This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/eseKyzjF5Jbp8eRTsB-WjLQeKgI.roa File: eseKyzjF5Jbp8eRTsB-WjLQeKgI.roa (raw, json) Hash identifier: ysSTN/ZbzBymumy8WtevS9Ii6l7aJCwQV+TV+2MP2bk= Subject key identifier: 7A:C7:8A:CB:38:C5:E4:96:E9:F1:E4:53:B0:1F:96:8C:B4:1E:2A:02 Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c Certificate serial: 019B791003E232C488E2ADEED11A778B3F66 Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/eseKyzjF5Jbp8eRTsB-WjLQeKgI.roa Signing time: Thu 01 Jan 2026 10:17:31 +0000 ROA not before: Thu 01 Jan 2026 10:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5413 IP address blocks: 5.22.224.0/21 maxlen: 24 45.83.76.0/22 maxlen: 24 62.44.64.0/19 maxlen: 24 62.69.32.0/19 maxlen: 24 62.72.128.0/19 maxlen: 24 62.105.64.0/18 maxlen: 24 62.232.0.0/16 maxlen: 24 77.44.0.0/17 maxlen: 24 77.73.120.0/21 maxlen: 24 77.107.128.0/18 maxlen: 24 78.41.208.0/21 maxlen: 24 78.141.0.0/18 maxlen: 24 80.64.48.0/20 maxlen: 24 80.69.128.0/20 maxlen: 24 80.89.80.0/20 maxlen: 24 80.234.128.0/17 maxlen: 24 82.195.96.0/19 maxlen: 24 83.219.32.0/19 maxlen: 24 89.145.192.0/18 maxlen: 24 93.92.120.0/21 maxlen: 24 93.95.104.0/21 maxlen: 24 94.30.0.0/17 maxlen: 24 109.170.128.0/17 maxlen: 24 130.185.64.0/21 maxlen: 24 176.35.0.0/16 maxlen: 24 185.3.76.0/22 maxlen: 24 185.8.204.0/22 maxlen: 24 185.138.152.0/22 maxlen: 24 185.196.204.0/22 maxlen: 24 193.41.96.0/21 maxlen: 24 193.192.64.0/19 maxlen: 24 193.242.113.0/24 maxlen: 24 193.242.115.0/24 maxlen: 24 193.242.116.0/24 maxlen: 24 194.1.210.0/24 maxlen: 24 194.79.240.0/22 maxlen: 24 194.126.64.0/19 maxlen: 24 194.143.160.0/19 maxlen: 24 194.153.0.0/19 maxlen: 24 194.154.160.0/19 maxlen: 24 195.38.64.0/19 maxlen: 24 195.70.64.0/19 maxlen: 24 195.147.0.0/16 maxlen: 24 195.200.128.0/19 maxlen: 24 195.224.0.0/16 maxlen: 24 195.226.32.0/19 maxlen: 24 212.19.64.0/19 maxlen: 24 212.35.224.0/19 maxlen: 24 212.88.32.0/19 maxlen: 24 212.102.192.0/19 maxlen: 24 212.103.224.0/19 maxlen: 24 212.241.128.0/17 maxlen: 24 213.205.128.0/18 maxlen: 24 217.67.48.0/20 maxlen: 24 2001:b98::/29 maxlen: 29 2001:b98::/32 maxlen: 32 2a00:b300::/32 maxlen: 32 2a04:b2c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:03:e2:32:c4:88:e2:ad:ee:d1:1a:77:8b:3f:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66df7742890173927935206a28efbf48123e787c Validity Not Before: Jan 1 10:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ac78acb38c5e496e9f1e453b01f968cb41e2a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2a:ed:2b:38:a7:e7:7a:3a:a1:0d:9c:c0:45: e6:44:d9:0c:ae:77:2e:4b:2d:86:10:fd:d9:6f:f9: 93:38:fb:21:a5:be:de:cb:b0:b1:4b:e7:d5:29:ae: 45:ac:ee:da:b6:dd:4b:ed:92:fd:10:67:35:1b:9b: 28:68:ef:0b:ef:35:ad:c4:27:78:6e:89:ed:26:e1: 8b:3d:e1:36:a9:8e:5d:3d:ba:88:42:b9:89:cb:70: c4:dd:34:ba:77:95:56:5c:f9:d1:64:68:c2:ef:8c: 51:c5:e5:9f:28:ca:fd:46:30:2b:25:0e:79:59:1c: 00:2f:6a:27:b7:8d:d4:54:ea:aa:ed:be:c3:81:a1: 51:d5:00:d8:02:35:6f:c1:94:f4:ae:74:6c:4c:3f: 40:ed:7e:d1:5a:dd:d2:9c:8d:a4:dc:e2:dd:81:34: f6:47:96:42:cf:9e:7b:a3:04:cf:9e:2e:d6:8a:ff: 32:d0:37:28:86:10:ee:eb:17:f0:1b:c7:db:bc:15: fc:d5:a0:ef:1b:3e:cf:b0:38:5a:73:14:03:8d:5c: 0b:c8:6a:ec:91:d3:b7:55:28:7d:b6:f7:c2:a6:ef: 9c:b2:8c:41:b9:00:b5:3f:ee:79:8e:fd:c3:da:2c: b6:31:f9:27:4c:18:5e:c8:ba:51:9d:82:29:d6:02: 95:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C7:8A:CB:38:C5:E4:96:E9:F1:E4:53:B0:1F:96:8C:B4:1E:2A:02 X509v3 Authority Key Identifier: keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/eseKyzjF5Jbp8eRTsB-WjLQeKgI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.22.224.0/21 45.83.76.0/22 62.44.64.0/19 62.69.32.0/19 62.72.128.0/19 62.105.64.0/18 62.232.0.0/16 77.44.0.0/17 77.73.120.0/21 77.107.128.0/18 78.41.208.0/21 78.141.0.0/18 80.64.48.0/20 80.69.128.0/20 80.89.80.0/20 80.234.128.0/17 82.195.96.0/19 83.219.32.0/19 89.145.192.0/18 93.92.120.0/21 93.95.104.0/21 94.30.0.0/17 109.170.128.0/17 130.185.64.0/21 176.35.0.0/16 185.3.76.0/22 185.8.204.0/22 185.138.152.0/22 185.196.204.0/22 193.41.96.0/21 193.192.64.0/19 193.242.113.0/24 193.242.115.0-193.242.116.255 194.1.210.0/24 194.79.240.0/22 194.126.64.0/19 194.143.160.0/19 194.153.0.0/19 194.154.160.0/19 195.38.64.0/19 195.70.64.0/19 195.147.0.0/16 195.200.128.0/19 195.224.0.0/16 195.226.32.0/19 212.19.64.0/19 212.35.224.0/19 212.88.32.0/19 212.102.192.0/19 212.103.224.0/19 212.241.128.0/17 213.205.128.0/18 217.67.48.0/20 IPv6: 2001:b98::/29 2a00:b300::/32 2a04:b2c0::/29 Signature Algorithm: sha256WithRSAEncryption 5f:55:f8:55:fe:39:8d:e4:f9:c7:df:d1:12:0f:37:d6:57:62: 53:86:72:d3:f7:40:a5:a5:1b:0b:bd:bf:d2:49:37:c7:50:02: ec:96:3b:23:fc:90:76:8a:31:85:54:07:c9:4f:1d:39:58:33: 83:29:7d:36:83:f7:81:17:54:b3:50:92:80:b3:ed:88:88:e4: f6:bd:b1:8d:2f:07:c3:e0:0d:30:5b:10:6b:e2:9d:4a:b0:89: a0:b4:8c:11:09:12:3a:89:a9:ce:60:99:b0:e3:95:56:71:71: 14:32:7c:81:1a:cd:e7:bd:07:8e:fd:25:a4:e7:bd:81:ca:a6: 