This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/PSdQtBy68Y-4k3bCXbHKKLY0ziQ.roa File: PSdQtBy68Y-4k3bCXbHKKLY0ziQ.roa (raw, json) Hash identifier: 0eFbrFvPRaRamJKj2kPYRYq1/ZF/LzpKZfdMeA3TePc= Subject key identifier: 3D:27:50:B4:1C:BA:F1:8F:B8:93:76:C2:5D:B1:CA:28:B6:34:CE:24 Certificate issuer: /CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40 Certificate serial: 019B7E38A66FC2BCCB88C302BD42AC788901 Authority key identifier: 99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/PSdQtBy68Y-4k3bCXbHKKLY0ziQ.roa Signing time: Fri 02 Jan 2026 10:20:00 +0000 ROA not before: Fri 02 Jan 2026 10:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16333 IP address blocks: 5.32.178.0/23 maxlen: 23 5.32.180.0/24 maxlen: 24 5.32.182.0/24 maxlen: 24 31.11.64.0/18 maxlen: 19 31.11.68.0/22 maxlen: 22 31.11.72.0/21 maxlen: 21 31.11.80.0/21 maxlen: 21 31.11.88.0/21 maxlen: 21 31.11.96.0/21 maxlen: 21 31.11.104.0/21 maxlen: 21 31.11.112.0/21 maxlen: 21 31.11.120.0/21 maxlen: 21 78.157.0.0/24 maxlen: 24 78.157.1.0/24 maxlen: 24 78.157.2.0/24 maxlen: 24 78.157.3.0/24 maxlen: 24 78.157.4.0/24 maxlen: 24 78.157.5.0/24 maxlen: 24 78.157.6.0/24 maxlen: 24 78.157.7.0/24 maxlen: 24 78.157.8.0/24 maxlen: 24 78.157.9.0/24 maxlen: 24 78.157.10.0/24 maxlen: 24 78.157.20.0/24 maxlen: 24 78.157.21.0/24 maxlen: 24 78.157.22.0/24 maxlen: 24 78.157.23.0/24 maxlen: 24 78.157.24.0/24 maxlen: 24 78.157.25.0/24 maxlen: 24 78.157.26.0/24 maxlen: 24 78.157.27.0/24 maxlen: 24 78.157.28.0/24 maxlen: 24 78.157.29.0/24 maxlen: 24 78.157.30.0/24 maxlen: 24 78.157.31.0/24 maxlen: 24 79.126.128.0/17 maxlen: 17 79.126.128.0/18 maxlen: 18 79.126.192.0/18 maxlen: 18 85.30.64.0/18 maxlen: 18 85.30.64.0/19 maxlen: 19 85.30.64.0/21 maxlen: 21 85.30.72.0/22 maxlen: 22 85.30.80.0/22 maxlen: 22 85.30.92.0/22 maxlen: 22 85.30.96.0/19 maxlen: 19 85.30.96.0/22 maxlen: 22 85.30.101.0/24 maxlen: 24 85.30.104.0/22 maxlen: 22 85.30.110.0/24 maxlen: 24 85.30.112.0/24 maxlen: 24 85.30.119.0/24 maxlen: 24 85.30.120.0/21 maxlen: 21 89.31.152.0/21 maxlen: 21 95.128.186.0/24 maxlen: 24 109.69.40.0/21 maxlen: 21 146.255.69.0/24 maxlen: 24 146.255.70.0/24 maxlen: 24 146.255.86.0/24 maxlen: 24 146.255.90.0/23 maxlen: 23 185.2.188.0/22 maxlen: 22 185.5.4.0/22 maxlen: 22 185.80.164.0/22 maxlen: 22 185.89.244.0/22 maxlen: 22 185.100.244.0/22 maxlen: 22 212.110.64.0/23 maxlen: 23 212.110.80.0/21 maxlen: 21 212.110.88.0/22 maxlen: 22 