This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/5297yxBDe4bFnm6yaKCc_xcvMPM.roa File: 5297yxBDe4bFnm6yaKCc_xcvMPM.roa (raw, json) Hash identifier: 8NbiM8n/hvtvBav4iZ22v77T5SgUB/iwinjXfA4OrRc= Subject key identifier: E7:6F:7B:CB:10:43:7B:86:C5:9E:6E:B2:68:A0:9C:FF:17:2F:30:F3 Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Certificate serial: 019B7C7FC348B47F4158D8C8A18EE12D0C32 Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/5297yxBDe4bFnm6yaKCc_xcvMPM.roa Signing time: Fri 02 Jan 2026 02:18:26 +0000 ROA not before: Fri 02 Jan 2026 02:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203020 IP address blocks: 5.154.174.0/24 maxlen: 24 31.223.187.0/24 maxlen: 24 45.10.192.0/24 maxlen: 32 45.10.193.0/24 maxlen: 32 45.95.24.0/22 maxlen: 32 45.144.88.0/22 maxlen: 24 45.149.28.0/22 maxlen: 24 45.153.157.0/24 maxlen: 24 45.153.158.0/23 maxlen: 32 45.156.224.0/22 maxlen: 32 80.246.30.0/24 maxlen: 32 81.21.232.0/22 maxlen: 32 86.105.183.0/24 maxlen: 32 87.239.255.0/24 maxlen: 32 89.35.249.0/24 maxlen: 32 89.40.24.0/24 maxlen: 32 89.44.205.0/24 maxlen: 32 91.228.216.0/24 maxlen: 24 94.46.206.0/24 maxlen: 32 103.21.52.0/24 maxlen: 32 103.24.232.0/22 maxlen: 32 103.71.60.0/24 maxlen: 32 103.76.255.0/24 maxlen: 32 103.81.230.0/23 maxlen: 23 103.145.75.0/24 maxlen: 32 103.204.222.0/23 maxlen: 32 103.221.52.0/22 maxlen: 32 103.228.200.0/22 maxlen: 32 103.251.26.0/23 maxlen: 23 104.36.50.0/24 maxlen: 32 116.206.96.0/22 maxlen: 32 137.59.60.0/22 maxlen: 32 167.160.96.0/24 maxlen: 32 167.160.97.0/24 maxlen: 32 167.160.98.0/24 maxlen: 32 178.251.234.0/23 maxlen: 32 185.36.254.0/24 maxlen: 32 185.96.162.0/24 maxlen: 32 185.108.104.0/24 maxlen: 32 185.108.105.0/24 maxlen: 32 185.147.140.0/22 maxlen: 32 185.152.36.0/22 maxlen: 32 185.152.248.0/22 maxlen: 32 185.153.151.0/24 maxlen: 32 185.160.44.0/22 maxlen: 32 185.166.84.0/24 maxlen: 32 185.184.228.0/24 maxlen: 32 185.188.61.0/24 maxlen: 24 185.201.188.0/24 maxlen: 24 185.217.64.0/22 maxlen: 22 185.242.217.0/24 maxlen: 24 188.119.154.0/24 maxlen: 32 193.36.89.0/24 maxlen: 32 195.47.194.0/24 maxlen: 32 195.225.81.0/24 maxlen: 24 199.249.223.0/24 maxlen: 32 2a01:4740::/32 maxlen: 48 2a05:28c0::/29 maxlen: 32 2a05:f4c0::/29 maxlen: 29 2a06:3040::/29 maxlen: 48 2a06:46c0::/29 maxlen: 32 2a06:4a00::/29 maxlen: 32 2a06:5000::/29 maxlen: 32 2a06:5700::/29 maxlen: 32 2a06:5800::/29 maxlen: 48 2a06:df80::/29 maxlen: 29 2a06:e480::/29 maxlen: 29 2a07:4780::/29 maxlen: 29 2a07:9c80::/29 maxlen: 29 2a07:f2c0::/29 maxlen: 29 2a0a:3080::/29 maxlen: 29 2a0b:3f40::/29 maxlen: 29 2a0c:d8c0::/29 maxlen: 29 