This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/_Flf5DnTwHuT82uk-rjJ-aUZBWU.roa File: _Flf5DnTwHuT82uk-rjJ-aUZBWU.roa (raw, json) Hash identifier: QPTNTyL8Zldulvvmt2UMxQpz2Oe0nqDM6jKT4JF5VAA= Subject key identifier: FC:59:5F:E4:39:D3:C0:7B:93:F3:6B:A4:FA:B8:C9:F9:A5:19:05:65 Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c Certificate serial: 019ABC3B03D28EB146C59DAF2837E33AF55C Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/_Flf5DnTwHuT82uk-rjJ-aUZBWU.roa Signing time: Tue 25 Nov 2025 18:16:15 +0000 ROA not before: Tue 25 Nov 2025 18:16:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6453 IP address blocks: 5.23.0.0/19 maxlen: 19 80.231.0.0/16 maxlen: 16 80.231.8.0/21 maxlen: 21 80.231.11.0/24 maxlen: 24 80.231.22.0/24 maxlen: 24 80.231.56.0/24 maxlen: 24 80.231.71.0/24 maxlen: 24 80.231.93.0/24 maxlen: 24 80.231.94.0/24 maxlen: 24 80.231.96.0/21 maxlen: 21 80.231.112.0/21 maxlen: 21 80.231.176.0/21 maxlen: 21 80.231.187.0/24 maxlen: 24 80.231.202.0/24 maxlen: 24 80.231.216.0/24 maxlen: 24 80.231.235.0/24 maxlen: 24 195.219.0.0/16 maxlen: 16 195.219.22.0/24 maxlen: 24 195.219.38.0/24 maxlen: 24 195.219.40.0/24 maxlen: 24 195.219.41.0/24 maxlen: 24 195.219.43.0/24 maxlen: 24 195.219.44.0/24 maxlen: 24 195.219.45.0/24 maxlen: 24 195.219.47.0/24 maxlen: 24 195.219.168.0/23 maxlen: 23 195.219.204.0/24 maxlen: 24 195.219.232.0/24 maxlen: 24 195.219.235.0/24 maxlen: 24 195.219.238.0/24 maxlen: 24 195.219.240.0/24 maxlen: 24 195.219.246.0/24 maxlen: 24 195.219.248.0/21 maxlen: 21 195.219.253.0/24 maxlen: 24 2a01:3e0::/29 maxlen: 29 2a01:3e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 15:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bc:3b:03:d2:8e:b1:46:c5:9d:af:28:37:e3:3a:f5:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c Validity Not Before: Nov 25 18:16:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fc595fe439d3c07b93f36ba4fab8c9f9a5190565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:bc:c1:19:40:d1:42:2f:6a:bc:63:af:85: 16:94:fd:9c:3d:f5:d6:0f:3c:e9:de:cd:01:66:3c: f5:70:d1:c5:15:cd:18:c4:89:bb:e3:02:31:e5:17: 63:70:8e:d6:d4:84:83:06:46:15:d0:15:d7:4d:93: 05:92:ad:1f:f7:ae:ff:bb:0d:9c:9c:eb:83:24:75: f4:41:0c:78:d6:44:63:fe:aa:b6:1b:2d:4b:f3:ca: fa:9d:5c:a2:c7:1a:47:dc:cf:78:97:9a:d3:00:79: 9c:c7:27:29:1c:be:ba:a6:99:44:6d:e3:47:2b:5e: c0:56:8e:9b:fa:15:a1:d5:33:4b:5f:bb:9b:6e:90: 90:a5:31:37:cf:b7:dd:5e:f5:a1:56:83:3a:37:55: ef:e2:06:c5:6c:ab:8d:c7:bd:45:6d:f7:d0:fa:76: 71:49:a6:db:e9:39:4e:f1:58:cb:9a:57:4d:40:79: 9e:93:67:c9:c2:d1:c6:1c:b9:73:14:ba:d6:7b:b3: 73:68:7c:4f:91:30:6b:f9:c4:92:93:14:4c:32:a7: 6a:83:ed:7f:4d:0b:8a:0b:b8:8b:fc:42:d9:36:07: d0:d8:4c:e1:1b:f4:8d:e7:7b:88:30:44:fa:7a:11: bb:ba:a5:f2:19:06:e8:c8:3a:c6:3c:72:cb:e4:9a: 