This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5qnce2g7MiLGSGomytqXAV36bWs.roa File: 5qnce2g7MiLGSGomytqXAV36bWs.roa (raw, json) Hash identifier: eWS+0Trcgw3ryUAlSJN7vzdgIf1KiNgssmoDbXCNfrs= Subject key identifier: E6:A9:DC:7B:68:3B:32:22:C6:48:6A:26:CA:DA:97:01:5D:FA:6D:6B Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019BBCEEB7221F41C26B6FA2B1E8EF1627DA Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5qnce2g7MiLGSGomytqXAV36bWs.roa Signing time: Wed 14 Jan 2026 14:35:19 +0000 ROA not before: Wed 14 Jan 2026 14:35:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211066 IP address blocks: 5.83.134.0/24 maxlen: 24 5.175.140.0/24 maxlen: 24 5.175.192.0/24 maxlen: 24 5.175.221.0/24 maxlen: 24 5.175.223.0/24 maxlen: 24 87.239.131.0/24 maxlen: 24 87.239.135.0/24 maxlen: 24 89.106.73.0/24 maxlen: 24 89.106.75.0/24 maxlen: 24 89.106.82.0/24 maxlen: 24 89.106.88.0/24 maxlen: 24 89.106.91.0/24 maxlen: 24 89.144.60.0/24 maxlen: 24 89.144.61.0/24 maxlen: 24 94.249.148.0/24 maxlen: 24 94.249.241.0/24 maxlen: 24 94.249.243.0/24 maxlen: 24 94.249.244.0/24 maxlen: 24 94.249.249.0/24 maxlen: 24 94.249.250.0/24 maxlen: 24 94.249.251.0/24 maxlen: 24 94.249.252.0/24 maxlen: 24 94.249.254.0/24 maxlen: 24 95.215.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bc:ee:b7:22:1f:41:c2:6b:6f:a2:b1:e8:ef:16:27:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 14 14:35:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6a9dc7b683b3222c6486a26cada97015dfa6d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:37:19:5a:7e:dd:af:5b:78:ed:0b:cc:c4:1c: ea:fd:07:22:66:5d:96:41:e1:76:5a:fb:a8:a0:12: 0e:01:65:0d:aa:e7:29:4d:cf:53:8e:b9:e8:d6:e0: 68:3e:c5:0b:94:9d:6d:9c:c3:3a:82:c3:61:1c:9b: 72:d7:4b:02:67:34:89:e1:d7:f6:68:8d:df:bd:d8: 0a:bd:99:aa:93:73:17:9a:35:ec:f3:dd:f0:32:22: 34:d4:8d:16:11:87:19:00:73:9e:7b:6a:5d:d7:4b: be:06:50:f7:fa:8a:48:61:3a:74:34:fb:4a:b4:c1: 30:aa:3a:02:66:33:34:47:18:ef:ae:73:eb:48:ef: 74:db:9f:15:60:b3:89:bd:b0:d2:2a:26:08:41:a1: 0c:c0:01:f6:94:2e:e4:8a:86:75:c0:66:b8:b8:61: f0:3a:ad:e0:5f:e1:1b:c6:7a:38:c3:a7:21:ac:b8: 35:b5:bb:f4:97:b2:68:d1:3e:ba:3c:63:04:75:00: ec:ed:ba:f1:d8:85:7d:43:02:9d:e6:ac:ba:9d:0a: 11:51:4b:b6:d9:6b:df:39:dc:f5:d0:58:7b:d6:75: 23:67:8b:49:aa:11:40:23:04:3c:16:d7:77:d4:53: 68:ad:b3:61:6a:21:b2:6d:2f:b7:dd:72:5e:43:de: c9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A9:DC:7B:68:3B:32:22:C6:48:6A:26:CA:DA:97:01:5D:FA:6D:6B X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5qnce2g7MiLGSGomytqXAV36bWs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.134.0/24 5.175.140.0/24 5.175.192.0/24 5.175.221.0/24 