This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5Sb_HPOKAsSdsUjzw140834viv8.roa File: 5Sb_HPOKAsSdsUjzw140834viv8.roa (raw, json) Hash identifier: dbP1i30GcVhpjOAzB6T5uPHGgdW2XcNsW1MsPzGhr80= Subject key identifier: E5:26:FF:1C:F3:8A:02:C4:9D:B1:48:F3:C3:5E:34:F3:7E:2F:8A:FF Certificate issuer: /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba Certificate serial: 019B797F12C776FEDDD8B4191FD05ECFC323 Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5Sb_HPOKAsSdsUjzw140834viv8.roa Signing time: Thu 01 Jan 2026 12:18:49 +0000 ROA not before: Thu 01 Jan 2026 12:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 151.186.144.0/20 maxlen: 24 151.186.144.0/24 maxlen: 24 151.186.145.0/24 maxlen: 24 151.186.146.0/24 maxlen: 24 151.186.147.0/24 maxlen: 24 151.186.148.0/24 maxlen: 24 151.186.149.0/24 maxlen: 24 151.186.150.0/24 maxlen: 24 151.186.151.0/24 maxlen: 24 151.186.152.0/24 maxlen: 24 151.186.153.0/24 maxlen: 24 151.186.154.0/24 maxlen: 24 151.186.155.0/24 maxlen: 24 151.186.156.0/24 maxlen: 24 151.186.157.0/24 maxlen: 24 151.186.158.0/24 maxlen: 24 151.186.159.0/24 maxlen: 24 151.186.160.0/21 maxlen: 24 151.186.160.0/24 maxlen: 24 151.186.161.0/24 maxlen: 24 151.186.162.0/24 maxlen: 24 151.186.163.0/24 maxlen: 24 151.186.164.0/24 maxlen: 24 151.186.165.0/24 maxlen: 24 151.186.166.0/24 maxlen: 24 151.186.167.0/24 maxlen: 24 151.186.168.0/22 maxlen: 24 151.186.168.0/24 maxlen: 24 151.186.169.0/24 maxlen: 24 151.186.170.0/24 maxlen: 24 151.186.171.0/24 maxlen: 24 151.186.172.0/22 maxlen: 24 151.186.172.0/24 maxlen: 24 151.186.173.0/24 maxlen: 24 151.186.174.0/24 maxlen: 24 151.186.175.0/24 maxlen: 24 151.186.176.0/20 maxlen: 24 151.186.176.0/24 maxlen: 24 151.186.177.0/24 maxlen: 24 151.186.178.0/24 maxlen: 24 151.186.179.0/24 maxlen: 24 151.186.180.0/24 maxlen: 24 151.186.181.0/24 maxlen: 24 151.186.182.0/24 maxlen: 24 151.186.183.0/24 maxlen: 24 151.186.184.0/24 maxlen: 24 151.186.185.0/24 maxlen: 24 151.186.186.0/24 maxlen: 24 151.186.187.0/24 maxlen: 24 151.186.188.0/24 maxlen: 24 151.186.189.0/24 maxlen: 24 151.186.190.0/24 maxlen: 24 151.186.191.0/24 maxlen: 24 151.186.192.0/20 maxlen: 24 151.186.192.0/24 maxlen: 24 151.186.193.0/24 maxlen: 24 151.186.194.0/24 maxlen: 24 151.186.195.0/24 maxlen: 24 151.186.196.0/24 maxlen: 24 151.186.197.0/24 maxlen: 24 151.186.198.0/24 maxlen: 24 151.186.199.0/24 maxlen: 24 151.186.200.0/24 maxlen: 24 151.186.201.0/24 maxlen: 24 151.186.202.0/24 maxlen: 24 151.186.203.0/24 maxlen: 24 151.186.204.0/24 maxlen: 24 151.186.205.0/24 maxlen: 24 151.186.206.0/24 maxlen: 24 151.186.207.0/24 maxlen: 24 2a04:e4c4:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:12:c7:76:fe:dd:d8:b4:19:1f:d0:5e:cf:c3:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba Validity Not Before: Jan 1 12:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e526ff1cf38a02c49db148f3c35e34f37e2f8aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3d:5a:b5:b1:47:33:88:b5:ac:e0:88:3d:a5: 69:24:70:9d:dd:27:21:3f:cb:4a:19:9a:35:2a:c2: 5e:39:97:e0:9c:0a:42:04:15:4e:da:b8:aa:69:c9: 1d:aa:d3:2e:3b:8b:45:33:b4:4d:bd:1d:a3:c4:50: 83:23:53:fb:2d:c7:d2:d1:f5:13:61:d7:fe:4b:20: 22:3d:93:9c:91:ef:b6:82:2a:25:82:25:c6:9a:f1: 6b:7c:92:8b:64:af:ca:02:c0:58:6f:2d:ae:40:32: 94:c2:5e:a5:14:bc:8e:bc:80:a3:28:d4:c1:a4:5a: 