This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/5c7H8SSd8WodyqmqDN5GvggoaoM.roa File: 5c7H8SSd8WodyqmqDN5GvggoaoM.roa (raw, json) Hash identifier: qBOLerlIJoa7BKt/R5Lw677HOskLz3tOFy/2jSf7/WU= Subject key identifier: E5:CE:C7:F1:24:9D:F1:6A:1D:CA:A9:AA:0C:DE:46:BE:08:28:6A:83 Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205 Certificate serial: 019C04C4FD4BB74B6271CBBA4BF30792B3BF Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/5c7H8SSd8WodyqmqDN5GvggoaoM.roa Signing time: Wed 28 Jan 2026 13:22:24 +0000 ROA not before: Wed 28 Jan 2026 13:22:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1136 IP address blocks: 37.251.0.0/17 maxlen: 17 62.131.0.0/16 maxlen: 16 62.216.0.0/19 maxlen: 19 62.251.0.0/17 maxlen: 17 77.160.0.0/13 maxlen: 13 77.168.0.0/14 maxlen: 14 77.172.0.0/16 maxlen: 16 77.173.0.0/16 maxlen: 16 77.174.0.0/16 maxlen: 16 77.175.0.0/16 maxlen: 16 77.175.0.0/17 maxlen: 17 77.175.128.0/17 maxlen: 17 80.60.0.0/15 maxlen: 15 80.100.0.0/15 maxlen: 15 81.204.0.0/14 maxlen: 14 82.92.0.0/14 maxlen: 14 82.136.192.0/18 maxlen: 18 82.161.0.0/16 maxlen: 16 82.168.0.0/15 maxlen: 15 82.170.0.0/16 maxlen: 16 83.68.0.0/19 maxlen: 19 84.39.0.0/19 maxlen: 19 84.80.0.0/16 maxlen: 16 84.82.0.0/15 maxlen: 15 84.84.0.0/14 maxlen: 14 85.113.224.0/19 maxlen: 19 86.80.0.0/13 maxlen: 13 86.88.0.0/15 maxlen: 15 86.90.0.0/16 maxlen: 16 86.92.0.0/14 maxlen: 14 88.159.0.0/16 maxlen: 16 188.142.0.0/17 maxlen: 17 194.109.0.0/16 maxlen: 16 195.240.0.0/16 maxlen: 16 195.240.0.0/17 maxlen: 17 195.240.128.0/18 maxlen: 18 195.240.192.0/18 maxlen: 18 195.241.0.0/16 maxlen: 16 212.123.128.0/18 maxlen: 18 212.182.128.0/18 maxlen: 18 212.238.0.0/16 maxlen: 16 213.10.0.0/16 maxlen: 16 213.84.0.0/16 maxlen: 16 213.148.224.0/19 maxlen: 19 213.197.0.0/18 maxlen: 18 213.222.0.0/19 maxlen: 19 2001:888::/29 maxlen: 29 2001:980::/29 maxlen: 29 2a02:a400::/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:c4:fd:4b:b7:4b:62:71:cb:ba:4b:f3:07:92:b3:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205 Validity Not Before: Jan 28 13:22:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5cec7f1249df16a1dcaa9aa0cde46be08286a83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:77:68:bd:75:8c:42:08:f0:15:32:20:5d:06: f1:59:d3:b7:ca:43:3f:dc:5b:c7:48:3c:50:fe:cf: ff:ab:a2:d3:c1:43:81:2b:7b:a7:51:c2:4e:b4:fa: 19:e4:8d:00:c6:30:fb:72:94:e1:a3:de:7e:18:ff: fe:f6:d0:57:e7:ed:dd:68:63:0b:68:93:b8:c2:fb: 63:6f:f6:48:21:70:ad:fc:a4:bb:76:b3:ed:bc:dd: af:1d:2a:75:1a:b8:42:4c:18:ec:df:03:9b:54:4c: c8:3c:f9:56:3e:8c:96:47:9a:cf:b9:44:59:74:1c: ac:76:f1:30:2f:15:1e:b5:eb:58:d2:6d:4d:92:ae: 1c:0a:49:c7:33:01:ee:42:2d:38:b3:3a:bf:7d:1a: 17:34:e7:9b:55:72:ac:92:0f:29:44:a5:8e:79:37: 1a:03:84:14:90:b6:33:04:ca:13:0f:79:a2:a2:a9: c4:1b:cf:a2:67:0c:d7:a2:bf:d4:57:e7:8f:a3:22: 7d:08:bb:d6:1c:cc:27:18:10:24:36:2d:ed:67:fb: ee:24:4b:06:7a:b7:7d:90:6a:66:14:11:23:5c:44: 20:bd:28:00:90:9b:39:45:2c:f7:a8:9a:16:63:15: bb:cd:a2:aa:a2:10:49:30:67:47:81:b6:33:f2:67: 17:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CE:C7:F1:24:9D:F1:6A:1D:CA:A9:AA:0C:DE:46:BE:08:28:6A:83 X509v3 Authority Key Identifier: keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/5c7H8SSd8WodyqmqDN5GvggoaoM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.251.0.0/17 