This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/6iPXV-j72fwHyu-a1qZhhyOWNX0.roa File: 6iPXV-j72fwHyu-a1qZhhyOWNX0.roa (raw, json) Hash identifier: ykxZz1uHoQrLPd/BB/GHWEP7b2S14DQojFg67ujzews= Subject key identifier: EA:23:D7:57:E8:FB:D9:FC:07:CA:EF:9A:D6:A6:61:87:23:96:35:7D Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAD295A03D34DF2E9AE7834F1C3B16 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/6iPXV-j72fwHyu-a1qZhhyOWNX0.roa Signing time: Thu 01 Jan 2026 00:17:39 +0000 ROA not before: Thu 01 Jan 2026 00:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209847 IP address blocks: 2.56.118.0/24 maxlen: 24 2.56.119.0/24 maxlen: 24 2.56.120.0/24 maxlen: 24 2.56.121.0/24 maxlen: 24 2.56.122.0/24 maxlen: 24 2.56.124.0/24 maxlen: 24 2.56.125.0/24 maxlen: 24 2.56.126.0/24 maxlen: 24 2.56.127.0/24 maxlen: 24 2.56.172.0/22 maxlen: 24 2.56.176.0/24 maxlen: 24 2.56.177.0/24 maxlen: 24 2.56.179.0/24 maxlen: 24 5.180.22.0/24 maxlen: 24 5.180.24.0/24 maxlen: 24 5.180.29.0/24 maxlen: 24 5.180.30.0/24 maxlen: 24 5.180.45.0/24 maxlen: 24 5.180.55.0/24 maxlen: 24 5.253.40.0/24 maxlen: 24 5.253.41.0/24 maxlen: 24 5.253.43.0/24 maxlen: 24 45.12.108.0/22 maxlen: 24 45.12.129.0/24 maxlen: 24 45.12.130.0/24 maxlen: 24 45.12.131.0/24 maxlen: 24 45.12.132.0/22 maxlen: 24 45.12.136.0/22 maxlen: 24 45.12.140.0/22 maxlen: 24 45.12.144.0/22 maxlen: 24 45.12.149.0/24 maxlen: 24 45.12.150.0/23 maxlen: 24 45.15.126.0/23 maxlen: 24 45.15.140.0/24 maxlen: 24 45.15.141.0/24 maxlen: 24 45.15.142.0/24 maxlen: 24 45.15.144.0/24 maxlen: 24 45.15.160.0/22 maxlen: 24 45.15.165.0/24 maxlen: 24 45.15.166.0/24 maxlen: 24 45.15.167.0/24 maxlen: 24 45.15.168.0/22 maxlen: 24 45.15.176.0/24 maxlen: 24 45.15.178.0/24 maxlen: 24 45.15.184.0/24 maxlen: 24 45.15.185.0/24 maxlen: 24 45.15.187.0/24 maxlen: 24 45.66.166.0/24 maxlen: 24 45.66.167.0/24 maxlen: 24 45.82.245.0/24 maxlen: 24 45.82.246.0/24 maxlen: 24 45.82.247.0/24 maxlen: 24 45.82.249.0/24 maxlen: 24 45.82.250.0/24 maxlen: 24 45.82.251.0/24 maxlen: 24 45.82.252.0/24 maxlen: 24 45.82.254.0/24 maxlen: 24 45.82.255.0/24 maxlen: 24 45.83.20.0/24 maxlen: 24 45.83.21.0/24 maxlen: 24 45.83.22.0/24 maxlen: 24 45.83.26.0/24 maxlen: 24 45.83.129.0/24 maxlen: 24 45.83.130.0/24 maxlen: 24 45.83.131.0/24 maxlen: 24 45.83.140.0/22 maxlen: 24 45.83.148.0/24 maxlen: 24 45.86.70.0/24 maxlen: 24 45.86.72.0/24 maxlen: 