This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/krebELS6FLfilnA__hBq0uhvWyo.roa File: krebELS6FLfilnA__hBq0uhvWyo.roa (raw, json) Hash identifier: XGJZqlWxpa74go/FmTdiLNyWAGB5hXKCDhTD8hHKfr0= Subject key identifier: 92:B7:9B:10:B4:BA:14:B7:E2:96:70:3F:FE:10:6A:D2:E8:6F:5B:2A Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d Certificate serial: 019B7D5AF37C932C731A754C447C0EE51D5E Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/krebELS6FLfilnA__hBq0uhvWyo.roa Signing time: Fri 02 Jan 2026 06:17:51 +0000 ROA not before: Fri 02 Jan 2026 06:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44709 IP address blocks: 5.100.248.0/24 maxlen: 24 5.100.249.0/24 maxlen: 24 5.100.250.0/24 maxlen: 24 5.100.251.0/24 maxlen: 24 5.100.252.0/24 maxlen: 24 5.100.253.0/24 maxlen: 24 5.100.254.0/24 maxlen: 24 5.100.255.0/24 maxlen: 24 31.133.100.0/24 maxlen: 24 31.133.102.0/24 maxlen: 24 31.133.103.0/24 maxlen: 24 45.83.40.0/24 maxlen: 24 45.83.42.0/24 maxlen: 24 45.83.43.0/24 maxlen: 24 45.93.92.0/24 maxlen: 24 45.93.93.0/24 maxlen: 24 45.93.94.0/24 maxlen: 24 45.93.95.0/24 maxlen: 24 63.250.61.0/24 maxlen: 24 63.250.62.0/24 maxlen: 24 63.250.63.0/24 maxlen: 24 81.28.7.0/24 maxlen: 24 83.229.70.0/24 maxlen: 24 83.229.71.0/24 maxlen: 24 83.229.72.0/24 maxlen: 24 83.229.73.0/24 maxlen: 24 83.229.74.0/24 maxlen: 24 91.202.168.0/24 maxlen: 24 91.202.169.0/24 maxlen: 24 91.202.170.0/24 maxlen: 24 91.202.171.0/24 maxlen: 24 91.223.106.0/24 maxlen: 24 91.226.72.0/24 maxlen: 24 91.226.76.0/24 maxlen: 24 91.228.126.0/23 maxlen: 23 103.45.244.0/24 maxlen: 24 109.207.76.0/24 maxlen: 24 109.207.79.0/24 maxlen: 24 185.28.152.0/24 maxlen: 24 185.28.153.0/24 maxlen: 24 185.28.154.0/24 maxlen: 24 185.28.155.0/24 maxlen: 24 185.47.173.0/24 maxlen: 24 185.47.175.0/24 maxlen: 24 185.56.72.0/22 maxlen: 22 185.139.231.0/24 maxlen: 24 185.159.72.0/24 maxlen: 24 185.159.73.0/24 maxlen: 24 185.159.74.0/24 maxlen: 24 185.162.124.0/24 maxlen: 24 185.162.125.0/24 maxlen: 24 185.162.126.0/24 maxlen: 24 185.220.207.0/24 maxlen: 24 185.241.4.0/24 maxlen: 24 185.241.5.0/24 maxlen: 24 185.241.6.0/24 maxlen: 24 185.241.7.0/24 maxlen: 24 185.253.72.0/24 maxlen: 24 185.253.73.0/24 maxlen: 24 185.253.75.0/24 maxlen: 24 188.191.147.0/24 maxlen: 24 194.36.89.0/24 maxlen: 24 194.36.90.0/24 maxlen: 24 194.36.91.0/24 maxlen: 24 195.28.180.0/24 maxlen: 24 195.28.181.0/24 maxlen: 24 195.238.120.0/24 maxlen: 24 212.80.204.0/24 maxlen: 24 