This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/leM53v_seC9BGN1fD4VKgeATd-A.roa File: leM53v_seC9BGN1fD4VKgeATd-A.roa (raw, json) Hash identifier: iw2VYHgDscH1rvomja3UJCKUBbreXScRldfxKVnQKN4= Subject key identifier: 95:E3:39:DE:FF:EC:78:2F:41:18:DD:5F:0F:85:4A:81:E0:13:77:E0 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B49AC571DF0E73CB0540889F20780F2BE Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/leM53v_seC9BGN1fD4VKgeATd-A.roa Signing time: Tue 23 Dec 2025 05:26:29 +0000 ROA not before: Tue 23 Dec 2025 05:26:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42216 IP address blocks: 31.210.47.0/24 maxlen: 24 77.92.142.0/24 maxlen: 24 77.92.152.0/24 maxlen: 24 78.135.67.0/24 maxlen: 24 78.135.74.0/24 maxlen: 24 78.135.86.0/24 maxlen: 24 78.135.89.0/24 maxlen: 24 78.135.98.0/24 maxlen: 24 185.17.136.0/24 maxlen: 24 188.132.214.0/24 maxlen: 24 188.132.218.0/24 maxlen: 24 188.132.228.0/24 maxlen: 24 2a10:9440::/48 maxlen: 48 2a10:9440:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:ac:57:1d:f0:e7:3c:b0:54:08:89:f2:07:80:f2:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Dec 23 05:26:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=95e339deffec782f4118dd5f0f854a81e01377e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cc:77:40:85:d7:82:28:2a:78:d4:e4:8c:cb: a6:90:d3:41:91:4d:ac:52:ce:22:5a:9d:e9:8e:4a: 4b:b5:22:15:ca:b1:c7:cd:77:7a:17:91:7f:84:72: d6:76:e4:72:1f:4c:52:24:33:88:fd:2b:40:56:36: 13:68:41:5a:b5:05:bf:26:c1:23:c4:1f:ee:01:a7: ff:78:66:23:ab:59:31:84:0e:f9:61:d9:d8:e8:81: 1b:8b:3b:0d:8e:ec:1e:9d:bb:f5:62:b6:f4:4a:d5: 4b:9d:14:15:08:73:17:41:73:74:4f:08:16:4d:19: 98:f2:42:fb:c0:64:21:f9:82:1f:39:30:8c:b7:7b: 42:89:19:66:fb:1e:74:f3:a7:8c:9d:a7:c0:db:30: 5f:c7:3f:a4:5f:33:1d:6f:35:9e:cd:99:12:a1:b4: 71:96:5a:d8:ce:f6:16:96:80:f1:8b:a6:b5:5e:cc: 56:40:15:35:c5:8d:ad:b2:6b:85:14:1a:3c:8e:4e: 4b:15:e1:2d:da:d8:60:7d:5d:6b:fb:66:02:31:cb: 5a:72:c0:b1:6d:9f:39:e9:0a:04:b2:c2:6d:f5:8b: dc:b1:d4:d7:7d:13:f6:83:1b:69:98:e7:c5:7a:41: eb:b2:6a:d9:ca:95:3e:3f:6a:04:e9:89:a6:e3:7a: d1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E3:39:DE:FF:EC:78:2F:41:18:DD:5F:0F:85:4A:81:E0:13:77:E0 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/leM53v_seC9BGN1fD4VKgeATd-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.47.0/24 77.92.142.0/24 77.92.152.0/24 78.135.67.0/24 78.135.74.0/24 78.135.86.0/24 