This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/EN3L4pyXEtd8agpR0WCbncdFo08.roa File: EN3L4pyXEtd8agpR0WCbncdFo08.roa (raw, json) Hash identifier: NJ7X+GYc10QZ6IeNjYC/5Bh9ragVjwZPuZ02BIahBWE= Subject key identifier: 10:DD:CB:E2:9C:97:12:D7:7C:6A:0A:51:D1:60:9B:9D:C7:45:A3:4F Certificate issuer: /CN=574537d54f36f142231bc817038872cb607b21e7 Certificate serial: 019B7DCAA14A04CECF2911C1FFB024E12E19 Authority key identifier: 57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/EN3L4pyXEtd8agpR0WCbncdFo08.roa Signing time: Fri 02 Jan 2026 08:19:50 +0000 ROA not before: Fri 02 Jan 2026 08:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15600 IP address blocks: 5.44.112.0/20 maxlen: 20 31.193.208.0/21 maxlen: 24 37.35.120.0/21 maxlen: 21 62.204.96.0/19 maxlen: 19 65.18.128.0/18 maxlen: 18 77.111.228.0/22 maxlen: 22 80.208.128.0/18 maxlen: 24 89.236.128.0/18 maxlen: 24 95.174.224.0/19 maxlen: 19 109.106.44.0/22 maxlen: 22 109.106.48.0/20 maxlen: 20 138.248.48.0/20 maxlen: 20 139.178.0.0/18 maxlen: 24 145.40.224.0/19 maxlen: 19 185.74.108.0/22 maxlen: 22 212.60.32.0/19 maxlen: 24 213.221.192.0/18 maxlen: 24 2001:1a88::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:a1:4a:04:ce:cf:29:11:c1:ff:b0:24:e1:2e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=574537d54f36f142231bc817038872cb607b21e7 Validity Not Before: Jan 2 08:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10ddcbe29c9712d77c6a0a51d1609b9dc745a34f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a2:7a:59:38:2a:c6:e3:d2:2c:0f:64:3c:82: 79:f3:ef:c4:80:4f:64:60:a1:e8:83:a1:ee:6c:ab: 14:1d:d1:68:b4:6c:bd:9f:af:3d:e6:58:96:08:d5: 7a:95:dd:63:28:fb:72:1b:66:b7:65:b0:ea:25:77: 3d:a8:ce:b3:04:f8:1e:88:22:41:7d:99:ef:a2:01: c9:93:f2:cb:5d:62:c3:4c:12:56:d3:41:a7:69:35: a0:fa:e1:2d:f3:e7:eb:7f:de:d1:29:3b:0d:f8:18: e9:77:08:87:ed:35:e4:f9:8e:dc:8c:c8:be:2d:f4: fc:a8:84:29:14:37:e2:9e:32:2a:68:aa:d6:bc:6b: bf:cd:04:21:de:a5:14:07:c5:dc:8d:d0:f8:f2:02: 52:f1:5e:e9:78:b0:eb:24:cf:31:01:87:4d:b8:ff: 17:7f:c3:c7:ce:f8:bb:73:90:cc:cf:46:67:2c:63: 31:82:18:d4:a2:74:1c:e3:0e:55:c3:82:5c:af:8b: f8:8f:1f:a3:ed:f5:1c:3e:65:10:ba:15:79:23:f2: 1b:fd:c9:26:ee:86:fa:42:9a:af:2c:ed:b4:41:58: 1b:d4:5a:06:f7:7d:80:1b:83:88:4a:f2:64:e4:92: 5a:0a:6e:84:af:d1:75:2d:71:18:29:25:3b:8b:5d: ab:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DD:CB:E2:9C:97:12:D7:7C:6A:0A:51:D1:60:9B:9D:C7:45:A3:4F X509v3 Authority Key Identifier: keyid:57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/EN3L4pyXEtd8agpR0WCbncdFo08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.44.112.0/20 31.193.208.0/21 37.35.120.0/21 62.204.96.0/19 65.18.128.0/18 77.111.228.0/22 80.208.128.0/18 89.236.128.0/18 95.174.224.0/19 