This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/5Ynf9YqktmKR-orF8FtUHcdGchw.roa File: 5Ynf9YqktmKR-orF8FtUHcdGchw.roa (raw, json) Hash identifier: crPWPWSejx4m85djabJ2KREpnzZlWk7gjNkV+VAGKF4= Subject key identifier: E5:89:DF:F5:8A:A4:B6:62:91:FA:8A:C5:F0:5B:54:1D:C7:46:72:1C Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA413A5500D90C540BADF97F48ACB13 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/5Ynf9YqktmKR-orF8FtUHcdGchw.roa Signing time: Thu 01 Jan 2026 22:18:29 +0000 ROA not before: Thu 01 Jan 2026 22:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207569 IP address blocks: 5.180.136.0/24 maxlen: 24 5.180.137.0/24 maxlen: 24 5.252.116.0/24 maxlen: 24 45.9.74.0/24 maxlen: 24 45.89.64.0/24 maxlen: 24 45.133.245.0/24 maxlen: 24 45.133.246.0/24 maxlen: 24 46.17.106.0/24 maxlen: 24 85.209.0.0/24 maxlen: 24 95.214.8.0/24 maxlen: 24 139.28.220.0/24 maxlen: 24 139.28.221.0/24 maxlen: 24 185.17.2.0/24 maxlen: 24 185.58.207.0/24 maxlen: 24 185.94.167.0/24 maxlen: 24 185.104.250.0/24 maxlen: 24 185.105.118.0/24 maxlen: 24 185.112.83.0/24 maxlen: 24 185.125.228.0/24 maxlen: 24 185.125.230.0/24 maxlen: 24 185.125.231.0/24 maxlen: 24 185.188.181.0/24 maxlen: 24 185.229.65.0/24 maxlen: 24 185.229.66.0/24 maxlen: 24 193.109.84.0/24 maxlen: 24 193.124.180.0/24 maxlen: 24 193.124.181.0/24 maxlen: 24 194.53.54.0/24 maxlen: 24 194.67.200.0/24 maxlen: 24 195.66.87.0/24 maxlen: 24 2a0a:9300:1::/48 maxlen: 48 2a0a:9300:aaaa::/48 maxlen: 48 2a0b:da00::/32 maxlen: 32 2a0b:da01::/32 maxlen: 32 2a0b:da02::/32 maxlen: 32 2a0b:da03::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:13:a5:50:0d:90:c5:40:ba:df:97:f4:8a:cb:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e589dff58aa4b66291fa8ac5f05b541dc746721c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ad:8f:3c:29:21:bd:ef:94:f7:bd:3d:9e:de: eb:21:41:31:3c:b1:ae:3e:3c:6a:23:08:cd:94:c5: 14:9e:15:b1:0e:7b:35:d2:f6:f2:78:ac:1a:86:bf: e1:4b:7f:e3:ef:6b:44:74:0e:b5:1f:4f:5a:89:25: cc:6f:1d:08:aa:52:33:e8:98:f3:b8:a7:97:10:80: 63:53:b7:88:89:e5:c1:87:1a:f5:15:c4:6e:d7:5d: b7:7b:a7:31:0d:eb:16:8a:3a:f1:37:aa:87:b6:45: 04:4c:cc:11:da:57:ee:6e:22:45:0b:da:4d:6a:c7: 89:1e:6c:60:2b:69:8d:6e:d5:4f:2a:54:cf:89:ed: e8:62:f3:3e:c0:36:b9:4e:e7:9c:96:dc:a5:d9:0f: 74:44:a4:39:c3:b1:ab:f2:f1:dc:78:2a:00:2b:9e: 04:46:79:1e:9b:59:9b:1e:c4:c6:61:24:7a:a8:54: 01:a7:86:15:25:3e:d7:87:b9:f7:6f:8d:55:60:2d: 26:6c:59:bd:31:0d:60:63:63:25:fa:e3:af:fd:48: 48:39:aa:21:55:01:d8:ab:c5:70:ad:e6:db:e2:b2: 6b:e7:97:71:92:a8:4b:f0:b2:1e:aa:42:7c:92:b4: e0:11:26:2d:2c:44:a4:cd:30:a3:40:09:92:23:d3: e9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:89:DF:F5:8A:A4:B6:62:91:FA:8A:C5:F0:5B:54:1D:C7:46:72:1C X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/5Ynf9YqktmKR-orF8FtUHcdGchw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.136.0/23 