This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/h9Qlw_IPCOVG44730hLRs9oqae8.roa File: h9Qlw_IPCOVG44730hLRs9oqae8.roa (raw, json) Hash identifier: hpwRPqpkAxcdbwoZnK10g+iePcxvO9bNl3ixiL98wYc= Subject key identifier: 87:D4:25:C3:F2:0F:08:E5:46:E3:8E:F7:D2:12:D1:B3:DA:2A:69:EF Certificate issuer: /CN=1c6c48cccce321ec18702957b396381a1f1a0410 Certificate serial: 019B353ED81ADB0EB99247FA0A94A784B12E Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/h9Qlw_IPCOVG44730hLRs9oqae8.roa Signing time: Fri 19 Dec 2025 06:14:29 +0000 ROA not before: Fri 19 Dec 2025 06:14:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48642 IP address blocks: 5.43.128.0/19 maxlen: 19 5.199.192.0/19 maxlen: 19 45.131.56.0/22 maxlen: 22 46.36.0.0/19 maxlen: 19 82.112.32.0/19 maxlen: 19 88.218.212.0/22 maxlen: 22 91.108.168.0/21 maxlen: 21 91.211.20.0/22 maxlen: 22 91.227.50.0/23 maxlen: 23 91.231.196.0/22 maxlen: 22 93.90.96.0/20 maxlen: 20 94.230.128.0/20 maxlen: 20 94.230.142.0/23 maxlen: 23 109.74.160.0/20 maxlen: 20 134.255.128.0/19 maxlen: 19 185.2.104.0/22 maxlen: 22 185.59.56.0/22 maxlen: 22 185.60.212.0/22 maxlen: 22 185.132.28.0/22 maxlen: 22 185.162.204.0/22 maxlen: 22 185.201.88.0/22 maxlen: 22 185.204.156.0/22 maxlen: 22 185.214.252.0/22 maxlen: 22 185.229.192.0/22 maxlen: 22 185.252.228.0/22 maxlen: 22 193.46.244.0/22 maxlen: 22 193.168.176.0/22 maxlen: 22 194.169.56.0/22 maxlen: 22 195.69.136.0/22 maxlen: 22 217.151.224.0/22 maxlen: 22 217.151.232.0/21 maxlen: 21 2a0a:f940::/32 maxlen: 32 2a0d:b600::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:3e:d8:1a:db:0e:b9:92:47:fa:0a:94:a7:84:b1:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410 Validity Not Before: Dec 19 06:14:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=87d425c3f20f08e546e38ef7d212d1b3da2a69ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:77:21:a1:3a:15:81:86:7e:f9:30:5d:8c:eb: 65:38:3c:ce:90:13:a6:1b:9e:8b:81:78:d8:8b:42: 03:60:7e:b6:61:6a:64:9e:9a:ca:6d:a9:b3:dc:2e: b9:d4:4c:e5:33:73:cb:24:90:67:4c:04:c8:da:a2: 1f:9a:f7:7a:42:12:9c:e5:d9:45:c8:36:03:7d:2f: d4:9b:22:f3:1c:3f:c8:a3:81:bf:f6:72:57:81:66: 17:02:5d:01:8f:a8:dd:f2:e0:82:a6:66:31:39:9a: 9e:f6:cc:5c:84:ff:1e:9c:66:fa:fe:69:71:75:76: ac:6e:9a:3d:98:4c:c0:db:d5:f6:63:79:66:9e:58: d7:8e:75:f7:d0:2f:5d:57:be:54:f6:65:b8:3a:c4: 79:94:a5:c1:5d:1c:ca:3f:5e:41:b1:48:a1:b9:c3: d2:46:67:49:e7:3e:b6:cc:77:ce:27:c4:7e:a9:89: f2:2d:f4:17:55:88:fa:b1:d4:b3:79:53:d8:38:76: c4:89:7d:fb:43:d5:b1:b6:5f:d0:c7:14:5c:d6:32: 2d:da:6d:72:02:9c:74:c8:f5:8f:51:4b:bb:1d:f3: 3a:43:e5:90:f5:3b:13:2c:4e:7f:90:b0:a9:a3:5c: 73:aa:97:23:e7:1f:7b:27:59:51:c6:5e:92:9d:67: 7c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D4:25:C3:F2:0F:08:E5:46:E3:8E:F7:D2:12:D1:B3:DA:2A:69:EF X509v3 Authority Key Identifier: keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/h9Qlw_IPCOVG44730hLRs9oqae8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.43.128.0/19 5.199.192.0/19 45.131.56.0/22 46.36.0.0/19 82.112.32.0/19 88.218.212.0/22 91.108.168.0/21 91.211.20.0/22 91.227.50.0/23 91.231.196.0/22 93.90.96.0/20 94.230.128.0/20 109.74.160.0/20 134.255.128.0/19 