This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/gDEbtn2Bm22RWVusEqJbEgaueu4.roa File: gDEbtn2Bm22RWVusEqJbEgaueu4.roa (raw, json) Hash identifier: xXuFvRKXUrwVjGE6wkVPHC4STPuoOyCxY+cA2kJF334= Subject key identifier: 80:31:1B:B6:7D:81:9B:6D:91:59:5B:AC:12:A2:5B:12:06:AE:7A:EE Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85 Certificate serial: 019B77C711DFAD720188F55FC28A2D95B4F0 Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/gDEbtn2Bm22RWVusEqJbEgaueu4.roa Signing time: Thu 01 Jan 2026 04:18:13 +0000 ROA not before: Thu 01 Jan 2026 04:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39010 IP address blocks: 5.57.3.0/24 maxlen: 24 5.57.4.0/24 maxlen: 24 5.57.5.0/24 maxlen: 24 5.57.6.0/24 maxlen: 24 5.57.7.0/24 maxlen: 24 78.108.160.0/24 maxlen: 24 78.108.161.0/24 maxlen: 24 78.108.162.0/24 maxlen: 24 78.108.163.0/24 maxlen: 24 78.108.164.0/24 maxlen: 24 78.108.165.0/24 maxlen: 24 78.108.166.0/24 maxlen: 24 78.108.167.0/24 maxlen: 24 78.108.168.0/24 maxlen: 24 78.108.169.0/24 maxlen: 24 78.108.170.0/24 maxlen: 24 78.108.171.0/24 maxlen: 24 78.108.172.0/24 maxlen: 24 78.108.174.0/24 maxlen: 24 78.108.175.0/24 maxlen: 24 85.112.64.0/24 maxlen: 24 85.112.65.0/24 maxlen: 24 85.112.66.0/24 maxlen: 24 85.112.67.0/24 maxlen: 24 85.112.69.0/24 maxlen: 24 85.112.70.0/24 maxlen: 24 85.112.71.0/24 maxlen: 24 85.112.72.0/24 maxlen: 24 85.112.74.0/24 maxlen: 24 85.112.75.0/24 maxlen: 24 85.112.76.0/24 maxlen: 24 85.112.77.0/24 maxlen: 24 85.112.78.0/24 maxlen: 24 85.112.80.0/24 maxlen: 24 85.112.82.0/24 maxlen: 24 85.112.83.0/24 maxlen: 24 85.112.84.0/24 maxlen: 24 85.112.85.0/24 maxlen: 24 85.112.86.0/24 maxlen: 24 85.112.87.0/24 maxlen: 24 85.112.88.0/24 maxlen: 24 85.112.89.0/24 maxlen: 24 85.112.90.0/24 maxlen: 24 85.112.91.0/24 maxlen: 24 85.112.92.0/24 maxlen: 24 85.112.93.0/24 maxlen: 24 85.112.94.0/24 maxlen: 24 85.112.95.0/24 maxlen: 24 146.185.32.0/24 maxlen: 24 146.185.33.0/24 maxlen: 24 146.185.34.0/24 maxlen: 24 146.185.35.0/24 maxlen: 24 146.185.36.0/24 maxlen: 24 146.185.37.0/24 maxlen: 24 146.185.38.0/24 maxlen: 24 146.185.39.0/24 maxlen: 24 185.54.60.0/24 maxlen: 24 185.54.61.0/24 maxlen: 24 185.54.62.0/24 maxlen: 24 185.54.63.0/24 maxlen: 24 212.98.129.0/24 maxlen: 24 212.98.130.0/24 maxlen: 24 212.98.131.0/24 maxlen: 24 212.98.132.0/24 maxlen: 24 212.98.133.0/24 maxlen: 24 212.98.135.0/24 maxlen: 24 212.98.136.0/24 