This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/2u4DW90i6pJn6TNxJSQdCJPO9PA.roa File: 2u4DW90i6pJn6TNxJSQdCJPO9PA.roa (raw, json) Hash identifier: z+7kYSl922ZGHRd4ve+viSStXQUCmw3QVQ5Lgiw6cXk= Subject key identifier: DA:EE:03:5B:DD:22:EA:92:67:E9:33:71:25:24:1D:08:93:CE:F4:F0 Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316 Certificate serial: 019B7D5C7582F6CD55921A1E6A0D181D36A1 Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/2u4DW90i6pJn6TNxJSQdCJPO9PA.roa Signing time: Fri 02 Jan 2026 06:19:30 +0000 ROA not before: Fri 02 Jan 2026 06:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5603 IP address blocks: 86.61.0.0/17 maxlen: 17 86.61.0.0/18 maxlen: 18 86.61.64.0/18 maxlen: 18 89.142.0.0/16 maxlen: 16 89.142.0.0/18 maxlen: 18 89.142.64.0/18 maxlen: 18 89.142.128.0/18 maxlen: 18 89.142.192.0/18 maxlen: 18 89.143.0.0/16 maxlen: 16 89.143.0.0/18 maxlen: 18 89.143.64.0/18 maxlen: 18 89.143.128.0/18 maxlen: 18 89.143.192.0/18 maxlen: 18 91.195.146.0/23 maxlen: 23 95.159.192.0/18 maxlen: 18 95.159.192.0/20 maxlen: 20 95.176.128.0/17 maxlen: 17 95.176.128.0/18 maxlen: 18 95.176.192.0/18 maxlen: 18 109.182.0.0/16 maxlen: 16 109.182.0.0/17 maxlen: 17 109.182.128.0/17 maxlen: 17 149.126.128.0/19 maxlen: 19 149.126.128.0/20 maxlen: 20 149.126.144.0/20 maxlen: 20 178.58.0.0/16 maxlen: 16 178.58.0.0/17 maxlen: 17 178.58.128.0/17 maxlen: 17 185.57.226.0/23 maxlen: 23 185.59.24.0/22 maxlen: 22 185.59.24.0/23 maxlen: 23 185.59.26.0/23 maxlen: 23 188.196.0.0/14 maxlen: 14 188.196.0.0/15 maxlen: 15 188.196.0.0/16 maxlen: 16 188.197.0.0/16 maxlen: 16 188.198.0.0/15 maxlen: 15 188.198.0.0/16 maxlen: 16 188.199.0.0/16 maxlen: 16 193.77.0.0/16 maxlen: 16 193.77.0.0/18 maxlen: 18 193.77.64.0/18 maxlen: 18 193.77.128.0/18 maxlen: 18 193.77.192.0/18 maxlen: 18 193.95.192.0/18 maxlen: 18 193.95.192.0/19 maxlen: 19 193.95.224.0/19 maxlen: 19 193.138.9.0/24 maxlen: 24 193.189.160.0/19 maxlen: 19 193.189.160.0/20 maxlen: 20 193.189.176.0/20 maxlen: 20 194.165.96.0/19 maxlen: 19 194.165.96.0/20 maxlen: 20 195.88.82.0/23 maxlen: 23 195.210.192.0/18 maxlen: 18 195.210.192.0/20 maxlen: 20 195.250.192.0/20 maxlen: 20 195.250.192.0/21 maxlen: 21 195.250.200.0/21 maxlen: 21 195.250.208.0/21 maxlen: 21 195.250.212.0/22 maxlen: 22 212.30.64.0/19 maxlen: 19 212.30.64.0/20 maxlen: 20 212.30.80.0/20 maxlen: 20 213.229.192.0/18 maxlen: 18 213.229.192.0/19 maxlen: 19 