212.80.205.0/24 maxlen: 24 212.80.206.0/24 maxlen: 24 212.80.207.0/24 maxlen: 24 2a06:c5c0::/48 maxlen: 48 2a06:c5c0:700::/48 maxlen: 48 2a06:c5c0:900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:f3:7c:93:2c:73:1a:75:4c:44:7c:0e:e5:1d:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d Validity Not Before: Jan 2 06:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92b79b10b4ba14b7e296703ffe106ad2e86f5b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e0:4d:b3:04:2e:df:a4:cd:31:13:d3:4b:64: 33:6f:6a:bf:22:ba:42:96:e6:9e:20:42:44:80:a7: 3e:28:e0:c1:11:58:81:c8:ad:b5:6a:0f:d3:1c:80: 83:92:09:87:ac:4f:2f:be:2a:99:44:c8:44:72:5f: 18:7b:c3:93:71:6b:fc:09:9d:d2:14:d2:22:71:05: 51:fd:7a:c4:31:4c:57:ca:d1:cd:72:ae:70:7b:ab: a9:c8:fb:3c:12:bd:42:e7:5f:d6:6a:33:7f:96:ad: af:87:5b:09:60:ad:9e:2a:ad:c0:8d:fe:35:27:c8: 8c:59:c3:6d:bc:7c:6a:f5:52:b5:64:82:6d:3a:8d: 30:16:46:d6:de:33:f1:8d:b2:35:07:17:49:f6:21: 77:37:88:7d:db:61:9c:00:12:fd:ca:38:ef:2e:93: 94:26:14:58:34:04:24:96:0b:f1:52:6a:9e:92:38: 67:d6:ca:a1:90:e7:aa:ee:f4:f5:5d:5c:47:6d:ea: e4:6f:a5:db:cc:c8:dc:53:44:4a:1b:89:53:e8:9c: a7:a8:76:39:84:92:17:c5:d5:01:db:15:7a:10:5b: b8:05:89:92:a1:99:eb:25:53:2e:0e:cf:0d:05:42: 21:e5:70:78:0d:18:15:e2:47:c9:65:74:e9:0a:38: de:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B7:9B:10:B4:BA:14:B7:E2:96:70:3F:FE:10:6A:D2:E8:6F:5B:2A X509v3 Authority Key Identifier: keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/krebELS6FLfilnA__hBq0uhvWyo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.100.248.0/21 31.133.100.0/24 31.133.102.0/23 45.83.40.0/24 45.83.42.0/23 45.93.92.0/22 63.250.61.0-63.250.63.255 81.28.7.0/24 83.229.70.0-83.229.74.255 91.202.168.0/22 91.223.106.0/24 91.226.72.0/24 91.226.76.0/24 91.228.126.0/23 103.45.244.0/24 109.207.76.0/24 109.207.79.0/24 185.28.152.0/22 185.47.173.0/24 185.47.175.0/24 185.56.72.0/22 185.139.231.0/24 185.159.72.0-185.159.74.255 185.162.124.0-185.162.126.255 185.220.207.0/24 185.241.4.0/22 185.253.72.0/23 185.253.75.0/24 188.191.147.0/24 194.36.89.0-194.36.91.255 195.28.180.0/23 195.238.120.0/24 212.80.204.0/22 IPv6: 2a06:c5c0::/48 2a06:c5c0:700::/48 2a06:c5c0:900::/48 Signature Algorithm: sha256WithRSAEncryption 20:35:f3:53:65:73:8b:9d:34:30:52:07:cd:82:e2:d0:57:ce: 66:da:fb:bd:ec:54:fa:9c:0a:11:e8:97:d8:92:f5:41:e0:c6: 85:d1:4f:f1:d4:74:cf:41:6a:b5:a9:80:54:f2:36:57:06:db: 80:39:a0:10:d2:27:a4:86:e9:c9:b9:4b:9d:e4:4b:aa:23:9c: 