This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/eeTRJICIDgN4JkjWbGf7_URm99g.roa File: eeTRJICIDgN4JkjWbGf7_URm99g.roa (raw, json) Hash identifier: mj84Q1Duee66N33HSly1ihLOIjdwFTJC4fdawSWCPqQ= Subject key identifier: 79:E4:D1:24:80:88:0E:03:78:26:48:D6:6C:67:FB:FD:44:66:F7:D8 Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Certificate serial: 019B77595CD14953AAA84AD0554CE1A39445 Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/eeTRJICIDgN4JkjWbGf7_URm99g.roa Signing time: Thu 01 Jan 2026 02:18:23 +0000 ROA not before: Thu 01 Jan 2026 02:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31034 IP address blocks: 5.249.128.0/19 maxlen: 24 31.11.32.0/21 maxlen: 24 31.14.128.0/20 maxlen: 24 46.37.0.0/19 maxlen: 24 62.149.128.0/17 maxlen: 24 66.71.128.0/18 maxlen: 24 66.71.128.0/19 maxlen: 24 66.71.176.0/20 maxlen: 24 77.81.224.0/20 maxlen: 24 80.73.224.0/21 maxlen: 24 80.88.80.0/20 maxlen: 24 80.211.0.0/16 maxlen: 24 85.235.128.0/19 maxlen: 24 89.36.208.0/22 maxlen: 24 89.46.64.0/20 maxlen: 24 89.46.104.0/21 maxlen: 24 89.46.192.0/21 maxlen: 24 93.186.240.0/21 maxlen: 24 93.186.248.0/21 maxlen: 24 94.177.160.0/19 maxlen: 24 94.177.192.0/18 maxlen: 24 95.110.128.0/17 maxlen: 24 109.70.240.0/22 maxlen: 24 109.70.244.0/22 maxlen: 24 176.107.144.0/21 maxlen: 24 185.56.8.0/22 maxlen: 24 185.58.116.0/22 maxlen: 24 185.58.192.0/22 maxlen: 24 188.213.160.0/20 maxlen: 24 193.254.240.0/23 maxlen: 24 194.182.110.0/23 maxlen: 24 195.128.234.0/23 maxlen: 24 195.225.168.0/22 maxlen: 24 195.231.0.0/17 maxlen: 24 195.231.64.0/20 maxlen: 24 195.231.80.0/21 maxlen: 24 195.231.88.0/21 maxlen: 24 195.234.171.0/24 maxlen: 24 195.250.34.0/24 maxlen: 24 209.227.224.0/20 maxlen: 24 212.237.0.0/18 maxlen: 24 217.61.0.0/18 maxlen: 24 217.61.56.0/21 maxlen: 24 217.61.120.0/21 maxlen: 24 217.73.224.0/20 maxlen: 24 2a00:6d40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5c:d1:49:53:aa:a8:4a:d0:55:4c:e1:a3:94:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Validity Not Before: Jan 1 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79e4d12480880e03782648d66c67fbfd4466f7d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9e:b2:51:6c:e3:64:8f:2e:e9:80:4b:a6:0f: 20:fb:68:0d:0f:24:6b:97:e1:b5:8c:84:f1:86:e7: 21:7d:3f:5c:2a:af:9f:fe:f0:67:d2:a4:6f:dd:75: 96:a1:e1:f4:73:45:fa:6c:5d:1d:bc:49:cd:cc:9c: 3d:5c:29:21:5e:23:3d:69:ec:13:d2:04:86:78:de: b0:70:f6:41:2e:a4:09:93:7d:96:35:f3:43:b6:fc: 05:27:71:6b:3d:01:76:5e:fd:6c:74:f7:6a:86:64: f3:23:70:8f:30:36:78:53:30:92:62:2b:85:91:c5: 03:b7:d5:74:c8:ad:cf:76:87:cc:2d:c2:bf:ab:19: 05:e9:d1:96:8b:7f:0d:6c:8f:cf:ea:ef:4e:1e:fe: 3b:01:0e:73:ed:dd:a3:8f:33:5b:ae:6b:71:27:64: 54:3e:01:00:c4:4c:95:62:0b:62:49:4e:4b:27:8f: 42:a3:93:3f:08:37:8d:5f:b6:06:7d:16:c2:05:e4: 3b:47:64:bd:08:77:75:f5:d8:c4:16:6d:ae:e5:34: 10:02:d3:16:b8:99:60:2a:3a:05:9b:9d:39:ab:5d: fd:28:cc:9c:b9:4b:b4:2f:59:12:21:aa:82:9d:07: fe:02:6e:43:0d:31:3b:9d:98:df:42:e1:3b:ad:b7: 2f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E4:D1:24:80:88:0E:03:78:26:48:D6:6C:67:FB:FD:44:66:F7:D8 X509v3 Authority Key Identifier: keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/eeTRJICIDgN4JkjWbGf7_URm99g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.249.128.0/19 