This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/5S5p1A69IpQT_81jOo3SJqobCIE.roa File: 5S5p1A69IpQT_81jOo3SJqobCIE.roa (raw, json) Hash identifier: 1vieN4Wv6S8/BM0aKo61+XBIoswJKgLdB3MXca2J5eM= Subject key identifier: E5:2E:69:D4:0E:BD:22:94:13:FF:CD:63:3A:8D:D2:26:AA:1B:08:81 Certificate issuer: /CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0 Certificate serial: 019B78A34CB615AFD811ACDDAD144A6AE689 Authority key identifier: B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/5S5p1A69IpQT_81jOo3SJqobCIE.roa Signing time: Thu 01 Jan 2026 08:18:46 +0000 ROA not before: Thu 01 Jan 2026 08:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25222 IP address blocks: 78.40.66.0/23 maxlen: 23 78.40.68.0/22 maxlen: 22 89.207.115.0/24 maxlen: 24 89.207.118.0/24 maxlen: 24 92.43.8.0/22 maxlen: 22 109.232.12.0/23 maxlen: 23 185.151.232.0/23 maxlen: 23 212.165.64.0/21 maxlen: 21 212.165.70.0/24 maxlen: 24 212.165.72.0/22 maxlen: 22 212.165.76.0/22 maxlen: 22 212.165.92.0/22 maxlen: 22 212.165.96.0/20 maxlen: 20 212.165.112.0/22 maxlen: 22 212.165.118.0/23 maxlen: 23 212.165.120.0/23 maxlen: 23 212.165.122.0/23 maxlen: 23 212.165.124.0/24 maxlen: 24 212.165.126.0/24 maxlen: 24 2a03:1c80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:4c:b6:15:af:d8:11:ac:dd:ad:14:4a:6a:e6:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0 Validity Not Before: Jan 1 08:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e52e69d40ebd229413ffcd633a8dd226aa1b0881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:b2:7e:7b:71:9b:ab:aa:49:82:3e:32:d3: a9:d5:fe:e8:4d:67:11:84:8b:08:06:48:b4:19:20: e4:34:07:e8:49:28:45:a3:2a:06:2a:b6:8a:85:6d: eb:58:af:e1:fd:48:8d:9e:2e:ec:01:58:cd:bc:6b: 87:cf:a5:06:67:18:fd:a3:c5:c2:5f:d7:31:3d:38: 5c:e6:bd:ae:e0:5d:0d:29:93:82:c2:b3:fc:df:1f: f4:ac:44:91:f8:e3:77:c6:c7:ae:2f:b6:fc:e3:f6: 6f:0c:5d:a7:e4:3a:7a:fd:cd:93:48:c9:16:01:c5: 37:8e:9d:cf:f2:d9:0a:68:b6:b4:37:c8:89:a1:27: 5b:54:2f:5a:20:39:20:b8:61:85:de:b3:83:16:b0: 79:4c:42:7a:ff:a9:b1:1b:38:08:d0:13:9f:bf:60: d5:7a:95:0a:b6:3e:d7:81:33:e4:7f:dc:0b:c7:3f: b9:76:2c:a9:3c:75:99:24:93:8c:20:0c:58:5a:34: d7:06:c5:4e:2d:70:99:45:4e:68:f2:0e:06:31:a2: b0:51:87:db:b2:98:a9:82:d0:b5:b8:5c:a2:bf:84: c7:44:46:51:b1:6f:08:cf:89:5d:95:83:0a:76:0b: 76:f9:69:b7:60:e6:b9:32:8e:15:08:bf:24:26:df: 38:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2E:69:D4:0E:BD:22:94:13:FF:CD:63:3A:8D:D2:26:AA:1B:08:81 X509v3 Authority Key Identifier: keyid:B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/5S5p1A69IpQT_81jOo3SJqobCIE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.40.66.0-78.40.71.255 89.207.115.0/24 89.207.118.0/24 92.43.8.0/22 109.232.12.0/23 185.151.232.0/23 212.165.64.0/20 212.165.92.0-212.165.115.255 