This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/1-SL9hlivQGt-mLTuChMVipJ552A.roa File: 1-SL9hlivQGt-mLTuChMVipJ552A.roa (raw, json) Hash identifier: M4LxMEo5XBi46ojcg/gR85XlQ9Z1KIxYuUCF1vDeIuI= Subject key identifier: F9:22:FD:86:58:AF:40:6B:7E:98:B4:EE:0A:13:15:8A:92:79:E7:60 Certificate issuer: /CN=ef401a52e3fde699486e99678dbf48875329c33d Certificate serial: 019B76EAF826D7DAFE5B0CE20FCD342A14BF Authority key identifier: EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/1-SL9hlivQGt-mLTuChMVipJ552A.roa Signing time: Thu 01 Jan 2026 00:17:48 +0000 ROA not before: Thu 01 Jan 2026 00:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50923 IP address blocks: 5.53.16.0/20 maxlen: 20 5.53.16.0/21 maxlen: 21 5.53.16.0/22 maxlen: 22 5.53.20.0/22 maxlen: 22 5.53.24.0/21 maxlen: 21 5.53.24.0/22 maxlen: 22 5.53.28.0/22 maxlen: 22 5.53.30.0/24 maxlen: 24 37.60.16.0/21 maxlen: 21 37.60.16.0/22 maxlen: 22 37.60.16.0/23 maxlen: 23 37.60.16.0/24 maxlen: 24 37.60.18.0/23 maxlen: 23 37.60.20.0/22 maxlen: 22 37.60.20.0/23 maxlen: 23 37.60.22.0/23 maxlen: 23 37.143.96.0/20 maxlen: 20 37.143.96.0/21 maxlen: 21 37.143.96.0/22 maxlen: 22 37.143.97.0/24 maxlen: 24 37.143.100.0/22 maxlen: 22 37.143.104.0/21 maxlen: 21 37.143.104.0/22 maxlen: 22 37.143.108.0/22 maxlen: 22 178.208.224.0/19 maxlen: 19 178.208.224.0/20 maxlen: 20 178.208.224.0/21 maxlen: 21 178.208.232.0/21 maxlen: 21 178.208.240.0/20 maxlen: 20 178.208.240.0/21 maxlen: 21 178.208.248.0/21 maxlen: 21 185.3.68.0/22 maxlen: 22 185.3.68.0/23 maxlen: 23 185.3.68.0/24 maxlen: 24 185.3.69.0/24 maxlen: 24 185.3.70.0/23 maxlen: 23 185.3.70.0/24 maxlen: 24 185.3.71.0/24 maxlen: 24 2a00:ae40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.crl rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f8:26:d7:da:fe:5b:0c:e2:0f:cd:34:2a:14:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef401a52e3fde699486e99678dbf48875329c33d Validity Not Before: Jan 1 00:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f922fd8658af406b7e98b4ee0a13158a9279e760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0d:4f:2c:44:3c:88:e1:e0:e0:6c:fd:a7:07: 4c:86:6b:56:29:ac:f9:68:a9:09:e8:9c:4a:ef:36: 1e:c6:57:be:7d:75:cd:8e:f9:31:aa:e9:87:e2:aa: 2c:7d:27:b1:97:d8:48:43:ca:da:e6:dd:be:70:24: 9d:7a:fa:3b:6e:f8:91:c3:d5:6d:9b:07:7f:9d:35: ff:a1:ab:50:fc:c2:18:d7:b9:f4:0e:7b:f3:fe:1c: de:a2:3d:e2:e7:53:99:7b:a0:c0:cc:06:74:d2:4a: b1:0a:a6:37:c0:1d:c4:b1:58:df:a1:5e:6e:36:36: 53:18:fe:24:30:8a:81:ab:cc:48:2c:65:68:06:e4: f2:e3:f4:bf:be:5f:60:f6:e6:c0:f6:41:e2:20:53: ac:98:7d:7b:d2:04:24:8c:22:45:f1:ae:fc:8b:8f: 61:3c:a9:a3:f9:8f:79:c8:90:a1:63:01:f7:33:f9: 6f:09:4d:de:85:68:c7:35:0a:5a:58:45:5b:5e:ac: 57:bb:26:0e:42:ad:2b:e7:eb:c3:01:dc:3c:1c:29: f5:f9:9e:19:0c:33:11:e6:c0:eb:4f:33:62:3e:57: 93:54:d1:5e:e4:09:98:16:39:2c:a0:fa:b7:c7:82: ed:22:33:6c:d3:1f:ed:d9:1b:ca:ce:2d:83:c6:91: e6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:22:FD:86:58:AF:40:6B:7E:98:B4:EE:0A:13:15:8A:92:79:E7:60 