This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/5WVKFC0tIs3qECrATtHYfjSRy9U.roa File: 5WVKFC0tIs3qECrATtHYfjSRy9U.roa (raw, json) Hash identifier: 0laLmepgzK3PsoUCQzvdtjbDgKkvW1Qb5dCLcjPTJAs= Subject key identifier: E5:65:4A:14:2D:2D:22:CD:EA:10:2A:C0:4E:D1:D8:7E:34:91:CB:D5 Certificate issuer: /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96 Certificate serial: 019C281D3BA2006C684A6D9EBBA2941C39B4 Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/5WVKFC0tIs3qECrATtHYfjSRy9U.roa Signing time: Wed 04 Feb 2026 10:05:30 +0000 ROA not before: Wed 04 Feb 2026 10:05:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47377 IP address blocks: 62.88.0.0/17 maxlen: 21 62.88.0.0/19 maxlen: 19 62.88.32.0/19 maxlen: 19 62.88.80.0/21 maxlen: 21 85.10.64.0/18 maxlen: 24 91.86.0.0/15 maxlen: 20 91.86.0.0/16 maxlen: 16 91.87.0.0/19 maxlen: 19 91.87.32.0/19 maxlen: 19 91.87.64.0/19 maxlen: 19 91.87.96.0/19 maxlen: 19 91.87.128.0/19 maxlen: 19 91.87.160.0/19 maxlen: 19 94.104.0.0/13 maxlen: 23 94.104.0.0/24 maxlen: 24 94.104.16.0/23 maxlen: 23 94.104.17.0/24 maxlen: 24 94.104.24.0/21 maxlen: 21 94.104.32.0/19 maxlen: 19 94.104.64.0/19 maxlen: 19 94.104.96.0/19 maxlen: 19 94.104.128.0/21 maxlen: 21 94.104.144.0/20 maxlen: 20 94.104.160.0/19 maxlen: 19 94.104.192.0/19 maxlen: 19 94.104.240.0/21 maxlen: 21 94.104.248.0/22 maxlen: 22 94.104.252.0/22 maxlen: 22 94.105.48.0/20 maxlen: 20 94.105.64.0/19 maxlen: 19 94.106.128.0/17 maxlen: 17 94.107.0.0/17 maxlen: 17 94.107.128.0/18 maxlen: 18 94.107.192.0/18 maxlen: 18 94.107.246.0/24 maxlen: 24 94.110.0.0/19 maxlen: 19 94.110.32.0/19 maxlen: 19 94.110.64.0/19 maxlen: 19 94.110.96.0/19 maxlen: 19 94.110.128.0/19 maxlen: 19 94.110.160.0/19 maxlen: 19 94.110.192.0/19 maxlen: 19 94.110.224.0/19 maxlen: 19 94.111.0.0/19 maxlen: 19 94.111.32.0/19 maxlen: 19 94.111.64.0/19 maxlen: 19 94.111.96.0/19 maxlen: 19 94.111.128.0/19 maxlen: 19 94.111.160.0/19 maxlen: 19 94.111.192.0/19 maxlen: 19 94.111.224.0/19 maxlen: 19 178.50.0.0/15 maxlen: 19 178.51.0.0/16 maxlen: 16 178.51.0.0/17 maxlen: 17 178.51.128.0/17 maxlen: 17 185.65.72.0/22 maxlen: 24 212.53.0.0/20 maxlen: 24 212.65.32.0/19 maxlen: 19 212.87.96.0/19 maxlen: 24 212.224.128.0/17 maxlen: 19 2a00:1868::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:28:1d:3b:a2:00:6c:68:4a:6d:9e:bb:a2:94:1c:39:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96 Validity Not Before: Feb 4 10:05:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5654a142d2d22cdea102ac04ed1d87e3491cbd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:42:22:da:11:4a:8c:e2:94:e0:aa:c9:0a:ad: c3:ec:b2:49:1b:1e:0a:89:98:0f:03:76:1c:29:07: a7:b0:b2:1c:96:cf:24:56:70:b5:9b:da:4d:e4:3e: bf:d9:03:9d:87:14:78:3f:07:14:7c:dd:9f:16:dc: 49:4f:81:c3:b1:bc:2e:a7:a8:bb:7d:0e:f2:e0:9f: 2c:e3:39:14:8c:c3:1f:38:37:6c:21:20:6f:ab:98: b8:ff:61:39:8a:b7:b1:77:e6:9a:a3:91:2e:96:73: 6b:2e:67:be:b4:75:52:37:2c:56:e1:8d:cd:96:15: 9f:f6:1d:a5:ed:eb:73:42:5b:c0:9e:e3:a1:e1:9d: e9:2d:51:30:8d:6d:13:5c:40:52:00:4b:a1:d4:a4: 25:ea:1d:f2:d5:08:0f:f3:e4:af:4a:ed:47:08:c9: dd:c2:a7:cd:2f:dd:92:da:bc:78:fd:fd:b4:08:03: 28:38:2a:69:b4:36:f5:d4:26:ec:d6:6a:7e:6e:d5: 