This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/g-HCwg43gOP2XekDaAD-cD_7090.roa File: g-HCwg43gOP2XekDaAD-cD_7090.roa (raw, json) Hash identifier: Jn45q0K3JSLnPfSEDl4boKCYCQ7bL8Tz9HcRFUZBtsc= Subject key identifier: 83:E1:C2:C2:0E:37:80:E3:F6:5D:E9:03:68:00:FE:70:3F:FB:D3:DD Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e Certificate serial: 019AF9942F886EF94A4B43F2781341C5A6F1 Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/g-HCwg43gOP2XekDaAD-cD_7090.roa Signing time: Sun 07 Dec 2025 16:10:29 +0000 ROA not before: Sun 07 Dec 2025 16:10:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204957 IP address blocks: 5.34.176.0/23 maxlen: 23 5.34.178.0/23 maxlen: 23 45.90.56.0/22 maxlen: 22 46.28.67.0/24 maxlen: 24 46.28.70.0/24 maxlen: 24 62.233.57.0/24 maxlen: 24 82.117.252.0/23 maxlen: 23 82.117.254.0/24 maxlen: 24 82.117.255.0/24 maxlen: 24 82.118.20.0/22 maxlen: 22 85.90.196.0/24 maxlen: 24 85.90.199.0/24 maxlen: 24 195.123.232.0/22 maxlen: 22 195.123.236.0/22 maxlen: 22 195.123.240.0/22 maxlen: 22 195.123.244.0/22 maxlen: 22 195.211.96.0/23 maxlen: 23 195.211.98.0/23 maxlen: 23 217.12.194.0/24 maxlen: 24 217.12.206.0/23 maxlen: 23 217.12.215.0/24 maxlen: 24 2a05:9400::/32 maxlen: 32 2a05:9401::/32 maxlen: 32 2a05:9402::/32 maxlen: 32 2a05:9403::/32 maxlen: 32 2a05:9404::/32 maxlen: 32 2a05:9405::/32 maxlen: 32 2a05:9406::/32 maxlen: 32 2a12:6fc0::/32 maxlen: 32 2a12:6fc1::/32 maxlen: 32 2a12:6fc2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:94:2f:88:6e:f9:4a:4b:43:f2:78:13:41:c5:a6:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e Validity Not Before: Dec 7 16:10:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=83e1c2c20e3780e3f65de9036800fe703ffbd3dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b1:ba:44:2f:a3:e5:fd:4c:15:6a:38:06:25: 48:31:50:72:8e:1c:8f:bc:0b:1d:53:ff:4c:34:a6: 68:59:8c:ed:8a:36:fc:ed:ec:43:2c:ef:d8:36:e0: 4a:cd:b3:24:7a:6d:64:3f:27:a9:2b:04:df:19:e7: b5:9c:39:fd:77:da:fa:0c:94:54:d7:b7:5b:06:88: 71:25:e5:0e:46:e6:66:61:63:e0:22:b5:a7:02:35: dd:c8:a5:ea:23:cf:3f:d3:97:de:fe:b2:4d:17:77: 51:e9:42:72:c0:68:01:59:1a:3f:15:d0:29:81:07: 0e:86:c9:08:50:0e:05:3c:73:6b:ab:23:26:a3:2c: ec:df:11:5f:a9:59:68:03:97:9a:9d:7a:32:4c:6f: 76:30:fa:3a:a4:d8:e6:26:86:53:bc:61:b5:f5:43: 07:ce:40:b0:72:3c:48:69:dd:49:68:bf:80:d5:0e: 5b:01:d9:97:31:2c:68:c1:de:9f:45:0e:c5:d0:8e: e2:a1:fd:66:df:5f:45:14:63:da:70:04:9c:2b:51: 23:25:79:17:f1:1a:db:59:45:7c:af:2c:0f:ff:a3: 16:8f:04:97:27:e7:67:ad:b8:55:45:ff:de:cd:a5: 7d:ad:d1:15:b4:60:c3:20:54:b5:a7:d5:f8:25:8f: 93:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E1:C2:C2:0E:37:80:E3:F6:5D:E9:03:68:00:FE:70:3F:FB:D3:DD X509v3 Authority Key Identifier: keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/g-HCwg43gOP2XekDaAD-cD_7090.