24 45.86.74.0/24 maxlen: 24 45.88.182.0/23 maxlen: 24 45.89.105.0/24 maxlen: 24 45.89.106.0/24 maxlen: 24 45.89.107.0/24 maxlen: 24 45.89.108.0/22 maxlen: 24 45.89.196.0/24 maxlen: 24 45.92.162.0/24 maxlen: 24 45.128.48.0/24 maxlen: 24 45.128.50.0/24 maxlen: 24 45.128.52.0/24 maxlen: 24 45.128.54.0/24 maxlen: 24 45.128.72.0/24 maxlen: 24 45.136.114.0/24 maxlen: 24 45.136.116.0/24 maxlen: 24 45.136.128.0/23 maxlen: 24 45.136.149.0/24 maxlen: 24 45.149.113.0/24 maxlen: 24 85.208.108.0/24 maxlen: 24 85.208.109.0/24 maxlen: 24 85.208.110.0/24 maxlen: 24 85.209.153.0/24 maxlen: 24 85.209.154.0/24 maxlen: 24 85.209.195.0/24 maxlen: 24 88.218.93.0/24 maxlen: 24 92.118.230.0/24 maxlen: 24 92.118.231.0/24 maxlen: 24 92.118.232.0/24 maxlen: 24 92.118.233.0/24 maxlen: 24 92.118.234.0/24 maxlen: 24 139.28.233.0/24 maxlen: 24 141.98.161.0/24 maxlen: 24 141.98.162.0/24 maxlen: 24 141.98.163.0/24 maxlen: 24 141.98.164.0/24 maxlen: 24 141.98.166.0/24 maxlen: 24 171.22.109.0/24 maxlen: 24 171.22.110.0/24 maxlen: 24 171.22.112.0/24 maxlen: 24 171.22.113.0/24 maxlen: 24 171.22.114.0/24 maxlen: 24 171.22.116.0/23 maxlen: 24 171.22.118.0/24 maxlen: 24 171.22.120.0/24 maxlen: 24 171.22.122.0/24 maxlen: 24 171.22.123.0/24 maxlen: 24 171.22.124.0/22 maxlen: 24 171.22.129.0/24 maxlen: 24 171.22.131.0/24 maxlen: 24 185.106.98.0/23 maxlen: 24 185.153.180.0/22 maxlen: 24 185.156.108.0/22 maxlen: 24 185.161.69.0/24 maxlen: 24 185.166.154.0/24 maxlen: 24 185.166.155.0/24 maxlen: 24 185.203.4.0/22 maxlen: 24 194.36.39.0/24 maxlen: 24 194.55.188.0/24 maxlen: 24 194.59.244.0/24 maxlen: 24 194.76.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d2:95:a0:3d:34:df:2e:9a:e7:83:4f:1c:3b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea23d757e8fbd9fc07caef9ad6a661872396357d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bf:f9:34:37:7a:54:cf:d5:f2:30:4f:5d:7a: dc:a4:7e:f5:12:06:13:ed:4d:9a:ad:2a:5a:d8:df: dc:1e:de:9f:b4:d3:a4:6d:b2:0a:72:71:67:14:58: b4:a6:f5:81:1d:0b:46:bf:2f:a4:e5:d8:62:a3:45: bc:f2:8c:18:4d:15:e8:d9:a7:76:2e:77:ed:e2:34: 92:80:fb:c1:b2:0f:cb:c4:71:43:bd:01:6b:61:26: 78:3a:fa:a3:5b:bc:05:06:6f:5d:97:92:ae:18:d7: fd:1b:e5:1a:30:57:33:54:f3:37:ba:8d:2b:4c:cc: 83:4b:7e:21:14:ae:31:34:76:11:03:6c:68:73:d4: e0:76:97:9b:75:bb:a6:30:4e:f3:a8:2c:6e:86:a5: da:b1:37:7f:0e:9c:88:c5:37:15:a9:0e:12:b1:3b: b7:d7:4a:e0:1c:5d:78:45:6f:aa:91:ef:e0:be:94: