This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/6SXRvRN9subXAXEQdsDxLyOEe-Q.roa File: 6SXRvRN9subXAXEQdsDxLyOEe-Q.roa (raw, json) Hash identifier: 6v9+PcdA0J18w45pfjYrxPzjSyJ7JFTWHaytuSr4qJU= Subject key identifier: E9:25:D1:BD:13:7D:B2:E6:D7:01:71:10:76:C0:F1:2F:23:84:7B:E4 Certificate issuer: /CN=eb500c9002321f03964583710b7baa4597341213 Certificate serial: 019B7EA6F8E23DE6BB21A8BDED129964B049 Authority key identifier: EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/6SXRvRN9subXAXEQdsDxLyOEe-Q.roa Signing time: Fri 02 Jan 2026 12:20:30 +0000 ROA not before: Fri 02 Jan 2026 12:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29182 IP address blocks: 5.35.96.0/23 maxlen: 23 5.35.98.0/23 maxlen: 23 31.135.8.0/23 maxlen: 23 31.135.10.0/24 maxlen: 24 31.135.11.0/24 maxlen: 24 31.135.12.0/23 maxlen: 23 31.135.14.0/23 maxlen: 23 37.230.112.0/23 maxlen: 23 37.230.114.0/23 maxlen: 23 37.230.116.0/23 maxlen: 23 37.230.118.0/23 maxlen: 23 62.181.44.0/24 maxlen: 24 62.181.53.0/24 maxlen: 24 62.181.54.0/23 maxlen: 23 78.24.216.0/21 maxlen: 21 79.143.72.0/23 maxlen: 23 79.174.12.0/23 maxlen: 23 79.174.14.0/23 maxlen: 23 83.136.232.0/23 maxlen: 23 83.136.235.0/24 maxlen: 24 86.110.194.0/24 maxlen: 24 86.110.208.0/23 maxlen: 23 86.110.212.0/24 maxlen: 24 86.110.215.0/24 maxlen: 24 86.110.220.0/24 maxlen: 24 89.169.28.0/23 maxlen: 23 89.169.30.0/23 maxlen: 23 91.107.120.0/21 maxlen: 21 91.228.224.0/23 maxlen: 23 92.63.192.0/23 maxlen: 23 92.63.194.0/23 maxlen: 23 94.250.248.0/23 maxlen: 23 94.250.250.0/23 maxlen: 23 94.250.252.0/23 maxlen: 23 94.250.254.0/23 maxlen: 23 109.172.4.0/23 maxlen: 23 109.172.6.0/23 maxlen: 23 109.172.30.0/23 maxlen: 23 109.172.78.0/23 maxlen: 23 109.172.100.0/23 maxlen: 23 109.172.108.0/22 maxlen: 22 109.172.112.0/23 maxlen: 23 109.172.114.0/23 maxlen: 23 109.172.116.0/23 maxlen: 23 149.154.64.0/23 maxlen: 23 149.154.66.0/23 maxlen: 23 149.154.68.0/23 maxlen: 23 149.154.70.0/23 maxlen: 23 155.212.160.0/20 maxlen: 20 176.123.168.0/23 maxlen: 23 176.123.170.0/23 maxlen: 23 176.123.172.0/23 maxlen: 23 176.123.174.0/23 maxlen: 23 178.250.156.0/23 maxlen: 23 178.250.158.0/23 maxlen: 23 185.60.132.0/23 maxlen: 23 185.60.134.0/23 maxlen: 23 185.187.115.0/24 maxlen: 24 188.120.224.0/20 maxlen: 20 188.120.240.0/21 maxlen: 21 188.120.248.0/23 maxlen: 23 188.120.248.0/24 maxlen: 24 188.120.249.0/24 maxlen: 24 188.120.250.0/23 maxlen: 23 188.120.253.0/24 maxlen: 24 188.120.254.0/23 maxlen: 23 212.57.115.0/24 maxlen: 24 212.57.116.0/24 maxlen: 24 212.57.118.0/24 maxlen: 24 212.57.122.0/24 maxlen: 24 212.57.124.0/23 maxlen: 23 212.57.126.0/23 maxlen: 23 217.28.220.0/23 