This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/VK5J5QXmsEfKr-yeuBSA7pgMRS0.roa File: VK5J5QXmsEfKr-yeuBSA7pgMRS0.roa (raw, json) Hash identifier: QEOQEZoGmfNdE7eYFQFsPYIivVEyHZdR3wVt3CbFPeo= Subject key identifier: 54:AE:49:E5:05:E6:B0:47:CA:AF:EC:9E:B8:14:80:EE:98:0C:45:2D Certificate issuer: /CN=f2d593b1c87b81739ec41910295bf385f2c9a992 Certificate serial: 019BB18D1F6AD6AC9FB1B2F55ECF81E39A97 Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/VK5J5QXmsEfKr-yeuBSA7pgMRS0.roa Signing time: Mon 12 Jan 2026 09:32:54 +0000 ROA not before: Mon 12 Jan 2026 09:32:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210892 IP address blocks: 5.1.45.0/24 maxlen: 24 37.235.120.0/23 maxlen: 23 37.235.122.0/23 maxlen: 23 37.235.124.0/23 maxlen: 23 37.235.126.0/23 maxlen: 23 79.135.124.0/24 maxlen: 24 79.135.125.0/24 maxlen: 24 79.135.126.0/24 maxlen: 24 79.135.127.0/24 maxlen: 24 94.198.80.0/23 maxlen: 23 94.198.82.0/23 maxlen: 23 94.198.84.0/23 maxlen: 23 94.198.86.0/23 maxlen: 23 109.224.223.0/24 maxlen: 24 109.224.232.0/24 maxlen: 24 168.222.168.0/22 maxlen: 22 168.222.172.0/22 maxlen: 22 213.254.180.0/24 maxlen: 24 213.254.181.0/24 maxlen: 24 213.254.182.0/24 maxlen: 24 213.254.183.0/24 maxlen: 24 2a11:2b03:100::/40 maxlen: 40 2a11:2b03:200::/40 maxlen: 40 2a11:2b03:300::/40 maxlen: 40 2a11:2b03:8100::/40 maxlen: 40 2a11:2b03:8200::/40 maxlen: 40 2a11:2b03:8300::/40 maxlen: 40 2a11:2b07:1::/48 maxlen: 48 2a11:2b07:f000::/48 maxlen: 48 2a11:2b07:f001::/48 maxlen: 48 2a11:2b07:f002::/48 maxlen: 48 2a11:2b07:f003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:8d:1f:6a:d6:ac:9f:b1:b2:f5:5e:cf:81:e3:9a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992 Validity Not Before: Jan 12 09:32:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54ae49e505e6b047caafec9eb81480ee980c452d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:38:d1:bb:bf:87:38:9b:ac:aa:1c:b1:41:96: 6f:83:a7:7f:72:0e:4d:f7:04:2d:4a:77:2f:4a:77: 6f:fd:24:0f:8b:b7:0b:85:2f:6f:52:7e:fd:33:a8: 88:52:44:55:80:49:67:98:1e:ad:50:0e:a0:2a:2d: 1c:a1:d7:e6:46:7c:5e:de:61:0c:d0:3e:24:19:06: 14:6d:fd:10:9e:ee:4d:b2:25:dd:2c:68:dc:75:e6: ef:4f:30:e3:5f:0e:f8:04:21:50:b5:90:0f:38:93: 89:1d:23:e5:53:e1:5d:1a:de:74:77:a2:b7:98:55: 10:24:63:99:02:88:36:34:d5:19:62:34:58:51:19: 4f:98:dc:ae:8f:fb:06:03:2e:43:5f:b7:95:59:f1: 8c:87:bb:9d:9b:eb:f1:09:1d:be:06:7a:a7:80:41: e0:cf:1e:f0:10:6c:20:9f:d3:a7:e5:51:3a:9e:1b: da:05:7c:cb:a7:0e:7e:5f:34:76:be:a6:d3:5f:79: 51:f7:94:e1:e5:c8:ea:82:ef:1d:c4:41:86:dc:63: 3c:cb:12:2d:7f:d5:93:1d:02:8d:ec:c0:05:ec:57: 2f:35:66:7d:34:14:e1:de:0f:4e:0b:45:7b:c8:c4: 0a:0b:b8:a7:58:3f:62:b5:1a:23:94:33:8a:89:c4: b0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AE:49:E5:05:E6:B0:47:CA:AF:EC:9E:B8:14:80:EE:98:0C:45:2D X509v3 Authority Key Identifier: keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/VK5J5QXmsEfKr-yeuBSA7pgMRS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.45.0/24 