This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/SXhe4rP3vlGTN1HmqiPt6-7F4UA.roa File: SXhe4rP3vlGTN1HmqiPt6-7F4UA.roa (raw, json) Hash identifier: hq9k9H+DZDNkXqrxIZRW2srgyTDA0B51MAjaksVaNxQ= Subject key identifier: 49:78:5E:E2:B3:F7:BE:51:93:37:51:E6:AA:23:ED:EB:EE:C5:E1:40 Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019AA0A4A2A51A1923829858562273898E71 Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/SXhe4rP3vlGTN1HmqiPt6-7F4UA.roa Signing time: Thu 20 Nov 2025 09:42:15 +0000 ROA not before: Thu 20 Nov 2025 09:42:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214143 IP address blocks: 144.56.8.0/24 maxlen: 24 144.56.30.0/24 maxlen: 24 144.56.43.0/24 maxlen: 24 144.56.45.0/24 maxlen: 24 144.56.46.0/24 maxlen: 24 144.56.47.0/24 maxlen: 24 144.56.48.0/24 maxlen: 24 144.56.52.0/24 maxlen: 24 144.56.53.0/24 maxlen: 24 144.56.73.0/24 maxlen: 24 144.56.75.0/24 maxlen: 24 144.56.77.0/24 maxlen: 24 144.56.82.0/24 maxlen: 24 144.56.87.0/24 maxlen: 24 144.56.92.0/24 maxlen: 24 144.56.96.0/24 maxlen: 24 144.56.104.0/24 maxlen: 24 144.56.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:a4:a2:a5:1a:19:23:82:98:58:56:22:73:89:8e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Nov 20 09:42:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=49785ee2b3f7be51933751e6aa23edebeec5e140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:26:e9:e0:0c:bf:be:7e:0a:d8:91:cf:43:c4: 23:a1:26:7a:4d:71:7d:a9:60:36:b4:06:c7:38:1d: eb:bd:47:4e:3f:28:84:90:61:6f:cb:72:de:5d:25: 2e:8b:1b:ea:1a:f0:a1:65:46:b6:6d:fc:7d:8c:39: ee:01:a5:1e:69:db:bd:74:f2:4f:f5:40:3d:5c:a5: 0f:92:96:ff:4e:ec:20:7a:78:c0:8d:1c:4f:36:b7: 83:fa:1c:39:f1:8a:5b:c3:8c:fa:09:ae:9b:93:17: 59:8a:18:a7:39:26:e6:ed:fb:58:c7:1e:c8:f1:1f: 9d:fe:29:34:79:df:f8:77:e3:17:b4:10:df:2a:5a: 03:ac:51:ec:dd:ea:f7:72:90:b5:e8:e1:3c:b1:d7: 65:5a:05:f4:41:4a:9c:e6:e2:3c:06:94:e3:b6:c5: f0:19:ea:d5:ce:b8:15:95:be:61:2d:55:ff:bf:75: a4:09:79:23:25:3c:83:fa:da:1e:b9:61:24:11:38: aa:2b:6e:4c:4e:1f:d7:b8:91:fd:a4:7b:a4:32:ee: 66:99:f1:67:a8:64:60:94:94:b4:96:79:72:4b:5f: 90:d8:c8:7d:4a:a4:1e:1a:1c:86:76:0e:ee:ec:f5: 2c:a1:32:fa:a2:3c:49:6d:4d:90:1f:9a:51:57:6e: 51:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:78:5E:E2:B3:F7:BE:51:93:37:51:E6:AA:23:ED:EB:EE:C5:E1:40 X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/SXhe4rP3vlGTN1HmqiPt6-7F4UA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.8.0/24 144.56.30.0/24 144.56.43.0/24 