This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/1-SQFDfpp9D_i817zUQFbntY0dRQ.roa File: 1-SQFDfpp9D_i817zUQFbntY0dRQ.roa (raw, json) Hash identifier: biSe4GCFtSwazcB9PCCa1NKBDVP5/i0SLuwOHponshU= Subject key identifier: F9:24:05:0D:FA:69:F4:3F:E2:F3:5E:F3:51:01:5B:9E:D6:34:75:14 Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 019B77593B45089A6D4B4340F49EB04FE089 Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/1-SQFDfpp9D_i817zUQFbntY0dRQ.roa Signing time: Thu 01 Jan 2026 02:18:15 +0000 ROA not before: Thu 01 Jan 2026 02:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15440 IP address blocks: 5.133.65.0/24 maxlen: 24 5.133.66.0/24 maxlen: 24 45.82.32.0/22 maxlen: 24 45.82.32.0/24 maxlen: 24 77.241.192.0/20 maxlen: 20 79.142.112.0/20 maxlen: 20 89.249.80.0/20 maxlen: 20 92.62.128.0/20 maxlen: 20 92.62.128.0/24 maxlen: 24 92.62.129.0/24 maxlen: 24 92.62.130.0/24 maxlen: 24 92.62.131.0/24 maxlen: 24 92.62.132.0/23 maxlen: 23 92.62.135.0/24 maxlen: 24 92.62.136.0/24 maxlen: 24 92.62.137.0/24 maxlen: 24 92.62.138.0/24 maxlen: 24 92.62.139.0/24 maxlen: 24 92.62.140.0/24 maxlen: 24 92.62.141.0/24 maxlen: 24 92.62.142.0/24 maxlen: 24 92.62.143.0/24 maxlen: 24 185.11.26.0/24 maxlen: 24 185.65.48.0/24 maxlen: 24 185.216.209.0/24 maxlen: 24 195.14.160.0/19 maxlen: 19 213.197.128.0/18 maxlen: 18 217.117.16.0/20 maxlen: 20 2001:1ab8::/31 maxlen: 32 2001:1ab8::/32 maxlen: 32 2001:1ab9::/32 maxlen: 32 2a0d:5000:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:3b:45:08:9a:6d:4b:43:40:f4:9e:b0:4f:e0:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Jan 1 02:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f924050dfa69f43fe2f35ef351015b9ed6347514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:44:55:d1:40:27:d2:99:e1:55:35:5a:e5:47: 00:a1:b7:55:b1:b4:f0:0e:15:fb:61:41:b0:f8:26: 48:7d:00:dd:9c:da:c2:52:de:96:58:bb:b5:46:9c: b3:1e:75:16:34:e8:df:23:cc:af:89:57:be:9f:27: 8d:8b:2a:62:76:81:06:75:cf:49:6e:47:0d:0a:46: 4b:a2:68:da:d2:bf:d6:e6:77:3b:1a:e5:e9:d6:1e: 37:df:e5:3c:eb:17:50:c8:83:9c:e2:7e:3b:06:54: bd:fa:6d:93:1d:24:28:58:da:d7:c7:56:d5:e0:5b: e9:14:29:77:c5:db:63:95:68:79:e4:df:48:81:da: 0e:28:c4:9c:aa:ce:9f:4e:53:83:4c:2f:57:c3:54: 94:eb:4a:3f:67:b0:6a:ff:56:65:f3:4b:07:6d:f9: b1:47:b5:3a:a9:1e:86:20:33:1b:46:ec:35:c3:b1: c2:98:df:e1:aa:37:7a:73:e9:e1:1e:80:cf:5e:f1: b7:6b:ba:9d:09:28:4d:0a:42:ea:97:e1:99:d1:33: 4a:d6:51:59:42:e0:cc:f8:c5:f5:07:86:21:f6:c7: 50:28:37:20:e0:fe:e9:bd:6c:78:6c:7b:d1:63:e3: cd:c7:a2:e2:5b:db:54:1f:44:5b:1e:78:9a:bf:3b: 66:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:24:05:0D:FA:69:F4:3F:E2:F3:5E:F3:51:01:5B:9E:D6:34:75:14 X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/1-SQFDfpp9D_i817zUQFbntY0dRQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.65.0-5.133.66.255 