This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/EtCGEEpC5G6URMvHX6E_7kcgq0Y.roa File: EtCGEEpC5G6URMvHX6E_7kcgq0Y.roa (raw, json) Hash identifier: Vh94ZeJ6hHgLd3BvQWUZuQb7OCyQZs1gagUZpif800U= Subject key identifier: 12:D0:86:10:4A:42:E4:6E:94:44:CB:C7:5F:A1:3F:EE:47:20:AB:46 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019BEAE7FC24F056A275402C5A84D52C7A23 Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/EtCGEEpC5G6URMvHX6E_7kcgq0Y.roa Signing time: Fri 23 Jan 2026 12:50:30 +0000 ROA not before: Fri 23 Jan 2026 12:50:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9125 IP address blocks: 5.172.34.0/23 maxlen: 23 5.172.34.0/24 maxlen: 24 5.172.37.0/24 maxlen: 24 5.172.39.0/24 maxlen: 24 89.23.65.0/24 maxlen: 24 89.23.67.0/24 maxlen: 24 89.23.68.0/23 maxlen: 23 89.23.70.0/24 maxlen: 24 89.23.71.0/24 maxlen: 24 89.23.74.0/24 maxlen: 24 89.23.75.0/24 maxlen: 24 89.23.77.0/24 maxlen: 24 89.23.78.0/24 maxlen: 24 89.23.79.0/24 maxlen: 24 89.23.83.0/24 maxlen: 24 89.23.84.0/24 maxlen: 24 89.23.86.0/24 maxlen: 24 89.23.88.0/24 maxlen: 24 89.23.90.0/24 maxlen: 24 92.42.248.0/22 maxlen: 22 92.42.252.0/24 maxlen: 24 92.42.253.0/24 maxlen: 24 92.42.254.0/24 maxlen: 24 92.42.255.0/24 maxlen: 24 93.93.192.0/21 maxlen: 21 95.140.112.0/22 maxlen: 22 95.140.115.0/24 maxlen: 24 95.140.116.0/22 maxlen: 22 95.140.120.0/23 maxlen: 23 95.140.124.0/22 maxlen: 22 95.140.125.0/24 maxlen: 24 109.111.224.0/24 maxlen: 24 109.111.225.0/24 maxlen: 24 109.111.226.0/24 maxlen: 24 109.111.227.0/24 maxlen: 24 109.111.228.0/24 maxlen: 24 109.111.229.0/24 maxlen: 24 109.111.230.0/23 maxlen: 23 109.111.232.0/22 maxlen: 22 109.111.236.0/22 maxlen: 22 109.111.240.0/24 maxlen: 24 109.111.243.0/24 maxlen: 24 109.111.244.0/24 maxlen: 24 109.111.245.0/24 maxlen: 24 109.111.246.0/24 maxlen: 24 109.111.247.0/24 maxlen: 24 109.111.248.0/24 maxlen: 24 109.111.249.0/24 maxlen: 24 109.111.250.0/24 maxlen: 24 109.111.252.0/23 maxlen: 23 109.111.254.0/24 maxlen: 24 178.254.128.0/21 maxlen: 21 178.254.133.0/24 maxlen: 24 178.254.136.0/22 maxlen: 22 178.254.140.0/22 maxlen: 22 178.254.144.0/24 maxlen: 24 178.254.145.0/24 maxlen: 24 178.254.146.0/24 maxlen: 24 178.254.148.0/24 maxlen: 24 178.254.149.0/24 maxlen: 24 178.254.151.0/24 maxlen: 24 178.254.152.0/24 maxlen: 24 178.254.153.0/24 maxlen: 24 178.254.154.0/24 maxlen: 24 178.254.155.0/24 maxlen: 24 178.254.156.0/24 maxlen: 24 178.254.157.0/24 maxlen: 24 178.254.158.0/24 maxlen: 24 178.254.159.0/24 maxlen: 24 178.254.163.0/24 