This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/0QsDdeC8WDkI2mRII63AEJgwGL0.roa File: 0QsDdeC8WDkI2mRII63AEJgwGL0.roa (raw, json) Hash identifier: 8Van+iVY6DYl8neGvsGg9ItzBr6NdUFFOVcUSDS2B4A= Subject key identifier: D1:0B:03:75:E0:BC:58:39:08:DA:64:48:23:AD:C0:10:98:30:18:BD Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d Certificate serial: 019B7D5AF56FFF300B955CA97C2E21C645F8 Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/0QsDdeC8WDkI2mRII63AEJgwGL0.roa Signing time: Fri 02 Jan 2026 06:17:51 +0000 ROA not before: Fri 02 Jan 2026 06:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210329 IP address blocks: 45.91.170.0/24 maxlen: 24 45.248.36.0/24 maxlen: 24 63.250.58.0/24 maxlen: 24 81.28.4.0/24 maxlen: 24 81.28.5.0/24 maxlen: 24 83.229.68.0/24 maxlen: 24 83.229.69.0/24 maxlen: 24 83.229.75.0/24 maxlen: 24 91.202.170.0/24 maxlen: 24 91.223.236.0/24 maxlen: 24 103.13.208.0/24 maxlen: 24 103.13.209.0/24 maxlen: 24 103.240.145.0/24 maxlen: 24 103.241.64.0/24 maxlen: 24 103.241.65.0/24 maxlen: 24 185.53.211.0/24 maxlen: 24 185.127.16.0/24 maxlen: 24 185.127.17.0/24 maxlen: 24 185.127.18.0/24 maxlen: 24 185.127.19.0/24 maxlen: 24 185.181.9.0/24 maxlen: 24 185.181.11.0/24 maxlen: 24 185.227.109.0/24 maxlen: 24 185.237.12.0/24 maxlen: 24 185.237.13.0/24 maxlen: 24 185.237.98.0/24 maxlen: 24 185.237.99.0/24 maxlen: 24 185.247.116.0/24 maxlen: 24 185.247.119.0/24 maxlen: 24 194.37.82.0/24 maxlen: 24 194.146.24.0/24 maxlen: 24 194.146.25.0/24 maxlen: 24 195.238.123.0/24 maxlen: 24 212.86.104.0/24 maxlen: 24 212.86.105.0/24 maxlen: 24 2a06:c5c0:600::/48 maxlen: 48 2a07:3b80:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:f5:6f:ff:30:0b:95:5c:a9:7c:2e:21:c6:45:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d Validity Not Before: Jan 2 06:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d10b0375e0bc583908da644823adc010983018bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f2:a6:61:19:17:55:4d:29:43:c0:17:41:86: c4:ff:ab:b5:12:ac:75:ba:3c:92:7a:d1:62:cc:eb: 6b:aa:e8:96:62:b7:9a:d3:8c:db:0f:82:d1:5e:d6: 56:96:42:54:bf:e5:e0:0f:bd:ed:9a:41:e7:37:39: 97:d8:02:92:7c:3e:e7:da:53:fc:03:a0:9d:2a:a8: 8a:d2:a9:6f:c5:6e:63:3c:91:3b:45:0b:09:ae:1e: 2a:0a:e7:00:5a:46:12:81:57:89:03:c5:d2:2d:f4: e6:d7:47:f6:0e:f7:a3:0e:c3:87:0f:ba:a0:54:61: c5:82:c7:3f:18:1e:ee:d2:f5:4e:ee:5d:5a:5e:24: 08:97:78:f6:2a:2f:51:cc:15:7e:a7:6c:f5:98:a5: 8a:28:67:4f:52:e7:9b:61:f6:cc:23:d1:94:21:e4: 24:f7:46:60:89:f4:a3:45:58:11:c6:38:fd:0d:65: 5a:d4:a1:36:ac:33:22:db:b4:4d:60:fc:93:6b:e0: 0c:3a:5a:1a:f8:84:0d:b0:33:3b:dc:84:a0:7b:13: 33:a6:ee:58:cb:5f:19:3c:13:cf:8a:32:a8:e0:a6: 45:1d:d7:ef:15:ce:03:e4:7b:34:8d:ad:78:e5:38: 7c:01:2d:2d:0e:23:1c:5a:55:f8:47:f0:56:08:28: 91:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0B:03:75:E0:BC:58:39:08:DA:64:48:23:AD:C0:10:98:30:18:BD X509v3 Authority Key Identifier: keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/0QsDdeC8WDkI2mRII63AEJgwGL0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.170.0/24 