This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/6XTvKYOWArxSLCYpZyFtRKy1BwY.roa File: 6XTvKYOWArxSLCYpZyFtRKy1BwY.roa (raw, json) Hash identifier: q+OFHDRHt78V30ra3TlTCxASRgABfMuSa8g4ROPV36E= Subject key identifier: E9:74:EF:29:83:96:02:BC:52:2C:26:29:67:21:6D:44:AC:B5:07:06 Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b Certificate serial: 019C15D8B7F0B134FADF7C20438A2B58F613 Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/6XTvKYOWArxSLCYpZyFtRKy1BwY.roa Signing time: Sat 31 Jan 2026 20:57:30 +0000 ROA not before: Sat 31 Jan 2026 20:57:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59588 IP address blocks: 5.252.132.0/22 maxlen: 24 5.252.135.0/24 maxlen: 24 45.153.116.0/23 maxlen: 23 45.153.116.0/24 maxlen: 24 45.153.117.0/24 maxlen: 24 45.153.118.0/23 maxlen: 23 45.153.118.0/24 maxlen: 24 45.153.119.0/24 maxlen: 24 151.236.160.0/23 maxlen: 23 151.236.160.0/24 maxlen: 24 151.236.161.0/24 maxlen: 24 151.236.162.0/23 maxlen: 23 151.236.162.0/24 maxlen: 24 151.236.163.0/24 maxlen: 24 151.236.164.0/23 maxlen: 23 151.236.164.0/24 maxlen: 24 151.236.165.0/24 maxlen: 24 151.236.166.0/23 maxlen: 23 151.236.166.0/24 maxlen: 24 151.236.167.0/24 maxlen: 24 151.236.168.0/23 maxlen: 23 151.236.168.0/24 maxlen: 24 151.236.169.0/24 maxlen: 24 151.236.170.0/23 maxlen: 23 151.236.170.0/24 maxlen: 24 151.236.171.0/24 maxlen: 24 151.236.172.0/23 maxlen: 23 151.236.172.0/24 maxlen: 24 151.236.173.0/24 maxlen: 24 151.236.174.0/23 maxlen: 23 151.236.174.0/24 maxlen: 24 151.236.175.0/24 maxlen: 24 151.236.176.0/23 maxlen: 23 151.236.176.0/24 maxlen: 24 151.236.177.0/24 maxlen: 24 151.236.178.0/23 maxlen: 23 151.236.178.0/24 maxlen: 24 151.236.179.0/24 maxlen: 24 151.236.180.0/23 maxlen: 23 151.236.180.0/24 maxlen: 24 151.236.181.0/24 maxlen: 24 151.236.182.0/23 maxlen: 24 151.236.182.0/24 maxlen: 24 151.236.183.0/24 maxlen: 24 151.236.186.0/24 maxlen: 24 151.236.188.0/23 maxlen: 23 151.236.188.0/24 maxlen: 24 151.236.189.0/24 maxlen: 24 151.236.190.0/23 maxlen: 23 151.236.190.0/24 maxlen: 24 151.236.191.0/24 maxlen: 24 194.59.28.0/23 maxlen: 24 194.59.28.0/24 maxlen: 24 194.59.29.0/24 maxlen: 24 198.160.164.0/24 maxlen: 24 198.160.165.0/24 maxlen: 24 198.160.166.0/24 maxlen: 24 198.160.167.0/24 maxlen: 24 198.160.168.0/23 maxlen: 23 198.160.168.0/24 maxlen: 24 198.160.169.0/24 maxlen: 24 198.176.116.0/23 