This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/5gGPCTIfemFD7lZTh_oNwnHMVqI.roa File: 5gGPCTIfemFD7lZTh_oNwnHMVqI.roa (raw, json) Hash identifier: 1HiNLMVZ6Diyfx/ywSv1ZtFdP1fGwRWo9wqxhbtgJFU= Subject key identifier: E6:01:8F:09:32:1F:7A:61:43:EE:56:53:87:FA:0D:C2:71:CC:56:A2 Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Certificate serial: 019B78A36824B3250B9801F72050897DD83D Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/5gGPCTIfemFD7lZTh_oNwnHMVqI.roa Signing time: Thu 01 Jan 2026 08:18:53 +0000 ROA not before: Thu 01 Jan 2026 08:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9021 IP address blocks: 90.158.0.0/16 maxlen: 16 90.158.0.0/18 maxlen: 18 90.158.0.0/22 maxlen: 22 90.158.0.0/23 maxlen: 23 90.158.3.0/24 maxlen: 24 90.158.8.0/24 maxlen: 24 90.158.15.0/24 maxlen: 24 90.158.16.0/24 maxlen: 24 90.158.18.0/24 maxlen: 24 90.158.19.0/24 maxlen: 24 90.158.24.0/24 maxlen: 24 90.158.26.0/24 maxlen: 24 90.158.27.0/24 maxlen: 24 90.158.28.0/24 maxlen: 24 90.158.29.0/24 maxlen: 24 90.158.30.0/24 maxlen: 24 90.158.31.0/24 maxlen: 24 90.158.32.0/24 maxlen: 24 90.158.33.0/24 maxlen: 24 90.158.36.0/24 maxlen: 24 90.158.37.0/24 maxlen: 24 90.158.39.0/24 maxlen: 24 90.158.41.0/24 maxlen: 24 90.158.43.0/24 maxlen: 24 90.158.44.0/24 maxlen: 24 90.158.45.0/24 maxlen: 24 90.158.46.0/24 maxlen: 24 90.158.47.0/24 maxlen: 24 90.158.48.0/20 maxlen: 20 90.158.48.0/24 maxlen: 24 90.158.50.0/23 maxlen: 23 90.158.51.0/24 maxlen: 24 90.158.52.0/23 maxlen: 23 90.158.52.0/24 maxlen: 24 90.158.53.0/24 maxlen: 24 90.158.54.0/23 maxlen: 23 90.158.55.0/24 maxlen: 24 90.158.56.0/24 maxlen: 24 90.158.60.0/24 maxlen: 24 90.158.61.0/24 maxlen: 24 90.158.62.0/24 maxlen: 24 90.158.64.0/21 maxlen: 21 90.158.64.0/24 maxlen: 24 90.158.65.0/24 maxlen: 24 90.158.66.0/24 maxlen: 24 90.158.67.0/24 maxlen: 24 90.158.68.0/24 maxlen: 24 90.158.72.0/22 maxlen: 22 90.158.72.0/24 maxlen: 24 90.158.73.0/24 maxlen: 24 90.158.74.0/24 maxlen: 24 90.158.75.0/24 maxlen: 24 90.158.96.0/22 maxlen: 22 90.158.100.0/24 maxlen: 24 90.158.101.0/24 maxlen: 24 90.158.102.0/23 maxlen: 23 90.158.104.0/24 maxlen: 24 90.158.105.0/24 maxlen: 24 90.158.106.0/24 maxlen: 24 90.158.108.0/24 maxlen: 24 90.158.109.0/24 maxlen: 24 90.158.110.0/24 maxlen: 24 90.158.111.0/24 maxlen: 24 90.158.112.0/20 maxlen: 20 90.158.113.0/24 maxlen: 24 