This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/5yW1J3G-SRoAia8ARctoGLWzIYc.roa File: 5yW1J3G-SRoAia8ARctoGLWzIYc.roa (raw, json) Hash identifier: X09RAO+Iokxl6DD0+XywUvUr2qss8psh9a8kzzRJ8CA= Subject key identifier: E7:25:B5:27:71:BE:49:1A:00:89:AF:00:45:CB:68:18:B5:B3:21:87 Certificate issuer: /CN=fb79c26f31575345159c840ed278a878a9256615 Certificate serial: 019B77C687FE2D72392B172EF9938E9D82FC Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/5yW1J3G-SRoAia8ARctoGLWzIYc.roa Signing time: Thu 01 Jan 2026 04:17:38 +0000 ROA not before: Thu 01 Jan 2026 04:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51430 IP address blocks: 31.3.152.0/22 maxlen: 22 31.3.156.0/24 maxlen: 24 31.3.157.0/24 maxlen: 24 31.3.158.0/23 maxlen: 23 37.46.112.0/24 maxlen: 24 37.46.113.0/24 maxlen: 24 37.46.114.0/24 maxlen: 24 37.46.115.0/24 maxlen: 24 37.46.116.0/24 maxlen: 24 37.46.117.0/24 maxlen: 24 37.46.118.0/23 maxlen: 23 37.46.118.0/24 maxlen: 24 37.46.119.0/24 maxlen: 24 37.46.120.0/24 maxlen: 24 37.46.121.0/24 maxlen: 24 37.46.122.0/24 maxlen: 24 37.46.123.0/24 maxlen: 24 37.46.124.0/22 maxlen: 22 79.142.64.0/22 maxlen: 24 79.142.68.0/24 maxlen: 24 79.142.69.0/24 maxlen: 24 79.142.70.0/24 maxlen: 24 79.142.71.0/24 maxlen: 24 79.142.72.0/24 maxlen: 24 79.142.73.0/24 maxlen: 24 79.142.74.0/23 maxlen: 23 79.142.76.0/23 maxlen: 23 79.142.78.0/24 maxlen: 24 79.142.79.0/24 maxlen: 24 91.214.44.0/24 maxlen: 24 91.214.47.0/24 maxlen: 24 128.127.104.0/23 maxlen: 23 128.127.106.0/23 maxlen: 23 128.127.108.0/24 maxlen: 24 128.127.109.0/24 maxlen: 24 128.127.110.0/23 maxlen: 23 185.2.28.0/24 maxlen: 24 185.2.29.0/24 maxlen: 24 185.2.30.0/24 maxlen: 24 185.2.31.0/24 maxlen: 24 185.7.32.0/24 maxlen: 24 185.7.33.0/24 maxlen: 24 185.7.34.0/24 maxlen: 24 185.7.35.0/24 maxlen: 24 185.10.56.0/22 maxlen: 22 213.5.64.0/21 maxlen: 21 2a00:7140::/32 maxlen: 32 2a00:7142::/32 maxlen: 32 2a00:7143::/32 maxlen: 32 2a00:7143:101::/48 maxlen: 48 2a00:7144::/32 maxlen: 32 2a00:7145::/48 maxlen: 48 2a00:7145:b1::/48 maxlen: 48 2a00:7145:c1::/48 maxlen: 48 2a00:7145:c2::/48 maxlen: 48 2a00:7146::/48 maxlen: 48 2a00:7147:22::/48 maxlen: 48 2a00:7147:a9::/48 maxlen: 48 2a00:7147:b1::/48 maxlen: 48 2a00:7147:e1::/48 maxlen: 48 2a00:7147:e2::/48 maxlen: 48 2a00:7147:e3::/48 maxlen: 48 2a00:7147:e4::/48 maxlen: 48 2a00:7147:e5::/48 maxlen: 48 2a00:7147:e6::/48 maxlen: 48 