This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/5pnLPx_2hpy3VygTZwAGCHra7kE.roa File: 5pnLPx_2hpy3VygTZwAGCHra7kE.roa (raw, json) Hash identifier: 1oHSHq2YY2wBUKVcldVeO85+GN6kBhjSJ3cQgz8RWLo= Subject key identifier: E6:99:CB:3F:1F:F6:86:9C:B7:57:28:13:67:00:06:08:7A:DA:EE:41 Certificate issuer: /CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0 Certificate serial: 019B7DCA271A1A53F46DE011DAE7A7A689E2 Authority key identifier: 29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/5pnLPx_2hpy3VygTZwAGCHra7kE.roa Signing time: Fri 02 Jan 2026 08:19:18 +0000 ROA not before: Fri 02 Jan 2026 08:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48573 IP address blocks: 31.185.0.0/21 maxlen: 21 31.185.0.0/22 maxlen: 22 31.185.0.0/24 maxlen: 24 31.185.1.0/24 maxlen: 24 31.185.2.0/24 maxlen: 24 31.185.3.0/24 maxlen: 24 31.185.4.0/22 maxlen: 22 31.185.4.0/24 maxlen: 24 31.185.5.0/24 maxlen: 24 31.185.6.0/24 maxlen: 24 94.143.40.0/21 maxlen: 21 94.143.40.0/22 maxlen: 22 94.143.40.0/24 maxlen: 24 94.143.42.0/23 maxlen: 23 94.143.42.0/24 maxlen: 24 94.143.43.0/24 maxlen: 24 94.143.44.0/22 maxlen: 22 95.215.136.0/22 maxlen: 22 95.215.136.0/23 maxlen: 23 95.215.138.0/23 maxlen: 23 185.43.8.0/22 maxlen: 22 185.43.8.0/23 maxlen: 23 185.43.8.0/24 maxlen: 24 185.43.10.0/23 maxlen: 23 185.43.10.0/24 maxlen: 24 185.43.11.0/24 maxlen: 24 193.29.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:27:1a:1a:53:f4:6d:e0:11:da:e7:a7:a6:89:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0 Validity Not Before: Jan 2 08:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e699cb3f1ff6869cb7572813670006087adaee41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e4:17:ed:74:a8:83:5e:2d:10:1f:99:8a:27: 9d:ad:3a:cd:1b:1a:67:50:4b:0a:dd:6c:01:0d:b0: 94:dc:c7:0c:dd:c8:9e:46:18:c3:13:59:78:aa:f1: 93:98:34:f7:7c:88:05:cb:0e:36:e0:05:98:27:46: 5e:10:85:fb:15:90:48:2c:f7:5f:84:a6:cd:bf:8a: a7:9c:43:77:9a:03:ac:5b:44:df:c1:2f:e1:af:2f: 9d:2d:b1:d3:ea:75:76:35:22:44:a5:04:4f:78:fc: 8f:4f:44:f2:49:99:99:32:db:80:c6:e7:84:80:f8: f8:dd:a2:1a:83:68:d8:fb:08:b3:c5:97:1b:56:79: 81:bd:4c:28:58:2a:6c:c0:a9:87:cc:17:49:12:ab: a8:0c:2e:fb:79:1a:62:fa:ab:df:d1:87:8f:38:2b: bf:92:b4:65:64:27:8f:80:40:bd:d8:19:1c:15:11: 86:3b:28:78:b4:59:f7:06:fe:e5:c5:ea:71:d0:cc: a2:8b:e2:bd:01:b8:85:61:ea:6b:c9:0c:cf:f5:50: 64:c5:7e:fe:06:44:ef:63:9a:c9:3a:b2:20:5f:e7: 8f:b5:55:e8:e1:c5:39:b5:d9:3f:c3:df:cc:5d:b7: 0f:5f:21:81:29:01:03:52:8d:79:b8:eb:7f:92:d8: 06:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:99:CB:3F:1F:F6:86:9C:B7:57:28:13:67:00:06:08:7A:DA:EE:41 X509v3 Authority Key Identifier: keyid:29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/5pnLPx_2hpy3VygTZwAGCHra7kE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.185.0.0/21 94.143.40.0/21 95.215.136.0/22 185.43.8.0/22 193.29.230.