maxlen: 23 217.28.222.0/23 maxlen: 23 2a01:230:1::/48 maxlen: 48 2a01:230:2::/48 maxlen: 48 2a01:230:3::/48 maxlen: 48 2a01:230:4::/48 maxlen: 48 2a01:230:5::/48 maxlen: 48 2a01:230:6::/48 maxlen: 48 2a01:230:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f8:e2:3d:e6:bb:21:a8:bd:ed:12:99:64:b0:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb500c9002321f03964583710b7baa4597341213 Validity Not Before: Jan 2 12:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e925d1bd137db2e6d701711076c0f12f23847be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d4:84:74:e0:e2:4f:c9:d0:10:98:33:ab:9a: 67:d3:10:6f:8c:c4:13:51:19:3c:3f:33:c0:c4:70: 1d:ed:8f:95:66:0a:f4:6b:c5:90:59:7d:8d:74:01: 98:98:9b:ee:62:44:51:d8:39:e5:85:06:6c:d3:fb: 10:3e:44:77:52:12:67:a9:d2:ca:1b:33:62:24:aa: 36:69:a4:4e:3d:33:88:d5:15:34:23:94:e3:95:1c: 4f:44:c2:ca:1f:91:7f:fa:b3:d4:0c:14:f8:68:66: f4:4c:84:93:bf:97:67:15:73:fc:fe:8f:e8:d0:23: 2e:bb:25:77:7d:2a:e4:e6:29:8c:c0:f6:e2:b2:de: 6f:3c:ec:d4:fa:b1:9b:49:9c:80:20:0d:08:a9:ed: 86:6c:10:4c:87:1f:37:fc:e8:6b:b6:cc:a0:a9:e3: 06:1e:5a:f0:00:08:a2:0d:12:b0:d9:b6:71:91:10: 32:b1:1d:db:61:f6:08:ec:90:63:ce:1f:48:cf:95: 5b:77:f0:9a:4b:b3:17:e6:a0:5c:cb:b8:80:a0:af: 65:b8:5d:96:35:53:fb:90:e7:53:a2:2f:51:e9:24: 7d:a0:a4:ab:68:eb:bd:67:68:96:3f:8e:1d:00:5b: 6d:a1:3d:61:c8:fc:33:02:bf:af:f4:51:9c:65:32: a6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:25:D1:BD:13:7D:B2:E6:D7:01:71:10:76:C0:F1:2F:23:84:7B:E4 X509v3 Authority Key Identifier: keyid:EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/6SXRvRN9subXAXEQdsDxLyOEe-Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.35.96.0/22 31.135.8.0/21 37.230.112.0/21 62.181.44.0/24 62.181.53.0-62.181.55.255 78.24.216.0/21 79.143.72.0/23 79.174.12.0/22 83.136.232.0/23 83.136.235.0/24 86.110.194.0/24 86.110.208.0/23 86.110.212.0/24 86.110.215.0/24 86.110.220.0/24 89.169.28.0/22 91.107.120.0/21 91.228.224.0/23 92.63.192.0/22 94.250.248.0/21 109.172.4.0/22 109.172.30.0/23 109.172.78.0/23 109.172.100.0/23 109.172.108.0-109.172.117.255 149.154.64.0/21 155.212.160.0/20 176.123.168.0/21 178.250.156.0/22 185.60.132.0/22 185.187.115.0/24 188.120.224.0-188.120.251.255 188.120.253.0-188.120.255.255 212.57.115.0-212.57.116.255 212.57.118.0/24 212.57.122.0/24 212.57.124.0/22 217.28.220.0/22 IPv6: 2a01:230:1::-2a01:230:7:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 1d:e7:56:9a:0c:06:44:50:87:1a:01:83:8e:14:c4:89:59:02: 1e:27:63:9f:bc:e8:e8:b6:ec:6c:7a:24:14:fb:30:2e:39:5b: a6:80:52:b8:06:57:39:de:73:d0:68:07:dd:f9:58:a1:d1:fe: 74:1f:a3:23:27:85:20:93:7b:f2:82:e5:21:89:23:96:d1:ec: 18:28:24:18:8f:f0:8a:59:74:9a:a0:c1:33:1b:d2:48:75:03: 