This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/RT0dgTi8qRRe_0yr2NzLVMxiW50.roa File: RT0dgTi8qRRe_0yr2NzLVMxiW50.roa (raw, json) Hash identifier: I3PDCF3M2FnOOkPRfFURAuhVWsWxPAfwRn5TJwNR5g0= Subject key identifier: 45:3D:1D:81:38:BC:A9:14:5E:FF:4C:AB:D8:DC:CB:54:CC:62:5B:9D Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019A9B18161063F17BEFF11C1F5E520A29E1 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/RT0dgTi8qRRe_0yr2NzLVMxiW50.roa Signing time: Wed 19 Nov 2025 07:50:38 +0000 ROA not before: Wed 19 Nov 2025 07:50:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209641 IP address blocks: 45.89.66.0/24 maxlen: 24 45.89.67.0/24 maxlen: 24 45.128.176.0/24 maxlen: 24 45.128.177.0/24 maxlen: 24 45.128.178.0/24 maxlen: 24 45.128.179.0/24 maxlen: 24 45.132.252.0/24 maxlen: 24 45.133.247.0/24 maxlen: 24 91.217.80.0/24 maxlen: 24 94.142.139.0/24 maxlen: 24 94.142.140.0/24 maxlen: 24 94.142.141.0/24 maxlen: 24 94.142.142.0/24 maxlen: 24 185.5.248.0/22 maxlen: 22 185.5.248.0/23 maxlen: 23 185.5.250.0/23 maxlen: 23 185.5.250.0/24 maxlen: 24 185.105.116.0/24 maxlen: 24 185.105.117.0/24 maxlen: 24 185.125.216.0/22 maxlen: 22 185.125.218.0/23 maxlen: 23 185.200.188.0/24 maxlen: 24 193.109.85.0/24 maxlen: 24 193.124.176.0/20 maxlen: 20 193.124.176.0/22 maxlen: 22 193.124.176.0/24 maxlen: 24 193.124.177.0/24 maxlen: 24 193.124.178.0/24 maxlen: 24 193.124.179.0/24 maxlen: 24 193.124.184.0/21 maxlen: 21 193.124.184.0/24 maxlen: 24 193.124.191.0/24 maxlen: 24 193.168.224.0/24 maxlen: 24 194.67.196.0/22 maxlen: 22 194.67.202.0/24 maxlen: 24 194.67.203.0/24 maxlen: 24 194.67.204.0/22 maxlen: 22 194.67.208.0/20 maxlen: 20 195.47.250.0/24 maxlen: 24 2a0a:9300:2::/48 maxlen: 48 2a0a:9300:d0::/48 maxlen: 48 2a0a:9300:d1::/48 maxlen: 48 2a0a:9300:d2::/48 maxlen: 48 2a0a:9302:1::/48 maxlen: 48 2a0a:9307::/32 maxlen: 32 2a0d:2dc0::/32 maxlen: 32 2a0d:2dc1::/32 maxlen: 32 2a0d:2dc2::/32 maxlen: 32 2a0d:2dc3::/32 maxlen: 32 2a0e:d603::/32 maxlen: 32 2a0f:7b82::/32 maxlen: 32 2a0f:7b83::/32 maxlen: 32 2a0f:7b84::/32 maxlen: 32 2a0f:7b85::/32 maxlen: 32 2a0f:7b86::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:18:16:10:63:f1:7b:ef:f1:1c:1f:5e:52:0a:29:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Nov 19 07:50:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=453d1d8138bca9145eff4cabd8dccb54cc625b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d9:fc:7f:3c:75:3d:4b:19:8f:50:40:93:2b: de:f6:55:6b:dd:91:ac:29:11:28:7d:f0:87:62:0e: 61:cb:3a:f0:11:bf:57:76:21:87:88:06:91:39:02: 7b:53:9b:09:f4:7f:65:0b:79:aa:6c:d6:a0:28:6c: 5d:9f:94:78:b9:17:28:93:bf:3a:8d:7d:e6:31:8c: 3f:38:9d:e2:fe:81:24:63:3a:0f:d1:9e:f4:f8:fe: 3b:9a:bd:48:2e:9c:da:e4:b0:a3:a0:ec:32:98:9b: 51:59:e0:89:91:cd:42:4b:ee:d4:36:5c:45:7a:e0: 1f:44:9e:d0:2c:47:d6:47:4a:23:47:c5:5d:c6:63: 7c:4c:86:c6:9a:9c:1a:2f:cd:e6:c2:81:f5:67:2e: 60:74:9f:5a:e1:cf:aa:90:6d:cb:58:df:3a:ef:9d: 5b:86:4f:60:07:65:52:40:b8:86:70:87:45:bb:7e: 3f:9e:5d:d1:e8:f2:ce:f6:8b:78:16:1d:af:77:20: 45:a4:64:db:18:64:f8:03:48:19:bc:88:9b:fb:13: 9e:49:82:62:67:6d:c7:35:ac:db:a0:f8:4e:e3:b9: 8f:f2:7d:2e:25:45:c9:82:a2:67:6b:b1:c5:51:a3: 85:bb:0c:1e:fa:63:1e:56:42:7b:f8:65:ed:82:21: 37:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:3D:1D:81:38:BC:A9:14:5E:FF:4C:AB:D8:DC:CB:54:CC:62:5B:9D X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/RT0dgTi8qRRe_0yr2NzLVMxiW50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.66.0/23 45.128.176.0/22 45.132.252.0/24 45.133.247.0/24 91.217.80.0/24 94.142.139.0-94.142.142.255 185.5.248.0/22 185.105.116.0/23 185.125.216.0/22 185.200.188.0/24 193.109.85.0/24 193.124.176.0/20 193.168.224.0/24 194.67.196.0/22 194.67.202.0-194.67.223.255 195.47.250.0/24 IPv6: 2a0a:9300:2::/48 2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff 2a0a:9302:1::/48 2a0a:9307::/32 2a0d:2dc0::/30 2a0e:d603::/32 2a0f:7b82::-2a0f:7b86:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 59:95:13:c3:f3:24:26:cc:c5:5a:d2:2f:91:83:f5:b4:14:06: 19:fe:0c:66:78:fb:20:ab:4e:96:49:23:8f:8c:a0:8a:be:5c: d5:c7:ba:8a:0d:9a:7d:7b:4c:89:41:f8:65:c5:cc:2c:c2:ef: 71:a5:29:9a:b9:c6:bb:41:ff:4c:02:fc:2e:d5:30:03:f6:84: be:9f:45:91:78:6a:d2:33:d7:66:84:8a:a3:8b:fb:fb:72:94: 97:37:12:73:52:57:d1:36:5b:9e:31:e0:4a:e6:ac:1b:9a:a1: 8e:74:74:1d:eb:8a:fd:1d:85:bf:64:c3:e3:4d:af:55:c3:d5: ad:2a:97:75:6e:6d:ff:f1:c2:26:bd:b9:9d:a5:a5:29:f4:27: f0:6f:56:fd:94:a5:76:cf:60:a6:d1:7b:97:32:9d:b7:cc:0d: ad:55:a5:97:95:b1:57:5b:9a:86:dd:9f:70:c8:08:53:48:ff: cd:1b:2c:3a:3b:68:3e:ad:38:96:97:3a:2a:63:dc:7d:76:16: d9:f8:f7:37:3d:1a:12:b5:4e:e9:dd:31:d6:c6:d0:6e:75:3f: b5:ab:ef:64:b4:19:49:0a:dd:07:27:39:31:6b:1a:78:42:ec: 62:ef:08:4c:dc:d1:37:a8:da:48:fc:69:aa:48:bc:b1:34:66: a5:5d:01:7a -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZqbGBYQY/F77/EcH15SCinhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjUxMTE5MDc1MDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTNkMWQ4MTM4YmNhOTE0NWVmZjRjYWJkOGRjY2I1NGNjNjI1YjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dn8fzx1PUsZj1BAkyve9lVr3ZGs KREoffCHYg5hyzrwEb9XdiGHiAaROQJ7U5sJ9H9lC3mqbNagKGxdn5R4uRcok786 jX3mMYw/OJ3i/oEkYzoP0Z70+P47mr1ILpza5LCjoOwymJtRWeCJkc1CS+7UNlxF euAfRJ7QLEfWR0ojR8VdxmN8TIbGmpwaL83mwoH1Zy5gdJ9a4c+qkG3LWN86751b hk9gB2VSQLiGcIdFu34/nl3R6PLO9ot4Fh2vdyBFpGTbGGT4A0gZvIib+xOeSYJi Z23HNazboPhO47mP8n0uJUXJgqJna7HFUaOFuwwe+mMeVkJ7+GXtgiE3+QIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFEU9HYE4vKkUXv9Mq9jcy1TMYludMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvUlQwZGdUaThxUlJlXzB5cjJOekxWTXhpVzUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHeBggrBgEFBQcBBwEB/wSBzjCByzB2BAIAATBwAwQBLVlC AwQCLYCwAwQALYT8AwQALYX3AwQAW9lQMAwDBABejosDBABejo4DBAK5BfgDBAG5 aXQDBAK5fdgDBAC5yLwDBADBbVUDBATBfLADBADBqOADBALCQ8QwDAMEAcJDygME BcJDwAMEAMMv+jBRBAIAAjBLAwcAKgqTAAACMBIDBwQqCpMAANADBwAqCpMAANID BwAqCpMCAAEDBQAqCpMHAwUCKg0twAMFACoO1gMwDgMFASoPe4IDBQAqD3uGMA0G CSqGSIb3DQEBCwUAA4IBAQBZlRPD8yQmzMVa0i+Rg/W0FAYZ/gxmePsgq06WSSOP jKCKvlzVx7qKDZp9e0yJQfhlxcwswu9xpSmauca7Qf9MAvwu1TAD9oS+n0WReGrS M9dmhIqji/v7cpSXNxJzUlfRNlueMeBK5qwbmqGOdHQd64r9HYW/ZMPjTa9Vw9Wt Kpd1bm3/8cImvbmdpaUp9Cfwb1b9lKV2z2Cm0XuXMp23zA2tVaWXlbFXW5qG3Z9w yAhTSP/NGyw6O2g+rTiWlzoqY9x9dhbZ+Pc3PRoStU7p3THWxtBudT+1q+9ktBlJ Ct0HJzkxaxp4Quxi7whM3NE3qNpI/GmqSLyxNGalXQF6 -----END CERTIFICATE-----Generated at Fri Dec 5 21:27:03 2025 by rpki-client