This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/Ers0lMXA5ok349Wr6SFWIF2csrg.roa File: Ers0lMXA5ok349Wr6SFWIF2csrg.roa (raw, json) Hash identifier: nzl1RxmeoBfyHiC+5nu7MWFJ3ak5M0GdXB6zXYSGWvI= Subject key identifier: 12:BB:34:94:C5:C0:E6:89:37:E3:D5:AB:E9:21:56:20:5D:9C:B2:B8 Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881 Certificate serial: 019B7B36980451F35368BC1797E710FEECE7 Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/Ers0lMXA5ok349Wr6SFWIF2csrg.roa Signing time: Thu 01 Jan 2026 20:18:53 +0000 ROA not before: Thu 01 Jan 2026 20:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30781 IP address blocks: 5.226.0.0/21 maxlen: 24 31.7.248.0/21 maxlen: 24 31.172.160.0/22 maxlen: 24 31.172.232.0/21 maxlen: 24 37.26.184.0/21 maxlen: 24 37.61.240.0/21 maxlen: 24 37.110.192.0/21 maxlen: 24 37.156.226.0/24 maxlen: 24 46.22.192.0/20 maxlen: 24 46.102.116.0/24 maxlen: 24 46.231.216.0/21 maxlen: 24 46.247.128.0/22 maxlen: 24 46.255.200.0/21 maxlen: 24 77.72.88.0/21 maxlen: 24 77.246.80.0/20 maxlen: 24 78.153.224.0/19 maxlen: 24 82.96.128.0/18 maxlen: 24 82.163.36.0/22 maxlen: 24 82.196.24.0/21 maxlen: 24 85.31.192.0/19 maxlen: 24 87.121.136.0/21 maxlen: 24 88.212.144.0/21 maxlen: 24 89.37.106.0/24 maxlen: 24 89.44.77.0/24 maxlen: 24 89.44.210.0/24 maxlen: 24 91.224.162.0/23 maxlen: 24 91.226.193.0/24 maxlen: 24 91.250.244.0/24 maxlen: 24 94.100.160.0/20 maxlen: 24 95.143.64.0/20 maxlen: 24 149.232.160.0/20 maxlen: 24 176.241.120.0/21 maxlen: 24 185.4.60.0/23 maxlen: 24 185.4.62.0/24 maxlen: 24 185.15.140.0/22 maxlen: 24 185.53.80.0/22 maxlen: 24 185.61.184.0/21 maxlen: 24 185.62.184.0/22 maxlen: 24 185.65.79.0/24 maxlen: 24 185.78.156.0/22 maxlen: 24 185.91.224.0/22 maxlen: 24 185.92.36.0/22 maxlen: 24 185.114.100.0/22 maxlen: 24 185.116.63.0/24 maxlen: 24 185.209.52.0/22 maxlen: 24 193.39.119.0/24 maxlen: 24 193.151.84.0/22 maxlen: 24 193.151.84.0/24 maxlen: 24 193.151.87.0/24 maxlen: 24 193.189.124.0/23 maxlen: 24 194.42.100.0/23 maxlen: 24 194.116.142.0/23 maxlen: 24 195.43.64.0/23 maxlen: 24 195.128.147.0/24 maxlen: 24 195.189.186.0/23 maxlen: 24 195.234.35.0/24 maxlen: 24 212.18.240.0/21 maxlen: 24 212.85.229.0/24 maxlen: 24 212.85.230.0/23 maxlen: 24 2a00:68c0::/32 maxlen: 48 2a00:78c0::/29 maxlen: 48 2a01:240::/32 maxlen: 48 2a01:290::/32 maxlen: 48 2a02:398::/32 maxlen: 48 2a03:bdc0::/32 maxlen: 48 2a04:cc00::/29 maxlen: 48 2a0b:41c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:98:04:51:f3:53:68:bc:17:97:e7:10:fe:ec:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881 