This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/4OUSsPf2UIj1ENWFeSqwKcIXtl0.roa File: 4OUSsPf2UIj1ENWFeSqwKcIXtl0.roa (raw, json) Hash identifier: CU7VD/QjDqVmViCVGjB9C2Hx1kxI21aZllJ4lWIgq7k= Subject key identifier: E0:E5:12:B0:F7:F6:50:88:F5:10:D5:85:79:2A:B0:29:C2:17:B6:5D Certificate issuer: /CN=c1dc2f85026158cbd9ff49da15db225f053074ac Certificate serial: 019B7C113090CB83A06619E368CA7B11993E Authority key identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/4OUSsPf2UIj1ENWFeSqwKcIXtl0.roa Signing time: Fri 02 Jan 2026 00:17:39 +0000 ROA not before: Fri 02 Jan 2026 00:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47883 IP address blocks: 5.104.0.0/20 maxlen: 20 5.104.0.0/24 maxlen: 24 5.104.1.0/24 maxlen: 24 5.104.2.0/24 maxlen: 24 5.104.3.0/24 maxlen: 24 5.104.4.0/24 maxlen: 24 5.104.5.0/24 maxlen: 24 5.104.6.0/24 maxlen: 24 5.104.7.0/24 maxlen: 24 5.104.8.0/24 maxlen: 24 5.104.9.0/24 maxlen: 24 5.104.10.0/24 maxlen: 24 5.104.11.0/24 maxlen: 24 5.104.12.0/24 maxlen: 24 5.104.13.0/24 maxlen: 24 5.104.14.0/24 maxlen: 24 5.104.15.0/24 maxlen: 24 37.34.0.0/19 maxlen: 19 37.34.0.0/24 maxlen: 24 37.34.1.0/24 maxlen: 24 37.34.2.0/24 maxlen: 24 37.34.3.0/24 maxlen: 24 37.34.4.0/24 maxlen: 24 37.34.5.0/24 maxlen: 24 37.34.6.0/24 maxlen: 24 37.34.7.0/24 maxlen: 24 37.34.8.0/24 maxlen: 24 37.34.9.0/24 maxlen: 24 37.34.10.0/24 maxlen: 24 37.34.11.0/24 maxlen: 24 37.34.12.0/24 maxlen: 24 37.34.13.0/24 maxlen: 24 37.34.14.0/24 maxlen: 24 37.34.15.0/24 maxlen: 24 37.34.16.0/24 maxlen: 24 37.34.17.0/24 maxlen: 24 37.34.18.0/24 maxlen: 24 37.34.19.0/24 maxlen: 24 37.34.20.0/24 maxlen: 24 37.34.21.0/24 maxlen: 24 37.34.22.0/24 maxlen: 24 37.34.23.0/24 maxlen: 24 37.34.24.0/24 maxlen: 24 37.34.25.0/24 maxlen: 24 37.34.26.0/24 maxlen: 24 37.34.27.0/24 maxlen: 24 37.34.28.0/24 maxlen: 24 37.34.29.0/24 maxlen: 24 37.34.30.0/24 maxlen: 24 37.34.31.0/24 maxlen: 24 94.79.64.0/18 maxlen: 18 94.79.64.0/24 maxlen: 24 94.79.65.0/24 maxlen: 24 94.79.66.0/24 maxlen: 24 94.79.67.0/24 maxlen: 24 94.79.68.0/24 maxlen: 24 94.79.69.0/24 maxlen: 24 94.79.70.0/24 maxlen: 24 94.79.71.0/24 maxlen: 24 94.79.72.0/24 maxlen: 24 94.79.73.0/24 maxlen: 24 94.79.74.0/24 maxlen: 24 94.79.75.0/24 maxlen: 24 94.79.76.0/24 maxlen: 24 94.79.77.0/24 maxlen: 24 94.79.78.0/24 maxlen: 24 94.79.79.0/24 maxlen: 24 94.79.80.0/24 maxlen: 24 94.79.81.0/24 maxlen: 24 94.79.82.0/24 maxlen: 24 94.79.83.0/24 maxlen: 24 94.79.84.0/24 maxlen: 24 94.79.85.0/24 maxlen: 24 94.79.86.0/24 maxlen: 24 94.79.87.0/24 