This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/c930EprhnZN7cHXpxEPDmkxAFWE.roa File: c930EprhnZN7cHXpxEPDmkxAFWE.roa (raw, json) Hash identifier: I5pKgo4EnECDdKNPyg4GGz0ZsDtoM6WEh8x6XGTYns4= Subject key identifier: 73:DD:F4:12:9A:E1:9D:93:7B:70:75:E9:C4:43:C3:9A:4C:40:15:61 Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019B4036C4E65280EE1B9AC223F737BFA5FB Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/c930EprhnZN7cHXpxEPDmkxAFWE.roa Signing time: Sun 21 Dec 2025 09:21:29 +0000 ROA not before: Sun 21 Dec 2025 09:21:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 144.56.7.0/24 maxlen: 24 144.56.9.0/24 maxlen: 24 144.56.13.0/24 maxlen: 24 144.56.17.0/24 maxlen: 24 144.56.20.0/24 maxlen: 24 144.56.24.0/24 maxlen: 24 144.56.27.0/24 maxlen: 24 144.56.29.0/24 maxlen: 24 144.56.33.0/24 maxlen: 24 144.56.34.0/24 maxlen: 24 144.56.35.0/24 maxlen: 24 144.56.40.0/24 maxlen: 24 144.56.41.0/24 maxlen: 24 144.56.71.0/24 maxlen: 24 144.56.72.0/24 maxlen: 24 144.56.76.0/24 maxlen: 24 144.56.80.0/24 maxlen: 24 144.56.85.0/24 maxlen: 24 144.56.94.0/24 maxlen: 24 144.56.95.0/24 maxlen: 24 144.56.97.0/24 maxlen: 24 144.56.102.0/24 maxlen: 24 144.56.105.0/24 maxlen: 24 144.56.125.0/24 maxlen: 24 144.56.128.0/24 maxlen: 24 144.56.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 00:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:36:c4:e6:52:80:ee:1b:9a:c2:23:f7:37:bf:a5:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Dec 21 09:21:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=73ddf4129ae19d937b7075e9c443c39a4c401561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d1:c4:bc:1f:3d:d1:9f:9f:0c:56:e0:37:e9: 6e:9e:ed:4f:b5:d8:1b:f6:85:be:1c:df:dc:fb:d4: 60:17:24:e7:c1:98:19:07:33:ee:3d:8c:c6:45:13: 13:d1:07:45:53:ab:48:52:e8:91:9c:f4:b7:cc:0e: 63:53:a6:10:80:e2:30:26:0e:63:b8:39:17:79:bf: b4:50:6b:09:fa:18:5e:78:e9:ce:a9:3b:33:4f:40: 2c:6b:a2:77:97:cc:da:f2:57:4b:4d:39:c0:48:cd: 82:1e:bf:12:93:2f:1e:58:f6:c7:40:6f:60:95:e3: 63:27:87:02:97:99:a2:5e:ca:a9:0f:9a:75:59:9d: 3c:35:1a:ad:44:4f:11:6f:ea:a0:ff:8a:4f:56:ac: 80:6f:cf:e7:e3:43:7b:c8:37:a1:49:53:87:f5:5f: 89:7d:1a:cb:03:35:94:2a:d6:80:39:c2:4d:a8:01: 6f:90:21:43:4b:6f:a1:50:6f:9c:4c:30:16:df:21: 9b:36:ff:83:38:28:88:7a:97:cc:26:bb:26:8b:8e: 35:90:7c:36:c4:86:12:1b:78:1c:98:23:38:ae:78: 62:72:7c:b4:45:4e:47:1a:95:28:6b:1c:d3:f9:bf: 94:9d:52:e8:fc:0e:51:f2:c4:56:c2:ab:e0:02:f3: d8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DD:F4:12:9A:E1:9D:93:7B:70:75:E9:C4:43:C3:9A:4C:40:15:61 X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/c930EprhnZN7cHXpxEPDmkxAFWE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.7.0/24 144.56.9.0/24 144.56.13.0/24 144.56.17.0/24 144.56.20.0/24 144.56.24.0/24 144.56.27.0/24 144.56.29.0/24 144.56.33.0-144.56.35.255 144.56.40.0/23 144.56.71.0-144.56.72.255 144.56.76.0/24 144.56.80.0/24 144.56.85.0/24 144.56.94.0/23 144.56.97.0/24 144.56.102.0/24 144.56.105.0/24 144.56.125.0/24 144.56.128.