This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/Ss2U5LzF91cRDMygXIvmDX9mZ28.roa File: Ss2U5LzF91cRDMygXIvmDX9mZ28.roa (raw, json) Hash identifier: Vse//SiUowUVG1JXefAU99xAX8HK8/w35TMcc6VV2gA= Subject key identifier: 4A:CD:94:E4:BC:C5:F7:57:11:0C:CC:A0:5C:8B:E6:0D:7F:66:67:6F Certificate issuer: /CN=0b6ec8ed8fc93f72334f7a974a46bc27d1102923 Certificate serial: 019B0499D8125F38E248D7448276C4D4CC3B Authority key identifier: 0B:6E:C8:ED:8F:C9:3F:72:33:4F:7A:97:4A:46:BC:27:D1:10:29:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/Ss2U5LzF91cRDMygXIvmDX9mZ28.roa Signing time: Tue 09 Dec 2025 19:32:29 +0000 ROA not before: Tue 09 Dec 2025 19:32:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208492 IP address blocks: 5.34.192.0/20 maxlen: 20 5.34.192.0/24 maxlen: 24 5.34.193.0/24 maxlen: 24 5.34.200.0/24 maxlen: 24 5.34.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.crl rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:99:d8:12:5f:38:e2:48:d7:44:82:76:c4:d4:cc:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b6ec8ed8fc93f72334f7a974a46bc27d1102923 Validity Not Before: Dec 9 19:32:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4acd94e4bcc5f757110ccca05c8be60d7f66676f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:29:8c:2f:3d:aa:48:50:65:bb:aa:5e:0a:60: b9:97:b3:09:03:bf:45:ba:89:90:bf:94:b6:21:40: e3:8c:2c:1c:e0:07:f1:83:5b:e4:d4:a4:60:f9:d8: f2:7e:76:6b:33:6e:f1:08:c1:91:bc:63:91:65:66: 99:2f:27:90:db:46:90:f3:62:20:bd:6d:58:1e:3d: 0e:da:e3:6f:14:05:86:3b:0b:de:0c:95:e3:26:1b: c8:90:17:be:b8:a3:20:3d:0c:39:71:65:e7:2e:e3: 14:14:6f:17:b2:91:8a:79:ad:b7:4b:8e:5b:d4:1e: 74:24:9a:9a:74:1a:2d:86:4d:af:ab:f9:76:da:2a: 09:22:33:65:dc:9e:84:fe:89:42:16:5f:10:2f:22: c8:75:20:2e:e3:67:27:21:7f:09:2f:2f:50:86:ee: 65:d2:ee:e1:b8:86:70:aa:4f:32:2f:e0:79:ff:a2: 33:0d:25:bd:f2:6a:cc:9a:69:48:97:4b:d9:a9:46: b0:af:66:6c:82:7d:43:c0:a2:30:91:28:93:74:84: 59:59:24:53:a4:a8:69:e4:70:12:24:8d:71:87:23: 94:f3:ec:73:6d:a9:87:c5:e6:8d:d0:b7:1b:ba:bf: 9a:7a:b0:d0:cf:bf:6f:7c:2a:89:bc:1d:c5:10:2f: 59:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CD:94:E4:BC:C5:F7:57:11:0C:CC:A0:5C:8B:E6:0D:7F:66:67:6F X509v3 Authority Key Identifier: keyid:0B:6E:C8:ED:8F:C9:3F:72:33:4F:7A:97:4A:46:BC:27:D1:10:29:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/Ss2U5LzF91cRDMygXIvmDX9mZ28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.34.192.0/20 Signature Algorithm: sha256WithRSAEncryption