maxlen: 24 178.254.165.0/24 maxlen: 24 178.254.169.0/24 maxlen: 24 178.254.172.0/24 maxlen: 24 178.254.175.0/24 maxlen: 24 178.254.183.0/24 maxlen: 24 178.254.184.0/24 maxlen: 24 178.254.187.0/24 maxlen: 24 178.254.188.0/22 maxlen: 24 185.157.44.0/24 maxlen: 24 193.104.68.0/24 maxlen: 24 217.169.208.0/20 maxlen: 20 217.169.208.0/22 maxlen: 22 217.169.212.0/22 maxlen: 22 217.169.216.0/22 maxlen: 22 217.169.219.0/24 maxlen: 24 217.169.220.0/22 maxlen: 22 2a02:b58::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:e7:fc:24:f0:56:a2:75:40:2c:5a:84:d5:2c:7a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Jan 23 12:50:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12d086104a42e46e9444cbc75fa13fee4720ab46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7b:17:e8:62:41:ca:3d:2f:bf:1b:07:23:17: 8e:3b:9d:2a:b2:1a:1a:59:4a:c7:4b:bf:a7:a0:ad: cd:56:2f:52:81:a8:5d:4e:09:7b:97:70:a0:15:2a: 69:fa:72:9c:15:e3:c8:53:f0:4d:55:79:a2:78:21: 37:de:0f:8e:89:b3:36:43:78:db:36:8e:8e:e9:ec: d2:b3:3b:82:6e:4e:58:08:5e:a9:e9:3f:d2:83:79: e7:a3:af:59:0e:eb:32:6e:b1:84:87:61:2b:fb:4e: 54:34:a0:19:2d:a0:22:7a:81:f0:a1:15:ff:53:8e: 0a:12:5a:38:8f:3a:37:96:78:e4:a3:2b:d4:a9:bb: 88:5a:6c:bc:6e:de:db:6a:70:cc:c4:d8:dd:16:ee: f0:92:1b:a3:0a:fe:c4:20:b1:11:19:53:57:0b:66: f8:07:8a:de:af:3a:be:8f:65:a1:fa:e7:f9:2a:10: 19:15:4f:24:52:76:af:32:17:e1:10:fb:4c:4d:d6: 55:81:68:fb:7f:4b:9b:e7:1d:a0:87:ad:a1:7c:bb: 4f:bf:ae:4c:84:e3:4c:9a:f4:10:62:c4:33:c6:81: b8:48:85:4c:88:b7:1e:61:20:ca:4f:7b:a4:8b:02: d8:6a:ef:cf:ed:b3:3f:1c:a3:02:ba:cb:01:db:9e: 1d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D0:86:10:4A:42:E4:6E:94:44:CB:C7:5F:A1:3F:EE:47:20:AB:46 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/EtCGEEpC5G6URMvHX6E_7kcgq0Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.34.0/23 5.172.37.0/24 5.172.39.0/24 89.23.65.0/24 89.23.67.0-89.23.71.255 89.23.74.0/23 89.23.77.0-89.23.79.255 89.23.83.0-89.23.84.255 89.23.86.0/24 89.23.88.0/24 89.23.90.0/24 92.42.248.0/21 93.93.192.0/21 95.140.112.0-95.140.121.255 95.140.124.0/22 109.111.224.0-109.111.240.255 109.111.243.0-109.111.250.255 109.111.252.0-109.111.254.255 178.254.128.0-178.254.146.255 178.254.148.0/23 178.254.151.0-178.254.159.255 178.254.163.0/24 178.254.165.0/24 178.254.169.0/24 178.254.172.0/24 178.254.175.0/24 178.254.183.0-178.254.184.255 178.254.187.0-178.254.191.255 185.157.44.0/24 193.104.68.0/24 217.169.208.0/20 IPv6: 2a02:b58::/32 Signature Algorithm: sha256WithRSAEncryption 