This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/z5eGL-fse1We1bptm25VEPuwfto.roa File: z5eGL-fse1We1bptm25VEPuwfto.roa (raw, json) Hash identifier: /QZbVKe0lTLtD3ctMSCQSNAZAq2u7V/TkGsjkJaoUbo= Subject key identifier: CF:97:86:2F:E7:EC:7B:55:9E:D5:BA:6D:9B:6E:55:10:FB:B0:7E:DA Certificate issuer: /CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6 Certificate serial: 019BB2F6C0B82CED0B7D4810B7176174A669 Authority key identifier: 17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/z5eGL-fse1We1bptm25VEPuwfto.roa Signing time: Mon 12 Jan 2026 16:07:54 +0000 ROA not before: Mon 12 Jan 2026 16:07:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60664 IP address blocks: 145.14.130.0/24 maxlen: 24 147.75.144.0/20 maxlen: 24 153.92.64.0/24 maxlen: 24 153.92.65.0/24 maxlen: 24 153.92.66.0/24 maxlen: 24 153.92.67.0/24 maxlen: 24 153.92.68.0/24 maxlen: 24 153.92.69.0/24 maxlen: 24 153.92.70.0/24 maxlen: 24 153.92.71.0/24 maxlen: 24 153.92.124.0/24 maxlen: 24 153.92.160.0/24 maxlen: 24 153.92.161.0/24 maxlen: 24 153.92.162.0/24 maxlen: 24 153.92.163.0/24 maxlen: 24 153.92.164.0/24 maxlen: 24 153.92.165.0/24 maxlen: 24 153.92.166.0/24 maxlen: 24 153.92.167.0/24 maxlen: 24 153.92.168.0/24 maxlen: 24 153.92.169.0/24 maxlen: 24 153.92.170.0/24 maxlen: 24 153.92.171.0/24 maxlen: 24 153.92.172.0/24 maxlen: 24 153.92.173.0/24 maxlen: 24 153.92.174.0/24 maxlen: 24 153.92.175.0/24 maxlen: 24 157.97.76.0/23 maxlen: 23 157.97.78.0/23 maxlen: 23 157.180.192.0/24 maxlen: 24 157.180.193.0/24 maxlen: 24 157.180.194.0/24 maxlen: 24 157.180.195.0/24 maxlen: 24 157.180.196.0/23 maxlen: 23 157.180.196.0/24 maxlen: 24 157.180.197.0/24 maxlen: 24 157.180.198.0/23 maxlen: 23 157.180.198.0/24 maxlen: 24 157.180.199.0/24 maxlen: 24 158.220.64.0/21 maxlen: 24 185.27.180.0/23 maxlen: 23 185.27.180.0/24 maxlen: 24 185.27.181.0/24 maxlen: 24 185.27.182.0/23 maxlen: 23 185.27.182.0/24 maxlen: 24 185.27.183.0/24 maxlen: 24 185.74.64.0/23 maxlen: 23 185.74.64.0/24 maxlen: 24 185.74.65.0/24 maxlen: 24 185.74.66.0/23 maxlen: 23 185.74.66.0/24 maxlen: 24 185.74.67.0/24 maxlen: 24 2a04:3b40::/48 maxlen: 64 2a04:3b40:1::/48 maxlen: 64 2a04:3b40:2::/48 maxlen: 64 2a04:3b41::/48 maxlen: 64 2a04:3b42::/56 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:f6:c0:b8:2c:ed:0b:7d:48:10:b7:17:61:74:a6:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6 Validity Not Before: Jan 12 16:07:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf97862fe7ec7b559ed5ba6d9b6e5510fbb07eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f0:7a:19:74:d6:37:e4:34:68:1e:e4:b1:cb: 77:98:fb:b6:01:52:ce:18:a5:59:ac:28:58:1d:a0: 16:6c:19:bc:70:dd:0d:80:48:29:1e:a6:9e:e8:ef: 38:b3:3f:55:70:90:03:4e:c6:53:24:da:3e:4d:ef: d5:11:7c:ea:ea:9f:65:c8:08:b8:7b:a1:3b:e9:fe: 0b:5c:a8:0a:50:07:2b:e3:9b:fa:1a:f5:65:9a:19: 1f:c9:e2:ae:76:29:83:e8:49:08:6a:45:22:12:50: 44:3e:43:8f:4c:6a:c7:ce:aa:10:71:5b:98:d2:02: ce:6f:9d:83:89:a7:19:2a:b1:86:82:e0:93:c3:14: d0:2d:33:45:1f:37:42:81:43:57:3b:37:ce:5b:93: 4c:b2:6e:6d:70:9e:9d:91:32:90:ce:39:53:24:f0: 0f:28:a4:b8:67:11:0c:a2:f0:e6:88:76:44:3c:ec: 6d:d7:10:9c:0a:01:5b:b0:5a:c6:76:85:8e:bd:cd: 02:de:3e:76:cb:a5:a4:12:e3:d4:52:ab:fc:3d:f1: af:80:cd:a2:76:52:38:85:65:a9:9b:d1:27:13:a5: cf:e5:76:84:33:73:96:9e:37:5d:a7:ec:13:2c:2c: 66:ec:df:e6:49:c3:3c:01:8e:e4:d8:cf:eb:7f:a0: 74:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:97:86:2F:E7:EC:7B:55:9E:D5:BA:6D:9B:6E:55:10:FB:B0:7E:DA X509v3 Authority Key Identifier: keyid:17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/z5eGL-fse1We1bptm25VEPuwfto.