109.106.44.0-109.106.63.255 138.248.48.0/20 139.178.0.0/18 145.40.224.0/19 185.74.108.0/22 212.60.32.0/19 213.221.192.0/18 IPv6: 2001:1a88::/29 Signature Algorithm: sha256WithRSAEncryption 12:a6:b2:dd:cc:f9:ff:e3:1e:ca:82:a4:6a:5a:d1:e1:a5:31: 23:4d:d3:c5:1a:e5:c8:97:2c:36:91:3c:22:e0:c6:9b:2f:c1: b6:0d:21:74:2a:19:79:aa:45:bc:cb:53:5a:18:61:81:e3:0c: 1f:d8:94:b9:8e:ac:39:61:ad:45:6a:dd:cc:fa:19:51:89:44: 35:16:77:53:b1:9e:eb:cb:23:a1:f5:cd:98:8a:99:c3:31:55: 8e:97:f3:b7:d2:c3:51:01:f5:77:50:ef:77:3c:d1:f0:53:eb: 1b:9b:99:92:14:ea:69:a6:15:f6:67:5c:b1:c6:08:8a:d0:8e: 2a:2f:79:51:2c:62:ac:b7:4f:35:f4:12:4f:ca:1e:20:22:52: 38:1b:19:4a:96:74:f7:6f:b8:04:18:10:c0:0f:b4:ab:44:ae: 48:15:92:a9:df:27:d4:47:dc:e7:bc:2b:57:96:81:c2:93:6c: 27:99:d2:98:74:0f:aa:fd:8a:88:25:25:51:e6:c9:98:d7:28: 73:e4:e6:03:b7:5e:cb:4c:52:a6:9a:62:51:f9:f5:7d:f7:af: 73:b4:79:b5:39:59:5a:59:da:ae:e7:1b:fa:c4:ab:58:78:a6: 0f:fb:a9:cb:24:1e:2f:d5:24:0e:7a:fa:06:3e:5c:42:26:88: 01:87:42:be -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgISAZt9yqFKBM7PKRHB/7Ak4S4ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NDUzN2Q1NGYzNmYxNDIyMzFiYzgxNzAzODg3MmNiNjA3 YjIxZTcwHhcNMjYwMTAyMDgxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGRkY2JlMjljOTcxMmQ3N2M2YTBhNTFkMTYwOWI5ZGM3NDVhMzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKJ6WTgqxuPSLA9kPIJ58+/EgE9k YKHog6HubKsUHdFotGy9n6895liWCNV6ld1jKPtyG2a3ZbDqJXc9qM6zBPgeiCJB fZnvogHJk/LLXWLDTBJW00GnaTWg+uEt8+frf97RKTsN+BjpdwiH7TXk+Y7cjMi+ LfT8qIQpFDfinjIqaKrWvGu/zQQh3qUUB8XcjdD48gJS8V7peLDrJM8xAYdNuP8X f8PHzvi7c5DMz0ZnLGMxghjUonQc4w5Vw4Jcr4v4jx+j7fUcPmUQuhV5I/Ib/ckm 7ob6QpqvLO20QVgb1FoG932AG4OISvJk5JJaCm6Er9F1LXEYKSU7i12r8wIDAQAB o4ICfDCCAngwHQYDVR0OBBYEFBDdy+KclxLXfGoKUdFgm53HRaNPMB8GA1UdIwQY MBaAFFdFN9VPNvFCIxvIFwOIcstgeyHnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mZGQyNWQtYzAzNC00OWYzLTg5MGQt NGI4OWQzNzc4MDhlLzEvRU4zTDRweVhFdGQ4YWdwUjBXQ2JuY2RGbzA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9mZGQyNWQtYzAzNC00OWYzLTg5MGQtNGI4OWQzNzc4MDhl LzEvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGRBggrBgEFBQcBBwEB/wSBgTB/MG4EAgABMGgDBAQFLHAD BAMfwdADBAMlI3gDBAU+zGADBAZBEoADBAJNb+QDBAZQ0IADBAZZ7IADBAVfruAw DAMEAm1qLAMEBm1qAAMEBIr4MAMEBouyAAMEBZEo4AMEArlKbAMEBdQ8IAMEBtXd wDANBAIAAjAHAwUDIAEaiDANBgkqhkiG9w0BAQsFAAOCAQEAEqay3cz5/+MeyoKk alrR4aUxI03TxRrlyJcsNpE8IuDGmy/Btg0hdCoZeapFvMtTWhhhgeMMH9iUuY6s OWGtRWrdzPoZUYlENRZ3U7Ge68sjofXNmIqZwzFVjpfzt9LDUQH1d1DvdzzR8FPr G5uZkhTqaaYV9mdcscYIitCOKi95USxirLdPNfQST8oeICJSOBsZSpZ092+4BBgQ wA+0q0SuSBWSqd8n1Efc57wrV5aBwpNsJ5nSmHQPqv2KiCUlUebJmNcoc+TmA7de y0xSpppiUfn1ffevc7R5tTlZWlnarucb+sSrWHimD/upyyQeL9UkDnr6Bj5cQiaI AYdCvg== -----END CERTIFICATE-----Generated at Mon Jan 26 20:41:26 2026 by rpki-client