53:fa:cc:76:a9:d0:27:e4:53:15:ba:8e:69:f2:58:60:a0:6b: 4f:5c:fd:fe:8c:f9:dd:c6:7d:f0:63:27:f8:9a:a5:9d:60:c5: 40:c6:72:09:9d:04:28:0e:d1:3e:51:57:88:23:cb:ea:6d:6b: bb:1e:8b:6d:18:76:16:90:10:01:a9:75:51:19:ac:bf:fb:e4: 97:57:ea:b5:fe:1e:0c:d9:f4:a0:aa:63:b3:48:25:43:8e:3f: 5e:a8:4c:bc:a3:6f:53:28:be:31:a0:41:bd:f0:c4:3b:b8:07: 63:37:47:65:2c:d5:63:36:2d:b9:06:af:7c:b9:78:16:31:2c: ae:6e:74:a3 -----BEGIN CERTIFICATE----- MIIGYDCCBUigAwIBAgISAZt5EAPiMsSI4q3u0Rp3iz9mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZGY3NzQyODkwMTczOTI3OTM1MjA2YTI4ZWZiZjQ4MTIz ZTc4N2MwHhcNMjYwMTAxMTAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWM3OGFjYjM4YzVlNDk2ZTlmMWU0NTNiMDFmOTY4Y2I0MWUyYTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSrtKzin53o6oQ2cwEXmRNkMrncu Sy2GEP3Zb/mTOPshpb7ey7CxS+fVKa5FrO7att1L7ZL9EGc1G5soaO8L7zWtxCd4 bontJuGLPeE2qY5dPbqIQrmJy3DE3TS6d5VWXPnRZGjC74xRxeWfKMr9RjArJQ55 WRwAL2ont43UVOqq7b7DgaFR1QDYAjVvwZT0rnRsTD9A7X7RWt3SnI2k3OLdgTT2 R5ZCz557owTPni7Wiv8y0DcohhDu6xfwG8fbvBX81aDvGz7PsDhacxQDjVwLyGrs kdO3VSh9tvfCpu+csoxBuQC1P+55jv3D2iy2MfknTBheyLpRnYIp1gKVKwIDAQAB o4IDbDCCA2gwHQYDVR0OBBYEFHrHiss4xeSW6fHkU7Afloy0HioCMB8GA1UdIwQY MBaAFGbfd0KJAXOSeTUgaijvv0gSPnh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYt MDk3ODdmMTUyYWRlLzEvZXNlS3l6akY1SmJwOGVSVHNCLVdqTFFlS2dJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYtMDk3ODdmMTUyYWRl LzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBgAYIKwYBBQUHAQcBAf8EggFvMIIBazCCAUoEAgABMIIB QgMEAwUW4AMEAi1TTAMEBT4sQAMEBT5FIAMEBT5IgAMEBj5pQAMDAD7oAwQHTSwA AwQDTUl4AwQGTWuAAwQDTinQAwQGTo0AAwQEUEAwAwQEUEWAAwQEUFlQAwQHUOqA AwQFUsNgAwQFU9sgAwQGWZHAAwQDXVx4AwQDXV9oAwQHXh4AAwQHbaqAAwQDgrlA AwMAsCMDBAK5A0wDBAK5CMwDBAK5ipgDBAK5xMwDBAPBKWADBAXBwEADBADB8nEw DAMEAMHycwMEAMHydAMEAMIB0gMEAsJP8AMEBcJ+QAMEBcKPoAMEBcKZAAMEBcKa oAMEBcMmQAMEBcNGQAMDAMOTAwQFw8iAAwMAw+ADBAXD4iADBAXUE0ADBAXUI+AD BAXUWCADBAXUZsADBAXUZ+ADBAfU8YADBAbVzYADBATZQzAwGwQCAAIwFQMFAyAB C5gDBQAqALMAAwUDKgSywDANBgkqhkiG9w0BAQsFAAOCAQEAX1X4Vf45jeT5x9/R Eg831ldiU4Zy0/dApaUbC72/0kk3x1AC7JY7I/yQdooxhVQHyU8dOVgzgyl9NoP3 gRdUs1CSgLPtiIjk9r2xjS8Hw+ANMFsQa+KdSrCJoLSMEQkSOompzmCZsOOVVnFx FDJ8gRrN570Hjv0lpOe9gcqmU/rMdqnQJ+RTFbqOafJYYKBrT1z9/oz53cZ98GMn +JqlnWDFQMZyCZ0EKA7RPlFXiCPL6m1rux6LbRh2FpAQAal1URmsv/vkl1fqtf4e DNn0oKpjs0glQ44/XqhMvKNvUyi+MaBBvfDEO7gHYzdHZSzVYzYtuQavfLl4FjEs rm50ow== -----END CERTIFICATE-----Generated at Fri Jan 23 19:18:12 2026 by rpki-client