This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/57CneAvcALQN_qKVSFB0umGk8Zs.roa File: 57CneAvcALQN_qKVSFB0umGk8Zs.roa (raw, json) Hash identifier: T3AfqkPpGI4M4NySlRwZvEXvmIx5GO4wzfM3DMeSYyk= Subject key identifier: E7:B0:A7:78:0B:DC:00:B4:0D:FE:A2:95:48:50:74:BA:61:A4:F1:9B Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb Certificate serial: 019B0D3F9740CBFD9BE9AE0AFE32B99E6370 Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/57CneAvcALQN_qKVSFB0umGk8Zs.roa Signing time: Thu 11 Dec 2025 11:50:29 +0000 ROA not before: Thu 11 Dec 2025 11:50:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13287 IP address blocks: 109.234.80.0/24 maxlen: 24 109.234.81.0/24 maxlen: 24 109.234.82.0/23 maxlen: 23 109.234.82.0/24 maxlen: 24 109.234.84.0/24 maxlen: 24 109.234.85.0/24 maxlen: 24 109.234.86.0/24 maxlen: 24 109.234.87.0/24 maxlen: 24 185.19.68.0/22 maxlen: 22 185.33.66.0/24 maxlen: 24 185.33.67.0/24 maxlen: 24 185.111.184.0/22 maxlen: 22 185.111.184.0/24 maxlen: 24 185.111.185.0/24 maxlen: 24 213.162.192.0/24 maxlen: 24 213.162.193.0/24 maxlen: 24 213.162.195.0/24 maxlen: 24 213.162.196.0/22 maxlen: 24 213.162.197.0/24 maxlen: 24 213.162.199.0/24 maxlen: 24 213.162.200.0/22 maxlen: 22 213.162.204.0/24 maxlen: 24 213.162.205.0/24 maxlen: 24 213.162.206.0/24 maxlen: 24 213.162.207.0/24 maxlen: 24 213.162.208.0/23 maxlen: 23 213.162.210.0/24 maxlen: 24 213.162.211.0/24 maxlen: 24 213.162.212.0/24 maxlen: 24 213.162.213.0/24 maxlen: 24 213.162.214.0/24 maxlen: 24 213.162.215.0/24 maxlen: 24 213.162.216.0/22 maxlen: 22 213.162.217.0/24 maxlen: 24 213.162.218.0/24 maxlen: 24 213.162.219.0/24 maxlen: 24 213.162.220.0/24 maxlen: 24 213.162.221.0/24 maxlen: 24 2a02:23a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:3f:97:40:cb:fd:9b:e9:ae:0a:fe:32:b9:9e:63:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb Validity Not Before: Dec 11 11:50:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e7b0a7780bdc00b40dfea295485074ba61a4f19b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a2:c8:fb:b5:65:17:95:41:e4:95:77:08:f3: 23:ec:d6:56:f1:48:f7:6c:4e:21:fa:b8:bb:d1:a8: 69:26:de:76:03:51:22:fb:ae:ad:af:98:d6:89:52: 01:2f:9e:28:1e:6c:77:f5:89:59:50:e5:34:cd:6d: 7d:6d:fa:a0:4d:0f:c7:46:92:92:aa:ae:ca:3a:62: f2:9c:5a:fe:d0:66:42:42:65:a0:37:58:8c:f3:6d: 69:7b:b2:17:4d:8f:b8:9a:d8:b2:a8:e4:44:62:12: 6d:74:69:c4:b0:2a:f9:d7:98:17:50:0e:9a:b7:b2: 12:27:1c:f6:5b:38:e2:39:7e:a0:f8:3d:90:53:aa: f6:69:f9:2b:0a:f1:67:6b:a7:40:a5:ef:76:de:39: e5:11:e7:4e:81:a4:6b:ab:26:44:4e:b9:2a:4d:bc: 01:6c:a3:ba:de:07:2a:7f:b7:4a:9f:b1:67:4b:2b: dd:c8:0f:ae:1c:0f:88:4b:b6:38:97:80:d8:6a:3f: a4:5f:97:1b:51:d9:76:93:ed:54:ca:91:59:2d:2d: 56:11:b0:17:25:21:cf:b7:19:c9:e3:f0:89:06:fe: e1:30:5f:8b:02:e4:f3:ff:80:02:1e:52:f5:99:31: 46:42:8a:2a:f7:39:ef:c8:cd:9a:47:da:b5:15:fd: ab:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B0:A7:78:0B:DC:00:B4:0D:FE:A2:95:48:50:74:BA:61:A4:F1:9B X509v3 Authority Key Identifier: keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/57CneAvcALQN_qKVSFB0umGk8Zs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.234.80.0/21 185.19.68.0/22 185.33.66.0/23 185.111.184.0/22 213.162.192.0/23 213.162.195.0-213.162.221.255 IPv6: 2a02:23a0::/32 Signature Algorithm: sha256WithRSAEncryption 0c:cc:5b:67:b2:28:f4:c4:43:d3:f8:18:a4:76:ee:80:34:55: aa:4b:01:3c:2d:7d:6e:90:23:88:48:b6:d3:ca:bf:8c:6e:a9: fa:58:66:03:c8:b1:d1:af:70:cd:c6:9a:c3:2e:73:68:61:5d: c5:b6:43:63:72:86:60:66:06:db:c6:5b:8d:b1:16:14:16:09: e9:3f:51:25:f2:7e:15:79:13:20:00:97:c3:89:70:c0:7e:45: a1:01:9a:ce:ff:48:51:cc:39:93:c9:d1:99:09:69:32:e5:83: 65:a3:a5:05:81:78:9a:c9:c0:d4:85:a9:f4:06:6e:9b:5f:86: 2e:04:bd:1d:82:4b:7e:0b:ff:4c:28:7e:65:b9:45:db:5b:0d: c5:ee:ad:3c:bf:58:1f:d9:03:ad:73:9e:de:fb:d1:fb:ba:c1: 87:1a:12:43:7e:e4:55:1d:1f:b8:0c:83:f9:e8:1a:3a:cc:a9: f3:0b:4f:9b:46:81:f6:ce:7f:27:27:bd:40:6f:85:50:a1:ff: 0b:a8:09:2f:0e:85:c0:25:db:6a:16:3b:04:b8:48:44:5c:7d: 74:98:b6:41:06:53:da:f1:f8:1c:d9:fb:dd:7f:8a:f0:05:22: 28:d5:d0:cd:9a:fc:10:19:ac:6e:37:12:a6:dd:bb:e8:ff:90: 07:f4:38:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgISAZsNP5dAy/2b6a4K/jK5nmNwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNTRmZTgzMWI2YTcxOWY0MmU2Yzg0ODZmZDAzYjU1MGJl NzYxZmIwHhcNMjUxMjExMTE1MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2IwYTc3ODBiZGMwMGI0MGRmZWEyOTU0ODUwNzRiYTYxYTRmMTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKLI+7VlF5VB5JV3CPMj7NZW8Uj3 bE4h+ri70ahpJt52A1Ei+66tr5jWiVIBL54oHmx39YlZUOU0zW19bfqgTQ/HRpKS qq7KOmLynFr+0GZCQmWgN1iM821pe7IXTY+4mtiyqOREYhJtdGnEsCr515gXUA6a t7ISJxz2WzjiOX6g+D2QU6r2afkrCvFna6dApe923jnlEedOgaRrqyZETrkqTbwB bKO63gcqf7dKn7FnSyvdyA+uHA+IS7Y4l4DYaj+kX5cbUdl2k+1UypFZLS1WEbAX JSHPtxnJ4/CJBv7hMF+LAuTz/4ACHlL1mTFGQooq9znvyM2aR9q1Ff2rGwIDAQAB o4ICPjCCAjowHQYDVR0OBBYEFOewp3gL3AC0Df6ilUhQdLphpPGbMB8GA1UdIwQY MBaAFKtU/oMbanGfQubISG/QO1UL52H7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS81ZWFhYTctMzEwNy00MjY4LWFhZDYt NmZkOTc4OTIwNWJhLzEvNTdDbmVBdmNBTFFOX3FLVlNGQjB1bUdrOFpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS81ZWFhYTctMzEwNy00MjY4LWFhZDYtNmZkOTc4OTIwNWJh LzEvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAyBAIAATAsAwQDbepQAwQC uRNEAwQBuSFCAwQCuW+4AwQB1aLAMAwDBADVosMDBAHVotwwDQQCAAIwBwMFACoC I6AwDQYJKoZIhvcNAQELBQADggEBAAzMW2eyKPTEQ9P4GKR27oA0VapLATwtfW6Q I4hIttPKv4xuqfpYZgPIsdGvcM3GmsMuc2hhXcW2Q2NyhmBmBtvGW42xFhQWCek/ USXyfhV5EyAAl8OJcMB+RaEBms7/SFHMOZPJ0ZkJaTLlg2WjpQWBeJrJwNSFqfQG bptfhi4EvR2CS34L/0wofmW5RdtbDcXurTy/WB/ZA61znt770fu6wYcaEkN+5FUd H7gMg/noGjrMqfMLT5tGgfbOfycnvUBvhVCh/wuoCS8OhcAl22oWOwS4SERcfXSY tkEGU9rx+BzZ+91/ivAFIijV0M2a/BAZrG43Eqbdu+j/kAf0OEk= -----END CERTIFICATE-----Generated at Thu Dec 11 23:25:20 2025 by rpki-client