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.14.130.0/24 147.75.144.0/20 153.92.64.0/21 153.92.124.0/24 153.92.160.0/20 157.97.76.0/22 157.180.192.0/21 158.220.64.0/21 185.27.180.0/22 185.74.64.0/22 IPv6: 2a04:3b40::-2a04:3b40:2:ffff:ffff:ffff:ffff:ffff 2a04:3b41::/48 2a04:3b42::/56 Signature Algorithm: sha256WithRSAEncryption 78:7b:cd:94:d9:bf:77:81:e6:35:41:0d:b9:5c:3a:71:fa:02: 25:bb:2d:49:6c:6f:26:d4:de:e1:ef:e0:53:04:f2:76:b4:f5: 12:3a:24:1e:54:ee:8f:f0:91:8d:af:79:a4:1f:25:1b:bc:f3: 3b:4e:43:57:56:7f:1b:a2:6a:cc:5b:5d:73:a7:a6:a5:cf:2c: 72:e3:3d:62:0b:02:7e:f3:50:d2:59:65:08:0f:67:85:4e:ef: 94:d3:9c:22:78:1a:0e:e2:6d:cd:2d:62:d5:5f:7d:34:2b:f4: 7d:8a:ed:60:4e:fd:db:c5:19:e9:ae:7d:30:e3:e5:d8:a3:7d: ac:aa:56:10:8b:5f:58:be:bc:13:73:32:54:ae:20:90:ec:a5: d2:3f:9a:8b:a0:43:33:7b:51:fd:87:9d:93:5c:06:bc:5a:b5: b3:5b:4f:a1:d0:1f:c0:f0:14:45:d2:c2:10:b9:f2:10:ae:01: 19:bc:9d:c9:ff:df:fd:e7:33:80:fd:9e:4a:06:14:65:ac:2b: 3f:1e:89:4c:56:6c:90:0b:91:96:d0:2b:67:76:46:10:89:f4: 20:9b:c2:91:46:c3:19:5a:c0:2f:0e:8c:4e:56:5d:ba:ce:84: 0a:0a:ec:19:6a:ec:ff:8a:6c:03:80:9b:4a:a3:75:a0:5a:2d: a7:d3:28:b0 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgISAZuy9sC4LO0LfUgQtxdhdKZpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NzhjZmMwOWEzNjNhNzNjYzhkZGEzNjJhMmM5ZTgyMjNk N2RhZDYwHhcNMjYwMTEyMTYwNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjk3ODYyZmU3ZWM3YjU1OWVkNWJhNmQ5YjZlNTUxMGZiYjA3ZWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfB6GXTWN+Q0aB7ksct3mPu2AVLO GKVZrChYHaAWbBm8cN0NgEgpHqae6O84sz9VcJADTsZTJNo+Te/VEXzq6p9lyAi4 e6E76f4LXKgKUAcr45v6GvVlmhkfyeKudimD6EkIakUiElBEPkOPTGrHzqoQcVuY 0gLOb52DiacZKrGGguCTwxTQLTNFHzdCgUNXOzfOW5NMsm5tcJ6dkTKQzjlTJPAP KKS4ZxEMovDmiHZEPOxt1xCcCgFbsFrGdoWOvc0C3j52y6WkEuPUUqv8PfGvgM2i dlI4hWWpm9EnE6XP5XaEM3OWnjddp+wTLCxm7N/mScM8AY7k2M/rf6B0zwIDAQAB o4ICbTCCAmkwHQYDVR0OBBYEFM+Xhi/n7HtVntW6bZtuVRD7sH7aMB8GA1UdIwQY MBaAFBd4z8CaNjpzzI3aNiosnoIj19rWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjNqUHdKbzJPblBNamRvMktpeWVnaVBYMnRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wOTAxMmYtYjRmNi00ZGY3LWI1NjIt MDEwY2YyZGQ0MGFmLzEvejVlR0wtZnNlMVdlMWJwdG0yNVZFUHV3ZnRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8wOTAxMmYtYjRmNi00ZGY3LWI1NjItMDEwY2YyZGQ0MGFm LzEvRjNqUHdKbzJPblBNamRvMktpeWVnaVBYMnRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwQgQCAAEwPAMEAJEOggME BJNLkAMEA5lcQAMEAJlcfAMEBJlcoAMEAp1hTAMEA520wAMEA57cQAMEArkbtAME ArlKQDArBAIAAjAlMBADBQYqBDtAAwcAKgQ7QAACAwcAKgQ7QQAAAwgAKgQ7QgAA ADANBgkqhkiG9w0BAQsFAAOCAQEAeHvNlNm/d4HmNUENuVw6cfoCJbstSWxvJtTe 4e/gUwTydrT1EjokHlTuj/CRja95pB8lG7zzO05DV1Z/G6JqzFtdc6empc8scuM9 YgsCfvNQ0lllCA9nhU7vlNOcIngaDuJtzS1i1V99NCv0fYrtYE7928UZ6a59MOPl 2KN9rKpWEItfWL68E3MyVK4gkOyl0j+ai6BDM3tR/Yedk1wGvFq1s1tPodAfwPAU RdLCELnyEK4BGbydyf/f/eczgP2eSgYUZawrPx6JTFZskAuRltArZ3ZGEIn0IJvC kUbDGVrALw6MTlZdus6ECgrsGWrs/4psA4CbSqN1oFotp9MosA== -----END CERTIFICATE-----Generated at Mon Jan 19 17:52:27 2026 by rpki-client