fd:24:11:5b:52:af:76:2d:cd:9f:1f:d9:24:1a:d7: 7e:61:45:76:46:c2:09:08:aa:9d:98:fe:26:ca:98: 7c:e2:b9:5d:12:0b:f1:14:1c:a2:64:ce:7f:2c:e4: ed:2c:19:24:64:84:3f:ca:b2:cf:5b:c6:b1:db:d3: 7f:29:3f:63:09:ea:ff:5d:77:fc:c5:16:96:39:cf: f0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:23:D7:57:E8:FB:D9:FC:07:CA:EF:9A:D6:A6:61:87:23:96:35:7D X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/6iPXV-j72fwHyu-a1qZhhyOWNX0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.118.0-2.56.122.255 2.56.124.0/22 2.56.172.0-2.56.177.255 2.56.179.0/24 5.180.22.0/24 5.180.24.0/24 5.180.29.0-5.180.30.255 5.180.45.0/24 5.180.55.0/24 5.253.40.0/23 5.253.43.0/24 45.12.108.0/22 45.12.129.0-45.12.147.255 45.12.149.0-45.12.151.255 45.15.126.0/23 45.15.140.0-45.15.142.255 45.15.144.0/24 45.15.160.0/22 45.15.165.0-45.15.171.255 45.15.176.0/24 45.15.178.0/24 45.15.184.0/23 45.15.187.0/24 45.66.166.0/23 45.82.245.0-45.82.247.255 45.82.249.0-45.82.252.255 45.82.254.0/23 45.83.20.0-45.83.22.255 45.83.26.0/24 45.83.129.0-45.83.131.255 45.83.140.0/22 45.83.148.0/24 45.86.70.0/24 45.86.72.0/24 45.86.74.0/24 45.88.182.0/23 45.89.105.0-45.89.111.255 45.89.196.0/24 45.92.162.0/24 45.128.48.0/24 45.128.50.0/24 45.128.52.0/24 45.128.54.0/24 45.128.72.0/24 45.136.114.0/24 45.136.116.0/24 45.136.128.0/23 45.136.149.0/24 45.149.113.0/24 85.208.108.0-85.208.110.255 85.209.153.0-85.209.154.255 85.209.195.0/24 88.218.93.0/24 92.118.230.0-92.118.234.255 139.28.233.0/24 141.98.161.0-141.98.164.255 141.98.166.0/24 171.22.109.0-171.22.110.255 171.22.112.0-171.22.114.255 171.22.116.0-171.22.118.255 171.22.120.0/24 171.22.122.0-171.22.127.255 171.22.129.0/24 171.22.131.0/24 185.106.98.0/23 185.153.180.0/22 185.156.108.0/22 185.161.69.0/24 185.166.154.0/23 185.203.4.0/22 194.36.39.0/24 194.55.188.0/24 194.59.244.0/24 194.76.136.0/22 Signature Algorithm: sha256WithRSAEncryption a1:82:36:31:ff:55:d5:3e:af:89:e0:49:d9:38:c9:6e:65:c8: cc:7d:6e:1e:17:74:28:25:1c:ac:de:90:0f:27:04:4b:8c:eb: 65:92:a0:77:e6:ed:32:be:bf:99:f8:d9:3c:d9:d7:99:cd:d4: 6c:c9:ee:1b:c1:b3:c5:17:28:90:f3:39:70:fd:05:6e:28:bb: 43:9e:e7:27:57:b8:e3:d9:fe:49:8b:82:75:eb:f9:ce:50:cb: 0b:35:69:35:ac:5b:63:ae:51:8e:93:64:0a:4e:bd:8b:3e:8c: 44:3c:ab:7c:bc:17:9b:86:2a:e5:fa:df:a2:8e:c7:a6:42:33: 27:cb:db:77:94:39:62:e6:c5:a7:54:d7:ba:be:4a:ac:6b:da: 71:bd:6d:06:1f:2c:0a:7c:1e:65:6f:87:9c:f8:0b:48:d6:8d: 