90:6e:8b:9d:c7:62:8e:b6:b0:34:5d:c0:eb:72:18: b1:41:ff:0a:df:b4:47:8d:55:62:65:3b:55:12:e2: 10:bb:2c:16:d6:be:03:a2:18:4d:47:c3:18:73:0f: 58:0b:08:98:4f:52:21:19:74:a9:59:ac:3e:07:f6: 1f:c3:dd:1c:5b:47:d1:3e:a1:8b:b1:30:95:fb:e0: 25:18:d4:32:59:ef:90:97:44:b3:7b:8d:63:05:70: ba:2d:f8:a2:f6:e0:cf:f2:79:2a:11:07:3c:9e:74: bb:6f:cf:33:2a:3a:0a:4d:7d:c3:9e:08:88:57:36: 17:ed:5a:25:4a:03:a0:7f:fb:8a:07:ec:58:2a:a5: 2f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:26:FF:1C:F3:8A:02:C4:9D:B1:48:F3:C3:5E:34:F3:7E:2F:8A:FF X509v3 Authority Key Identifier: keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5Sb_HPOKAsSdsUjzw140834viv8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.186.144.0-151.186.207.255 IPv6: 2a04:e4c4:5::/48 Signature Algorithm: sha256WithRSAEncryption 62:a7:fe:7f:54:dc:f9:19:fe:ce:68:f4:d9:c1:7a:43:14:3e: 4e:34:5c:d8:cf:97:49:40:76:a3:df:e1:ab:24:14:df:74:cf: e8:0a:29:59:b4:16:cf:58:ed:6b:08:15:44:58:69:0f:1f:42: c2:f8:16:88:92:88:13:ae:b9:38:eb:97:0a:43:c5:18:59:65: 2d:3f:21:7b:49:4b:bf:ad:95:c7:f7:a5:74:c0:45:37:01:fe: d1:0d:31:d4:37:8f:68:21:53:2a:c8:af:fd:d6:45:19:e4:77: b2:2c:83:a5:20:60:f4:dc:92:09:ce:16:f0:5d:ba:ae:cb:ac: 2f:1f:03:66:15:9b:f5:21:a2:98:16:04:65:ad:55:fe:ca:4b: 51:6c:b8:47:69:d2:7e:4a:eb:88:d6:12:34:6d:77:c7:ca:ef: 44:67:5f:5b:99:6d:58:94:d5:e6:e0:78:b3:64:c3:e4:7c:0a: 04:63:a0:9e:10:b1:d3:d0:fd:f4:25:e9:7a:f3:5e:b1:ba:c5: 16:f3:e1:56:a5:af:6d:2d:5f:7b:bd:84:a8:c4:16:19:cd:22: 62:e4:cd:9f:8d:6b:3f:e3:2e:ff:19:aa:78:ba:2b:02:7a:2b: fa:f9:ca:7b:5c:e4:1e:0b:83:15:ab:0f:f4:7c:03:2b:c8:51: 52:61:1f:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5fxLHdv7d2LQZH9Bez8MjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MTMzZGNhZjJiMWViZjVkYWRlNWEzM2FhMWIyZmI5OWQy Njg5YmEwHhcNMjYwMTAxMTIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTI2ZmYxY2YzOGEwMmM0OWRiMTQ4ZjNjMzVlMzRmMzdlMmY4YWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD1atbFHM4i1rOCIPaVpJHCd3Sch P8tKGZo1KsJeOZfgnApCBBVO2riqackdqtMuO4tFM7RNvR2jxFCDI1P7LcfS0fUT Ydf+SyAiPZOcke+2giolgiXGmvFrfJKLZK/KAsBYby2uQDKUwl6lFLyOvICjKNTB pFqQboudx2KOtrA0XcDrchixQf8K37RHjVViZTtVEuIQuywW1r4DohhNR8MYcw9Y CwiYT1IhGXSpWaw+B/Yfw90cW0fRPqGLsTCV++AlGNQyWe+Ql0Sze41jBXC6Lfii 9uDP8nkqEQc8nnS7b88zKjoKTX3DngiIVzYX7VolSgOgf/uKB+xYKqUvoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUm/xzzigLEnbFI88NeNPN+L4r/MB8GA1UdIwQY MBaAFOcTPcrysev12t5aM6obL7mdJom6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXhNOXl2S3g2X1hhM2xvenFoc3Z1WjBtaWJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi81ZTRkZjgtYWU4Yy00NGE3LWJkNmUt MTljZTQ2YTQyZmE0LzEvNVNiX0hQT0tBc1Nkc1VqencxNDA4MzR2aXY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi81ZTRkZjgtYWU4Yy00NGE3LWJkNmUtMTljZTQ2YTQyZmE0 LzEvNXhNOXl2S3g2X1hhM2xvenFoc3Z1WjBtaWJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBASXupAD BASXusAwDwQCAAIwCQMHACoE5MQABTANBgkqhkiG9w0BAQsFAAOCAQEAYqf+f1Tc +Rn+zmj02cF6QxQ+TjRc2M+XSUB2o9/hqyQU33TP6AopWbQWz1jtawgVRFhpDx9C wvgWiJKIE665OOuXCkPFGFllLT8he0lLv62Vx/eldMBFNwH+0Q0x1DePaCFTKsiv /dZFGeR3siyDpSBg9NySCc4W8F26rsusLx8DZhWb9SGimBYEZa1V/spLUWy4R2nS fkrriNYSNG13x8rvRGdfW5ltWJTV5uB4s2TD5HwKBGOgnhCx09D99CXpevNesbrF FvPhVqWvbS1fe72EqMQWGc0iYuTNn41rP+Mu/xmqeLorAnor+vnKe1zkHguDFasP 9HwDK8hRUmEf9w== -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:07 2026 by rpki-client