This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/1zrQOkN9Z90Pr68K5rn8gfvEwpo.roa File: 1zrQOkN9Z90Pr68K5rn8gfvEwpo.roa (raw, json) Hash identifier: 6SGeBYB7qPaByHLVFjzOEKr5KcRtq2GA3JucBrXz448= Subject key identifier: D7:3A:D0:3A:43:7D:67:DD:0F:AF:AF:0A:E6:B9:FC:81:FB:C4:C2:9A Certificate issuer: /CN=27c007e5082b8e8d8289018718cfd527a7893e5e Certificate serial: 019B7C7F097ED7893890629F8B3001E88CCD Authority key identifier: 27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/1zrQOkN9Z90Pr68K5rn8gfvEwpo.roa Signing time: Fri 02 Jan 2026 02:17:38 +0000 ROA not before: Fri 02 Jan 2026 02:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48314 IP address blocks: 5.180.64.0/24 maxlen: 24 5.180.65.0/24 maxlen: 24 5.180.66.0/24 maxlen: 24 5.180.67.0/24 maxlen: 24 27.123.244.0/22 maxlen: 24 31.214.144.0/24 maxlen: 24 45.10.25.0/24 maxlen: 24 45.10.26.0/24 maxlen: 24 45.10.27.0/24 maxlen: 24 45.91.100.0/24 maxlen: 24 45.91.101.0/24 maxlen: 24 45.91.102.0/24 maxlen: 24 45.91.103.0/24 maxlen: 24 45.133.8.0/24 maxlen: 24 45.133.10.0/23 maxlen: 24 46.251.251.0/24 maxlen: 24 88.218.224.0/24 maxlen: 24 88.218.225.0/24 maxlen: 24 88.218.226.0/24 maxlen: 24 91.210.225.0/24 maxlen: 24 91.210.226.0/24 maxlen: 24 91.210.227.0/24 maxlen: 24 91.216.245.0/24 maxlen: 24 94.199.212.0/24 maxlen: 24 94.199.213.0/24 maxlen: 24 94.199.214.0/24 maxlen: 24 94.199.215.0/24 maxlen: 24 103.241.48.0/22 maxlen: 24 109.230.219.0/24 maxlen: 24 134.255.244.0/24 maxlen: 24 134.255.247.0/24 maxlen: 24 152.89.236.0/24 maxlen: 24 152.89.237.0/24 maxlen: 24 152.89.238.0/24 maxlen: 24 185.194.236.0/24 maxlen: 24 185.194.237.0/24 maxlen: 24 185.194.238.0/24 maxlen: 24 185.194.239.0/24 maxlen: 24 185.242.112.0/24 maxlen: 24 185.242.113.0/24 maxlen: 24 185.242.114.0/24 maxlen: 24 185.242.115.0/24 maxlen: 24 185.245.97.0/24 maxlen: 24 185.245.98.0/24 maxlen: 24 185.245.99.0/24 maxlen: 24 185.248.141.0/24 maxlen: 24 185.248.142.0/24 maxlen: 24 185.248.143.0/24 maxlen: 24 185.250.248.0/24 maxlen: 24 185.250.249.0/24 maxlen: 24 185.250.250.0/24 maxlen: 24 185.250.251.0/24 maxlen: 24 193.32.220.0/24 maxlen: 24 193.32.221.0/24 maxlen: 24 193.32.222.0/24 maxlen: 24 193.32.223.0/24 maxlen: 24 193.135.8.0/24 maxlen: 24 193.135.9.0/24 maxlen: 24 193.135.11.0/24 maxlen: 24 193.142.40.0/24 maxlen: 24 193.142.41.0/24 maxlen: 24 193.142.42.0/24 maxlen: 24 193.142.43.0/24 maxlen: 24 194.26.180.0/24 maxlen: 24 194.26.181.0/24 maxlen: 24 194.26.182.0/24 maxlen: 24 194.26.183.0/24 maxlen: 24 194.45.36.0/24 maxlen: 24 194.45.37.0/24 maxlen: 24 194.45.196.0/23 maxlen: 24 194.48.168.0/24 maxlen: 24 194.48.169.0/24 