da:53:6a:75:05:2f:79:3e:67:8e:14:31:26:57:f8:a5:6c:b3: d5:e3:bd:59:b6:57:cc:51:a0:0e:bb:f7:0a:13:41:94:a9:0c: 1a:07:72:f8:40:fd:2e:c9:77:d0:37:26:cb:82:20:94:af:fa: a7:a0:cd:05:42:0a:c4:f1:04:ab:1c:db:aa:e3:68:e2:7d:b3: 2c:eb:1c:5e:1d:d5:00:08:8d:49:f2:44:76:41:4c:2c:74:91: a3:22:f1:69:5c:90:cb:80:cc:ef:75:a6:f8:7a:77:24:a8:c5: 22:01:88:ec:24:b0:20:37:91:29:e9:b6:6d:95:2c:56:2c:db: e1:b0:99:22:44:a9:74:7e:b7:b9:e8:63:36:00:96:31:48:c6: 1e:b1:e3:8e:2d:d0:fb:7d:8e:bb:e1:f9:b5:60:6a:3b:ab:1d: e3:60:6b:26:ab:af:4d:d9:b3:1c:be:73:5c:06:0c:b8:be:08: 2b:a4:83:6d:56:1a:46:eb:2d:c6:c6:34:ff:66:11:a3:56:98: 92:8d:51:a2:f8:57:62:6c:f1:06:cb:82:33:ae:1c:3e:87:16: 03:40:22:93:98:9d:f4:d5:c5:09:6f:28:fd:40:a3:1c:89:79: 67:be:6e:2f:8b:40:ef:a6:4f:cf:d2:5a:b8:41:a6:2b:42:e7: 65:4f:e3:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsEmdgSXzjiSNdEgnbE1Mw7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNmVjOGVkOGZjOTNmNzIzMzRmN2E5NzRhNDZiYzI3ZDEx MDI5MjMwHhcNMjUxMjA5MTkzMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWNkOTRlNGJjYzVmNzU3MTEwY2NjYTA1YzhiZTYwZDdmNjY2NzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCmMLz2qSFBlu6peCmC5l7MJA79F uomQv5S2IUDjjCwc4Afxg1vk1KRg+djyfnZrM27xCMGRvGORZWaZLyeQ20aQ82Ig vW1YHj0O2uNvFAWGOwveDJXjJhvIkBe+uKMgPQw5cWXnLuMUFG8XspGKea23S45b 1B50JJqadBothk2vq/l22ioJIjNl3J6E/olCFl8QLyLIdSAu42cnIX8JLy9Qhu5l 0u7huIZwqk8yL+B5/6IzDSW98mrMmmlIl0vZqUawr2Zsgn1DwKIwkSiTdIRZWSRT pKhp5HASJI1xhyOU8+xzbamHxeaN0Lcbur+aerDQz79vfCqJvB3FEC9Z0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFErNlOS8xfdXEQzMoFyL5g1/ZmdvMB8GA1UdIwQY MBaAFAtuyO2PyT9yM096l0pGvCfRECkjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzI3STdZX0pQM0l6VDNxWFNrYThKOUVRS1NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zMDQ3NjItNjczMy00YzczLTg1MjMt MDQ3Nzc1MTI5MTQ4LzEvU3MyVTVMekY5MWNSRE15Z1hJdm1EWDltWjI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zMDQ3NjItNjczMy00YzczLTg1MjMtMDQ3Nzc1MTI5MTQ4 LzEvQzI3STdZX0pQM0l6VDNxWFNrYThKOUVRS1NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEBSLAMA0G CSqGSIb3DQEBCwUAA4IBAQDaU2p1BS95PmeOFDEmV/ilbLPV471ZtlfMUaAOu/cK E0GUqQwaB3L4QP0uyXfQNybLgiCUr/qnoM0FQgrE8QSrHNuq42jifbMs6xxeHdUA CI1J8kR2QUwsdJGjIvFpXJDLgMzvdab4enckqMUiAYjsJLAgN5Ep6bZtlSxWLNvh sJkiRKl0fre56GM2AJYxSMYeseOOLdD7fY674fm1YGo7qx3jYGsmq69N2bMcvnNc Bgy4vggrpINtVhpG6y3GxjT/ZhGjVpiSjVGi+FdibPEGy4Izrhw+hxYDQCKTmJ30 1cUJbyj9QKMciXlnvm4vi0Dvpk/P0lq4QaYrQudlT+ME -----END CERTIFICATE-----Generated at Sun Dec 14 14:46:36 2025 by rpki-client