This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/S-dbZrZ7yUnYOOpBXob5YyvuMq4.roa File: S-dbZrZ7yUnYOOpBXob5YyvuMq4.roa (raw, json) Hash identifier: HCJwgRXKnzdFI+HOklh27LIh18+pzGQVJquU0ioP7dw= Subject key identifier: 4B:E7:5B:66:B6:7B:C9:49:D8:38:EA:41:5E:86:F9:63:2B:EE:32:AE Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019ABB4DE4B4AC1CA4AE2CDE15028B8E8C70 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/S-dbZrZ7yUnYOOpBXob5YyvuMq4.roa Signing time: Tue 25 Nov 2025 13:57:15 +0000 ROA not before: Tue 25 Nov 2025 13:57:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207569 IP address blocks: 5.180.136.0/24 maxlen: 24 5.180.137.0/24 maxlen: 24 5.252.116.0/24 maxlen: 24 45.9.74.0/24 maxlen: 24 45.89.64.0/24 maxlen: 24 45.133.245.0/24 maxlen: 24 45.133.246.0/24 maxlen: 24 46.17.106.0/24 maxlen: 24 85.209.0.0/24 maxlen: 24 95.214.8.0/24 maxlen: 24 139.28.220.0/24 maxlen: 24 139.28.221.0/24 maxlen: 24 185.17.2.0/24 maxlen: 24 185.58.207.0/24 maxlen: 24 185.94.167.0/24 maxlen: 24 185.104.250.0/24 maxlen: 24 185.105.118.0/24 maxlen: 24 185.125.228.0/24 maxlen: 24 185.125.231.0/24 maxlen: 24 185.188.181.0/24 maxlen: 24 193.109.84.0/24 maxlen: 24 193.124.180.0/24 maxlen: 24 193.124.181.0/24 maxlen: 24 194.53.54.0/24 maxlen: 24 194.67.200.0/24 maxlen: 24 195.66.87.0/24 maxlen: 24 2a0a:9300:1::/48 maxlen: 48 2a0a:9300:aaaa::/48 maxlen: 48 2a0b:da00::/32 maxlen: 32 2a0b:da01::/32 maxlen: 32 2a0b:da02::/32 maxlen: 32 2a0b:da03::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:4d:e4:b4:ac:1c:a4:ae:2c:de:15:02:8b:8e:8c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Nov 25 13:57:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4be75b66b67bc949d838ea415e86f9632bee32ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5e:ce:1b:2c:ba:81:ec:3d:b4:f0:40:8c:09: 33:52:71:35:da:54:65:2d:d9:6a:7b:4d:d0:4f:8e: 62:4a:d2:94:b3:1c:c4:55:c7:c3:00:84:15:bb:a5: b3:aa:5c:d9:c7:03:5b:0b:dc:55:a7:ef:06:f3:76: 4f:77:e7:77:ba:60:63:4e:e5:2b:f1:62:83:be:ca: ea:e6:ad:d9:20:d3:85:23:45:2a:50:d3:9f:de:13: 8b:a1:24:d4:e3:22:a8:87:c6:01:91:ec:83:78:f1: 89:77:96:df:8c:58:cf:40:64:18:46:26:5f:a4:7b: b7:72:34:f9:f5:00:20:d6:32:34:c8:d8:62:7d:ec: b8:2c:72:d7:1d:29:d1:40:2c:7c:69:4c:fe:86:69: 69:b5:74:e9:b4:72:47:fd:db:65:6b:e2:9f:a7:72: d6:ae:01:db:53:12:c9:b4:da:ee:fa:0f:c8:0b:60: 3c:fc:cf:e4:14:25:0b:87:b7:ee:d0:33:59:e6:05: 35:cb:02:77:a3:5d:3c:e2:d1:fc:e8:99:63:5d:26: 13:03:6e:3f:1d:95:59:ac:77:96:48:76:48:90:b9: 2b:4f:40:4b:93:7d:c1:3f:4a:45:0b:ee:54:b7:6f: a1:74:9c:b7:6a:6b:2f:ef:aa:93:34:45:8f:a4:47: 78:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E7:5B:66:B6:7B:C9:49:D8:38:EA:41:5E:86:F9:63:2B:EE:32:AE X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/S-dbZrZ7yUnYOOpBXob5YyvuMq4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.136.0/23 5.252.116.0/24 