41:66:00:7d:fb:0c:dd:f0:d2:ce:5a:05:a5:05:15:37:15:09: c5:bc:11:5c:62:c6:aa:5a:c7:31:69:d7:da:fa:77:1b:27:69: 75:bb:92:ed:a6:56:7c:58:7b:5c:b4:0c:8e:9c:1e:b0:ea:08: 0e:0e:81:9a:ab:4a:fb:ef:21:b1:13:c8:ac:1f:07:99:10:11: fe:46:36:81:92:0d:65:41:bc:86:60:f1:12:17:bf:b3:90:b6: 45:6d:8d:a6:33:15:5c:5e:4b:59:2f:aa:a6:14:6d:92:16:76: 89:a6:32:22:b1:29:86:5a:49:fe:e3:bc:52:e0:96:d7:e4:50: da:a1:36:ac:d3:2b:6b:fe:88:4e:63:02:5b:fc:31:b8:99:ed: 74:50:77:5a:52:72:d5:14:59:0e:20:97:6c:2b:6d:79:a2:b2: cd:81:cc:b4 -----BEGIN CERTIFICATE----- MIIGKDCCBRCgAwIBAgISAZt+pvjiPea7Iai97RKZZLBJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNTAwYzkwMDIzMjFmMDM5NjQ1ODM3MTBiN2JhYTQ1OTcz NDEyMTMwHhcNMjYwMTAyMTIyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTI1ZDFiZDEzN2RiMmU2ZDcwMTcxMTA3NmMwZjEyZjIzODQ3YmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdSEdODiT8nQEJgzq5pn0xBvjMQT URk8PzPAxHAd7Y+VZgr0a8WQWX2NdAGYmJvuYkRR2DnlhQZs0/sQPkR3UhJnqdLK GzNiJKo2aaROPTOI1RU0I5TjlRxPRMLKH5F/+rPUDBT4aGb0TISTv5dnFXP8/o/o 0CMuuyV3fSrk5imMwPbist5vPOzU+rGbSZyAIA0Iqe2GbBBMhx83/OhrtsygqeMG HlrwAAiiDRKw2bZxkRAysR3bYfYI7JBjzh9Iz5Vbd/CaS7MX5qBcy7iAoK9luF2W NVP7kOdToi9R6SR9oKSraOu9Z2iWP44dAFttoT1hyPwzAr+v9FGcZTKm9wIDAQAB o4IDNDCCAzAwHQYDVR0OBBYEFOkl0b0TfbLm1wFxEHbA8S8jhHvkMB8GA1UdIwQY MBaAFOtQDJACMh8DlkWDcQt7qkWXNBITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjFBTWtBSXlId09XUllOeEMzdXFSWmMwRWhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xOWMwOWEtZDc5YS00ZGU0LThhODYt NGE2ODU5NjJmM2U4LzEvNlNYUnZSTjlzdWJYQVhFUWRzRHhMeU9FZS1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8xOWMwOWEtZDc5YS00ZGU0LThhODYtNGE2ODU5NjJmM2U4 LzEvNjFBTWtBSXlId09XUllOeEMzdXFSWmMwRWhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBSAYIKwYBBQUHAQcBAf8EggE3MIIBMzCCARMEAgABMIIB CwMEAgUjYAMEAx+HCAMEAyXmcAMEAD61LDAMAwQAPrU1AwQDPrUwAwQDThjYAwQB T49IAwQCT64MAwQBU4joAwQAU4jrAwQAVm7CAwQBVm7QAwQAVm7UAwQAVm7XAwQA Vm7cAwQCWakcAwQDW2t4AwQBW+TgAwQCXD/AAwQDXvr4AwQCbawEAwQBbaweAwQB baxOAwQBbaxkMAwDBAJtrGwDBAFtrHQDBAOVmkADBASb1KADBAOwe6gDBAKy+pwD BAK5PIQDBAC5u3MwDAMEBbx44AMEArx4+DALAwQAvHj9AwMAvHgwDAMEANQ5cwME ANQ5dAMEANQ5dgMEANQ5egMEAtQ5fAMEAtkc3DAaBAIAAjAUMBIDBwAqAQIwAAED BwMqAQIwAAAwDQYJKoZIhvcNAQELBQADggEBAB3nVpoMBkRQhxoBg44UxIlZAh4n Y5+86Oi27Gx6JBT7MC45W6aAUrgGVznec9BoB935WKHR/nQfoyMnhSCTe/KC5SGJ I5bR7BgoJBiP8IpZdJqgwTMb0kh1A0FmAH37DN3w0s5aBaUFFTcVCcW8EVxixqpa xzFp19r6dxsnaXW7ku2mVnxYe1y0DI6cHrDqCA4OgZqrSvvvIbETyKwfB5kQEf5G NoGSDWVBvIZg8RIXv7OQtkVtjaYzFVxeS1kvqqYUbZIWdommMiKxKYZaSf7jvFLg ltfkUNqhNqzTK2v+iE5jAlv8MbiZ7XRQd1pSctUUWQ4gl2wrbXmiss2BzLQ= -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:05 2026 by rpki-client