This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/DAsiheAfQV-3n4ItlbPGVG1Md4w.roa File: DAsiheAfQV-3n4ItlbPGVG1Md4w.roa (raw, json) Hash identifier: 6+SFOXT2tV1fCHy49Xv2Jfj0h6/qqmiVRYPvHr297JI= Subject key identifier: 0C:0B:22:85:E0:1F:41:5F:B7:9F:82:2D:95:B3:C6:54:6D:4C:77:8C Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Certificate serial: 019B7C807AA9BCA7573534B603E0353F28FC Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/DAsiheAfQV-3n4ItlbPGVG1Md4w.roa Signing time: Fri 02 Jan 2026 02:19:13 +0000 ROA not before: Fri 02 Jan 2026 02:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 5.157.132.0/22 maxlen: 22 5.157.136.0/24 maxlen: 24 5.157.139.0/24 maxlen: 24 5.157.152.0/21 maxlen: 21 5.157.160.0/22 maxlen: 22 5.157.168.0/22 maxlen: 24 5.157.172.0/22 maxlen: 24 5.157.192.0/22 maxlen: 22 5.157.196.0/22 maxlen: 22 5.157.200.0/21 maxlen: 21 5.157.208.0/21 maxlen: 21 5.157.216.0/22 maxlen: 24 5.157.220.0/22 maxlen: 24 5.157.228.0/22 maxlen: 22 5.157.232.0/21 maxlen: 21 5.157.248.0/21 maxlen: 21 37.35.48.0/22 maxlen: 22 37.35.52.0/24 maxlen: 24 62.216.72.0/22 maxlen: 22 62.216.72.0/24 maxlen: 24 62.216.73.0/24 maxlen: 24 62.216.74.0/24 maxlen: 24 62.216.75.0/24 maxlen: 24 62.216.80.0/22 maxlen: 22 62.216.80.0/24 maxlen: 24 62.216.81.0/24 maxlen: 24 62.216.82.0/24 maxlen: 24 62.216.83.0/24 maxlen: 24 62.216.89.0/24 maxlen: 24 62.216.90.0/24 maxlen: 24 62.216.92.0/24 maxlen: 24 62.216.93.0/24 maxlen: 24 62.216.94.0/24 maxlen: 24 62.216.95.0/24 maxlen: 24 91.225.14.0/24 maxlen: 24 91.235.123.0/24 maxlen: 24 146.66.214.0/24 maxlen: 24 178.157.68.0/22 maxlen: 22 178.157.76.0/24 maxlen: 24 178.157.94.0/24 maxlen: 24 178.157.100.0/24 maxlen: 24 178.157.101.0/24 maxlen: 24 178.157.108.0/24 maxlen: 24 178.157.112.0/21 maxlen: 21 178.157.120.0/22 maxlen: 22 185.76.60.0/24 maxlen: 24 185.76.62.0/24 maxlen: 24 188.74.128.0/24 maxlen: 24 188.74.144.0/22 maxlen: 22 188.74.148.0/22 maxlen: 22 188.74.155.0/24 maxlen: 24 188.74.160.0/24 maxlen: 24 188.74.163.0/24 maxlen: 24 188.74.164.0/24 maxlen: 24 188.74.171.0/24 maxlen: 24 188.74.180.0/24 maxlen: 24 188.74.184.0/22 maxlen: 22 188.74.192.0/21 maxlen: 21 188.74.200.0/21 maxlen: 21 188.74.212.0/22 maxlen: 22 188.74.216.0/21 maxlen: 21 188.74.224.0/21 maxlen: 21 188.74.232.0/21 maxlen: 21 188.74.248.0/21 maxlen: 21 188.119.128.0/20 maxlen: 24 188.119.168.0/21 maxlen: 21 188.119.