This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/9ksiRwLGxasaFn_PBa_nWxdqjwM.roa File: 9ksiRwLGxasaFn_PBa_nWxdqjwM.roa (raw, json) Hash identifier: iU0CGBVoj7MznTHpqczxH9QKsAVcN7PumbsdzFuKdeA= Subject key identifier: F6:4B:22:47:02:C6:C5:AB:1A:16:7F:CF:05:AF:E7:5B:17:6A:8F:03 Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725 Certificate serial: 019B072FC4B7EC1760E1F0B106CEA8584AB1 Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/9ksiRwLGxasaFn_PBa_nWxdqjwM.roa Signing time: Wed 10 Dec 2025 07:35:29 +0000 ROA not before: Wed 10 Dec 2025 07:35:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51074 IP address blocks: 5.221.0.0/16 maxlen: 16 31.184.128.0/18 maxlen: 24 31.184.145.0/24 maxlen: 24 37.130.200.0/21 maxlen: 24 37.130.202.0/23 maxlen: 23 178.252.128.0/18 maxlen: 24 178.252.138.0/24 maxlen: 24 185.115.148.0/24 maxlen: 24 185.115.149.0/24 maxlen: 24 185.115.150.0/24 maxlen: 24 2a02:2b58::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 04:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:2f:c4:b7:ec:17:60:e1:f0:b1:06:ce:a8:58:4a:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725 Validity Not Before: Dec 10 07:35:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f64b224702c6c5ab1a167fcf05afe75b176a8f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:73:e4:92:41:6c:7a:8e:46:52:71:35:36:9b: 87:85:36:02:e4:f6:48:43:91:d9:80:d5:74:8d:e2: 09:1a:da:4d:aa:31:6a:93:d3:ee:78:66:e9:27:1b: fd:bc:41:05:90:3e:a2:34:d1:5d:c7:37:65:79:01: b9:f4:49:57:37:ad:3e:29:df:fb:d8:5d:81:88:a6: 06:7a:2b:8c:25:f4:58:5b:72:3a:e2:9b:d1:3c:fe: bf:55:e4:0d:a7:6f:00:b2:2f:50:88:a9:68:90:59: db:ca:97:23:a3:d6:69:c0:16:9c:45:64:a5:25:0d: b1:4f:2d:5f:19:78:27:d5:69:c8:ef:fc:45:a7:73: 5f:78:8c:91:0c:2b:13:ca:17:69:a4:d6:ea:63:96: 64:21:3c:71:2a:6b:a7:eb:5b:4f:2f:ad:5e:e6:db: f0:18:ca:3f:a6:55:eb:d0:8d:25:a2:06:bd:a3:1d: 90:81:fc:01:7c:4f:99:05:70:8a:ef:fe:a9:a7:64: 3f:1e:df:ed:59:03:57:8d:7f:6f:42:06:d0:3a:eb: b9:3b:32:98:0c:1c:11:e1:20:ba:5f:36:86:7a:59: 23:d2:28:a0:4c:2e:ab:f5:f8:91:e3:c4:7a:68:05: 36:33:07:17:e4:1a:25:54:be:50:15:67:f0:90:70: c6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4B:22:47:02:C6:C5:AB:1A:16:7F:CF:05:AF:E7:5B:17:6A:8F:03 X509v3 Authority Key Identifier: keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/9ksiRwLGxasaFn_PBa_nWxdqjwM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.221.0.0/16 31.184.128.0/18 37.130.200.0/21 178.252.128.0/18 185.115.148.0-185.115.150.255 IPv6: 2a02:2b58::/29 