This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/EhB5W-KfEwT0NkOmIwksEobFf8s.roa File: EhB5W-KfEwT0NkOmIwksEobFf8s.roa (raw, json) Hash identifier: EFH6duVwDra37mgW3ZdzFLq6hzVDIYr0D81IscrZcCw= Subject key identifier: 12:10:79:5B:E2:9F:13:04:F4:36:43:A6:23:09:2C:12:86:C5:7F:CB Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06 Certificate serial: 019C3C05B5DE6EE50E71406DD9D178CEF0B6 Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/EhB5W-KfEwT0NkOmIwksEobFf8s.roa Signing time: Sun 08 Feb 2026 06:52:13 +0000 ROA not before: Sun 08 Feb 2026 06:52:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34397 IP address blocks: 79.172.128.0/18 maxlen: 18 85.129.128.0/17 maxlen: 17 85.129.164.0/22 maxlen: 22 88.213.0.0/18 maxlen: 18 88.213.6.0/24 maxlen: 24 88.213.64.0/18 maxlen: 18 88.213.64.0/21 maxlen: 21 88.213.64.0/22 maxlen: 22 88.213.72.0/21 maxlen: 21 88.213.78.0/24 maxlen: 24 88.213.80.0/20 maxlen: 20 88.213.80.0/22 maxlen: 22 88.213.92.0/22 maxlen: 22 88.213.92.0/23 maxlen: 23 88.213.96.0/22 maxlen: 22 88.213.100.0/22 maxlen: 22 88.213.126.0/23 maxlen: 23 89.4.0.0/15 maxlen: 15 89.5.220.0/23 maxlen: 23 89.5.220.0/24 maxlen: 24 93.98.0.0/16 maxlen: 16 93.98.127.0/24 maxlen: 24 212.71.32.0/19 maxlen: 19 212.71.32.0/24 maxlen: 24 212.71.33.0/24 maxlen: 24 212.71.35.0/24 maxlen: 24 212.71.37.0/24 maxlen: 24 212.71.41.0/24 maxlen: 24 212.71.42.0/24 maxlen: 24 212.71.51.0/24 maxlen: 24 212.71.53.0/24 maxlen: 24 212.107.96.0/19 maxlen: 19 212.107.97.0/24 maxlen: 24 212.107.99.0/24 maxlen: 24 212.107.103.0/24 maxlen: 24 212.107.105.0/24 maxlen: 24 212.107.106.0/24 maxlen: 24 212.118.96.0/19 maxlen: 19 212.118.100.0/24 maxlen: 24 212.118.102.0/24 maxlen: 24 212.118.106.0/24 maxlen: 24 212.118.107.0/24 maxlen: 24 212.118.108.0/22 maxlen: 22 212.118.115.0/24 maxlen: 24 212.118.117.0/24 maxlen: 24 212.118.119.0/24 maxlen: 24 212.118.122.0/24 maxlen: 24 212.118.124.0/24 maxlen: 24 212.119.64.0/20 maxlen: 20 212.119.64.0/24 maxlen: 24 212.119.69.0/24 maxlen: 24 212.119.74.0/24 maxlen: 24 212.119.80.0/21 maxlen: 21 212.119.81.0/24 maxlen: 24 212.119.82.0/24 maxlen: 24 212.119.88.0/22 maxlen: 22 212.119.92.0/23 maxlen: 23 212.119.92.0/24 maxlen: 24 212.119.93.0/24 maxlen: 24 213.181.160.0/19 maxlen: 19 213.181.160.0/23 maxlen: 23 213.181.160.0/24 maxlen: 24 213.181.161.0/24 maxlen: 24 213.181.163.0/24 maxlen: 24 213.181.166.0/24 maxlen: 24 213.181.190.0/24 maxlen: 24 213.210.192.0/18 maxlen: 18 213.210.195.0/24 maxlen: 24 213.210.196.0/24 maxlen: 24 213.210.216.0/24 maxlen: 24 213.210.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:3c:05:b5:de:6e:e5:0e:71:40:6d:d9:d1:78:ce:f0:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06 Validity Not Before: Feb 8 06:52:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1210795be29f1304f43643a623092c1286c57fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bf:d1:80:0b:b3:bc:1e:c1:4b:f7:c6:20:ca: ee:1b:f1:b9:5a:4f:52:4e:81:99:4d:c8:22:96:65: ae:26:48:f4:73:33:08:77:6e:0f:71:c9:64:95:8c: 8f:47:92:cc:f0:43:5f:18:e2:74:93:29:aa:af:88: 45:00:ef:78:8d:7a:d4:93:b8:15:46:84:14:6e:82: 5c:cd:f2:c6:6d:69:29:4e:27:2b:82:6e:29:7a:4f: b5:2e:65:8f:c8:46:4a:10:4a:f1:c6:2a:dc:66:2d: d3:52:b1:63:18:26:13:de:48:fe:72:60:da:ef:1a: 04:f4:7e:f5:94:52:1d:ae:6f:1f:1c:05:67:2e:d5: b7:a2:2a:e4:9f:15:40:89:4f:a5:1c:bb:80:13:58: 