37.235.120.0/21 79.135.124.0/22 94.198.80.0/21 109.224.223.0/24 109.224.232.0/24 168.222.168.0/21 213.254.180.0/22 IPv6: 2a11:2b03:100::-2a11:2b03:3ff:ffff:ffff:ffff:ffff:ffff 2a11:2b03:8100::-2a11:2b03:83ff:ffff:ffff:ffff:ffff:ffff 2a11:2b07:1::/48 2a11:2b07:f000::/46 Signature Algorithm: sha256WithRSAEncryption ac:be:82:f5:36:c1:a1:d8:9f:a0:37:85:71:02:01:16:a5:5e: 50:9d:aa:80:12:16:e7:36:e9:99:ee:61:7c:f8:c9:bc:99:19: 20:b1:c0:e4:aa:c7:b2:0d:af:7d:1a:61:88:35:62:60:ac:46: c8:8e:36:68:71:38:b8:d3:8f:e8:c2:2b:74:45:04:04:2e:fa: 5a:28:55:96:0d:4d:8d:58:cf:80:29:77:3e:3c:20:40:4e:80: 08:ca:4a:62:31:3a:8b:07:80:3e:62:47:ce:7f:e5:3d:cf:cc: 06:bc:43:52:00:52:f7:29:81:21:46:4f:45:3d:65:e7:15:15: 78:e1:bb:57:c2:a4:af:b7:94:a5:74:58:67:cd:98:d0:2d:ed: 53:b1:b6:27:63:e3:bb:e2:7e:3b:46:f7:92:60:1d:70:35:b2: 42:00:5f:fb:20:bb:2a:58:09:40:a5:ba:89:89:cd:e6:42:61: 4d:57:58:f7:dc:41:01:37:3f:4a:a1:49:6d:f3:36:68:19:f1: 59:62:57:ae:a9:c4:96:d0:6f:a1:e7:0d:14:66:5b:b0:52:1b: b3:86:09:1a:50:7a:64:90:f9:e8:3d:c3:84:41:1a:f5:52:70: c5:00:be:04:d1:b9:e8:17:b6:d0:12:f2:b6:da:00:7f:a6:ec: 62:51:24:65 -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgISAZuxjR9q1qyfsbL1Xs+B45qXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZDU5M2IxYzg3YjgxNzM5ZWM0MTkxMDI5NWJmMzg1ZjJj OWE5OTIwHhcNMjYwMTEyMDkzMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGFlNDllNTA1ZTZiMDQ3Y2FhZmVjOWViODE0ODBlZTk4MGM0NTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DjRu7+HOJusqhyxQZZvg6d/cg5N 9wQtSncvSndv/SQPi7cLhS9vUn79M6iIUkRVgElnmB6tUA6gKi0codfmRnxe3mEM 0D4kGQYUbf0Qnu5NsiXdLGjcdebvTzDjXw74BCFQtZAPOJOJHSPlU+FdGt50d6K3 mFUQJGOZAog2NNUZYjRYURlPmNyuj/sGAy5DX7eVWfGMh7udm+vxCR2+BnqngEHg zx7wEGwgn9On5VE6nhvaBXzLpw5+XzR2vqbTX3lR95Th5cjqgu8dxEGG3GM8yxIt f9WTHQKN7MAF7FcvNWZ9NBTh3g9OC0V7yMQKC7inWD9itRojlDOKicSwJQIDAQAB o4ICcjCCAm4wHQYDVR0OBBYEFFSuSeUF5rBHyq/snrgUgO6YDEUtMB8GA1UdIwQY MBaAFPLVk7HIe4FznsQZEClb84XyyamSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHRXVHNjaDdnWE9leEJrUUtWdnpoZkxKcVpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85MzkxYTYtZGQzZi00OTMzLTlkYTIt OWI4ZDY4ZWU4N2ZjLzEvVks1SjVRWG1zRWZLci15ZXVCU0E3cGdNUlMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS85MzkxYTYtZGQzZi00OTMzLTlkYTItOWI4ZDY4ZWU4N2Zj LzEvOHRXVHNjaDdnWE9leEJrUUtWdnpoZkxKcVpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwNgQCAAEwMAMEAAUBLQME AyXreAMEAk+HfAMEA17GUAMEAG3g3wMEAG3g6AMEA6jeqAMEAtX+tDA8BAIAAjA2 MBADBgAqESsDAQMGAioRKwMAMBADBgAqESsDgQMGAioRKwOAAwcAKhErBwABAwcC KhErB/AAMA0GCSqGSIb3DQEBCwUAA4IBAQCsvoL1NsGh2J+gN4VxAgEWpV5QnaqA EhbnNumZ7mF8+Mm8mRkgscDkqseyDa99GmGINWJgrEbIjjZocTi404/owit0RQQE LvpaKFWWDU2NWM+AKXc+PCBAToAIykpiMTqLB4A+YkfOf+U9z8wGvENSAFL3KYEh Rk9FPWXnFRV44btXwqSvt5SldFhnzZjQLe1TsbYnY+O74n47RveSYB1wNbJCAF/7 ILsqWAlApbqJic3mQmFNV1j33EEBNz9KoUlt8zZoGfFZYleuqcSW0G+h5w0UZluw UhuzhgkaUHpkkPnoPcOEQRr1UnDFAL4E0bnoF7bQEvK22gB/puxiUSRl -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:31 2026 by rpki-client