71:c5:1c:36:78:8a:7c:25:d4:4c:9e:1c:13:d3:0e:ce:7e:fb: 72:a5:5e:15:47:a5:0b:d2:c7:c9:83:d7:3f:43:c3:8d:d8:9d: ee:bc:e1:88:f8:16:cf:77:74:55:36:37:c7:96:be:3a:6d:b8: 97:ce:09:96:ec:df:da:51:f2:d3:47:06:48:ad:42:ed:04:d0: 77:38:b1:43:09:85:45:96:65:42:ae:f2:36:f0:5e:ef:c4:05: f0:6e:e1:7d:ac:e1:83:3a:6d:ba:0e:b1:67:4f:75:3c:a0:45: 8c:79:3a:58:7c:ce:3b:9c:e2:82:91:95:fc:d4:ae:0c:d6:fe: 94:a7:83:72:d3:47:ea:f9:bc:98:c5:b5:27:de:aa:ce:0b:6c: ad:b8:73:31:af:eb:9f:7f:b7:33:48:01:81:64:b2:02:6e:d8: 99:1b:f5:b1:c4:66:04:89:3b:85:0d:a7:18:37:cb:6c:f3:d6: 2a:ef:48:96:95:33:a4:ed:9c:f3:26:2e:d0:15:15:08:6b:86: 29:c7:58:fe:5b:7a:14:59:e6:5b:a7:39:68:9f:01:2f:57:7a: 3c:9b:b9:f1:c0:00:dc:52:ae:e9:8b:fe:6e:8f:98:48:31:dc: cf:43:c6:60:8d:b8:52:c4:df:ae:8a:d7:c2:0e:44:6e:b1:70: 7c:93:de:59 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgISAZvq5/wk8FaidUAsWoTVLHojMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjYwMTIzMTI1MDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmQwODYxMDRhNDJlNDZlOTQ0NGNiYzc1ZmExM2ZlZTQ3MjBhYjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3sX6GJByj0vvxsHIxeOO50qshoa WUrHS7+noK3NVi9SgahdTgl7l3CgFSpp+nKcFePIU/BNVXmieCE33g+OibM2Q3jb No6O6ezSszuCbk5YCF6p6T/Sg3nno69ZDusybrGEh2Er+05UNKAZLaAieoHwoRX/ U44KElo4jzo3lnjkoyvUqbuIWmy8bt7banDMxNjdFu7wkhujCv7EILERGVNXC2b4 B4rerzq+j2Wh+uf5KhAZFU8kUnavMhfhEPtMTdZVgWj7f0ub5x2gh62hfLtPv65M hONMmvQQYsQzxoG4SIVMiLceYSDKT3ukiwLYau/P7bM/HKMCussB254dyQIDAQAB o4IDLjCCAyowHQYDVR0OBBYEFBLQhhBKQuRulETLx1+hP+5HIKtGMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvRXRDR0VFcEM1RzZVUk12SFg2RV83a2NncTBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBQgYIKwYBBQUHAQcBAf8EggExMIIBLTCCARoEAgABMIIB EgMEAQWsIgMEAAWsJQMEAAWsJwMEAFkXQTAMAwQAWRdDAwQDWRdAAwQBWRdKMAwD BABZF00DBARZF0AwDAMEAFkXUwMEAFkXVAMEAFkXVgMEAFkXWAMEAFkXWgMEA1wq +AMEA11dwDAMAwQEX4xwAwQBX4x4AwQCX4x8MAwDBAVtb+ADBABtb/AwDAMEAG1v 8wMEAG1v+jAMAwQCbW/8AwQAbW/+MAwDBAey/oADBACy/pIDBAGy/pQwDAMEALL+ lwMEBbL+gAMEALL+owMEALL+pQMEALL+qQMEALL+rAMEALL+rzAMAwQAsv63AwQA sv64MAwDBACy/rsDBAay/oADBAC5nSwDBADBaEQDBATZqdAwDQQCAAIwBwMFACoC C1gwDQYJKoZIhvcNAQELBQADggEBAHHFHDZ4inwl1EyeHBPTDs5++3KlXhVHpQvS x8mD1z9Dw43Yne684Yj4Fs93dFU2N8eWvjptuJfOCZbs39pR8tNHBkitQu0E0Hc4 sUMJhUWWZUKu8jbwXu/EBfBu4X2s4YM6bboOsWdPdTygRYx5Olh8zjuc4oKRlfzU rgzW/pSng3LTR+r5vJjFtSfeqs4LbK24czGv659/tzNIAYFksgJu2Jkb9bHEZgSJ O4UNpxg3y2zz1irvSJaVM6TtnPMmLtAVFQhrhinHWP5behRZ5lunOWifAS9Xejyb ufHAANxSrumL/m6PmEgx3M9DxmCNuFLE366K18IORG6xcHyT3lk= -----END CERTIFICATE-----Generated at Sun Jan 25 10:52:04 2026 by rpki-client