3a:f4:45:d6:2b:81:44:22:f4:13:27:b0:94:c5:e1:ce:99:70: 2b:90:5c:60:bf:c7:6c:df:ba:1a:d0:3c:96:26:5a:1a:01:dc: 5b:16:91:4d:d5:30:44:0e:07:0f:3b:3b:25:a3:42:7e:e3:15: 26:8c:db:87:1d:26:55:2d:32:50:0e:24:b2:01:09:09:bc:82: fa:ae:c4:6a:3e:40:82:7c:7b:71:b7:b4:fb:4b:e5:fd:96:6a: 45:0a:35:60 -----BEGIN CERTIFICATE----- MIIHXTCCBkWgAwIBAgISAZt26tKVoD003y6a54NPHDsWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTIzZDc1N2U4ZmJkOWZjMDdjYWVmOWFkNmE2NjE4NzIzOTYzNTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL/5NDd6VM/V8jBPXXrcpH71EgYT 7U2arSpa2N/cHt6ftNOkbbIKcnFnFFi0pvWBHQtGvy+k5dhio0W88owYTRXo2ad2 Lnft4jSSgPvBsg/LxHFDvQFrYSZ4OvqjW7wFBm9dl5KuGNf9G+UaMFczVPM3uo0r TMyDS34hFK4xNHYRA2xoc9TgdpebdbumME7zqCxuhqXasTd/DpyIxTcVqQ4SsTu3 10rgHF14RW+qke/gvpT9JBFbUq92Lc2fH9kkGtd+YUV2RsIJCKqdmP4myph84rld EgvxFByiZM5/LOTtLBkkZIQ/yrLPW8ax29N/KT9jCer/XXf8xRaWOc/wHQIDAQAB o4IEaTCCBGUwHQYDVR0OBBYEFOoj11fo+9n8B8rvmtamYYcjljV9MB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvNmlQWFYtajcyZndIeXUtYTFxWmhoeU9XTlgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICfQYIKwYBBQUHAQcBAf8EggJsMIICaDCCAmQEAgABMIIC XDAMAwQBAjh2AwQAAjh6AwQCAjh8MAwDBAICOKwDBAECOLADBAACOLMDBAAFtBYD BAAFtBgwDAMEAAW0HQMEAAW0HgMEAAW0LQMEAAW0NwMEAQX9KAMEAAX9KwMEAi0M bDAMAwQALQyBAwQCLQyQMAwDBAAtDJUDBAMtDJADBAEtD34wDAMEAi0PjAMEAC0P jgMEAC0PkAMEAi0PoDAMAwQALQ+lAwQCLQ+oAwQALQ+wAwQALQ+yAwQBLQ+4AwQA LQ+7AwQBLUKmMAwDBAAtUvUDBAMtUvAwDAMEAC1S+QMEAC1S/AMEAS1S/jAMAwQC LVMUAwQALVMWAwQALVMaMAwDBAAtU4EDBAItU4ADBAItU4wDBAAtU5QDBAAtVkYD BAAtVkgDBAAtVkoDBAEtWLYwDAMEAC1ZaQMEBC1ZYAMEAC1ZxAMEAC1cogMEAC2A MAMEAC2AMgMEAC2ANAMEAC2ANgMEAC2ASAMEAC2IcgMEAC2IdAMEAS2IgAMEAC2I lQMEAC2VcTAMAwQCVdBsAwQAVdBuMAwDBABV0ZkDBABV0ZoDBABV0cMDBABY2l0w DAMEAVx25gMEAFx26gMEAIsc6TAMAwQAjWKhAwQAjWKkAwQAjWKmMAwDBACrFm0D BACrFm4wDAMEBKsWcAMEAKsWcjAMAwQCqxZ0AwQAqxZ2AwQAqxZ4MAwDBAGrFnoD BAerFgADBACrFoEDBACrFoMDBAG5amIDBAK5mbQDBAK5nGwDBAC5oUUDBAG5ppoD BAK5ywQDBADCJCcDBADCN7wDBADCO/QDBALCTIgwDQYJKoZIhvcNAQELBQADggEB AKGCNjH/VdU+r4ngSdk4yW5lyMx9bh4XdCglHKzekA8nBEuM62WSoHfm7TK+v5n4 2TzZ15nN1GzJ7hvBs8UXKJDzOXD9BW4ou0Oe5ydXuOPZ/kmLgnXr+c5Qyws1aTWs W2OuUY6TZApOvYs+jEQ8q3y8F5uGKuX636KOx6ZCMyfL23eUOWLmxadU17q+Sqxr 2nG9bQYfLAp8HmVvh5z4C0jWjTr0RdYrgUQi9BMnsJTF4c6ZcCuQXGC/x2zfuhrQ PJYmWhoB3FsWkU3VMEQOBw87OyWjQn7jFSaM24cdJlUtMlAOJLIBCQm8gvquxGo+ QIJ8e3G3tPtL5f2WakUKNWA= -----END CERTIFICATE-----Generated at Wed Jan 21 09:55:14 2026 by rpki-client