This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/5LpvtQvxRDFsaSLONRUR1aCWehY.roa File: 5LpvtQvxRDFsaSLONRUR1aCWehY.roa (raw, json) Hash identifier: dRTzvPplH0hAgC9Z3zG8XuN/UXdCLu8fo35XjiKNtMQ= Subject key identifier: E4:BA:6F:B5:0B:F1:44:31:6C:69:22:CE:35:15:11:D5:A0:96:7A:16 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019A9B172CF88858C719500FB17A99AD8223 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/5LpvtQvxRDFsaSLONRUR1aCWehY.roa Signing time: Wed 19 Nov 2025 07:49:38 +0000 ROA not before: Wed 19 Nov 2025 07:49:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203549 IP address blocks: 185.103.111.0/24 maxlen: 24 185.109.22.0/23 maxlen: 23 185.109.22.0/24 maxlen: 24 185.109.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:17:2c:f8:88:58:c7:19:50:0f:b1:7a:99:ad:82:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Nov 19 07:49:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e4ba6fb50bf144316c6922ce351511d5a0967a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0a:e3:21:1e:f8:c7:e9:2a:25:5b:9e:da:5c: 6c:a5:a3:ab:9d:36:fc:e7:16:56:a3:b3:aa:a2:53: 45:4f:36:9f:0d:03:48:8d:96:7c:32:12:76:12:4e: 1b:34:86:a4:96:64:b6:c3:d5:07:18:76:b5:77:14: 9a:ee:d8:36:18:d9:fe:61:e4:07:50:9d:2d:ae:05: 90:3a:fb:fd:45:16:d3:94:dd:fd:e3:db:fa:3a:fc: 25:68:42:71:e7:c6:75:fb:bc:3f:71:79:89:da:fd: 87:de:c1:bc:8b:c4:7b:d4:f0:47:49:95:16:ea:7e: d1:43:69:c0:b4:7d:87:36:a3:b7:dc:b5:30:c9:a1: e9:a7:34:c0:ba:76:7c:34:e8:fe:5f:55:32:fd:b7: f9:45:ce:cd:ea:6e:bf:c1:93:11:5c:13:ba:c2:8e: 1d:26:b7:ee:d4:82:df:59:4d:81:d6:75:0c:70:47: b5:c2:9d:7d:ae:03:22:45:6d:c4:ca:d9:a7:f4:89: dc:9e:c1:d4:cf:16:dc:0f:b8:06:bc:66:a6:53:d5: 34:ae:83:64:76:eb:ce:5b:17:38:7e:e9:15:50:b3: bc:a1:78:32:95:b5:34:01:99:cb:23:4f:87:08:aa: b0:00:16:19:04:14:c1:a6:f6:29:1f:2b:96:1f:70: 97:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:BA:6F:B5:0B:F1:44:31:6C:69:22:CE:35:15:11:D5:A0:96:7A:16 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/5LpvtQvxRDFsaSLONRUR1aCWehY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.103.111.0/24 185.109.22.0/23 Signature Algorithm: sha256WithRSAEncryption 58:9c:e5:0b:0b:97:36:5d:00:24:3f:08:43:f9:32:98:2d:28: 2c:0f:d8:e4:25:4e:a9:d8:ff:69:e8:79:3b:c3:c7:20:aa:ca: 10:04:a2:bf:e7:a6:29:23:7d:86:b7:fc:95:16:d6:ba:70:ca: 26:ab:d3:85:cd:41:22:53:14:37:ef:ab:cc:d7:44:af:88:3b: 31:48:2e:0f:02:53:0b:a6:d9:ec:d7:2b:f2:39:c2:eb:9c:68: 02:1f:15:41:5f:62:24:dc:82:e5:ac:16:ce:5f:70:2e:c5:f3: c5:5b:6a:0b:d8:d2:a8:77:f9:63:1a:79:e6:9f:01:01:2b:53: 2b:76:b9:a8:d3:50:df:01:ac:54:d6:b9:ba:4c:4f:80:3a:b8: 0b:b4:3c:1d:fe:b6:b2:f3:33:fc:d9:0c:ab:eb:51:1b:6a:0c: 90:29:00:bf:9f:b0:57:e2:f3:19:1f:d2:3a:47:83:56:33:97: 8c:a7:ac:cf:01:8e:d0:2b:1f:85:22:7f:82:c6:62:3b:66:3e: be:3b:c5:0d:2e:68:9d:96:81:c0:36:71:1c:05:30:22:9c:9d: 58:e3:1b:25:48:c8:92:fd:6f:bd:e3:24:1f:47:dc:1b:f5:3f: 27:9d:49:62:56:08:ee:3c:3c:89:69:32:f6:24:38:eb:2d:75: 84:f2:55:44 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqbFyz4iFjHGVAPsXqZrYIjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjUxMTE5MDc0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGJhNmZiNTBiZjE0NDMxNmM2OTIyY2UzNTE1MTFkNWEwOTY3YTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoArjIR74x+kqJVue2lxspaOrnTb8 5xZWo7OqolNFTzafDQNIjZZ8MhJ2Ek4bNIaklmS2w9UHGHa1dxSa7tg2GNn+YeQH UJ0trgWQOvv9RRbTlN3949v6OvwlaEJx58Z1+7w/cXmJ2v2H3sG8i8R71PBHSZUW 6n7RQ2nAtH2HNqO33LUwyaHppzTAunZ8NOj+X1Uy/bf5Rc7N6m6/wZMRXBO6wo4d Jrfu1ILfWU2B1nUMcEe1wp19rgMiRW3Eytmn9IncnsHUzxbcD7gGvGamU9U0roNk duvOWxc4fukVULO8oXgylbU0AZnLI0+HCKqwABYZBBTBpvYpHyuWH3CXgwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOS6b7UL8UQxbGkizjUVEdWglnoWMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvNUxwdnRRdnhSREZzYVNMT05SVVIxYUNXZWhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuWdvAwQB uW0WMA0GCSqGSIb3DQEBCwUAA4IBAQBYnOULC5c2XQAkPwhD+TKYLSgsD9jkJU6p 2P9p6Hk7w8cgqsoQBKK/56YpI32Gt/yVFta6cMomq9OFzUEiUxQ376vM10SviDsx SC4PAlMLptns1yvyOcLrnGgCHxVBX2Ik3ILlrBbOX3AuxfPFW2oL2NKod/ljGnnm nwEBK1Mrdrmo01DfAaxU1rm6TE+AOrgLtDwd/ray8zP82Qyr61EbagyQKQC/n7BX 4vMZH9I6R4NWM5eMp6zPAY7QKx+FIn+CxmI7Zj6+O8UNLmidloHANnEcBTAinJ1Y 4xslSMiS/W+94yQfR9wb9T8nnUliVgjuPDyJaTL2JDjrLXWE8lVE -----END CERTIFICATE-----Generated at Fri Dec 5 21:32:25 2025 by rpki-client