Validity Not Before: Jan 1 20:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12bb3494c5c0e68937e3d5abe92156205d9cb2b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d3:20:1f:3e:21:97:bc:04:8d:d9:15:66:70: 23:d0:0a:71:79:44:43:e0:94:8c:cc:3d:c0:08:fb: fb:1e:27:1d:4f:80:47:fe:a3:a7:1e:84:74:fb:c4: 0c:a3:6b:08:09:71:5f:fe:6e:1f:a2:15:af:57:83: fb:5c:88:b4:1b:6f:65:4c:0f:28:52:5f:22:22:a3: fd:d1:dc:76:6f:26:bd:f6:ff:68:d2:90:73:1b:d0: 20:70:f1:5d:71:f4:f4:a0:94:bf:59:48:1d:f4:1c: a3:f9:4b:38:bb:37:90:98:93:41:19:b0:e5:09:c8: ac:bc:21:31:21:9a:f5:11:31:4c:c7:94:0c:36:cc: ae:9e:ae:5c:60:16:2e:6d:93:48:87:60:b9:0f:a1: 83:0a:f2:94:99:94:4d:15:79:13:48:c1:88:24:f8: 07:92:14:36:8a:1f:94:88:b1:9c:84:17:ef:02:79: d8:6e:15:59:68:a3:1e:7f:91:80:31:f0:0b:26:01: ec:ca:c4:b1:9c:42:ce:e9:a6:4b:ed:2a:a8:a1:71: 0e:ff:78:95:f3:05:72:18:e9:da:3d:f1:b9:6d:bd: f0:6d:a6:18:fe:58:ad:52:3d:a3:f6:d4:1e:b1:cd: 5b:35:3c:7a:a3:d9:eb:c0:b4:da:29:a9:ee:9a:d9: a6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BB:34:94:C5:C0:E6:89:37:E3:D5:AB:E9:21:56:20:5D:9C:B2:B8 X509v3 Authority Key Identifier: keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/Ers0lMXA5ok349Wr6SFWIF2csrg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.226.0.0/21 31.7.248.0/21 31.172.160.0/22 31.172.232.0/21 37.26.184.0/21 37.61.240.0/21 37.110.192.0/21 37.156.226.0/24 46.22.192.0/20 46.102.116.0/24 46.231.216.0/21 46.247.128.0/22 46.255.200.0/21 77.72.88.0/21 77.246.80.0/20 78.153.224.0/19 82.96.128.0/18 82.163.36.0/22 82.196.24.0/21 85.31.192.0/19 87.121.136.0/21 88.212.144.0/21 89.37.106.0/24 89.44.77.0/24 89.44.210.0/24 91.224.162.0/23 91.226.193.0/24 91.250.244.0/24 94.100.160.0/20 95.143.64.0/20 149.232.160.0/20 176.241.120.0/21 185.4.60.0-185.4.62.255 185.15.140.0/22 185.53.80.0/22 185.61.184.0/21 185.62.184.0/22 185.65.79.0/24 185.78.156.0/22 185.91.224.0/22 185.92.36.0/22 185.114.100.0/22 185.116.63.0/24 185.209.52.0/22 193.39.119.0/24 193.151.84.0/22 193.189.124.0/23 194.42.100.0/23 194.116.142.0/23 195.43.64.0/23 195.128.147.0/24 195.189.186.0/23 195.234.35.0/24 212.18.240.0/21 212.85.229.0-212.85.231.255 IPv6: 2a00:68c0::/32 2a00:78c0::/29 2a01:240::/32 2a01:290::/32 2a02:398::/32 2a03:bdc0::/32 2a04:cc00::/29 2a0b:41c0::/29 Signature Algorithm: sha256WithRSAEncryption 31:7b:da:36:fc:6d:34:d8:93:42:98:2b:30:bc:eb:e8:24:d5: cf:a8:3d:a4:93:fb:cb:a5:a1:2c:1a:67:16:09:a9:9a:7b:8e: 3f:18:8f:28:7e:91:9e:f3:8b:97:f0:ef:20:29:0c:6b:22:bc: 73:b4:75:c0:09:f1:eb:49:f9:15:4e:ea:fc:88:17:fe:ab:98: 