This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/xNHCa7YE0_74VO-aCjDN4tL5il0.roa File: xNHCa7YE0_74VO-aCjDN4tL5il0.roa (raw, json) Hash identifier: zugpiiWf+MkAhbvw3OQkJUqr5jEm5p6q/ofWTXUHou4= Subject key identifier: C4:D1:C2:6B:B6:04:D3:FE:F8:54:EF:9A:0A:30:CD:E2:D2:F9:8A:5D Certificate issuer: /CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25 Certificate serial: 019ABFAF693E6565CE99BEF2F90DC93C16F3 Authority key identifier: 78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/xNHCa7YE0_74VO-aCjDN4tL5il0.roa Signing time: Wed 26 Nov 2025 10:22:15 +0000 ROA not before: Wed 26 Nov 2025 10:22:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41275 IP address blocks: 5.35.112.0/22 maxlen: 22 5.35.112.0/23 maxlen: 23 5.35.113.0/24 maxlen: 24 5.35.114.0/23 maxlen: 23 62.217.184.0/21 maxlen: 21 84.22.132.0/22 maxlen: 22 85.198.104.0/23 maxlen: 23 89.169.48.0/22 maxlen: 22 89.169.48.0/23 maxlen: 23 89.169.50.0/23 maxlen: 23 89.207.216.0/21 maxlen: 21 89.207.216.0/22 maxlen: 22 89.207.216.0/24 maxlen: 24 89.207.217.0/24 maxlen: 24 89.207.220.0/22 maxlen: 22 89.207.221.0/24 maxlen: 24 93.157.244.0/22 maxlen: 22 93.157.247.0/24 maxlen: 24 95.130.128.0/22 maxlen: 22 95.131.144.0/21 maxlen: 21 95.131.144.0/22 maxlen: 22 95.131.144.0/24 maxlen: 24 95.131.148.0/22 maxlen: 22 185.43.198.0/23 maxlen: 23 185.136.76.0/22 maxlen: 22 185.136.76.0/23 maxlen: 23 185.136.78.0/23 maxlen: 23 185.155.17.0/24 maxlen: 24 185.155.18.0/23 maxlen: 23 195.170.192.0/22 maxlen: 22 217.150.200.0/23 maxlen: 23 217.150.200.0/24 maxlen: 24 217.150.201.0/24 maxlen: 24 2a02:5fe0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:af:69:3e:65:65:ce:99:be:f2:f9:0d:c9:3c:16:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25 Validity Not Before: Nov 26 10:22:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c4d1c26bb604d3fef854ef9a0a30cde2d2f98a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:33:47:a1:c3:d1:ac:52:5a:52:4c:97:a0:b9: ab:10:cc:d7:bf:c5:38:0a:b3:d0:11:aa:90:d4:79: 12:b9:dd:c4:39:dd:70:ab:25:28:65:b1:99:c4:68: 7d:53:bf:f7:42:76:4f:68:98:9a:f1:22:6d:df:26: 99:f4:46:cc:c2:17:ac:fb:fd:9d:66:d9:a2:8e:ab: 8c:b7:a5:51:2f:5d:1d:24:9e:b2:56:0a:b8:eb:f2: 82:4e:69:62:2e:07:22:42:3d:8e:ac:25:88:90:bd: 0e:df:70:a9:b9:0a:3e:6e:f0:24:fd:e3:5c:e0:d7: 76:70:72:c3:25:c1:b7:79:9b:fc:51:05:db:88:d2: 19:e3:ff:cf:1c:ae:a1:01:4b:dc:00:83:c5:3c:32: 83:c4:0b:64:9c:04:78:ec:a7:d2:04:fd:0f:c0:a3: 92:3d:03:13:2f:d6:82:ef:f1:38:f0:a0:f9:81:f7: 30:ab:b1:0a:a5:4e:a8:3f:fa:56:2d:2e:46:95:d8: c9:8b:d2:06:6f:7c:6b:51:c8:68:bf:2c:13:54:fa: b3:9a:d7:36:58:be:1c:ec:d2:d4:dd:1e:ec:e4:8b: 9a:43:18:cc:14:04:c2:62:b8:c6:4c:a1:e8:33:1b: b5:09:49:f8:79:98:20:ee:2a:9b:0b:2b:96:60:3e: 7f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D1:C2:6B:B6:04:D3:FE:F8:54:EF:9A:0A:30:CD:E2:D2:F9:8A:5D X509v3 Authority Key Identifier: keyid:78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/xNHCa7YE0_74VO-aCjDN4tL5il0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.35.112.0/22 