This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/5WKYGDk2MqWXakmcquO-pJSKl6A.roa File: 5WKYGDk2MqWXakmcquO-pJSKl6A.roa (raw, json) Hash identifier: Wo0pIcMoGkRRy07MJXtfcwQIZ+ggOXuOucml5kEvQdw= Subject key identifier: E5:62:98:18:39:36:32:A5:97:6A:49:9C:AA:E3:BE:A4:94:8A:97:A0 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019A8E5BE2782A9D9DC014983E85E9FCCCE2 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/5WKYGDk2MqWXakmcquO-pJSKl6A.roa Signing time: Sun 16 Nov 2025 20:29:37 +0000 ROA not before: Sun 16 Nov 2025 20:29:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 7029 IP address blocks: 84.32.6.0/24 maxlen: 24 84.32.136.0/22 maxlen: 24 88.216.20.0/24 maxlen: 24 88.216.21.0/24 maxlen: 24 88.216.98.0/24 maxlen: 24 88.216.103.0/24 maxlen: 24 88.216.185.0/24 maxlen: 24 88.216.212.0/24 maxlen: 24 88.216.213.0/24 maxlen: 24 88.216.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:8e:5b:e2:78:2a:9d:9d:c0:14:98:3e:85:e9:fc:cc:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Nov 16 20:29:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e5629818393632a5976a499caae3bea4948a97a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:aa:5a:0e:58:e1:21:db:5f:ed:df:dd:ea:73: e7:86:6a:36:b5:e2:58:09:79:98:e2:cf:40:5d:31: a1:a3:16:c1:d2:0c:88:45:ba:25:fa:c6:de:21:0f: 14:d9:32:12:4f:21:b0:18:c6:12:bf:90:df:cf:63: 6e:13:24:4a:ed:a1:04:52:b0:21:ff:ff:52:3f:64: eb:b6:db:eb:ac:f8:b1:22:77:21:44:4b:38:74:15: ce:12:88:3f:61:97:95:ff:9a:e2:64:21:70:c8:58: 89:f8:9d:c4:50:ce:0c:17:b5:58:f3:71:5d:79:67: d4:41:2d:25:c6:24:ac:5e:17:ac:09:72:90:3b:d3: bc:34:49:e5:00:34:26:69:19:8c:ca:b7:87:cc:20: 76:57:da:36:84:12:99:2c:d3:84:ea:a2:69:f8:11: d5:24:5c:19:ba:b0:93:b0:99:75:0a:f9:bc:c8:84: 7e:56:ae:c4:5d:25:71:d6:92:1b:37:5a:16:b3:6b: b0:20:9b:60:d0:f9:4e:7f:77:5a:02:d3:ee:8d:e1: 3e:8b:90:2b:bc:dc:9f:b2:33:84:8d:b7:e3:82:1c: 3a:1d:51:6f:24:98:c2:84:b3:4a:9a:38:93:4d:84: 6c:08:41:ac:6a:fb:7f:b9:a1:07:d9:f0:b3:56:54: db:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:62:98:18:39:36:32:A5:97:6A:49:9C:AA:E3:BE:A4:94:8A:97:A0 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/5WKYGDk2MqWXakmcquO-pJSKl6A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.6.0/24 84.32.136.0/22 88.216.20.0/23 88.216.98.0/24 88.216.103.0/24 88.216.185.0/24 88.216.212.0/23 88.216.248.0/22 Signature Algorithm: sha256WithRSAEncryption 13:5e:f7:8d:c8:d7:2b:60:0a:02:43:4f:23:83:39:b9:de:b0: fa:fe:3c:ed:8f:be:f0:ef:1a:50:db:0e:b8:de:42:d3:5a:90: e5:2b:40:59:55:d1:d7:e2:9e:f0:28:c9:58:c1:dd:d5:c8:e8: ed:31:ef:18:fd:5e:43:e0:89:55:80:dc:fd:cd:ad:81:7f:b3: 03:61:33:5d:92:b3:6d:0e:0b:49:0c:0a:8e:f9:e5:dd:ec:d5: 6f:bf:ef:dc:c9:a3:18:e0:56:06:2b:cf:0f:f3:ee:00:96:51: 79:c6:2e:8d:55:ed:b2:af:d4:a3:5a:27:ff:40:eb:29:8e:91: ed:8b:d3:62:3e:57:ef:96:1b:2e:7e:e8:8b:2e:79:a1:86:42: 9a:dd:14:09:84:ab:fb:14:50:ba:85:7b:66:70:9f:36:86:2b: 8b:49:c4:fc:f2:91:f5:2a:f3:ca:f9:63:4b:a5:de:b0:f6:13: 41:4e:36:5a:a2:84:c7:fd:4e:14:15:50:66:b1:0c:a7:65:ba: e3:a3:e1:c6:c2:b8:59:fa:10:d7:59:f1:13:15:5d:35:81:6f: 68:80:68:3e:6e:48:ef:5b:1d:27:4d:2c:51:2f:2f:29:55:7d: c9:62:e8:97:cf:41:cf:4a:8f:4a:7e:c7:ed:f6:5c:3c:a8:14: e8:2c:ef:ec -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZqOW+J4Kp2dwBSYPoXp/MziMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjUxMTE2MjAyOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTYyOTgxODM5MzYzMmE1OTc2YTQ5OWNhYWUzYmVhNDk0OGE5N2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKpaDljhIdtf7d/d6nPnhmo2teJY CXmY4s9AXTGhoxbB0gyIRbol+sbeIQ8U2TISTyGwGMYSv5Dfz2NuEyRK7aEEUrAh //9SP2TrttvrrPixInchREs4dBXOEog/YZeV/5riZCFwyFiJ+J3EUM4MF7VY83Fd eWfUQS0lxiSsXhesCXKQO9O8NEnlADQmaRmMyreHzCB2V9o2hBKZLNOE6qJp+BHV JFwZurCTsJl1Cvm8yIR+Vq7EXSVx1pIbN1oWs2uwIJtg0PlOf3daAtPujeE+i5Ar vNyfsjOEjbfjghw6HVFvJJjChLNKmjiTTYRsCEGsavt/uaEH2fCzVlTbmQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFOVimBg5NjKll2pJnKrjvqSUipegMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvNVdLWUdEazJNcVdYYWttY3F1Ty1wSlNLbDZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAVCAGAwQC VCCIAwQBWNgUAwQAWNhiAwQAWNhnAwQAWNi5AwQBWNjUAwQCWNj4MA0GCSqGSIb3 DQEBCwUAA4IBAQATXveNyNcrYAoCQ08jgzm53rD6/jztj77w7xpQ2w643kLTWpDl K0BZVdHX4p7wKMlYwd3VyOjtMe8Y/V5D4IlVgNz9za2Bf7MDYTNdkrNtDgtJDAqO +eXd7NVvv+/cyaMY4FYGK88P8+4AllF5xi6NVe2yr9SjWif/QOspjpHti9NiPlfv lhsufuiLLnmhhkKa3RQJhKv7FFC6hXtmcJ82hiuLScT88pH1KvPK+WNLpd6w9hNB TjZaooTH/U4UFVBmsQynZbrjo+HGwrhZ+hDXWfETFV01gW9ogGg+bkjvWx0nTSxR Ly8pVX3JYuiXz0HPSo9Kfsft9lw8qBToLO/s -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:35 2025 by rpki-client