45.82.32.0/22 77.241.192.0/20 79.142.112.0/20 89.249.80.0/20 92.62.128.0/20 185.11.26.0/24 185.65.48.0/24 185.216.209.0/24 195.14.160.0/19 213.197.128.0/18 217.117.16.0/20 IPv6: 2001:1ab8::/31 2a0d:5000:2::/48 Signature Algorithm: sha256WithRSAEncryption 5a:92:b1:86:38:71:91:3f:ff:eb:19:1c:ef:79:90:63:ef:83: 71:d1:fa:13:00:ff:e3:e7:89:ba:d4:4e:fa:e2:eb:e8:6f:c1: e3:51:5d:78:56:2c:82:b4:3a:70:a0:26:4b:c1:a1:f5:ae:cc: ab:e1:cd:ce:3d:47:90:c7:71:a7:8f:7d:74:a3:34:f6:63:76: 2a:ff:80:9e:91:e1:59:b3:e4:a9:b0:d9:4e:65:c8:d2:11:43: 0e:2e:b6:f3:29:8a:cb:3c:c1:8e:52:05:af:a1:51:2c:8a:d4: 20:c2:01:04:92:7e:0e:67:1c:48:d2:7d:f8:82:3b:9a:d4:9b: c1:df:66:06:f1:eb:36:b1:1c:e5:78:1f:a3:e5:81:9c:98:93: 35:c7:9b:e7:b4:3c:05:e5:32:d5:8d:67:9d:48:4b:b7:57:9c: cd:e9:5d:3a:44:61:35:4b:c9:51:3b:94:62:cf:ee:1d:f6:de: 4a:4d:b7:71:63:2c:e5:b8:30:c7:f6:9a:8d:4a:8c:cb:f0:17: b6:59:d4:fb:ef:cc:3e:3e:5b:e3:7e:46:91:52:8b:05:47:e6: 6d:ce:3b:a0:0f:34:64:23:72:91:fa:04:b4:35:dc:a3:86:f6: 87:c4:0c:dc:dd:b7:4c:63:97:31:d7:01:ea:80:a2:c5:36:55: 13:14:76:82 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgISAZt3WTtFCJptS0NA9J6wT+CJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjYwMTAxMDIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTI0MDUwZGZhNjlmNDNmZTJmMzVlZjM1MTAxNWI5ZWQ2MzQ3NTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwURV0UAn0pnhVTVa5UcAobdVsbTw DhX7YUGw+CZIfQDdnNrCUt6WWLu1RpyzHnUWNOjfI8yviVe+nyeNiypidoEGdc9J bkcNCkZLomja0r/W5nc7GuXp1h433+U86xdQyIOc4n47BlS9+m2THSQoWNrXx1bV 4FvpFCl3xdtjlWh55N9IgdoOKMScqs6fTlODTC9Xw1SU60o/Z7Bq/1Zl80sHbfmx R7U6qR6GIDMbRuw1w7HCmN/hqjd6c+nhHoDPXvG3a7qdCShNCkLql+GZ0TNK1lFZ QuDM+MX1B4Yh9sdQKDcg4P7pvWx4bHvRY+PNx6LiW9tUH0RbHniavztmwQIDAQAB o4ICbTCCAmkwHQYDVR0OBBYEFPkkBQ36afQ/4vNe81EBW57WNHUUMB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvMS1TUUZEZnBwOURfaTgxN3pVUUZibnRZMGRSUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTAvYjYwMzczLTgxOGUtNDBhOS05MzE5LWFkZGYwZTE4NDll Yi8xL29sU3A4NkptVVQzY2FUWFl2Z0l1ZmxJdzZoQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCBgQYIKwYBBQUHAQcBAf8EcjBwMFYEAgABMFAwDAMEAAWF QQMEAAWFQgMEAi1SIAMEBE3xwAMEBE+OcAMEBFn5UAMEBFw+gAMEALkLGgMEALlB MAMEALnY0QMEBcMOoAMEBtXFgAMEBNl1EDAWBAIAAjAQAwUBIAEauAMHACoNUAAA AjANBgkqhkiG9w0BAQsFAAOCAQEAWpKxhjhxkT//6xkc73mQY++DcdH6EwD/4+eJ utRO+uLr6G/B41FdeFYsgrQ6cKAmS8Gh9a7Mq+HNzj1HkMdxp499dKM09mN2Kv+A npHhWbPkqbDZTmXI0hFDDi628ymKyzzBjlIFr6FRLIrUIMIBBJJ+DmccSNJ9+II7 mtSbwd9mBvHrNrEc5Xgfo+WBnJiTNceb57Q8BeUy1Y1nnUhLt1eczeldOkRhNUvJ UTuUYs/uHfbeSk23cWMs5bgwx/aajUqMy/AXtlnU++/MPj5b435GkVKLBUfmbc47 oA80ZCNykfoEtDXco4b2h8QM3N23TGOXMdcB6oCixTZVExR2gg== -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:49 2026 by rpki-client