Signature Algorithm: sha256WithRSAEncryption 54:55:10:62:d6:d1:39:f6:6e:86:9b:32:c4:b5:07:91:15:f5: e7:5f:46:16:f8:6b:3e:5e:44:8d:da:51:f9:d8:d8:a4:32:02: 0b:05:83:02:e8:02:2d:8d:93:70:18:c9:a6:8d:20:2a:c5:d7: e6:07:d1:1a:8a:19:94:28:9c:16:04:96:85:59:ae:84:b8:1d: e1:1d:6b:a6:a9:12:c9:10:d8:7a:d3:e5:4c:30:65:ee:12:02: 92:44:c7:fd:76:de:6a:65:b2:fd:56:64:f5:88:c9:70:76:a9: 37:e1:ef:0a:1c:b3:0e:90:fe:39:6a:f4:ac:7c:33:19:e2:7d: f5:0d:16:36:95:ac:63:48:f9:06:5a:e8:1d:bd:10:12:6e:b5: fb:61:65:18:22:96:f0:81:0a:89:29:a1:15:64:c8:80:8e:04: 0e:e2:2d:cd:b8:30:1f:f1:f4:9b:93:9b:24:83:e7:76:e8:e2: 33:2c:a8:9a:93:b9:2c:b9:28:ec:34:82:a8:9d:9d:9c:31:7b: 78:9d:ca:24:87:f3:5d:d5:46:83:ba:42:51:5d:ed:f7:40:2b: 6c:08:f1:b3:e7:81:b0:76:e4:a7:78:7a:ac:9a:cb:ab:4b:07: 51:11:c0:1b:e1:66:47:eb:8a:2d:4c:96:9f:2c:e5:47:ff:c8: 29:71:80:96 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZsHL8S37Bdg4fCxBs6oWEqxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZmI2NDVmMTM0ZjRmZGFkYTQ1ZTcwYmNmY2Q5M2I4OTdk YmQ3MjUwHhcNMjUxMjEwMDczNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjRiMjI0NzAyYzZjNWFiMWExNjdmY2YwNWFmZTc1YjE3NmE4ZjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3PkkkFseo5GUnE1NpuHhTYC5PZI Q5HZgNV0jeIJGtpNqjFqk9PueGbpJxv9vEEFkD6iNNFdxzdleQG59ElXN60+Kd/7 2F2BiKYGeiuMJfRYW3I64pvRPP6/VeQNp28Asi9QiKlokFnbypcjo9ZpwBacRWSl JQ2xTy1fGXgn1WnI7/xFp3NfeIyRDCsTyhdppNbqY5ZkITxxKmun61tPL61e5tvw GMo/plXr0I0loga9ox2QgfwBfE+ZBXCK7/6pp2Q/Ht/tWQNXjX9vQgbQOuu5OzKY DBwR4SC6XzaGelkj0iigTC6r9fiR48R6aAU2MwcX5BolVL5QFWfwkHDGlQIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFPZLIkcCxsWrGhZ/zwWv51sXao8DMB8GA1UdIwQY MBaAFNr7ZF8TT0/a2kXnC8/Nk7iX29clMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83YTQ4ZjUtYmQyNC00ZGM0LThjY2Et NmJhMGEwY2UwMWVkLzEvOWtzaVJ3TEd4YXNhRm5fUEJhX25XeGRxandNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi83YTQ4ZjUtYmQyNC00ZGM0LThjY2EtNmJhMGEwY2UwMWVk LzEvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDArBAIAATAlAwMABd0DBAYf uIADBAMlgsgDBAay/IAwDAMEArlzlAMEALlzljANBAIAAjAHAwUDKgIrWDANBgkq hkiG9w0BAQsFAAOCAQEAVFUQYtbROfZuhpsyxLUHkRX1519GFvhrPl5EjdpR+djY pDICCwWDAugCLY2TcBjJpo0gKsXX5gfRGooZlCicFgSWhVmuhLgd4R1rpqkSyRDY etPlTDBl7hICkkTH/XbeamWy/VZk9YjJcHapN+HvChyzDpD+OWr0rHwzGeJ99Q0W NpWsY0j5BlroHb0QEm61+2FlGCKW8IEKiSmhFWTIgI4EDuItzbgwH/H0m5ObJIPn dujiMyyompO5LLko7DSCqJ2dnDF7eJ3KJIfzXdVGg7pCUV3t90ArbAjxs+eBsHbk p3h6rJrLq0sHURHAG+FmR+uKLUyWnyzlR//IKXGAlg== -----END CERTIFICATE-----Generated at Mon Dec 15 11:56:42 2025 by rpki-client