This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/3eqnljvrSMNuISjjLY9Ah3n7lpw.roa File: 3eqnljvrSMNuISjjLY9Ah3n7lpw.roa (raw, json) Hash identifier: nhZRSFOUbhyO77HJ5X/HRDhNGRKiiH9otVn6vKi9IGk= Subject key identifier: DD:EA:A7:96:3B:EB:48:C3:6E:21:28:E3:2D:8F:40:87:79:FB:96:9C Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b Certificate serial: 019B7C1334281E9DD6C8879176A9406EF290 Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/3eqnljvrSMNuISjjLY9Ah3n7lpw.roa Signing time: Fri 02 Jan 2026 00:19:51 +0000 ROA not before: Fri 02 Jan 2026 00:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26548 IP address blocks: 5.181.170.0/24 maxlen: 24 5.183.252.0/24 maxlen: 24 45.10.167.0/24 maxlen: 24 45.66.208.0/24 maxlen: 24 45.132.184.0/24 maxlen: 24 45.148.124.0/24 maxlen: 24 77.220.192.0/24 maxlen: 24 77.220.193.0/24 maxlen: 24 77.220.194.0/24 maxlen: 24 77.220.195.0/24 maxlen: 24 91.132.198.0/24 maxlen: 24 93.177.118.0/23 maxlen: 24 147.78.180.0/24 maxlen: 24 147.78.182.0/24 maxlen: 24 147.78.183.0/24 maxlen: 24 185.61.217.0/24 maxlen: 24 185.61.218.0/24 maxlen: 24 185.61.219.0/24 maxlen: 24 185.61.221.0/24 maxlen: 24 185.61.222.0/24 maxlen: 24 185.61.223.0/24 maxlen: 24 185.77.220.0/24 maxlen: 24 185.77.222.0/24 maxlen: 24 185.77.223.0/24 maxlen: 24 185.88.100.0/24 maxlen: 24 194.104.8.0/24 maxlen: 24 194.104.11.0/24 maxlen: 24 213.108.0.0/24 maxlen: 24 217.145.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:34:28:1e:9d:d6:c8:87:91:76:a9:40:6e:f2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b Validity Not Before: Jan 2 00:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddeaa7963beb48c36e2128e32d8f408779fb969c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:82:65:6d:da:ca:32:e6:86:2a:d5:95:4d:2c: f4:2a:15:8f:80:df:31:2c:fa:b2:bb:3f:0d:2e:ec: 39:00:ec:56:1b:8d:9c:6b:32:1b:ea:89:c2:09:fb: 38:2c:a2:02:66:de:8c:49:94:c9:7f:b3:73:f0:3d: 7d:84:6b:b9:f8:c9:2e:df:17:42:09:a5:cc:a5:29: b9:bb:31:b3:5d:10:89:38:75:ef:4a:dc:a4:97:25: 54:d5:67:de:f2:a5:95:3e:ca:2b:09:47:41:74:d2: a7:ac:12:e3:8d:91:cc:b7:68:b8:06:25:95:89:f8: 21:32:b3:d7:9f:d3:b8:f8:82:76:2f:26:18:29:19: bb:46:1a:a4:13:66:42:9a:6b:ea:d5:cb:fe:86:5a: 26:84:84:93:f6:97:48:41:06:fd:fb:45:e0:de:49: 8f:35:f2:9e:e7:3c:0e:75:85:e2:ac:27:60:2a:51: 3d:18:a7:84:31:0c:12:a5:9f:56:57:54:88:40:26: df:a9:85:ef:23:94:66:87:cc:98:7b:cc:52:de:9a: 9b:f9:c5:90:a7:19:79:11:a1:0c:4d:b4:1e:ae:c0: 7b:d1:3a:dd:9d:c0:48:90:da:ce:8a:b2:a5:f4:d8: f5:0d:8b:1e:fe:6b:a9:c4:c8:b2:6a:d9:80:5f:de: 13:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EA:A7:96:3B:EB:48:C3:6E:21:28:E3:2D:8F:40:87:79:FB:96:9C X509v3 Authority Key Identifier: keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/3eqnljvrSMNuISjjLY9Ah3n7lpw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.170.0/24 5.183.252.0/24 45.10.167.0/24 45.66.208.0/24 45.132.184.0/24 45.148.124.0/24 77.220.192.0/22 91.132.198.0/24 93.177.118.0/23 147.78.180.0/24 147.78.182.0/23 185.61.217.0-185.61.219.255 185.61.221.0-185.61.223.255 185.77.220.0/24 185.77.222.0/23 185.88.100.0/24 194.104.8.0/24 194.104.11.0/24 213.108.0.0/24 217.145.224.