90.158.114.0/24 maxlen: 24 90.158.115.0/24 maxlen: 24 90.158.116.0/24 maxlen: 24 90.158.117.0/24 maxlen: 24 90.158.119.0/24 maxlen: 24 90.158.120.0/24 maxlen: 24 90.158.121.0/24 maxlen: 24 90.158.122.0/24 maxlen: 24 90.158.123.0/24 maxlen: 24 90.158.125.0/24 maxlen: 24 90.158.126.0/24 maxlen: 24 90.158.127.0/24 maxlen: 24 90.158.128.0/17 maxlen: 17 90.158.128.0/21 maxlen: 21 90.158.136.0/21 maxlen: 21 90.158.137.0/24 maxlen: 24 90.158.138.0/24 maxlen: 24 90.158.139.0/24 maxlen: 24 90.158.152.0/24 maxlen: 24 90.158.160.0/24 maxlen: 24 90.158.161.0/24 maxlen: 24 90.158.200.0/23 maxlen: 23 90.158.224.0/22 maxlen: 22 90.158.240.0/21 maxlen: 21 90.158.244.0/22 maxlen: 22 90.158.248.0/21 maxlen: 21 90.158.249.0/24 maxlen: 24 90.158.251.0/24 maxlen: 24 90.158.252.0/22 maxlen: 22 90.159.0.0/16 maxlen: 16 90.159.0.0/22 maxlen: 22 90.159.0.0/24 maxlen: 24 90.159.1.0/24 maxlen: 24 90.159.2.0/24 maxlen: 24 90.159.3.0/24 maxlen: 24 90.159.4.0/23 maxlen: 23 90.159.10.0/24 maxlen: 24 90.159.15.0/24 maxlen: 24 90.159.20.0/24 maxlen: 24 90.159.26.0/24 maxlen: 24 90.159.27.0/24 maxlen: 24 90.159.29.0/24 maxlen: 24 90.159.31.0/24 maxlen: 24 90.159.33.0/24 maxlen: 24 90.159.34.0/24 maxlen: 24 90.159.36.0/24 maxlen: 24 90.159.37.0/24 maxlen: 24 90.159.38.0/24 maxlen: 24 90.159.44.0/22 maxlen: 22 90.159.50.0/24 maxlen: 24 90.159.51.0/24 maxlen: 24 90.159.58.0/24 maxlen: 24 90.159.59.0/24 maxlen: 24 90.159.60.0/24 maxlen: 24 90.159.61.0/24 maxlen: 24 90.159.64.0/18 maxlen: 18 90.159.64.0/24 maxlen: 24 90.159.68.0/24 maxlen: 24 90.159.128.0/20 maxlen: 20 90.159.136.0/21 maxlen: 21 90.159.136.0/24 maxlen: 24 90.159.240.0/20 maxlen: 20 90.159.246.0/24 maxlen: 24 212.98.0.0/19 maxlen: 19 212.98.0.0/20 maxlen: 20 212.98.1.0/24 maxlen: 24 212.98.2.0/24 maxlen: 24 212.98.8.0/21 maxlen: 21 212.98.9.0/24 maxlen: 24 212.98.16.0/21 maxlen: 21 212.98.16.0/24 maxlen: 24 212.98.28.0/22 maxlen: 22 212.98.31.0/24 maxlen: 24 213.143.224.0/20 maxlen: 20 213.143.226.0/23 maxlen: 23 213.143.226.0/24 maxlen: 24 213.143.227.0/24 maxlen: 24 213.143.228.0/24 maxlen: 24 213.143.229.0/24 maxlen: 24 213.143.230.0/24 maxlen: 24 213.143.231.0/24 maxlen: 24 213.143.233.0/24 maxlen: 24 213.143.234.0/24 maxlen: 24 213.143.235.0/24 maxlen: 24 213.143.236.0/22 maxlen: 22 213.143.236.0/24 maxlen: 24 213.143.237.0/24 maxlen: 24 213.143.238.0/24 maxlen: 24 213.143.239.0/24 