18 5.201.128.0/21 maxlen: 21 5.201.128.0/22 maxlen: 22 5.201.132.0/22 maxlen: 22 5.201.136.0/22 maxlen: 22 5.201.138.0/24 maxlen: 24 5.201.140.0/22 maxlen: 22 5.201.142.0/23 maxlen: 23 5.201.144.0/21 maxlen: 21 5.201.144.0/22 maxlen: 22 5.201.144.0/23 maxlen: 23 5.201.148.0/22 maxlen: 22 5.201.152.0/22 maxlen: 22 5.201.156.0/22 maxlen: 22 5.201.160.0/22 maxlen: 22 5.201.160.0/23 maxlen: 23 5.201.162.0/24 maxlen: 24 5.201.163.0/24 maxlen: 24 5.201.164.0/22 maxlen: 22 5.201.168.0/22 maxlen: 22 5.201.172.0/22 maxlen: 22 5.201.174.0/24 maxlen: 24 5.201.174.240/30 maxlen: 30 5.201.176.0/22 maxlen: 22 5.201.180.0/22 maxlen: 22 5.201.184.0/22 maxlen: 22 5.201.188.0/22 maxlen: 22 37.156.16.0/21 maxlen: 21 37.156.16.0/22 maxlen: 22 37.156.20.0/22 maxlen: 22 37.156.24.0/22 maxlen: 22 37.156.28.0/22 maxlen: 22 37.156.30.0/23 maxlen: 23 37.156.31.0/24 maxlen: 24 45.83.12.0/22 maxlen: 22 45.95.88.0/22 maxlen: 22 45.248.164.0/22 maxlen: 22 46.36.97.0/24 maxlen: 24 46.36.100.0/24 maxlen: 24 46.36.101.0/24 maxlen: 24 46.36.102.0/23 maxlen: 23 46.36.102.0/24 maxlen: 24 46.36.103.0/24 maxlen: 24 46.36.105.0/24 maxlen: 24 46.36.106.0/24 maxlen: 24 80.94.80.0/23 maxlen: 23 89.37.0.0/20 maxlen: 20 89.37.0.0/22 maxlen: 22 89.37.0.0/24 maxlen: 24 89.37.4.0/22 maxlen: 22 89.37.8.0/22 maxlen: 22 89.37.8.0/24 maxlen: 24 89.37.12.0/22 maxlen: 22 89.37.12.0/24 maxlen: 24 89.37.14.0/24 maxlen: 24 89.37.15.0/24 maxlen: 24 89.40.35.0/24 maxlen: 24 89.43.0.0/21 maxlen: 21 89.43.0.0/22 maxlen: 22 89.43.4.0/22 maxlen: 22 89.43.8.0/22 maxlen: 22 89.43.10.0/23 maxlen: 23 89.43.12.0/22 maxlen: 22 89.43.12.0/23 maxlen: 23 91.209.183.0/24 maxlen: 24 91.209.184.0/24 maxlen: 24 91.239.59.0/24 maxlen: 24 92.114.16.0/20 maxlen: 24 92.114.20.0/22 maxlen: 22 92.114.20.0/23 maxlen: 23 92.114.21.0/24 maxlen: 24 92.114.22.0/23 maxlen: 23 92.114.24.0/21 maxlen: 21 92.114.24.0/22 maxlen: 22 92.114.25.0/24 maxlen: 24 92.114.28.0/22 maxlen: 22 94.101.128.0/20 maxlen: 24 94.101.128.0/21 maxlen: 21 94.101.128.0/22 maxlen: 22 94.101.132.0/22 maxlen: 22 94.101.136.0/22 maxlen: 22 94.101.139.0/24 maxlen: 24 94.101.140.0/22 maxlen: 22 94.101.140.0/23 maxlen: 23 94.101.142.0/23 maxlen: 23 94.101.142.0/24 maxlen: 24 103.111.69.0/24 maxlen: 24 103.111.71.0/24 maxlen: 24 103.132.228.0/23 maxlen: 23 103.132.228.0/24 maxlen: 24 103.132.229.0/24 maxlen: 24 103.140.128.0/23 maxlen: 23 103.217.124.0/22 maxlen: 22 176.126.223.0/24 maxlen: 24 185.22.30.0/23 maxlen: 23 185.103.84.0/22 maxlen: 22 185.103.84.0/24 maxlen: 24 185.103.85.0/24 maxlen: 24 185.135.228.0/22 maxlen: 22 185.135.230.0/24 maxlen: 24 185.135.231.0/24 maxlen: 24 185.136.100.0/22 maxlen: 22 185.162.40.0/22 maxlen: 22 185.175.76.0/23 maxlen: 