2a00:7147:e7::/48 maxlen: 48 2a00:7147:e8::/48 maxlen: 48 2a00:7147:e9::/48 maxlen: 48 2a00:7147:e10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:87:fe:2d:72:39:2b:17:2e:f9:93:8e:9d:82:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb79c26f31575345159c840ed278a878a9256615 Validity Not Before: Jan 1 04:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e725b52771be491a0089af0045cb6818b5b32187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e7:88:8f:80:ca:01:60:5d:fe:f2:cd:a0:99: 97:4c:de:bb:fe:77:cb:c0:55:1c:07:01:07:e9:ab: 13:e2:8b:c4:b4:ec:e9:2f:5d:a9:ae:8d:52:41:9f: 9b:ca:5f:54:e6:c7:a7:1b:9f:7a:27:e9:3c:07:6c: 1d:a9:ac:db:03:d7:a0:ad:46:4d:12:b2:23:62:2e: 57:36:e5:24:a1:e9:ce:1c:5d:90:fa:e8:ae:8b:d7: 16:d8:67:d2:49:be:aa:f4:65:6c:20:6d:40:ba:26: b3:63:7a:58:df:f1:c0:93:7e:45:e8:0d:41:e3:a9: 98:8b:fc:64:3e:2b:56:8f:dc:a3:f5:bd:49:8f:75: 60:7f:4f:1a:7c:41:3f:c0:12:b5:d2:ab:bd:43:8a: 4e:8b:90:83:4c:d0:a6:00:b7:74:c8:47:f0:08:5b: f6:4d:fe:6a:c3:43:19:67:ef:ac:2f:d7:4e:1d:aa: 4a:fd:d2:f9:2b:6b:b5:d1:5c:e2:bb:f6:29:f1:c1: 44:18:a1:1f:b1:87:b1:93:90:3f:e3:99:25:22:28: fe:2b:07:ed:d4:83:b2:b7:b8:c5:f5:9b:c7:5d:c9: c6:4e:6e:df:b9:e6:d2:c0:76:a2:1f:16:d1:81:7a: fd:9a:74:c5:fb:78:27:d2:99:1c:e5:5d:74:75:57: 12:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:25:B5:27:71:BE:49:1A:00:89:AF:00:45:CB:68:18:B5:B3:21:87 X509v3 Authority Key Identifier: keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/5yW1J3G-SRoAia8ARctoGLWzIYc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.3.152.0/21 37.46.112.0/20 79.142.64.0/20 91.214.44.0/24 91.214.47.0/24 128.127.104.0/21 185.2.28.0/22 185.7.32.0/22 185.10.56.0/22 213.5.64.0/21 IPv6: 2a00:7140::/32 2a00:7142::-2a00:7145:0:ffff:ffff:ffff:ffff:ffff 2a00:7145:b1::/48 2a00:7145:c1::-2a00:7145:c2:ffff:ffff:ffff:ffff:ffff 2a00:7146::/48 2a00:7147:22::/48 2a00:7147:a9::/48 2a00:7147:b1::/48 2a00:7147:e1::-2a00:7147:e9:ffff:ffff:ffff:ffff:ffff 2a00:7147:e10::/48 Signature Algorithm: sha256WithRSAEncryption 0e:6c:24:80:3a:5f:c4:f9:29:08:af:8d:b9:c1:69:ae:9d:fc: ea:bd:24:bb:2b:dc:77:18:9a:79:14:2e:b5:f3:15:db:4a:2d: 2d:63:13:c2:1d:7c:8a:a6:f3:0b:8e:eb:b1:2c:00:0c:13:97: 10:b1:0c:94:aa:91:fa:8f:1a:93:78:37:5f:d3:39:85:eb:5d: dc:d2:84:87:1e:82:63:90:1f:cb:b9:e3:cc:7e:fb:2c:bf:64: c8:d8:94:e6:0d:23:6a:b7:b4:65:4e:4d:45:1d:f3:15:86:32: d0:4f:21:cf:f8:a7:7d:8b:f5:ea:7c:c6:1d:9a:c4:4f:51:32: 