X509v3 Authority Key Identifier: keyid:EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/1-SL9hlivQGt-mLTuChMVipJ552A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.53.16.0/20 37.60.16.0/21 37.143.96.0/20 178.208.224.0/19 185.3.68.0/22 IPv6: 2a00:ae40::/32 Signature Algorithm: sha256WithRSAEncryption b1:86:f8:b5:c8:04:90:0d:3b:19:7b:32:9a:76:d2:71:0a:48: d8:a8:54:42:81:9f:0d:7c:a2:fe:fc:7d:f0:e9:b1:dc:e1:7d: b8:80:73:6e:c1:8e:7f:f8:5f:4f:0e:5a:ce:b5:0f:7d:76:33: b7:97:29:83:39:eb:79:b5:29:62:61:51:1c:df:2e:81:fa:ed: bb:c0:c3:0a:71:5f:34:20:d3:97:b2:fe:46:ef:e2:1f:51:27: c9:52:29:b1:d0:60:2b:19:f6:62:fb:6b:3b:a9:26:6c:8d:b9: c4:0c:e9:95:d0:84:e5:ba:e6:82:9a:af:4b:90:e2:ab:d1:be: fe:bb:2b:ff:52:ce:e4:a7:ec:19:35:ba:eb:67:2d:ff:34:f4: 75:f0:c6:47:77:58:f6:fe:ac:99:53:dd:11:c1:e9:6f:32:6a: c2:8c:c4:c6:4a:20:2d:af:ac:fd:08:f8:c0:76:17:98:76:7b: 95:9a:aa:7c:30:97:92:e4:6c:d7:fc:29:95:48:4e:4a:68:a1: ad:02:ed:47:32:53:fa:13:96:09:92:54:20:8e:0e:65:89:69: 04:77:ee:fb:70:63:77:3f:c8:41:b0:a2:fb:6a:b4:f2:e9:9f: ce:7d:8d:ed:42:2d:a3:1c:44:79:cb:87:88:07:e0:79:ea:b1: cf:6a:ec:07 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt26vgm19r+WwziD800KhS/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNDAxYTUyZTNmZGU2OTk0ODZlOTk2NzhkYmY0ODg3NTMy OWMzM2QwHhcNMjYwMTAxMDAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTIyZmQ4NjU4YWY0MDZiN2U5OGI0ZWUwYTEzMTU4YTkyNzllNzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0g1PLEQ8iOHg4Gz9pwdMhmtWKaz5 aKkJ6JxK7zYexle+fXXNjvkxqumH4qosfSexl9hIQ8ra5t2+cCSdevo7bviRw9Vt mwd/nTX/oatQ/MIY17n0Dnvz/hzeoj3i51OZe6DAzAZ00kqxCqY3wB3EsVjfoV5u NjZTGP4kMIqBq8xILGVoBuTy4/S/vl9g9ubA9kHiIFOsmH170gQkjCJF8a78i49h PKmj+Y95yJChYwH3M/lvCU3ehWjHNQpaWEVbXqxXuyYOQq0r5+vDAdw8HCn1+Z4Z DDMR5sDrTzNiPleTVNFe5AmYFjksoPq3x4LtIjNs0x/t2RvKzi2DxpHmBwIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFPki/YZYr0Brfpi07goTFYqSeedgMB8GA1UdIwQY MBaAFO9AGlLj/eaZSG6ZZ42/SIdTKcM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzBBYVV1UDk1cGxJYnBsbmpiOUloMU1wd3owLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yNTIzOGMtOGVlZS00NDAzLTkxMDQt OWNhOTQ3YWE2NjVhLzEvMS1TTDlobGl2UUd0LW1MVHVDaE1WaXBKNTUyQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMzcvMjUyMzhjLThlZWUtNDQwMy05MTA0LTljYTk0N2FhNjY1 YS8xLzcwQWFVdVA5NXBsSWJwbG5qYjlJaDFNcHd6MC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBGBggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEBAU1EAME AyU8EAMEBCWPYAMEBbLQ4AMEArkDRDANBAIAAjAHAwUAKgCuQDANBgkqhkiG9w0B AQsFAAOCAQEAsYb4tcgEkA07GXsymnbScQpI2KhUQoGfDXyi/vx98Omx3OF9uIBz bsGOf/hfTw5azrUPfXYzt5cpgznrebUpYmFRHN8ugfrtu8DDCnFfNCDTl7L+Ru/i H1EnyVIpsdBgKxn2YvtrO6kmbI25xAzpldCE5brmgpqvS5Diq9G+/rsr/1LO5Kfs GTW662ct/zT0dfDGR3dY9v6smVPdEcHpbzJqwozExkogLa+s/Qj4wHYXmHZ7lZqq fDCXkuRs1/wplUhOSmihrQLtRzJT+hOWCZJUII4OZYlpBHfu+3Bjdz/IQbCi+2q0 8umfzn2N7UItoxxEecuHiAfgeeqxz2rsBw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:15:45 2026 by rpki-client