This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/a-kJ5knumGsOVePmAFmyw3gQk6M.roa File: a-kJ5knumGsOVePmAFmyw3gQk6M.roa (raw, json) Hash identifier: n8W4R2uTKKGh4Y7lziZkfCB7vbLNy8V5BszYGmNeHKQ= Subject key identifier: 6B:E9:09:E6:49:EE:98:6B:0E:55:E3:E6:00:59:B2:C3:78:10:93:A3 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019B7CB94EC1AD8FC80E903BFEB487FF50CD Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/a-kJ5knumGsOVePmAFmyw3gQk6M.roa Signing time: Fri 02 Jan 2026 03:21:17 +0000 ROA not before: Fri 02 Jan 2026 03:21:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 5.182.196.0/24 maxlen: 24 92.249.29.0/24 maxlen: 24 94.154.171.0/24 maxlen: 24 103.130.176.0/24 maxlen: 24 103.130.177.0/24 maxlen: 24 103.210.14.0/24 maxlen: 24 103.210.15.0/24 maxlen: 24 103.216.198.0/24 maxlen: 24 104.232.36.0/24 maxlen: 24 162.218.92.0/24 maxlen: 24 185.52.139.0/24 maxlen: 24 185.161.190.0/24 maxlen: 24 185.187.214.0/24 maxlen: 24 185.187.215.0/24 maxlen: 24 185.201.42.0/24 maxlen: 24 185.208.152.0/24 maxlen: 24 185.208.153.0/24 maxlen: 24 185.230.121.0/24 maxlen: 24 185.253.120.0/24 maxlen: 24 185.253.121.0/24 maxlen: 24 2a0a:8f40:3::/48 maxlen: 48 2a0a:8f40:4::/48 maxlen: 48 2a0a:8f40:6::/48 maxlen: 48 2a0a:8f40:8::/48 maxlen: 48 2a0a:8f40:9::/48 maxlen: 48 2a0a:8f40:a::/48 maxlen: 48 2a0a:8f40:b::/48 maxlen: 48 2a0a:8f40:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:b9:4e:c1:ad:8f:c8:0e:90:3b:fe:b4:87:ff:50:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Jan 2 03:21:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6be909e649ee986b0e55e3e60059b2c3781093a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f9:ce:7e:7d:6d:50:b8:51:4b:f4:41:92:6c: fb:18:94:e4:f0:1d:e4:23:5e:8e:ae:67:a9:4a:eb: ef:89:da:cd:44:ac:de:99:43:21:c1:d6:e1:e4:62: 8a:28:bb:6d:2a:ca:55:78:84:7b:db:0c:33:0c:52: 3e:b5:bc:97:c6:21:cf:92:71:79:cc:cd:8d:fc:62: db:02:bb:ac:27:b5:bf:fc:fe:40:97:4d:21:3c:9b: 14:f2:76:26:ae:8b:a8:b6:b7:d1:60:bf:aa:95:99: df:b5:ac:bb:db:ff:d4:f8:2d:2f:9c:44:52:fe:a6: 43:8b:00:8e:b1:4a:f2:18:dc:85:f2:d2:10:6f:ed: 40:a2:5a:d6:ce:78:32:a6:66:23:3d:35:a6:75:bc: 0d:43:0b:ec:58:5d:5b:23:b2:e2:ad:f6:19:08:04: 8d:d6:1a:31:10:80:cf:18:a2:7e:59:34:a9:0b:5c: 89:f6:5b:9a:08:1b:de:1b:d7:94:c8:a3:ef:32:22: 81:c5:c5:07:e3:4c:90:33:36:aa:29:a1:60:9e:c5: 03:09:c2:a7:25:1e:8e:a9:e6:99:a0:4f:28:28:07: 02:9d:e4:2d:1f:97:3a:c7:e8:69:bb:f3:87:0c:8c: 15:cd:f0:c7:f0:c7:8f:e4:60:c9:8d:25:b9:2d:9a: 00:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E9:09:E6:49:EE:98:6B:0E:55:E3:E6:00:59:B2:C3:78:10:93:A3 X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/a-kJ5knumGsOVePmAFmyw3gQk6M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.196.0/24 92.249.29.0/24 