This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/_uCqQ-C25LVlCCZ5xALvMVlA-uw.roa File: _uCqQ-C25LVlCCZ5xALvMVlA-uw.roa (raw, json) Hash identifier: Q1C2FF8SyEZTzgULPoW5CyCHfI3hgG4N4ej8oSE+LNU= Subject key identifier: FE:E0:AA:43:E0:B6:E4:B5:65:08:26:79:C4:02:EF:31:59:40:FA:EC Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB744EAF384D9C2D1049AA656EEF80 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/_uCqQ-C25LVlCCZ5xALvMVlA-uw.roa Signing time: Fri 02 Jan 2026 08:20:44 +0000 ROA not before: Fri 02 Jan 2026 08:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 5.42.218.0/24 maxlen: 24 31.41.253.0/24 maxlen: 24 45.87.124.0/24 maxlen: 24 45.87.125.0/24 maxlen: 24 45.87.127.0/24 maxlen: 24 45.128.124.0/24 maxlen: 24 45.128.128.0/24 maxlen: 24 45.129.198.0/24 maxlen: 24 45.150.112.0/24 maxlen: 24 62.3.7.0/24 maxlen: 24 62.3.31.0/24 maxlen: 24 77.72.83.0/24 maxlen: 24 77.72.84.0/24 maxlen: 24 84.252.69.0/24 maxlen: 24 88.151.11.0/24 maxlen: 24 88.151.112.0/24 maxlen: 24 88.151.115.0/24 maxlen: 24 88.218.184.0/24 maxlen: 24 88.218.185.0/24 maxlen: 24 88.218.186.0/24 maxlen: 24 88.218.187.0/24 maxlen: 24 91.190.158.0/24 maxlen: 24 91.209.31.0/24 maxlen: 24 91.210.68.0/24 maxlen: 24 91.210.69.0/24 maxlen: 24 91.210.71.0/24 maxlen: 24 91.212.169.0/24 maxlen: 24 91.228.215.0/24 maxlen: 24 91.239.212.0/24 maxlen: 24 91.239.213.0/24 maxlen: 24 94.143.230.0/24 maxlen: 24 109.205.62.0/24 maxlen: 24 146.19.51.0/24 maxlen: 24 146.19.111.0/24 maxlen: 24 146.19.120.0/24 maxlen: 24 146.255.186.0/24 maxlen: 24 176.116.17.0/24 maxlen: 24 176.118.38.0/24 maxlen: 24 176.126.98.0/24 maxlen: 24 176.126.102.0/24 maxlen: 24 185.94.67.0/24 maxlen: 24 185.109.236.0/24 maxlen: 24 185.109.237.0/24 maxlen: 24 185.109.238.0/24 maxlen: 24 185.109.239.0/24 maxlen: 24 185.128.41.0/24 maxlen: 24 185.128.42.0/24 maxlen: 24 185.128.43.0/24 maxlen: 24 185.128.224.0/24 maxlen: 24 185.209.50.0/24 maxlen: 24 185.211.168.0/24 maxlen: 24 185.211.169.0/24 maxlen: 24 185.211.171.0/24 maxlen: 24 185.214.164.0/24 maxlen: 24 185.214.165.0/24 maxlen: 24 185.214.167.0/24 maxlen: 24 185.244.161.0/24 maxlen: 24 193.0.62.0/24 maxlen: 24 193.17.65.0/24 maxlen: 24 193.33.188.0/24 maxlen: 24 193.104.177.0/24 maxlen: 24 193.200.61.0/24 maxlen: 24 193.228.129.0/24 maxlen: 24 193.228.131.0/24 maxlen: 24 194.59.222.0/24 maxlen: 24 194.60.76.0/24 maxlen: 24 194.110.251.0/24 maxlen: 24 195.35.105.0/24 maxlen: 24 195.64.103.0/24 maxlen: 24 195.69.161.0/24 maxlen: 24 195.69.162.0/24 maxlen: 24 195.211.164.0/24 maxlen: 24 212.6.36.0/24 maxlen: 24 212.107.