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:89:79:fa:96:9b:a2:ec:83:5f:8d:ea:54:39:7b:b0:ad:27: 1d:3e:1b:33:ea:58:13:42:7e:96:e1:f4:64:7a:98:36:f8:0e: 21:bb:e2:9f:5c:87:d4:c4:57:fc:3f:2d:4c:ba:22:76:a9:7a: 5c:5f:d4:3d:73:e7:0a:52:00:41:97:6d:4c:04:f0:c2:cd:1f: c2:42:f5:80:26:4c:49:c1:30:c3:e9:3c:07:83:23:46:d0:1e: c1:3a:40:5b:1d:2f:58:63:ef:6c:73:38:51:18:41:8c:9c:5f: dd:66:01:46:ce:4c:14:52:37:c9:64:97:13:62:44:94:f1:28: 92:da:dd:7e:2a:0e:c5:53:c5:fe:fe:5c:f2:42:0b:50:6f:0e: 3e:5d:58:4d:50:9a:29:67:45:a5:2e:cc:37:ef:df:f3:7b:28: 06:32:ef:5d:6f:6a:1b:fb:d7:5e:98:59:03:68:aa:66:77:81: 01:4b:c9:d7:35:a4:51:93:1d:e3:cd:0a:24:16:f0:90:b0:0c: cf:ac:95:35:72:8d:3a:90:0f:e6:6c:89:f5:bb:01:d5:0a:3f: 8a:34:64:06:4b:ef:9c:06:fb:94:29:4d:f4:b7:c1:7c:96:25: bc:d0:e5:d6:4c:cc:2a:61:31:8d:81:5b:91:71:da:bd:b8:00: 9d:15:1f:71 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt9yicaGlP0beAR2uenponiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MGJjYzUwYTlhMzNiYTU2NTFlZmQxYWZlNDBiNmZkYjAy NTU2ZjAwHhcNMjYwMTAyMDgxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjk5Y2IzZjFmZjY4NjljYjc1NzI4MTM2NzAwMDYwODdhZGFlZTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+QX7XSog14tEB+ZiiedrTrNGxpn UEsK3WwBDbCU3McM3cieRhjDE1l4qvGTmDT3fIgFyw424AWYJ0ZeEIX7FZBILPdf hKbNv4qnnEN3mgOsW0TfwS/hry+dLbHT6nV2NSJEpQRPePyPT0TySZmZMtuAxueE gPj43aIag2jY+wizxZcbVnmBvUwoWCpswKmHzBdJEquoDC77eRpi+qvf0YePOCu/ krRlZCePgEC92BkcFRGGOyh4tFn3Bv7lxepx0Myii+K9AbiFYepryQzP9VBkxX7+ BkTvY5rJOrIgX+ePtVXo4cU5tdk/w9/MXbcPXyGBKQEDUo15uOt/ktgGzQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFOaZyz8f9oact1coE2cABgh62u5BMB8GA1UdIwQY MBaAFCkLzFCpozulZR79Gv5Atv2wJVbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1F2TVVLbWpPNlZsSHYwYV9rQzJfYkFsVnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80YjZlZjQtMzhlZS00YzA2LThjYjYt NzY5ODI0OTNlYTFhLzEvNXBuTFB4XzJocHkzVnlnVFp3QUdDSHJhN2tFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80YjZlZjQtMzhlZS00YzA2LThjYjYtNzY5ODI0OTNlYTFh LzEvS1F2TVVLbWpPNlZsSHYwYV9rQzJfYkFsVnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDH7kAAwQD Xo8oAwQCX9eIAwQCuSsIAwQBwR3mMA0GCSqGSIb3DQEBCwUAA4IBAQCMiXn6lpui 7INfjepUOXuwrScdPhsz6lgTQn6W4fRkepg2+A4hu+KfXIfUxFf8Py1MuiJ2qXpc X9Q9c+cKUgBBl21MBPDCzR/CQvWAJkxJwTDD6TwHgyNG0B7BOkBbHS9YY+9sczhR GEGMnF/dZgFGzkwUUjfJZJcTYkSU8SiS2t1+Kg7FU8X+/lzyQgtQbw4+XVhNUJop Z0WlLsw379/zeygGMu9db2ob+9demFkDaKpmd4EBS8nXNaRRkx3jzQokFvCQsAzP rJU1co06kA/mbIn1uwHVCj+KNGQGS++cBvuUKU30t8F8liW80OXWTMwqYTGNgVuR cdq9uACdFR9x -----END CERTIFICATE-----Generated at Mon Jan 26 16:21:55 2026 by rpki-client