This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/nDe-qNhnM7uiI6FvKA4tpUFbkwY.roa File: nDe-qNhnM7uiI6FvKA4tpUFbkwY.roa (raw, json) Hash identifier: sTzHHKSFfupRttU47uock1mVJaqqApZAZwwhHCKIkSw= Subject key identifier: 9C:37:BE:A8:D8:67:33:BB:A2:23:A1:6F:28:0E:2D:A5:41:5B:93:06 Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba Certificate serial: 019B7AC78F4B94287629768448FCF6C7B70B Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/nDe-qNhnM7uiI6FvKA4tpUFbkwY.roa Signing time: Thu 01 Jan 2026 18:17:37 +0000 ROA not before: Thu 01 Jan 2026 18:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49100 IP address blocks: 5.202.0.0/16 maxlen: 24 5.202.16.0/23 maxlen: 23 5.202.22.0/23 maxlen: 23 5.202.57.0/24 maxlen: 24 5.202.76.0/24 maxlen: 24 5.202.82.0/24 maxlen: 24 5.202.100.0/24 maxlen: 24 5.202.110.0/24 maxlen: 24 5.202.166.0/23 maxlen: 23 5.202.208.0/20 maxlen: 20 5.202.240.0/21 maxlen: 21 77.237.160.0/19 maxlen: 19 85.9.64.0/18 maxlen: 18 85.9.68.0/24 maxlen: 24 85.9.76.0/24 maxlen: 24 91.209.242.0/24 maxlen: 24 95.215.160.0/22 maxlen: 22 109.125.160.0/19 maxlen: 19 109.125.160.0/23 maxlen: 23 109.125.162.0/23 maxlen: 23 109.125.164.0/23 maxlen: 23 109.125.168.0/21 maxlen: 21 109.125.176.0/22 maxlen: 22 109.125.182.0/23 maxlen: 23 109.125.184.0/22 maxlen: 22 109.125.184.0/24 maxlen: 24 109.125.185.0/24 maxlen: 24 109.125.186.0/24 maxlen: 24 109.125.187.0/24 maxlen: 24 109.125.188.0/24 maxlen: 24 109.125.189.0/24 maxlen: 24 109.125.190.0/24 maxlen: 24 109.125.191.0/24 maxlen: 24 109.232.5.0/24 maxlen: 24 109.232.6.0/24 maxlen: 24 109.232.7.0/24 maxlen: 24 185.72.24.0/22 maxlen: 22 185.72.27.0/24 maxlen: 24 185.83.88.0/24 maxlen: 24 185.83.89.0/24 maxlen: 24 185.83.90.0/23 maxlen: 23 185.103.128.0/22 maxlen: 22 185.125.244.0/22 maxlen: 22 185.125.248.0/21 maxlen: 21 185.125.255.0/24 maxlen: 24 185.126.0.0/20 maxlen: 20 185.126.16.0/22 maxlen: 22 185.126.16.0/23 maxlen: 23 185.126.40.0/22 maxlen: 22 185.131.28.0/22 maxlen: 22 185.131.30.0/23 maxlen: 23 185.155.8.0/21 maxlen: 21 185.169.20.0/22 maxlen: 22 185.169.36.0/22 maxlen: 22 185.169.37.0/24 maxlen: 24 185.177.232.0/22 maxlen: 22 185.180.52.0/22 maxlen: 22 188.253.32.0/19 maxlen: 24 188.253.64.0/19 maxlen: 24 193.32.80.0/23 maxlen: 23 194.33.122.0/23 maxlen: 23 2001:4c88::/32 maxlen: 32 2a02:cd80::/29 maxlen: 29 2a07:8f00::/29 maxlen: 29 2a07:8f40::/29 maxlen: 29 2a0a:4e00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8f:4b:94:28:76:29:76:84:48:fc:f6:c7:b7:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba Validity Not Before: Jan 1 18:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c37bea8d86733bba223a16f280e2da5415b9306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d3:8e:54:b5:61:04:4b:e8:d8:c1:55:64:bd: b1:80:fa:af:a0:d7:3b:de:64:4d:19:fe:bc:bf:2d: 1b:93:c0:95:2b:8f:51:4f:ac:ac:c8:80:bd:c8:60: d0:85:54:aa:0a:c7:db:a9:2a:04:1e:48:a4:b5:c2: cb:bc:a1:9b:6b:b3:1a:6c:92:95:08:7b:02:c6:ac: 66:b4:38:c4:5a:6f:3e:ce:2a:36:a9:a0:e7:7b:3c: 38:6e:2e:8c:07:3f:8a:7c:ee:da:78:76:37:13:e0: dc:a1:43:2e:c6:73:cd:94:06:d7:42:49:10:a4:5b: ee:54:b8:22:ee:49:3f:5f:77:76:79:71:d2:46:32: 98:0e:c4:fb:a3:0a:e1:d2:22:73:bc:8c:33:fb:50: 79:a1:1a:44:b6:f7:2c:48:21:b9:5c:03:bb:72:c6: 78:91:1e:86:88:39:99:15:da:42:cc:bc:04:89:1c: f9:1b:62:e7:c1:75:0c:b3:c8:be:92:19:a1:67:00: 56:37:78:e5:3d:2a:45:5f:64:20:be:7d:85:ac:db: 