31.11.32.0/21 31.14.128.0/20 46.37.0.0/19 62.149.128.0/17 66.71.128.0/18 77.81.224.0/20 80.73.224.0/21 80.88.80.0/20 80.211.0.0/16 85.235.128.0/19 89.36.208.0/22 89.46.64.0/20 89.46.104.0/21 89.46.192.0/21 93.186.240.0/20 94.177.160.0-94.177.255.255 95.110.128.0/17 109.70.240.0/21 176.107.144.0/21 185.56.8.0/22 185.58.116.0/22 185.58.192.0/22 188.213.160.0/20 193.254.240.0/23 194.182.110.0/23 195.128.234.0/23 195.225.168.0/22 195.231.0.0/17 195.234.171.0/24 195.250.34.0/24 209.227.224.0/20 212.237.0.0/18 217.61.0.0/18 217.61.120.0/21 217.73.224.0/20 IPv6: 2a00:6d40::/29 Signature Algorithm: sha256WithRSAEncryption 7f:29:29:44:6d:2c:3a:4d:c1:8d:ac:0b:60:06:2f:8b:23:cf: b8:fa:b6:3c:a2:8a:be:e4:24:a2:c2:9d:cd:cf:99:a0:92:7a: b4:da:2b:1d:ab:b8:54:85:d8:65:5d:97:e5:5c:1f:9f:e0:4a: 40:7b:c2:1f:6d:46:c2:8f:02:c2:38:78:42:86:2c:37:af:af: f9:df:67:b4:22:a7:a5:a3:02:7f:4c:02:3f:e0:8c:02:41:f8: a7:e6:ea:fa:a6:39:43:98:a7:bd:05:94:05:ca:3e:69:9d:e4: b8:77:2a:0c:29:11:9a:4d:e5:6c:12:e3:49:cd:8c:4f:81:83: bd:de:58:05:d2:ad:7f:7c:ba:a9:94:50:70:07:62:0f:d3:37: 7e:71:a8:21:48:f8:bb:e2:c8:2e:25:c8:9a:fc:a0:28:63:f8: 8b:22:5d:9b:f6:2f:05:0f:d5:5d:f4:fe:f1:a3:7e:18:d5:f4: be:d3:a8:70:dc:5d:a3:5b:bb:4d:2a:e9:8d:a8:5e:18:c5:3d: 11:fe:b4:84:40:27:38:13:a6:8b:a3:6b:8a:55:52:8f:ed:a8: da:14:50:b6:56:48:34:09:6e:2c:21:88:b8:0e:bd:cf:83:1a: 87:85:54:b3:9c:dc:e4:34:7a:2c:a1:d4:24:57:cb:39:4a:6f: e8:cb:19:7a -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgISAZt3WVzRSVOqqErQVUzho5RFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5 Mzg2MWMwHhcNMjYwMTAxMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWU0ZDEyNDgwODgwZTAzNzgyNjQ4ZDY2YzY3ZmJmZDQ0NjZmN2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl56yUWzjZI8u6YBLpg8g+2gNDyRr l+G1jITxhuchfT9cKq+f/vBn0qRv3XWWoeH0c0X6bF0dvEnNzJw9XCkhXiM9aewT 0gSGeN6wcPZBLqQJk32WNfNDtvwFJ3FrPQF2Xv1sdPdqhmTzI3CPMDZ4UzCSYiuF kcUDt9V0yK3PdofMLcK/qxkF6dGWi38NbI/P6u9OHv47AQ5z7d2jjzNbrmtxJ2RU PgEAxEyVYgtiSU5LJ49Co5M/CDeNX7YGfRbCBeQ7R2S9CHd19djEFm2u5TQQAtMW uJlgKjoFm505q139KMycuUu0L1kSIaqCnQf+Am5DDTE7nZjfQuE7rbcvcwIDAQAB o4IC9jCCAvIwHQYDVR0OBBYEFHnk0SSAiA4DeCZI1mxn+/1EZvfYMB8GA1UdIwQY MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt ODQyNjk0MTJkNTYxLzEvZWVUUkpJQ0lEZ040SmtqV2JHZjdfVVJtOTlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBCgYIKwYBBQUHAQcBAf8EgfowgfcwgeUEAgABMIHeAwQF BfmAAwQDHwsgAwQEHw6AAwQFLiUAAwQHPpWAAwQGQkeAAwQETVHgAwQDUEngAwQE UFhQAwMAUNMDBAVV64ADBAJZJNADBARZLkADBANZLmgDBANZLsADBARduvAwCwME BV6xoAMDAV6wAwQHX26AAwQDbUbwAwQDsGuQAwQCuTgIAwQCuTp0AwQCuTrAAwQE vNWgAwQBwf7wAwQBwrZuAwQBw4DqAwQCw+GoAwQHw+cAAwQAw+qrAwQAw/oiAwQE 0ePgAwQG1O0AAwQG2T0AAwQD2T14AwQE2UngMA0EAgACMAcDBQMqAG1AMA0GCSqG SIb3DQEBCwUAA4IBAQB/KSlEbSw6TcGNrAtgBi+LI8+4+rY8ooq+5CSiwp3Nz5mg knq02isdq7hUhdhlXZflXB+f4EpAe8IfbUbCjwLCOHhChiw3r6/532e0IqelowJ/ TAI/4IwCQfin5ur6pjlDmKe9BZQFyj5pneS4dyoMKRGaTeVsEuNJzYxPgYO93lgF 0q1/fLqplFBwB2IP0zd+caghSPi74sguJcia/KAoY/iLIl2b9i8FD9Vd9P7xo34Y 1fS+06hw3F2jW7tNKumNqF4YxT0R/rSEQCc4E6aLo2uKVVKP7ajaFFC2Vkg0CW4s IYi4Dr3PgxqHhVSznNzkNHosodQkV8s5Sm/oyxl6 -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:12 2026 by rpki-client