maxlen: 24 212.98.137.0/24 maxlen: 24 212.98.138.0/24 maxlen: 24 212.98.139.0/24 maxlen: 24 212.98.140.0/24 maxlen: 24 212.98.141.0/24 maxlen: 24 212.98.142.0/24 maxlen: 24 212.98.143.0/24 maxlen: 24 212.98.144.0/24 maxlen: 24 212.98.145.0/24 maxlen: 24 212.98.146.0/24 maxlen: 24 212.98.147.0/24 maxlen: 24 212.98.148.0/24 maxlen: 24 212.98.149.0/24 maxlen: 24 212.98.150.0/24 maxlen: 24 212.98.151.0/24 maxlen: 24 212.98.152.0/24 maxlen: 24 212.98.153.0/24 maxlen: 24 212.98.154.0/24 maxlen: 24 212.98.155.0/24 maxlen: 24 212.98.156.0/24 maxlen: 24 212.98.157.0/24 maxlen: 24 212.98.158.0/24 maxlen: 24 212.98.159.0/24 maxlen: 24 213.204.64.0/24 maxlen: 24 213.204.65.0/24 maxlen: 24 213.204.66.0/24 maxlen: 24 213.204.67.0/24 maxlen: 24 213.204.68.0/24 maxlen: 24 213.204.69.0/24 maxlen: 24 213.204.70.0/24 maxlen: 24 213.204.71.0/24 maxlen: 24 213.204.72.0/24 maxlen: 24 213.204.73.0/24 maxlen: 24 213.204.74.0/24 maxlen: 24 213.204.75.0/24 maxlen: 24 213.204.76.0/23 maxlen: 23 213.204.76.0/24 maxlen: 24 213.204.77.0/24 maxlen: 24 213.204.78.0/24 maxlen: 24 213.204.79.0/24 maxlen: 24 213.204.80.0/24 maxlen: 24 213.204.81.0/24 maxlen: 24 213.204.82.0/24 maxlen: 24 213.204.83.0/24 maxlen: 24 213.204.84.0/24 maxlen: 24 213.204.85.0/24 maxlen: 24 213.204.86.0/24 maxlen: 24 213.204.87.0/24 maxlen: 24 213.204.88.0/24 maxlen: 24 213.204.89.0/24 maxlen: 24 213.204.90.0/24 maxlen: 24 213.204.91.0/24 maxlen: 24 213.204.92.0/24 maxlen: 24 213.204.93.0/24 maxlen: 24 213.204.94.0/24 maxlen: 24 213.204.95.0/24 maxlen: 24 213.204.97.0/24 maxlen: 24 213.204.98.0/24 maxlen: 24 213.204.99.0/24 maxlen: 24 213.204.100.0/24 maxlen: 24 213.204.101.0/24 maxlen: 24 213.204.102.0/24 maxlen: 24 213.204.103.0/24 maxlen: 24 213.204.104.0/24 maxlen: 24 213.204.105.0/24 maxlen: 24 213.204.106.0/24 maxlen: 24 213.204.107.0/24 maxlen: 24 213.204.108.0/24 maxlen: 24 213.204.109.0/24 maxlen: 24 213.204.110.0/24 maxlen: 24 213.204.111.0/24 maxlen: 24 213.204.112.0/24 maxlen: 24 213.204.113.0/24 maxlen: 24 213.204.114.0/24 maxlen: 24 213.204.115.0/24 maxlen: 24 213.204.116.0/24 maxlen: 24 213.204.117.0/24 maxlen: 24 213.204.118.0/24 maxlen: 24 213.204.119.0/24 maxlen: 24 213.204.120.0/24 maxlen: 24 213.204.121.0/24 maxlen: 24 213.204.122.0/24 maxlen: 24 213.204.123.0/24 maxlen: 24 213.204.124.0/24 maxlen: 24 213.204.125.0/24 maxlen: 24 213.204.126.0/24 maxlen: 24 213.204.127.0/24 