5.175.223.0/24 87.239.131.0/24 87.239.135.0/24 89.106.73.0/24 89.106.75.0/24 89.106.82.0/24 89.106.88.0/24 89.106.91.0/24 89.144.60.0/23 94.249.148.0/24 94.249.241.0/24 94.249.243.0-94.249.244.255 94.249.249.0-94.249.252.255 94.249.254.0/24 95.215.32.0/24 Signature Algorithm: sha256WithRSAEncryption ea:1e:c2:4a:93:a9:bb:cb:eb:53:5a:a9:0d:92:55:b6:eb:4b: c1:05:34:ef:dd:d3:03:6a:d6:77:fd:5d:49:ba:6e:de:e0:84: 17:56:84:a8:13:3a:9a:2b:48:72:38:63:14:30:4e:6b:84:89: f4:e4:d3:9e:d1:db:d6:a7:31:de:75:1f:eb:8b:ee:13:bc:72: 2a:39:3b:b6:31:58:75:5a:15:82:8b:ff:4b:f5:fa:2d:a0:83: a6:f3:6d:d7:86:82:58:9e:42:bb:78:25:e4:ec:70:b2:bc:86: 73:14:62:37:04:f2:dd:40:db:85:ba:e5:16:00:bd:1c:1e:37: 08:be:23:50:13:f8:c9:92:50:30:42:87:5d:5c:7e:de:50:a7: 29:6d:ed:4a:2f:87:e7:f7:15:73:ca:22:c6:3b:54:56:17:a4: d0:20:93:e4:a6:98:25:cc:cf:bc:0b:ef:6e:ed:02:0c:8c:bd: de:36:e8:f3:e7:ec:47:16:e4:39:da:16:0c:e0:3b:65:d9:a7: 5e:6b:32:15:e0:ec:f6:51:5e:59:b4:fb:c4:bd:40:bc:f1:6b: 4f:ac:b1:4a:a7:67:de:26:ee:e9:b4:81:a5:06:19:55:ed:65: ca:f2:d3:a2:90:90:1d:c3:95:d1:73:60:e7:56:e9:77:e2:6a: e8:25:7a:2d -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZu87rciH0HCa2+isejvFifaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTE0MTQzNTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmE5ZGM3YjY4M2IzMjIyYzY0ODZhMjZjYWRhOTcwMTVkZmE2ZDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzcZWn7dr1t47QvMxBzq/QciZl2W QeF2WvuooBIOAWUNqucpTc9Tjrno1uBoPsULlJ1tnMM6gsNhHJty10sCZzSJ4df2 aI3fvdgKvZmqk3MXmjXs893wMiI01I0WEYcZAHOee2pd10u+BlD3+opIYTp0NPtK tMEwqjoCZjM0RxjvrnPrSO90258VYLOJvbDSKiYIQaEMwAH2lC7kioZ1wGa4uGHw Oq3gX+Ebxno4w6chrLg1tbv0l7Jo0T66PGMEdQDs7brx2IV9QwKd5qy6nQoRUUu2 2WvfOdz10Fh71nUjZ4tJqhFAIwQ8Ftd31FNorbNhaiGybS+33XJeQ97J0wIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFOap3HtoOzIixkhqJsralwFd+m1rMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvNXFuY2UyZzdNaUxHU0dvbXl0cVhBVjM2YldzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGfBggrBgEFBQcBBwEB/wSBjzCBjDCBiQQCAAEwgYIDBAAF U4YDBAAFr4wDBAAFr8ADBAAFr90DBAAFr98DBABX74MDBABX74cDBABZakkDBABZ aksDBABZalIDBABZalgDBABZalsDBAFZkDwDBABe+ZQDBABe+fEwDAMEAF758wME AF759DAMAwQAXvn5AwQAXvn8AwQAXvn+AwQAX9cgMA0GCSqGSIb3DQEBCwUAA4IB AQDqHsJKk6m7y+tTWqkNklW260vBBTTv3dMDatZ3/V1Jum7e4IQXVoSoEzqaK0hy OGMUME5rhIn05NOe0dvWpzHedR/ri+4TvHIqOTu2MVh1WhWCi/9L9fotoIOm823X hoJYnkK7eCXk7HCyvIZzFGI3BPLdQNuFuuUWAL0cHjcIviNQE/jJklAwQoddXH7e UKcpbe1KL4fn9xVzyiLGO1RWF6TQIJPkppglzM+8C+9u7QIMjL3eNujz5+xHFuQ5 2hYM4Dtl2adeazIV4Oz2UV5ZtPvEvUC88WtPrLFKp2feJu7ptIGlBhlV7WXK8tOi kJAdw5XRc2DnVul34mroJXot -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:28 2026 by rpki-client