This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9iOTIm_Pqtk2zmptjQFlNeTfK9o.roa File: 9iOTIm_Pqtk2zmptjQFlNeTfK9o.roa (raw, json) Hash identifier: ZigAv5NekkkkpTrJXxaFHPj1UjOK0eSXWTE04M16ltM= Subject key identifier: F6:23:93:22:6F:CF:AA:D9:36:CE:6A:6D:8D:01:65:35:E4:DF:2B:DA Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019A929D5DE69EE9660DB749EB0D4021F8C6 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9iOTIm_Pqtk2zmptjQFlNeTfK9o.roa Signing time: Mon 17 Nov 2025 16:19:37 +0000 ROA not before: Mon 17 Nov 2025 16:19:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 32132 IP address blocks: 5.175.203.0/24 maxlen: 24 5.175.204.0/24 maxlen: 24 5.231.59.0/24 maxlen: 24 5.231.94.0/24 maxlen: 24 83.243.86.0/24 maxlen: 24 89.106.76.0/24 maxlen: 24 89.106.79.0/24 maxlen: 24 89.106.80.0/24 maxlen: 24 89.106.81.0/24 maxlen: 24 89.106.92.0/24 maxlen: 24 89.106.93.0/24 maxlen: 24 94.103.170.0/24 maxlen: 24 94.103.171.0/24 maxlen: 24 94.103.174.0/24 maxlen: 24 94.249.148.0/24 maxlen: 24 94.249.158.0/24 maxlen: 24 94.249.168.0/24 maxlen: 24 94.249.169.0/24 maxlen: 24 94.249.170.0/24 maxlen: 24 94.249.172.0/24 maxlen: 24 94.249.177.0/24 maxlen: 24 94.249.183.0/24 maxlen: 24 94.249.214.0/24 maxlen: 24 94.249.233.0/24 maxlen: 24 94.249.238.0/24 maxlen: 24 94.249.245.0/24 maxlen: 24 94.249.254.0/24 maxlen: 24 95.215.32.0/24 maxlen: 24 95.215.33.0/24 maxlen: 24 178.18.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:92:9d:5d:e6:9e:e9:66:0d:b7:49:eb:0d:40:21:f8:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 17 16:19:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f62393226fcfaad936ce6a6d8d016535e4df2bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9b:d3:ee:78:52:57:f7:a7:80:99:82:e4:9f: 42:56:3d:a0:6f:91:f7:46:7e:0b:02:ba:d1:39:ba: c4:11:9a:31:cb:49:e0:b5:3f:0e:ca:65:87:10:8c: 46:b9:a6:6e:95:8e:14:5e:65:0f:36:f8:c8:a3:35: 52:35:10:fa:b7:b7:ba:fa:45:69:bf:5e:94:05:63: d0:70:a7:8a:79:2a:01:1a:ad:d7:b5:34:14:56:f1: 8b:9e:d5:4a:93:55:58:d0:a1:52:ed:ce:c5:8d:56: ac:fb:de:64:67:49:5e:12:05:5e:35:a5:a9:03:0f: 4f:b8:f4:1e:b8:a1:e0:c1:34:c3:ea:c5:45:96:7c: bc:43:0c:af:04:46:b5:3f:9e:95:4a:9d:3e:98:bf: d1:66:75:aa:cc:eb:c0:a6:37:b5:0e:e2:c9:88:f4: ae:bf:c4:e8:da:6d:cb:93:8b:59:4b:bd:af:16:cb: b6:09:f2:23:6b:aa:44:51:4f:79:b7:be:a1:79:72: ba:97:53:50:7d:1e:9f:2e:9a:16:09:b0:cc:38:66: 90:a0:7a:c1:b3:e1:09:24:4d:8a:8f:be:49:53:d1: c3:e1:f5:d5:28:01:5a:28:13:6b:a8:e7:f6:fe:25: e4:fc:fd:24:b3:9e:8a:ed:55:d4:ad:75:6f:25:1f: 4f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:23:93:22:6F:CF:AA:D9:36:CE:6A:6D:8D:01:65:35:E4:DF:2B:DA X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9iOTIm_Pqtk2zmptjQFlNeTfK9o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.203.0-5.175.204.255 5.231.59.0/24 5.231.94.0/24 83.243.86.0/24 89.106.76.0/24 89.106.79.0-89.106.81.255 89.106.92.0/23 94.103.170.0/23 94.103.174.0/24 94.249.148.0/24 94.249.158.0/24 94.249.168.0-94.249.170.255 94.249.172.0/24 94.249.177.0/24 94.249.183.0/24 94.249.214.0/24 94.249.233.0/24 94.249.238.0/24 94.249.245.0/24 94.249.254.0/24 95.215.32.0/23 178.18.144.