This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5y0X2xAA3xYIyfsRMHQ3Q7x1eVI.roa File: 5y0X2xAA3xYIyfsRMHQ3Q7x1eVI.roa (raw, json) Hash identifier: nlDR+08NoBl5wLDVudXVbJF2SrH3uWzTfklrEHT21f4= Subject key identifier: E7:2D:17:DB:10:00:DF:16:08:C9:FB:11:30:74:37:43:BC:75:79:52 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019BDCE9B3A92E7F8A64C28E515F0FDC5B70 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5y0X2xAA3xYIyfsRMHQ3Q7x1eVI.roa Signing time: Tue 20 Jan 2026 19:37:41 +0000 ROA not before: Tue 20 Jan 2026 19:37:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 45.88.14.0/24 maxlen: 24 62.192.152.0/24 maxlen: 24 77.81.182.0/24 maxlen: 24 89.34.106.0/24 maxlen: 24 89.37.192.0/24 maxlen: 24 89.40.36.0/24 maxlen: 24 89.40.215.0/24 maxlen: 24 89.47.36.0/24 maxlen: 24 89.125.193.0/24 maxlen: 24 93.115.107.0/24 maxlen: 24 93.118.36.0/24 maxlen: 24 94.198.171.0/24 maxlen: 24 128.0.41.0/24 maxlen: 24 185.198.233.0/24 maxlen: 24 188.241.221.0/24 maxlen: 24 193.178.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 13:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dc:e9:b3:a9:2e:7f:8a:64:c2:8e:51:5f:0f:dc:5b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 20 19:37:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e72d17db1000df1608c9fb1130743743bc757952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bd:12:a4:b9:9e:8b:8c:c9:b6:ed:7f:e2:01: dc:64:4e:58:64:d4:2c:9e:69:13:27:c7:9d:ad:4c: 21:1d:9b:3d:fe:35:df:26:48:1f:77:d8:ff:e8:4b: 61:66:e2:20:50:b9:44:c8:cd:35:f7:f2:4d:86:21: 0c:7e:41:d2:19:0d:4f:b4:a2:57:ab:ff:6e:b3:13: b9:e3:51:55:c3:ac:8e:20:47:f4:2e:f2:3b:f7:90: 06:4a:12:1e:fb:cb:7b:58:ef:7e:f9:91:ba:e6:0c: 93:a3:f3:0d:3f:bb:96:6c:6a:6a:bc:8d:99:dd:09: a6:7d:de:8a:dd:11:24:a9:c5:cd:32:c2:bf:b3:53: 21:52:4b:77:79:c2:13:b1:db:0c:cb:00:b8:24:9c: 8e:39:ab:99:09:f2:06:7a:7c:5b:80:09:c3:e6:50: 30:98:5d:12:f6:d0:5a:8e:02:a3:6e:38:a9:0a:6d: 1a:b5:c3:9c:d9:99:e0:18:8b:7e:72:f9:ac:1c:6d: 63:0f:bc:e1:c0:d5:12:60:c7:8d:cd:27:0f:f2:40: 7a:b8:ba:ca:29:10:ad:ae:9f:95:5a:89:ed:b7:4f: 5b:cc:b0:3c:d4:db:45:52:c5:16:f3:af:32:f9:83: 08:08:ec:b1:aa:b1:9a:d7:d1:ee:4e:69:3a:57:5f: 3a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2D:17:DB:10:00:DF:16:08:C9:FB:11:30:74:37:43:BC:75:79:52 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5y0X2xAA3xYIyfsRMHQ3Q7x1eVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.14.0/24 62.192.152.0/24 77.81.182.0/24 89.34.106.0/24 89.37.192.0/24 89.40.36.0/24 89.40.215.0/24 89.47.36.0/24 89.125.193.0/24 93.115.107.0/24 93.118.36.0/24 94.198.171.0/24 128.0.41.0/24 185.198.233.0/24 188.241.221.0/24 193.178.134.