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:74:4e:af:38:4d:9c:2d:10:49:aa:65:6e:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fee0aa43e0b6e4b565082679c402ef315940faec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:45:b0:50:29:3b:3b:5d:ce:fa:9f:80:c8:8c: 1c:75:ea:9d:4d:45:44:06:c1:90:08:1a:7b:fe:a3: 4c:0d:94:f1:67:23:cd:88:c1:42:69:ab:37:4e:1d: ef:e0:1a:35:42:04:2e:50:8b:cf:f7:90:84:d0:49: 54:77:53:04:55:ad:3a:2c:fe:a2:33:5c:8a:5a:cd: 62:03:77:c3:6c:4e:a9:c0:d5:0f:3e:e7:a7:d7:b1: 29:ca:7e:33:ba:9b:25:5d:da:52:dc:90:09:5a:68: c4:cb:3f:60:2c:4f:45:f6:93:d5:05:74:05:73:a3: 98:a7:8f:05:3b:95:d4:e1:6b:d0:5d:13:3f:40:f0: 6c:08:57:72:c2:ad:58:d8:7b:b9:90:77:67:8c:d5: 61:a8:3c:fe:c4:41:e0:0f:23:2a:f7:fb:3c:d6:20: 40:fe:b9:8a:4f:5e:8b:0c:7b:95:17:3b:77:a8:58: fc:5c:6d:c3:9a:26:a7:cb:2e:94:ec:26:47:9a:5d: 39:fa:59:f3:c5:7f:70:3a:72:df:ab:3e:a8:5a:da: e8:e2:da:c7:5c:f8:bb:43:ad:ec:db:d7:d0:b9:45: 34:23:af:0f:04:73:c2:06:80:d0:05:3a:c6:bf:27: 7d:36:10:c1:82:e5:4e:ee:83:38:29:0e:9e:19:40: e9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E0:AA:43:E0:B6:E4:B5:65:08:26:79:C4:02:EF:31:59:40:FA:EC X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/_uCqQ-C25LVlCCZ5xALvMVlA-uw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.218.0/24 31.41.253.0/24 45.87.124.0/23 45.87.127.0/24 45.128.124.0/24 45.128.128.0/24 45.129.198.0/24 45.150.112.0/24 62.3.7.0/24 62.3.31.0/24 77.72.83.0-77.72.84.255 84.252.69.0/24 88.151.11.0/24 88.151.112.0/24 88.151.115.0/24 88.218.184.0/22 91.190.158.0/24 91.209.31.0/24 91.210.68.0/23 91.210.71.0/24 91.212.169.0/24 91.228.215.0/24 91.239.212.0/23 94.143.230.0/24 109.205.62.0/24 146.19.51.0/24 146.19.111.0/24 146.19.120.0/24 146.255.186.0/24 176.116.17.0/24 176.118.38.0/24 176.126.98.0/24 176.126.102.0/24 185.94.67.0/24 185.109.236.0/22 185.128.41.0-185.128.43.255 185.128.224.0/24 185.209.50.0/24 185.211.168.0/23 185.211.171.0/24 185.214.164.0/23 185.214.167.0/24 185.244.161.0/24 193.0.62.0/24 193.17.65.0/24 193.33.188.0/24 193.104.177.0/24 193.200.61.0/24 193.228.129.0/24 193.228.131.0/24 194.59.222.0/24 194.60.76.0/24 194.110.251.0/24 195.35.105.0/24 195.64.103.0/24 195.69.161.0-195.69.162.255 195.211.164.0/24 212.6.36.0/24 212.107.25.0/24 Signature Algorithm: sha256WithRSAEncryption 20:19:fe:eb:31:7a:c0:e6:cf:a8:4c:97:c6:7a:79:08:6a:f0: e9:57:f5:70:84:0d:a9:cf:f0:9f:66:f3:b9:79:fa:d1:a8:70: 