This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/187WgFX_yB1ZxSUCs28tIQ5ufX0.roa File: 187WgFX_yB1ZxSUCs28tIQ5ufX0.roa (raw, json) Hash identifier: 8HSHNHf2A4sOjhCkBxX+db36tVjkl/oUm8lqMuEIBQw= Subject key identifier: D7:CE:D6:80:55:FF:C8:1D:59:C5:25:02:B3:6F:2D:21:0E:6E:7D:7D Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019AD53B0F217FC3554A585E94BFBF1FB855 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/187WgFX_yB1ZxSUCs28tIQ5ufX0.roa Signing time: Sun 30 Nov 2025 14:46:48 +0000 ROA not before: Sun 30 Nov 2025 14:46:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41111 IP address blocks: 5.180.20.0/24 maxlen: 24 5.180.21.0/24 maxlen: 24 5.180.27.0/24 maxlen: 24 5.180.40.0/24 maxlen: 24 5.180.42.0/24 maxlen: 24 5.180.43.0/24 maxlen: 24 5.180.46.0/24 maxlen: 24 5.180.47.0/24 maxlen: 24 5.180.52.0/24 maxlen: 24 5.180.54.0/24 maxlen: 24 5.180.145.0/24 maxlen: 24 5.180.147.0/24 maxlen: 24 5.253.28.0/24 maxlen: 24 5.253.29.0/24 maxlen: 24 5.253.30.0/24 maxlen: 24 5.253.31.0/24 maxlen: 24 5.253.42.0/24 maxlen: 24 45.66.160.0/22 maxlen: 24 45.86.66.0/24 maxlen: 24 45.86.70.0/24 maxlen: 24 45.86.74.0/24 maxlen: 24 45.128.60.0/24 maxlen: 24 45.136.117.0/24 maxlen: 24 45.136.124.0/22 maxlen: 24 45.149.115.0/24 maxlen: 24 85.208.119.0/24 maxlen: 24 85.209.155.0/24 maxlen: 24 85.209.156.0/22 maxlen: 24 85.209.194.0/24 maxlen: 24 88.218.92.0/24 maxlen: 24 88.218.94.0/24 maxlen: 24 88.218.95.0/24 maxlen: 24 194.36.36.0/24 maxlen: 24 194.36.37.0/24 maxlen: 24 194.55.136.0/23 maxlen: 24 194.55.189.0/24 maxlen: 24 194.59.221.0/24 maxlen: 24 194.59.245.0/24 maxlen: 24 194.76.146.0/24 maxlen: 24 194.76.147.0/24 maxlen: 24 194.76.154.0/23 maxlen: 24 194.124.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 09:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d5:3b:0f:21:7f:c3:55:4a:58:5e:94:bf:bf:1f:b8:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Nov 30 14:46:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d7ced68055ffc81d59c52502b36f2d210e6e7d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:87:2a:b6:12:47:77:04:2e:a9:6f:94:c9:9c: a2:80:89:2b:bb:f3:0f:10:a5:0d:75:f6:c6:2c:3d: 5a:21:ef:17:3d:60:1b:13:c5:0f:44:a7:df:80:ee: 86:61:1f:7b:a0:59:b5:96:7f:d4:7e:2f:f5:1b:78: 97:c7:d3:e6:3a:e5:06:72:24:9a:6a:dc:e6:14:71: fe:6b:b4:18:db:ca:73:4e:ae:7d:06:91:e0:89:8a: b6:43:4a:a3:4b:21:e5:b4:07:0b:e6:6b:fa:03:10: 56:4d:64:2b:1b:c5:c0:88:b7:c3:e1:dc:e3:e3:12: 12:9f:81:08:38:13:c4:45:28:84:dd:59:73:e6:9b: fe:b1:99:74:80:fd:68:b0:fa:4b:9d:c6:f9:cb:7c: 57:58:cb:7a:df:cd:e7:c3:1e:9b:fc:e4:af:97:92: ab:21:0a:8e:1e:44:0b:83:08:2e:ba:57:d8:59:25: 1c:4c:aa:86:3c:62:ab:a1:e0:f6:46:d9:51:ea:6f: 76:fa:4c:86:23:14:d9:54:30:49:6d:6e:f5:4e:f6: 5c:d4:92:74:3c:a5:f6:9d:59:ac:50:69:56:9d:b7: 2b:dc:f9:3b:4b:31:a3:6e:82:1e:20:f6:41:89:4a: 28:11:1a:96:d2:ea:20:9d:77:1c:54:02:cf:9d:16: c1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CE:D6:80:55:FF:C8:1D:59:C5:25:02:B3:6F:2D:21:0E:6E:7D:7D