This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/5pQj7qkmBcSMfaLVfZDv-7kT9DI.roa File: 5pQj7qkmBcSMfaLVfZDv-7kT9DI.roa (raw, json) Hash identifier: Rd6vx0quono9MPD1F0vpd55eYapHMtF51xcO/Hw6eew= Subject key identifier: E6:94:23:EE:A9:26:05:C4:8C:7D:A2:D5:7D:90:EF:FB:B9:13:F4:32 Certificate issuer: /CN=7d346ace4e652870f1687450d5c34e14cb0094b5 Certificate serial: 019B77596A84A54F12975C57D77AC068E929 Authority key identifier: 7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/5pQj7qkmBcSMfaLVfZDv-7kT9DI.roa Signing time: Thu 01 Jan 2026 02:18:27 +0000 ROA not before: Thu 01 Jan 2026 02:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29256 IP address blocks: 37.48.128.0/18 maxlen: 18 37.48.192.0/19 maxlen: 19 46.58.128.0/20 maxlen: 20 46.58.144.0/20 maxlen: 20 46.58.160.0/20 maxlen: 20 46.58.176.0/20 maxlen: 20 46.58.192.0/20 maxlen: 20 46.58.208.0/20 maxlen: 20 46.58.224.0/20 maxlen: 20 46.58.240.0/20 maxlen: 20 130.0.240.0/20 maxlen: 20 130.180.128.0/20 maxlen: 20 130.180.144.0/20 maxlen: 20 130.180.160.0/20 maxlen: 20 130.180.176.0/20 maxlen: 20 178.171.128.0/20 maxlen: 20 178.171.144.0/20 maxlen: 20 178.171.160.0/20 maxlen: 20 178.171.176.0/20 maxlen: 20 178.171.192.0/20 maxlen: 20 178.171.208.0/20 maxlen: 20 178.171.224.0/20 maxlen: 20 178.171.240.0/20 maxlen: 20 188.160.0.0/17 maxlen: 17 188.160.128.0/20 maxlen: 20 188.160.144.0/20 maxlen: 20 188.160.160.0/20 maxlen: 20 188.160.176.0/20 maxlen: 20 188.160.192.0/20 maxlen: 20 188.160.208.0/20 maxlen: 20 188.160.224.0/20 maxlen: 20 188.160.240.0/20 maxlen: 20 188.229.128.0/20 maxlen: 20 188.229.144.0/20 maxlen: 20 188.229.160.0/20 maxlen: 20 188.229.176.0/20 maxlen: 20 188.229.192.0/20 maxlen: 20 188.229.208.0/20 maxlen: 20 188.229.224.0/20 maxlen: 20 188.229.240.0/20 maxlen: 20 2a00:1ee8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6a:84:a5:4f:12:97:5c:57:d7:7a:c0:68:e9:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d346ace4e652870f1687450d5c34e14cb0094b5 Validity Not Before: Jan 1 02:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e69423eea92605c48c7da2d57d90effbb913f432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cf:3b:10:b3:5d:fe:18:5c:07:55:47:f2:b6: de:65:1b:cb:ac:ae:80:e6:0b:a0:e7:aa:5b:c8:01: e4:b0:a7:49:d8:5f:7a:29:7d:8a:69:89:43:10:74: 0c:e4:f1:68:59:29:d8:71:aa:6d:70:a3:7a:69:de: 0f:b3:45:05:ad:a1:20:12:67:ec:16:e5:fc:80:a8: a0:59:31:13:41:d5:42:86:b7:ae:c6:e1:55:a2:17: e5:e3:3f:aa:d8:f1:d6:0b:9f:43:53:05:ab:54:18: 8b:5c:f4:c5:3b:6b:e0:4e:bc:cb:4a:73:85:7b:55: 7d:19:7f:a1:30:c9:ae:fa:c8:d2:dc:c8:a6:71:e2: 89:10:7f:8f:83:38:59:76:60:77:b3:2d:ec:2d:7c: e3:2f:92:1f:41:93:78:0a:1d:39:69:5b:69:ef:45: a9:e4:bd:be:b5:70:7d:8b:05:e0:e8:5b:22:1e:36: 9c:83:cb:83:18:e6:48:16:ed:40:73:d2:f2:bd:21: f4:62:9f:8c:3d:16:d6:7e:eb:65:2f:2b:7a:a9:fb: dc:25:71:2b:ef:4c:c8:1d:31:45:cb:da:47:fc:45: 03:b0:d4:02:e3:93:11:5e:c3:49:1a:14:51:49:98: e9:33:e3:c8:7f:e0:79:b9:38:39:2e:37:31:26:2d: e0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:94:23:EE:A9:26:05:C4:8C:7D:A2:D5:7D:90:EF:FB:B9:13:F4:32 