maxlen: 24 94.79.88.0/24 maxlen: 24 94.79.89.0/24 maxlen: 24 94.79.90.0/24 maxlen: 24 94.79.91.0/24 maxlen: 24 94.79.92.0/24 maxlen: 24 94.79.93.0/24 maxlen: 24 94.79.94.0/24 maxlen: 24 94.79.95.0/24 maxlen: 24 94.79.96.0/24 maxlen: 24 94.79.97.0/24 maxlen: 24 94.79.98.0/24 maxlen: 24 94.79.99.0/24 maxlen: 24 94.79.100.0/24 maxlen: 24 94.79.101.0/24 maxlen: 24 94.79.102.0/24 maxlen: 24 94.79.103.0/24 maxlen: 24 94.79.104.0/24 maxlen: 24 94.79.105.0/24 maxlen: 24 94.79.106.0/24 maxlen: 24 94.79.107.0/24 maxlen: 24 94.79.108.0/24 maxlen: 24 94.79.109.0/24 maxlen: 24 94.79.110.0/24 maxlen: 24 94.79.111.0/24 maxlen: 24 94.79.112.0/24 maxlen: 24 94.79.113.0/24 maxlen: 24 94.79.114.0/24 maxlen: 24 94.79.115.0/24 maxlen: 24 94.79.116.0/24 maxlen: 24 94.79.117.0/24 maxlen: 24 94.79.118.0/24 maxlen: 24 94.79.119.0/24 maxlen: 24 94.79.120.0/24 maxlen: 24 94.79.121.0/24 maxlen: 24 94.79.122.0/24 maxlen: 24 94.79.123.0/24 maxlen: 24 94.79.124.0/24 maxlen: 24 94.79.125.0/24 maxlen: 24 94.79.126.0/24 maxlen: 24 94.79.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:30:90:cb:83:a0:66:19:e3:68:ca:7b:11:99:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1dc2f85026158cbd9ff49da15db225f053074ac Validity Not Before: Jan 2 00:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0e512b0f7f65088f510d585792ab029c217b65d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:59:f3:7b:01:87:85:1f:9b:77:23:e8:5c:a8: de:63:ef:ca:80:d2:19:ed:e8:0d:f3:7b:ba:89:da: 00:de:7f:b5:a7:ec:88:cc:da:46:15:3a:26:91:d2: 1d:48:de:a6:04:12:57:3f:47:e4:0f:df:5d:66:e1: 0e:18:d6:8c:6b:80:41:0c:fd:1d:70:2e:eb:f7:e4: 0b:97:d4:10:60:58:da:dc:1b:55:6f:e2:04:28:ff: 45:d1:97:bf:6c:a4:7a:ef:55:d7:ea:cf:9d:28:c5: 6c:98:d3:9d:c9:bf:1d:83:af:94:c6:88:df:95:81: 00:f2:45:57:6f:d1:00:e5:96:d2:83:37:d4:e3:aa: 54:05:09:cd:26:2d:76:31:66:38:af:36:1d:cc:72: 88:e9:21:6e:e3:dc:d3:79:c1:81:71:a7:ab:24:01: dc:4c:97:f9:22:66:99:c2:45:9e:92:03:b5:4d:ae: 6a:d5:d0:3b:1b:70:9f:68:c4:07:c4:a8:a0:18:97: 21:5d:11:59:86:0c:b9:bd:55:81:19:75:b6:36:ad: 9e:f1:6e:f6:53:e7:95:ac:07:2a:16:6a:c9:a7:ba: 39:58:4f:e8:41:55:14:0c:85:ae:15:f8:53:b7:7f: 53:b0:fd:62:a6:0c:54:2d:5c:c4:80:b1:b7:3f:b8: 60:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E5:12:B0:F7:F6:50:88:F5:10:D5:85:79:2A:B0:29:C2:17:B6:5D X509v3 Authority Key Identifier: keyid:C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/4OUSsPf2UIj1ENWFeSqwKcIXtl0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.0.0/20 37.34.0.0/19 94.79.64.0/18 Signature Algorithm: sha256WithRSAEncryption 26:19:d6:b3:87:cf:cc:5e:fe:b6:8d:93:f7:b5:c2:c0:64:5a: 6b:9a:56:87:19:22:7d:1e:30:c0:ac:53:d7:34:c5:89:f3:04: 6e:c8:9d:c9:4c:5f:92:64:7d:2a:dd:91:3c:8d:0f:91:4a:92: 24:e2:cb:78:2e:76:e5:a8:e6:6b:7c:1a:a6:44:96:ff:b1:3d: 5e:3b:b4:44:fd:a8:5e:c3:c4:58:6c:54:a1:ca:f5:87:c7:68: 9f:e7:4e:83:08:25:73:2a:d3:0a:1e:55:db:56:fc:f7:c8:45: ca:11:5f:ec:ce:05:40:4d:c4:4c:d2:1c:b3:c7:cb:a2:8c:2b: e2:0c:2a:f0:9d:51:3a:1a:92:62:b9:25:ac:7f:05:8e:60:44: 0c:69:bc:a6:eb:1c:0b:9e:8b:a7:56:a0:27:8a:90:45:fe:fa: 14:16:69:f9:9f:86:3f:ea:08:7a:b4:9a:42:ab:b2:cd:76:ac: 56:95:a8:76:1f:24:55:91:e8:cd:5f:0e:b8:f9:12:42:a5:f1: cd:44:d1:6a:d1:e8:c9:70:c4:22:cc:62:df:5b:b5:ec:dd:a1: 0c:33:ff:df:b2:89:15:44:ff:d7:d0:e2:4b:85:57:4a:6d:40: 94:dd:78:55:2d:62:91:27:66:d4:92:7a:c8:50:aa:b6:79:31: fd:1c:1d:98 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8ETCQy4OgZhnjaMp7EZk+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZGMyZjg1MDI2MTU4Y2JkOWZmNDlkYTE1ZGIyMjVmMDUz MDc0YWMwHhcNMjYwMTAyMDAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGU1MTJiMGY3ZjY1MDg4ZjUxMGQ1ODU3OTJhYjAyOWMyMTdiNjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFnzewGHhR+bdyPoXKjeY+/KgNIZ 7egN83u6idoA3n+1p+yIzNpGFTomkdIdSN6mBBJXP0fkD99dZuEOGNaMa4BBDP0d cC7r9+QLl9QQYFja3BtVb+IEKP9F0Ze/bKR671XX6s+dKMVsmNOdyb8dg6+Uxojf lYEA8kVXb9EA5ZbSgzfU46pUBQnNJi12MWY4rzYdzHKI6SFu49zTecGBcaerJAHc TJf5ImaZwkWekgO1Ta5q1dA7G3CfaMQHxKigGJchXRFZhgy5vVWBGXW2Nq2e8W72 U+eVrAcqFmrJp7o5WE/oQVUUDIWuFfhTt39TsP1ipgxULVzEgLG3P7hgewIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFODlErD39lCI9RDVhXkqsCnCF7ZdMB8GA1UdIwQY MBaAFMHcL4UCYVjL2f9J2hXbIl8FMHSsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2R3dmhRSmhXTXZaXzBuYUZkc2lYd1V3ZEt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82ZjNlODktMDAxOC00ZGM5LWE5NWEt Mjg0ZWM4MTYwMmU3LzEvNE9VU3NQZjJVSWoxRU5XRmVTcXdLY0lYdGwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82ZjNlODktMDAxOC00ZGM5LWE5NWEtMjg0ZWM4MTYwMmU3 LzEvd2R3dmhRSmhXTXZaXzBuYUZkc2lYd1V3ZEt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEBWgAAwQF JSIAAwQGXk9AMA0GCSqGSIb3DQEBCwUAA4IBAQAmGdazh8/MXv62jZP3tcLAZFpr mlaHGSJ9HjDArFPXNMWJ8wRuyJ3JTF+SZH0q3ZE8jQ+RSpIk4st4LnblqOZrfBqm RJb/sT1eO7RE/ahew8RYbFShyvWHx2if506DCCVzKtMKHlXbVvz3yEXKEV/szgVA TcRM0hyzx8uijCviDCrwnVE6GpJiuSWsfwWOYEQMabym6xwLnounVqAnipBF/voU Fmn5n4Y/6gh6tJpCq7LNdqxWlah2HyRVkejNXw64+RJCpfHNRNFq0ejJcMQizGLf W7Xs3aEMM//fsokVRP/X0OJLhVdKbUCU3XhVLWKRJ2bUknrIUKq2eTH9HB2Y -----END CERTIFICATE-----Generated at Wed Jan 21 15:53:12 2026 by rpki-client