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:6f:fd:d6:67:03:9c:90:5c:3b:5b:9f:64:36:94:a8:d4:61: 6a:a4:e1:f3:75:c0:65:0b:ae:39:85:63:40:d2:1a:4f:54:57: 5c:f6:58:f1:b0:43:d5:a1:56:de:5b:29:49:d7:14:6e:0b:31: e9:f0:8b:d0:eb:7c:c1:fb:d6:e4:79:04:6a:72:d4:7b:a5:16: 2f:0e:33:72:61:55:51:cb:92:da:44:a7:ce:8c:59:45:9a:1d: db:bc:d0:51:95:0e:9b:01:1a:36:59:d7:14:8a:79:6d:d7:de: 56:27:cf:65:54:9c:7e:dd:61:75:c5:25:a4:92:2d:56:43:56: b0:0d:97:18:0e:e9:b2:06:83:e7:b7:57:3f:5f:f0:96:0f:33: c6:28:89:20:78:d9:e9:59:7d:52:96:d7:cb:cf:05:fa:c6:e9: 92:1e:0c:f0:33:64:49:74:5e:69:e7:1e:4a:0c:21:ac:47:2a: d5:44:4d:35:3c:21:6b:df:9e:21:90:09:5f:66:19:ce:3b:69: 53:96:30:d8:8d:bf:ca:c3:e0:06:a3:ae:25:1b:04:71:da:3d: 23:83:4d:9d:17:0f:a3:24:4e:c5:27:fa:26:b6:d8:d9:07:de: 24:7a:90:e9:1d:4b:1a:47:f0:73:17:44:31:1b:69:ec:83:66: 6a:f4:d6:70 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgISAZqSnV3mnulmDbdJ6w1AIfjGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTE3MTYxOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjIzOTMyMjZmY2ZhYWQ5MzZjZTZhNmQ4ZDAxNjUzNWU0ZGYyYmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppvT7nhSV/engJmC5J9CVj2gb5H3 Rn4LArrRObrEEZoxy0ngtT8OymWHEIxGuaZulY4UXmUPNvjIozVSNRD6t7e6+kVp v16UBWPQcKeKeSoBGq3XtTQUVvGLntVKk1VY0KFS7c7FjVas+95kZ0leEgVeNaWp Aw9PuPQeuKHgwTTD6sVFlny8QwyvBEa1P56VSp0+mL/RZnWqzOvApje1DuLJiPSu v8To2m3Lk4tZS72vFsu2CfIja6pEUU95t76heXK6l1NQfR6fLpoWCbDMOGaQoHrB s+EJJE2Kj75JU9HD4fXVKAFaKBNrqOf2/iXk/P0ks56K7VXUrXVvJR9PAwIDAQAB o4ICpDCCAqAwHQYDVR0OBBYEFPYjkyJvz6rZNs5qbY0BZTXk3yvaMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvOWlPVEltX1BxdGsyem1wdGpRRmxOZVRmSzlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG5BggrBgEFBQcBBwEB/wSBqTCBpjCBowQCAAEwgZwwDAME AAWvywMEAAWvzAMEAAXnOwMEAAXnXgMEAFPzVgMEAFlqTDAMAwQAWWpPAwQBWWpQ AwQBWWpcAwQBXmeqAwQAXmeuAwQAXvmUAwQAXvmeMAwDBANe+agDBABe+aoDBABe +awDBABe+bEDBABe+bcDBABe+dYDBABe+ekDBABe+e4DBABe+fUDBABe+f4DBAFf 1yADBACyEpAwDQYJKoZIhvcNAQELBQADggEBAB9v/dZnA5yQXDtbn2Q2lKjUYWqk 4fN1wGULrjmFY0DSGk9UV1z2WPGwQ9WhVt5bKUnXFG4LMenwi9DrfMH71uR5BGpy 1HulFi8OM3JhVVHLktpEp86MWUWaHdu80FGVDpsBGjZZ1xSKeW3X3lYnz2VUnH7d YXXFJaSSLVZDVrANlxgO6bIGg+e3Vz9f8JYPM8YoiSB42elZfVKW18vPBfrG6ZIe DPAzZEl0XmnnHkoMIaxHKtVETTU8IWvfniGQCV9mGc47aVOWMNiNv8rD4AajriUb BHHaPSODTZ0XD6MkTsUn+ia22NkH3iR6kOkdSxpH8HMXRDEbaeyDZmr01nA= -----END CERTIFICATE-----Generated at Fri Dec 5 17:07:20 2025 by rpki-client