This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/5LP1tFsYxrSifJx4g3QCwnwqEE0.roa File: 5LP1tFsYxrSifJx4g3QCwnwqEE0.roa (raw, json) Hash identifier: KN3CpVDHemmKFo5Hvty6pP9rTH9gXzF1gwHa0T5DRaI= Subject key identifier: E4:B3:F5:B4:5B:18:C6:B4:A2:7C:9C:78:83:74:02:C2:7C:2A:10:4D Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e Certificate serial: 019B7BA4AEFD06188AFC0C5CE7A5AAE4C53A Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/5LP1tFsYxrSifJx4g3QCwnwqEE0.roa Signing time: Thu 01 Jan 2026 22:19:08 +0000 ROA not before: Thu 01 Jan 2026 22:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203020 IP address blocks: 37.61.226.0/24 maxlen: 32 37.61.227.0/24 maxlen: 32 37.200.104.0/21 maxlen: 32 43.252.28.0/22 maxlen: 32 45.12.56.0/22 maxlen: 32 45.117.154.0/24 maxlen: 32 45.117.155.0/24 maxlen: 32 45.130.120.0/22 maxlen: 32 46.182.168.0/22 maxlen: 32 78.156.160.0/20 maxlen: 32 78.156.176.0/20 maxlen: 32 85.208.148.0/22 maxlen: 32 89.104.110.0/23 maxlen: 32 89.184.192.0/19 maxlen: 32 89.223.14.0/23 maxlen: 32 89.223.18.0/23 maxlen: 32 92.255.32.0/21 maxlen: 32 92.255.86.0/23 maxlen: 32 94.46.0.0/21 maxlen: 32 94.46.2.0/23 maxlen: 32 94.46.32.0/21 maxlen: 32 103.30.12.0/22 maxlen: 32 103.211.184.0/23 maxlen: 32 103.225.128.0/22 maxlen: 32 103.245.40.0/22 maxlen: 32 103.250.134.0/24 maxlen: 32 103.252.184.0/22 maxlen: 32 109.198.32.0/20 maxlen: 32 109.198.48.0/20 maxlen: 32 116.212.188.0/22 maxlen: 32 163.53.26.0/24 maxlen: 32 163.53.27.0/24 maxlen: 32 176.117.88.0/22 maxlen: 32 176.117.92.0/22 maxlen: 32 180.92.128.0/19 maxlen: 32 180.94.216.0/22 maxlen: 32 185.10.7.0/24 maxlen: 32 185.18.104.0/22 maxlen: 32 185.64.180.0/22 maxlen: 32 193.151.52.0/22 maxlen: 32 194.32.88.0/22 maxlen: 32 202.51.78.0/24 maxlen: 32 202.51.84.0/24 maxlen: 32 202.51.85.0/24 maxlen: 32 202.51.87.0/24 maxlen: 32 202.51.90.0/24 maxlen: 32 202.51.91.0/24 maxlen: 32 203.78.168.0/21 maxlen: 32 206.204.0.0/18 maxlen: 32 207.29.200.0/21 maxlen: 32 213.188.80.0/20 maxlen: 32 216.194.80.