This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Sbc1KdPOlgGK5nFGpLwxH86GJz4.roa File: Sbc1KdPOlgGK5nFGpLwxH86GJz4.roa (raw, json) Hash identifier: xFRKJl2sfHf3UNoeN7vbQTwqeCoQjyAvvYNCZzVOv/0= Subject key identifier: 49:B7:35:29:D3:CE:96:01:8A:E6:71:46:A4:BC:31:1F:CE:86:27:3E Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21 Certificate serial: 019B7F14F7B82C02E23D0463420B1AD8BA2C Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Sbc1KdPOlgGK5nFGpLwxH86GJz4.roa Signing time: Fri 02 Jan 2026 14:20:39 +0000 ROA not before: Fri 02 Jan 2026 14:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21341 IP address blocks: 62.220.96.0/21 maxlen: 24 62.220.104.0/22 maxlen: 24 62.220.120.0/22 maxlen: 22 62.220.124.0/23 maxlen: 23 81.12.8.0/22 maxlen: 22 81.12.12.0/22 maxlen: 22 81.12.16.0/21 maxlen: 21 81.12.48.0/22 maxlen: 24 81.12.58.0/24 maxlen: 24 81.12.59.0/24 maxlen: 24 87.107.0.0/21 maxlen: 24 87.107.14.0/23 maxlen: 24 87.107.24.0/22 maxlen: 22 87.107.34.0/23 maxlen: 23 87.107.40.0/24 maxlen: 24 87.107.41.0/24 maxlen: 24 87.107.42.0/23 maxlen: 23 87.107.50.0/23 maxlen: 24 87.107.51.0/24 maxlen: 24 87.107.52.0/23 maxlen: 23 87.107.68.0/22 maxlen: 24 87.107.88.0/22 maxlen: 22 87.107.96.0/22 maxlen: 24 87.107.106.0/23 maxlen: 24 87.107.112.0/22 maxlen: 24 87.107.116.0/23 maxlen: 23 87.107.120.0/21 maxlen: 24 87.107.128.0/22 maxlen: 22 87.107.132.0/22 maxlen: 23 87.107.132.0/23 maxlen: 24 87.107.160.0/22 maxlen: 24 87.107.168.0/22 maxlen: 24 87.107.173.0/24 maxlen: 24 87.107.188.0/23 maxlen: 24 87.107.192.0/19 maxlen: 24 87.107.206.0/24 maxlen: 24 87.107.226.0/23 maxlen: 24 87.107.226.0/24 maxlen: 24 87.107.232.0/24 maxlen: 24 185.60.136.0/24 maxlen: 24 185.60.137.0/24 maxlen: 24 185.60.138.0/24 maxlen: 24 185.60.139.0/24 maxlen: 24 2a00:1198::/32 maxlen: 48 2a00:1198::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:f7:b8:2c:02:e2:3d:04:63:42:0b:1a:d8:ba:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Validity Not Before: Jan 2 14:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49b73529d3ce96018ae67146a4bc311fce86273e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:56:6f:31:37:71:5b:bb:9d:55:40:48:99:46: ab:85:f2:39:70:1b:82:34:ed:7a:d8:64:79:4b:21: 37:4a:8c:10:13:d6:ce:23:9c:0f:74:0e:56:af:f0: 40:f0:74:22:10:ec:f8:4e:6b:98:aa:75:19:02:50: 33:26:38:c9:96:1a:21:63:88:51:e8:f1:c4:a1:cf: b2:89:76:b6:e0:af:7b:6b:5f:17:c1:6b:61:d2:ef: 31:df:a1:98:2f:6f:e8:7d:4c:fa:11:01:33:b9:87: 82:65:80:db:90:f8:ac:f4:c0:7b:00:53:ab:60:6f: ba:fb:c0:78:b3:3b:9c:5a:86:aa:cf:51:84:bd:16: 87:9d:0b:37:db:23:b3:d2:9c:4c:b4:d0:c7:3a:d9: 24:4f:84:ec:bf:10:60:d8:24:c7:ca:7b:73:5d:4a: e5:25:a8:49:e9:c0:7c:2f:f6:2f:05:8a:6a:dc:6e: 7f:f7:41:0f:3b:10:41:6a:1e:44:8e:9a:48:83:e6: 8f:3a:bd:52:e9:0a:e9:23:94:7b:59:e4:fb:14:52: a1:a3:67:55:fe:71:6b:09:c4:d8:14:f1:ac:85:51: ec:50:06:96:91:78:f2:3a:82:2c:3a:74:0e:7f:4b: bd:49:84:f5:f6:93:9e:54:d1:b1:a7:be:2e:f7:e9: 60:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B7:35:29:D3:CE:96:01:8A:E6:71:46:A4:BC:31:1F:CE:86:27:3E X509v3 Authority Key Identifier: keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Sbc1KdPOlgGK5nFGpLwxH86GJz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.220.96.0-62.220.107.255 62.220.120.0-62.220.125.255 81.12.8.0-81.12.23.255 81.12.48.0/22 81.12.58.0/23 87.107.0.0/21 87.107.14.0/23 87.107.24.0/22 87.107.34.0/23 87.107.40.0/22 87.107.50.0-87.107.53.255 87.107.68.0/22 87.107.88.0/22 87.107.96.0/22 87.107.106.0/23 87.107.112.0-87.107.117.255 87.107.120.0-87.107.135.255 87.107.160.0/22 87.107.168.0/22 87.107.173.0/24 87.107.188.0/23 87.107.192.0/19 87.107.226.0/23 87.107.232.0/24 185.60.136.0/22 IPv6: 2a00:1198::/32 Signature Algorithm: sha256WithRSAEncryption b9:44:cd:0a:6b:ca:ca:97:3b:ba:55:0e:27:58:6f:c6:4d:0f: eb:28:18:06:ec:e3:5a:19:48:e2:33:9b:55:28:59:ef:af:28: 80:84:52:02:d1:8b:c4:6e:62:65:82:19:45:e0:16:e4:e0:e7: 9b:a5:c4:9b:75:2f:d4:85:0c:6b:7c:0b:4d:e5:18:ab:30:88: 07:05:65:09:fb:02:e8:73:36:ea:2e:f9:92:24:9b:f6:e8:20: b9:28:e4:4f:58:47:b7:4d:b8:20:5b:59:44:59:dd:4d:ca:f7: 1b:e7:09:5b:fd:e1:86:c9:88:4b:86:61:1d:53:64:0d:64:1f: 9b:46:79:d2:cb:3c:4a:73:71:98:68:ad:a8:eb:32:57:c1:ec: a0:fb:c4:fc:8a:a8:c7:77:fc:d0:fc:2c:9c:60:36:cf:93:07: a4:3a:5b:11:cc:58:20:cf:ad:79:d7:14:b0:1d:c5:9f:cb:23: d7:b2:e0:54:28:e7:92:e0:df:d7:cc:70:00:ae:3e:6b:72:7b: cd:d9:af:bd:b9:0d:03:ec:e3:6b:c6:dd:c8:de:8d:6c:53:8f: e8:c0:a9:c1:a1:62:59:7e:5a:22:6a:8a:a7:97:c8:c7:89:63: 28:dc:02:c3:98:e0:ba:2a:d9:55:72:e7:c4:e0:09:2e:f3:5a: b8:a8:bd:ae -----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgISAZt/FPe4LALiPQRjQgsa2LosMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk ZDVjMjEwHhcNMjYwMTAyMTQyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWI3MzUyOWQzY2U5NjAxOGFlNjcxNDZhNGJjMzExZmNlODYyNzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFZvMTdxW7udVUBImUarhfI5cBuC NO162GR5SyE3SowQE9bOI5wPdA5Wr/BA8HQiEOz4TmuYqnUZAlAzJjjJlhohY4hR 6PHEoc+yiXa24K97a18XwWth0u8x36GYL2/ofUz6EQEzuYeCZYDbkPis9MB7AFOr YG+6+8B4szucWoaqz1GEvRaHnQs32yOz0pxMtNDHOtkkT4TsvxBg2CTHyntzXUrl JahJ6cB8L/YvBYpq3G5/90EPOxBBah5EjppIg+aPOr1S6QrpI5R7WeT7FFKho2dV /nFrCcTYFPGshVHsUAaWkXjyOoIsOnQOf0u9SYT19pOeVNGxp74u9+lggQIDAQAB o4IC3TCCAtkwHQYDVR0OBBYEFEm3NSnTzpYBiuZxRqS8MR/Ohic+MB8GA1UdIwQY MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt NzZiMzNlNGNlODIxLzEvU2JjMUtkUE9sZ0dLNW5GR3BMd3hIODZHSno0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHyBggrBgEFBQcBBwEB/wSB4jCB3zCBzQQCAAEwgcYwDAME BT7cYAMEAj7caDAMAwQDPtx4AwQBPtx8MAwDBANRDAgDBANRDBADBAJRDDADBAFR DDoDBANXawADBAFXaw4DBAJXaxgDBAFXayIDBAJXaygwDAMEAVdrMgMEAVdrNAME AldrRAMEAldrWAMEAldrYAMEAVdrajAMAwQEV2twAwQBV2t0MAwDBANXa3gDBANX a4ADBAJXa6ADBAJXa6gDBABXa60DBAFXa7wDBAVXa8ADBAFXa+IDBABXa+gDBAK5 PIgwDQQCAAIwBwMFACoAEZgwDQYJKoZIhvcNAQELBQADggEBALlEzQprysqXO7pV DidYb8ZND+soGAbs41oZSOIzm1UoWe+vKICEUgLRi8RuYmWCGUXgFuTg55ulxJt1 L9SFDGt8C03lGKswiAcFZQn7AuhzNuou+ZIkm/boILko5E9YR7dNuCBbWURZ3U3K 9xvnCVv94YbJiEuGYR1TZA1kH5tGedLLPEpzcZhorajrMlfB7KD7xPyKqMd3/ND8 LJxgNs+TB6Q6WxHMWCDPrXnXFLAdxZ/LI9ey4FQo55Lg39fMcACuPmtye83Zr725 DQPs42vG3cjejWxTj+jAqcGhYll+WiJqiqeXyMeJYyjcAsOY4Loq2VVy58TgCS7z Wriova4= -----END CERTIFICATE-----Generated at Mon Jan 26 23:22:44 2026 by rpki-client