X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/187WgFX_yB1ZxSUCs28tIQ5ufX0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.20.0/23 5.180.27.0/24 5.180.40.0/24 5.180.42.0/23 5.180.46.0/23 5.180.52.0/24 5.180.54.0/24 5.180.145.0/24 5.180.147.0/24 5.253.28.0/22 5.253.42.0/24 45.66.160.0/22 45.86.66.0/24 45.86.70.0/24 45.86.74.0/24 45.128.60.0/24 45.136.117.0/24 45.136.124.0/22 45.149.115.0/24 85.208.119.0/24 85.209.155.0-85.209.159.255 85.209.194.0/24 88.218.92.0/24 88.218.94.0/23 194.36.36.0/23 194.55.136.0/23 194.55.189.0/24 194.59.221.0/24 194.59.245.0/24 194.76.146.0/23 194.76.154.0/23 194.124.250.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:ce:26:2e:1f:6f:3b:0b:80:83:d3:d2:3a:33:d5:20:d6:e5: 9b:78:7f:a2:90:97:c3:a5:d5:75:7a:ef:ee:97:97:0d:25:35: 8c:04:cc:e2:5f:04:52:20:a0:1f:9f:1f:ec:65:2d:70:47:76: 24:c6:53:ab:24:34:9b:fb:9a:c0:5d:87:18:00:a1:05:11:5b: 6d:03:af:ea:f1:0d:ab:e3:2a:3e:2a:20:c7:2f:5a:a2:99:6f: 1b:76:01:7d:02:7e:c4:98:c0:09:ad:e0:bd:2b:b6:55:5a:da: 52:90:47:82:91:6f:38:98:44:64:13:b6:2d:ca:ba:ef:40:65: c7:b4:ca:28:85:82:2d:a6:1e:a4:bf:df:65:a1:52:b6:4e:df: 53:68:13:51:49:73:02:db:17:5b:eb:d8:67:bf:d9:77:c9:45: 02:e3:53:b8:ad:97:84:11:72:8b:da:83:3a:34:77:31:ca:86: 0f:0f:93:5a:a9:26:f9:5b:69:73:a4:3d:57:bc:7c:26:9b:3d: 89:04:cf:94:74:cd:5e:c1:d3:35:e1:5c:eb:35:a2:57:39:71: 28:27:91:f2:10:86:37:61:89:39:42:a8:a4:3c:51:fd:0e:e9: 02:40:8a:f7:2b:b5:8f:01:62:d0:26:bd:d0:10:7d:a9:4a:72: 04:49:2a:3d -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgISAZrVOw8hf8NVSlhelL+/H7hVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjUxMTMwMTQ0NjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2NlZDY4MDU1ZmZjODFkNTljNTI1MDJiMzZmMmQyMTBlNmU3ZDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4cqthJHdwQuqW+UyZyigIkru/MP EKUNdfbGLD1aIe8XPWAbE8UPRKffgO6GYR97oFm1ln/Ufi/1G3iXx9PmOuUGciSa atzmFHH+a7QY28pzTq59BpHgiYq2Q0qjSyHltAcL5mv6AxBWTWQrG8XAiLfD4dzj 4xISn4EIOBPERSiE3Vlz5pv+sZl0gP1osPpLncb5y3xXWMt6383nwx6b/OSvl5Kr IQqOHkQLgwguulfYWSUcTKqGPGKroeD2RtlR6m92+kyGIxTZVDBJbW71TvZc1JJ0 PKX2nVmsUGlWnbcr3Pk7SzGjboIeIPZBiUooERqW0uognXccVALPnRbBqQIDAQAB o4IC0DCCAswwHQYDVR0OBBYEFNfO1oBV/8gdWcUlArNvLSEObn19MB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvMTg3V2dGWF95QjFaeFNVQ3MyOHRJUTV1ZlgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHlBggrBgEFBQcBBwEB/wSB1TCB0jCBzwQCAAEwgcgDBAEF tBQDBAAFtBsDBAAFtCgDBAEFtCoDBAEFtC4DBAAFtDQDBAAFtDYDBAAFtJEDBAAF tJMDBAIF/RwDBAAF/SoDBAItQqADBAAtVkIDBAAtVkYDBAAtVkoDBAAtgDwDBAAt iHUDBAItiHwDBAAtlXMDBABV0HcwDAMEAFXRmwMEBVXRgAMEAFXRwgMEAFjaXAME AVjaXgMEAcIkJAMEAcI3iAMEAMI3vQMEAMI73QMEAMI79QMEAcJMkgMEAcJMmgME AcJ8+jANBgkqhkiG9w0BAQsFAAOCAQEATM4mLh9vOwuAg9PSOjPVINblm3h/opCX w6XVdXrv7peXDSU1jATM4l8EUiCgH58f7GUtcEd2JMZTqyQ0m/uawF2HGAChBRFb bQOv6vENq+MqPiogxy9aoplvG3YBfQJ+xJjACa3gvSu2VVraUpBHgpFvOJhEZBO2 Lcq670Blx7TKKIWCLaYepL/fZaFStk7fU2gTUUlzAtsXW+vYZ7/Zd8lFAuNTuK2X hBFyi9qDOjR3McqGDw+TWqkm+Vtpc6Q9V7x8Jps9iQTPlHTNXsHTNeFc6zWiVzlx KCeR8hCGN2GJOUKopDxR/Q7pAkCK9yu1jwFi0Ca90BB9qUpyBEkqPQ== -----END CERTIFICATE-----Generated at Fri Dec 5 16:41:12 2025 by rpki-client