This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Ou57Ifih146zd_C9CeAY3DTPv8g.roa File: Ou57Ifih146zd_C9CeAY3DTPv8g.roa (raw, json) Hash identifier: nFr6QYICcOcRqKfEHZJUmNd2vCCfaCBjhGhTMk8x6aA= Subject key identifier: 3A:EE:7B:21:F8:A1:D7:8E:B3:77:F0:BD:09:E0:18:DC:34:CF:BF:C8 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F34C7D411E210143A30248995A7FA Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Ou57Ifih146zd_C9CeAY3DTPv8g.roa Signing time: Thu 01 Jan 2026 12:18:58 +0000 ROA not before: Thu 01 Jan 2026 12:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202656 IP address blocks: 103.147.170.0/24 maxlen: 24 103.148.141.0/24 maxlen: 24 103.149.85.0/24 maxlen: 24 103.152.175.0/24 maxlen: 24 130.49.5.0/24 maxlen: 24 130.49.14.0/24 maxlen: 24 130.49.17.0/24 maxlen: 24 130.49.22.0/24 maxlen: 24 130.49.24.0/24 maxlen: 24 130.49.31.0/24 maxlen: 24 130.49.32.0/24 maxlen: 24 130.49.39.0/24 maxlen: 24 130.49.42.0/24 maxlen: 24 130.49.47.0/24 maxlen: 24 130.49.51.0/24 maxlen: 24 130.49.55.0/24 maxlen: 24 130.49.60.0/24 maxlen: 24 130.49.62.0/24 maxlen: 24 130.49.68.0/24 maxlen: 24 130.49.70.0/24 maxlen: 24 130.49.81.0/24 maxlen: 24 130.49.84.0/24 maxlen: 24 130.49.89.0/24 maxlen: 24 130.49.92.0/24 maxlen: 24 130.49.96.0/24 maxlen: 24 130.49.101.0/24 maxlen: 24 130.49.104.0/24 maxlen: 24 130.49.110.0/24 maxlen: 24 130.49.111.0/24 maxlen: 24 130.49.122.0/24 maxlen: 24 130.49.125.0/24 maxlen: 24 138.249.28.0/24 maxlen: 24 138.249.52.0/24 maxlen: 24 138.249.54.0/24 maxlen: 24 138.249.58.0/24 maxlen: 24 138.249.59.0/24 maxlen: 24 138.249.77.0/24 maxlen: 24 138.249.84.0/24 maxlen: 24 138.249.86.0/24 maxlen: 24 138.249.88.0/24 maxlen: 24 138.249.91.0/24 maxlen: 24 155.212.34.0/24 maxlen: 24 155.212.44.0/24 maxlen: 24 155.212.46.0/24 maxlen: 24 155.212.53.0/24 maxlen: 24 155.212.55.0/24 maxlen: 24 155.212.60.0/24 maxlen: 24 155.212.63.0/24 maxlen: 24 155.212.67.0/24 maxlen: 24 155.212.74.0/24 maxlen: 24 155.212.75.0/24 maxlen: 24 155.212.81.0/24 maxlen: 24 155.212.82.0/24 maxlen: 24 155.212.89.0/24 maxlen: 24 155.212.92.0/24 maxlen: 24 155.212.96.0/24 maxlen: 24 155.212.101.0/24 maxlen: 24 155.212.104.0/24 maxlen: 24 155.212.115.0/24 maxlen: 24 155.212.117.0/24 maxlen: 24 155.212.122.0/24 maxlen: 24 155.212.126.0/24 maxlen: 24 170.168.207.0/24 maxlen: 24 170.168.212.0/24 maxlen: 24 170.168.223.0/24 maxlen: 24 170.168.228.0/24 maxlen: 24 170.168.238.0/24 maxlen: 24 170.168.