144.56.45.0-144.56.48.255 144.56.52.0/23 144.56.73.0/24 144.56.75.0/24 144.56.77.0/24 144.56.82.0/24 144.56.87.0/24 144.56.92.0/24 144.56.96.0/24 144.56.104.0/24 144.56.123.0/24 Signature Algorithm: sha256WithRSAEncryption 25:4d:ce:97:10:b8:17:19:02:0a:2b:97:aa:02:4b:c3:e5:8e: 41:7a:da:58:69:5c:de:5d:c0:d4:7b:a0:52:41:f4:d5:9f:8f: a3:be:20:84:81:38:83:68:94:74:1c:f8:38:cb:d8:3d:dc:e9: 94:5d:69:8e:53:51:e7:c5:0d:41:9c:e4:6c:01:ca:de:50:6f: 65:5f:11:cd:7c:28:52:8c:df:b2:fe:57:95:f4:c3:fd:a3:b3: 65:ba:b5:97:1e:fa:f8:ae:e1:78:fb:d2:73:0c:5c:b9:53:0a: 4f:0e:b0:9a:af:49:83:6a:ad:2a:45:87:b5:c2:c5:a6:e6:5c: dd:e3:99:ee:a1:97:10:f4:13:26:39:cc:2c:04:89:a6:48:82: 13:6c:0b:eb:c3:f1:19:39:77:44:10:f9:10:de:8d:5c:a1:fe: 6c:7f:16:7e:05:b4:50:91:86:12:c7:4f:0f:1e:ee:d9:d2:3f: 24:1f:a3:f0:b9:93:a0:7b:d6:99:14:38:df:78:cc:48:28:4b: de:10:21:16:03:b1:cd:63:29:54:a9:81:d9:bd:d7:c7:f3:d1: b3:e5:59:e1:bf:f0:d9:08:8c:7c:4a:7f:6d:41:4f:35:e8:01: 69:a8:00:2a:62:0a:c5:96:d4:e4:c5:54:0f:f5:2f:bf:d7:bb: 43:78:ea:1a -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgISAZqgpKKlGhkjgphYViJziY5xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjUxMTIwMDk0MjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTc4NWVlMmIzZjdiZTUxOTMzNzUxZTZhYTIzZWRlYmVlYzVlMTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ybp4Ay/vn4K2JHPQ8QjoSZ6TXF9 qWA2tAbHOB3rvUdOPyiEkGFvy3LeXSUuixvqGvChZUa2bfx9jDnuAaUeadu9dPJP 9UA9XKUPkpb/TuwgenjAjRxPNreD+hw58Ypbw4z6Ca6bkxdZihinOSbm7ftYxx7I 8R+d/ik0ed/4d+MXtBDfKloDrFHs3er3cpC16OE8sddlWgX0QUqc5uI8BpTjtsXw GerVzrgVlb5hLVX/v3WkCXkjJTyD+toeuWEkETiqK25MTh/XuJH9pHukMu5mmfFn qGRglJS0lnlyS1+Q2Mh9SqQeGhyGdg7u7PUsoTL6ojxJbU2QH5pRV25ROQIDAQAB o4ICXzCCAlswHQYDVR0OBBYEFEl4XuKz975RkzdR5qoj7evuxeFAMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvU1hoZTRyUDN2bEdUTjFIbXFpUHQ2LTdGNFVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcAwQAkDgIAwQA kDgeAwQAkDgrMAwDBACQOC0DBACQODADBAGQODQDBACQOEkDBACQOEsDBACQOE0D BACQOFIDBACQOFcDBACQOFwDBACQOGADBACQOGgDBACQOHswDQYJKoZIhvcNAQEL BQADggEBACVNzpcQuBcZAgorl6oCS8PljkF62lhpXN5dwNR7oFJB9NWfj6O+IISB OINolHQc+DjL2D3c6ZRdaY5TUefFDUGc5GwByt5Qb2VfEc18KFKM37L+V5X0w/2j s2W6tZce+viu4Xj70nMMXLlTCk8OsJqvSYNqrSpFh7XCxabmXN3jme6hlxD0EyY5 zCwEiaZIghNsC+vD8Rk5d0QQ+RDejVyh/mx/Fn4FtFCRhhLHTw8e7tnSPyQfo/C5 k6B71pkUON94zEgoS94QIRYDsc1jKVSpgdm918fz0bPlWeG/8NkIjHxKf21BTzXo AWmoACpiCsWW1OTFVA/1L7/Xu0N46ho= -----END CERTIFICATE-----Generated at Fri Dec 5 12:47:08 2025 by rpki-client