45.9.74.0/24 45.89.64.0/24 45.133.245.0-45.133.246.255 46.17.106.0/24 85.209.0.0/24 95.214.8.0/24 139.28.220.0/23 185.17.2.0/24 185.58.207.0/24 185.94.167.0/24 185.104.250.0/24 185.105.118.0/24 185.125.228.0/24 185.125.231.0/24 185.188.181.0/24 193.109.84.0/24 193.124.180.0/23 194.53.54.0/24 194.67.200.0/24 195.66.87.0/24 IPv6: 2a0a:9300:1::/48 2a0a:9300:aaaa::/48 2a0b:da00::/30 Signature Algorithm: sha256WithRSAEncryption a7:7b:03:5f:f5:58:f2:fb:44:8b:d9:1e:fc:32:b9:02:4d:5b: 02:d1:38:67:38:b8:d5:29:df:a7:69:b6:12:3e:52:a6:eb:c3: 39:76:84:e0:2d:af:ca:a1:6b:4f:0c:f1:da:a2:0d:d7:46:18: d4:67:96:ff:4b:50:a0:ef:a7:44:de:de:8f:5a:3f:1b:cc:48: 5f:54:22:d7:ca:97:54:23:a2:15:94:59:43:0f:4d:9f:f3:3a: 26:dd:c4:7a:7e:21:0c:28:24:33:71:6a:31:e3:01:b8:99:e3: b2:0c:54:b0:6a:3c:55:d1:01:2e:4d:0a:a1:b1:af:56:d4:a2: 55:ee:f1:2a:15:53:ad:b7:4e:f0:85:a5:29:7f:4b:86:5f:d0: 3a:f2:fc:ef:cf:ef:27:9e:5f:2c:cb:7d:03:67:5e:dd:cf:40: ef:77:fc:81:f3:05:0d:66:18:3b:08:ba:d3:17:b5:57:a5:ca: be:60:e0:ef:b2:c3:91:a4:3f:ab:af:a9:c0:3e:eb:f9:75:14: 3e:6e:60:4c:e8:46:e2:8e:cb:65:71:71:22:4b:cd:3e:3e:c5: 30:02:7a:5f:a5:2a:95:8c:00:5a:bd:f2:d7:b2:c4:59:9a:29: 69:e0:72:8a:aa:76:67:30:21:f1:3e:eb:de:a5:e1:2b:cc:7f: 81:95:b4:d6 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZq7TeS0rBykrizeFQKLjoxwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjUxMTI1MTM1NzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmU3NWI2NmI2N2JjOTQ5ZDgzOGVhNDE1ZTg2Zjk2MzJiZWUzMmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml7OGyy6gew9tPBAjAkzUnE12lRl Ldlqe03QT45iStKUsxzEVcfDAIQVu6WzqlzZxwNbC9xVp+8G83ZPd+d3umBjTuUr 8WKDvsrq5q3ZINOFI0UqUNOf3hOLoSTU4yKoh8YBkeyDePGJd5bfjFjPQGQYRiZf pHu3cjT59QAg1jI0yNhifey4LHLXHSnRQCx8aUz+hmlptXTptHJH/dtla+Kfp3LW rgHbUxLJtNru+g/IC2A8/M/kFCULh7fu0DNZ5gU1ywJ3o1084tH86JljXSYTA24/ HZVZrHeWSHZIkLkrT0BLk33BP0pFC+5Ut2+hdJy3amsv76qTNEWPpEd4+wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFEvnW2a2e8lJ2DjqQV6G+WMr7jKuMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvUy1kYlpyWjd5VW5ZT09wQlhvYjVZeXZ1TXE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHKBggrBgEFBQcBBwEB/wSBujCBtzCBkwQCAAEwgYwDBAEF tIgDBAAF/HQDBAAtCUoDBAAtWUAwDAMEAC2F9QMEAC2F9gMEAC4RagMEAFXRAAME AF/WCAMEAYsc3AMEALkRAgMEALk6zwMEALlepwMEALlo+gMEALlpdgMEALl95AME ALl95wMEALm8tQMEAMFtVAMEAcF8tAMEAMI1NgMEAMJDyAMEAMNCVzAfBAIAAjAZ AwcAKgqTAAABAwcAKgqTAKqqAwUCKgvaADANBgkqhkiG9w0BAQsFAAOCAQEAp3sD X/VY8vtEi9ke/DK5Ak1bAtE4Zzi41Snfp2m2Ej5SpuvDOXaE4C2vyqFrTwzx2qIN 10YY1GeW/0tQoO+nRN7ej1o/G8xIX1Qi18qXVCOiFZRZQw9Nn/M6Jt3Een4hDCgk M3FqMeMBuJnjsgxUsGo8VdEBLk0KobGvVtSiVe7xKhVTrbdO8IWlKX9Lhl/QOvL8 78/vJ55fLMt9A2de3c9A73f8gfMFDWYYOwi60xe1V6XKvmDg77LDkaQ/q6+pwD7r +XUUPm5gTOhG4o7LZXFxIkvNPj7FMAJ6X6UqlYwAWr3y17LEWZopaeByiqp2ZzAh 8T7r3qXhK8x/gZW01g== -----END CERTIFICATE-----Generated at Fri Dec 5 21:32:26 2025 by rpki-client