23 185.175.78.0/23 maxlen: 23 185.176.32.0/22 maxlen: 22 185.182.220.0/22 maxlen: 22 185.182.220.0/24 maxlen: 24 185.182.221.0/24 maxlen: 24 185.182.222.0/23 maxlen: 23 185.255.98.0/23 maxlen: 23 188.213.64.0/20 maxlen: 21 188.213.64.0/22 maxlen: 22 188.213.64.0/24 maxlen: 24 188.213.68.0/22 maxlen: 22 188.213.71.0/24 maxlen: 24 188.213.72.0/22 maxlen: 22 188.213.72.0/24 maxlen: 24 188.213.73.0/24 maxlen: 24 188.213.74.0/24 maxlen: 24 188.213.75.0/24 maxlen: 24 188.213.76.0/22 maxlen: 22 193.30.30.0/24 maxlen: 24 193.46.214.0/24 maxlen: 24 194.180.238.0/24 maxlen: 24 194.242.22.0/24 maxlen: 24 195.149.127.0/24 maxlen: 24 2a00:5ca0::/29 maxlen: 29 2a00:5ca0::/31 maxlen: 31 2a00:5ca0::/32 maxlen: 32 2a00:5ca2::/31 maxlen: 31 2a00:5ca4::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:3c:f9:3e:3f:72:75:dc:ba:13:ba:55:9d:fd:d8:82:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Validity Not Before: Feb 8 11:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2972d32f04cf28189937a7ac88a1b4cb55646ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:47:9e:f7:6d:d8:0c:c7:f3:8a:53:c5:5f:8f: de:e5:11:1c:4e:fb:47:95:4d:e8:35:61:21:e7:a0: 75:9e:70:43:c0:01:ae:74:3d:e1:1b:a1:d8:92:05: 27:f6:c1:14:a1:c2:93:15:28:cd:33:ef:65:d2:12: b2:e4:76:72:48:ef:6e:81:67:1c:c9:07:d1:d3:be: da:57:41:00:10:84:cf:55:12:7e:7d:8a:9d:58:1e: 34:75:d7:de:4e:1b:bf:b6:a8:02:1c:13:8e:98:ed: 98:ed:d8:88:d5:20:f1:07:8c:c9:0b:e3:7a:66:a9: df:6b:2f:b9:40:d1:2e:ce:3c:b3:5a:56:b5:57:34: 1d:ce:b7:6b:de:db:9b:e4:3e:81:da:62:a5:78:d9: 40:1b:7e:d2:0e:80:a0:1e:ed:45:82:9e:ec:a5:4e: ec:b6:69:5f:2f:a0:19:01:cc:48:80:f2:3f:56:cd: 93:7d:af:66:9c:60:73:1d:62:19:62:c9:ca:54:fe: 2f:dc:d7:f4:49:f3:9f:25:4f:0c:bc:95:12:db:07: 5b:01:84:63:04:3a:1f:26:39:c5:75:ac:58:a2:9f: 35:3e:40:c1:d8:1a:c1:9a:9d:0a:9c:18:e2:8f:a2: 31:89:02:c3:2d:0a:9f:6f:25:02:db:9b:67:7b:a3: 38:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:72:D3:2F:04:CF:28:18:99:37:A7:AC:88:A1:B4:CB:55:64:6F:F0 X509v3 Authority Key Identifier: keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/KXLTLwTPKBiZN6esiKG0y1Vkb_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.201.128.0/18 37.156.16.0/20 45.83.12.0/22 45.95.88.0/22 45.248.164.0/22 46.36.97.0/24 46.36.100.0/22 46.36.105.0-46.36.106.255 80.94.80.0/23 89.37.0.0/20 89.40.35.0/24 89.43.0.0/20 91.209.183.0-91.209.184.255 91.239.59.0/24 92.114.16.0/20 94.101.128.0/20 103.111.69.0/24 103.111.71.0/24 103.132.228.0/23 103.140.128.0/23 103.217.124.0/22 176.126.223.0/24 185.22.30.0/23 185.103.84.0/22 185.135.228.0/22 185.136.100.0/22 185.162.40.0/22 185.175.76.0/22 185.176.32.0/22 185.182.220.0/22 185.255.98.0/23 188.213.64.0/20 193.30.30.0/24 193.46.214.0/24 194.180.238.0/24 