maxlen: 24 194.48.170.0/24 maxlen: 24 194.48.171.0/24 maxlen: 24 213.190.28.0/24 maxlen: 24 213.190.29.0/24 maxlen: 24 213.190.30.0/24 maxlen: 24 213.190.31.0/24 maxlen: 24 2a0a:51c0::/32 maxlen: 32 2a0a:51c1::/32 maxlen: 48 2a0a:51c2::/32 maxlen: 32 2a0a:51c3::/32 maxlen: 32 2a0a:51c4::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:09:7e:d7:89:38:90:62:9f:8b:30:01:e8:8c:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27c007e5082b8e8d8289018718cfd527a7893e5e Validity Not Before: Jan 2 02:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d73ad03a437d67dd0fafaf0ae6b9fc81fbc4c29a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bc:3b:4a:7b:e8:82:45:f4:69:c6:a8:f7:0f: 7c:94:c4:8e:1e:5b:5e:46:2a:28:b2:3a:74:ae:07: 27:a7:7a:0c:51:2d:98:c8:70:3b:1c:d6:3d:3e:90: 4d:15:9c:89:09:6c:51:36:a6:fc:8a:2f:3f:93:7f: 96:89:d6:94:f2:7c:f5:cf:01:07:93:66:26:0f:57: 6f:c1:14:81:27:f6:4d:8f:1f:fe:64:62:57:7c:c2: 06:a2:59:d1:d2:a8:b4:89:ef:3a:3c:1f:4b:3f:c5: d0:f6:83:41:91:a2:02:6f:f8:ac:7c:4b:30:23:58: da:f0:85:32:4c:92:4e:e9:59:d5:c8:40:7c:ac:6e: 8f:db:14:25:c5:de:62:e7:7e:25:be:0c:57:94:a3: 80:8c:7b:34:2f:ae:f4:e0:38:96:79:4a:e3:09:f0: c2:14:2f:86:a9:43:64:a7:b5:40:a7:ab:58:0f:62: 41:2b:bc:61:4c:c8:01:5e:c5:6a:9c:86:fd:b6:5a: 79:a3:37:31:16:4e:30:c3:f3:d2:ba:a6:64:fe:72: a0:f1:d0:a1:88:65:c5:c5:d2:f1:b5:b1:45:b0:8d: cc:29:d2:04:16:32:0e:75:72:a9:8e:15:3e:17:5f: 05:bb:98:13:54:ca:47:2b:7a:10:43:07:a6:34:0e: a6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:3A:D0:3A:43:7D:67:DD:0F:AF:AF:0A:E6:B9:FC:81:FB:C4:C2:9A X509v3 Authority Key Identifier: keyid:27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/1zrQOkN9Z90Pr68K5rn8gfvEwpo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.64.0/22 27.123.244.0/22 31.214.144.0/24 45.10.25.0-45.10.27.255 45.91.100.0/22 45.133.8.0/24 45.133.10.0/23 46.251.251.0/24 88.218.224.0-88.218.226.255 91.210.225.0-91.210.227.255 91.216.245.0/24 94.199.212.0/22 103.241.48.0/22 109.230.219.0/24 134.255.244.0/24 134.255.247.0/24 152.89.236.0-152.89.238.255 185.194.236.0/22 185.242.112.0/22 185.245.97.0-185.245.99.255 185.248.141.0-185.248.143.255 185.250.248.0/22 193.32.220.0/22 193.135.8.0/23 193.135.11.0/24 193.142.40.0/22 194.26.180.0/22 194.45.36.0/23 194.45.196.0/23 194.48.168.0/22 213.190.28.0/22 IPv6: 2a0a:51c0::-2a0a:51c4:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 48:03:d3:72:cc:e3:e1:a7:b1:7a:d6:34:ae:21:b0:e3:0c:76: db:a9:a6:fe:11:f5:13:57:23:65:03:98:41:55:98:02:8d:1c: 8b:e9:12:93:d6:71:c1:ff:c8:60:29:9c:43:94:05:fa:eb:11: 3a:4c:50:ec:8e:dd:1a:ab:5d:0d:a5:2e:76:9b:b1:8a:f3:93: 