This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/iE7v6VMVPWYKTYZG81Qa4S2dld0.roa File: iE7v6VMVPWYKTYZG81Qa4S2dld0.roa (raw, json) Hash identifier: x5b7cUQ7z0QouQRX5TNEXKjigPhuKTxEn6jRVfHPZag= Subject key identifier: 88:4E:EF:E9:53:15:3D:66:0A:4D:86:46:F3:54:1A:E1:2D:9D:95:DD Certificate issuer: /CN=02bbd4f865a12d79a09a034486ce61ba023882c7 Certificate serial: 019B7A5AA79F4678EDEC892A6DD82FC35E82 Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/iE7v6VMVPWYKTYZG81Qa4S2dld0.roa Signing time: Thu 01 Jan 2026 16:18:39 +0000 ROA not before: Thu 01 Jan 2026 16:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 5.62.128.0/24 maxlen: 24 5.62.129.0/24 maxlen: 24 5.62.130.0/24 maxlen: 24 5.62.131.0/24 maxlen: 24 5.62.132.0/24 maxlen: 24 5.62.133.0/24 maxlen: 24 5.62.134.0/24 maxlen: 24 5.62.135.0/24 maxlen: 24 5.62.136.0/24 maxlen: 24 5.62.137.0/24 maxlen: 24 5.62.138.0/24 maxlen: 24 5.62.139.0/24 maxlen: 24 5.62.140.0/24 maxlen: 24 5.62.141.0/24 maxlen: 24 5.62.142.0/24 maxlen: 24 5.62.143.0/24 maxlen: 24 5.62.144.0/24 maxlen: 24 5.62.145.0/24 maxlen: 24 5.62.146.0/24 maxlen: 24 5.62.147.0/24 maxlen: 24 5.62.148.0/24 maxlen: 24 5.62.149.0/24 maxlen: 24 5.62.150.0/24 maxlen: 24 5.62.151.0/24 maxlen: 24 31.7.80.0/24 maxlen: 24 31.7.81.0/24 maxlen: 24 31.7.82.0/24 maxlen: 24 31.7.83.0/24 maxlen: 24 31.7.84.0/24 maxlen: 24 31.7.85.0/24 maxlen: 24 31.7.86.0/24 maxlen: 24 31.7.87.0/24 maxlen: 24 37.77.48.0/24 maxlen: 24 37.77.49.0/24 maxlen: 24 37.77.50.0/24 maxlen: 24 37.77.51.0/24 maxlen: 24 37.77.52.0/24 maxlen: 24 37.77.53.0/24 maxlen: 24 37.77.54.0/24 maxlen: 24 37.77.55.0/24 maxlen: 24 185.69.4.0/24 maxlen: 24 185.69.5.0/24 maxlen: 24 185.69.6.0/24 maxlen: 24 185.69.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a7:9f:46:78:ed:ec:89:2a:6d:d8:2f:c3:5e:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7 Validity Not Before: Jan 1 16:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=884eefe953153d660a4d8646f3541ae12d9d95dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:17:7a:23:0a:43:6c:09:eb:b8:4b:1c:70:cf: a9:9d:cf:97:56:d8:43:9f:ca:d8:be:50:62:2a:28: fa:fd:c9:d9:7d:6b:b8:c0:0f:9f:12:82:48:2a:ec: be:2b:91:2f:4b:68:9d:56:8e:e2:5f:15:69:b6:d0: 8a:38:ae:cf:f4:bd:41:e6:73:91:31:4f:7f:b7:2f: dd:2c:48:98:b4:22:09:30:48:72:2d:4c:a0:f7:0d: b2:ed:bc:8e:c8:69:6f:b5:68:6f:45:d2:e0:05:de: 74:ea:ab:39:70:8a:4c:49:9b:ad:46:09:59:3f:5e: 2c:0a:60:2d:87:5f:e0:be:df:20:da:d9:7c:16:3e: 0c:c8:e2:6a:22:b7:81:e5:e2:00:86:91:32:18:c1: 92:6f:e5:65:dd:34:12:f0:97:94:e9:53:00:ef:14: f5:e5:4b:8d:e2:2d:f2:7e:47:f6:26:ca:ff:14:50: d3:60:52:31:7d:63:a3:63:95:fb:0f:84:fc:da:e2: 88:88:25:42:ea:44:86:cb:d4:ea:86:87:3c:9a:67: 3a:44:c2:66:b1:c4:0d:ff:7d:bd:09:cd:a1:09:f3: cb:98:3f:96:cf:34:59:30:9b:aa:bc:bc:a4:19:46: 1f:77:04:db:23:e7:d0:91:5a:d3:3f:dc:22:64:f6: 30:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4E:EF:E9:53:15:3D:66:0A:4D:86:46:F3:54:1A:E1:2D:9D:95:DD X509v3 Authority Key Identifier: keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/iE7v6VMVPWYKTYZG81Qa4S2dld0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.62.128.0-5.62.151.255 31.7.80.0/21 37.77.48.0/21 185.69.4.