This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/B91bl5VpT76yNxX_mY3Y_FZ4fjE.roa File: B91bl5VpT76yNxX_mY3Y_FZ4fjE.roa (raw, json) Hash identifier: aQIdJtZ5mc/JIwgmkXRC4OXad9wuI0XbrmYgWhxxS5c= Subject key identifier: 07:DD:5B:97:95:69:4F:BE:B2:37:15:FF:99:8D:D8:FC:56:78:7E:31 Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094 Certificate serial: 019BBD3534858B9D7D0A105F8B280DDCB026 Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/B91bl5VpT76yNxX_mY3Y_FZ4fjE.roa Signing time: Wed 14 Jan 2026 15:52:19 +0000 ROA not before: Wed 14 Jan 2026 15:52:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211183 IP address blocks: 5.35.124.0/24 maxlen: 24 5.35.125.0/24 maxlen: 24 5.35.126.0/24 maxlen: 24 5.35.127.0/24 maxlen: 24 5.253.62.0/24 maxlen: 24 37.140.241.0/24 maxlen: 24 45.128.204.0/24 maxlen: 24 79.133.181.0/24 maxlen: 24 79.133.182.0/24 maxlen: 24 79.133.183.0/24 maxlen: 24 89.191.225.0/24 maxlen: 24 91.200.84.0/24 maxlen: 24 94.154.11.0/24 maxlen: 24 130.49.143.0/24 maxlen: 24 130.49.146.0/24 maxlen: 24 130.49.153.0/24 maxlen: 24 155.212.245.0/24 maxlen: 24 155.212.246.0/24 maxlen: 24 155.212.247.0/24 maxlen: 24 157.22.230.0/24 maxlen: 24 157.22.231.0/24 maxlen: 24 185.198.152.0/24 maxlen: 24 185.239.50.0/24 maxlen: 24 185.239.51.0/24 maxlen: 24 185.240.103.0/24 maxlen: 24 185.244.51.0/24 maxlen: 24 185.250.44.0/24 maxlen: 24 185.250.46.0/24 maxlen: 24 185.250.47.0/24 maxlen: 24 193.187.96.0/24 maxlen: 24 194.5.78.0/24 maxlen: 24 194.5.79.0/24 maxlen: 24 195.93.252.0/24 maxlen: 24 217.171.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bd:35:34:85:8b:9d:7d:0a:10:5f:8b:28:0d:dc:b0:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094 Validity Not Before: Jan 14 15:52:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07dd5b9795694fbeb23715ff998dd8fc56787e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4a:5b:a8:7f:cb:c7:51:ac:36:76:26:69:5f: d9:54:30:58:a1:4d:62:71:bf:a1:83:c7:98:da:d6: 03:89:ad:91:16:9e:a8:d9:15:25:90:56:f6:b9:50: e1:cc:4a:a0:47:f2:01:35:b4:46:4d:8a:5a:4c:94: 88:d8:4b:83:9c:0f:d1:4a:c0:2d:ef:1a:2c:5f:bb: a6:c2:59:57:46:e8:bc:f5:37:a7:32:fa:53:cf:9f: ab:6a:f1:b8:72:ae:22:56:c9:d6:8e:49:71:73:af: ef:9c:56:3c:45:35:07:70:a1:32:4c:58:cd:da:11: d5:20:52:62:32:f5:c9:60:db:c6:96:e2:ec:ee:47: c8:23:2c:ca:ff:86:1f:0e:c3:7f:78:57:69:38:84: 4b:6d:2e:55:69:b0:22:99:b3:ea:cd:79:a2:5c:73: d9:1a:e9:9f:43:d7:07:31:93:36:9f:59:f8:94:7d: 71:4d:e4:8c:43:bc:8e:48:89:3b:5a:4c:bd:b4:3e: 7d:e2:38:dc:b2:ee:94:7a:54:de:e3:23:80:bc:11: d7:f4:31:d8:b0:4b:32:0d:7d:80:8e:ab:dd:00:2e: 79:8e:dd:11:58:59:e0:5f:90:6b:bb:bc:b4:d0:70: 24:3b:a0:92:87:4a:cc:74:b8:30:1d:d8:e2:91:80: cf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DD:5B:97:95:69:4F:BE:B2:37:15:FF:99:8D:D8:FC:56:78:7E:31 X509v3 Authority Key Identifier: keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/B91bl5VpT76yNxX_mY3Y_FZ4fjE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.35.124.0/22 