This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/bk_ezf8IiOU35Mj_av9xyxPkQSw.roa File: bk_ezf8IiOU35Mj_av9xyxPkQSw.roa (raw, json) Hash identifier: 6hOU1CqU/gWKSpcIZ4I/GXbdV71JtI+7AJLT3ADxjfU= Subject key identifier: 6E:4F:DE:CD:FF:08:88:E5:37:E4:C8:FF:6A:FF:71:CB:13:E4:41:2C Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019A9B17294B6909138FC36D480F05A68FDD Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/bk_ezf8IiOU35Mj_av9xyxPkQSw.roa Signing time: Wed 19 Nov 2025 07:49:37 +0000 ROA not before: Wed 19 Nov 2025 07:49:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50113 IP address blocks: 5.180.136.0/24 maxlen: 24 5.180.137.0/24 maxlen: 24 5.252.116.0/24 maxlen: 24 45.89.64.0/24 maxlen: 24 91.217.77.0/24 maxlen: 24 185.104.248.0/24 maxlen: 24 185.174.139.0/24 maxlen: 24 185.180.230.0/24 maxlen: 24 185.188.180.0/24 maxlen: 24 185.189.12.0/22 maxlen: 22 185.189.12.0/24 maxlen: 24 185.189.13.0/24 maxlen: 24 185.189.14.0/24 maxlen: 24 185.189.15.0/24 maxlen: 24 192.162.100.0/24 maxlen: 24 192.162.101.0/24 maxlen: 24 192.162.102.0/24 maxlen: 24 192.162.103.0/24 maxlen: 24 193.0.200.0/24 maxlen: 24 193.0.202.0/24 maxlen: 24 193.0.203.0/24 maxlen: 24 193.168.226.0/24 maxlen: 24 194.63.140.0/24 maxlen: 24 194.63.141.0/24 maxlen: 24 194.63.142.0/24 maxlen: 24 194.63.143.0/24 maxlen: 24 2a04:5200::/32 maxlen: 32 2a04:5200:a::/48 maxlen: 48 2a04:5200:fb01::/48 maxlen: 48 2a04:5200:fb02::/48 maxlen: 48 2a04:5200:ff00::/48 maxlen: 48 2a04:5200:ff10::/48 maxlen: 48 2a04:5200:fff1::/48 maxlen: 48 2a04:5200:fff2::/48 maxlen: 48 2a04:5200:fff3::/48 maxlen: 48 2a04:5200:fff4::/48 maxlen: 48 2a04:5200:fff5::/48 maxlen: 48 2a04:5200:fff6::/48 maxlen: 48 2a04:5200:fff7::/48 maxlen: 48 2a04:5200:fff8::/48 maxlen: 48 2a04:5200:fff9::/48 maxlen: 48 2a04:5200:ffff::/48 maxlen: 48 2a04:5202::/32 maxlen: 32 2a04:5203::/32 maxlen: 32 2a04:5204::/32 maxlen: 32 2a04:5205::/32 maxlen: 32 2a04:5206::/32 maxlen: 32 2a04:5207::/32 maxlen: 32 2a0a:9300::/48 maxlen: 48 2a0a:9300:aaaa::/48 maxlen: 48 2a0c:aa40::/32 maxlen: 32 2a0c:aa41::/32 maxlen: 32 2a0c:aa42::/32 maxlen: 32 2a0c:aa43::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:17:29:4b:69:09:13:8f:c3:6d:48:0f:05:a6:8f:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Nov 19 07:49:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6e4fdecdff0888e537e4c8ff6aff71cb13e4412c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c5:d5:10:dd:a9:e0:b3:68:5d:09:f2:55:60: 34:ea:c3:b5:a2:0f:0e:29:a7:6c:88:88:a5:25:3f: fc:10:c2:38:10:14:fa:29:af:50:9d:c7:6b:29:b1: 33:7a:76:38:d4:29:91:d9:b4:cc:30:99:b5:03:1e: b7:a3:19:f4:bb:07:c8:6d:fa:1e:eb:be:ac:4b:29: 41:8a:cf:32:19:3c:2f:23:b2:0f:78:13:81:5d:e4: 1d:0d:ad:bc:70:a8:58:fd:c2:fa:8d:2e:bc:80:dc: 1b:b9:af:44:43:74:98:02:5a:5d:9d:90:dd:bb:48: 34:a7:13:ad:4f:70:2c:a4:53:e0:62:93:78:70:34: 68:f4:40:cb:9c:50:50:87:e1:ed:e9:d6:4b:99:63: 83:c3:da:fd:9e:60:f5:ad:48:b2:2f:d2:6b:f8:ea: 42:e0:87:11:4b:af:a8:9e:5c:ce:87:d9:7d:6d:1d: e5:39:67:55:4b:fe:90:d9:f8:0b:00:3e:7a:37:d5: 5c:6a:b0:76:bb:5c:51:1c:44:6c:86:59:c2:3b:2f: ff:bd:0d:f0:e8:64:ef:9d:55:0e:6e:9f:56:95:90: 67:38:80:6d:a4:5f:a7:53:b1:3e:fb:3a:1d:94:73: 74:53:5d:70:3b:81:22:cd:ae:04:84:93:6c:a1:47: 12:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4F:DE:CD:FF:08:88:E5:37:E4:C8:FF:6A:FF:71:CB:13:E4:41:2C X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/bk_ezf8IiOU35Mj_av9xyxPkQSw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.136.0/23 5.252.116.0/24 45.89.64.0/24 91.217.77.0/24 185.104.248.0/24 185.174.139.0/24 185.180.230.0/24 185.188.180.0/24 185.189.12.0/22 192.162.100.0/22 193.0.200.0/24 193.0.202.0/23 193.168.226.0/24 194.63.140.0/22 IPv6: 2a04:5200::/32 2a04:5202::-2a04:5207:ffff:ffff:ffff:ffff:ffff:ffff 2a0a:9300::/48 2a0a:9300:aaaa::/48 2a0c:aa40::/30 Signature Algorithm: sha256WithRSAEncryption 3f:14:d2:77:2a:ea:0f:51:29:56:7d:44:0b:cd:04:35:18:f2: 11:2d:a8:4f:db:71:30:d1:0b:e1:38:f8:52:cd:16:9a:ee:c0: 2f:5f:2d:dc:b6:4e:6f:2a:7c:a3:c8:80:c3:39:1c:03:83:83: 29:71:de:41:0c:24:d4:fb:86:c1:8e:08:41:c0:e7:9c:80:c5: 2a:d5:6a:fe:ab:cd:cb:aa:26:d5:df:45:38:25:ec:12:30:d4: 3a:c9:03:2b:51:ac:cb:98:9a:1c:a3:cb:46:c6:64:fd:80:87: bd:e8:0f:f5:b0:d5:bf:51:a4:16:ab:b5:a5:49:61:38:30:df: e1:45:f6:18:38:01:e5:2d:d7:cc:eb:1e:d5:1c:f6:19:45:ca: b6:94:3b:85:ac:9f:a7:e5:82:6c:e3:99:87:9a:ad:3d:ae:2f: dc:16:e7:b4:6e:5c:2a:ff:4e:1b:83:d3:2b:c2:72:56:8a:ed: 0a:d6:b4:30:cd:93:13:ac:0d:59:61:a1:de:f0:9e:16:36:2b: c4:31:24:d1:5c:a5:35:52:2e:2f:07:88:27:95:5d:91:01:af: 95:cd:e6:ef:4b:fc:3d:06:9b:4a:74:a8:e6:41:68:ed:1d:ef: dd:de:f4:57:dc:4f:5f:91:53:0a:65:1a:ec:16:b6:b7:c7:d2: 0e:1d:62:32 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISAZqbFylLaQkTj8NtSA8Fpo/dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjUxMTE5MDc0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTRmZGVjZGZmMDg4OGU1MzdlNGM4ZmY2YWZmNzFjYjEzZTQ0MTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsXVEN2p4LNoXQnyVWA06sO1og8O KadsiIilJT/8EMI4EBT6Ka9QncdrKbEzenY41CmR2bTMMJm1Ax63oxn0uwfIbfoe 676sSylBis8yGTwvI7IPeBOBXeQdDa28cKhY/cL6jS68gNwbua9EQ3SYAlpdnZDd u0g0pxOtT3AspFPgYpN4cDRo9EDLnFBQh+Ht6dZLmWODw9r9nmD1rUiyL9Jr+OpC 4IcRS6+onlzOh9l9bR3lOWdVS/6Q2fgLAD56N9VcarB2u1xRHERshlnCOy//vQ3w 6GTvnVUObp9WlZBnOIBtpF+nU7E++zodlHN0U11wO4Eiza4EhJNsoUcS5QIDAQAB o4ICkjCCAo4wHQYDVR0OBBYEFG5P3s3/CIjlN+TI/2r/ccsT5EEsMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvYmtfZXpmOElpT1UzNU1qX2F2OXh5eFBrUVN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGnBggrBgEFBQcBBwEB/wSBlzCBlDBaBAIAATBUAwQBBbSI AwQABfx0AwQALVlAAwQAW9lNAwQAuWj4AwQAua6LAwQAubTmAwQAuby0AwQCub0M AwQCwKJkAwQAwQDIAwQBwQDKAwQAwajiAwQCwj+MMDYEAgACMDADBQAqBFIAMA4D BQEqBFICAwUDKgRSAAMHACoKkwAAAAMHACoKkwCqqgMFAioMqkAwDQYJKoZIhvcN AQELBQADggEBAD8U0ncq6g9RKVZ9RAvNBDUY8hEtqE/bcTDRC+E4+FLNFpruwC9f Ldy2Tm8qfKPIgMM5HAODgylx3kEMJNT7hsGOCEHA55yAxSrVav6rzcuqJtXfRTgl 7BIw1DrJAytRrMuYmhyjy0bGZP2Ah73oD/Ww1b9RpBartaVJYTgw3+FF9hg4AeUt 18zrHtUc9hlFyraUO4Wsn6flgmzjmYearT2uL9wW57RuXCr/ThuD0yvCclaK7QrW tDDNkxOsDVlhod7wnhY2K8QxJNFcpTVSLi8HiCeVXZEBr5XN5u9L/D0Gm0p0qOZB aO0d793e9FfcT1+RUwplGuwWtrfH0g4dYjI= -----END CERTIFICATE-----Generated at Fri Dec 5 21:32:26 2025 by rpki-client