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:d1:8b:03:6c:f0:8c:f3:53:b3:14:b1:56:56:db:8d:02:6d: 85:75:40:37:4b:d4:3d:ba:b0:8f:2b:f1:b7:a3:51:a1:ba:c8: 80:eb:23:88:a9:dd:3a:23:c2:ce:34:99:8b:ce:45:f4:65:51: 1b:b7:3e:08:12:67:6b:c0:97:00:b1:2b:b6:4e:ec:ac:18:83: 18:57:86:b7:b3:cd:1b:db:09:63:b2:53:3c:1f:43:dd:c5:4c: 16:a4:dc:23:13:e9:ae:c6:ab:ab:8f:37:80:e0:bb:f7:73:72: 8b:92:56:77:8c:b8:6d:87:f2:e3:0a:d3:64:bc:8e:02:94:cc: 0e:71:b2:d4:ac:ca:f3:37:73:a7:d5:ec:a7:44:aa:dc:32:0b: c0:36:fb:1a:fa:40:fb:e2:f5:45:b6:e0:27:8c:46:e0:bc:80: 1b:59:d8:4b:aa:f2:7c:63:06:b3:36:a9:1c:7a:ed:1c:a5:95: 4a:c5:d3:4b:d0:c7:2b:b4:e8:4b:fe:b3:18:02:a2:42:19:f4: 1c:3f:e1:ba:23:88:f0:3e:13:4d:7f:45:51:2a:da:8c:18:6c: 52:85:8d:f5:49:d2:04:b2:6a:3f:f6:f0:64:49:f7:66:da:bb: 71:d9:c1:ad:3b:8e:81:fe:80:98:3e:6e:33:48:b1:9d:65:48: 5d:4d:43:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZtANsTmUoDuG5rCI/c3v6X7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjUxMjIxMDkyMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2RkZjQxMjlhZTE5ZDkzN2I3MDc1ZTljNDQzYzM5YTRjNDAxNTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39HEvB890Z+fDFbgN+lunu1Ptdgb 9oW+HN/c+9RgFyTnwZgZBzPuPYzGRRMT0QdFU6tIUuiRnPS3zA5jU6YQgOIwJg5j uDkXeb+0UGsJ+hheeOnOqTszT0Asa6J3l8za8ldLTTnASM2CHr8Sky8eWPbHQG9g leNjJ4cCl5miXsqpD5p1WZ08NRqtRE8Rb+qg/4pPVqyAb8/n40N7yDehSVOH9V+J fRrLAzWUKtaAOcJNqAFvkCFDS2+hUG+cTDAW3yGbNv+DOCiIepfMJrsmi441kHw2 xIYSG3gcmCM4rnhicny0RU5HGpUoaxzT+b+UnVLo/A5R8sRWwqvgAvPYPwIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFHPd9BKa4Z2Te3B16cRDw5pMQBVhMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvYzkzMEVwcmhuWk43Y0hYcHhFUERta3hBRldFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGlBggrBgEFBQcBBwEB/wSBlTCBkjCBjwQCAAEwgYgDBACQ OAcDBACQOAkDBACQOA0DBACQOBEDBACQOBQDBACQOBgDBACQOBsDBACQOB0wDAME AJA4IQMEApA4IAMEAZA4KDAMAwQAkDhHAwQAkDhIAwQAkDhMAwQAkDhQAwQAkDhV AwQBkDheAwQAkDhhAwQAkDhmAwQAkDhpAwQAkDh9AwQBkDiAMA0GCSqGSIb3DQEB CwUAA4IBAQBd0YsDbPCM81OzFLFWVtuNAm2FdUA3S9Q9urCPK/G3o1GhusiA6yOI qd06I8LONJmLzkX0ZVEbtz4IEmdrwJcAsSu2TuysGIMYV4a3s80b2wljslM8H0Pd xUwWpNwjE+muxqurjzeA4Lv3c3KLklZ3jLhth/LjCtNkvI4ClMwOcbLUrMrzN3On 1eynRKrcMgvANvsa+kD74vVFtuAnjEbgvIAbWdhLqvJ8YwazNqkceu0cpZVKxdNL 0McrtOhL/rMYAqJCGfQcP+G6I4jwPhNNf0VRKtqMGGxShY31SdIEsmo/9vBkSfdm 2rtx2cGtO46B/oCYPm4zSLGdZUhdTUOl -----END CERTIFICATE-----Generated at Mon Dec 22 08:45:54 2025 by rpki-client