This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/izRNa0oL3e2eX_U7FLdTA8x8d_Y.roa File: izRNa0oL3e2eX_U7FLdTA8x8d_Y.roa (raw, json) Hash identifier: GfiLvxiLmuSXyDoe6/SEEQh4OcwyzJumCewLEz4xWY0= Subject key identifier: 8B:34:4D:6B:4A:0B:DD:ED:9E:5F:F5:3B:14:B7:53:03:CC:7C:77:F6 Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094 Certificate serial: 019B44E09E72F894A43C311867CFC023B58B Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/izRNa0oL3e2eX_U7FLdTA8x8d_Y.roa Signing time: Mon 22 Dec 2025 07:05:29 +0000 ROA not before: Mon 22 Dec 2025 07:05:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211183 IP address blocks: 5.35.124.0/24 maxlen: 24 5.35.125.0/24 maxlen: 24 5.35.126.0/24 maxlen: 24 5.35.127.0/24 maxlen: 24 5.253.62.0/24 maxlen: 24 37.140.241.0/24 maxlen: 24 45.128.204.0/24 maxlen: 24 79.133.181.0/24 maxlen: 24 79.133.182.0/24 maxlen: 24 79.133.183.0/24 maxlen: 24 89.191.225.0/24 maxlen: 24 91.200.84.0/24 maxlen: 24 94.154.11.0/24 maxlen: 24 130.49.143.0/24 maxlen: 24 130.49.146.0/24 maxlen: 24 130.49.153.0/24 maxlen: 24 155.212.245.0/24 maxlen: 24 155.212.246.0/24 maxlen: 24 155.212.247.0/24 maxlen: 24 185.198.152.0/24 maxlen: 24 185.239.50.0/24 maxlen: 24 185.239.51.0/24 maxlen: 24 185.240.103.0/24 maxlen: 24 185.244.51.0/24 maxlen: 24 185.250.44.0/24 maxlen: 24 185.250.46.0/24 maxlen: 24 185.250.47.0/24 maxlen: 24 193.187.96.0/24 maxlen: 24 194.5.78.0/24 maxlen: 24 194.5.79.0/24 maxlen: 24 195.93.252.0/24 maxlen: 24 217.171.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:e0:9e:72:f8:94:a4:3c:31:18:67:cf:c0:23:b5:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094 Validity Not Before: Dec 22 07:05:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8b344d6b4a0bdded9e5ff53b14b75303cc7c77f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c8:d9:91:4f:1a:06:a5:40:c2:27:61:c0:48: 5c:48:a4:f6:43:be:c8:5e:58:c5:c8:2f:a3:0a:3d: 40:dc:68:0a:07:94:74:69:15:1a:60:04:d5:dc:68: ed:98:3c:dc:fc:51:61:43:b2:a0:06:24:bd:d0:99: a6:44:fa:1d:d7:90:27:7b:17:69:c0:11:b0:72:ed: db:03:7f:13:54:cf:df:0e:e5:b3:99:6a:0a:d3:90: 75:c7:1f:f2:3f:6d:f9:2e:63:89:23:ed:97:c4:1c: 8b:cb:f1:98:0b:fb:12:2b:b0:01:a1:d3:5d:7b:60: 84:55:42:61:31:49:7d:00:8f:7a:8c:c9:79:95:ba: 39:51:02:fa:ba:81:d8:18:6d:ff:7c:22:67:15:f9: 91:e5:92:43:c6:04:38:57:a5:5d:98:a1:f4:23:9e: 69:f2:28:32:12:3a:aa:e5:b8:3d:9c:82:cd:45:d0: a6:04:59:c0:6e:1b:3d:98:4f:62:d6:59:58:de:26: 4c:85:cf:12:c1:0e:06:54:b3:b3:95:d6:3d:50:03: 4d:38:c5:af:04:fe:3d:d1:6d:bd:4e:cd:49:5b:8e: c6:32:7c:d4:6c:18:0a:bf:78:ab:86:3c:69:50:84: 74:f5:63:48:56:f2:0b:a0:53:20:ef:a5:d0:bb:6f: 1d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:34:4D:6B:4A:0B:DD:ED:9E:5F:F5:3B:14:B7:53:03:CC:7C:77:F6 X509v3 Authority Key Identifier: keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/izRNa0oL3e2eX_U7FLdTA8x8d_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.35.124.0/22 5.253.62.0/24 37.140.241.0/24 45.128.204.0/24 79.133.181.0-79.133.183.255 89.191.225.0/24 91.200.84.0/24 94.154.11.0/24 130.49.143.0/24 130.49.146.0/24 130.49.153.0/24 155.212.245.0-155.212.247.255 185.198.152.0/24 185.239.50.0/23 185.240.103.0/24 185.244.51.0/24 185.250.44.0/24 185.250.46.0/23 193.187.96.0/24 194.5.78.0/23 195.93.252.0/24 217.171.146.