This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/lszQ9jmWP2IKrYGAUNOYbeJCEUY.roa File: lszQ9jmWP2IKrYGAUNOYbeJCEUY.roa (raw, json) Hash identifier: 5Squ4ypIudzrHOlVuCRxhJ4fYWPv8eZnTKw9h0x7Y74= Subject key identifier: 96:CC:D0:F6:39:96:3F:62:0A:AD:81:80:50:D3:98:6D:E2:42:11:46 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B4590685D35871F1ABEA35A214615DA65 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/lszQ9jmWP2IKrYGAUNOYbeJCEUY.roa Signing time: Mon 22 Dec 2025 10:17:30 +0000 ROA not before: Mon 22 Dec 2025 10:17:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207569 IP address blocks: 5.180.136.0/24 maxlen: 24 5.180.137.0/24 maxlen: 24 5.252.116.0/24 maxlen: 24 45.9.74.0/24 maxlen: 24 45.89.64.0/24 maxlen: 24 45.133.245.0/24 maxlen: 24 45.133.246.0/24 maxlen: 24 46.17.106.0/24 maxlen: 24 85.209.0.0/24 maxlen: 24 95.214.8.0/24 maxlen: 24 139.28.220.0/24 maxlen: 24 139.28.221.0/24 maxlen: 24 185.17.2.0/24 maxlen: 24 185.58.207.0/24 maxlen: 24 185.94.167.0/24 maxlen: 24 185.104.250.0/24 maxlen: 24 185.105.118.0/24 maxlen: 24 185.112.83.0/24 maxlen: 24 185.125.228.0/24 maxlen: 24 185.125.230.0/24 maxlen: 24 185.125.231.0/24 maxlen: 24 185.188.181.0/24 maxlen: 24 185.229.65.0/24 maxlen: 24 185.229.66.0/24 maxlen: 24 193.109.84.0/24 maxlen: 24 193.124.180.0/24 maxlen: 24 193.124.181.0/24 maxlen: 24 194.53.54.0/24 maxlen: 24 194.67.200.0/24 maxlen: 24 195.66.87.0/24 maxlen: 24 2a0a:9300:1::/48 maxlen: 48 2a0a:9300:aaaa::/48 maxlen: 48 2a0b:da00::/32 maxlen: 32 2a0b:da01::/32 maxlen: 32 2a0b:da02::/32 maxlen: 32 2a0b:da03::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:90:68:5d:35:87:1f:1a:be:a3:5a:21:46:15:da:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Dec 22 10:17:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=96ccd0f639963f620aad818050d3986de2421146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:40:ac:2a:44:12:fb:a4:77:3b:d1:44:00:31: 75:d3:f2:11:e0:d0:22:46:38:ec:45:86:08:89:e9: 7e:fd:bf:a2:36:00:eb:d5:ae:98:02:e4:1e:7d:01: b8:d9:75:3b:e3:ec:7a:f8:80:fa:cc:d8:c4:23:45: 30:4f:8e:55:7a:15:45:5d:b9:66:60:65:0c:9d:19: 4f:9a:37:b2:44:f7:e5:f3:96:e2:e0:65:b2:6f:a4: 98:c4:d5:ee:9d:5c:96:4b:b3:8f:72:ce:f1:40:c3: 24:c6:dc:eb:17:cc:bb:69:76:0a:26:3f:e9:a5:89: ce:e4:ec:96:43:fa:e3:4d:a0:49:52:ca:8e:3a:c1: b2:e3:8f:69:bb:c9:60:7c:f5:5a:02:c8:2e:4e:46: ff:55:5c:61:88:3d:c3:e0:ac:75:62:4d:54:2e:07: e6:98:12:66:91:de:3d:26:ca:ff:e9:dc:42:34:27: 25:db:02:3e:8a:6a:5c:27:e9:78:97:eb:2e:f8:5a: ed:c1:aa:b4:74:91:3a:96:eb:b2:51:cf:7f:a7:8e: af:9b:83:93:c6:83:14:c4:e4:05:8e:47:bd:ce:41: 5f:ba:d5:ce:1d:a4:45:09:e8:2e:e5:6e:8d:4e:cf: 5f:85:b6:19:49:92:56:63:27:70:d6:3c:32:ab:5d: 68:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CC:D0:F6:39:96:3F:62:0A:AD:81:80:50:D3:98:6D:E2:42:11:46 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/lszQ9jmWP2IKrYGAUNOYbeJCEUY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.136.0/23 