This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/wDURza0OIGdrKWf0wRzRFrCmufw.roa File: wDURza0OIGdrKWf0wRzRFrCmufw.roa (raw, json) Hash identifier: lELuZFnn3AYubBmkIk1q6ATrQnaKGSQhjQt9zs/vWIk= Subject key identifier: C0:35:11:CD:AD:0E:20:67:6B:29:67:F4:C1:1C:D1:16:B0:A6:B9:FC Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019ADAD4C5D9E4D902D91E148D56EAB2086D Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/wDURza0OIGdrKWf0wRzRFrCmufw.roa Signing time: Mon 01 Dec 2025 16:52:48 +0000 ROA not before: Mon 01 Dec 2025 16:52:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200740 IP address blocks: 45.9.72.0/24 maxlen: 24 45.138.73.0/24 maxlen: 24 45.138.74.0/24 maxlen: 24 46.17.105.0/24 maxlen: 24 91.217.76.0/24 maxlen: 24 94.142.136.0/23 maxlen: 23 95.214.9.0/24 maxlen: 24 95.214.10.0/23 maxlen: 23 185.40.7.0/24 maxlen: 24 185.58.204.0/24 maxlen: 24 185.94.164.0/23 maxlen: 23 185.102.136.0/24 maxlen: 24 185.117.116.0/24 maxlen: 24 185.117.119.0/24 maxlen: 24 185.200.190.0/24 maxlen: 24 185.232.170.0/23 maxlen: 23 185.233.80.0/23 maxlen: 23 185.233.82.0/24 maxlen: 24 185.233.202.0/23 maxlen: 23 185.252.144.0/24 maxlen: 24 193.124.182.0/24 maxlen: 24 193.124.183.0/24 maxlen: 24 193.124.188.0/23 maxlen: 23 193.124.190.0/24 maxlen: 24 194.36.178.0/23 maxlen: 23 2a04:5200:68::/48 maxlen: 48 2a04:5201:2::/48 maxlen: 48 2a04:5201:4::/48 maxlen: 48 2a04:5201:6::/48 maxlen: 48 2a04:5201:7::/48 maxlen: 48 2a04:5201:9::/48 maxlen: 48 2a04:5201:10::/48 maxlen: 48 2a04:5201:8018::/48 maxlen: 48 2a04:5202::/48 maxlen: 48 2a0b:7780::/32 maxlen: 32 2a0b:7781::/32 maxlen: 32 2a0b:7782::/32 maxlen: 32 2a0b:7783::/32 maxlen: 32 2a0c:77c0::/32 maxlen: 32 2a0c:77c1::/32 maxlen: 32 2a0c:77c2::/32 maxlen: 32 2a0c:77c3::/32 maxlen: 32 2a0d:3880::/32 maxlen: 32 2a0d:3881::/32 maxlen: 32 2a0d:3882::/32 maxlen: 32 2a0d:3883::/32 maxlen: 32 2a0e:d604:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:d4:c5:d9:e4:d9:02:d9:1e:14:8d:56:ea:b2:08:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Dec 1 16:52:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c03511cdad0e20676b2967f4c11cd116b0a6b9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:79:88:ea:c5:96:dc:a8:24:2b:0d:d2:30:58: dc:3e:ae:4a:4a:ec:cb:b8:85:4c:fc:c6:43:72:5e: 96:bf:5d:dd:66:0b:8b:25:1c:36:c4:61:25:78:45: c6:3c:73:ef:99:00:cb:2e:25:0d:10:6e:af:4e:ed: 6e:12:69:72:65:c7:42:32:b3:99:a8:68:cd:9e:6d: 14:a2:17:4b:eb:92:54:d8:31:b0:ed:d5:5c:33:fb: 43:06:c3:4b:3f:bf:28:c6:6d:14:dc:a4:40:cf:f7: b3:e7:46:7b:9f:c7:37:f6:18:2f:ae:b1:5f:d2:20: b2:4e:d2:84:f4:17:46:86:ad:3c:e2:fb:c4:ee:5c: 45:db:ca:d4:95:c3:7d:3c:0b:2a:ce:1b:40:21:02: c3:1c:c7:8d:0a:23:3e:8a:80:fc:69:69:ae:37:d4: fb:91:4f:f0:11:d6:33:a9:05:35:86:8f:d2:14:aa: 36:ab:d8:92:d8:0b:0e:3d:04:44:41:28:d7:6f:43: 25:bb:b7:9f:96:91:53:9c:5d:91:0d:20:cd:c4:e7: 78:0e:5e:ad:a5:c0:85:9b:10:d1:f6:95:c3:1b:d0: 5e:a5:c7:0d:20:d3:cd:88:7b:81:0f:10:8b:2b:9c: c0:54:09:a2:29:19:f2:a2:2c:3c:cc:62:55:55:07: 81:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:35:11:CD:AD:0E:20:67:6B:29:67:F4:C1:1C:D1:16:B0:A6:B9:FC X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/wDURza0OIGdrKWf0wRzRFrCmufw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.72.0/24 