185.2.104.0/22 185.59.56.0/22 185.60.212.0/22 185.132.28.0/22 185.162.204.0/22 185.201.88.0/22 185.204.156.0/22 185.214.252.0/22 185.229.192.0/22 185.252.228.0/22 193.46.244.0/22 193.168.176.0/22 194.169.56.0/22 195.69.136.0/22 217.151.224.0/22 217.151.232.0/21 IPv6: 2a0a:f940::/32 2a0d:b600::/29 Signature Algorithm: sha256WithRSAEncryption 0f:5c:45:94:41:43:20:0e:d8:8f:1c:6d:e1:2c:20:f9:d4:bf: 5c:ee:f0:88:45:37:c2:91:9a:79:b7:1e:ce:38:a0:d6:bc:8e: de:6c:72:5a:91:7e:67:f6:93:a8:f6:f9:46:53:e9:fd:25:b7: 2a:1c:0e:d0:70:95:45:7f:0a:cc:13:f0:a6:e0:ff:43:10:a5: ed:27:3e:a6:c9:7a:a8:d5:41:5a:00:8f:ee:2e:b0:4e:7b:58: 70:60:ba:4e:d5:37:08:9e:60:e3:da:28:43:21:7b:4f:8f:69: 07:f9:64:67:cf:19:51:c1:80:1a:9b:5c:b7:9c:8a:9e:46:5a: 18:36:23:87:f2:2f:f8:67:55:1b:0d:8b:6b:50:6e:85:f8:85: ac:16:f8:f6:ff:59:19:33:5d:37:f1:d2:b8:f1:e1:ad:03:91: a7:cc:57:3d:d2:d4:d4:09:77:9f:15:8c:80:f8:85:f2:b8:3b: 75:b4:f8:3f:95:77:3f:a0:23:c3:c6:f7:cd:3f:e4:a1:63:40: cb:a7:9e:25:b5:8d:52:af:5a:43:a4:c2:7b:cb:93:25:96:d8: c8:ed:68:0f:9b:93:00:c2:3d:cb:87:52:ce:3e:7b:95:30:a6: 1f:94:9c:ec:69:43:ea:4b:2a:0a:3a:b1:9b:ba:c2:2d:48:18: 12:3c:3d:9f -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZs1Ptga2w65kkf6CpSnhLEuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNmM0OGNjY2NlMzIxZWMxODcwMjk1N2IzOTYzODFhMWYx YTA0MTAwHhcNMjUxMjE5MDYxNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2Q0MjVjM2YyMGYwOGU1NDZlMzhlZjdkMjEyZDFiM2RhMmE2OWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynchoToVgYZ++TBdjOtlODzOkBOm G56LgXjYi0IDYH62YWpknprKbamz3C651EzlM3PLJJBnTATI2qIfmvd6QhKc5dlF yDYDfS/UmyLzHD/Io4G/9nJXgWYXAl0Bj6jd8uCCpmYxOZqe9sxchP8enGb6/mlx dXasbpo9mEzA29X2Y3lmnljXjnX30C9dV75U9mW4OsR5lKXBXRzKP15BsUihucPS RmdJ5z62zHfOJ8R+qYnyLfQXVYj6sdSzeVPYOHbEiX37Q9Wxtl/QxxRc1jIt2m1y Apx0yPWPUUu7HfM6Q+WQ9TsTLE5/kLCpo1xzqpcj5x97J1lRxl6SnWd8vQIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFIfUJcPyDwjlRuOO99IS0bPaKmnvMB8GA1UdIwQY MBaAFBxsSMzM4yHsGHApV7OWOBofGgQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEd4SXpNempJZXdZY0NsWHM1WTRHaDhhQkJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84ZTRlNjgtYmQyYS00ZGMyLWFhZTYt YTA1NjBhYzgyYmE3LzEvaDlRbHdfSVBDT1ZHNDQ3MzBoTFJzOW9xYWU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS84ZTRlNjgtYmQyYS00ZGMyLWFhZTYtYTA1NjBhYzgyYmE3 LzEvSEd4SXpNempJZXdZY0NsWHM1WTRHaDhhQkJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHnBggrBgEFBQcBBwEB/wSB1zCB1DCBuwQCAAEwgbQDBAUF K4ADBAUFx8ADBAItgzgDBAUuJAADBAVScCADBAJY2tQDBANbbKgDBAJb0xQDBAFb 4zIDBAJb58QDBARdWmADBARe5oADBARtSqADBAWG/4ADBAK5AmgDBAK5OzgDBAK5 PNQDBAK5hBwDBAK5oswDBAK5yVgDBAK5zJwDBAK51vwDBAK55cADBAK5/OQDBALB LvQDBALBqLADBALCqTgDBALDRYgDBALZl+ADBAPZl+gwFAQCAAIwDgMFACoK+UAD BQMqDbYAMA0GCSqGSIb3DQEBCwUAA4IBAQAPXEWUQUMgDtiPHG3hLCD51L9c7vCI RTfCkZp5tx7OOKDWvI7ebHJakX5n9pOo9vlGU+n9JbcqHA7QcJVFfwrME/Cm4P9D EKXtJz6myXqo1UFaAI/uLrBOe1hwYLpO1TcInmDj2ihDIXtPj2kH+WRnzxlRwYAa m1y3nIqeRloYNiOH8i/4Z1UbDYtrUG6F+IWsFvj2/1kZM1038dK48eGtA5GnzFc9 0tTUCXefFYyA+IXyuDt1tPg/lXc/oCPDxvfNP+ShY0DLp54ltY1Sr1pDpMJ7y5Ml ltjI7WgPm5MAwj3Lh1LOPnuVMKYflJzsaUPqSyoKOrGbusItSBgSPD2f -----END CERTIFICATE-----Generated at Sat Dec 20 01:53:30 2025 by rpki-client