94.154.171.0/24 103.130.176.0/23 103.210.14.0/23 103.216.198.0/24 104.232.36.0/24 162.218.92.0/24 185.52.139.0/24 185.161.190.0/24 185.187.214.0/23 185.201.42.0/24 185.208.152.0/23 185.230.121.0/24 185.253.120.0/23 IPv6: 2a0a:8f40:3::-2a0a:8f40:4:ffff:ffff:ffff:ffff:ffff 2a0a:8f40:6::/48 2a0a:8f40:8::-2a0a:8f40:c:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 11:d1:85:b8:92:79:78:2e:0d:79:61:9a:4a:90:c2:e7:b8:3a: 6f:e6:c6:22:fc:d4:06:fe:dc:67:02:f9:75:84:bc:72:83:f9: ea:5c:52:62:47:29:bc:a1:8e:cb:3a:90:e5:22:b0:c4:ba:25: 8e:9e:66:07:fa:6e:96:a9:20:5e:4e:9c:4e:df:39:2f:e8:67: eb:6f:8b:8c:3c:80:a2:21:72:fb:79:b4:bc:6c:7c:6d:25:e3: ff:15:a8:5a:cb:cf:d5:be:a7:6f:a5:91:0d:12:af:eb:92:7e: 5a:32:3e:9f:b3:dc:6c:0a:30:b0:25:a4:c9:6c:42:1b:45:50: 17:5f:df:0a:25:4e:9d:d2:fa:c6:8d:fb:82:19:4d:c4:ae:6c: e0:9f:75:62:7c:15:0b:70:11:05:ad:76:5d:bf:24:75:ec:b1: 79:9c:21:c1:9d:cc:8a:58:d8:32:f7:84:5e:f1:b3:11:8f:6a: aa:fa:92:b8:1d:ea:73:29:9d:2b:b5:96:53:e2:0e:ef:44:17: a4:b9:cf:07:c9:ed:69:16:0e:2b:bb:18:24:e4:56:36:91:0c: 38:35:2d:c9:dd:eb:24:5b:fb:d9:d7:e7:b2:d3:1d:0f:8f:25: c3:f5:a2:56:56:7e:59:2c:f1:e1:45:74:a7:06:53:4e:06:29: 7a:42:31:05 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt8uU7BrY/IDpA7/rSH/1DNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwMTAyMDMyMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmU5MDllNjQ5ZWU5ODZiMGU1NWUzZTYwMDU5YjJjMzc4MTA5M2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fnOfn1tULhRS/RBkmz7GJTk8B3k I16OrmepSuvvidrNRKzemUMhwdbh5GKKKLttKspVeIR72wwzDFI+tbyXxiHPknF5 zM2N/GLbArusJ7W//P5Al00hPJsU8nYmrouotrfRYL+qlZnftay72//U+C0vnERS /qZDiwCOsUryGNyF8tIQb+1AolrWzngypmYjPTWmdbwNQwvsWF1bI7LirfYZCASN 1hoxEIDPGKJ+WTSpC1yJ9luaCBveG9eUyKPvMiKBxcUH40yQMzaqKaFgnsUDCcKn JR6OqeaZoE8oKAcCneQtH5c6x+hpu/OHDIwVzfDH8MeP5GDJjSW5LZoA7wIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFGvpCeZJ7phrDlXj5gBZssN4EJOjMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvYS1rSjVrbnVtR3NPVmVQbUFGbXl3M2dRazZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGuBggrBgEFBQcBBwEB/wSBnjCBmzBgBAIAATBaAwQABbbE AwQAXPkdAwQAXpqrAwQBZ4KwAwQBZ9IOAwQAZ9jGAwQAaOgkAwQAotpcAwQAuTSL AwQAuaG+AwQBubvWAwQAuckqAwQBudCYAwQAueZ5AwQBuf14MDcEAgACMDEwEgMH ACoKj0AAAwMHACoKj0AABAMHACoKj0AABjASAwcDKgqPQAAIAwcAKgqPQAAMMA0G CSqGSIb3DQEBCwUAA4IBAQAR0YW4knl4Lg15YZpKkMLnuDpv5sYi/NQG/txnAvl1 hLxyg/nqXFJiRym8oY7LOpDlIrDEuiWOnmYH+m6WqSBeTpxO3zkv6Gfrb4uMPICi IXL7ebS8bHxtJeP/Fahay8/VvqdvpZENEq/rkn5aMj6fs9xsCjCwJaTJbEIbRVAX X98KJU6d0vrGjfuCGU3Ermzgn3VifBULcBEFrXZdvyR17LF5nCHBncyKWNgy94Re 8bMRj2qq+pK4HepzKZ0rtZZT4g7vRBekuc8Hye1pFg4ruxgk5FY2kQw4NS3J3esk W/vZ1+ey0x0PjyXD9aJWVn5ZLPHhRXSnBlNOBil6QjEF -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:44 2026 by rpki-client