This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/0tjlFCD9R3QvhuaUb8R98x3yaAA.roa File: 0tjlFCD9R3QvhuaUb8R98x3yaAA.roa (raw, json) Hash identifier: QW/Cv+tz1AwpdParcrVZ17Ri4asuS8geM/KpLVI71iU= Subject key identifier: D2:D8:E5:14:20:FD:47:74:2F:86:E6:94:6F:C4:7D:F3:1D:F2:68:00 Certificate issuer: /CN=ae72e47d56692499a726bf800ea8380362deb6be Certificate serial: 019B7DC8B766308590E105ED4E71AFE8B5AE Authority key identifier: AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/0tjlFCD9R3QvhuaUb8R98x3yaAA.roa Signing time: Fri 02 Jan 2026 08:17:44 +0000 ROA not before: Fri 02 Jan 2026 08:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21309 IP address blocks: 5.63.136.0/21 maxlen: 21 31.216.240.0/20 maxlen: 20 31.216.240.0/22 maxlen: 22 31.216.244.0/22 maxlen: 22 31.216.248.0/22 maxlen: 22 31.216.250.0/24 maxlen: 24 31.216.252.0/22 maxlen: 22 77.89.0.0/18 maxlen: 18 77.89.0.0/19 maxlen: 19 77.89.0.0/20 maxlen: 20 77.89.16.0/20 maxlen: 20 77.89.32.0/19 maxlen: 19 77.89.32.0/20 maxlen: 20 77.89.48.0/20 maxlen: 20 80.86.144.0/20 maxlen: 24 83.216.160.0/19 maxlen: 19 83.216.160.0/20 maxlen: 20 83.216.160.0/21 maxlen: 21 83.216.168.0/21 maxlen: 21 83.216.176.0/20 maxlen: 20 83.216.176.0/21 maxlen: 21 83.216.184.0/21 maxlen: 21 86.110.128.0/19 maxlen: 19 86.110.128.0/20 maxlen: 20 86.110.128.0/21 maxlen: 21 86.110.136.0/21 maxlen: 21 86.110.144.0/20 maxlen: 20 86.110.144.0/21 maxlen: 21 86.110.152.0/21 maxlen: 21 185.123.8.0/22 maxlen: 22 185.123.8.0/24 maxlen: 24 185.123.9.0/24 maxlen: 24 185.182.196.0/22 maxlen: 24 188.125.96.0/19 maxlen: 24 188.125.122.0/24 maxlen: 24 213.174.160.0/19 maxlen: 19 213.174.160.0/20 maxlen: 20 213.174.160.0/21 maxlen: 21 213.174.168.0/21 maxlen: 21 213.174.176.0/20 maxlen: 20 213.174.176.0/21 maxlen: 21 213.174.184.0/21 maxlen: 21 213.209.192.0/18 maxlen: 18 213.209.192.0/19 maxlen: 19 213.209.192.0/20 maxlen: 20 213.209.208.0/20 maxlen: 20 213.209.224.0/19 maxlen: 19 213.209.224.0/20 maxlen: 20 213.209.240.0/20 maxlen: 20 2a03:c380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:b7:66:30:85:90:e1:05:ed:4e:71:af:e8:b5:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae72e47d56692499a726bf800ea8380362deb6be Validity Not Before: Jan 2 08:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2d8e51420fd47742f86e6946fc47df31df26800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4c:c0:32:a5:d2:c1:a4:b9:6f:97:53:ca:42: d6:bf:2e:0d:2a:07:c6:8e:9b:c2:67:8a:15:73:66: bb:c7:b0:f0:dd:c3:3c:45:fc:e9:13:59:01:ae:cb: 8e:7e:d9:2b:84:8b:68:79:ab:a1:da:83:91:39:9b: cc:a8:5f:ba:68:0f:74:24:8b:43:9a:26:f9:60:5d: 34:8c:0f:1d:69:8c:c0:05:47:4f:19:73:a2:63:c6: 3d:ea:78:19:f4:1c:1f:62:7c:ea:1a:7a:c7:c9:85: 01:b6:69:10:ad:f1:e7:3e:82:63:b7:23:c8:87:0d: 52:5a:cb:1f:9a:3c:63:0c:09:b6:ae:73:5e:78:ba: c7:97:a3:09:76:16:90:b3:95:0e:34:14:4a:e4:c7: 4b:c0:d7:24:05:ee:dc:77:25:e5:a9:97:17:ce:83: b4:86:67:35:b1:43:91:de:2e:86:87:9a:7d:d6:77: 15:ee:0c:85:c2:66:e4:af:f3:46:8c:62:5a:89:3e: ef:49:e8:12:bc:f0:70:f7:3d:a6:87:2f:37:a0:9f: f1:25:54:78:6d:9e:08:94:1f:e9:97:5d:a9:29:68: 90:b7:b2:f4:5d:d6:c4:43:54:92:ef:3b:7e:03:21: 7c:4c:8a:6e:11:0c:93:8b:ef:d1:cf:71:8b:0c:9d: 75:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D8:E5:14:20:FD:47:74:2F:86:E6:94:6F:C4:7D:F3:1D:F2:68:00 X509v3 Authority Key Identifier: keyid:AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/0tjlFCD9R3QvhuaUb8R98x3yaAA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.63.136.0/21 31.216.240.0/20 77.89.0.0/18 80.86.144.0/20 83.216.160.0/19 86.110.128.0/19 185.123.8.0/22 185.182.196.0/22 188.125.96.0/19 213.174.160.0/19 213.209.192.0/18 IPv6: 2a03:c380::/32 Signature Algorithm: sha256WithRSAEncryption 2d:47:0f:7e:26:a8:94:10:0a:3d:44:3d:fa:5c:8b:8c:72:50: 69:77:7d:52:83:3d:32:6d:af:75:8a:26:d3:62:20:81:c2:02: e9:20:89:64:ad:1c:fd:7a:5c:f2:6e:52:b2:a0:98:b4:a6:4c: 3d:a8:75:2e:67:dd:c0:a2:60:5b:3d:7d:72:7f:2c:dd:74:fa: f3:d5:e3:78:34:12:a1:d0:b3:fe:e6:d4:53:1f:d3:7c:0e:e5: a3:b1:d7:8d:00:4f:a1:71:14:d8:61:a3:bd:07:dc:ee:0d:a4: 81:4a:70:9d:84:81:4b:98:02:ea:88:4e:f2:11:c2:1f:25:18: ec:40:41:1d:2b:7d:8c:84:c5:4b:57:da:d9:33:1c:35:10:08: d4:d1:d8:c9:44:96:5b:7a:61:54:7c:bc:86:8f:22:29:9f:d3: 4f:c2:2d:85:ad:70:1a:94:4d:8a:b7:15:52:06:2b:b9:e3:6e: 4e:c9:12:d0:87:2f:bb:da:46:84:25:25:4c:32:6d:5b:53:82: b6:5a:32:70:8c:c4:76:a7:f9:75:f5:4e:1d:81:48:9f:63:2f: 0c:7a:f1:94:4c:2b:9a:53:21:69:82:14:7b:ee:7b:d6:10:b5: d5:8a:32:b0:e8:b5:69:9b:14:01:74:25:c1:23:c0:9d:5e:3b: c9:66:06:b8 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZt9yLdmMIWQ4QXtTnGv6LWuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNzJlNDdkNTY2OTI0OTlhNzI2YmY4MDBlYTgzODAzNjJk ZWI2YmUwHhcNMjYwMTAyMDgxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmQ4ZTUxNDIwZmQ0Nzc0MmY4NmU2OTQ2ZmM0N2RmMzFkZjI2ODAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0zAMqXSwaS5b5dTykLWvy4NKgfG jpvCZ4oVc2a7x7Dw3cM8RfzpE1kBrsuOftkrhItoeauh2oOROZvMqF+6aA90JItD mib5YF00jA8daYzABUdPGXOiY8Y96ngZ9BwfYnzqGnrHyYUBtmkQrfHnPoJjtyPI hw1SWssfmjxjDAm2rnNeeLrHl6MJdhaQs5UONBRK5MdLwNckBe7cdyXlqZcXzoO0 hmc1sUOR3i6Gh5p91ncV7gyFwmbkr/NGjGJaiT7vSegSvPBw9z2mhy83oJ/xJVR4 bZ4IlB/pl12pKWiQt7L0XdbEQ1SS7zt+AyF8TIpuEQyTi+/Rz3GLDJ11kwIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFNLY5RQg/Ud0L4bmlG/EffMd8mgAMB8GA1UdIwQY MBaAFK5y5H1WaSSZpya/gA6oOANi3ra+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5Ma2ZWWnBKSm1uSnItQURxZzRBMkxldHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82YmI0NzEtNGEzZS00ODhkLWI4OGMt ZmUxMmM3NWJmNGFiLzEvMHRqbEZDRDlSM1F2aHVhVWI4Ujk4eDN5YUFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS82YmI0NzEtNGEzZS00ODhkLWI4OGMtZmUxMmM3NWJmNGFi LzEvcm5Ma2ZWWnBKSm1uSnItQURxZzRBMkxldHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQDBT+IAwQE H9jwAwQGTVkAAwQEUFaQAwQFU9igAwQFVm6AAwQCuXsIAwQCubbEAwQFvH1gAwQF 1a6gAwQG1dHAMA0EAgACMAcDBQAqA8OAMA0GCSqGSIb3DQEBCwUAA4IBAQAtRw9+ JqiUEAo9RD36XIuMclBpd31Sgz0yba91iibTYiCBwgLpIIlkrRz9elzyblKyoJi0 pkw9qHUuZ93AomBbPX1yfyzddPrz1eN4NBKh0LP+5tRTH9N8DuWjsdeNAE+hcRTY YaO9B9zuDaSBSnCdhIFLmALqiE7yEcIfJRjsQEEdK32MhMVLV9rZMxw1EAjU0djJ RJZbemFUfLyGjyIpn9NPwi2FrXAalE2KtxVSBiu5425OyRLQhy+72kaEJSVMMm1b U4K2WjJwjMR2p/l19U4dgUifYy8MevGUTCuaUyFpghR77nvWELXVijKw6LVpmxQB dCXBI8CdXjvJZga4 -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:23 2026 by rpki-client