This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/7L5BPP_I4boRIzw64f3R8QGBjTI.roa File: 7L5BPP_I4boRIzw64f3R8QGBjTI.roa (raw, json) Hash identifier: YEGMlJCMLOk0ufUf11Ag0zNb2u1vFILU/ZRC5EdC7Fs= Subject key identifier: EC:BE:41:3C:FF:C8:E1:BA:11:23:3C:3A:E1:FD:D1:F1:01:81:8D:32 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37A9955A5D0D080B406CEE3B778BAF Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/7L5BPP_I4boRIzw64f3R8QGBjTI.roa Signing time: Fri 02 Jan 2026 10:18:55 +0000 ROA not before: Fri 02 Jan 2026 10:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 5.180.84.0/22 maxlen: 24 107.150.169.0/24 maxlen: 24 107.150.173.0/24 maxlen: 24 124.198.140.0/22 maxlen: 24 124.198.148.0/22 maxlen: 24 124.198.152.0/21 maxlen: 24 158.173.136.0/22 maxlen: 24 162.218.177.0/24 maxlen: 24 162.218.178.0/24 maxlen: 24 163.47.104.0/22 maxlen: 24 167.160.1.0/24 maxlen: 24 167.160.2.0/24 maxlen: 24 185.192.213.0/24 maxlen: 24 185.192.214.0/24 maxlen: 24 185.203.149.0/24 maxlen: 24 185.203.150.0/24 maxlen: 24 185.212.173.0/24 maxlen: 24 185.212.174.0/24 maxlen: 24 202.49.244.0/22 maxlen: 24 202.50.124.0/22 maxlen: 24 203.188.176.0/22 maxlen: 24 203.188.184.0/22 maxlen: 24 203.188.188.0/24 maxlen: 24 212.32.51.0/24 maxlen: 24 212.32.70.0/24 maxlen: 24 212.32.77.0/24 maxlen: 24 212.32.78.0/23 maxlen: 24 212.56.51.0/24 maxlen: 24 212.56.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:a9:95:5a:5d:0d:08:0b:40:6c:ee:3b:77:8b:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ecbe413cffc8e1ba11233c3ae1fdd1f101818d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c1:38:72:c8:ab:29:66:cf:81:79:f4:6d:27: d2:76:3e:dc:c0:9b:1e:33:af:0d:ee:84:f6:e5:34: 66:8f:f8:3b:56:5f:e7:5e:96:7f:02:f3:a7:d5:97: 6f:4d:6e:a1:f3:e2:f7:5f:c8:6e:96:fc:ae:8d:bb: 15:a4:7e:4e:fb:9c:3b:c8:87:ff:47:37:5b:73:14: 01:b6:42:d5:3d:5d:45:40:d5:d9:fe:b7:33:4c:81: f4:4b:ca:2a:67:64:6e:06:ca:46:98:ff:d2:26:c1: 2d:57:2c:33:66:c3:f6:56:a2:0b:61:9e:ea:4f:d7: a1:f2:3b:17:b5:eb:ed:3e:d3:08:f6:da:ab:cb:fe: 9f:23:cc:1e:83:4c:cc:5c:9c:8d:55:6a:dc:90:d0: 7e:07:9b:a1:ce:de:03:22:31:b2:3e:d2:d8:4b:c1: 52:8b:8d:6c:fc:d9:96:26:82:44:72:73:be:62:c3: 01:75:93:bf:32:c7:9e:77:a1:a1:e6:67:ed:d5:0f: ef:50:07:9c:89:91:3d:9c:69:b3:ab:b1:db:2f:34: 73:99:e5:3f:f1:85:01:c4:94:db:4b:ba:8a:55:db: 6e:e9:62:92:45:54:4f:18:7a:60:bb:77:31:a2:9c: f7:89:59:49:79:63:0a:bc:45:21:b4:56:fa:b7:f0: 80:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BE:41:3C:FF:C8:E1:BA:11:23:3C:3A:E1:FD:D1:F1:01:81:8D:32 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/7L5BPP_I4boRIzw64f3R8QGBjTI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.84.0/22 107.150.169.0/24 107.150.173.0/24 124.198.140.0/22 124.198.148.0-124.198.159.255 158.173.136.0/22 162.218.177.0-162.218.178.255 163.47.104.0/22 167.160.1.0-167.160.2.255 185.192.213.0-185.192.214.255 185.203.149.0-185.203.150.255 185.212.173.0-185.212.174.255 202.49.244.0/22 202.50.124.0/22 203.188.176.0/22 203.188.184.0-203.188.188.255 212.32.51.0/24 212.32.70.0/24 212.32.77.0-212.32.79.255 212.56.51.0/24 212.56.55.