46:c9:26:bb:7c:53:c3:32:59:7d:5c:56:92:d1:34: b9:3c:e3:57:e6:b3:1b:41:c4:4e:7d:6d:31:a1:f2: b9:97:29:39:36:29:20:fe:e4:d5:07:9e:db:7f:d2: dd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:37:BE:A8:D8:67:33:BB:A2:23:A1:6F:28:0E:2D:A5:41:5B:93:06 X509v3 Authority Key Identifier: keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/nDe-qNhnM7uiI6FvKA4tpUFbkwY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.202.0.0/16 77.237.160.0/19 85.9.64.0/18 91.209.242.0/24 95.215.160.0/22 109.125.160.0/19 109.232.5.0-109.232.7.255 185.72.24.0/22 185.83.88.0/22 185.103.128.0/22 185.125.244.0-185.126.19.255 185.126.40.0/22 185.131.28.0/22 185.155.8.0/21 185.169.20.0/22 185.169.36.0/22 185.177.232.0/22 185.180.52.0/22 188.253.32.0-188.253.95.255 193.32.80.0/23 194.33.122.0/23 IPv6: 2001:4c88::/32 2a02:cd80::/29 2a07:8f00::/29 2a07:8f40::/29 2a0a:4e00::/29 Signature Algorithm: sha256WithRSAEncryption 7f:3f:86:91:21:3d:c6:21:63:ea:38:c6:f1:46:5b:c0:bf:85: be:9e:22:65:50:73:2c:3e:dd:b6:7a:83:b7:33:e7:35:93:66: c0:b6:ec:9d:44:fa:0e:e7:2c:b7:fa:5d:9f:93:60:e3:41:dd: 17:d1:d8:70:47:ab:8d:91:6b:56:69:5c:02:82:aa:b6:0a:83: 1e:92:26:2d:d3:81:e3:fc:8d:2c:cb:d5:e4:86:87:4b:02:01: dd:ed:20:d1:23:b9:8b:49:06:a5:f8:d8:8c:b1:f8:90:e1:06: 04:ed:3b:e9:99:ca:99:fa:38:fb:cc:c2:d9:9b:8b:67:0e:70: 37:66:3a:7a:06:b4:f9:96:2b:88:f4:79:39:81:4e:a6:46:58: 27:9d:cc:c1:60:4c:95:06:a2:0f:a6:14:d2:ca:6f:90:f2:50: 9c:4e:b8:41:0a:30:58:ca:e2:4f:d6:21:43:27:51:97:30:9a: cb:66:74:2e:6b:c3:40:2a:3a:9e:72:be:59:8b:ce:a7:b8:d2: a4:63:4d:7c:b7:74:59:61:fe:29:ae:f6:8d:4e:e7:92:6f:ac: 0b:fc:ea:30:48:54:b6:52:4f:d4:85:fd:64:41:8a:24:0f:8c: 02:73:64:23:f8:a9:1c:a5:01:04:d5:30:e4:68:75:36:24:c5: 56:65:52:ca -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgISAZt6x49LlCh2KXaESPz2x7cLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1 OTVlYmEwHhcNMjYwMTAxMTgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzM3YmVhOGQ4NjczM2JiYTIyM2ExNmYyODBlMmRhNTQxNWI5MzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9OOVLVhBEvo2MFVZL2xgPqvoNc7 3mRNGf68vy0bk8CVK49RT6ysyIC9yGDQhVSqCsfbqSoEHkiktcLLvKGba7MabJKV CHsCxqxmtDjEWm8+zio2qaDnezw4bi6MBz+KfO7aeHY3E+DcoUMuxnPNlAbXQkkQ pFvuVLgi7kk/X3d2eXHSRjKYDsT7owrh0iJzvIwz+1B5oRpEtvcsSCG5XAO7csZ4 kR6GiDmZFdpCzLwEiRz5G2LnwXUMs8i+khmhZwBWN3jlPSpFX2Qgvn2FrNtGySa7 fFPDMll9XFaS0TS5PONX5rMbQcROfW0xofK5lyk5Nikg/uTVB57bf9LdIwIDAQAB o4ICyDCCAsQwHQYDVR0OBBYEFJw3vqjYZzO7oiOhbygOLaVBW5MGMB8GA1UdIwQY MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt MTA5ODJlMDQwZDUzLzEvbkRlLXFOaG5NN3VpSTZGdktBNHRwVUZia3dZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHdBggrBgEFBQcBBwEB/wSBzTCByjCBnAQCAAEwgZUDAwAF ygMEBU3toAMEBlUJQAMEAFvR8gMEAl/XoAMEBW19oDAMAwQAbegFAwQDbegAAwQC uUgYAwQCuVNYAwQCuWeAMAwDBAK5ffQDBAK5fhADBAK5figDBAK5gxwDBAO5mwgD BAK5qRQDBAK5qSQDBAK5segDBAK5tDQwDAMEBbz9IAMEBbz9QAMEAcEgUAMEAcIh ejApBAIAAjAjAwUAIAFMiAMFAyoCzYADBQMqB48AAwUDKgePQAMFAyoKTgAwDQYJ KoZIhvcNAQELBQADggEBAH8/hpEhPcYhY+o4xvFGW8C/hb6eImVQcyw+3bZ6g7cz 5zWTZsC27J1E+g7nLLf6XZ+TYONB3RfR2HBHq42Ra1ZpXAKCqrYKgx6SJi3TgeP8 jSzL1eSGh0sCAd3tINEjuYtJBqX42Iyx+JDhBgTtO+mZypn6OPvMwtmbi2cOcDdm OnoGtPmWK4j0eTmBTqZGWCedzMFgTJUGog+mFNLKb5DyUJxOuEEKMFjK4k/WIUMn UZcwmstmdC5rw0AqOp5yvlmLzqe40qRjTXy3dFlh/imu9o1O55JvrAv86jBIVLZS T9SF/WRBiiQPjAJzZCP4qRylAQTVMORodTYkxVZlUso= -----END CERTIFICATE-----Generated at Mon Jan 12 01:58:17 2026 by rpki-client