2a0c:ec40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:c3:48:b4:7f:41:58:d8:c8:a1:8e:e1:2d:0c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Validity Not Before: Jan 2 02:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e76f7bcb10437b86c59e6eb268a09cff172f30f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a7:c9:23:bd:88:54:12:fe:bd:90:6d:b1:f8: 1f:58:f1:e6:0b:1e:db:89:b0:71:db:61:9c:f1:e5: b3:48:23:19:e4:08:7e:a8:04:7c:6c:a9:87:6d:ef: 7f:a8:07:76:37:8d:af:24:84:fc:cc:39:85:04:36: 8b:65:86:d3:da:af:d5:fc:6a:ab:1e:d8:e5:f9:4f: c4:03:bb:b5:72:59:12:7a:ed:17:10:05:64:00:ea: 21:b4:53:0b:d4:24:03:51:2f:63:43:ec:f0:d7:ef: ba:e7:78:26:85:ed:cf:8e:08:ef:e0:80:55:cc:fd: 27:10:21:d2:98:84:15:69:f4:d9:cc:ba:4d:e3:31: c2:c6:f5:81:a1:59:bf:99:1e:43:c3:b8:61:f8:01: b3:6c:0d:75:5d:4b:ad:44:4c:08:ee:d4:40:07:c1: 97:79:27:dd:f1:06:08:24:d5:98:eb:fa:57:78:e9: e7:62:a1:a1:00:eb:bf:0f:78:3e:90:0e:9d:c7:7b: 26:68:1d:ca:20:b9:cd:08:9a:21:81:f2:27:ae:b3: c6:75:4b:9b:a9:51:94:4c:29:d7:1f:97:c1:bb:8e: ae:2f:59:c8:3f:77:a2:b4:7e:93:c5:81:e0:13:3a: 66:af:a8:ea:72:3f:f1:b6:a7:c9:c5:51:d0:65:7f: b7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6F:7B:CB:10:43:7B:86:C5:9E:6E:B2:68:A0:9C:FF:17:2F:30:F3 X509v3 Authority Key Identifier: keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/5297yxBDe4bFnm6yaKCc_xcvMPM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.174.0/24 31.223.187.0/24 45.10.192.0/23 45.95.24.0/22 45.144.88.0/22 45.149.28.0/22 45.153.157.0-45.153.159.255 45.156.224.0/22 80.246.30.0/24 81.21.232.0/22 86.105.183.0/24 87.239.255.0/24 89.35.249.0/24 89.40.24.0/24 89.44.205.0/24 91.228.216.0/24 94.46.206.0/24 103.21.52.0/24 103.24.232.0/22 103.71.60.0/24 103.76.255.0/24 103.81.230.0/23 103.145.75.0/24 103.204.222.0/23 103.221.52.0/22 103.228.200.0/22 103.251.26.0/23 104.36.50.0/24 116.206.96.0/22 137.59.60.0/22 167.160.96.0-167.160.98.255 178.251.234.0/23 185.36.254.0/24 185.96.162.0/24 185.108.104.0/23 185.147.140.0/22 185.152.36.0/22 185.152.248.0/22 185.153.151.0/24 185.160.44.0/22 185.166.84.0/24 185.184.228.0/24 185.188.61.0/24 185.201.188.0/24 185.217.64.0/22 185.242.217.0/24 188.119.154.0/24 193.36.89.0/24 195.47.194.0/24 195.225.81.0/24 199.249.223.0/24 IPv6: 2a01:4740::/32 2a05:28c0::/29 2a05:f4c0::/29 2a06:3040::/29 2a06:46c0::/29 2a06:4a00::/29 2a06:5000::/29 2a06:5700::/29 2a06:5800::/29 2a06:df80::/29 2a06:e480::/29 2a07:4780::/29 2a07:9c80::/29 2a07:f2c0::/29 2a0a:3080::/29 2a0b:3f40::/29 2a0c:d8c0::/29 2a0c:ec40::/29 Signature Algorithm: sha256WithRSAEncryption 51:9f:23:10:03:5c:c8:91:84:9f:5e:45:a5:8c:48:64:e8:96: 27:5a:72:34:96:1e:b8:71:72:2a:dc:56:75:5a:0b:ef:99:2c: 7a:29:ed:81:02:67:23:f8:7f:ed:c6:34:48:05:0a:81:0a:69: 