X509v3 Authority Key Identifier: keyid:7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/5pQj7qkmBcSMfaLVfZDv-7kT9DI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.48.128.0-37.48.223.255 46.58.128.0/17 130.0.240.0/20 130.180.128.0/18 178.171.128.0/17 188.160.0.0/16 188.229.128.0/17 IPv6: 2a00:1ee8::/32 Signature Algorithm: sha256WithRSAEncryption 5d:37:8c:60:ce:fc:e1:a7:7d:c6:08:ad:b6:d7:7e:ba:11:7e: fb:ba:bf:c8:51:de:b6:b1:21:f0:31:42:75:d8:10:d3:f9:45: 11:65:e8:d8:5b:96:0e:8b:31:51:fe:f8:0a:10:f2:df:f7:b0: 52:4a:2d:20:cd:4e:0d:34:b3:fb:c1:c5:e3:dc:2c:88:a2:a5: 16:90:9b:e6:c0:d7:c8:ab:9f:27:40:11:92:57:36:fa:ec:fc: 7a:41:81:bd:ce:6d:66:3f:81:30:6d:61:b0:bb:6c:9a:e1:36: d6:5a:4c:b5:79:92:24:4b:55:dc:47:ac:7e:da:0a:de:44:10: a3:fe:15:19:c9:5d:a4:4d:1b:c8:eb:a8:3d:a5:d0:c8:35:e2: 91:b5:ff:8b:ca:7c:04:8f:9a:29:5a:3f:05:29:c4:81:2a:32: 50:f4:9a:c1:c2:76:08:e7:8a:e7:fe:f3:fd:d9:d1:78:45:74: 68:cc:2e:47:91:73:90:82:aa:83:49:a0:28:a8:5a:eb:23:28: f3:01:f0:03:b0:08:94:bb:ff:74:8b:02:31:9c:8e:e8:70:f8: 36:01:b6:2a:4d:6c:95:e0:50:28:4f:66:eb:36:30:46:d3:60: c6:aa:47:79:e8:94:c1:d9:de:2c:b4:ab:9c:c9:d3:6a:80:7b: c5:4b:4b:dc -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt3WWqEpU8Sl1xX13rAaOkpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMzQ2YWNlNGU2NTI4NzBmMTY4NzQ1MGQ1YzM0ZTE0Y2Iw MDk0YjUwHhcNMjYwMTAxMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjk0MjNlZWE5MjYwNWM0OGM3ZGEyZDU3ZDkwZWZmYmI5MTNmNDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts87ELNd/hhcB1VH8rbeZRvLrK6A 5gug56pbyAHksKdJ2F96KX2KaYlDEHQM5PFoWSnYcaptcKN6ad4Ps0UFraEgEmfs FuX8gKigWTETQdVChreuxuFVohfl4z+q2PHWC59DUwWrVBiLXPTFO2vgTrzLSnOF e1V9GX+hMMmu+sjS3MimceKJEH+PgzhZdmB3sy3sLXzjL5IfQZN4Ch05aVtp70Wp 5L2+tXB9iwXg6FsiHjacg8uDGOZIFu1Ac9LyvSH0Yp+MPRbWfutlLyt6qfvcJXEr 70zIHTFFy9pH/EUDsNQC45MRXsNJGhRRSZjpM+PIf+B5uTg5LjcxJi3gmQIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFOaUI+6pJgXEjH2i1X2Q7/u5E/QyMB8GA1UdIwQY MBaAFH00as5OZShw8Wh0UNXDThTLAJS1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlRScXprNWxLSER4YUhSUTFjTk9GTXNBbExVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jNjc2ZDctZmJmZS00YWU2LWJlNTEt MzI3YWNjMWIxZTU5LzEvNXBRajdxa21CY1NNZmFMVmZaRHYtN2tUOURJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jNjc2ZDctZmJmZS00YWU2LWJlNTEtMzI3YWNjMWIxZTU5 LzEvZlRScXprNWxLSER4YUhSUTFjTk9GTXNBbExVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDA3BAIAATAxMAwDBAclMIAD BAUlMMADBAcuOoADBASCAPADBAaCtIADBAeyq4ADAwC8oAMEB7zlgDANBAIAAjAH AwUAKgAe6DANBgkqhkiG9w0BAQsFAAOCAQEAXTeMYM784ad9xgitttd+uhF++7q/ yFHetrEh8DFCddgQ0/lFEWXo2FuWDosxUf74ChDy3/ewUkotIM1ODTSz+8HF49ws iKKlFpCb5sDXyKufJ0ARklc2+uz8ekGBvc5tZj+BMG1hsLtsmuE21lpMtXmSJEtV 3EesftoK3kQQo/4VGcldpE0byOuoPaXQyDXikbX/i8p8BI+aKVo/BSnEgSoyUPSa wcJ2COeK5/7z/dnReEV0aMwuR5FzkIKqg0mgKKha6yMo8wHwA7AIlLv/dIsCMZyO 6HD4NgG2Kk1sleBQKE9m6zYwRtNgxqpHeeiUwdneLLSrnMnTaoB7xUtL3A== -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:07 2026 by rpki-client