This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/0T_OaQCbJNCqGeMPQhOWXxsxGm4.roa File: 0T_OaQCbJNCqGeMPQhOWXxsxGm4.roa (raw, json) Hash identifier: Ft44EkrKyKsAFbkVxuqQXqMtrjyV/ZdKGwAAf8PGKYI= Subject key identifier: D1:3F:CE:69:00:9B:24:D0:AA:19:E3:0F:42:13:96:5F:1B:31:1A:6E Certificate issuer: /CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c Certificate serial: 019B7A5B6BF676EEE5C8592805CA30140B8A Authority key identifier: 27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/0T_OaQCbJNCqGeMPQhOWXxsxGm4.roa Signing time: Thu 01 Jan 2026 16:19:30 +0000 ROA not before: Thu 01 Jan 2026 16:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 5.79.64.0/18 maxlen: 18 37.48.64.0/18 maxlen: 18 62.212.64.0/19 maxlen: 19 81.17.47.0/24 maxlen: 24 81.17.49.0/24 maxlen: 24 81.17.50.0/24 maxlen: 24 81.17.51.0/24 maxlen: 24 81.17.52.0/24 maxlen: 24 81.17.53.0/24 maxlen: 24 81.17.54.0/24 maxlen: 24 81.17.55.0/24 maxlen: 24 81.171.0.0/19 maxlen: 19 82.192.64.0/19 maxlen: 19 83.149.64.0/18 maxlen: 18 85.17.0.0/16 maxlen: 16 89.149.192.0/18 maxlen: 18 89.149.192.0/20 maxlen: 20 94.75.192.0/18 maxlen: 18 95.168.160.0/20 maxlen: 20 95.211.0.0/16 maxlen: 16 95.211.51.0/24 maxlen: 24 95.211.85.0/24 maxlen: 24 173.234.68.0/22 maxlen: 22 178.162.128.0/18 maxlen: 23 178.162.162.0/23 maxlen: 23 178.162.164.0/22 maxlen: 22 178.162.168.0/22 maxlen: 22 178.162.176.0/20 maxlen: 20 185.17.184.0/22 maxlen: 22 212.7.192.0/20 maxlen: 20 212.7.208.0/22 maxlen: 22 212.32.224.0/19 maxlen: 19 213.227.128.0/19 maxlen: 19 2001:1af8::/32 maxlen: 32 2001:1af8:8000::/36 maxlen: 36 2001:1af8:8000::/40 maxlen: 40 2001:1af8:8100::/44 maxlen: 44 2001:1af8:8110::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:6b:f6:76:ee:e5:c8:59:28:05:ca:30:14:0b:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c Validity Not Before: Jan 1 16:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d13fce69009b24d0aa19e30f4213965f1b311a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2c:91:69:12:8e:0c:24:c7:ae:31:f3:68:9a: 24:93:2f:7a:fb:46:5c:81:4d:d4:8d:54:db:c4:11: 14:93:98:54:2b:fa:93:c0:42:ba:ac:3a:c4:b6:fe: 93:a5:fc:c4:11:50:28:3d:23:34:b0:b3:f9:21:98: 94:16:c0:6b:43:fd:ce:d6:c2:28:f8:4b:a9:66:a6: dc:78:39:1a:4d:03:59:9b:04:75:ba:9d:6f:5d:5a: c7:57:ee:6c:77:4d:c9:97:72:57:61:9b:67:6d:02: 14:e8:3c:ae:97:a9:52:9f:6d:ec:3b:8c:04:94:3b: f7:e0:a2:dd:57:9c:f3:6a:ce:ad:7d:32:93:98:dc: 46:85:d0:c7:16:e1:08:dc:6f:d9:4e:b2:f0:8c:35: 8a:b2:ef:61:5a:ae:03:7b:6a:66:f9:13:39:85:b1: 48:d4:f4:d6:6a:48:c7:d4:e8:fa:86:3b:2e:96:64: ca:94:65:51:b1:27:40:a9:b9:39:4b:8b:a2:49:58: ca:2f:b4:ea:ae:75:fd:41:b6:47:fd:f7:ac:81:65: dd:17:38:88:46:26:08:bd:30:74:fb:58:a3:95:6a: 3f:34:aa:ce:81:78:c8:dc:84:6c:57:3d:67:42:97: 98:90:76:de:df:50:75:39:53:df:53:42:e7:aa:ee: 11:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3F:CE:69:00:9B:24:D0:AA:19:E3:0F:42:13:96:5F:1B:31:1A:6E X509v3 Authority Key Identifier: keyid:27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/0T_OaQCbJNCqGeMPQhOWXxsxGm4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.79.64.0/18 