212.158.176.0/20 maxlen: 24 217.16.64.0/19 maxlen: 19 217.16.64.0/20 maxlen: 20 217.16.80.0/20 maxlen: 20 217.16.87.0/24 maxlen: 24 217.16.88.0/22 maxlen: 22 217.196.192.0/20 maxlen: 20 2a01:5b8::/29 maxlen: 29 2a01:5b8::/32 maxlen: 32 2a01:5b9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a6:6f:c2:bc:cb:88:c3:02:bd:42:ac:78:89:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40 Validity Not Before: Jan 2 10:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d2750b41cbaf18fb89376c25db1ca28b634ce24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:46:c3:e0:f0:e3:c7:34:6c:56:73:d4:17:ac: 17:59:a9:3e:74:78:64:cc:08:9f:1e:5b:bb:f9:8f: 20:2f:63:9f:01:cc:6f:f8:50:70:17:76:3e:2e:16: 92:d4:17:68:fe:9e:6d:1f:04:4f:93:95:50:ff:af: ca:c7:4d:3c:c8:45:ee:fd:70:16:5b:49:7e:f7:be: de:fa:19:ab:23:91:af:c0:61:6b:70:72:20:45:06: e9:17:b7:7a:ee:86:ba:84:4c:4e:13:fe:5e:60:7f: f9:b6:e1:7f:45:ec:6b:c9:fa:8c:11:00:f3:e2:69: 49:db:a6:3b:f6:bb:29:d4:94:3d:19:4b:fb:fa:da: 37:d1:c2:bf:b3:dd:92:b3:12:67:15:59:25:d8:7d: 15:24:08:ff:c8:ee:44:90:fa:95:57:17:8d:5d:43: a3:a9:44:70:1c:0b:da:fd:3b:1e:5c:55:37:d1:50: a8:9c:0b:2a:b2:c5:6c:4e:15:f2:44:9f:76:2f:30: ab:e5:87:24:56:f7:76:86:25:26:91:b0:76:47:e8: 56:8c:67:a0:3d:aa:ae:9f:9f:85:87:82:71:20:48: d6:ec:a6:20:c1:66:21:47:25:f1:c7:9e:cf:46:8f: 9c:97:a0:e7:7f:58:27:96:cd:5c:d2:12:a0:2c:1d: c1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:27:50:B4:1C:BA:F1:8F:B8:93:76:C2:5D:B1:CA:28:B6:34:CE:24 X509v3 Authority Key Identifier: keyid:99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/PSdQtBy68Y-4k3bCXbHKKLY0ziQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.32.178.0-5.32.180.255 5.32.182.0/24 31.11.64.0/18 78.157.0.0-78.157.10.255 78.157.20.0-78.157.31.255 79.126.128.0/17 85.30.64.0/18 89.31.152.0/21 95.128.186.0/24 109.69.40.0/21 146.255.69.0-146.255.70.255 146.255.86.0/24 146.255.90.0/23 185.2.188.0/22 185.5.4.0/22 185.80.164.0/22 185.89.244.0/22 185.100.244.0/22 212.110.64.0/23 212.110.80.0-212.110.91.255 212.158.176.0/20 217.16.64.0/19 217.196.192.0/20 IPv6: 2a01:5b8::/29 Signature Algorithm: sha256WithRSAEncryption 53:44:67:d3:25:e1:2b:95:4a:de:fb:23:c7:21:b8:e6:aa:6e: c2:e1:6e:60:f6:8b:d3:6c:f3:d6:6c:da:53:06:e5:85:ad:47: ee:1d:95:ee:2c:09:8e:2a:3f:bd:8e:71:00:50:58:87:f8:8d: f9:01:41:5c:87:9f:e9:31:27:88:d6:4f:0d:40:5a:1c:32:84: 77:a3:d9:20:eb:5c:2e:c7:aa:d2:25:4b:9c:ec:d2:66:44:4d: 5f:e5:34:f6:1e:1b:fe:16:f0:72:21:a3:c6:79:32:cc:90:db: dc:41:76:0a:cb:f4:5d:df:a7:fa:a8:32:72:95:d6:23:af:dc: ac:de:8f:c1:29:1e:74:83:45:05:e9:21:ed:44:49:12:bf:8a: fc:c5:17:65:34:94:7e:35:c3:33:a9:07:d3:4e:50:49:32:83: 34:28:d3:95:45:af:2b:54:9a:4d:6d:b7:53:96:a9:f1:4c:81: b6:12:d4:41:fa:20:ae:f5:c7:fe:13:65:75:2c:df:43:16:97: 7e:59:14:17:44:3a:42:46:72:68:49:ac:77:09:d7:54:36:fb: 1d:d5:37:5b:98:72:83:12:01:a5:22:92:b7:83:56:8c:9d:fe: dc:2b:dc:91:b0:c1:15:45:9d:2d:da:f2:a9:f3:6e:59:8b:3a: 11:d4:cc:87 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgISAZt+OKZvwrzLiMMCvUKseIkBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZTcyMDlhOGM5YjE3NmZiZjYyM2VkZjNlZTBiODIwMDdm YzJjNDAwHhcNMjYwMTAyMTAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDI3NTBiNDFjYmFmMThmYjg5Mzc2YzI1ZGIxY2EyOGI2MzRjZTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEbD4PDjxzRsVnPUF6wXWak+dHhk zAifHlu7+Y8gL2OfAcxv+FBwF3Y+LhaS1Bdo/p5tHwRPk5VQ/6/Kx008yEXu/XAW W0l+977e+hmrI5GvwGFrcHIgRQbpF7d67oa6hExOE/5eYH/5tuF/RexryfqMEQDz 4mlJ26Y79rsp1JQ9GUv7+to30cK/s92SsxJnFVkl2H0VJAj/yO5EkPqVVxeNXUOj qURwHAva/TseXFU30VConAsqssVsThXyRJ92LzCr5YckVvd2hiUmkbB2R+hWjGeg Paqun5+Fh4JxIEjW7KYgwWYhRyXxx57PRo+cl6Dnf1gnls1c0hKgLB3BoQIDAQAB o4ICyDCCAsQwHQYDVR0OBBYEFD0nULQcuvGPuJN2wl2xyii2NM4kMB8GA1UdIwQY MBaAFJnnIJqMmxdvv2I+3z7guCAH/CxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWVjZ21veWJGMi1fWWo3ZlB1QzRJQWY4TEVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lZjU4NTYtYmJjMC00NWE0LTg5MWUt YjJkY2MxODYzZThiLzEvUFNkUXRCeTY4WS00azNiQ1hiSEtLTFkwemlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9lZjU4NTYtYmJjMC00NWE0LTg5MWUtYjJkY2MxODYzZThi LzEvbWVjZ21veWJGMi1fWWo3ZlB1QzRJQWY4TEVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHdBggrBgEFBQcBBwEB/wSBzTCByjCBuAQCAAEwgbEwDAME AQUgsgMEAAUgtAMEAAUgtgMEBh8LQDALAwMATp0DBABOnQowDAMEAk6dFAMEBU6d AAMEB09+gAMEBlUeQAMEA1kfmAMEAF+AugMEA21FKDAMAwQAkv9FAwQAkv9GAwQA kv9WAwQBkv9aAwQCuQK8AwQCuQUEAwQCuVCkAwQCuVn0AwQCuWT0AwQB1G5AMAwD BATUblADBALUblgDBATUnrADBAXZEEADBATZxMAwDQQCAAIwBwMFAyoBBbgwDQYJ KoZIhvcNAQELBQADggEBAFNEZ9Ml4SuVSt77I8chuOaqbsLhbmD2i9Ns89Zs2lMG 5YWtR+4dle4sCY4qP72OcQBQWIf4jfkBQVyHn+kxJ4jWTw1AWhwyhHej2SDrXC7H qtIlS5zs0mZETV/lNPYeG/4W8HIho8Z5MsyQ29xBdgrL9F3fp/qoMnKV1iOv3Kze j8EpHnSDRQXpIe1ESRK/ivzFF2U0lH41wzOpB9NOUEkygzQo05VFrytUmk1tt1OW qfFMgbYS1EH6IK71x/4TZXUs30MWl35ZFBdEOkJGcmhJrHcJ11Q2+x3VN1uYcoMS AaUikreDVoyd/twr3JGwwRVFnS3a8qnzblmLOhHUzIc= -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:40 2026 by rpki-client