maxlen: 24 2a00:1580::/29 maxlen: 29 2a00:1580::/48 maxlen: 48 2a00:1580:2::/48 maxlen: 48 2a00:1580:4::/48 maxlen: 48 2a00:1580:5::/48 maxlen: 48 2a00:1582::/48 maxlen: 48 2a00:1582:2::/48 maxlen: 48 2a00:1582:3007::/48 maxlen: 48 2a00:1582:300e::/48 maxlen: 48 2a00:1582:300f:f::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:11:df:ad:72:01:88:f5:5f:c2:8a:2d:95:b4:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85 Validity Not Before: Jan 1 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80311bb67d819b6d91595bac12a25b1206ae7aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b9:71:83:df:65:eb:75:8d:18:73:7b:e5:b2: 71:ee:45:91:4d:95:7b:0f:2d:05:75:a3:94:cf:91: 8c:a4:ff:22:40:76:16:87:39:0d:0f:e1:b7:db:c3: db:1b:53:51:82:ff:01:d7:f2:da:24:64:92:c0:37: 77:50:41:91:63:32:e6:61:d5:3b:63:8f:43:ca:f9: 30:1f:29:31:26:24:ae:82:a2:b9:ae:2c:c1:ac:88: 26:20:88:11:60:9e:ee:be:9b:45:eb:ed:39:9f:7c: d2:00:d8:e8:c3:4b:44:0b:a5:ee:0d:ef:b5:1e:af: 33:81:4b:c7:4d:5a:15:3c:92:04:c1:01:f2:7c:d2: 6a:c9:e3:35:a3:55:a9:ae:0a:83:be:29:cb:df:28: d5:f9:8f:e1:73:42:56:28:a7:07:a0:2b:fc:9b:d6: b4:cb:07:94:fb:c7:05:d7:78:8e:b6:b0:30:c5:a1: f7:be:94:41:61:11:68:2c:4d:b5:c8:91:47:9b:d0: db:9e:63:a6:61:e0:3d:25:0b:d8:e7:45:af:54:8f: e2:40:31:2e:86:50:18:b2:a7:85:06:5d:5b:ee:3c: 54:6f:c1:36:92:4b:09:1b:5c:a9:48:28:58:12:87: 79:cf:eb:37:03:0a:76:b9:ff:23:03:86:38:86:da: 1d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:31:1B:B6:7D:81:9B:6D:91:59:5B:AC:12:A2:5B:12:06:AE:7A:EE X509v3 Authority Key Identifier: keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/gDEbtn2Bm22RWVusEqJbEgaueu4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.57.3.0-5.57.7.255 78.108.160.0-78.108.172.255 78.108.174.0/23 85.112.64.0/22 85.112.69.0-85.112.72.255 85.112.74.0-85.112.78.255 85.112.80.0/24 85.112.82.0-85.112.95.255 146.185.32.0/21 185.54.60.0/22 212.98.129.0-212.98.133.255 212.98.135.0-212.98.159.255 213.204.64.0/19 213.204.97.0-213.204.127.255 IPv6: 2a00:1580::/29 Signature Algorithm: sha256WithRSAEncryption 01:88:be:80:13:ff:a9:67:26:37:6f:5a:01:1a:00:10:d7:25: 9d:7f:0b:25:ef:87:be:e3:d1:76:27:d1:41:0d:6b:69:73:75: 4b:c4:b9:05:3e:ab:ff:d5:99:5e:4f:6e:ef:d4:c0:cd:84:46: f2:9f:56:f7:87:d5:05:09:0b:7b:48:73:e8:80:22:04:1a:54: 38:88:a5:53:3f:53:bd:3f:79:66:95:05:44:23:d9:31:69:75: 68:dc:07:5c:31:a5:d7:2f:99:e4:b1:3e:32:36:f4:9a:8e:bb: 