This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/eyN-QI1JnaBw_GdK4aR4DdrNlvo.roa File: eyN-QI1JnaBw_GdK4aR4DdrNlvo.roa (raw, json) Hash identifier: FEmPy+g6KDj1MyKjGKfSJKzYk99+EtTwkcX8ACmfm44= Subject key identifier: 7B:23:7E:40:8D:49:9D:A0:70:FC:67:4A:E1:A4:78:0D:DA:CD:96:FA Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Certificate serial: 019B7FF283B79B5B36A2465131589720B4F6 Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/eyN-QI1JnaBw_GdK4aR4DdrNlvo.roa Signing time: Fri 02 Jan 2026 18:22:38 +0000 ROA not before: Fri 02 Jan 2026 18:22:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210976 IP address blocks: 5.129.208.0/24 maxlen: 24 5.129.209.0/24 maxlen: 24 5.129.210.0/24 maxlen: 24 5.129.212.0/24 maxlen: 24 5.129.213.0/24 maxlen: 24 5.129.214.0/24 maxlen: 24 5.129.216.0/24 maxlen: 24 5.129.217.0/24 maxlen: 24 5.129.218.0/24 maxlen: 24 5.129.219.0/24 maxlen: 24 5.129.224.0/24 maxlen: 24 5.129.225.0/24 maxlen: 24 5.129.226.0/24 maxlen: 24 5.129.227.0/24 maxlen: 24 5.129.228.0/24 maxlen: 24 5.129.229.0/24 maxlen: 24 5.129.230.0/24 maxlen: 24 5.129.231.0/24 maxlen: 24 5.129.232.0/24 maxlen: 24 5.129.233.0/24 maxlen: 24 5.129.234.0/24 maxlen: 24 5.129.235.0/24 maxlen: 24 5.129.236.0/24 maxlen: 24 5.129.237.0/24 maxlen: 24 5.129.238.0/24 maxlen: 24 5.129.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:83:b7:9b:5b:36:a2:46:51:31:58:97:20:b4:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Validity Not Before: Jan 2 18:22:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b237e408d499da070fc674ae1a4780ddacd96fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b7:84:3a:de:37:4e:16:53:37:83:e4:e5:72: fe:e3:59:54:1d:3f:c1:2f:ee:17:85:07:3d:c2:aa: 0a:e7:72:96:3f:ea:99:c9:a9:d0:2c:6b:f7:79:74: 29:36:ab:cc:de:e3:5b:90:5b:05:e1:95:38:47:fb: d8:5e:55:c1:53:1c:ba:f8:1f:76:d0:ec:8d:cb:18: 6c:f9:98:4f:13:15:73:6a:cf:ba:8e:4f:49:53:78: d9:94:98:9a:6c:ee:ca:d8:3a:3c:ba:3c:cd:a9:61: 9d:8c:0f:9b:19:a0:43:be:66:3f:4f:43:25:6c:2e: 5d:52:09:39:9d:3d:ce:23:d8:18:c7:77:9d:40:6c: 3b:a3:f3:39:a9:7e:a7:c8:fc:2e:cc:8b:96:65:82: de:7b:be:6f:6c:47:ca:d3:9e:a2:b9:0c:8b:b4:d1: ec:d0:52:7c:bb:09:ec:62:13:42:2f:37:39:f0:9d: 8d:b7:14:d0:66:9d:03:6c:08:e7:06:16:cd:26:de: 0f:a2:a5:0e:59:25:3d:14:9f:ec:99:80:bd:25:c4: 62:a7:22:02:f5:12:e0:b0:63:9e:f1:c8:bc:ff:7a: 97:71:4a:e1:e0:6f:d9:18:ae:dc:bc:1e:18:d4:ef: f5:96:a5:77:19:24:2b:bd:c8:71:27:4d:79:d5:55: ea:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:23:7E:40:8D:49:9D:A0:70:FC:67:4A:E1:A4:78:0D:DA:CD:96:FA X509v3 Authority Key Identifier: keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/eyN-QI1JnaBw_GdK4aR4DdrNlvo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.129.208.0-5.129.210.255 5.129.212.0-5.129.214.255 5.129.216.0/22 5.129.224.0/20 Signature Algorithm: sha256WithRSAEncryption 37:f7:2c:71:8d:58:3f:bc:32:e8:66:76:2d:1d:6b:68:ad:81: d3:3d:3a:b3:3c:a0:8a:ae:0b:58:88:a7:b0:b7:15:e4:c2:19: f7:b5:0a:b2:01:7e:dd:e5:bb:3b:02:fd:fe:e1:62:61:01:55: 72:4d:0d:d1:8b:07:0c:66:32:2e:19:91:45:a1:06:a5:35:9e: 80:fb:e1:6f:07:0c:27:be:a9:17:9f:06:8e:c0:c5:3d:e5:47: 00:b6:97:02:e5:c8:96:28:03:f1:a3:4b:d5:f8:4e:00:ff:6d: 37:01:91:ae:8e:2f:f8:75:57:80:cd:c8:d5:40:35:19:f5:1f: 62:63:18:63:13:b2:c2:64:67:e2:cd:e2:aa:ae:37:e1:ae:c2: 3b:72:fd:ab:01:6c:82:ba:bf:89:30:ab:43:f7:cc:a9:a0:4c: fd:66:2a:43:6a:7d:50:41:b0:c5:41:5b:73:57:30:7a:16:e3: aa:73:f6:0c:f8:91:0f:70:06:1b:f2:2d:38:b8:30:49:11:c2: 0b:e4:06:ea:3e:48:03:83:55:82:94:83:19:8b:b3:87:41:d2: d6:8e:b7:9c:7b:b2:6c:4d:74:cd:90:ed:9d:46:be:65:5a:55: 03:e0:ca:50:f4:38:33:bc:76:e9:ab:e4:84:f0:b9:fc:3a:a8: fe:21:e1:64 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt/8oO3m1s2okZRMViXILT2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZGIzZGNkZjVlNmJlZTA5ODI1YzM3YmYzYjhiZGYyOGI2 ZmI1OTMwHhcNMjYwMTAyMTgyMjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjIzN2U0MDhkNDk5ZGEwNzBmYzY3NGFlMWE0NzgwZGRhY2Q5NmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvreEOt43ThZTN4Pk5XL+41lUHT/B L+4XhQc9wqoK53KWP+qZyanQLGv3eXQpNqvM3uNbkFsF4ZU4R/vYXlXBUxy6+B92 0OyNyxhs+ZhPExVzas+6jk9JU3jZlJiabO7K2Do8ujzNqWGdjA+bGaBDvmY/T0Ml bC5dUgk5nT3OI9gYx3edQGw7o/M5qX6nyPwuzIuWZYLee75vbEfK056iuQyLtNHs 0FJ8uwnsYhNCLzc58J2NtxTQZp0DbAjnBhbNJt4PoqUOWSU9FJ/smYC9JcRipyIC 9RLgsGOe8ci8/3qXcUrh4G/ZGK7cvB4Y1O/1lqV3GSQrvchxJ0151VXqBwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFHsjfkCNSZ2gcPxnSuGkeA3azZb6MB8GA1UdIwQY MBaAFE3bPc315r7gmCXDe/O4vfKLb7WTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEt MjE3MGM1YzFkM2VkLzEvZXlOLVFJMUpuYUJ3X0dkSzRhUjREZHJObHZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEtMjE3MGM1YzFkM2Vk LzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAQFgdAD BAAFgdIwDAMEAgWB1AMEAAWB1gMEAgWB2AMEBAWB4DANBgkqhkiG9w0BAQsFAAOC AQEAN/cscY1YP7wy6GZ2LR1raK2B0z06szygiq4LWIinsLcV5MIZ97UKsgF+3eW7 OwL9/uFiYQFVck0N0YsHDGYyLhmRRaEGpTWegPvhbwcMJ76pF58GjsDFPeVHALaX AuXIligD8aNL1fhOAP9tNwGRro4v+HVXgM3I1UA1GfUfYmMYYxOywmRn4s3iqq43 4a7CO3L9qwFsgrq/iTCrQ/fMqaBM/WYqQ2p9UEGwxUFbc1cwehbjqnP2DPiRD3AG G/ItOLgwSRHCC+QG6j5IA4NVgpSDGYuzh0HS1o63nHuybE10zZDtnUa+ZVpVA+DK UPQ4M7x26avkhPC5/Dqo/iHhZA== -----END CERTIFICATE-----Generated at Wed Jan 21 11:15:16 2026 by rpki-client