213.229.192.0/20 maxlen: 20 213.229.224.0/19 maxlen: 19 213.250.0.0/18 maxlen: 18 213.250.0.0/19 maxlen: 19 213.250.32.0/19 maxlen: 19 2a00:ee0::/29 maxlen: 29 2a00:ee0::/32 maxlen: 32 2a00:ee1::/32 maxlen: 32 2a00:ee2::/32 maxlen: 32 2a00:ee3::/32 maxlen: 32 2a00:ee4::/32 maxlen: 32 2a00:ee5::/32 maxlen: 32 2a00:ee6::/32 maxlen: 32 2a00:ee7::/32 maxlen: 32 2a02:e20::/29 maxlen: 29 2a02:e20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:75:82:f6:cd:55:92:1a:1e:6a:0d:18:1d:36:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316 Validity Not Before: Jan 2 06:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=daee035bdd22ea9267e9337125241d0893cef4f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:96:c7:8a:42:2c:f4:b1:df:f6:42:6f:3d:75: 68:47:77:53:67:28:58:e0:5f:03:b6:aa:24:fb:42: cc:f1:40:ad:e9:98:49:8c:8b:cf:1a:c7:63:99:7b: 2b:14:12:0d:1c:ee:31:b3:58:cb:2e:52:1c:ab:b0: 26:49:d9:46:db:d9:a3:0b:97:82:0a:ae:a2:82:24: 9c:f2:de:db:10:0b:55:2b:33:b8:db:33:07:8a:df: 9c:94:80:bc:d9:13:26:1f:a8:0e:cd:3b:e3:e2:94: 77:1b:b5:f8:f7:da:6c:b3:a6:32:8f:44:69:23:7b: f6:9e:b8:30:8f:5a:19:ec:d2:52:1b:45:66:5e:38: 02:e4:aa:c0:c0:cf:49:9c:8b:39:70:5c:f7:b1:91: 1f:6e:97:4a:7e:ed:23:3b:7b:6f:7d:ee:83:5d:6b: ce:fd:09:b0:f1:51:da:4a:e1:ae:66:ad:51:b6:fe: fc:16:fd:b6:4f:43:25:2b:38:47:d4:aa:8d:8e:33: 88:4c:2d:5a:51:a4:b8:f0:ba:7d:01:a9:09:b4:6a: a0:cb:ce:d8:2e:ba:72:35:56:75:d9:dc:c6:59:ba: 5c:05:c9:88:f8:6d:df:40:94:f7:5e:3f:42:94:35: 23:ec:7b:a7:86:c9:4d:98:8b:7a:18:95:8e:bb:29: 8b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:EE:03:5B:DD:22:EA:92:67:E9:33:71:25:24:1D:08:93:CE:F4:F0 X509v3 Authority Key Identifier: keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/2u4DW90i6pJn6TNxJSQdCJPO9PA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.61.0.0/17 89.142.0.0/15 91.195.146.0/23 95.159.192.0/18 95.176.128.0/17 109.182.0.0/16 149.126.128.0/19 178.58.0.0/16 185.57.226.0/23 185.59.24.0/22 188.196.0.0/14 193.77.0.0/16 193.95.192.0/18 193.138.9.0/24 193.189.160.0/19 194.165.96.0/19 195.88.82.0/23 195.210.192.0/18 195.250.192.0-195.250.215.255 212.30.64.0/19 213.229.192.0/18 213.250.0.0/18 IPv6: 2a00:ee0::/29 2a02:e20::/29 Signature Algorithm: sha256WithRSAEncryption 28:9e:de:aa:54:cc:23:b0:fd:8a:59:49:b2:1a:f1:f0:92:87: 47:78:c0:40:92:64:21:dd:27:88:e0:18:40:17:e2:58:54:35: a4:5e:c0:c0:10:99:68:f1:fe:fd:17:36:27:fb:46:ba:2b:c8: cb:ae:dc:12:fc:ed:a9:15:78:02:78:a7:a5:fd:c7:04:81:37: b7:24:15:f2:52:52:ce:60:3d:65:93:76:70:ae:93:dd:78:1a: 8e:1f:a2:36:42:25:98:fb:49:cf:27:e6:56:83:c7:7d:0c:49: a0:3c:b1:a2:f6:c1:33:12:99:30:12:a6:8d:8c:81:33:89:4e: c2:6b:be:16:22:b7:81:b8:c4:9e:43:23:57:53:94:81:e4:c0: f5:16:93:db:5d:7a:11:52:21:1f:26:06:4a:8d:ee:ef:c5:e9: b3:e9:0d:69:c4:6e:ad:ec:b3:73:d9:f9:5f:46:af:ba:41:6d: dc:1f:4e:c6:78:c7:5d:dc:85:26:b6:8f:15:02:05:51:32:bc: db:ba:ad:21:13:99:1c:68:a4:7c:a4:d4:f9:4a:03:9f:84:9c: 51:af:e0:d1:bf:a5:5a:b7:e2:c0:de:81:9c:6b:ef:4d:98:67: 79:e9:de:4c:41:f8:08:ca:67:b5:98:59:ff:89:7b:b7:88:95: f8:e8:2a:48 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt9XHWC9s1Vkhoeag0YHTahMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MzUwYWE4YTk0YWY2NjYwOTlmZDA3M2VjNjIxY2QxNWQw NGIzMTYwHhcNMjYwMTAyMDYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWVlMDM1YmRkMjJlYTkyNjdlOTMzNzEyNTI0MWQwODkzY2VmNGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZbHikIs9LHf9kJvPXVoR3dTZyhY 4F8Dtqok+0LM8UCt6ZhJjIvPGsdjmXsrFBINHO4xs1jLLlIcq7AmSdlG29mjC5eC Cq6igiSc8t7bEAtVKzO42zMHit+clIC82RMmH6gOzTvj4pR3G7X499pss6Yyj0Rp I3v2nrgwj1oZ7NJSG0VmXjgC5KrAwM9JnIs5cFz3sZEfbpdKfu0jO3tvfe6DXWvO /Qmw8VHaSuGuZq1Rtv78Fv22T0MlKzhH1KqNjjOITC1aUaS48Lp9AakJtGqgy87Y LrpyNVZ12dzGWbpcBcmI+G3fQJT3Xj9ClDUj7HunhslNmIt6GJWOuymLiQIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFNruA1vdIuqSZ+kzcSUkHQiTzvTwMB8GA1UdIwQY MBaAFCQ1CqipSvZmCZ/Qc+xiHNFdBLMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9hYjYyZTctNzM2Ny00YmRlLTkzNGEt YjQyNTIyZDA1ODk1LzEvMnU0RFc5MGk2cEpuNlROeEpTUWRDSlBPOVBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9hYjYyZTctNzM2Ny00YmRlLTkzNGEtYjQyNTIyZDA1ODk1 LzEvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG6BggrBgEFBQcBBwEB/wSBqjCBpzCBjgQCAAEwgYcDBAdW PQADAwFZjgMEAVvDkgMEBl+fwAMEB1+wgAMDAG22AwQFlX6AAwMAsjoDBAG5OeID BAK5OxgDAwK8xAMDAMFNAwQGwV/AAwQAwYoJAwQFwb2gAwQFwqVgAwQBw1hSAwQG w9LAMAwDBAbD+sADBAPD+tADBAXUHkADBAbV5cADBAbV+gAwFAQCAAIwDgMFAyoA DuADBQMqAg4gMA0GCSqGSIb3DQEBCwUAA4IBAQAont6qVMwjsP2KWUmyGvHwkodH eMBAkmQh3SeI4BhAF+JYVDWkXsDAEJlo8f79FzYn+0a6K8jLrtwS/O2pFXgCeKel /ccEgTe3JBXyUlLOYD1lk3ZwrpPdeBqOH6I2QiWY+0nPJ+ZWg8d9DEmgPLGi9sEz EpkwEqaNjIEziU7Ca74WIreBuMSeQyNXU5SB5MD1FpPbXXoRUiEfJgZKje7vxemz 6Q1pxG6t7LNz2flfRq+6QW3cH07GeMdd3IUmto8VAgVRMrzbuq0hE5kcaKR8pNT5 SgOfhJxRr+DRv6Vat+LA3oGca+9NmGd56d5MQfgIyme1mFn/iXu3iJX46CpI -----END CERTIFICATE-----Generated at Tue Jan 27 06:05:22 2026 by rpki-client