62.217.184.0/21 84.22.132.0/22 85.198.104.0/23 89.169.48.0/22 89.207.216.0/21 93.157.244.0/22 95.130.128.0/22 95.131.144.0/21 185.43.198.0/23 185.136.76.0/22 185.155.17.0-185.155.19.255 195.170.192.0/22 217.150.200.0/23 IPv6: 2a02:5fe0::/29 Signature Algorithm: sha256WithRSAEncryption 96:0a:60:b7:64:e9:3f:be:53:a2:0d:c5:0b:6a:fa:63:78:0e: a4:68:2c:0e:02:b2:81:fe:8f:9b:91:e6:0c:8f:40:85:f4:e3: 92:cd:be:6e:0f:78:de:b3:cf:1d:4e:3a:8e:e1:5e:ed:fa:dc: 3d:08:3f:ce:7b:ef:12:39:55:c0:1d:4a:0b:7b:09:c9:d3:d8: e8:bd:4d:90:b1:e1:7e:36:8e:30:04:58:66:63:31:8b:24:33: 98:21:b4:81:3b:1a:67:da:22:3d:1e:8e:16:21:9a:90:69:00: 44:fc:fe:df:04:91:63:b4:50:80:21:99:c6:9b:07:d4:ad:23: 0a:4a:b0:af:27:18:86:54:b7:12:06:c4:17:bd:b6:01:29:04: 9a:44:65:47:07:af:3f:31:2d:bd:d6:f6:e6:15:06:c0:f6:13: 04:ec:e8:ea:98:6e:67:1b:1f:c1:d7:fd:3e:97:cc:14:70:25: 69:ed:0a:45:98:af:89:9b:bb:fa:3c:42:0a:8f:cf:b7:9d:78: d8:f2:db:77:9c:fc:56:dc:46:05:bf:72:21:f7:b0:f8:0d:1c: c2:29:28:26:d5:98:95:8c:1d:c3:32:c7:e9:ed:f3:07:1c:18: ac:af:70:09:a1:31:bb:de:c2:03:c4:a7:be:d2:96:cb:8c:4b: e7:17:05:9d -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgISAZq/r2k+ZWXOmb7y+Q3JPBbzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4NWI0OTBkNzY2ZjRiMWMyMTFkN2RhZGQ2ZWZhNzcwZjZl YjllMjUwHhcNMjUxMTI2MTAyMjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGQxYzI2YmI2MDRkM2ZlZjg1NGVmOWEwYTMwY2RlMmQyZjk4YTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDNHocPRrFJaUkyXoLmrEMzXv8U4 CrPQEaqQ1HkSud3EOd1wqyUoZbGZxGh9U7/3QnZPaJia8SJt3yaZ9EbMwhes+/2d ZtmijquMt6VRL10dJJ6yVgq46/KCTmliLgciQj2OrCWIkL0O33CpuQo+bvAk/eNc 4Nd2cHLDJcG3eZv8UQXbiNIZ4//PHK6hAUvcAIPFPDKDxAtknAR47KfSBP0PwKOS PQMTL9aC7/E48KD5gfcwq7EKpU6oP/pWLS5GldjJi9IGb3xrUchovywTVPqzmtc2 WL4c7NLU3R7s5IuaQxjMFATCYrjGTKHoMxu1CUn4eZgg7iqbCyuWYD5//wIDAQAB o4ICbzCCAmswHQYDVR0OBBYEFMTRwmu2BNP++FTvmgowzeLS+YpdMB8GA1UdIwQY MBaAFHhbSQ12b0scIR19rdbvp3D2654lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUZ0SkRYWnZTeHdoSFgydDF1LW5jUGJybmlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81ZjM0M2QtOWI0Mi00NGI0LTkwNjct N2NhZTA0MGU0OWU4LzEveE5IQ2E3WUUwXzc0Vk8tYUNqRE40dEw1aWwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81ZjM0M2QtOWI0Mi00NGI0LTkwNjctN2NhZTA0MGU0OWU4 LzEvZUZ0SkRYWnZTeHdoSFgydDF1LW5jUGJybmlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwYgQCAAEwXAMEAgUjcAME Az7ZuAMEAlQWhAMEAVXGaAMEAlmpMAMEA1nP2AMEAl2d9AMEAl+CgAMEA1+DkAME AbkrxgMEArmITDAMAwQAuZsRAwQCuZsQAwQCw6rAAwQB2ZbIMA0EAgACMAcDBQMq Al/gMA0GCSqGSIb3DQEBCwUAA4IBAQCWCmC3ZOk/vlOiDcULavpjeA6kaCwOArKB /o+bkeYMj0CF9OOSzb5uD3jes88dTjqO4V7t+tw9CD/Oe+8SOVXAHUoLewnJ09jo vU2QseF+No4wBFhmYzGLJDOYIbSBOxpn2iI9Ho4WIZqQaQBE/P7fBJFjtFCAIZnG mwfUrSMKSrCvJxiGVLcSBsQXvbYBKQSaRGVHB68/MS291vbmFQbA9hME7OjqmG5n Gx/B1/0+l8wUcCVp7QpFmK+Jm7v6PEIKj8+3nXjY8tt3nPxW3EYFv3Ih97D4DRzC KSgm1ZiVjB3DMsfp7fMHHBisr3AJoTG73sIDxKe+0pbLjEvnFwWd -----END CERTIFICATE-----Generated at Mon Dec 22 23:59:25 2025 by rpki-client