This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ROfAz8S1jjj4aNneVwCup3LdEUk.roa File: ROfAz8S1jjj4aNneVwCup3LdEUk.roa (raw, json) Hash identifier: cC25N/zhnOmFLC1FmZVm9LPqheQU6u77upyFWyR9xTU= Subject key identifier: 44:E7:C0:CF:C4:B5:8E:38:F8:68:D9:DE:57:00:AE:A7:72:DD:11:49 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019ADA424906F18EB28E6D65484EB44EAFC5 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ROfAz8S1jjj4aNneVwCup3LdEUk.roa Signing time: Mon 01 Dec 2025 14:12:48 +0000 ROA not before: Mon 01 Dec 2025 14:12:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205090 IP address blocks: 45.9.73.0/24 maxlen: 24 45.9.75.0/24 maxlen: 24 45.89.65.0/24 maxlen: 24 45.90.216.0/24 maxlen: 24 45.90.217.0/24 maxlen: 24 45.90.218.0/24 maxlen: 24 45.90.219.0/24 maxlen: 24 45.95.202.0/24 maxlen: 24 45.95.203.0/24 maxlen: 24 45.132.255.0/24 maxlen: 24 45.142.122.0/24 maxlen: 24 84.252.73.0/24 maxlen: 24 84.252.74.0/24 maxlen: 24 84.252.75.0/24 maxlen: 24 85.209.2.0/24 maxlen: 24 185.102.139.0/24 maxlen: 24 185.103.109.0/24 maxlen: 24 185.104.251.0/24 maxlen: 24 185.112.101.0/24 maxlen: 24 185.112.102.0/24 maxlen: 24 185.112.103.0/24 maxlen: 24 185.217.198.0/24 maxlen: 24 185.217.199.0/24 maxlen: 24 185.221.162.0/24 maxlen: 24 185.232.169.0/24 maxlen: 24 185.233.83.0/24 maxlen: 24 185.233.200.0/24 maxlen: 24 193.162.143.0/24 maxlen: 24 193.168.227.0/24 maxlen: 24 2a09:5302::/32 maxlen: 32 2a09:5302:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:42:49:06:f1:8e:b2:8e:6d:65:48:4e:b4:4e:af:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Dec 1 14:12:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=44e7c0cfc4b58e38f868d9de5700aea772dd1149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:52:ac:51:c6:71:39:e7:1a:73:86:42:1f:e1: 78:a0:9e:77:65:4e:7f:16:10:5f:5b:9c:83:11:12: 67:7e:9c:99:09:06:27:86:86:7e:dc:c5:40:2e:40: f0:49:ee:08:f8:fa:f1:7f:d2:8a:b4:5b:12:ef:cc: fa:87:28:55:08:91:e8:2b:55:81:bd:ea:97:e3:a5: 97:36:13:50:99:70:6f:57:03:a1:11:8c:89:84:cc: 41:c9:89:03:1a:14:51:cd:c7:9a:6c:5c:fa:35:4e: 50:82:58:ea:dd:9f:0b:07:f6:2e:6d:cd:d4:7a:b1: 27:3f:4a:41:69:2e:3a:ca:42:b9:1e:af:4d:ef:4e: d7:3b:08:b7:06:13:80:db:cc:c9:a3:73:70:89:f5: 34:5d:a7:28:b9:a6:c0:bb:3a:a4:1d:63:6c:37:22: 1f:53:7b:a2:f1:48:71:0a:7f:5b:6d:4d:bb:51:78: f5:0e:27:ba:46:20:1a:33:70:b8:1e:8f:2d:24:6c: 79:1c:0a:66:28:52:b6:ef:a1:5b:9d:79:69:4a:3f: 08:5c:49:59:ca:2b:7d:d8:08:86:c7:aa:56:8f:42: 20:3e:cb:74:df:b1:9f:af:9c:7e:07:57:1c:80:41: e1:d5:18:a2:e7:57:7c:c4:46:67:50:ac:0e:40:2e: b8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E7:C0:CF:C4:B5:8E:38:F8:68:D9:DE:57:00:AE:A7:72:DD:11:49 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ROfAz8S1jjj4aNneVwCup3LdEUk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.73.0/24 