212.165.118.0-212.165.124.255 212.165.126.0/24 IPv6: 2a03:1c80::/32 Signature Algorithm: sha256WithRSAEncryption 28:a8:2e:41:cd:a8:de:bb:51:df:de:70:fe:c4:7f:b2:6e:b8: 89:39:2e:b8:15:31:01:7d:fe:4f:ba:5a:ed:35:8e:8e:c0:5b: bb:6c:6c:41:a9:31:df:03:d6:f0:56:62:71:7b:66:3b:d4:25: ed:11:92:7b:61:0b:4d:10:61:97:38:6d:10:85:65:d6:39:53: 98:83:b6:99:bd:de:52:99:87:06:57:47:05:82:da:d6:38:e0: d7:d8:0c:0f:42:b6:fc:53:29:72:38:df:4d:56:97:37:09:3c: 46:da:66:ff:4f:34:99:b6:b8:df:25:94:c9:0b:73:3b:b3:3b: b3:9e:c2:42:2f:11:6e:82:14:70:16:a1:d2:f3:25:e6:07:c9: 87:30:05:da:0a:a4:33:70:ba:60:73:aa:c9:5f:e3:35:a2:a7: 1a:e5:7b:29:0b:be:35:64:a2:e0:ed:5b:dd:f9:cb:e4:15:4d: 52:35:f6:68:e3:db:0b:79:67:44:36:a6:8f:d8:fb:71:96:7c: df:66:2f:3f:2f:e2:bb:4f:96:cb:12:78:af:44:50:e9:60:2c: f7:8e:7c:4d:64:40:66:ee:8b:23:b2:7f:ca:75:4f:eb:fd:eb: eb:a3:e4:ae:22:56:45:d5:10:bd:cc:63:72:cb:3b:86:53:06: 42:79:c4:28 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgISAZt4o0y2Fa/YEazdrRRKauaJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjBmM2NlYjBlNmI1OTdhMzgxNDVjNWE3NDMzNjljN2Y0 OTY2ZTAwHhcNMjYwMTAxMDgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTJlNjlkNDBlYmQyMjk0MTNmZmNkNjMzYThkZDIyNmFhMWIwODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNyyfntxm6uqSYI+MtOp1f7oTWcR hIsIBki0GSDkNAfoSShFoyoGKraKhW3rWK/h/UiNni7sAVjNvGuHz6UGZxj9o8XC X9cxPThc5r2u4F0NKZOCwrP83x/0rESR+ON3xseuL7b84/ZvDF2n5Dp6/c2TSMkW AcU3jp3P8tkKaLa0N8iJoSdbVC9aIDkguGGF3rODFrB5TEJ6/6mxGzgI0BOfv2DV epUKtj7XgTPkf9wLxz+5diypPHWZJJOMIAxYWjTXBsVOLXCZRU5o8g4GMaKwUYfb spipgtC1uFyiv4THREZRsW8Iz4ldlYMKdgt2+Wm3YOa5Mo4VCL8kJt84jwIDAQAB o4ICZjCCAmIwHQYDVR0OBBYEFOUuadQOvSKUE//NYzqN0iaqGwiBMB8GA1UdIwQY MBaAFLcg886w5rWXo4FFxadDNpx/SWbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlEenpyRG10WmVqZ1VYRnAwTTJuSDlKWnVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kN2ZiNmQtZWJiZS00M2EyLWIxMTkt MzkzYzQ1NzQyMjU5LzEvNVM1cDFBNjlJcFFUXzgxak9vM1NKcW9iQ0lFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9kN2ZiNmQtZWJiZS00M2EyLWIxMTktMzkzYzQ1NzQyMjU5 LzEvdHlEenpyRG10WmVqZ1VYRnAwTTJuSDlKWnVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEHAQH/BG0wazBaBAIAATBUMAwDBAFOKEID BANOKEADBABZz3MDBABZz3YDBAJcKwgDBAFt6AwDBAG5l+gDBATUpUAwDAMEAtSl XAMEAtSlcDAMAwQB1KV2AwQA1KV8AwQA1KV+MA0EAgACMAcDBQAqAxyAMA0GCSqG SIb3DQEBCwUAA4IBAQAoqC5Bzajeu1Hf3nD+xH+ybriJOS64FTEBff5PulrtNY6O wFu7bGxBqTHfA9bwVmJxe2Y71CXtEZJ7YQtNEGGXOG0QhWXWOVOYg7aZvd5SmYcG V0cFgtrWOODX2AwPQrb8UylyON9NVpc3CTxG2mb/TzSZtrjfJZTJC3M7szuznsJC LxFughRwFqHS8yXmB8mHMAXaCqQzcLpgc6rJX+M1oqca5XspC741ZKLg7Vvd+cvk FU1SNfZo49sLeWdENqaP2PtxlnzfZi8/L+K7T5bLEnivRFDpYCz3jnxNZEBm7osj sn/KdU/r/evro+SuIlZF1RC9zGNyyzuGUwZCecQo -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:13 2026 by rpki-client