maxlen: 24 213.143.240.0/20 maxlen: 20 213.143.240.0/22 maxlen: 22 213.143.240.0/24 maxlen: 24 213.143.241.0/24 maxlen: 24 213.143.243.0/24 maxlen: 24 213.143.244.0/22 maxlen: 22 213.143.250.0/24 maxlen: 24 213.143.251.0/24 maxlen: 24 213.143.252.0/24 maxlen: 24 213.143.253.0/24 maxlen: 24 213.143.254.0/24 maxlen: 24 213.143.255.0/24 maxlen: 24 213.161.128.0/19 maxlen: 19 213.161.128.0/21 maxlen: 21 213.161.135.0/24 maxlen: 24 213.161.136.0/21 maxlen: 21 213.161.136.0/22 maxlen: 22 213.161.144.0/23 maxlen: 23 213.161.144.0/24 maxlen: 24 213.161.145.0/24 maxlen: 24 213.161.146.0/24 maxlen: 24 213.161.148.0/23 maxlen: 23 213.161.148.0/24 maxlen: 24 213.161.149.0/24 maxlen: 24 213.161.150.0/24 maxlen: 24 213.161.151.0/24 maxlen: 24 213.161.152.0/21 maxlen: 21 213.161.152.0/24 maxlen: 24 2a00:1f90::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:68:24:b3:25:0b:98:01:f7:20:50:89:7d:d8:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Validity Not Before: Jan 1 08:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6018f09321f7a6143ee565387fa0dc271cc56a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:de:40:6e:b8:17:fe:97:48:7a:6a:23:db:61: f2:e5:60:bd:ad:37:1a:8a:35:3b:12:c5:3c:19:66: 02:17:97:15:87:3b:b9:72:8b:95:ab:23:d4:11:0f: d0:d2:20:0a:1f:a8:0b:8c:ac:2d:d1:88:7e:b4:96: ec:20:77:30:0c:95:ee:ef:18:a6:c2:f1:ab:e5:d7: 9e:b1:cb:b4:b3:cc:e1:c2:74:12:aa:52:e4:79:97: ec:ec:33:65:a5:d9:83:91:9f:52:f8:88:a0:f6:51: 8b:f9:96:57:21:d5:0c:82:96:9e:e1:a4:c8:aa:f8: 4f:58:3a:20:9a:29:bd:95:6c:b3:78:2f:89:21:d5: 35:b3:31:f3:8f:2f:8c:bd:ef:f3:b5:29:1f:67:cc: e7:1a:75:fe:92:fd:28:a1:21:b0:4e:d4:1c:5f:a6: 21:0f:fd:0a:28:a0:f9:e2:33:7d:81:b1:9f:5d:32: 90:8b:7c:30:e4:58:c4:ef:00:c3:14:8a:a5:e7:15: c7:b2:b7:31:b4:b3:2f:67:9b:9c:b5:3f:54:82:38: 29:a8:a6:6c:e4:c9:e8:32:15:94:c3:34:e9:19:a0: 21:db:b1:1e:63:87:74:01:d6:8b:ff:39:19:87:eb: 6f:36:f1:49:75:9a:73:f3:e6:70:dc:22:85:cf:5d: ea:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:01:8F:09:32:1F:7A:61:43:EE:56:53:87:FA:0D:C2:71:CC:56:A2 X509v3 Authority Key Identifier: keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/5gGPCTIfemFD7lZTh_oNwnHMVqI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 90.158.0.0/15 212.98.0.0/19 213.143.224.0/19 213.161.128.0/19 IPv6: 2a00:1f90::/32 Signature Algorithm: sha256WithRSAEncryption 