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:b4:ad:95:d4:61:a0:6e:fd:6c:da:de:8f:5b:b8:bb:61:67: a2:b2:50:84:56:c5:dd:fd:9b:07:79:ac:3a:c9:d6:fb:9f:a2: 09:ef:33:8a:41:87:13:cc:10:1d:0a:7a:b7:ac:41:d1:c1:65: a6:82:a2:79:04:96:9e:52:12:50:03:c6:90:a8:3a:49:9e:d5: f8:fb:dd:8f:67:c5:82:93:5a:63:e1:f9:49:e9:ce:25:8d:82: 69:36:d8:26:ad:47:a6:8b:65:55:93:d4:a0:cc:44:ce:8e:4b: 2f:b4:f0:42:06:99:4d:52:bf:06:ef:c4:01:65:d5:c1:46:78: 67:66:c1:2f:e8:85:d0:0e:4b:03:13:31:57:f3:1c:ef:1a:ff: 27:e0:ed:25:8b:b4:c6:e4:72:66:89:f1:bd:cb:71:a4:16:42: 6a:26:99:59:26:88:f5:65:35:02:f2:a5:f0:33:b2:72:bd:0a: 49:c4:2a:e4:92:09:6a:a2:48:28:2c:31:69:cd:b9:8c:76:1e: 67:d9:b1:7b:a5:9c:13:b2:84:b2:bf:09:e9:e6:84:0a:ad:60: 64:f6:ba:01:e7:2c:4e:ea:85:4c:46:ae:62:83:97:f1:a2:a9: 5c:38:1c:3e:11:f0:69:5b:8f:35:a1:94:b8:79:b1:37:d9:d1: 48:46:33:00 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgISAZvc6bOpLn+KZMKOUV8P3FtwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTIwMTkzNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzJkMTdkYjEwMDBkZjE2MDhjOWZiMTEzMDc0Mzc0M2JjNzU3OTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb0SpLmei4zJtu1/4gHcZE5YZNQs nmkTJ8edrUwhHZs9/jXfJkgfd9j/6EthZuIgULlEyM019/JNhiEMfkHSGQ1PtKJX q/9usxO541FVw6yOIEf0LvI795AGShIe+8t7WO9++ZG65gyTo/MNP7uWbGpqvI2Z 3Qmmfd6K3REkqcXNMsK/s1MhUkt3ecITsdsMywC4JJyOOauZCfIGenxbgAnD5lAw mF0S9tBajgKjbjipCm0atcOc2ZngGIt+cvmsHG1jD7zhwNUSYMeNzScP8kB6uLrK KRCtrp+VWontt09bzLA81NtFUsUW868y+YMICOyxqrGa19HuTmk6V186BwIDAQAB o4ICYzCCAl8wHQYDVR0OBBYEFOctF9sQAN8WCMn7ETB0N0O8dXlSMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvNXkwWDJ4QUEzeFlJeWZzUk1IUTNRN3gxZVZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQALVgOAwQA PsCYAwQATVG2AwQAWSJqAwQAWSXAAwQAWSgkAwQAWSjXAwQAWS8kAwQAWX3BAwQA XXNrAwQAXXYkAwQAXsarAwQAgAApAwQAucbpAwQAvPHdAwQAwbKGMA0GCSqGSIb3 DQEBCwUAA4IBAQAetK2V1GGgbv1s2t6PW7i7YWeislCEVsXd/ZsHeaw6ydb7n6IJ 7zOKQYcTzBAdCnq3rEHRwWWmgqJ5BJaeUhJQA8aQqDpJntX4+92PZ8WCk1pj4flJ 6c4ljYJpNtgmrUemi2VVk9SgzETOjksvtPBCBplNUr8G78QBZdXBRnhnZsEv6IXQ DksDEzFX8xzvGv8n4O0li7TG5HJmifG9y3GkFkJqJplZJoj1ZTUC8qXwM7JyvQpJ xCrkkglqokgoLDFpzbmMdh5n2bF7pZwTsoSyvwnp5oQKrWBk9roB5yxO6oVMRq5i g5fxoqlcOBw+EfBpW481oZS4ebE32dFIRjMA -----END CERTIFICATE-----Generated at Thu Jan 22 21:36:40 2026 by rpki-client