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:7e:ff:01:0a:b5:62:e1:9b:20:89:91:7c:08:cb:2c:cd:d3: 42:6f:06:e3:37:e8:1e:73:14:16:fc:9f:0b:e3:58:64:a5:17: 70:14:26:53:e8:76:af:cb:f9:9c:8a:43:ba:9f:40:96:f3:ba: cb:f9:ee:3c:00:49:e5:84:11:41:49:12:e7:10:8f:26:2e:d7: 27:d8:68:9e:cf:f6:88:28:52:15:ad:f0:b0:4e:ad:05:17:4e: 47:56:80:e4:4c:7f:1a:50:62:06:d4:c0:4a:8b:02:3d:4b:bb: e8:35:9d:1d:88:36:0a:6a:f5:84:15:24:2c:9f:26:00:4d:51: 32:78:8a:07:9a:42:5c:82:c5:bf:bf:98:f5:e6:c8:57:e7:12: ad:53:6a:a5:57:a3:5c:9d:b6:bf:85:6b:74:24:0a:5c:21:24: 09:e5:e4:5d:b3:7a:24:b3:e0:09:91:26:fc:f5:c4:2a:56:22: cf:a8:42:97:3a:9b:53:6c:a3:f9:63:ed:e5:44:2a:04:23:e0: d8:01:66:cc:af:16:6a:dc:27:6b:16:3d:d5:2d:6e:18:1a:f1: 6a:0d:04:b4:dd:0c:86:ac:57:ec:ec:92:5d:d8:c9:52:fe:7c: ef:19:37:cc:d3:52:48:7b:02:0d:6f:cf:2a:8e:21:9a:c7:58: 02:c6:ea:f2 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgISAZtE4J5y+JSkPDEYZ8/AI7WLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYmU2NWFlMjNmMjA3ZmE2OTUyNTVmNTVhOTA3YWMxNjA4 YmUwOTQwHhcNMjUxMjIyMDcwNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjM0NGQ2YjRhMGJkZGVkOWU1ZmY1M2IxNGI3NTMwM2NjN2M3N2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncjZkU8aBqVAwidhwEhcSKT2Q77I XljFyC+jCj1A3GgKB5R0aRUaYATV3GjtmDzc/FFhQ7KgBiS90JmmRPod15Anexdp wBGwcu3bA38TVM/fDuWzmWoK05B1xx/yP235LmOJI+2XxByLy/GYC/sSK7ABodNd e2CEVUJhMUl9AI96jMl5lbo5UQL6uoHYGG3/fCJnFfmR5ZJDxgQ4V6VdmKH0I55p 8igyEjqq5bg9nILNRdCmBFnAbhs9mE9i1llY3iZMhc8SwQ4GVLOzldY9UANNOMWv BP490W29Ts1JW47GMnzUbBgKv3irhjxpUIR09WNIVvILoFMg76XQu28diwIDAQAB o4ICnDCCApgwHQYDVR0OBBYEFIs0TWtKC93tnl/1OxS3UwPMfHf2MB8GA1UdIwQY MBaAFF++Za4j8gf6aVJV9VqQesFgi+CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUt NDkyYWIzNzI2ODlkLzEvaXpSTmEwb0wzZTJlWF9VN0ZMZFRBOHg4ZF9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUtNDkyYWIzNzI2ODlk LzEvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGxBggrBgEFBQcBBwEB/wSBoTCBnjCBmwQCAAEwgZQDBAIF I3wDBAAF/T4DBAAljPEDBAAtgMwwDAMEAE+FtQMEA0+FsAMEAFm/4QMEAFvIVAME AF6aCwMEAIIxjwMEAIIxkgMEAIIxmTAMAwQAm9T1AwQDm9TwAwQAucaYAwQBue8y AwQAufBnAwQAufQzAwQAufosAwQBufouAwQAwbtgAwQBwgVOAwQAw138AwQA2auS MA0GCSqGSIb3DQEBCwUAA4IBAQA/fv8BCrVi4ZsgiZF8CMsszdNCbwbjN+gecxQW /J8L41hkpRdwFCZT6Havy/mcikO6n0CW87rL+e48AEnlhBFBSRLnEI8mLtcn2Gie z/aIKFIVrfCwTq0FF05HVoDkTH8aUGIG1MBKiwI9S7voNZ0diDYKavWEFSQsnyYA TVEyeIoHmkJcgsW/v5j15shX5xKtU2qlV6Ncnba/hWt0JApcISQJ5eRds3oks+AJ kSb89cQqViLPqEKXOptTbKP5Y+3lRCoEI+DYAWbMrxZq3CdrFj3VLW4YGvFqDQS0 3QyGrFfs7JJd2MlS/nzvGTfM01JIewINb88qjiGax1gCxury -----END CERTIFICATE-----Generated at Thu Jan 1 16:14:43 2026 by rpki-client