5.253.62.0/24 37.140.241.0/24 45.128.204.0/24 79.133.181.0-79.133.183.255 89.191.225.0/24 91.200.84.0/24 94.154.11.0/24 130.49.143.0/24 130.49.146.0/24 130.49.153.0/24 155.212.245.0-155.212.247.255 157.22.230.0/23 185.198.152.0/24 185.239.50.0/23 185.240.103.0/24 185.244.51.0/24 185.250.44.0/24 185.250.46.0/23 193.187.96.0/24 194.5.78.0/23 195.93.252.0/24 217.171.146.0/24 Signature Algorithm: sha256WithRSAEncryption 05:69:cf:00:a4:98:c1:7a:48:b0:68:9c:4f:6b:3d:a2:4d:e0: 1a:c1:9d:9d:30:f8:b5:4b:e2:cb:f3:92:76:8a:95:bf:22:8f: a4:e4:ad:2b:33:1d:61:d7:88:06:8f:c7:24:e6:5b:28:94:12: 32:66:e6:b0:a2:d2:df:a8:93:20:12:d7:74:f8:a2:f6:d1:42: 3c:35:ae:44:c9:e2:f4:8f:91:db:55:9d:0e:67:4f:28:d1:a6: 19:89:40:e9:b7:dc:d3:c1:b3:18:64:c4:a6:83:91:5c:92:a7: ec:19:cb:46:db:74:24:cd:e1:4e:40:14:ee:59:0b:79:67:9a: b7:95:e5:a5:00:9f:6c:bc:26:62:72:58:61:0a:40:e3:55:18: fa:0f:0a:6f:ef:0b:9d:0c:7f:cf:ee:c5:a8:39:f2:10:c6:92: 5d:6f:fc:87:9c:d9:34:93:d3:2d:ea:d9:fb:c2:d1:6b:98:2c: d8:44:0e:19:2f:e5:f6:1d:5b:15:7d:4c:d2:d1:6b:5e:f6:08: cb:48:16:85:7e:3e:4d:a5:0e:49:0f:61:a4:bb:53:be:b8:1e: 67:e0:3d:cc:e9:c4:f6:47:af:4c:ec:13:13:74:e0:7a:78:de: d1:b5:56:0b:75:df:a3:df:4e:4b:a4:6e:f3:69:16:9a:49:d8: 7f:d4:38:45 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgISAZu9NTSFi519ChBfiygN3LAmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYmU2NWFlMjNmMjA3ZmE2OTUyNTVmNTVhOTA3YWMxNjA4 YmUwOTQwHhcNMjYwMTE0MTU1MjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2RkNWI5Nzk1Njk0ZmJlYjIzNzE1ZmY5OThkZDhmYzU2Nzg3ZTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskpbqH/Lx1GsNnYmaV/ZVDBYoU1i cb+hg8eY2tYDia2RFp6o2RUlkFb2uVDhzEqgR/IBNbRGTYpaTJSI2EuDnA/RSsAt 7xosX7umwllXRui89TenMvpTz5+ravG4cq4iVsnWjklxc6/vnFY8RTUHcKEyTFjN 2hHVIFJiMvXJYNvGluLs7kfIIyzK/4YfDsN/eFdpOIRLbS5VabAimbPqzXmiXHPZ GumfQ9cHMZM2n1n4lH1xTeSMQ7yOSIk7Wky9tD594jjcsu6UelTe4yOAvBHX9DHY sEsyDX2AjqvdAC55jt0RWFngX5Bru7y00HAkO6CSh0rMdLgwHdjikYDP7wIDAQAB o4ICojCCAp4wHQYDVR0OBBYEFAfdW5eVaU++sjcV/5mN2PxWeH4xMB8GA1UdIwQY MBaAFF++Za4j8gf6aVJV9VqQesFgi+CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUt NDkyYWIzNzI2ODlkLzEvQjkxYmw1VnBUNzZ5TnhYX21ZM1lfRlo0ZmpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUtNDkyYWIzNzI2ODlk LzEvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG3BggrBgEFBQcBBwEB/wSBpzCBpDCBoQQCAAEwgZoDBAIF I3wDBAAF/T4DBAAljPEDBAAtgMwwDAMEAE+FtQMEA0+FsAMEAFm/4QMEAFvIVAME AF6aCwMEAIIxjwMEAIIxkgMEAIIxmTAMAwQAm9T1AwQDm9TwAwQBnRbmAwQAucaY AwQBue8yAwQAufBnAwQAufQzAwQAufosAwQBufouAwQAwbtgAwQBwgVOAwQAw138 AwQA2auSMA0GCSqGSIb3DQEBCwUAA4IBAQAFac8ApJjBekiwaJxPaz2iTeAawZ2d MPi1S+LL85J2ipW/Io+k5K0rMx1h14gGj8ck5lsolBIyZuawotLfqJMgEtd0+KL2 0UI8Na5EyeL0j5HbVZ0OZ08o0aYZiUDpt9zTwbMYZMSmg5FckqfsGctG23QkzeFO QBTuWQt5Z5q3leWlAJ9svCZiclhhCkDjVRj6Dwpv7wudDH/P7sWoOfIQxpJdb/yH nNk0k9Mt6tn7wtFrmCzYRA4ZL+X2HVsVfUzS0Wte9gjLSBaFfj5NpQ5JD2Gku1O+ uB5n4D3M6cT2R69M7BMTdOB6eN7RtVYLdd+j305LpG7zaRaaSdh/1DhF -----END CERTIFICATE-----Generated at Sun Jan 25 17:46:00 2026 by rpki-client