37.48.64.0/18 62.212.64.0/19 81.17.47.0/24 81.17.49.0-81.17.55.255 81.171.0.0/19 82.192.64.0/19 83.149.64.0/18 85.17.0.0/16 89.149.192.0/18 94.75.192.0/18 95.168.160.0/20 95.211.0.0/16 173.234.68.0/22 178.162.128.0/18 185.17.184.0/22 212.7.192.0-212.7.211.255 212.32.224.0/19 213.227.128.0/19 IPv6: 2001:1af8::/32 Signature Algorithm: sha256WithRSAEncryption 36:a7:4f:09:55:f9:4b:43:29:46:7c:7e:d5:92:2e:dc:02:53: bf:34:c4:ce:2e:a2:bd:19:d5:b2:61:35:ec:bf:f2:b3:b1:b5: be:4b:d6:df:7a:e5:53:ad:90:ee:4c:f2:1b:b3:e7:b6:68:64: de:b4:22:88:21:6f:ae:91:a2:a5:f1:4a:94:d7:a9:5e:18:56: d1:b5:0a:5f:9b:2c:69:9c:b3:60:01:4a:5c:b8:ee:00:ad:36: dc:da:a5:85:fd:80:02:33:c1:b0:86:26:32:36:5f:e8:15:79: 6a:d7:2e:bc:b2:e1:0e:c3:e7:06:2f:fd:47:28:5f:a2:44:2f: 25:d4:6c:0c:c7:11:c9:b8:89:bb:46:07:e3:9d:d5:45:22:73: ca:d3:db:94:a0:dd:52:0c:7e:f8:aa:79:64:d6:e4:13:21:ea: 38:ed:22:dd:bc:d0:25:03:e1:26:a2:52:71:57:a7:20:31:77: 47:61:b3:28:47:f5:13:a3:5f:22:27:d3:ff:c2:04:91:47:21: 17:a4:4d:33:8b:cc:49:25:85:c3:6e:c1:7d:e6:2d:6e:27:aa: 7b:e2:c1:7d:7e:ba:c4:dc:35:bb:26:05:50:f5:9b:ac:33:60: fb:e1:7d:b9:0c:df:3a:7a:35:d4:f4:8f:0c:f9:16:ba:b6:b7: c9:a6:19:d7 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgISAZt6W2v2du7lyFkoBcowFAuKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZDczMDRjMWI1OWRjMjI3MzFiYjUzZWZmNWE4NGVkOWEz MDYxNGMwHhcNMjYwMTAxMTYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTNmY2U2OTAwOWIyNGQwYWExOWUzMGY0MjEzOTY1ZjFiMzExYTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSyRaRKODCTHrjHzaJokky96+0Zc gU3UjVTbxBEUk5hUK/qTwEK6rDrEtv6TpfzEEVAoPSM0sLP5IZiUFsBrQ/3O1sIo +EupZqbceDkaTQNZmwR1up1vXVrHV+5sd03Jl3JXYZtnbQIU6Dyul6lSn23sO4wE lDv34KLdV5zzas6tfTKTmNxGhdDHFuEI3G/ZTrLwjDWKsu9hWq4De2pm+RM5hbFI 1PTWakjH1Oj6hjsulmTKlGVRsSdAqbk5S4uiSVjKL7TqrnX9QbZH/fesgWXdFziI RiYIvTB0+1ijlWo/NKrOgXjI3IRsVz1nQpeYkHbe31B1OVPfU0Lnqu4R7QIDAQAB o4IClzCCApMwHQYDVR0OBBYEFNE/zmkAmyTQqhnjD0ITll8bMRpuMB8GA1UdIwQY MBaAFCfXMEwbWdwicxu1Pv9ahO2aMGFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjljd1RCdFozQ0p6RzdVLV8xcUU3Wm93WVV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9jMTNlMTItZTUwZC00MzM4LThhMmYt ZmZmYjVhNGU3NjJhLzEvMFRfT2FRQ2JKTkNxR2VNUFFoT1dYeHN4R200LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9jMTNlMTItZTUwZC00MzM4LThhMmYtZmZmYjVhNGU3NjJh LzEvSjljd1RCdFozQ0p6RzdVLV8xcUU3Wm93WVV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGsBggrBgEFBQcBBwEB/wSBnDCBmTCBhwQCAAEwgYADBAYF T0ADBAYlMEADBAU+1EADBABRES8wDAMEAFERMQMEA1ERMAMEBVGrAAMEBVLAQAME BlOVQAMDAFURAwQGWZXAAwQGXkvAAwQEX6igAwMAX9MDBAKt6kQDBAayooADBAK5 EbgwDAMEBtQHwAMEAtQH0AMEBdQg4AMEBdXjgDANBAIAAjAHAwUAIAEa+DANBgkq hkiG9w0BAQsFAAOCAQEANqdPCVX5S0MpRnx+1ZIu3AJTvzTEzi6ivRnVsmE17L/y s7G1vkvW33rlU62Q7kzyG7Pntmhk3rQiiCFvrpGipfFKlNepXhhW0bUKX5ssaZyz YAFKXLjuAK023Nqlhf2AAjPBsIYmMjZf6BV5atcuvLLhDsPnBi/9RyhfokQvJdRs DMcRybiJu0YH453VRSJzytPblKDdUgx++Kp5ZNbkEyHqOO0i3bzQJQPhJqJScVen IDF3R2GzKEf1E6NfIifT/8IEkUchF6RNM4vMSSWFw27BfeYtbieqe+LBfX66xNw1 uyYFUPWbrDNg++F9uQzfOno11PSPDPkWura3yaYZ1w== -----END CERTIFICATE-----Generated at Mon Jan 19 16:50:40 2026 by rpki-client