45.9.75.0/24 45.89.65.0/24 45.90.216.0/22 45.95.202.0/23 45.132.255.0/24 45.142.122.0/24 84.252.73.0-84.252.75.255 85.209.2.0/24 185.102.139.0/24 185.103.109.0/24 185.104.251.0/24 185.112.101.0-185.112.103.255 185.217.198.0/23 185.221.162.0/24 185.232.169.0/24 185.233.83.0/24 185.233.200.0/24 193.162.143.0/24 193.168.227.0/24 IPv6: 2a09:5302::/32 Signature Algorithm: sha256WithRSAEncryption c1:5e:8e:4a:ab:3c:e5:1a:a1:16:e7:9c:7a:4f:9a:4f:fc:33: 10:f2:e1:3d:77:e3:0d:d1:dc:55:ec:d6:e1:2a:90:98:6b:80: 08:93:92:43:ea:44:f9:60:88:a9:15:25:99:0f:7b:72:52:b1: 07:e4:a6:f7:c9:69:7b:a0:8d:61:ae:09:ba:3a:fc:c0:cf:53: 2c:82:37:23:1d:0b:df:3a:e3:bf:09:08:78:7d:a0:88:83:e4: 09:58:09:d3:f8:82:4e:1b:bd:c7:d6:80:25:9f:a9:dc:dd:22: 98:1b:31:5c:3a:1e:27:48:f5:94:e7:31:84:e0:d9:24:12:e5: 4d:95:b6:2a:68:b9:1c:31:93:97:1b:de:a5:6f:98:ae:80:65: 4f:a7:fd:02:1c:d3:02:de:d1:8a:24:12:63:4c:1f:48:81:d3: be:cb:42:de:0e:ae:b4:a9:55:e4:43:8c:17:d8:3e:e2:87:8b: e2:fd:2d:d4:a2:d9:32:dc:ab:06:74:5e:0c:1c:e7:7a:0a:b1: 31:10:b6:a0:b1:09:2c:02:a3:9b:5f:59:32:3b:72:07:bc:4c: 81:b5:fa:28:3a:0f:de:b2:ff:75:84:2f:88:87:c7:2d:48:ec: 94:93:7f:f0:c6:14:de:5e:10:84:7d:d0:c4:44:ff:f0:3b:bc: ca:02:61:2e -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZraQkkG8Y6yjm1lSE60Tq/FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjUxMjAxMTQxMjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGU3YzBjZmM0YjU4ZTM4Zjg2OGQ5ZGU1NzAwYWVhNzcyZGQxMTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VKsUcZxOecac4ZCH+F4oJ53ZU5/ FhBfW5yDERJnfpyZCQYnhoZ+3MVALkDwSe4I+Prxf9KKtFsS78z6hyhVCJHoK1WB veqX46WXNhNQmXBvVwOhEYyJhMxByYkDGhRRzceabFz6NU5Qgljq3Z8LB/Yubc3U erEnP0pBaS46ykK5Hq9N707XOwi3BhOA28zJo3NwifU0XacouabAuzqkHWNsNyIf U3ui8UhxCn9bbU27UXj1Die6RiAaM3C4Ho8tJGx5HApmKFK276FbnXlpSj8IXElZ yit92AiGx6pWj0IgPst037Gfr5x+B1ccgEHh1Rii51d8xEZnUKwOQC64gQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFETnwM/EtY44+GjZ3lcArqdy3RFJMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvUk9mQXo4UzFqamo0YU5uZVZ3Q3VwM0xkRVVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG0BggrBgEFBQcBBwEB/wSBpDCBoTCBjwQCAAEwgYgDBAAt CUkDBAAtCUsDBAAtWUEDBAItWtgDBAEtX8oDBAAthP8DBAAtjnowDAMEAFT8SQME AlT8SAMEAFXRAgMEALlmiwMEALlnbQMEALlo+zAMAwQAuXBlAwQDuXBgAwQBudnG AwQAud2iAwQAueipAwQAuelTAwQAuenIAwQAwaKPAwQAwajjMA0EAgACMAcDBQAq CVMCMA0GCSqGSIb3DQEBCwUAA4IBAQDBXo5KqzzlGqEW55x6T5pP/DMQ8uE9d+MN 0dxV7NbhKpCYa4AIk5JD6kT5YIipFSWZD3tyUrEH5Kb3yWl7oI1hrgm6OvzAz1Ms gjcjHQvfOuO/CQh4faCIg+QJWAnT+IJOG73H1oAln6nc3SKYGzFcOh4nSPWU5zGE 4NkkEuVNlbYqaLkcMZOXG96lb5iugGVPp/0CHNMC3tGKJBJjTB9IgdO+y0LeDq60 qVXkQ4wX2D7ih4vi/S3Uotky3KsGdF4MHOd6CrExELagsQksAqObX1kyO3IHvEyB tfooOg/esv91hC+Ih8ctSOyUk3/wxhTeXhCEfdDERP/wO7zKAmEu -----END CERTIFICATE-----Generated at Fri Dec 5 21:27:03 2025 by rpki-client