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:2d:de:30:5b:1e:01:61:21:09:3d:52:93:6f:d4:76:5a:91: a1:c3:74:77:9a:bd:84:14:24:8b:1d:8b:cc:57:68:91:3e:07: ae:81:a7:e7:4c:7b:d1:8d:cd:8b:cf:33:c8:df:8f:0f:7c:83: a1:56:fe:33:10:54:c1:5a:53:80:e4:3d:12:f0:05:8a:47:1d: a3:76:db:df:77:7c:7f:20:89:6b:6c:0a:08:fc:da:60:79:02: 42:83:7b:ac:23:1b:e0:18:ab:eb:9d:da:b9:8a:66:5d:39:f7: 42:46:ae:2f:b5:08:fd:ff:38:d4:64:36:56:fd:7e:e5:71:92: 10:b2:a4:23:aa:09:2c:47:de:ee:66:68:5b:97:91:42:16:eb: 1e:1c:7e:85:ec:16:85:36:34:d2:ab:f6:d0:63:19:9f:7d:ad: 0a:16:d3:4d:45:ba:3f:ca:59:43:9e:20:dd:9c:a8:36:38:b9: b0:39:d4:fb:26:ea:07:71:9f:e9:28:09:a0:b3:8f:b6:00:a9: 14:de:62:6f:cd:73:70:5f:d9:be:8b:c6:10:b4:c1:54:64:c2: 19:c0:8a:48:5d:65:d1:43:00:40:ab:62:7a:77:ae:f9:aa:b0: d9:f6:52:0d:57:e7:e9:00:d6:9d:df:df:b5:ce:c0:e8:c0:86: 68:bc:c6:1d -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt+N6mVWl0NCAtAbO47d4uvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2JlNDEzY2ZmYzhlMWJhMTEyMzNjM2FlMWZkZDFmMTAxODE4ZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtME4csirKWbPgXn0bSfSdj7cwJse M68N7oT25TRmj/g7Vl/nXpZ/AvOn1ZdvTW6h8+L3X8hulvyujbsVpH5O+5w7yIf/ RzdbcxQBtkLVPV1FQNXZ/rczTIH0S8oqZ2RuBspGmP/SJsEtVywzZsP2VqILYZ7q T9eh8jsXtevtPtMI9tqry/6fI8weg0zMXJyNVWrckNB+B5uhzt4DIjGyPtLYS8FS i41s/NmWJoJEcnO+YsMBdZO/Mseed6Gh5mft1Q/vUAeciZE9nGmzq7HbLzRzmeU/ 8YUBxJTbS7qKVdtu6WKSRVRPGHpgu3cxopz3iVlJeWMKvEUhtFb6t/CAKwIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFOy+QTz/yOG6ESM8OuH90fEBgY0yMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvN0w1QlBQX0k0Ym9SSXp3NjRmM1I4UUdCalRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHbBggrBgEFBQcBBwEB/wSByzCByDCBxQQCAAEwgb4DBAIF tFQDBABrlqkDBABrlq0DBAJ8xowwDAMEAnzGlAMEBXzGgAMEAp6tiDAMAwQAotqx AwQAotqyAwQCoy9oMAwDBACnoAEDBACnoAIwDAMEALnA1QMEALnA1jAMAwQAucuV AwQAucuWMAwDBAC51K0DBAC51K4DBALKMfQDBALKMnwDBALLvLAwDAMEA8u8uAME AMu8vAMEANQgMwMEANQgRjAMAwQA1CBNAwQE1CBAAwQA1DgzAwQA1Dg3MA0GCSqG SIb3DQEBCwUAA4IBAQAsLd4wWx4BYSEJPVKTb9R2WpGhw3R3mr2EFCSLHYvMV2iR PgeugafnTHvRjc2LzzPI348PfIOhVv4zEFTBWlOA5D0S8AWKRx2jdtvfd3x/IIlr bAoI/NpgeQJCg3usIxvgGKvrndq5imZdOfdCRq4vtQj9/zjUZDZW/X7lcZIQsqQj qgksR97uZmhbl5FCFuseHH6F7BaFNjTSq/bQYxmffa0KFtNNRbo/yllDniDdnKg2 OLmwOdT7JuoHcZ/pKAmgs4+2AKkU3mJvzXNwX9m+i8YQtMFUZMIZwIpIXWXRQwBA q2J6d675qrDZ9lINV+fpANad39+1zsDowIZovMYd -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:24 2026 by rpki-client