30:ca:cd:99:e4:ce:fc:54:cd:49:c8:67:8e:82:97: 6f:4e:20:7b:43:39:ca:16:aa:4a:4e:76:03:3f:b7: 54:ec:82:63:36:d3:2a:fd:97:35:72:19:26:9b:1a: 38:64:1f:8e:e1:be:e4:7a:2b:c6:eb:dd:29:e5:bc: 5c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:65:4A:14:2D:2D:22:CD:EA:10:2A:C0:4E:D1:D8:7E:34:91:CB:D5 X509v3 Authority Key Identifier: keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/5WVKFC0tIs3qECrATtHYfjSRy9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.88.0.0/17 85.10.64.0/18 91.86.0.0/15 94.104.0.0/13 178.50.0.0/15 185.65.72.0/22 212.53.0.0/20 212.65.32.0/19 212.87.96.0/19 212.224.128.0/17 IPv6: 2a00:1868::/32 Signature Algorithm: sha256WithRSAEncryption 17:bc:58:8d:ae:a1:be:30:fc:bf:fe:fe:96:7e:2c:3f:29:cc: 80:65:57:de:27:af:fe:29:0b:86:65:a4:c5:ed:39:62:7b:db: a4:fb:d2:94:fb:ed:71:ab:2a:5a:c8:6f:71:14:46:ea:72:15: 69:ea:6e:7f:ea:5d:a0:e4:bb:dc:3a:4a:1c:9c:b2:0b:41:92: 20:03:b2:0a:21:74:8e:d0:5b:e2:7c:2c:7b:71:14:9f:8e:49: 94:a2:4e:cb:f1:b4:d2:95:4b:3c:ff:9b:1f:ce:cb:27:d3:cf: 2e:0c:e1:00:fe:88:9d:2d:df:5e:3f:10:b6:0c:4d:3f:2d:b8: b4:1b:21:65:81:e9:a1:64:30:0c:1b:ab:c6:c5:ca:9d:58:b6: 26:41:9a:65:c7:52:f5:45:eb:98:79:c4:2b:24:0b:42:51:28: 7d:1e:b4:06:2d:9c:b1:cc:84:53:76:99:b8:a8:36:a2:8a:41: 1c:8a:12:c1:54:f1:f0:c0:ea:88:03:82:49:5b:aa:1d:30:c6: c4:64:77:bf:af:c1:df:aa:5e:1e:1a:f3:2d:11:5e:40:31:53: 0b:85:c7:d6:32:5d:93:95:d9:69:bb:40:de:30:d7:8e:c8:c0: 06:fb:1a:e2:13:c3:74:61:bd:98:a9:3e:e3:03:e1:68:45:55: 88:3b:07:11 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZwoHTuiAGxoSm2eu6KUHDm0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkM2JiODQ4OTE2NTFmMjAzOWNkODFiMGI2MDkxMmY3YzBl NWNmOTYwHhcNMjYwMjA0MTAwNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTY1NGExNDJkMmQyMmNkZWExMDJhYzA0ZWQxZDg3ZTM0OTFjYmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkIi2hFKjOKU4KrJCq3D7LJJGx4K iZgPA3YcKQensLIcls8kVnC1m9pN5D6/2QOdhxR4PwcUfN2fFtxJT4HDsbwup6i7 fQ7y4J8s4zkUjMMfODdsISBvq5i4/2E5irexd+aao5EulnNrLme+tHVSNyxW4Y3N lhWf9h2l7etzQlvAnuOh4Z3pLVEwjW0TXEBSAEuh1KQl6h3y1QgP8+SvSu1HCMnd wqfNL92S2rx4/f20CAMoOCpptDb11Cbs1mp+btUwys2Z5M78VM1JyGeOgpdvTiB7 QznKFqpKTnYDP7dU7IJjNtMq/Zc1chkmmxo4ZB+O4b7keivG690p5bxcKQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOVlShQtLSLN6hAqwE7R2H40kcvVMB8GA1UdIwQY MBaAFF07uEiRZR8gOc2BsLYJEvfA5c+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS81ODdmN2UtNjBjYy00MWEwLTg4Njkt NGY4YzYzOGE3MmUxLzEvNVdWS0ZDMHRJczNxRUNyQVR0SFlmalNSeTlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS81ODdmN2UtNjBjYy00MWEwLTg4NjktNGY4YzYzOGE3MmUx LzEvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDA/BAIAATA5AwQHPlgAAwQG VQpAAwMBW1YDAwNeaAMDAbIyAwQCuUFIAwQE1DUAAwQF1EEgAwQF1FdgAwQH1OCA MA0EAgACMAcDBQAqABhoMA0GCSqGSIb3DQEBCwUAA4IBAQAXvFiNrqG+MPy//v6W fiw/KcyAZVfeJ6/+KQuGZaTF7Tlie9uk+9KU++1xqypayG9xFEbqchVp6m5/6l2g 5LvcOkocnLILQZIgA7IKIXSO0FvifCx7cRSfjkmUok7L8bTSlUs8/5sfzssn088u DOEA/oidLd9ePxC2DE0/Lbi0GyFlgemhZDAMG6vGxcqdWLYmQZplx1L1ReuYecQr JAtCUSh9HrQGLZyxzIRTdpm4qDaiikEcihLBVPHwwOqIA4JJW6odMMbEZHe/r8Hf ql4eGvMtEV5AMVMLhcfWMl2Tldlpu0DeMNeOyMAG+xriE8N0Yb2YqT7jA+FoRVWI OwcR -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:49 2026 by rpki-client