This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/J6xC5e6lIltoyJBn6SlWZlAQvIA.roa File: J6xC5e6lIltoyJBn6SlWZlAQvIA.roa (raw, json) Hash identifier: LNgbfTK70EVkXbHrJjUfQKsiK79uROdYKu4IkzoIDQ0= Subject key identifier: 27:AC:42:E5:EE:A5:22:5B:68:C8:90:67:E9:29:56:66:50:10:BC:80 Certificate issuer: /CN=c1dc2f85026158cbd9ff49da15db225f053074ac Certificate serial: 019B7C112FCD1C9D0689CF0EADD8FDDE2A67 Authority key identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/J6xC5e6lIltoyJBn6SlWZlAQvIA.roa Signing time: Fri 02 Jan 2026 00:17:39 +0000 ROA not before: Fri 02 Jan 2026 00:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 5.104.0.0/24 maxlen: 24 5.104.1.0/24 maxlen: 24 5.104.2.0/24 maxlen: 24 5.104.3.0/24 maxlen: 24 5.104.4.0/24 maxlen: 24 5.104.5.0/24 maxlen: 24 5.104.6.0/24 maxlen: 24 5.104.7.0/24 maxlen: 24 5.104.8.0/24 maxlen: 24 5.104.9.0/24 maxlen: 24 5.104.10.0/24 maxlen: 24 5.104.11.0/24 maxlen: 24 5.104.12.0/24 maxlen: 24 5.104.13.0/24 maxlen: 24 5.104.14.0/24 maxlen: 24 5.104.15.0/24 maxlen: 24 37.34.0.0/24 maxlen: 24 37.34.1.0/24 maxlen: 24 37.34.2.0/24 maxlen: 24 37.34.3.0/24 maxlen: 24 37.34.4.0/24 maxlen: 24 37.34.5.0/24 maxlen: 24 37.34.6.0/24 maxlen: 24 37.34.7.0/24 maxlen: 24 37.34.8.0/24 maxlen: 24 37.34.9.0/24 maxlen: 24 37.34.10.0/24 maxlen: 24 37.34.11.0/24 maxlen: 24 37.34.12.0/24 maxlen: 24 37.34.13.0/24 maxlen: 24 37.34.14.0/24 maxlen: 24 37.34.15.0/24 maxlen: 24 37.34.16.0/24 maxlen: 24 37.34.17.0/24 maxlen: 24 37.34.18.0/24 maxlen: 24 37.34.19.0/24 maxlen: 24 37.34.20.0/24 maxlen: 24 37.34.21.0/24 maxlen: 24 37.34.22.0/24 maxlen: 24 37.34.23.0/24 maxlen: 24 37.34.24.0/24 maxlen: 24 37.34.25.0/24 maxlen: 24 37.34.26.0/24 maxlen: 24 37.34.27.0/24 maxlen: 24 37.34.28.0/24 maxlen: 24 37.34.29.0/24 maxlen: 24 37.34.30.0/24 maxlen: 24 37.34.31.0/24 maxlen: 24 94.79.64.0/24 maxlen: 24 94.79.65.0/24 maxlen: 24 94.79.66.0/24 maxlen: 24 94.79.67.0/24 maxlen: 24 94.79.68.0/24 maxlen: 24 94.79.69.0/24 maxlen: 24 94.79.70.0/24 maxlen: 24 94.79.71.0/24 maxlen: 24 94.79.72.0/24 maxlen: 24 94.79.73.0/24 maxlen: 24 94.79.74.0/24 maxlen: 24 94.79.75.0/24 maxlen: 24 94.79.76.0/24 maxlen: 24 94.79.77.0/24 maxlen: 24 94.79.78.0/24 maxlen: 24 94.79.79.0/24 maxlen: 24 94.79.80.0/24 maxlen: 24 94.79.81.0/24 maxlen: 24 94.79.82.0/24 maxlen: 24 94.79.83.0/24 maxlen: 24 94.79.84.0/24 maxlen: 24 94.79.85.0/24 maxlen: 24 94.79.86.0/24 maxlen: 24 94.79.87.0/24 maxlen: 24 94.79.88.0/24 maxlen: 24 94.79.89.0/24 maxlen: 24 