5.252.116.0/24 45.9.74.0/24 45.89.64.0/24 45.133.245.0-45.133.246.255 46.17.106.0/24 85.209.0.0/24 95.214.8.0/24 139.28.220.0/23 185.17.2.0/24 185.58.207.0/24 185.94.167.0/24 185.104.250.0/24 185.105.118.0/24 185.112.83.0/24 185.125.228.0/24 185.125.230.0/23 185.188.181.0/24 185.229.65.0-185.229.66.255 193.109.84.0/24 193.124.180.0/23 194.53.54.0/24 194.67.200.0/24 195.66.87.0/24 IPv6: 2a0a:9300:1::/48 2a0a:9300:aaaa::/48 2a0b:da00::/30 Signature Algorithm: sha256WithRSAEncryption 11:2d:41:f1:cc:99:ef:c3:0c:1b:0e:ef:12:f6:47:d4:b7:9d: a6:c8:de:22:3b:f0:4a:ae:93:fb:71:c1:2b:e4:b1:9d:75:60: b9:46:7f:22:e3:8e:1b:49:d0:42:e4:f0:78:c7:9e:fb:74:8a: e7:aa:c7:05:6d:36:cb:0e:fc:ad:6d:f5:b3:97:24:4c:0d:fc: 2f:dd:dd:14:23:d1:55:ec:0b:0a:70:ad:b3:99:93:18:30:bd: b2:ce:7a:88:d1:07:44:10:c1:2a:8e:e9:95:98:d7:ff:10:07: e5:4e:ca:10:95:9c:49:16:a3:1f:68:b5:5c:e1:2b:d6:b9:14: 4d:6e:a0:1b:f2:67:06:df:ba:ea:73:5d:c6:5a:84:8c:a2:38: e6:3f:88:d0:20:5e:34:ba:6c:6b:34:05:d4:32:0d:ca:67:dc: fa:53:af:ee:a5:a2:c2:11:8a:40:4d:35:af:09:77:16:04:d7: 85:2f:62:47:93:c3:e1:d1:57:8f:86:a0:41:03:a3:74:12:86: 91:d6:60:b3:c1:43:09:a2:ff:48:3b:f5:c2:5a:b6:11:0c:a4: d6:12:16:94:f8:98:93:38:85:8e:95:93:51:63:09:dd:0b:a1: 18:72:83:c1:b2:08:59:3a:2d:e3:c5:3e:80:8b:8f:2d:94:33: f0:9d:d7:b3 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZt7pBOlUA2QxUC635f0issTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTg5ZGZmNThhYTRiNjYyOTFmYThhYzVmMDViNTQxZGM3NDY3MjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK2PPCkhve+U9709nt7rIUExPLGu PjxqIwjNlMUUnhWxDns10vbyeKwahr/hS3/j72tEdA61H09aiSXMbx0IqlIz6Jjz uKeXEIBjU7eIieXBhxr1FcRu1123e6cxDesWijrxN6qHtkUETMwR2lfubiJFC9pN aseJHmxgK2mNbtVPKlTPie3oYvM+wDa5Tuecltyl2Q90RKQ5w7Gr8vHceCoAK54E Rnkem1mbHsTGYSR6qFQBp4YVJT7Xh7n3b41VYC0mbFm9MQ1gY2Ml+uOv/UhIOaoh VQHYq8Vwrebb4rJr55dxkqhL8LIeqkJ8krTgESYtLESkzTCjQAmSI9Pp9QIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFOWJ3/WKpLZikfqKxfBbVB3HRnIcMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvNVluZjlZcWt0bUtSLW9yRjhGdFVIY2RHY2h3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHeBggrBgEFBQcBBwEB/wSBzjCByzCBpwQCAAEwgaADBAEF tIgDBAAF/HQDBAAtCUoDBAAtWUAwDAMEAC2F9QMEAC2F9gMEAC4RagMEAFXRAAME AF/WCAMEAYsc3AMEALkRAgMEALk6zwMEALlepwMEALlo+gMEALlpdgMEALlwUwME ALl95AMEAbl95gMEALm8tTAMAwQAueVBAwQAueVCAwQAwW1UAwQBwXy0AwQAwjU2 AwQAwkPIAwQAw0JXMB8EAgACMBkDBwAqCpMAAAEDBwAqCpMAqqoDBQIqC9oAMA0G CSqGSIb3DQEBCwUAA4IBAQARLUHxzJnvwwwbDu8S9kfUt52myN4iO/BKrpP7ccEr 5LGddWC5Rn8i444bSdBC5PB4x577dIrnqscFbTbLDvytbfWzlyRMDfwv3d0UI9FV 7AsKcK2zmZMYML2yznqI0QdEEMEqjumVmNf/EAflTsoQlZxJFqMfaLVc4SvWuRRN bqAb8mcG37rqc13GWoSMojjmP4jQIF40umxrNAXUMg3KZ9z6U6/upaLCEYpATTWv CXcWBNeFL2JHk8Ph0VePhqBBA6N0EoaR1mCzwUMJov9IO/XCWrYRDKTWEhaU+JiT OIWOlZNRYwndC6EYcoPBsghZOi3jxT6Ai48tlDPwndez -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:06 2026 by rpki-client