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:46:a2:e6:d8:74:c5:cc:fd:ac:07:b9:c7:99:f6:ce:76:ca: 75:62:5c:38:4b:cb:ab:a0:79:1b:68:42:27:f3:fa:10:b8:b9: e3:08:f2:9d:d4:e5:0c:a7:34:f7:f1:0a:34:d0:b2:5f:cf:aa: eb:a4:69:49:59:e3:8d:90:10:21:11:87:c8:ca:0c:4e:d3:31: 4c:2e:ca:c5:79:c1:fd:9c:b8:7d:1b:36:9f:7a:8f:80:95:f1: 2b:23:19:2d:bf:9e:24:f5:63:5a:4b:39:e0:aa:69:b2:10:e6: ec:82:c6:8b:2c:76:74:0b:a0:1f:e5:06:dd:e1:f4:96:5e:82: 0a:ed:c0:4d:8e:72:b9:78:20:73:87:cc:f9:66:52:17:4f:fa: 8b:eb:48:1e:4b:23:ac:36:cf:7b:c7:3c:f7:3a:90:6c:4e:46: 72:a1:6d:df:a3:04:6a:28:64:dc:2f:34:e5:d5:72:2f:75:8e: 6c:2d:8c:53:0e:d2:6c:39:58:83:84:d9:60:13:70:f0:3b:1f: 77:c2:0e:d3:3e:ae:f9:a2:6f:a2:e1:57:97:9c:3a:1c:40:a3: f3:f8:cb:fb:7c:00:3a:0c:7d:1f:e2:06:e8:f4:ba:63:c8:d1: 53:13:23:73:0c:cb:8d:92:73:3a:86:90:4d:11:ea:f6:d7:73: 2a:8c:40:6a -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt6WqefRnjt7Ikqbdgvw16CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYmJkNGY4NjVhMTJkNzlhMDlhMDM0NDg2Y2U2MWJhMDIz ODgyYzcwHhcNMjYwMTAxMTYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODRlZWZlOTUzMTUzZDY2MGE0ZDg2NDZmMzU0MWFlMTJkOWQ5NWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Rd6IwpDbAnruEsccM+pnc+XVthD n8rYvlBiKij6/cnZfWu4wA+fEoJIKuy+K5EvS2idVo7iXxVpttCKOK7P9L1B5nOR MU9/ty/dLEiYtCIJMEhyLUyg9w2y7byOyGlvtWhvRdLgBd506qs5cIpMSZutRglZ P14sCmAth1/gvt8g2tl8Fj4MyOJqIreB5eIAhpEyGMGSb+Vl3TQS8JeU6VMA7xT1 5UuN4i3yfkf2Jsr/FFDTYFIxfWOjY5X7D4T82uKIiCVC6kSGy9Tqhoc8mmc6RMJm scQN/329Cc2hCfPLmD+WzzRZMJuqvLykGUYfdwTbI+fQkVrTP9wiZPYw7QIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFIhO7+lTFT1mCk2GRvNUGuEtnZXdMB8GA1UdIwQY MBaAFAK71PhloS15oJoDRIbOYboCOILHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXJ2VS1HV2hMWG1nbWdORWhzNWh1Z0k0Z3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jYjgzYjItMzNiNS00NTYwLTg5MzUt MGE5ODA0OGNkZjcyLzEvaUU3djZWTVZQV1lLVFlaRzgxUWE0UzJkbGQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9jYjgzYjItMzNiNS00NTYwLTg5MzUtMGE5ODA0OGNkZjcy LzEvQXJ2VS1HV2hMWG1nbWdORWhzNWh1Z0k0Z3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAcFPoAD BAMFPpADBAMfB1ADBAMlTTADBAK5RQQwDQYJKoZIhvcNAQELBQADggEBAHxGoubY dMXM/awHuceZ9s52ynViXDhLy6ugeRtoQifz+hC4ueMI8p3U5QynNPfxCjTQsl/P quukaUlZ442QECERh8jKDE7TMUwuysV5wf2cuH0bNp96j4CV8SsjGS2/niT1Y1pL OeCqabIQ5uyCxossdnQLoB/lBt3h9JZeggrtwE2Ocrl4IHOHzPlmUhdP+ovrSB5L I6w2z3vHPPc6kGxORnKhbd+jBGooZNwvNOXVci91jmwtjFMO0mw5WIOE2WATcPA7 H3fCDtM+rvmib6LhV5ecOhxAo/P4y/t8ADoMfR/iBuj0umPI0VMTI3MMy42SczqG kE0R6vbXcyqMQGo= -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:54 2026 by rpki-client