9b:25:ad:6d:f6:4a:f6:db:5d:fc:8e:73:89:28:66:cb:3d:5a: 1e:42:a1:b7:e1:6e:c1:1d:03:e4:b4:b1:0e:87:2d:2c:36:78: b9:84:63:39:a1:26:b3:9c:2e:02:47:9f:0d:21:e5:9c:09:63: 65:2d:1e:32:9e:1d:c2:84:de:35:18:9e:14:52:51:e6:ef:7c: d6:88:99:3d:99:4f:05:cf:d3:d5:88:8c:a8:b4:f0:2e:46:9a: d2:3a:ac:7f:29:7a:50:4a:93:19:54:dc:ab:1e:18:bb:71:93: 39:ae:ff:2c:f5:74:a5:79:b8:3d:61:1d:30:91:62:cc:1b:6f: 36:ff:26:73:a4:b4:b8:76:e1:cb:b0:93:91:12:a4:95:be:7f: 19:9b:0c:36:4a:3c:0e:48:b6:87:e1:35:1e:a7:8b:fb:27:35: a7:9c:6f:dc:aa:b8:a0:ca:6d:96:e7:32:a4:50:af:1a:be:1a: b7:97:a0:e0 -----BEGIN CERTIFICATE----- MIIGmzCCBYOgAwIBAgISAZt7NpgEUfNTaLwXl+cQ/uznMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5 ODk4ODEwHhcNMjYwMTAxMjAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmJiMzQ5NGM1YzBlNjg5MzdlM2Q1YWJlOTIxNTYyMDVkOWNiMmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltMgHz4hl7wEjdkVZnAj0ApxeURD 4JSMzD3ACPv7HicdT4BH/qOnHoR0+8QMo2sICXFf/m4fohWvV4P7XIi0G29lTA8o Ul8iIqP90dx2bya99v9o0pBzG9AgcPFdcfT0oJS/WUgd9Byj+Us4uzeQmJNBGbDl CcisvCExIZr1ETFMx5QMNsyunq5cYBYubZNIh2C5D6GDCvKUmZRNFXkTSMGIJPgH khQ2ih+UiLGchBfvAnnYbhVZaKMef5GAMfALJgHsysSxnELO6aZL7SqooXEO/3iV 8wVyGOnaPfG5bb3wbaYY/litUj2j9tQesc1bNTx6o9nrwLTaKanumtmmcwIDAQAB o4IDpzCCA6MwHQYDVR0OBBYEFBK7NJTFwOaJN+PVq+khViBdnLK4MB8GA1UdIwQY MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt ZGQxMTVmOWUzMzAxLzEvRXJzMGxNWEE1b2szNDlXcjZTRldJRjJjc3JnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBuwYIKwYBBQUHAQcBAf8EggGqMIIBpjCCAWIEAgABMIIB WgMEAwXiAAMEAx8H+AMEAh+soAMEAx+s6AMEAyUauAMEAyU98AMEAyVuwAMEACWc 4gMEBC4WwAMEAC5mdAMEAy7n2AMEAi73gAMEAy7/yAMEA01IWAMEBE32UAMEBU6Z 4AMEBlJggAMEAlKjJAMEA1LEGAMEBVUfwAMEA1d5iAMEA1jUkAMEAFklagMEAFks TQMEAFks0gMEAVvgogMEAFviwQMEAFv69AMEBF5koAMEBF+PQAMEBJXooAMEA7Dx eDAMAwQCuQQ8AwQAuQQ+AwQCuQ+MAwQCuTVQAwQDuT24AwQCuT64AwQAuUFPAwQC uU6cAwQCuVvgAwQCuVwkAwQCuXJkAwQAuXQ/AwQCudE0AwQAwSd3AwQCwZdUAwQB wb18AwQBwipkAwQBwnSOAwQBwytAAwQAw4CTAwQBw726AwQAw+ojAwQD1BLwMAwD BADUVeUDBAPUVeAwPgQCAAIwOAMFACoAaMADBQMqAHjAAwUAKgECQAMFACoBApAD BQAqAgOYAwUAKgO9wAMFAyoEzAADBQMqC0HAMA0GCSqGSIb3DQEBCwUAA4IBAQAx e9o2/G002JNCmCswvOvoJNXPqD2kk/vLpaEsGmcWCamae44/GI8ofpGe84uX8O8g KQxrIrxztHXACfHrSfkVTur8iBf+q5ibJa1t9kr22138jnOJKGbLPVoeQqG34W7B HQPktLEOhy0sNni5hGM5oSaznC4CR58NIeWcCWNlLR4ynh3ChN41GJ4UUlHm73zW iJk9mU8Fz9PViIyotPAuRprSOqx/KXpQSpMZVNyrHhi7cZM5rv8s9XSlebg9YR0w kWLMG282/yZzpLS4duHLsJOREqSVvn8Zmww2SjwOSLaH4TUep4v7JzWnnG/cqrig ym2W5zKkUK8avhq3l6Dg -----END CERTIFICATE-----Generated at Sun Jan 25 16:35:56 2026 by rpki-client