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7a:a9:bc:a7:57:35:34:b6:03:e0:35:3f:28:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Validity Not Before: Jan 2 02:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c0b2285e01f415fb79f822d95b3c6546d4c778c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:51:1b:48:1c:57:50:25:1f:7f:16:de:80:28: 36:4d:b1:79:0b:c2:99:ad:7b:11:b2:ed:16:56:a6: 57:ca:8f:78:e4:78:52:fa:f7:26:aa:3d:40:ad:d4: 9c:b1:73:cb:05:70:59:32:3f:0e:04:5d:aa:08:90: bd:73:45:90:d4:77:96:25:4c:05:02:bb:5f:f0:68: 9c:90:6b:80:79:8c:6f:4d:d8:d8:87:03:55:2b:c4: b4:fb:83:40:45:dc:2c:4e:42:3f:37:1d:36:28:ed: c5:b3:1c:c4:10:61:05:0a:27:2d:bf:29:1b:89:23: 73:3b:07:1b:22:6c:8a:98:bd:5f:30:9e:11:df:c1: 94:2b:29:43:95:2f:ad:4e:fd:4a:41:8e:a4:a5:7c: d7:bf:cb:85:f5:53:66:37:b7:03:c4:f4:35:4d:04: cf:5a:cc:b5:4d:a2:fc:6e:08:5e:44:c0:dc:92:a2: 2f:03:ed:70:f5:06:ed:02:bc:2f:3b:5e:49:d2:2b: f5:aa:cd:d0:00:45:92:07:6f:af:93:10:4f:c2:77: 16:1a:a1:f9:25:d1:72:e3:a7:a4:6f:e9:fc:7b:82: 9b:7e:3e:11:a9:f7:ff:12:dd:d0:e0:dc:d2:be:1c: e7:8d:58:a4:f6:00:56:56:11:9f:fe:47:7c:07:5d: ad:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0B:22:85:E0:1F:41:5F:B7:9F:82:2D:95:B3:C6:54:6D:4C:77:8C X509v3 Authority Key Identifier: keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/DAsiheAfQV-3n4ItlbPGVG1Md4w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.157.132.0-5.157.136.255 5.157.139.0/24 5.157.152.0-5.157.163.255 5.157.168.0/21 5.157.192.0/19 5.157.228.0-5.157.239.255 5.157.248.0/21 37.35.48.0-37.35.52.255 62.216.72.0/22 62.216.80.0/22 62.216.89.0-62.216.90.255 62.216.92.0/22 91.225.14.0/24 91.235.123.0/24 146.66.214.0/24 178.157.68.0/22 178.157.76.0/24 178.157.94.0/24 178.157.100.0/23 178.157.108.0/24 178.157.112.0-178.157.123.255 185.76.60.0/24 185.76.62.0/24 188.74.128.0/24 188.74.144.0/21 188.74.155.0/24 188.74.160.0/24 188.74.163.0-188.74.164.255 188.74.171.0/24 188.74.180.0/24 188.74.184.0/22 188.74.192.0/20 188.74.212.0-188.74.239.255 188.74.248.0/21 188.119.128.0/20 188.119.168.0/21 188.119.184.0/22 Signature Algorithm: sha256WithRSAEncryption 51:1e:4b:97:b5:eb:61:9f:e7:ee:aa:27:39:90:80:c0:5a:69: dc:af:e6:04:21:40:26:72:d3:ec:4f:1f:b3:48:87:2f:d4:b4: 18:4f:4c:bf:e2:d0:bf:27:e7:c4:0f:6c:d8:30:52:3c:9d:64: f2:09:3d:67:18:23:19:70:0b:e8:a6:a9:c1:d0:c8:d2:8f:74: be:3b:9d:48:39:41:b0:32:81:de:c7:45:ff:f5:d3:91:cb:95: 77:4e:dc:0f:d1:1d:09:1d:73:7c:1b:37:09:56:0e:57:55:0f: 67:68:6a:b4:4a:b0:c0:34:e7:eb:9c:31:31:5a:8e:56:56:9d: 1e:0f:2a:00:9f:20:ee:3b:af:8c:66:e4:03:78:62:64:70:e5: a6:de:28:ae:6d:16:d0:30:64:3b:9b:a3:c7:4d:5c:f6:22:dd: 75:49:3d:a9:e7:e1:c9:17:ca:d7:80:cb:e0:eb:be:7f:a4:b5: 62:9a:7b:c2:d4:3a:e2:25:a1:f9:7b:3a:8d:42:fe:dc:88:84: f4:48:7c:1e:4a:e3:65:79:fc:c3:43:92:df:85:38:6d:f7:6d: ea:b3:36:c1:83:61:e6:35:e9:8b:28:17:46:09:80:20:cd:3e: 7e:cf:8a:b2:8f:0b:00:5c:8d:59:3c:ed:a9:57:6d:76:ab:13: eb:22:ab:6e -----BEGIN CERTIFICATE----- MIIGHzCCBQegAwIBAgISAZt8gHqpvKdXNTS2A+A1Pyj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4 ZDFkMjYwHhcNMjYwMTAyMDIxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzBiMjI4NWUwMWY0MTVmYjc5ZjgyMmQ5NWIzYzY1NDZkNGM3NzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVEbSBxXUCUffxbegCg2TbF5C8KZ rXsRsu0WVqZXyo945HhS+vcmqj1ArdScsXPLBXBZMj8OBF2qCJC9c0WQ1HeWJUwF Artf8GickGuAeYxvTdjYhwNVK8S0+4NARdwsTkI/Nx02KO3FsxzEEGEFCictvykb iSNzOwcbImyKmL1fMJ4R38GUKylDlS+tTv1KQY6kpXzXv8uF9VNmN7cDxPQ1TQTP Wsy1TaL8bgheRMDckqIvA+1w9QbtArwvO15J0iv1qs3QAEWSB2+vkxBPwncWGqH5 JdFy46ekb+n8e4Kbfj4Rqff/Et3Q4NzSvhznjVik9gBWVhGf/kd8B12tnQIDAQAB o4IDKzCCAycwHQYDVR0OBBYEFAwLIoXgH0Fft5+CLZWzxlRtTHeMMB8GA1UdIwQY MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt ZmE5Y2I1MWNkMGYxLzEvREFzaWhlQWZRVi0zbjRJdGxiUEdWRzFNZDR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBPwYIKwYBBQUHAQcBAf8EggEuMIIBKjCCASYEAgABMIIB HjAMAwQCBZ2EAwQABZ2IAwQABZ2LMAwDBAMFnZgDBAIFnaADBAMFnagDBAUFncAw DAMEAgWd5AMEBAWd4AMEAwWd+DAMAwQEJSMwAwQAJSM0AwQCPthIAwQCPthQMAwD BAA+2FkDBAA+2FoDBAI+2FwDBABb4Q4DBABb63sDBACSQtYDBAKynUQDBACynUwD BACynV4DBAGynWQDBACynWwwDAMEBLKdcAMEArKdeAMEALlMPAMEALlMPgMEALxK gAMEA7xKkAMEALxKmwMEALxKoDAMAwQAvEqjAwQAvEqkAwQAvEqrAwQAvEq0AwQC vEq4AwQEvErAMAwDBAK8StQDBAS8SuADBAO8SvgDBAS8d4ADBAO8d6gDBAK8d7gw DQYJKoZIhvcNAQELBQADggEBAFEeS5e162Gf5+6qJzmQgMBaadyv5gQhQCZy0+xP H7NIhy/UtBhPTL/i0L8n58QPbNgwUjydZPIJPWcYIxlwC+imqcHQyNKPdL47nUg5 QbAygd7HRf/105HLlXdO3A/RHQkdc3wbNwlWDldVD2doarRKsMA05+ucMTFajlZW nR4PKgCfIO47r4xm5AN4YmRw5abeKK5tFtAwZDubo8dNXPYi3XVJPann4ckXyteA y+Drvn+ktWKae8LUOuIlofl7Oo1C/tyIhPRIfB5K42V5/MNDkt+FOG33beqzNsGD YeY16YsoF0YJgCDNPn7PirKPCwBcjVk87alXbXarE+siq24= -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:40 2026 by rpki-client