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.34.176.0/22 45.90.56.0/22 46.28.67.0/24 46.28.70.0/24 62.233.57.0/24 82.117.252.0/22 82.118.20.0/22 85.90.196.0/24 85.90.199.0/24 195.123.232.0-195.123.247.255 195.211.96.0/22 217.12.194.0/24 217.12.206.0/23 217.12.215.0/24 IPv6: 2a05:9400::-2a05:9406:ffff:ffff:ffff:ffff:ffff:ffff 2a12:6fc0::-2a12:6fc2:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 70:5d:05:46:ed:f0:62:01:b0:70:4a:89:cc:da:74:04:44:31: 5d:44:52:da:df:44:85:8c:89:ad:1f:f6:9b:e7:54:01:33:bd: 0f:72:c0:eb:4b:0f:b7:54:75:8a:50:64:96:bc:84:67:d3:1a: 49:0f:ed:8e:f8:ea:b3:cf:a9:62:13:67:ca:7c:89:be:76:e7: 95:bf:a2:ef:9b:98:08:4e:41:d0:ba:bd:71:6b:2d:00:1c:ff: f8:76:17:da:cd:a1:5b:35:ce:87:a6:0f:ef:0e:49:7d:04:49: 0a:bb:4b:41:59:53:3f:d7:75:dc:31:60:1f:8a:d2:4e:ff:33: a1:14:2b:96:f3:53:15:86:10:0a:a0:91:49:9b:aa:f0:7f:5e: 11:48:33:58:dd:fc:30:d0:d3:30:3c:37:fb:bd:b0:d5:1f:fc: 08:ec:da:b1:15:23:c1:54:92:d5:5a:dc:28:eb:6f:a5:d8:c4: 1c:d0:5e:fb:eb:c7:1b:73:95:cf:e8:58:5d:a3:29:ba:71:dc: 52:f6:34:45:e6:e0:46:cf:83:13:3b:40:6d:48:76:68:2b:f6: 28:b3:0b:08:29:19:7a:9b:dd:2d:9a:e3:cf:2a:ec:d0:8c:01: 25:4c:9d:58:72:03:6a:3a:91:c8:ee:98:d1:49:a1:3f:72:63: 0c:51:19:13 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgISAZr5lC+IbvlKS0PyeBNBxabxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZDk4ZThmZWM2ODA3NzVhMTU3MjY2ZTBjNmI3OGIxNDFh MzRmNWUwHhcNMjUxMjA3MTYxMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2UxYzJjMjBlMzc4MGUzZjY1ZGU5MDM2ODAwZmU3MDNmZmJkM2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrG6RC+j5f1MFWo4BiVIMVByjhyP vAsdU/9MNKZoWYztijb87exDLO/YNuBKzbMkem1kPyepKwTfGee1nDn9d9r6DJRU 17dbBohxJeUORuZmYWPgIrWnAjXdyKXqI88/05fe/rJNF3dR6UJywGgBWRo/FdAp gQcOhskIUA4FPHNrqyMmoyzs3xFfqVloA5eanXoyTG92MPo6pNjmJoZTvGG19UMH zkCwcjxIad1JaL+A1Q5bAdmXMSxowd6fRQ7F0I7iof1m319FFGPacAScK1EjJXkX 8RrbWUV8rywP/6MWjwSXJ+dnrbhVRf/ezaV9rdEVtGDDIFS1p9X4JY+TawIDAQAB o4ICiTCCAoUwHQYDVR0OBBYEFIPhwsION4Dj9l3pA2gA/nA/+9PdMB8GA1UdIwQY MBaAFJTZjo/saAd1oVcmbgxreLFBo09eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzkt ODdkMTdkZjc0YzdlLzEvZy1IQ3dnNDNnT1AyWGVrRGFBRC1jRF83MDkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzktODdkMTdkZjc0Yzdl LzEvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGeBggrBgEFBQcBBwEB/wSBjjCBizBiBAIAATBcAwQCBSKw AwQCLVo4AwQALhxDAwQALhxGAwQAPuk5AwQCUnX8AwQCUnYUAwQAVVrEAwQAVVrH MAwDBAPDe+gDBAPDe/ADBALD02ADBADZDMIDBAHZDM4DBADZDNcwJQQCAAIwHzAN AwQCKgWUAwUAKgWUBjAOAwUGKhJvwAMFACoSb8IwDQYJKoZIhvcNAQELBQADggEB AHBdBUbt8GIBsHBKiczadAREMV1EUtrfRIWMia0f9pvnVAEzvQ9ywOtLD7dUdYpQ ZJa8hGfTGkkP7Y746rPPqWITZ8p8ib5255W/ou+bmAhOQdC6vXFrLQAc//h2F9rN oVs1zoemD+8OSX0ESQq7S0FZUz/XddwxYB+K0k7/M6EUK5bzUxWGEAqgkUmbqvB/ XhFIM1jd/DDQ0zA8N/u9sNUf/Ajs2rEVI8FUktVa3Cjrb6XYxBzQXvvrxxtzlc/o WF2jKbpx3FL2NEXm4EbPgxM7QG1Idmgr9iizCwgpGXqb3S2a488q7NCMASVMnVhy A2o6kcjumNFJoT9yYwxRGRM= -----END CERTIFICATE-----Generated at Thu Dec 11 19:32:23 2025 by rpki-client