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ae:fd:06:18:8a:fc:0c:5c:e7:a5:aa:e4:c5:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e Validity Not Before: Jan 1 22:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4b3f5b45b18c6b4a27c9c78837402c27c2a104d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:64:29:82:89:38:29:1e:d9:7e:1d:5b:92:2d: 4a:c0:49:22:ba:b1:fc:cb:a7:fd:3a:da:8c:82:bc: f7:e5:ab:78:75:5b:74:b8:54:1b:7a:a2:e7:6a:ff: 97:70:76:ea:13:8d:3b:e6:57:4d:dd:b5:55:3b:9e: c0:48:e9:18:77:70:63:c2:5d:2c:42:8f:a9:c5:ca: b5:c8:ea:0e:ad:28:e0:5c:63:0c:2a:d7:6c:73:2f: 9c:81:8f:bb:16:1e:5c:8e:0e:f4:9e:c3:46:bf:c7: 5b:e6:d8:70:c5:93:83:e6:08:2e:6c:13:e6:01:33: bb:70:12:a0:a4:64:54:98:ff:9f:2d:d4:f0:5a:5f: a5:dd:7c:a4:73:bf:b7:5f:b7:aa:64:25:87:c5:9b: 3d:3e:91:31:52:00:39:28:b0:84:48:70:ac:45:e4: 23:51:a1:83:5a:61:8c:23:d3:f8:8c:92:ee:de:98: 94:f8:e8:82:68:ca:0d:d3:67:56:8c:6f:da:b7:a4: b4:a3:51:e5:a7:33:60:51:f4:6d:f6:31:55:0b:da: b8:11:01:07:26:c7:4b:3b:63:45:09:19:0d:84:c8: 0d:0b:7c:35:0e:52:8c:75:38:12:c6:09:02:54:8a: c3:ec:51:12:6e:30:b2:b2:69:94:b7:f5:4d:d2:cc: 22:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B3:F5:B4:5B:18:C6:B4:A2:7C:9C:78:83:74:02:C2:7C:2A:10:4D X509v3 Authority Key Identifier: keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/5LP1tFsYxrSifJx4g3QCwnwqEE0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.61.226.0/23 37.200.104.0/21 43.252.28.0/22 45.12.56.0/22 45.117.154.0/23 45.130.120.0/22 46.182.168.0/22 78.156.160.0/19 85.208.148.0/22 89.104.110.0/23 89.184.192.0/19 89.223.14.0/23 89.223.18.0/23 92.255.32.0/21 92.255.86.0/23 94.46.0.0/21 94.46.32.0/21 103.30.12.0/22 103.211.184.0/23 103.225.128.0/22 103.245.40.0/22 103.250.134.0/24 103.252.184.0/22 109.198.32.0/19 116.212.188.0/22 163.53.26.0/23 176.117.88.0/21 180.92.128.0/19 180.94.216.0/22 185.10.7.0/24 185.18.104.0/22 185.64.180.0/22 193.151.52.0/22 194.32.88.0/22 202.51.78.0/24 202.51.84.0/23 202.51.87.0/24 202.51.90.0/23 203.78.168.0/21 206.204.0.0/18 207.29.200.0/21 213.188.80.0/20 216.194.80.0/20 Signature Algorithm: sha256WithRSAEncryption 37:d0:65:fc:de:7f:50:ee:fb:c3:20:18:c1:60:6e:eb:82:5d: 8f:34:73:54:52:30:5b:29:44:b8:83:7c:e5:57:13:ac:48:e2: 14:3f:e0:bb:aa:2d:5b:8c:82:14:93:8f:2e:65:df:00:9f:20: c0:c2:82:52:63:51:3b:d2:12:be:de:83:49:3a:8d:ce:b5:1d: 87:0c:cc:df:9e:e3:4a:f7:5b:98:5d:05:0d:63:ed:14:37:e7: 9b:b7:36:7d:6b:3d:f5:99:49:a2:87:e6:3d:3a:26:e8:21:be: 55:12:5a:3c:6d:d4:4c:f5:58:be:18:e5:bb:74:f3:9b:5d:f8: d1:22:1a:53:b9:5d:5b:c6:2d:ec:bc:be:df:f1:98:40:32:50: 