94.79.90.0/24 maxlen: 24 94.79.91.0/24 maxlen: 24 94.79.92.0/24 maxlen: 24 94.79.93.0/24 maxlen: 24 94.79.94.0/24 maxlen: 24 94.79.95.0/24 maxlen: 24 94.79.96.0/24 maxlen: 24 94.79.97.0/24 maxlen: 24 94.79.98.0/24 maxlen: 24 94.79.99.0/24 maxlen: 24 94.79.100.0/24 maxlen: 24 94.79.101.0/24 maxlen: 24 94.79.102.0/24 maxlen: 24 94.79.103.0/24 maxlen: 24 94.79.104.0/24 maxlen: 24 94.79.105.0/24 maxlen: 24 94.79.106.0/24 maxlen: 24 94.79.107.0/24 maxlen: 24 94.79.108.0/24 maxlen: 24 94.79.109.0/24 maxlen: 24 94.79.110.0/24 maxlen: 24 94.79.111.0/24 maxlen: 24 94.79.112.0/24 maxlen: 24 94.79.113.0/24 maxlen: 24 94.79.114.0/24 maxlen: 24 94.79.115.0/24 maxlen: 24 94.79.116.0/24 maxlen: 24 94.79.117.0/24 maxlen: 24 94.79.118.0/24 maxlen: 24 94.79.119.0/24 maxlen: 24 94.79.120.0/24 maxlen: 24 94.79.121.0/24 maxlen: 24 94.79.122.0/24 maxlen: 24 94.79.123.0/24 maxlen: 24 94.79.124.0/24 maxlen: 24 94.79.125.0/24 maxlen: 24 94.79.126.0/24 maxlen: 24 94.79.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:2f:cd:1c:9d:06:89:cf:0e:ad:d8:fd:de:2a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1dc2f85026158cbd9ff49da15db225f053074ac Validity Not Before: Jan 2 00:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27ac42e5eea5225b68c89067e92956665010bc80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c1:d1:74:8b:d4:96:22:de:86:2d:68:50:96: 29:06:c5:3b:3f:26:86:6b:88:76:23:ee:41:9b:c2: 69:54:c4:74:a5:2d:51:9b:cb:7a:cf:3f:58:76:2e: 0d:82:72:8a:d7:6a:2c:de:5a:32:47:f8:ea:9c:40: b9:5e:07:47:32:2c:e1:c9:9d:cb:84:e2:d5:50:51: 1a:d8:33:fb:74:0f:d8:04:81:d1:9d:21:03:79:1e: 0c:98:6e:18:2f:8e:7a:71:9b:b7:c4:65:60:89:2a: c6:02:db:c8:66:61:1b:90:1f:40:a0:a3:ab:02:b7: 78:ff:0f:7e:f1:4c:01:3c:c0:e2:69:5e:e2:4d:55: eb:41:b8:d9:10:94:5d:a0:4c:c1:fc:a8:70:12:a1: 64:54:0f:53:98:e8:60:55:d0:54:27:ad:31:65:04: 33:92:30:e1:46:33:ad:52:82:b3:d7:af:78:62:50: f1:6c:90:33:32:a4:2e:91:3f:06:e7:bf:25:5a:c2: a1:d1:82:1a:10:b4:14:3e:48:73:c9:76:30:e0:73: e6:90:04:0d:98:62:60:77:98:35:cc:06:ae:00:35: d6:44:59:9a:ec:66:ff:ef:9d:36:30:6e:e5:00:98: 11:dd:9c:45:94:51:f2:03:26:30:74:ef:3f:da:bb: 81:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AC:42:E5:EE:A5:22:5B:68:C8:90:67:E9:29:56:66:50:10:BC:80 X509v3 Authority Key Identifier: keyid:C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/J6xC5e6lIltoyJBn6SlWZlAQvIA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.0.0/20 37.34.0.0/19 94.79.64.0/18 Signature Algorithm: sha256WithRSAEncryption 