24:a1:bf:c5:e8:cd:23:fc:40:b3:8d:62:7a:cf:68:73:1a:b6: 91:f5:3e:24:f4:86:c1:bd:81:cc:7c:8f:f8:36:2a:f7:64:67: 5e:d6:46:04:75:7e:e3:c2:88:91:52:46:86:8c:b4:6f:76:5e: 68:e4:0f:55:52:24:5f:66:f6:7b:89:65:5e:8b:c8:2f:3b:27: 87:60:0a:62:23:8c:f1:a1:00:c1:4f:07:80:5a:ff:f9:75:1e: 79:a8:37:8c:f2:7d:bf:15:74:ee:0b:bc:31:a3:2b:07:6d:5e: d8:06:72:1b:25:52:58:e8:be:93:52:8d:94:54:b6:11:70:68: 12:44:4c:2e -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt3xof+LXI5Kxcu+ZOOnYL8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNzljMjZmMzE1NzUzNDUxNTljODQwZWQyNzhhODc4YTky NTY2MTUwHhcNMjYwMTAxMDQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzI1YjUyNzcxYmU0OTFhMDA4OWFmMDA0NWNiNjgxOGI1YjMyMTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+eIj4DKAWBd/vLNoJmXTN67/nfL wFUcBwEH6asT4ovEtOzpL12pro1SQZ+byl9U5senG596J+k8B2wdqazbA9egrUZN ErIjYi5XNuUkoenOHF2Q+uiui9cW2GfSSb6q9GVsIG1AuiazY3pY3/HAk35F6A1B 46mYi/xkPitWj9yj9b1Jj3Vgf08afEE/wBK10qu9Q4pOi5CDTNCmALd0yEfwCFv2 Tf5qw0MZZ++sL9dOHapK/dL5K2u10Vziu/Yp8cFEGKEfsYexk5A/45klIij+Kwft 1IOyt7jF9ZvHXcnGTm7fuebSwHaiHxbRgXr9mnTF+3gn0pkc5V10dVcSjwIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFOcltSdxvkkaAImvAEXLaBi1syGHMB8GA1UdIwQY MBaAFPt5wm8xV1NFFZyEDtJ4qHipJWYVMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0zbkNiekZYVTBVVm5JUU8wbmlvZUtrbFpoVS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvMTJkNjkxLTM3YTQtNGIxNS1hN2Vh LWJkMzdkYTBlNDQ3Yy8xLzV5VzFKM0ctU1JvQWlhOEFSY3RvR0xXeklZYy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODAvMTJkNjkxLTM3YTQtNGIxNS1hN2VhLWJkMzdkYTBlNDQ3 Yy8xLzEtM25DYnpGWFUwVVZuSVFPMG5pb2VLa2xaaFUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwgdYGCCsGAQUFBwEHAQH/BIHGMIHDMEIEAgABMDwDBAMf A5gDBAQlLnADBARPjkADBABb1iwDBABb1i8DBAOAf2gDBAK5AhwDBAK5ByADBAK5 CjgDBAPVBUAwfQQCAAIwdwMFACoAcUAwEAMFASoAcUIDBwAqAHFFAAADBwAqAHFF ALEwEgMHACoAcUUAwQMHACoAcUUAwgMHACoAcUYAAAMHACoAcUcAIgMHACoAcUcA qQMHACoAcUcAsTASAwcAKgBxRwDhAwcBKgBxRwDoAwcAKgBxRw4QMA0GCSqGSIb3 DQEBCwUAA4IBAQAObCSAOl/E+SkIr425wWmunfzqvSS7K9x3GJp5FC618xXbSi0t YxPCHXyKpvMLjuuxLAAME5cQsQyUqpH6jxqTeDdf0zmF613c0oSHHoJjkB/LuePM fvssv2TI2JTmDSNqt7RlTk1FHfMVhjLQTyHP+Kd9i/XqfMYdmsRPUTIkob/F6M0j /ECzjWJ6z2hzGraR9T4k9IbBvYHMfI/4Nir3ZGde1kYEdX7jwoiRUkaGjLRvdl5o 5A9VUiRfZvZ7iWVei8gvOyeHYApiI4zxoQDBTweAWv/5dR55qDeM8n2/FXTuC7wx oysHbV7YBnIbJVJY6L6TUo2UVLYRcGgSREwu -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:56 2026 by rpki-client