45:c3:51:57:ef:e4:13:03:04:25:05:75:10:4e:9b:c3:91:77: 87:34:a1:74:7b:18:a1:c1:74:9d:de:a5:5f:63:24:92:32:6a: 48:85:46:c2:8b:1e:91:55:6b:1a:4d:5d:06:e5:e6:02:ab:ff: 3b:1c:32:74:a7:da:33:f5:06:d5:89:30:9b:87:93:81:f8:9e: 0a:1a:d0:8e:00:07:91:6e:ac:4f:f4:1b:6c:a9:fc:40:1f:e0: 00:df:5f:a4:0a:09:67:0d:b6:4c:a8:6e:da:f1:72:58:a0:f1: b0:da:06:83:c8:24:6d:44:23:15:20:f2:0c:fa:77:0d:49:13: 03:1d:83:12:42:a0:b6:49:2b:11:6c:c9:d1:3b:c2:f4:d5:11: 6d:93:1c:e2:f8:6a:a2:eb:52:3b:7e:05:f7:92:1f:07:06:af: 26:d2:45:9c:0a:12:8d:3c:f1:49:12:2e:3e:c7:91:cd:c0:f5: 2e:d3:0f:ea -----BEGIN CERTIFICATE----- MIIGEDCCBPigAwIBAgISAZt9WvN8kyxzGnVMRHwO5R1eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YmQ3OTIzYWZkYmFlODdkMDdiMjMwOGRkMzg5ZDljZjA4 MmVkNmQwHhcNMjYwMTAyMDYxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmI3OWIxMGI0YmExNGI3ZTI5NjcwM2ZmZTEwNmFkMmU4NmY1YjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+BNswQu36TNMRPTS2Qzb2q/IrpC luaeIEJEgKc+KODBEViByK21ag/THICDkgmHrE8vviqZRMhEcl8Ye8OTcWv8CZ3S FNIicQVR/XrEMUxXytHNcq5we6upyPs8Er1C51/WajN/lq2vh1sJYK2eKq3Ajf41 J8iMWcNtvHxq9VK1ZIJtOo0wFkbW3jPxjbI1BxdJ9iF3N4h922GcABL9yjjvLpOU JhRYNAQklgvxUmqekjhn1sqhkOeq7vT1XVxHberkb6XbzMjcU0RKG4lT6JynqHY5 hJIXxdUB2xV6EFu4BYmSoZnrJVMuDs8NBUIh5XB4DRgV4kfJZXTpCjjeoQIDAQAB o4IDHDCCAxgwHQYDVR0OBBYEFJK3mxC0uhS34pZwP/4QatLob1sqMB8GA1UdIwQY MBaAFOW9eSOv266H0HsjCN04nZzwgu1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2Ut MjZkMWU1NDU3OGYxLzEva3JlYkVMUzZGTGZpbG5BX19oQnEwdWh2V3lvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2UtMjZkMWU1NDU3OGYx LzEvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBMAYIKwYBBQUHAQcBAf8EggEfMIIBGzCB9QQCAAEwge4D BAMFZPgDBAAfhWQDBAEfhWYDBAAtUygDBAEtUyoDBAItXVwwDAMEAD/6PQMEBj/6 AAMEAFEcBzAMAwQBU+VGAwQAU+VKAwQCW8qoAwQAW99qAwQAW+JIAwQAW+JMAwQB W+R+AwQAZy30AwQAbc9MAwQAbc9PAwQCuRyYAwQAuS+tAwQAuS+vAwQCuThIAwQA uYvnMAwDBAO5n0gDBAC5n0owDAMEArmifAMEALmifgMEALnczwMEArnxBAMEAbn9 SAMEALn9SwMEALy/kzAMAwQAwiRZAwQCwiRYAwQBwxy0AwQAw+54AwQC1FDMMCEE AgACMBsDBwAqBsXAAAADBwAqBsXABwADBwAqBsXACQAwDQYJKoZIhvcNAQELBQAD ggEBACA181Nlc4udNDBSB82C4tBXzmba+73sVPqcChHol9iS9UHgxoXRT/HUdM9B arWpgFTyNlcG24A5oBDSJ6SG6cm5S53kS6ojnEXDUVfv5BMDBCUFdRBOm8ORd4c0 oXR7GKHBdJ3epV9jJJIyakiFRsKLHpFVaxpNXQbl5gKr/zscMnSn2jP1BtWJMJuH k4H4ngoa0I4AB5FurE/0G2yp/EAf4ADfX6QKCWcNtkyobtrxclig8bDaBoPIJG1E IxUg8gz6dw1JEwMdgxJCoLZJKxFsydE7wvTVEW2THOL4aqLrUjt+BfeSHwcGrybS RZwKEo088UkSLj7Hkc3A9S7TD+o= -----END CERTIFICATE-----Generated at Sun Jan 25 15:14:40 2026 by rpki-client