45.248.36.0/24 63.250.58.0/24 81.28.4.0/23 83.229.68.0/23 83.229.75.0/24 91.202.170.0/24 91.223.236.0/24 103.13.208.0/23 103.240.145.0/24 103.241.64.0/23 185.53.211.0/24 185.127.16.0/22 185.181.9.0/24 185.181.11.0/24 185.227.109.0/24 185.237.12.0/23 185.237.98.0/23 185.247.116.0/24 185.247.119.0/24 194.37.82.0/24 194.146.24.0/23 195.238.123.0/24 212.86.104.0/23 IPv6: 2a06:c5c0:600::/48 2a07:3b80:2::/48 Signature Algorithm: sha256WithRSAEncryption 30:52:36:1a:f3:3b:7d:6d:5d:1a:3c:95:ed:05:4e:37:5d:c6: 34:71:c1:26:a5:6e:81:10:e1:20:88:26:60:64:12:51:de:e9: 7c:35:3f:3a:9a:8b:c2:65:bb:69:e6:6c:30:ca:4e:b3:92:c9: ff:74:6b:74:fe:90:18:eb:95:06:3b:c8:61:e9:2f:5a:74:d9: 5e:52:bf:f3:d1:94:3f:db:27:ba:28:e9:c4:f7:9f:09:74:60: 3b:ed:d0:0e:2e:61:6c:ad:e8:7b:e2:2c:32:c1:03:2b:b6:eb: d8:73:45:9d:62:78:16:bb:32:1b:e7:d4:ba:07:8b:cd:f0:3e: 97:34:29:2c:a2:23:7a:d3:e6:0e:9e:e3:65:fc:00:7f:f6:71: b7:d7:a6:fc:4f:c6:b9:39:3c:8e:2c:24:01:53:c2:11:0a:66: 99:2e:eb:32:68:7a:8f:69:fd:4f:46:35:bd:80:22:3c:fb:04: db:88:1a:dc:9d:59:fa:48:a7:31:ee:39:a6:88:61:1e:a2:32: 88:3b:2c:5e:d1:78:d0:78:c9:54:f1:eb:f6:34:25:ea:58:d6: fd:29:b5:c5:7f:2a:1f:8e:b4:63:ef:31:ed:8e:c1:74:cc:a8: a5:9b:97:9e:82:3b:4d:ad:7d:52:28:79:b3:db:6f:17:be:f6: a0:40:f6:8a -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgISAZt9WvVv/zALlVypfC4hxkX4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YmQ3OTIzYWZkYmFlODdkMDdiMjMwOGRkMzg5ZDljZjA4 MmVkNmQwHhcNMjYwMTAyMDYxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTBiMDM3NWUwYmM1ODM5MDhkYTY0NDgyM2FkYzAxMDk4MzAxOGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/KmYRkXVU0pQ8AXQYbE/6u1Eqx1 ujySetFizOtrquiWYrea04zbD4LRXtZWlkJUv+XgD73tmkHnNzmX2AKSfD7n2lP8 A6CdKqiK0qlvxW5jPJE7RQsJrh4qCucAWkYSgVeJA8XSLfTm10f2DvejDsOHD7qg VGHFgsc/GB7u0vVO7l1aXiQIl3j2Ki9RzBV+p2z1mKWKKGdPUuebYfbMI9GUIeQk 90ZgifSjRVgRxjj9DWVa1KE2rDMi27RNYPyTa+AMOloa+IQNsDM73ISgexMzpu5Y y18ZPBPPijKo4KZFHdfvFc4D5Hs0ja145Th8AS0tDiMcWlX4R/BWCCiRmwIDAQAB o4ICsjCCAq4wHQYDVR0OBBYEFNELA3XgvFg5CNpkSCOtwBCYMBi9MB8GA1UdIwQY MBaAFOW9eSOv266H0HsjCN04nZzwgu1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2Ut MjZkMWU1NDU3OGYxLzEvMFFzRGRlQzhXRGtJMm1SSUk2M0FFSmd3R0wwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2UtMjZkMWU1NDU3OGYx LzEvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHHBggrBgEFBQcBBwEB/wSBtzCBtDCBlwQCAAEwgZADBAAt W6oDBAAt+CQDBAA/+joDBAFRHAQDBAFT5UQDBABT5UsDBABbyqoDBABb3+wDBAFn DdADBABn8JEDBAFn8UADBAC5NdMDBAK5fxADBAC5tQkDBAC5tQsDBAC5420DBAG5 7QwDBAG57WIDBAC593QDBAC593cDBADCJVIDBAHCkhgDBADD7nsDBAHUVmgwGAQC AAIwEgMHACoGxcAGAAMHACoHO4AAAjANBgkqhkiG9w0BAQsFAAOCAQEAMFI2GvM7 fW1dGjyV7QVON13GNHHBJqVugRDhIIgmYGQSUd7pfDU/OpqLwmW7aeZsMMpOs5LJ /3RrdP6QGOuVBjvIYekvWnTZXlK/89GUP9snuijpxPefCXRgO+3QDi5hbK3oe+Is MsEDK7br2HNFnWJ4FrsyG+fUugeLzfA+lzQpLKIjetPmDp7jZfwAf/Zxt9em/E/G uTk8jiwkAVPCEQpmmS7rMmh6j2n9T0Y1vYAiPPsE24ga3J1Z+kinMe45pohhHqIy iDssXtF40HjJVPHr9jQl6ljW/Sm1xX8qH460Y+8x7Y7BdMyopZuXnoI7Ta19Uih5 s9tvF772oED2ig== -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:29 2026 by rpki-client