0e:a8:1b:8d:f4:cb:96:f6:bd:79:23:06:00:1b:53:70:f4:e1: 1a:ff:eb:ef:45:36:e1:6c:0e:cf:88:b1:a9:72:6b:ae:ad:d7: cf:e2:a5:1c:de:b6:45:b7:7f:26:3c:55:48:43:3b:02:cc:a7: 09:54:10:aa:24:56:7a:3d:61:86:4a:32:a9:11:64:c0:98:1c: 07:f8:81:09:15:24:f6:bc:2a:63:f9:7d:51:9f:a6:e7:ea:02: 7e:9b:ed:77:0b:36:eb:b4:16:c4:c6:98:32:7e:ff:da:a7:4c: ef:e7:9a:da -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgISAZt7pK79BhiK/Axc56Wq5MU6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMGI0MTlmMGMxN2I0YzhiZTIxN2Y2NDM4OGQyNjhkMTRk YzI2MWUwHhcNMjYwMTAxMjIxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGIzZjViNDViMThjNmI0YTI3YzljNzg4Mzc0MDJjMjdjMmExMDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mQpgok4KR7Zfh1bki1KwEkiurH8 y6f9OtqMgrz35at4dVt0uFQbeqLnav+XcHbqE4075ldN3bVVO57ASOkYd3Bjwl0s Qo+pxcq1yOoOrSjgXGMMKtdscy+cgY+7Fh5cjg70nsNGv8db5thwxZOD5ggubBPm ATO7cBKgpGRUmP+fLdTwWl+l3Xykc7+3X7eqZCWHxZs9PpExUgA5KLCESHCsReQj UaGDWmGMI9P4jJLu3piU+OiCaMoN02dWjG/at6S0o1HlpzNgUfRt9jFVC9q4EQEH JsdLO2NFCRkNhMgNC3w1DlKMdTgSxgkCVIrD7FESbjCysmmUt/VN0swiKQIDAQAB o4IDDzCCAwswHQYDVR0OBBYEFOSz9bRbGMa0onyceIN0AsJ8KhBNMB8GA1UdIwQY MBaAFFELQZ8MF7TIviF/ZDiNJo0U3CYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYt MTRhMDk5OTNkNjcxLzEvNUxQMXRGc1l4clNpZkp4NGczUUN3bndxRUUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYtMTRhMDk5OTNkNjcx LzEvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBIwYIKwYBBQUHAQcBAf8EggESMIIBDjCCAQoEAgABMIIB AgMEASU94gMEAyXIaAMEAiv8HAMEAi0MOAMEAS11mgMEAi2CeAMEAi62qAMEBU6c oAMEAlXQlAMEAVlobgMEBVm4wAMEAVnfDgMEAVnfEgMEA1z/IAMEAVz/VgMEA14u AAMEA14uIAMEAmceDAMEAWfTuAMEAmfhgAMEAmf1KAMEAGf6hgMEAmf8uAMEBW3G IAMEAnTUvAMEAaM1GgMEA7B1WAMEBbRcgAMEArRe2AMEALkKBwMEArkSaAMEArlA tAMEAsGXNAMEAsIgWAMEAMozTgMEAcozVAMEAMozVwMEAcozWgMEA8tOqAMEBs7M AAMEA88dyAMEBNW8UAMEBNjCUDANBgkqhkiG9w0BAQsFAAOCAQEAN9Bl/N5/UO77 wyAYwWBu64JdjzRzVFIwWylEuIN85VcTrEjiFD/gu6otW4yCFJOPLmXfAJ8gwMKC UmNRO9ISvt6DSTqNzrUdhwzM357jSvdbmF0FDWPtFDfnm7c2fWs99ZlJoofmPTom 6CG+VRJaPG3UTPVYvhjlu3Tzm1340SIaU7ldW8Yt7Ly+3/GYQDJQDqgbjfTLlva9 eSMGABtTcPThGv/r70U24WwOz4ixqXJrrq3Xz+KlHN62Rbd/JjxVSEM7AsynCVQQ qiRWej1hhkoyqRFkwJgcB/iBCRUk9rwqY/l9UZ+m5+oCfpvtdws267QWxMaYMn7/ 2qdM7+ea2g== -----END CERTIFICATE-----Generated at Sun Jan 18 10:47:22 2026 by rpki-client