78.135.89.0/24 78.135.98.0/24 185.17.136.0/24 188.132.214.0/24 188.132.218.0/24 188.132.228.0/24 IPv6: 2a10:9440::/47 Signature Algorithm: sha256WithRSAEncryption 54:86:fe:f5:c0:d6:8f:1e:52:06:75:97:48:2c:1f:f5:62:3d: 47:26:66:ac:01:e1:49:df:67:6a:80:38:65:07:05:a8:0e:d0: af:80:8f:2a:20:3c:a2:40:ec:e3:d2:89:99:63:fc:13:89:4e: cc:bd:c3:29:38:bc:cd:e8:4f:62:c3:ef:ea:84:81:9a:a5:65: 26:51:4d:03:6e:75:b3:56:8c:bd:93:4b:e7:1f:e3:86:03:d7: 88:e9:4b:d4:cd:43:40:d0:5c:e7:d1:89:3d:e8:31:39:31:fe: d5:67:4d:ec:65:f1:4e:7e:05:df:64:ae:ba:c4:35:1a:c5:49: d6:8c:da:7d:d9:4f:9a:9a:7b:f1:67:5e:3d:8d:86:9a:2f:6d: bd:03:ef:23:02:0c:4b:d1:c1:0c:5e:2f:97:7b:9b:8c:4f:6f: 07:bb:9c:f3:5f:2e:45:5f:cc:da:47:2b:9f:75:d4:31:d6:86: ab:ef:55:56:e2:0a:b8:98:3b:b0:0c:5c:da:da:7b:49:2c:c7: 67:24:e4:29:41:73:1d:44:94:db:e0:df:5b:b0:10:6f:9f:53: 62:b2:7b:04:54:fc:1f:8c:21:b5:29:27:c8:22:5c:2e:2a:45: 53:3e:50:8b:54:e6:ad:5c:ae:48:9a:29:25:08:31:22:80:72: ce:e6:41:ce -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgISAZtJrFcd8Oc8sFQIifIHgPK+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjUxMjIzMDUyNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWUzMzlkZWZmZWM3ODJmNDExOGRkNWYwZjg1NGE4MWUwMTM3N2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsx3QIXXgigqeNTkjMumkNNBkU2s Us4iWp3pjkpLtSIVyrHHzXd6F5F/hHLWduRyH0xSJDOI/StAVjYTaEFatQW/JsEj xB/uAaf/eGYjq1kxhA75YdnY6IEbizsNjuwenbv1Yrb0StVLnRQVCHMXQXN0TwgW TRmY8kL7wGQh+YIfOTCMt3tCiRlm+x5086eMnafA2zBfxz+kXzMdbzWezZkSobRx llrYzvYWloDxi6a1XsxWQBU1xY2tsmuFFBo8jk5LFeEt2thgfV1r+2YCMctacsCx bZ856QoEssJt9YvcsdTXfRP2gxtpmOfFekHrsmrZypU+P2oE6Ymm43rRfQIDAQAB o4ICXDCCAlgwHQYDVR0OBBYEFJXjOd7/7HgvQRjdXw+FSoHgE3fgMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvbGVNNTN2X3NlQzlCR04xZkQ0VktnZUFUZC1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTBOBAIAATBIAwQAH9IvAwQA TVyOAwQATVyYAwQATodDAwQATodKAwQATodWAwQATodZAwQATodiAwQAuRGIAwQA vITWAwQAvITaAwQAvITkMA8EAgACMAkDBwEqEJRAAAAwDQYJKoZIhvcNAQELBQAD ggEBAFSG/vXA1o8eUgZ1l0gsH/ViPUcmZqwB4UnfZ2qAOGUHBagO0K+AjyogPKJA 7OPSiZlj/BOJTsy9wyk4vM3oT2LD7+qEgZqlZSZRTQNudbNWjL2TS+cf44YD14jp S9TNQ0DQXOfRiT3oMTkx/tVnTexl8U5+Bd9krrrENRrFSdaM2n3ZT5qae/FnXj2N hpovbb0D7yMCDEvRwQxeL5d7m4xPbwe7nPNfLkVfzNpHK5911DHWhqvvVVbiCriY O7AMXNrae0ksx2ck5ClBcx1ElNvg31uwEG+fU2KyewRU/B+MIbUpJ8giXC4qRVM+ UItU5q1crkiaKSUIMSKAcs7mQc4= -----END CERTIFICATE-----Generated at Fri Dec 26 19:09:43 2025 by rpki-client