5.252.116.0/24 45.9.74.0/24 45.89.64.0/24 45.133.245.0-45.133.246.255 46.17.106.0/24 85.209.0.0/24 95.214.8.0/24 139.28.220.0/23 185.17.2.0/24 185.58.207.0/24 185.94.167.0/24 185.104.250.0/24 185.105.118.0/24 185.112.83.0/24 185.125.228.0/24 185.125.230.0/23 185.188.181.0/24 185.229.65.0-185.229.66.255 193.109.84.0/24 193.124.180.0/23 194.53.54.0/24 194.67.200.0/24 195.66.87.0/24 IPv6: 2a0a:9300:1::/48 2a0a:9300:aaaa::/48 2a0b:da00::/30 Signature Algorithm: sha256WithRSAEncryption 81:a1:4c:c5:00:6f:37:4f:58:d2:16:b5:7b:c8:a6:28:fa:9f: fb:d9:0e:aa:8c:68:9d:68:08:b0:ce:64:f2:3f:cd:eb:33:74: 8d:77:e3:a5:ba:43:84:d6:b1:6e:4e:3a:56:f6:d5:3d:f1:5c: e4:f0:85:08:40:18:03:7a:4f:a4:77:ce:8b:da:d0:72:e1:6b: 73:ed:1e:ec:b0:75:f4:77:bf:0d:bf:99:e0:2d:83:50:79:51: 67:20:09:f5:34:77:8b:1e:fa:a5:b0:8f:2c:7c:61:d7:d8:ab: 1a:05:c3:81:5c:4f:4f:76:d6:1d:38:c6:41:a4:ad:fb:ea:7d: 8c:90:d6:1e:a3:0b:58:43:a3:7f:6f:1c:ec:e0:e9:6c:8e:a2: bb:41:ab:f4:61:02:38:97:85:a4:0a:24:63:ad:c1:71:65:1a: b7:2c:78:6f:df:d6:c5:35:de:56:b1:38:49:24:ef:9f:2a:9b: 0a:b6:d8:71:32:41:a6:e5:eb:2e:62:3d:47:62:d8:84:c5:e0: dc:3e:23:f2:0d:01:38:e7:be:a6:8d:54:cf:71:b7:55:b6:b7: d9:49:a1:ae:f3:0d:34:68:28:a6:2a:dd:d5:b7:1e:09:e1:63: 27:53:ec:57:e8:12:48:b0:72:8e:67:1b:ca:42:ab:2f:4b:14: 8a:75:b5:cd -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZtFkGhdNYcfGr6jWiFGFdplMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjUxMjIyMTAxNzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmNjZDBmNjM5OTYzZjYyMGFhZDgxODA1MGQzOTg2ZGUyNDIxMTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzECsKkQS+6R3O9FEADF10/IR4NAi RjjsRYYIiel+/b+iNgDr1a6YAuQefQG42XU74+x6+ID6zNjEI0UwT45VehVFXblm YGUMnRlPmjeyRPfl85bi4GWyb6SYxNXunVyWS7OPcs7xQMMkxtzrF8y7aXYKJj/p pYnO5OyWQ/rjTaBJUsqOOsGy449pu8lgfPVaAsguTkb/VVxhiD3D4Kx1Yk1ULgfm mBJmkd49Jsr/6dxCNCcl2wI+impcJ+l4l+su+Frtwaq0dJE6luuyUc9/p46vm4OT xoMUxOQFjke9zkFfutXOHaRFCegu5W6NTs9fhbYZSZJWYydw1jwyq11oDwIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFJbM0PY5lj9iCq2BgFDTmG3iQhFGMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvbHN6UTlqbVdQMklLcllHQVVOT1liZUpDRVVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHeBggrBgEFBQcBBwEB/wSBzjCByzCBpwQCAAEwgaADBAEF tIgDBAAF/HQDBAAtCUoDBAAtWUAwDAMEAC2F9QMEAC2F9gMEAC4RagMEAFXRAAME AF/WCAMEAYsc3AMEALkRAgMEALk6zwMEALlepwMEALlo+gMEALlpdgMEALlwUwME ALl95AMEAbl95gMEALm8tTAMAwQAueVBAwQAueVCAwQAwW1UAwQBwXy0AwQAwjU2 AwQAwkPIAwQAw0JXMB8EAgACMBkDBwAqCpMAAAEDBwAqCpMAqqoDBQIqC9oAMA0G CSqGSIb3DQEBCwUAA4IBAQCBoUzFAG83T1jSFrV7yKYo+p/72Q6qjGidaAiwzmTy P83rM3SNd+OlukOE1rFuTjpW9tU98Vzk8IUIQBgDek+kd86L2tBy4Wtz7R7ssHX0 d78Nv5ngLYNQeVFnIAn1NHeLHvqlsI8sfGHX2KsaBcOBXE9PdtYdOMZBpK376n2M kNYeowtYQ6N/bxzs4OlsjqK7Qav0YQI4l4WkCiRjrcFxZRq3LHhv39bFNd5WsThJ JO+fKpsKtthxMkGm5esuYj1HYtiExeDcPiPyDQE4576mjVTPcbdVtrfZSaGu8w00 aCimKt3Vtx4J4WMnU+xX6BJIsHKOZxvKQqsvSxSKdbXN -----END CERTIFICATE-----Generated at Sun Dec 28 07:14:54 2025 by rpki-client