16:da:09:89:58:22:81:66:f9:c9:84:3a:cc:83:3e:01:ed:cd: b2:31:10:8b:59:36:86:61:72:7b:d0:1b:73:c5:69:7b:5c:62: 67:ff:91:4d:be:78:68:46:f7:e4:e4:c1:21:06:e6:84:ec:69: b6:f4:17:bb:0b:92:c7:74:0e:f8:1f:33:d7:d2:81:23:c8:75: 3c:2c:0a:87:ee:bb:ec:bd:1c:2f:de:6a:8e:34:a5:d5:53:59: e9:9a:47:c1:be:dd:3a:f7:ba:70:db:c0:2a:c2:fe:db:59:b9: e8:b0:78:33:10:e2:98:e4:ab:7b:16:b2:91:eb:2b:02:65:7f: 3b:12:17:26:c4:bb:03:af:88:28:1b:4a:8e:2e:53:42:67:a2: c6:f3:8f:08:76:34:46:4e:ad:de:d1:f2:e7:e0:7e:22:9d:52: 65:7d:3c:96:89:54:63:0c:8c:8c:35:e2:95:7f:0b:3c:04:b5: 5c:5e:55:1a -----BEGIN CERTIFICATE----- MIIGATCCBOmgAwIBAgISAZt8fwl+14k4kGKfizAB6IzNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YzAwN2U1MDgyYjhlOGQ4Mjg5MDE4NzE4Y2ZkNTI3YTc4 OTNlNWUwHhcNMjYwMTAyMDIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzNhZDAzYTQzN2Q2N2RkMGZhZmFmMGFlNmI5ZmM4MWZiYzRjMjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLw7SnvogkX0acao9w98lMSOHlte Rioosjp0rgcnp3oMUS2YyHA7HNY9PpBNFZyJCWxRNqb8ii8/k3+WidaU8nz1zwEH k2YmD1dvwRSBJ/ZNjx/+ZGJXfMIGolnR0qi0ie86PB9LP8XQ9oNBkaICb/isfEsw I1ja8IUyTJJO6VnVyEB8rG6P2xQlxd5i534lvgxXlKOAjHs0L6704DiWeUrjCfDC FC+GqUNkp7VAp6tYD2JBK7xhTMgBXsVqnIb9tlp5ozcxFk4ww/PSuqZk/nKg8dCh iGXFxdLxtbFFsI3MKdIEFjIOdXKpjhU+F18Fu5gTVMpHK3oQQwemNA6mmwIDAQAB o4IDDTCCAwkwHQYDVR0OBBYEFNc60DpDfWfdD6+vCua5/IH7xMKaMB8GA1UdIwQY MBaAFCfAB+UIK46NgokBhxjP1SeniT5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjhBSDVRZ3JqbzJDaVFHSEdNX1ZKNmVKUGw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8wNmZlMTQtZDE0Ni00ZTY2LWE4NDEt MmM2NGMyOTEzNTNlLzEvMXpyUU9rTjlaOTBQcjY4SzVybjhnZnZFd3BvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8wNmZlMTQtZDE0Ni00ZTY2LWE4NDEtMmM2NGMyOTEzNTNl LzEvSjhBSDVRZ3JqbzJDaVFHSEdNX1ZKNmVKUGw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBIQYIKwYBBQUHAQcBAf8EggEQMIIBDDCB8QQCAAEwgeoD BAIFtEADBAIbe/QDBAAf1pAwDAMEAC0KGQMEAi0KGAMEAi1bZAMEAC2FCAMEAS2F CgMEAC77+zAMAwQFWNrgAwQAWNriMAwDBABb0uEDBAJb0uADBABb2PUDBAJex9QD BAJn8TADBABt5tsDBACG//QDBACG//cwDAMEAphZ7AMEAJhZ7gMEArnC7AMEArny cDAMAwQAufVhAwQCufVgMAwDBAC5+I0DBAS5+IADBAK5+vgDBALBINwDBAHBhwgD BADBhwsDBALBjigDBALCGrQDBAHCLSQDBAHCLcQDBALCMKgDBALVvhwwFgQCAAIw EDAOAwUGKgpRwAMFACoKUcQwDQYJKoZIhvcNAQELBQADggEBAEgD03LM4+GnsXrW NK4hsOMMdtuppv4R9RNXI2UDmEFVmAKNHIvpEpPWccH/yGApnEOUBfrrETpMUOyO 3RqrXQ2lLnabsYrzkxbaCYlYIoFm+cmEOsyDPgHtzbIxEItZNoZhcnvQG3PFaXtc Ymf/kU2+eGhG9+TkwSEG5oTsabb0F7sLksd0DvgfM9fSgSPIdTwsCofuu+y9HC/e ao40pdVTWemaR8G+3Tr3unDbwCrC/ttZueiweDMQ4pjkq3sWspHrKwJlfzsSFybE uwOviCgbSo4uU0Jnosbzjwh2NEZOrd7R8ufgfiKdUmV9PJaJVGMMjIw14pV/CzwE tVxeVRo= -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:11 2026 by rpki-client