This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/lM5cW39DEPygwwr7GZhBsWNP-P4.roa File: lM5cW39DEPygwwr7GZhBsWNP-P4.roa (raw, json) Hash identifier: uwfzCL7e7uGyxjb3jZHkU336kB7uQCgHhwNW6MUb9Xo= Subject key identifier: 94:CE:5C:5B:7F:43:10:FC:A0:C3:0A:FB:19:98:41:B1:63:4F:F8:FE Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 019AE3AF38A3177060E0D0817B5C4D21F5BB Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/lM5cW39DEPygwwr7GZhBsWNP-P4.roa Signing time: Wed 03 Dec 2025 10:08:22 +0000 ROA not before: Wed 03 Dec 2025 10:08:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209043 IP address blocks: 5.252.184.0/24 maxlen: 24 5.252.185.0/24 maxlen: 24 45.11.155.0/24 maxlen: 24 45.84.108.0/24 maxlen: 24 45.84.109.0/24 maxlen: 24 45.84.110.0/24 maxlen: 24 45.84.111.0/24 maxlen: 24 45.138.28.0/22 maxlen: 22 139.28.174.0/24 maxlen: 24 141.98.56.0/24 maxlen: 24 141.98.57.0/24 maxlen: 24 141.98.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 07:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:af:38:a3:17:70:60:e0:d0:81:7b:5c:4d:21:f5:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Dec 3 10:08:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=94ce5c5b7f4310fca0c30afb199841b1634ff8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fb:d6:60:e8:fd:fc:af:7e:f7:30:55:ed:b6: ac:62:96:aa:29:8f:7d:13:dc:7e:32:db:47:a6:8e: 77:08:76:a6:53:b2:d4:bb:5e:6f:98:58:fb:7e:0e: 8f:dc:a7:b1:33:92:c5:65:27:24:f4:e8:9e:b8:8f: c3:49:58:b3:1d:dc:8e:25:00:ff:22:2f:11:c3:b8: aa:87:dd:8f:6d:15:23:49:42:20:cb:d5:7f:5a:61: 22:cb:17:b6:03:ff:aa:02:9c:67:25:72:83:ed:cb: 80:07:95:39:ee:af:b5:17:ab:dd:b8:b2:c5:81:8b: 27:8d:8f:c9:0d:13:9b:4c:93:9c:93:16:07:d4:e3: cf:64:ee:fd:b6:98:9c:8a:e7:b0:23:18:81:7d:ba: 09:0a:e9:ce:b6:56:a6:e5:41:8f:30:c8:1b:53:bb: 45:80:0c:9c:13:ad:d8:1d:2c:ec:bb:ab:9a:5c:c3: cc:96:b3:1d:49:2d:fd:49:a3:7a:82:05:90:fc:1a: ee:b0:41:50:77:6b:23:4c:dc:7b:e8:87:75:37:ad: d9:58:f9:b3:a2:1e:10:0d:9c:53:57:c0:12:23:fa: e3:58:3e:a0:20:28:7d:98:48:da:dd:ac:88:fa:ef: 9a:2d:ac:fd:d6:68:ef:ed:27:80:0d:b7:fc:80:a0: 55:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:CE:5C:5B:7F:43:10:FC:A0:C3:0A:FB:19:98:41:B1:63:4F:F8:FE X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/lM5cW39DEPygwwr7GZhBsWNP-P4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.184.0/23 45.11.155.0/24 45.84.108.0/22 45.138.28.0/22 139.28.174.0/24 141.98.56.0/23 141.98.59.0/24 Signature Algorithm: sha256WithRSAEncryption 83:3f:34:3e:08:da:06:70:2e:ba:74:38:40:03:09:5f:ed:50: 08:0f:9d:e9:1b:4a:e6:72:7f:b2:2c:71:66:27:63:41:27:88: 84:56:8a:d2:24:b2:69:38:f6:03:61:8f:6e:e6:bc:ed:53:8f: 38:6c:14:86:f9:a8:3a:b9:a2:8e:15:8d:68:1c:fb:49:70:e3: 45:e1:ed:9c:07:ab:2e:32:6b:ee:8a:06:df:c5:8d:40:0e:24: d4:b5:ff:74:4a:43:46:e7:31:55:11:ed:f4:14:d1:1b:08:52: c3:b8:1a:1c:e8:ad:d0:a7:14:11:81:72:fa:4b:c3:94:42:03: 84:f3:a4:04:e4:44:d8:7b:2c:47:6e:09:73:35:d6:8d:6a:18: 16:18:cd:cf:22:9a:9e:85:89:12:f8:54:ab:61:c1:af:3a:cb: c9:22:5b:4f:e2:77:14:db:b0:9a:fe:ce:74:88:75:71:59:29: 55:5f:07:43:44:5a:a6:db:4b:11:83:f4:d1:50:42:ab:06:55: 72:32:3c:72:85:14:26:62:2b:32:3b:c0:2a:d4:5c:80:31:64: 5d:0a:b0:62:9c:32:ce:4f:f2:4f:9c:7a:04:08:e8:1d:58:34: e7:c9:fa:2a:5b:01:e9:73:8a:7b:c3:20:56:21:fa:b0:79:ea: c2:0c:6a:6a -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZrjrzijF3Bg4NCBe1xNIfW7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjUxMjAzMTAwODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGNlNWM1YjdmNDMxMGZjYTBjMzBhZmIxOTk4NDFiMTYzNGZmOGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovvWYOj9/K9+9zBV7basYpaqKY99 E9x+MttHpo53CHamU7LUu15vmFj7fg6P3KexM5LFZSck9OieuI/DSVizHdyOJQD/ Ii8Rw7iqh92PbRUjSUIgy9V/WmEiyxe2A/+qApxnJXKD7cuAB5U57q+1F6vduLLF gYsnjY/JDRObTJOckxYH1OPPZO79tpiciuewIxiBfboJCunOtlam5UGPMMgbU7tF gAycE63YHSzsu6uaXMPMlrMdSS39SaN6ggWQ/BrusEFQd2sjTNx76Id1N63ZWPmz oh4QDZxTV8ASI/rjWD6gICh9mEja3ayI+u+aLaz91mjv7SeADbf8gKBV/wIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFJTOXFt/QxD8oMMK+xmYQbFjT/j+MB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvbE01Y1czOURFUHlnd3dyN0daaEJzV05QLVA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBBfy4AwQA LQubAwQCLVRsAwQCLYocAwQAixyuAwQBjWI4AwQAjWI7MA0GCSqGSIb3DQEBCwUA A4IBAQCDPzQ+CNoGcC66dDhAAwlf7VAID53pG0rmcn+yLHFmJ2NBJ4iEVorSJLJp OPYDYY9u5rztU484bBSG+ag6uaKOFY1oHPtJcONF4e2cB6suMmvuigbfxY1ADiTU tf90SkNG5zFVEe30FNEbCFLDuBoc6K3QpxQRgXL6S8OUQgOE86QE5ETYeyxHbglz NdaNahgWGM3PIpqehYkS+FSrYcGvOsvJIltP4ncU27Ca/s50iHVxWSlVXwdDRFqm 20sRg/TRUEKrBlVyMjxyhRQmYisyO8Aq1FyAMWRdCrBinDLOT/JPnHoECOgdWDTn yfoqWwHpc4p7wyBWIfqweerCDGpq -----END CERTIFICATE-----Generated at Fri Dec 5 15:37:41 2025 by rpki-client