This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/5MQ7t76xz5o1VUyW1dJisXNk5Jo.roa File: 5MQ7t76xz5o1VUyW1dJisXNk5Jo.roa (raw, json) Hash identifier: FT8iwKYv0kNgK5WeEIsGI02McKnrcUBiN3g9glXLUYs= Subject key identifier: E4:C4:3B:B7:BE:B1:CF:9A:35:55:4C:96:D5:D2:62:B1:73:64:E4:9A Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06 Certificate serial: 019B7E37D136F7733C8651A66DCC5ABAD504 Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/5MQ7t76xz5o1VUyW1dJisXNk5Jo.roa Signing time: Fri 02 Jan 2026 10:19:05 +0000 ROA not before: Fri 02 Jan 2026 10:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34397 IP address blocks: 79.172.128.0/18 maxlen: 18 85.129.128.0/17 maxlen: 17 85.129.164.0/22 maxlen: 22 88.213.0.0/18 maxlen: 18 88.213.6.0/24 maxlen: 24 88.213.64.0/18 maxlen: 18 88.213.64.0/21 maxlen: 21 88.213.64.0/22 maxlen: 22 88.213.72.0/21 maxlen: 21 88.213.78.0/24 maxlen: 24 88.213.80.0/20 maxlen: 20 88.213.80.0/22 maxlen: 22 88.213.92.0/22 maxlen: 22 88.213.92.0/23 maxlen: 23 88.213.96.0/22 maxlen: 22 88.213.126.0/23 maxlen: 23 89.4.0.0/15 maxlen: 15 89.5.220.0/23 maxlen: 23 89.5.220.0/24 maxlen: 24 93.98.0.0/16 maxlen: 16 93.98.127.0/24 maxlen: 24 212.71.32.0/19 maxlen: 19 212.71.32.0/24 maxlen: 24 212.71.33.0/24 maxlen: 24 212.71.35.0/24 maxlen: 24 212.71.37.0/24 maxlen: 24 212.71.41.0/24 maxlen: 24 212.71.42.0/24 maxlen: 24 212.71.51.0/24 maxlen: 24 212.71.53.0/24 maxlen: 24 212.107.96.0/19 maxlen: 19 212.107.97.0/24 maxlen: 24 212.107.99.0/24 maxlen: 24 212.107.103.0/24 maxlen: 24 212.107.105.0/24 maxlen: 24 212.107.106.0/24 maxlen: 24 212.118.96.0/19 maxlen: 19 212.118.100.0/24 maxlen: 24 212.118.102.0/24 maxlen: 24 212.118.106.0/24 maxlen: 24 212.118.107.0/24 maxlen: 24 212.118.108.0/22 maxlen: 22 212.118.115.0/24 maxlen: 24 212.118.117.0/24 maxlen: 24 212.118.119.0/24 maxlen: 24 212.118.122.0/24 maxlen: 24 212.118.124.0/24 maxlen: 24 212.119.64.0/20 maxlen: 20 212.119.64.0/24 maxlen: 24 212.119.69.0/24 maxlen: 24 212.119.74.0/24 maxlen: 24 212.119.80.0/21 maxlen: 21 212.119.81.0/24 maxlen: 24 212.119.82.0/24 maxlen: 24 212.119.88.0/22 maxlen: 22 212.119.92.0/23 maxlen: 23 212.119.92.0/24 maxlen: 24 212.119.93.0/24 maxlen: 24 213.181.160.0/19 maxlen: 19 213.181.160.0/23 maxlen: 23 213.181.160.0/24 maxlen: 24 213.181.161.0/24 maxlen: 24 213.181.163.0/24 maxlen: 24 213.181.166.0/24 maxlen: 24 213.181.190.0/24 maxlen: 24 213.210.192.0/18 maxlen: 18 213.210.195.0/24 maxlen: 24 213.210.196.0/24 maxlen: 24 213.210.216.0/24 maxlen: 24 213.210.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:d1:36:f7:73:3c:86:51:a6:6d:cc:5a:ba:d5:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06 Validity Not Before: Jan 2 10:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4c43bb7beb1cf9a35554c96d5d262b17364e49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0b:ac:b9:0c:ef:96:ba:92:e1:e3:e7:4a:35: cb:37:ae:65:6c:bd:91:76:ba:e4:e9:4a:c3:40:b1: d9:6c:bc:7b:aa:ce:db:8f:01:0d:87:23:1e:15:9e: b5:91:ca:49:57:4e:86:95:78:14:8e:25:89:02:7a: dc:2f:ac:94:b6:59:18:e7:b5:35:f3:f3:60:96:53: ba:9b:bd:d7:8d:04:ef:d2:77:d0:06:f8:1f:d0:dd: 98:9f:d2:d5:af:f2:c5:da:8f:03:57:5b:3a:0b:4f: 23:14:49:97:24:fb:c7:f1:b1:a8:2b:22:77:ab:d0: fd:16:fb:d2:ba:4d:b0:81:a7:22:70:9f:2f:2b:88: fc:17:59:58:ed:a5:9b:c3:a8:bf:65:c3:d1:d8:3c: 