33:78:01:c2:33:2d:1e:98:f0:6a:69:35:0a:96:a7:a0:6a:bf: b9:7b:91:fd:ed:a6:07:41:37:d5:98:61:ca:8b:26:c1:b4:ba: e1:cc:34:ac:e0:ba:57:e4:bf:bd:65:fe:c4:13:93:c4:53:69: a4:6e:56:50:95:9b:73:99:26:ea:03:92:59:23:ba:6f:ae:c6: 77:2d:df:9d:04:c1:50:8b:20:5b:c5:25:ca:5c:f3:62:f7:c3: 3c:2f:e0:53:b9:3d:04:61:de:75:7a:ea:6e:2d:1a:51:ea:22: b6:35:09:4c:31:64:83:0e:ea:d2:30:12:50:ac:60:ab:c1:e9: 17:94:66:a6:e6:21:6d:05:25:91:1f:0d:a2:96:ee:94:78:02: 59:5a:ed:3d:9b:4c:e6:84:93:46:34:ee:d1:9c:d6:77:a7:a8: c9:94:14:f7:8b:3c:6d:ab:26:7b:da:e0:bd:57:25:e3:be:78: 9d:63:81:2d:fa:c6:79:07:9c:0d:9e:95:f5:4f:46:ec:3c:9d: 16:43:3c:27:7d:0c:14:17:57:d2:93:be:39:cc:28:99:50:f5: 06:e7:ad:8b:50:1a:98:ba:4c:f6:31:eb:db:1c:09:55:fa:31: 07:8a:1d:50:5a:8c:ec:15:dd:81:d5:43:82:b7:b8:f9:25:e2: 9c:bc:c3:9e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8ES/NHJ0Gic8Ordj93ipnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZGMyZjg1MDI2MTU4Y2JkOWZmNDlkYTE1ZGIyMjVmMDUz MDc0YWMwHhcNMjYwMTAyMDAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2FjNDJlNWVlYTUyMjViNjhjODkwNjdlOTI5NTY2NjUwMTBiYzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsHRdIvUliLehi1oUJYpBsU7PyaG a4h2I+5Bm8JpVMR0pS1Rm8t6zz9Ydi4NgnKK12os3loyR/jqnEC5XgdHMizhyZ3L hOLVUFEa2DP7dA/YBIHRnSEDeR4MmG4YL456cZu3xGVgiSrGAtvIZmEbkB9AoKOr Ard4/w9+8UwBPMDiaV7iTVXrQbjZEJRdoEzB/KhwEqFkVA9TmOhgVdBUJ60xZQQz kjDhRjOtUoKz1694YlDxbJAzMqQukT8G578lWsKh0YIaELQUPkhzyXYw4HPmkAQN mGJgd5g1zAauADXWRFma7Gb/7502MG7lAJgR3ZxFlFHyAyYwdO8/2ruBtQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCesQuXupSJbaMiQZ+kpVmZQELyAMB8GA1UdIwQY MBaAFMHcL4UCYVjL2f9J2hXbIl8FMHSsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2R3dmhRSmhXTXZaXzBuYUZkc2lYd1V3ZEt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82ZjNlODktMDAxOC00ZGM5LWE5NWEt Mjg0ZWM4MTYwMmU3LzEvSjZ4QzVlNmxJbHRveUpCbjZTbFdabEFRdklBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82ZjNlODktMDAxOC00ZGM5LWE5NWEtMjg0ZWM4MTYwMmU3 LzEvd2R3dmhRSmhXTXZaXzBuYUZkc2lYd1V3ZEt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEBWgAAwQF JSIAAwQGXk9AMA0GCSqGSIb3DQEBCwUAA4IBAQAzeAHCMy0emPBqaTUKlqegar+5 e5H97aYHQTfVmGHKiybBtLrhzDSs4LpX5L+9Zf7EE5PEU2mkblZQlZtzmSbqA5JZ I7pvrsZ3Ld+dBMFQiyBbxSXKXPNi98M8L+BTuT0EYd51eupuLRpR6iK2NQlMMWSD DurSMBJQrGCrwekXlGam5iFtBSWRHw2ilu6UeAJZWu09m0zmhJNGNO7RnNZ3p6jJ lBT3izxtqyZ72uC9VyXjvnidY4Et+sZ5B5wNnpX1T0bsPJ0WQzwnfQwUF1fSk745 zCiZUPUG562LUBqYukz2MevbHAlV+jEHih1QWozsFd2B1UOCt7j5JeKcvMOe -----END CERTIFICATE-----Generated at Wed Jan 21 13:16:58 2026 by rpki-client