maxlen: 23 198.176.116.0/24 maxlen: 24 198.176.117.0/24 maxlen: 24 2a10:2200:1::/48 maxlen: 48 2a10:2200:2::/48 maxlen: 48 2a10:2200:3::/48 maxlen: 48 2a10:2200:4::/48 maxlen: 48 2a10:2200:6::/48 maxlen: 48 2a10:2200:7::/48 maxlen: 48 2a10:2200:8::/48 maxlen: 48 2a10:2200:b::/48 maxlen: 48 2a10:2200:c::/48 maxlen: 48 2a10:2200:d::/48 maxlen: 48 2a10:2200:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:15:d8:b7:f0:b1:34:fa:df:7c:20:43:8a:2b:58:f6:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b Validity Not Before: Jan 31 20:57:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e974ef29839602bc522c262967216d44acb50706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:22:31:97:4f:71:a2:b8:c9:77:62:ae:0d:8a: 43:1d:1d:b0:e3:81:b1:e9:3d:77:3e:8e:c9:3e:1b: 37:40:60:6f:f5:1e:42:30:3e:0e:d4:d0:56:d2:d0: f7:10:23:0c:17:e4:ca:9f:80:4d:ec:e0:bb:18:2e: 75:7b:e9:4b:c1:8d:0c:30:68:4f:fe:c7:d5:96:8a: c5:68:3e:11:b2:e4:0f:44:d0:dd:0d:d9:51:32:c2: 56:09:2b:4e:bf:2c:99:f5:ca:25:a0:d4:8d:ef:24: f3:59:d3:96:ea:c2:28:a6:78:a9:25:0a:e0:66:d1: 9a:72:56:13:64:62:d1:1c:7f:18:72:77:eb:6a:7e: 24:90:d0:75:62:f1:c6:e2:9b:54:e7:bf:1e:ef:fe: ac:93:bb:51:1a:19:66:39:d6:4a:c8:a9:67:4a:c8: b5:af:26:06:e2:62:b4:32:b9:5b:c7:ac:6c:34:6b: 23:b3:df:1c:7b:7f:30:7c:09:f3:18:8f:96:c6:a9: 24:51:ee:35:98:db:5c:e2:25:4f:e9:a3:af:ff:93: b5:8f:56:a2:9c:c9:f1:a6:67:07:29:5b:26:67:c8: 10:65:95:99:75:fb:9a:d9:3c:07:a0:2f:5e:b9:c0: 55:1d:22:07:c7:08:66:f2:79:43:9d:f9:f5:65:b7: 3d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:74:EF:29:83:96:02:BC:52:2C:26:29:67:21:6D:44:AC:B5:07:06 X509v3 Authority Key Identifier: keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/6XTvKYOWArxSLCYpZyFtRKy1BwY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.132.0/22 45.153.116.0/22 151.236.160.0-151.236.183.255 151.236.186.0/24 151.236.188.0/22 194.59.28.0/23 198.160.164.0-198.160.169.255 198.176.116.0/23 IPv6: 2a10:2200:1::-2a10:2200:4:ffff:ffff:ffff:ffff:ffff 2a10:2200:6::-2a10:2200:8:ffff:ffff:ffff:ffff:ffff 2a10:2200:b::-2a10:2200:d:ffff:ffff:ffff:ffff:ffff 2a10:2200:f::/48 Signature Algorithm: sha256WithRSAEncryption 2f:05:4c:9e:a9:21:4d:6e:d9:d0:34:ba:ae:dc:09:a4:f6:f5: 1c:c2:04:52:e7:e3:b3:f8:51:b6:02:c9:1f:24:2e:82:7b:ab: 36:b0:c7:4e:8b:39:75:e0:68:bc:4d:39:4b:35:de:4b:b6:eb: be:a0:7a:ef:9a:13:de:3e:38:ab:d3:0a:a9:3e:22:5f:4b:1c: f3:32:42:8d:36:94:99:51:b9:76:2a:a6:fa:37:bf:52:af:1a: 2a:8e:3c:c1:81:c9:05:bf:e8:11:33:c3:32:81:ae:69:4c:78: b8:23:f5:d3:34:b2:7f:e5:6c:55:2d:ee:ab:24:2e:3f:eb:6a: c0:7b:cf:47:c4:89:9c:c9:bb:20:3a:20:36:5b:7f:0e:72:10: ab:d9:a2:d5:5b:91:97:b4:69:e7:4b:cc:6f:69:bc:fa:2b:7e: c1:a3:de:e2:7d:9a:1a:7c:0a:4b:79:44:f4:60:69:9b:cc:a3: a1:1a:24:f1:ef:55:c0:47:80:e2:77:33:13:d4:00:1d:2d:cb: 0b:02:c9:bc:b9:8a:fa:a0:f9:58:1e:ee:7f:4d:bf:68:37:59: 77:88:c1:99:1f:35:f0:0e:71:68:c7:2c:e3:8a:14:ee:39:46: fa:73:4f:fc:5c:bc:68:9f:be:ba:e4:af:4b:19:30:8c:b8:2e: 32:fc:47:74 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZwV2LfwsTT633wgQ4orWPYTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMTkyZThkNzg1NTgxZjcyYjE4NjQ0MjI0YmQ4YzNmYThh MmQxMWIwHhcNMjYwMTMxMjA1NzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTc0ZWYyOTgzOTYwMmJjNTIyYzI2Mjk2NzIxNmQ0NGFjYjUwNzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCIxl09xorjJd2KuDYpDHR2w44Gx 6T13Po7JPhs3QGBv9R5CMD4O1NBW0tD3ECMMF+TKn4BN7OC7GC51e+lLwY0MMGhP /sfVlorFaD4RsuQPRNDdDdlRMsJWCStOvyyZ9coloNSN7yTzWdOW6sIopnipJQrg ZtGaclYTZGLRHH8Ycnfran4kkNB1YvHG4ptU578e7/6sk7tRGhlmOdZKyKlnSsi1 ryYG4mK0Mrlbx6xsNGsjs98ce38wfAnzGI+WxqkkUe41mNtc4iVP6aOv/5O1j1ai nMnxpmcHKVsmZ8gQZZWZdfua2TwHoC9eucBVHSIHxwhm8nlDnfn1Zbc9MwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFOl07ymDlgK8UiwmKWchbUSstQcGMB8GA1UdIwQY MBaAFJIZLo14VYH3KxhkQiS9jD+ootEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kOWIzOTctZTEwNS00YWM5LTg1Mzct MDA4NWEzNjVhMjVmLzEvNlhUdktZT1dBcnhTTENZcFp5RnRSS3kxQndZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9kOWIzOTctZTEwNS00YWM5LTg1MzctMDA4NWEzNjVhMjVm LzEva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGoBggrBgEFBQcBBwEB/wSBmDCBlTBGBAIAATBAAwQCBfyE AwQCLZl0MAwDBAWX7KADBAOX7LADBACX7LoDBAKX7LwDBAHCOxwwDAMEAsagpAME AcagqAMEAcawdDBLBAIAAjBFMBIDBwAqECIAAAEDBwAqECIAAAQwEgMHASoQIgAA BgMHACoQIgAACDASAwcAKhAiAAALAwcBKhAiAAAMAwcAKhAiAAAPMA0GCSqGSIb3 DQEBCwUAA4IBAQAvBUyeqSFNbtnQNLqu3Amk9vUcwgRS5+Oz+FG2AskfJC6Ce6s2 sMdOizl14Gi8TTlLNd5Ltuu+oHrvmhPePjir0wqpPiJfSxzzMkKNNpSZUbl2Kqb6 N79SrxoqjjzBgckFv+gRM8Myga5pTHi4I/XTNLJ/5WxVLe6rJC4/62rAe89HxImc ybsgOiA2W38OchCr2aLVW5GXtGnnS8xvabz6K37Bo97ifZoafApLeUT0YGmbzKOh GiTx71XAR4DidzMT1AAdLcsLAsm8uYr6oPlYHu5/Tb9oN1l3iMGZHzXwDnFoxyzj ihTuOUb6c0/8XLxon7665K9LGTCMuC4y/Ed0 -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:00 2026 by rpki-client