2d:43:58:d1:79:63:f6:f4:5f:50:f2:cf:98:f3:b8:c1:4e:e7: 56:b5:d6:7c:72:2c:03:f4:17:d5:eb:fa:5f:30:6d:af:1a:db: 7d:cd:a1:41:30:45:6e:33:28:e6:5e:e5:5d:03:fe:53:c1:43: 5c:30:1f:32:53:5f:47:a5:94:d3:be:cc:6d:85:25:49:19:8a: 81:4f:72:a6:8b:64:ff:4d:6f:30:c2:cc:73:fd:1e:6c:91:ed: 51:c4:c8:53:06:68:8d:61:e9:c8:96:45:2d:45:9e:6f:08:c3: 7a:8c:6d:85:a5:a0:e5:a4:ba:b9:2e:47:1d:5e:45:63:74:ba: 71:de:11:32:0b:b3:28:f2:dd:89:2c:ba:fb:f7:f6:72:93:a3: 43:cf:45:db:43:69:d7:4c:6d:2f:e1:56:0f:45:21:fb:7f:8d: e8:f8:69:09:38:a2:1b:61:95:78:a6:12:60:55:e6:33:ee:13: ac:56:8b:ef:76:07:db:f4:90:1d:25:66:20:2d:24:0f:c6:ec: b8:80:35:94 -----BEGIN CERTIFICATE----- MIIGyjCCBbKgAwIBAgISAZt8f8NItH9BWNjIoY7hLQwyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx OWE3NGUwHhcNMjYwMTAyMDIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzZmN2JjYjEwNDM3Yjg2YzU5ZTZlYjI2OGEwOWNmZjE3MmYzMGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqfJI72IVBL+vZBtsfgfWPHmCx7b ibBx22Gc8eWzSCMZ5Ah+qAR8bKmHbe9/qAd2N42vJIT8zDmFBDaLZYbT2q/V/Gqr Htjl+U/EA7u1clkSeu0XEAVkAOohtFML1CQDUS9jQ+zw1++653gmhe3Pjgjv4IBV zP0nECHSmIQVafTZzLpN4zHCxvWBoVm/mR5Dw7hh+AGzbA11XUutREwI7tRAB8GX eSfd8QYIJNWY6/pXeOnnYqGhAOu/D3g+kA6dx3smaB3KILnNCJohgfInrrPGdUub qVGUTCnXH5fBu46uL1nIP3eitH6TxYHgEzpmr6jqcj/xtqfJxVHQZX+3DwIDAQAB o4ID1jCCA9IwHQYDVR0OBBYEFOdve8sQQ3uGxZ5usmignP8XLzDzMB8GA1UdIwQY MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct OTViMDhlMzY2MGNmLzEvNTI5N3l4QkRlNGJGbm02eWFLQ2NfeGN2TVBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIB6gYIKwYBBQUHAQcBAf8EggHZMIIB1TCCAUoEAgABMIIB QgMEAAWargMEAB/fuwMEAS0KwAMEAi1fGAMEAi2QWAMEAi2VHDAMAwQALZmdAwQF LZmAAwQCLZzgAwQAUPYeAwQCURXoAwQAVmm3AwQAV+//AwQAWSP5AwQAWSgYAwQA WSzNAwQAW+TYAwQAXi7OAwQAZxU0AwQCZxjoAwQAZ0c8AwQAZ0z/AwQBZ1HmAwQA Z5FLAwQBZ8zeAwQCZ900AwQCZ+TIAwQBZ/saAwQAaCQyAwQCdM5gAwQCiTs8MAwD BAWnoGADBACnoGIDBAGy++oDBAC5JP4DBAC5YKIDBAG5bGgDBAK5k4wDBAK5mCQD BAK5mPgDBAC5mZcDBAK5oCwDBAC5plQDBAC5uOQDBAC5vD0DBAC5ybwDBAK52UAD BAC58tkDBAC8d5oDBADBJFkDBADDL8IDBADD4VEDBADH+d8wgYQEAgACMH4DBQAq AUdAAwUDKgUowAMFAyoF9MADBQMqBjBAAwUDKgZGwAMFAyoGSgADBQMqBlAAAwUD KgZXAAMFAyoGWAADBQMqBt+AAwUDKgbkgAMFAyoHR4ADBQMqB5yAAwUDKgfywAMF AyoKMIADBQMqCz9AAwUDKgzYwAMFAyoM7EAwDQYJKoZIhvcNAQELBQADggEBAFGf IxADXMiRhJ9eRaWMSGTolidacjSWHrhxcircVnVaC++ZLHop7YECZyP4f+3GNEgF CoEKaS1DWNF5Y/b0X1Dyz5jzuMFO51a11nxyLAP0F9Xr+l8wba8a233NoUEwRW4z KOZe5V0D/lPBQ1wwHzJTX0ellNO+zG2FJUkZioFPcqaLZP9NbzDCzHP9HmyR7VHE yFMGaI1h6ciWRS1Fnm8Iw3qMbYWloOWkurkuRx1eRWN0unHeETILsyjy3Yksuvv3 9nKTo0PPRdtDaddMbS/hVg9FIft/jej4aQk4ohthlXimEmBV5jPuE6xWi+92B9v0 kB0lZiAtJA/G7LiANZQ= -----END CERTIFICATE-----Generated at Sun Jan 18 10:46:39 2026 by rpki-client