5b:80:6b:f6:91:72:34:1f:b6:bd:c6:14:c3:ca:e4: 7c:6e:0e:fe:04:ef:eb:71:41:78:08:96:08:ed:7e: 01:da:c8:92:f8:72:0c:c5:28:2e:ab:cf:d2:61:18: 9e:5c:b1:70:6e:16:18:76:5f:8d:70:bf:e7:70:f1: d1:99:69:a9:62:87:4b:6f:ee:ab:ed:bd:45:7e:24: b9:4d:51:ee:89:78:f6:91:9b:79:5f:f3:c7:f5:1c: af:40:d2:48:33:0b:a5:57:f6:20:eb:93:83:04:89: 4f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C4:3B:B7:BE:B1:CF:9A:35:55:4C:96:D5:D2:62:B1:73:64:E4:9A X509v3 Authority Key Identifier: keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/5MQ7t76xz5o1VUyW1dJisXNk5Jo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.128.0/18 85.129.128.0/17 88.213.0.0/17 89.4.0.0/15 93.98.0.0/16 212.71.32.0/19 212.107.96.0/19 212.118.96.0/19 212.119.64.0-212.119.93.255 213.181.160.0/19 213.210.192.0/18 Signature Algorithm: sha256WithRSAEncryption 2a:a7:58:0b:d3:56:0c:e6:e2:18:50:8f:ee:a8:b4:a4:b2:e0: 81:66:c1:f8:03:00:85:df:58:3b:0a:af:33:69:2a:66:1a:95: b5:f0:7e:86:05:14:1b:e4:c4:33:70:e8:71:b1:47:84:5c:65: cd:84:1c:dc:9e:b4:02:cd:13:ce:59:44:cc:3b:1b:27:ca:1b: 38:a8:7a:f2:b3:54:5f:64:aa:05:c2:77:af:6f:b8:6a:15:d9: a8:c0:35:c6:2a:cc:fa:3a:7e:f1:cd:8c:19:d6:2a:a1:bc:5e: 5a:5c:87:e5:c3:4e:70:f6:3e:17:83:05:e2:64:4c:d5:9b:64: 1c:06:01:95:91:86:6a:32:8c:79:b7:55:24:3d:24:78:0e:f7: 39:89:64:3c:ac:1c:95:7b:95:1c:a5:da:86:bf:14:4a:dc:66: 47:85:97:e6:af:89:52:f1:f0:7a:38:35:72:d8:1a:87:fa:05: 1c:ba:43:89:e6:74:0b:f0:7c:e3:4e:c3:a3:c2:e7:ee:6b:4d: a8:da:9b:80:16:38:fd:4c:ce:f5:e0:d3:be:62:50:8d:cd:34: a9:be:87:4c:ad:f4:d3:6b:56:5c:56:67:d7:4e:bd:60:90:6d: 9e:ad:62:8a:71:1a:d9:d9:a7:9c:9c:7b:7f:29:bc:e2:dc:92: f1:fe:1c:c6 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt+N9E293M8hlGmbcxautUEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjY2RlY2ExNzFlNDIyYzc5YzkzOGMyNzMyYTkwZDQ4YThj NTNjMDYwHhcNMjYwMTAyMTAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGM0M2JiN2JlYjFjZjlhMzU1NTRjOTZkNWQyNjJiMTczNjRlNDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwusuQzvlrqS4ePnSjXLN65lbL2R drrk6UrDQLHZbLx7qs7bjwENhyMeFZ61kcpJV06GlXgUjiWJAnrcL6yUtlkY57U1 8/NgllO6m73XjQTv0nfQBvgf0N2Yn9LVr/LF2o8DV1s6C08jFEmXJPvH8bGoKyJ3 q9D9FvvSuk2wgacicJ8vK4j8F1lY7aWbw6i/ZcPR2DxbgGv2kXI0H7a9xhTDyuR8 bg7+BO/rcUF4CJYI7X4B2siS+HIMxSguq8/SYRieXLFwbhYYdl+NcL/ncPHRmWmp YodLb+6r7b1FfiS5TVHuiXj2kZt5X/PH9RyvQNJIMwulV/Yg65ODBIlP5wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOTEO7e+sc+aNVVMltXSYrFzZOSaMB8GA1UdIwQY MBaAFFzN7KFx5CLHnJOMJzKpDUioxTwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9iOGY1ZTYtYzk1MS00ZGRiLWI0ZjUt YTg4MWVjODIyOGI1LzEvNU1RN3Q3Nnh6NW8xVlV5VzFkSmlzWE5rNUpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9iOGY1ZTYtYzk1MS00ZGRiLWI0ZjUtYTg4MWVjODIyOGI1 LzEvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQGT6yAAwQH VYGAAwQHWNUAAwMBWQQDAwBdYgMEBdRHIAMEBdRrYAMEBdR2YDAMAwQG1HdAAwQB 1HdcAwQF1bWgAwQG1dLAMA0GCSqGSIb3DQEBCwUAA4IBAQAqp1gL01YM5uIYUI/u qLSksuCBZsH4AwCF31g7Cq8zaSpmGpW18H6GBRQb5MQzcOhxsUeEXGXNhBzcnrQC zRPOWUTMOxsnyhs4qHrys1RfZKoFwnevb7hqFdmowDXGKsz6On7xzYwZ1iqhvF5a XIflw05w9j4XgwXiZEzVm2QcBgGVkYZqMox5t1UkPSR4Dvc5iWQ8rByVe5UcpdqG vxRK3GZHhZfmr4lS8fB6ODVy2BqH+gUcukOJ5nQL8HzjTsOjwufua02o2puAFjj9 TM714NO+YlCNzTSpvodMrfTTa1ZcVmfXTr1gkG2erWKKcRrZ2aecnHt/Kbzi3JLx /hzG -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:42 2026 by rpki-client