95:2e:78:d8:e2:58:ed:0f:07:77:dc:c7:8c:0c:1a:ee:4c:90: 28:86:ab:23:af:65:95:ca:b6:09:5a:04:7a:09:28:11:f4:00: 2d:ef:47:1c:b7:f6:e3:9b:96:0f:73:71:75:ae:30:cb:f4:03: f7:01:f7:01:3d:ce:33:9d:92:6b:48:f5:2d:a9:27:a5:9e:90: 38:57:5b:21:a1:28:7d:f5:e1:aa:77:eb:71:f9:1a:db:b0:7a: a6:a1:78:34:28:c1:eb:54:d6:bb:42:93:e4:b4:26:31:b4:82: c2:1e:74:ed:3a:bc:ac:85:7b:81:5a:45:63:bd:c7:94:e3:82: 47:32:3a:dd:ba:b5:fb:b6:a1:4d:84:36:9f:c1:cc:0b:f6:fe: 2a:2d:97:aa -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt3xxHfrXIBiPVfwootlbTwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlY2Q2NGM5NzgzN2Q3YmZhYzA2NjM3ZGQ5NTJiZGVkZTBj MjVkODUwHhcNMjYwMTAxMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDMxMWJiNjdkODE5YjZkOTE1OTViYWMxMmEyNWIxMjA2YWU3YWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLlxg99l63WNGHN75bJx7kWRTZV7 Dy0FdaOUz5GMpP8iQHYWhzkND+G328PbG1NRgv8B1/LaJGSSwDd3UEGRYzLmYdU7 Y49DyvkwHykxJiSugqK5rizBrIgmIIgRYJ7uvptF6+05n3zSANjow0tEC6XuDe+1 Hq8zgUvHTVoVPJIEwQHyfNJqyeM1o1WprgqDvinL3yjV+Y/hc0JWKKcHoCv8m9a0 yweU+8cF13iOtrAwxaH3vpRBYRFoLE21yJFHm9DbnmOmYeA9JQvY50WvVI/iQDEu hlAYsqeFBl1b7jxUb8E2kksJG1ypSChYEod5z+s3Awp2uf8jA4Y4htodlwIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFIAxG7Z9gZttkVlbrBKiWxIGrnruMB8GA1UdIwQY MBaAFK7NZMl4N9e/rAZjfdlSve3gwl2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnMxa3lYZzMxNy1zQm1OOTJWSzk3ZURDWFlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81OTJkNGYtZDcxZS00ZThiLWE2MzIt MWVjZGUxNzkxNTExLzEvZ0RFYnRuMkJtMjJSV1Z1c0VxSmJFZ2F1ZXU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81OTJkNGYtZDcxZS00ZThiLWE2MzItMWVjZGUxNzkxNTEx LzEvcnMxa3lYZzMxNy1zQm1OOTJWSzk3ZURDWFlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHABggrBgEFBQcBBwEB/wSBsDCBrTCBmwQCAAEwgZQwDAME AAU5AwMEAwU5ADAMAwQFTmygAwQATmysAwQBTmyuAwQCVXBAMAwDBABVcEUDBABV cEgwDAMEAVVwSgMEAFVwTgMEAFVwUDAMAwQBVXBSAwQFVXBAAwQDkrkgAwQCuTY8 MAwDBADUYoEDBAHUYoQwDAMEANRihwMEBdRigAMEBdXMQDAMAwQA1cxhAwQH1cwA MA0EAgACMAcDBQMqABWAMA0GCSqGSIb3DQEBCwUAA4IBAQABiL6AE/+pZyY3b1oB GgAQ1yWdfwsl74e+49F2J9FBDWtpc3VLxLkFPqv/1ZleT27v1MDNhEbyn1b3h9UF CQt7SHPogCIEGlQ4iKVTP1O9P3lmlQVEI9kxaXVo3AdcMaXXL5nksT4yNvSajruV LnjY4ljtDwd33MeMDBruTJAohqsjr2WVyrYJWgR6CSgR9AAt70cct/bjm5YPc3F1 rjDL9AP3AfcBPc4znZJrSPUtqSelnpA4V1shoSh99eGqd+tx+RrbsHqmoXg0KMHr VNa7QpPktCYxtILCHnTtOryshXuBWkVjvceU44JHMjrdurX7tqFNhDafwcwL9v4q LZeq -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:33 2026 by rpki-client