7b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:59:5F:E4:39:D3:C0:7B:93:F3:6B:A4:FA:B8:C9:F9:A5:19:05:65 X509v3 Authority Key Identifier: keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/_Flf5DnTwHuT82uk-rjJ-aUZBWU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.23.0.0/19 80.231.0.0/16 195.219.0.0/16 IPv6: 2a01:3e0::/29 Signature Algorithm: sha256WithRSAEncryption a0:21:2d:a0:43:8e:6d:32:26:55:5e:88:c5:a7:5c:69:91:20: f2:b0:4a:ac:a4:b0:66:d6:b6:7f:55:3f:9f:ed:b5:a5:37:43: 88:34:69:8d:6a:ca:7e:58:07:40:66:4c:21:7c:5f:4d:f7:8d: f6:37:c4:da:60:f6:e2:25:d0:8e:00:c8:3e:f7:68:cd:00:8f: 9f:51:2a:e5:dc:83:93:3c:7a:f2:aa:b0:a0:13:4f:cc:52:da: c2:20:ca:9b:65:80:86:f8:ae:1f:8b:21:91:97:11:55:af:06: a4:9b:25:51:ea:64:d8:cc:df:38:33:cc:99:73:97:98:df:14: 7e:56:91:e5:13:3d:dd:23:e9:c8:b2:56:9d:c4:34:3c:70:ff: 8a:91:98:31:0c:f8:ef:5b:46:9c:d7:33:a4:4e:21:2e:70:00: c2:4c:77:09:20:50:eb:88:04:e6:13:97:5d:55:94:76:a8:7d: e1:fc:9d:65:31:e2:74:0b:f6:26:b7:cd:23:11:67:b0:63:09: 58:f4:a0:4d:8d:88:a4:d8:ea:74:11:45:a8:2a:0b:11:e2:b0: ae:c0:f3:ca:05:1c:84:d5:74:ba:97:a7:be:a5:4e:e4:8e:34: 23:0e:01:d3:24:4c:80:33:7b:95:20:88:2e:96:6d:1b:3e:d1: df:52:3f:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq8OwPSjrFGxZ2vKDfjOvVcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDFiMjU4NzQ5MGFkMDYxY2IyMDcxNzZiZGVlYzgxYTUz MTU4OGMwHhcNMjUxMTI1MTgxNjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzU5NWZlNDM5ZDNjMDdiOTNmMzZiYTRmYWI4YzlmOWE1MTkwNTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbi8wRlA0UIvarxjr4UWlP2cPfXW Dzzp3s0BZjz1cNHFFc0YxIm74wIx5RdjcI7W1ISDBkYV0BXXTZMFkq0f967/uw2c nOuDJHX0QQx41kRj/qq2Gy1L88r6nVyixxpH3M94l5rTAHmcxycpHL66pplEbeNH K17AVo6b+hWh1TNLX7ubbpCQpTE3z7fdXvWhVoM6N1Xv4gbFbKuNx71FbffQ+nZx Sabb6TlO8VjLmldNQHmek2fJwtHGHLlzFLrWe7NzaHxPkTBr+cSSkxRMMqdqg+1/ TQuKC7iL/ELZNgfQ2EzhG/SN53uIMET6ehG7uqXyGQboyDrGPHLL5Jp7KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxZX+Q508B7k/NrpPq4yfmlGQVlMB8GA1UdIwQY MBaAFE3Rslh0kK0GHLIHF2ve7IGlMViMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUt ZGI0NjNjNWZiMGI0LzEvX0ZsZjVEblR3SHVUODJ1ay1yakotYVVaQldVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUtZGI0NjNjNWZiMGI0 LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAWBAIAATAQAwQFBRcAAwMA UOcDAwDD2zANBAIAAjAHAwUDKgED4DANBgkqhkiG9w0BAQsFAAOCAQEAoCEtoEOO bTImVV6IxadcaZEg8rBKrKSwZta2f1U/n+21pTdDiDRpjWrKflgHQGZMIXxfTfeN 9jfE2mD24iXQjgDIPvdozQCPn1Eq5dyDkzx68qqwoBNPzFLawiDKm2WAhviuH4sh kZcRVa8GpJslUepk2MzfODPMmXOXmN8UflaR5RM93SPpyLJWncQ0PHD/ipGYMQz4 71tGnNczpE4hLnAAwkx3CSBQ64gE5hOXXVWUdqh94fydZTHidAv2JrfNIxFnsGMJ WPSgTY2IpNjqdBFFqCoLEeKwrsDzygUchNV0upenvqVO5I40Iw4B0yRMgDN7lSCI LpZtGz7R31I/Cw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:07:44 2025 by rpki-client