194.242.22.0/24 195.149.127.0/24 IPv6: 2a00:5ca0::/29 Signature Algorithm: sha256WithRSAEncryption 57:50:43:cf:ef:e0:50:24:2f:c5:1e:4a:0b:9d:fe:c5:45:f5: c4:31:ae:3f:c3:b6:91:2a:3c:bb:92:a4:be:58:cd:54:29:a8: 9d:91:3a:84:45:28:6d:d1:9d:62:82:4d:b5:9b:25:10:32:c5: 82:35:1f:9e:c0:88:e0:9a:16:19:85:7d:71:7e:2b:da:73:13: 25:10:ac:8d:95:28:24:81:ee:a5:e5:53:3c:59:19:b6:ad:05: 46:23:33:fd:5b:7d:0e:20:29:f7:75:f6:79:5a:10:7b:08:df: 6a:10:15:93:a7:ee:f4:f8:8f:0f:05:63:d7:b9:14:38:cf:7a: 96:3c:15:d5:88:51:a8:ad:be:d6:1c:ce:0f:a3:28:c2:2c:ca: 91:dd:d6:69:19:b8:34:6d:db:49:0b:9a:0c:89:17:26:51:51: ae:3b:7d:f1:ba:e2:bc:4e:c0:52:5b:ef:44:95:94:54:56:24: 00:98:55:45:0c:78:27:0a:16:b0:27:07:02:62:30:c7:ab:68: b3:98:23:04:e3:8b:57:d0:9b:4b:64:45:a4:a2:18:ca:bc:69: 36:64:eb:80:90:17:74:08:25:d4:31:4f:40:54:52:f9:c0:78: 60:0f:ad:c8:bf:24:59:21:a2:26:06:a7:76:9f:73:54:c4:65: d5:24:d4:55 -----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgISAZw8+T4/cnXcuhO6VZ392IJGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4 OTk1YWIwHhcNMjYwMjA4MTExODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTcyZDMyZjA0Y2YyODE4OTkzN2E3YWM4OGExYjRjYjU1NjQ2ZmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00ee923YDMfzilPFX4/e5REcTvtH lU3oNWEh56B1nnBDwAGudD3hG6HYkgUn9sEUocKTFSjNM+9l0hKy5HZySO9ugWcc yQfR077aV0EAEITPVRJ+fYqdWB40ddfeThu/tqgCHBOOmO2Y7diI1SDxB4zJC+N6 Zqnfay+5QNEuzjyzWla1VzQdzrdr3tub5D6B2mKleNlAG37SDoCgHu1Fgp7spU7s tmlfL6AZAcxIgPI/Vs2Tfa9mnGBzHWIZYsnKVP4v3Nf0SfOfJU8MvJUS2wdbAYRj BDofJjnFdaxYop81PkDB2BrBmp0KnBjij6IxiQLDLQqfbyUC25tne6M4UwIDAQAB o4IDCDCCAwQwHQYDVR0OBBYEFCly0y8EzygYmTenrIihtMtVZG/wMB8GA1UdIwQY MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt NDBiNmQ2N2ZjZDk0LzEvS1hMVEx3VFBLQmlaTjZlc2lLRzB5MVZrYl9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0 LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBHAYIKwYBBQUHAQcBAf8EggELMIIBBzCB9QQCAAEwge4D BAYFyYADBAQlnBADBAItUwwDBAItX1gDBAIt+KQDBAAuJGEDBAIuJGQwDAMEAC4k aQMEAC4kagMEAVBeUAMEBFklAAMEAFkoIwMEBFkrADAMAwQAW9G3AwQAW9G4AwQA W+87AwQEXHIQAwQEXmWAAwQAZ29FAwQAZ29HAwQBZ4TkAwQBZ4yAAwQCZ9l8AwQA sH7fAwQBuRYeAwQCuWdUAwQCuYfkAwQCuYhkAwQCuaIoAwQCua9MAwQCubAgAwQC ubbcAwQBuf9iAwQEvNVAAwQAwR4eAwQAwS7WAwQAwrTuAwQAwvIWAwQAw5V/MA0E AgACMAcDBQMqAFygMA0GCSqGSIb3DQEBCwUAA4IBAQBXUEPP7+BQJC/FHkoLnf7F RfXEMa4/w7aRKjy7kqS+WM1UKaidkTqERSht0Z1igk21myUQMsWCNR+ewIjgmhYZ hX1xfivacxMlEKyNlSgkge6l5VM8WRm2rQVGIzP9W30OICn3dfZ5WhB7CN9qEBWT p+70+I8PBWPXuRQ4z3qWPBXViFGorb7WHM4PoyjCLMqR3dZpGbg0bdtJC5oMiRcm UVGuO33xuuK8TsBSW+9ElZRUViQAmFVFDHgnChawJwcCYjDHq2izmCME44tX0JtL ZEWkohjKvGk2ZOuAkBd0CCXUMU9AVFL5wHhgD63IvyRZIaImBqd2n3NUxGXVJNRV -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:39 2026 by rpki-client