17:23:cc:fe:85:30:3b:4b:8b:19:63:e4:9b:06:f1:5b:99:4e: e5:b9:3b:81:0c:08:6b:07:ac:e1:f7:f1:34:13:cd:a9:26:ac: b9:33:19:48:74:51:f2:62:f2:ad:01:cf:4d:9d:88:f2:45:69: f0:ec:6b:c0:7c:65:20:64:36:8a:3c:b7:1f:aa:38:a9:1e:33: 92:b6:b9:cf:d8:bc:43:d0:57:bd:ee:ae:81:b1:13:99:1a:20: bb:c2:c7:51:aa:7f:1b:ef:b4:8e:74:da:bb:a2:4a:8e:16:40: 2c:7e:b5:75:92:79:b0:9d:87:e6:c1:07:7b:3e:32:95:22:f3: 8d:e5:80:fb:85:03:b0:9f:59:cc:4e:ad:23:ba:81:89:b8:89: 13:e6:6b:92:d0:7a:bf:28:86:6d:fa:32:8e:fe:81:ea:b6:4d: 57:e4:dc:f3:f7:ff:ec:1d:a4:85:c7:9c:0f:34:b8:91:4f:91: 83:7d:ee:f1:8e:c7:2b:d5:40:f2:de:11:e6:a5:24:2a:c9:a0: b0:8d:f5:3b:06:d9:a2:71:e4:36:75:60:72:bd:20:3c:51:5f: 9c:27:cd:9f:7b:f2:de:42:0a:83:51:48:71:5f:94:ac:db:99: 09:14:53:28:a0:c8:e4:b6:d7:10:42:4a:35:49:cf:a4:d4:8a: e7:ec:e7:eb -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt4o2gksyULmAH3IFCJfdg9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTlmMmFkOTE1ODRiYWZmMDQ2NzQ0N2JhYzhmYjk3OGQx ZjlkZDMwHhcNMjYwMTAxMDgxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjAxOGYwOTMyMWY3YTYxNDNlZTU2NTM4N2ZhMGRjMjcxY2M1NmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt5AbrgX/pdIemoj22Hy5WC9rTca ijU7EsU8GWYCF5cVhzu5couVqyPUEQ/Q0iAKH6gLjKwt0Yh+tJbsIHcwDJXu7xim wvGr5deescu0s8zhwnQSqlLkeZfs7DNlpdmDkZ9S+Iig9lGL+ZZXIdUMgpae4aTI qvhPWDogmim9lWyzeC+JIdU1szHzjy+Mve/ztSkfZ8znGnX+kv0ooSGwTtQcX6Yh D/0KKKD54jN9gbGfXTKQi3ww5FjE7wDDFIql5xXHsrcxtLMvZ5uctT9UgjgpqKZs 5MnoMhWUwzTpGaAh27EeY4d0AdaL/zkZh+tvNvFJdZpz8+Zw3CKFz13qVQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFOYBjwkyH3phQ+5WU4f6DcJxzFaiMB8GA1UdIwQY MBaAFDkZ8q2RWEuv8EZ0R7rI+5eNH53TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUt MzJhYTY3MzFjMjkxLzEvNWdHUENUSWZlbUZEN2xaVGhfb053bkhNVnFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUtMzJhYTY3MzFjMjkx LzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAdBAIAATAXAwMBWp4DBAXU YgADBAXVj+ADBAXVoYAwDQQCAAIwBwMFACoAH5AwDQYJKoZIhvcNAQELBQADggEB ABcjzP6FMDtLixlj5JsG8VuZTuW5O4EMCGsHrOH38TQTzakmrLkzGUh0UfJi8q0B z02diPJFafDsa8B8ZSBkNoo8tx+qOKkeM5K2uc/YvEPQV73uroGxE5kaILvCx1Gq fxvvtI502ruiSo4WQCx+tXWSebCdh+bBB3s+MpUi843lgPuFA7CfWcxOrSO6gYm4 iRPma5LQer8ohm36Mo7+geq2TVfk3PP3/+wdpIXHnA80uJFPkYN97vGOxyvVQPLe EealJCrJoLCN9TsG2aJx5DZ1YHK9IDxRX5wnzZ978t5CCoNRSHFflKzbmQkUUyig yOS21xBCSjVJz6TUiufs5+s= -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:00 2026 by rpki-client