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:6c:4c:c5:ea:24:07:55:6d:ca:a1:a4:74:cf:09:b6:6d:9d: 6d:c3:9e:5e:24:68:fc:59:98:11:7c:28:c4:c5:89:4a:87:ba: 3e:7b:fe:f0:b6:d3:f4:a5:a8:3e:fd:ea:e3:c2:95:15:02:0f: 2f:52:a3:2a:1e:9f:55:72:f9:11:e3:62:93:6c:6c:fe:c6:98: 73:84:a9:05:2a:0d:4e:69:1d:42:04:0f:35:a8:c3:ef:a5:c2: 80:ea:65:97:73:72:7a:c2:63:d5:8a:e2:cc:38:d9:6e:7c:94: 4a:c3:5b:33:2e:2d:b8:d1:fa:fd:fe:03:53:f1:c3:af:23:a0: bf:21:ce:c2:22:25:85:47:c7:09:8b:d6:f2:fc:04:db:2d:b2: 11:da:5a:e7:70:47:50:fb:05:f8:85:e4:1e:06:c3:5c:fe:82: c1:ef:ab:55:d9:d9:3d:7c:93:c2:ea:67:7e:3c:25:0d:93:99: 02:ae:ab:92:03:9b:b1:76:f2:41:af:84:0f:3d:58:c0:d2:97: 13:df:47:dc:55:75:30:2f:d8:a6:42:7a:dd:c8:fb:50:a5:e6: c0:9c:08:c3:57:a7:ec:b8:5d:34:a6:7e:61:fc:ed:20:82:1c: 63:60:91:54:44:3a:d4:e0:86:11:49:18:a2:c3:7b:e2:bf:7b: 1e:db:30:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt8EzQoHp3WyIeRdqlAbvKQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4 OWU4NWIwHhcNMjYwMTAyMDAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGVhYTc5NjNiZWI0OGMzNmUyMTI4ZTMyZDhmNDA4Nzc5ZmI5NjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYJlbdrKMuaGKtWVTSz0KhWPgN8x LPqyuz8NLuw5AOxWG42cazIb6onCCfs4LKICZt6MSZTJf7Nz8D19hGu5+Mku3xdC CaXMpSm5uzGzXRCJOHXvStyklyVU1Wfe8qWVPsorCUdBdNKnrBLjjZHMt2i4BiWV ifghMrPXn9O4+IJ2LyYYKRm7RhqkE2ZCmmvq1cv+hlomhIST9pdIQQb9+0Xg3kmP NfKe5zwOdYXirCdgKlE9GKeEMQwSpZ9WV1SIQCbfqYXvI5Rmh8yYe8xS3pqb+cWQ pxl5EaEMTbQersB70TrdncBIkNrOirKl9Nj1DYse/mupxMiyatmAX94TXQIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFN3qp5Y760jDbiEo4y2PQId5+5acMB8GA1UdIwQY MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt NmVlNTM0ZDkyZTUyLzEvM2VxbmxqdnJTTU51SVNqakxZOUFoM243bHB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGlBggrBgEFBQcBBwEB/wSBlTCBkjCBjwQCAAEwgYgDBAAF taoDBAAFt/wDBAAtCqcDBAAtQtADBAAthLgDBAAtlHwDBAJN3MADBABbhMYDBAFd sXYDBACTTrQDBAGTTrYwDAMEALk92QMEArk92DAMAwQAuT3dAwQFuT3AAwQAuU3c AwQBuU3eAwQAuVhkAwQAwmgIAwQAwmgLAwQA1WwAAwQA2ZHgMA0GCSqGSIb3DQEB CwUAA4IBAQB8bEzF6iQHVW3KoaR0zwm2bZ1tw55eJGj8WZgRfCjExYlKh7o+e/7w ttP0pag+/erjwpUVAg8vUqMqHp9VcvkR42KTbGz+xphzhKkFKg1OaR1CBA81qMPv pcKA6mWXc3J6wmPViuLMONlufJRKw1szLi240fr9/gNT8cOvI6C/Ic7CIiWFR8cJ i9by/ATbLbIR2lrncEdQ+wX4heQeBsNc/oLB76tV2dk9fJPC6md+PCUNk5kCrquS A5uxdvJBr4QPPVjA0pcT30fcVXUwL9imQnrdyPtQpebAnAjDV6fsuF00pn5h/O0g ghxjYJFURDrU4IYRSRiiw3viv3se2zDu -----END CERTIFICATE-----Generated at Tue Jan 20 00:06:17 2026 by rpki-client