29:30:8c:d5:39:47:a2:d5:17:60:d1:63:48:59:12:cf:64:09: 94:d3:6a:ab:62:f6:2e:86:e3:38:b5:10:25:5e:a8:50:eb:e9: 38:3f:1c:87:f7:a9:1e:87:75:64:50:66:1c:8b:d3:db:20:71: 28:54:13:5e:45:a2:93:c5:7b:45:aa:8c:32:64:c4:a2:f6:86: a4:0e:4a:d3:9e:41:2d:a1:6a:9f:30:33:e4:2e:88:cb:54:fa: 86:8f:92:97:91:ed:c6:b0:b9:88:ea:dd:88:eb:26:d8:3f:3f: a3:e7:96:f7:78:59:ed:30:04:9b:09:56:c9:0f:b7:96:41:a0: 76:97:8e:95:56:59:ce:73:05:91:a8:30:9d:4e:ca:e1:a8:1a: 6f:5c:b9:ec:ef:57:ef:91:8d:ea:6d:18:af:06:0f:5f:54:b4: 62:45:d5:d0:e9:2f:c4:ce:1d:5a:51:5c:5b:1a:af:40:61:16: 5a:e4:3b:61:6c:64:a3:cd:6c:4a:3e:a2:3c:1f:3e:fe:0c:df: 60:79:33:19:ed:b5:85:e2:be:02:a9:5e:67:64:aa:a8:49:ba: 98:9e:7f:63 -----BEGIN CERTIFICATE----- MIIGezCCBWOgAwIBAgISAZt9y3ROrzhNnC0QSaplbu+AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWUwYWE0M2UwYjZlNGI1NjUwODI2NzljNDAyZWYzMTU5NDBmYWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUWwUCk7O13O+p+AyIwcdeqdTUVE BsGQCBp7/qNMDZTxZyPNiMFCaas3Th3v4Bo1QgQuUIvP95CE0ElUd1MEVa06LP6i M1yKWs1iA3fDbE6pwNUPPuen17Epyn4zupslXdpS3JAJWmjEyz9gLE9F9pPVBXQF c6OYp48FO5XU4WvQXRM/QPBsCFdywq1Y2Hu5kHdnjNVhqDz+xEHgDyMq9/s81iBA /rmKT16LDHuVFzt3qFj8XG3Dmianyy6U7CZHml05+lnzxX9wOnLfqz6oWtro4trH XPi7Q63s29fQuUU0I68PBHPCBoDQBTrGvyd9NhDBguVO7oM4KQ6eGUDp8QIDAQAB o4IDhzCCA4MwHQYDVR0OBBYEFP7gqkPgtuS1ZQgmecQC7zFZQPrsMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvX3VDcVEtQzI1TFZsQ0NaNXhBTHZNVmxBLXV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBmwYIKwYBBQUHAQcBAf8EggGKMIIBhjCCAYIEAgABMIIB egMEAAUq2gMEAB8p/QMEAS1XfAMEAC1XfwMEAC2AfAMEAC2AgAMEAC2BxgMEAC2W cAMEAD4DBwMEAD4DHzAMAwQATUhTAwQATUhUAwQAVPxFAwQAWJcLAwQAWJdwAwQA WJdzAwQCWNq4AwQAW76eAwQAW9EfAwQBW9JEAwQAW9JHAwQAW9SpAwQAW+TXAwQB W+/UAwQAXo/mAwQAbc0+AwQAkhMzAwQAkhNvAwQAkhN4AwQAkv+6AwQAsHQRAwQA sHYmAwQAsH5iAwQAsH5mAwQAuV5DAwQCuW3sMAwDBAC5gCkDBAK5gCgDBAC5gOAD BAC50TIDBAG506gDBAC506sDBAG51qQDBAC51qcDBAC59KEDBADBAD4DBADBEUED BADBIbwDBADBaLEDBADByD0DBADB5IEDBADB5IMDBADCO94DBADCPEwDBADCbvsD BADDI2kDBADDQGcwDAMEAMNFoQMEAMNFogMEAMPTpAMEANQGJAMEANRrGTANBgkq hkiG9w0BAQsFAAOCAQEAIBn+6zF6wObPqEyXxnp5CGrw6Vf1cIQNqc/wn2bzuXn6 0ahwKTCM1TlHotUXYNFjSFkSz2QJlNNqq2L2LobjOLUQJV6oUOvpOD8ch/epHod1 ZFBmHIvT2yBxKFQTXkWik8V7RaqMMmTEovaGpA5K055BLaFqnzAz5C6Iy1T6ho+S l5HtxrC5iOrdiOsm2D8/o+eW93hZ7TAEmwlWyQ+3lkGgdpeOlVZZznMFkagwnU7K 4agab1y57O9X75GN6m0YrwYPX1S0YkXV0OkvxM4dWlFcWxqvQGEWWuQ7YWxko81s Sj6iPB8+/gzfYHkzGe21heK+AqleZ2SqqEm6mJ5/Yw== -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:52 2026 by rpki-client