45.138.73.0-45.138.74.255 46.17.105.0/24 91.217.76.0/24 94.142.136.0/23 95.214.9.0-95.214.11.255 185.40.7.0/24 185.58.204.0/24 185.94.164.0/23 185.102.136.0/24 185.117.116.0/24 185.117.119.0/24 185.200.190.0/24 185.232.170.0/23 185.233.80.0-185.233.82.255 185.233.202.0/23 185.252.144.0/24 193.124.182.0/23 193.124.188.0-193.124.190.255 194.36.178.0/23 IPv6: 2a04:5200:68::/48 2a04:5201:2::/48 2a04:5201:4::/48 2a04:5201:6::/47 2a04:5201:9::/48 2a04:5201:10::/48 2a04:5201:8018::/48 2a04:5202::/48 2a0b:7780::/30 2a0c:77c0::/30 2a0d:3880::/30 2a0e:d604:2::/48 Signature Algorithm: sha256WithRSAEncryption b5:c2:3e:64:7e:ac:b2:62:02:25:96:f5:41:37:91:01:ff:65: 7c:ff:08:79:64:da:d1:88:5d:da:e6:85:47:90:2a:b8:0e:e6: f8:bd:9c:74:17:10:e3:4a:ca:ed:ab:48:af:77:6f:61:36:79: b0:08:49:a1:18:af:94:23:01:d7:50:04:80:9e:02:9a:68:7d: d5:68:1d:f9:f7:21:d2:fa:39:c2:42:ca:ee:ed:e8:f6:a5:23: 6f:72:98:c2:c5:94:b2:e5:2c:0b:c7:5d:01:77:88:07:c2:c3: 3e:36:00:13:74:f2:8b:e5:f2:4f:b2:23:7f:f6:9b:bf:d7:91: f5:29:41:e0:1c:de:02:96:3c:6d:d2:66:87:a2:92:12:2d:4a: 0c:e8:45:27:a0:20:1e:97:0a:10:93:36:34:6b:e3:70:7d:c4: a3:4e:c1:8b:1e:f8:c4:95:4d:e2:b0:be:0b:2f:19:da:8d:7f: 14:08:96:19:60:23:38:c2:99:f8:f2:cd:ac:a5:73:20:4e:db: 99:85:bc:4c:f9:31:2e:b4:76:0d:01:15:d6:ff:90:f4:ec:23: 31:23:df:6a:03:6d:34:ec:fc:43:d2:3a:25:3a:f9:55:b0:20: ea:3a:ed:74:7c:dc:60:26:96:fc:3a:98:02:5e:ab:86:4b:66: bd:87:d8:c8 -----BEGIN CERTIFICATE----- MIIGBTCCBO2gAwIBAgISAZra1MXZ5NkC2R4UjVbqsghtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjUxMjAxMTY1MjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDM1MTFjZGFkMGUyMDY3NmIyOTY3ZjRjMTFjZDExNmIwYTZiOWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3mI6sWW3KgkKw3SMFjcPq5KSuzL uIVM/MZDcl6Wv13dZguLJRw2xGEleEXGPHPvmQDLLiUNEG6vTu1uEmlyZcdCMrOZ qGjNnm0UohdL65JU2DGw7dVcM/tDBsNLP78oxm0U3KRAz/ez50Z7n8c39hgvrrFf 0iCyTtKE9BdGhq084vvE7lxF28rUlcN9PAsqzhtAIQLDHMeNCiM+ioD8aWmuN9T7 kU/wEdYzqQU1ho/SFKo2q9iS2AsOPQREQSjXb0Mlu7eflpFTnF2RDSDNxOd4Dl6t pcCFmxDR9pXDG9BepccNINPNiHuBDxCLK5zAVAmiKRnyoiw8zGJVVQeBewIDAQAB o4IDETCCAw0wHQYDVR0OBBYEFMA1Ec2tDiBnayln9MEc0Rawprn8MB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvd0RVUnphME9JR2RyS1dmMHdSelJGckNtdWZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBJQYIKwYBBQUHAQcBAf8EggEUMIIBEDCBnwQCAAEwgZgD BAAtCUgwDAMEAC2KSQMEAC2KSgMEAC4RaQMEAFvZTAMEAV6OiDAMAwQAX9YJAwQC X9YIAwQAuSgHAwQAuTrMAwQBuV6kAwQAuWaIAwQAuXV0AwQAuXV3AwQAuci+AwQB ueiqMAwDBAS56VADBAC56VIDBAG56coDBAC5/JADBAHBfLYwDAMEAsF8vAMEAMF8 vgMEAcIksjBsBAIAAjBmAwcAKgRSAABoAwcAKgRSAQACAwcAKgRSAQAEAwcBKgRS AQAGAwcAKgRSAQAJAwcAKgRSAQAQAwcAKgRSAYAYAwcAKgRSAgAAAwUCKgt3gAMF AioMd8ADBQIqDTiAAwcAKg7WBAACMA0GCSqGSIb3DQEBCwUAA4IBAQC1wj5kfqyy YgIllvVBN5EB/2V8/wh5ZNrRiF3a5oVHkCq4Dub4vZx0FxDjSsrtq0ivd29hNnmw CEmhGK+UIwHXUASAngKaaH3VaB359yHS+jnCQsru7ej2pSNvcpjCxZSy5SwLx10B d4gHwsM+NgATdPKL5fJPsiN/9pu/15H1KUHgHN4Cljxt0maHopISLUoM6EUnoCAe lwoQkzY0a+NwfcSjTsGLHvjElU3isL4LLxnajX8UCJYZYCM4wpn48s2spXMgTtuZ hbxM+TEutHYNARXW/5D07CMxI99qA2007PxD0jolOvlVsCDqOu10fNxgJpb8OpgC XquGS2a9h9jI -----END CERTIFICATE-----Generated at Fri Dec 5 21:32:24 2025 by rpki-client