51:d9:6e:b3:38:a5:4c:1a:2d:c4:22:9e:9b:a1:3c: 75:a7:02:6a:c9:10:5c:7b:71:da:8f:81:5a:a4:21: b2:0f:f5:08:b4:3b:e2:65:ce:73:ff:b0:63:de:82: 87:2a:29:80:c5:54:0d:e4:96:43:c9:64:42:93:c7: 50:be:b4:86:5c:e6:cf:4b:06:94:b5:ba:b8:c3:74: 65:b6:82:e9:b2:01:9c:49:3f:15:97:57:b9:cf:f9: 49:75:cf:e9:e8:9a:b8:cd:bf:a6:1c:84:7b:59:04: 96:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:10:79:5B:E2:9F:13:04:F4:36:43:A6:23:09:2C:12:86:C5:7F:CB X509v3 Authority Key Identifier: keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/EhB5W-KfEwT0NkOmIwksEobFf8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.128.0/18 85.129.128.0/17 88.213.0.0/17 89.4.0.0/15 93.98.0.0/16 212.71.32.0/19 212.107.96.0/19 212.118.96.0/19 212.119.64.0-212.119.93.255 213.181.160.0/19 213.210.192.0/18 Signature Algorithm: sha256WithRSAEncryption a6:fb:c3:67:a4:a2:08:d5:db:02:f7:28:7c:cb:68:9c:db:49: 04:0d:57:69:d2:55:ce:6b:5a:a2:ab:1c:6d:cb:75:25:bb:29: e3:bf:30:7f:d0:51:e5:6a:56:df:de:88:71:95:2f:26:11:29: 17:6f:72:ad:46:60:a8:ec:3c:2d:40:75:0f:2f:e7:d4:65:e0: 1e:e2:90:b4:a4:37:cc:b9:e3:fa:50:7b:06:6e:aa:1b:73:36: 7e:ef:5b:ff:d3:ca:39:f3:00:c1:35:44:ae:9a:81:13:f6:6f: 1b:a4:fb:9b:6d:2d:51:23:c8:b1:f0:da:c4:af:1a:28:a6:8a: 88:83:b2:62:6b:41:a4:8c:d0:47:07:5a:12:3c:78:46:8c:7b: dd:bd:66:3b:07:7f:32:ef:e2:03:8d:49:d6:5d:bc:b2:4b:74: 45:62:60:69:34:12:87:68:5d:57:bb:60:f7:e8:32:2b:7f:47: 4a:73:1a:20:9e:70:c4:bd:d8:6a:f5:9c:19:9f:71:3d:1a:78: 28:86:0f:b6:b6:a0:24:0f:95:7a:9a:9b:dc:01:19:d6:42:6c: e8:3e:ee:99:5f:f0:66:2e:61:84:47:de:8f:df:7f:14:65:65: 03:82:e3:94:4c:b9:a7:2d:10:a0:2b:4d:12:61:80:49:3a:c5: de:1f:e2:a3 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZw8BbXebuUOcUBt2dF4zvC2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjY2RlY2ExNzFlNDIyYzc5YzkzOGMyNzMyYTkwZDQ4YThj NTNjMDYwHhcNMjYwMjA4MDY1MjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjEwNzk1YmUyOWYxMzA0ZjQzNjQzYTYyMzA5MmMxMjg2YzU3ZmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL/RgAuzvB7BS/fGIMruG/G5Wk9S ToGZTcgilmWuJkj0czMId24PcclklYyPR5LM8ENfGOJ0kymqr4hFAO94jXrUk7gV RoQUboJczfLGbWkpTicrgm4pek+1LmWPyEZKEErxxircZi3TUrFjGCYT3kj+cmDa 7xoE9H71lFIdrm8fHAVnLtW3oirknxVAiU+lHLuAE1hR2W6zOKVMGi3EIp6boTx1 pwJqyRBce3Haj4FapCGyD/UItDviZc5z/7Bj3oKHKimAxVQN5JZDyWRCk8dQvrSG XObPSwaUtbq4w3RltoLpsgGcST8Vl1e5z/lJdc/p6Jq4zb+mHIR7WQSWMQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBIQeVvinxME9DZDpiMJLBKGxX/LMB8GA1UdIwQY MBaAFFzN7KFx5CLHnJOMJzKpDUioxTwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9iOGY1ZTYtYzk1MS00ZGRiLWI0ZjUt YTg4MWVjODIyOGI1LzEvRWhCNVctS2ZFd1QwTmtPbUl3a3NFb2JGZjhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9iOGY1ZTYtYzk1MS00ZGRiLWI0ZjUtYTg4MWVjODIyOGI1 LzEvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQGT6yAAwQH VYGAAwQHWNUAAwMBWQQDAwBdYgMEBdRHIAMEBdRrYAMEBdR2YDAMAwQG1HdAAwQB 1HdcAwQF1bWgAwQG1dLAMA0GCSqGSIb3DQEBCwUAA4IBAQCm+8NnpKII1dsC9yh8 y2ic20kEDVdp0lXOa1qiqxxty3UluynjvzB/0FHlalbf3ohxlS8mESkXb3KtRmCo 7DwtQHUPL+fUZeAe4pC0pDfMueP6UHsGbqobczZ+71v/08o58wDBNUSumoET9m8b pPubbS1RI8ix8NrErxoopoqIg7Jia0GkjNBHB1oSPHhGjHvdvWY7B38y7+IDjUnW XbyyS3RFYmBpNBKHaF1Xu2D36DIrf0dKcxognnDEvdhq9ZwZn3E9Gngohg+2tqAk D5V6mpvcARnWQmzoPu6ZX/BmLmGER96P338UZWUDguOUTLmnLRCgK00SYYBJOsXe H+Kj -----END CERTIFICATE-----Generated at Tue Feb 10 05:55:08 2026 by rpki-client