62.131.0.0/16 62.216.0.0/19 62.251.0.0/17 77.160.0.0/12 80.60.0.0/15 80.100.0.0/15 81.204.0.0/14 82.92.0.0/14 82.136.192.0/18 82.161.0.0/16 82.168.0.0-82.170.255.255 83.68.0.0/19 84.39.0.0/19 84.80.0.0/16 84.82.0.0-84.87.255.255 85.113.224.0/19 86.80.0.0-86.90.255.255 86.92.0.0/14 88.159.0.0/16 188.142.0.0/17 194.109.0.0/16 195.240.0.0/15 212.123.128.0/18 212.182.128.0/18 212.238.0.0/16 213.10.0.0/16 213.84.0.0/16 213.148.224.0/19 213.197.0.0/18 213.222.0.0/19 IPv6: 2001:888::/29 2001:980::/29 2a02:a400::/25 Signature Algorithm: sha256WithRSAEncryption ac:23:83:2b:b5:a8:f5:2d:d1:d0:fe:2c:85:3f:f9:0c:c5:1b: 6b:5a:13:93:4f:cc:30:c9:04:eb:77:04:ad:18:c9:66:81:bb: 95:74:c1:f1:66:ee:84:c4:49:c4:7c:e1:16:2a:55:da:86:2a: 59:e3:df:26:e7:e1:8c:aa:02:3b:76:17:97:75:89:1c:e0:87: 1f:63:ad:2f:f9:a4:58:08:06:66:04:ac:37:d3:27:c6:83:bc: 05:40:1e:5c:d2:19:e8:80:e6:07:f1:ec:71:c6:6d:b8:03:15: 24:ae:0e:da:d4:5a:45:05:c0:31:50:f0:22:a2:b6:56:f6:63: cf:d8:fc:32:eb:d0:55:8c:82:4d:62:ae:65:14:c5:9f:8e:92: d5:84:c9:df:ed:68:4c:50:28:74:71:5b:f9:09:2a:1b:26:f5: d3:a8:ef:c7:57:3d:ea:1c:04:29:c9:ac:2a:ad:40:90:5a:2c: 3a:ea:5b:77:6e:65:12:b5:e4:59:e9:a8:0d:b5:76:7b:e6:6e: d6:c8:c5:82:8b:ee:39:87:2b:aa:3e:55:e5:6e:4a:09:9b:30: 91:3b:85:b6:f4:66:71:65:13:2a:66:9b:1c:2f:37:ee:96:e5: 88:6b:ea:c0:79:ed:68:17:da:bf:a2:5a:88:da:31:90:3f:93: 8d:d8:8e:50 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgISAZwExP1Lt0ticcu6S/MHkrO/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZWVkNDA5MTM4M2Q5ZWQ0MDU2ZDlmNGVmZjdkMjYyMmRk Y2UyMDUwHhcNMjYwMTI4MTMyMjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWNlYzdmMTI0OWRmMTZhMWRjYWE5YWEwY2RlNDZiZTA4Mjg2YTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3dovXWMQgjwFTIgXQbxWdO3ykM/ 3FvHSDxQ/s//q6LTwUOBK3unUcJOtPoZ5I0AxjD7cpTho95+GP/+9tBX5+3daGML aJO4wvtjb/ZIIXCt/KS7drPtvN2vHSp1GrhCTBjs3wObVEzIPPlWPoyWR5rPuURZ dBysdvEwLxUetetY0m1Nkq4cCknHMwHuQi04szq/fRoXNOebVXKskg8pRKWOeTca A4QUkLYzBMoTD3mioqnEG8+iZwzXor/UV+ePoyJ9CLvWHMwnGBAkNi3tZ/vuJEsG erd9kGpmFBEjXEQgvSgAkJs5RSz3qJoWYxW7zaKqohBJMGdHgbYz8mcXuQIDAQAB o4IC4jCCAt4wHQYDVR0OBBYEFOXOx/EknfFqHcqpqgzeRr4IKGqDMB8GA1UdIwQY MBaAFIHu1AkTg9ntQFbZ9O/30mIt3OIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2Et ODcyYjM3MTBjMmExLzEvNWM3SDhTU2Q4V29keXFtcURONUd2Z2dvYW9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2EtODcyYjM3MTBjMmEx LzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH3BggrBgEFBQcBBwEB/wSB5zCB5DCBxAQCAAEwgb0DBAcl +wADAwA+gwMEBT7YAAMEBz77AAMDBE2gAwMBUDwDAwFQZAMDAlHMAwMCUlwDBAZS iMADAwBSoTAKAwMDUqgDAwBSqgMEBVNEAAMEBVQnAAMDAFRQMAoDAwFUUgMDA1RQ AwQFVXHgMAoDAwRWUAMDAFZaAwMCVlwDAwBYnwMEB7yOAAMDAMJtAwMBw/ADBAbU e4ADBAbUtoADAwDU7gMDANUKAwMA1VQDBAXVlOADBAbVxQADBAXV3gAwGwQCAAIw FQMFAyABCIgDBQMgAQmAAwUHKgKkADANBgkqhkiG9w0BAQsFAAOCAQEArCODK7Wo 9S3R0P4shT/5DMUba1oTk0/MMMkE63cErRjJZoG7lXTB8WbuhMRJxHzhFipV2oYq WePfJufhjKoCO3YXl3WJHOCHH2OtL/mkWAgGZgSsN9MnxoO8BUAeXNIZ6IDmB/Hs ccZtuAMVJK4O2tRaRQXAMVDwIqK2VvZjz9j8MuvQVYyCTWKuZRTFn46S1YTJ3+1o TFAodHFb+QkqGyb106jvx1c96hwEKcmsKq1AkFosOupbd25lErXkWemoDbV2e+Zu 1sjFgovuOYcrqj5V5W5KCZswkTuFtvRmcWUTKmabHC837pbliGvqwHntaBfav6Ja iNoxkD+TjdiOUA== -----END CERTIFICATE-----Generated at Tue Feb 10 06:28:39 2026 by rpki-client