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:34:c7:d4:11:e2:10:14:3a:30:24:89:95:a7:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3aee7b21f8a1d78eb377f0bd09e018dc34cfbfc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2c:1f:d7:70:ba:64:cb:c6:78:36:f5:77:c5: eb:f5:06:be:85:31:ad:4f:b0:79:4a:3c:0c:39:3c: c2:b4:e0:e4:c1:fa:2e:e8:64:b3:9d:c1:df:46:4f: b8:a6:11:e8:88:f4:26:eb:84:d7:09:ac:0c:6d:b1: a0:40:27:38:da:79:f8:92:4a:2d:a9:45:7e:95:e9: f3:fe:e3:ae:d9:23:4c:58:b7:ef:18:5a:6b:e2:77: a6:27:9f:e6:b0:ab:d1:4e:36:20:d8:20:91:98:98: 80:1a:9b:7f:b6:18:a4:6b:a4:be:7c:f3:36:ab:75: 2c:47:57:b7:eb:0c:6f:b1:d5:63:07:3f:14:0f:8d: 47:79:1e:78:f5:d6:6f:9b:0b:d4:35:d7:51:61:38: 86:a2:bc:22:86:46:9f:19:2d:6c:6b:f6:c4:1a:e4: 6b:be:09:a0:ba:96:5c:d8:81:6e:43:3a:2d:36:3f: 18:c6:2f:41:de:31:fc:a1:a7:19:f5:52:e0:f0:2c: 45:d7:7e:f4:b9:9b:6c:e9:e9:a7:18:cc:54:64:5f: 78:94:27:9c:dd:a3:72:8f:01:19:86:71:52:d2:db: 73:ff:e0:68:1f:1a:6a:1b:a3:25:d4:a7:2b:e8:53: 2b:94:c8:29:81:7c:3e:56:0a:75:f8:4c:97:3a:b6: e2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EE:7B:21:F8:A1:D7:8E:B3:77:F0:BD:09:E0:18:DC:34:CF:BF:C8 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Ou57Ifih146zd_C9CeAY3DTPv8g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.170.0/24 103.148.141.0/24 103.149.85.0/24 103.152.175.0/24 130.49.5.0/24 130.49.14.0/24 130.49.17.0/24 130.49.22.0/24 130.49.24.0/24 130.49.31.0-130.49.32.255 130.49.39.0/24 130.49.42.0/24 130.49.47.0/24 130.49.51.0/24 130.49.55.0/24 130.49.60.0/24 130.49.62.0/24 130.49.68.0/24 130.49.70.0/24 130.49.81.0/24 130.49.84.0/24 130.49.89.0/24 130.49.92.0/24 130.49.96.0/24 130.49.101.0/24 130.49.104.0/24 130.49.110.0/23 130.49.122.0/24 130.49.125.0/24 138.249.28.0/24 138.249.52.0/24 138.249.54.0/24 138.249.58.0/23 138.249.77.0/24 138.249.84.0/24 138.249.86.0/24 138.249.88.0/24 138.249.91.0/24 155.212.34.0/24 155.212.44.0/24 155.212.46.0/24 155.212.53.0/24 155.212.55.0/24 155.212.60.0/24 155.212.63.0/24 155.212.67.0/24 155.212.74.0/23 155.212.81.0-155.212.82.255 155.212.89.0/24 155.212.92.0/24 155.212.96.0/24 155.212.101.0/24 155.212.104.0/24 155.212.115.0/24 155.212.117.0/24 155.212.122.0/24 155.212.126.0/24 170.168.207.0/24 170.168.212.0/24 170.168.223.0/24 170.168.228.0/24 170.168.238.0/24 170.168.248.0/24 Signature Algorithm: sha256WithRSAEncryption 16:33:fd:8d:a3:ea:9a:84:36:ec:34:5a:78:5f:86:af:9a:6c: 9f:39:cc:e5:fc:b8:61:01:f7:3d:60:6b:77:ed:f7:ee:37:04: 24:73:c2:23:17:a8:3d:49:05:8c:fd:c0:d0:24:49:30:95:02: ad:d0:e3:66:3f:b0:40:a2:da:9b:6c:34:89:44:90:f6:42:de: e0:1b:bc:c4:26:bd:a8:e8:20:4e:89:f6:fd:c7:8f:aa:d0:57: 62:44:29:5a:48:46:05:e7:6f:e8:9c:93:7c:a7:24:d9:48:55: f6:1c:20:1c:f1:28:4e:3e:31:a2:c8:6b:d4:08:95:e8:42:6a: f4:00:a7:41:91:1f:f3:43:6b:17:de:c3:c5:79:c8:86:b6:42: c0:54:01:44:35:44:71:37:0a:02:95:1e:ba:76:e8:78:5b:3e: 14:df:e8:67:70:e5:3d:de:69:58:c1:04:61:38:a2:85:8b:d3: 03:22:d2:05:62:02:cb:a3:bd:a9:85:9a:90:ca:60:1a:28:0d: f7:10:dc:4f:15:77:71:04:5f:d5:c7:7c:d0:3e:c2:40:bb:79: bb:60:87:bd:91:65:bb:1b:7b:27:52:20:e6:1d:99:6a:7f:18: 04:93:1d:fc:9b:5b:1d:f8:a4:07:1b:43:a1:1f:b4:d0:a7:5f: 74:3f:b1:3d -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgISAZt5fzTH1BHiEBQ6MCSJlaf6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWVlN2IyMWY4YTFkNzhlYjM3N2YwYmQwOWUwMThkYzM0Y2ZiZmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlywf13C6ZMvGeDb1d8Xr9Qa+hTGt T7B5SjwMOTzCtODkwfou6GSzncHfRk+4phHoiPQm64TXCawMbbGgQCc42nn4kkot qUV+lenz/uOu2SNMWLfvGFpr4nemJ5/msKvRTjYg2CCRmJiAGpt/thika6S+fPM2 q3UsR1e36wxvsdVjBz8UD41HeR549dZvmwvUNddRYTiGorwihkafGS1sa/bEGuRr vgmgupZc2IFuQzotNj8Yxi9B3jH8oacZ9VLg8CxF1370uZts6emnGMxUZF94lCec 3aNyjwEZhnFS0ttz/+BoHxpqG6Ml1Kcr6FMrlMgpgXw+Vgp1+EyXOrbiuQIDAQAB o4IDlzCCA5MwHQYDVR0OBBYEFDrueyH4odeOs3fwvQngGNw0z7/IMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvT3U1N0lmaWgxNDZ6ZF9DOUNlQVkzRFRQdjhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBqwYIKwYBBQUHAQcBAf8EggGaMIIBljCCAZIEAgABMIIB igMEAGeTqgMEAGeUjQMEAGeVVQMEAGeYrwMEAIIxBQMEAIIxDgMEAIIxEQMEAIIx FgMEAIIxGDAMAwQAgjEfAwQAgjEgAwQAgjEnAwQAgjEqAwQAgjEvAwQAgjEzAwQA gjE3AwQAgjE8AwQAgjE+AwQAgjFEAwQAgjFGAwQAgjFRAwQAgjFUAwQAgjFZAwQA gjFcAwQAgjFgAwQAgjFlAwQAgjFoAwQBgjFuAwQAgjF6AwQAgjF9AwQAivkcAwQA ivk0AwQAivk2AwQBivk6AwQAivlNAwQAivlUAwQAivlWAwQAivlYAwQAivlbAwQA m9QiAwQAm9QsAwQAm9QuAwQAm9Q1AwQAm9Q3AwQAm9Q8AwQAm9Q/AwQAm9RDAwQB m9RKMAwDBACb1FEDBACb1FIDBACb1FkDBACb1FwDBACb1GADBACb1GUDBACb1GgD BACb1HMDBACb1HUDBACb1HoDBACb1H4DBACqqM8DBACqqNQDBACqqN8DBACqqOQD BACqqO4DBACqqPgwDQYJKoZIhvcNAQELBQADggEBABYz/Y2j6pqENuw0Wnhfhq+a bJ85zOX8uGEB9z1ga3ft9+43BCRzwiMXqD1JBYz9wNAkSTCVAq3Q42Y/sECi2pts NIlEkPZC3uAbvMQmvajoIE6J9v3Hj6rQV2JEKVpIRgXnb+ick3ynJNlIVfYcIBzx KE4+MaLIa9QIlehCavQAp0GRH/NDaxfew8V5yIa2QsBUAUQ1RHE3CgKVHrp26Hhb PhTf6Gdw5T3eaVjBBGE4ooWL0wMi0gViAsujvamFmpDKYBooDfcQ3E8Vd3EEX9XH fNA+wkC7ebtgh72RZbsbeydSIOYdmWp/GASTHfybWx34pAcbQ6EftNCnX3Q/sT0= -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:25 2026 by rpki-client