This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/XDgNqb2XCwmiHGXsNwUe1HKTVjY.roa File: XDgNqb2XCwmiHGXsNwUe1HKTVjY.roa (raw, json) Hash identifier: SBrfJ0gvFUs6h+blOPyt2srRgYaEYZxeLH4qoLfRi7U= Subject key identifier: 5C:38:0D:A9:BD:97:0B:09:A2:1C:65:EC:37:05:1E:D4:72:93:56:36 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019AE9FC7E5E94095690B4EAA69DB38FE521 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/XDgNqb2XCwmiHGXsNwUe1HKTVjY.roa Signing time: Thu 04 Dec 2025 15:30:29 +0000 ROA not before: Thu 04 Dec 2025 15:30:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62563 IP address blocks: 2.56.117.0/24 maxlen: 24 5.180.23.0/24 maxlen: 24 45.9.17.0/24 maxlen: 24 45.66.164.0/24 maxlen: 24 45.82.253.0/24 maxlen: 24 45.88.160.0/22 maxlen: 24 45.136.115.0/24 maxlen: 24 45.149.112.0/24 maxlen: 24 92.118.229.0/24 maxlen: 24 95.214.248.0/22 maxlen: 24 139.28.234.0/23 maxlen: 24 141.98.167.0/24 maxlen: 24 171.22.110.0/23 maxlen: 24 185.161.70.0/24 maxlen: 24 185.166.152.0/24 maxlen: 24 194.36.38.0/24 maxlen: 24 213.59.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 09:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:fc:7e:5e:94:09:56:90:b4:ea:a6:9d:b3:8f:e5:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Dec 4 15:30:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5c380da9bd970b09a21c65ec37051ed472935636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d9:b1:4a:5b:68:21:42:24:42:b9:dd:4f:bb: 31:49:7c:07:c7:db:1b:d5:b1:89:4a:e1:1d:81:c7: 46:8b:28:86:01:cf:a1:21:89:13:a6:03:91:0e:d7: fe:10:cb:77:01:27:e9:24:d5:24:b5:cf:f7:ed:07: a2:15:0b:84:bf:46:23:28:13:06:47:19:68:26:88: cb:35:bd:64:58:d0:70:b2:4c:d4:1e:99:aa:a0:6c: 13:d9:20:92:84:ca:bb:18:f3:e5:ef:11:b4:6c:1e: b4:0d:c7:eb:8e:85:8f:7d:52:ba:8a:d3:6a:03:8d: b5:4a:af:64:3b:46:93:90:95:b9:66:04:15:48:cc: 9c:3a:3b:cf:40:13:d1:6e:5f:91:19:3c:bc:7c:3c: 98:2e:67:54:cb:bf:a5:f4:58:c8:ac:24:cb:30:e5: 42:10:ac:02:6d:58:4c:ae:b8:ff:82:40:3c:14:f7: a7:d5:2b:aa:a5:56:78:86:4b:cb:5b:71:2e:b6:0f: 51:17:e7:67:c7:30:1e:af:eb:da:bc:82:3d:77:57: 6e:5f:69:d5:02:c7:26:5b:b3:b2:26:7d:09:bf:dc: 9d:3c:aa:2f:7d:95:ad:f2:a9:da:90:b7:db:d9:df: 3c:c7:fb:59:b2:81:71:ba:11:45:58:44:ab:36:36: 60:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:38:0D:A9:BD:97:0B:09:A2:1C:65:EC:37:05:1E:D4:72:93:56:36 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/XDgNqb2XCwmiHGXsNwUe1HKTVjY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.117.0/24 5.180.23.0/24 45.9.17.0/24 45.66.164.0/24 45.82.253.0/24 45.88.160.0/22 45.136.115.0/24 45.149.112.0/24 92.118.229.0/24 95.214.248.0/22 139.28.234.0/23 141.98.167.0/24 171.22.110.0/23 185.161.70.0/24 185.166.152.0/24 194.36.38.0/24 213.59.112.0/24 Signature Algorithm: sha256WithRSAEncryption 27:2b:28:00:f2:ec:f1:e1:19:c5:7f:33:5b:3e:ee:6d:84:36: e4:b3:bc:af:52:ff:49:4e:d1:11:31:15:37:87:5f:8d:dc:15: 26:9d:d8:94:63:e2:45:d6:d9:c3:36:09:92:37:06:5a:6e:69: 02:a8:c6:1b:92:75:c8:0c:b9:ce:53:38:75:76:ec:78:a5:cc: 9d:18:9e:d0:58:e7:61:43:31:c9:27:b5:99:c6:d2:f0:8f:7e: c5:45:c6:cb:f3:d9:51:ed:72:38:37:66:b3:36:d8:18:18:95: 92:f7:1c:bd:44:03:95:bc:19:69:1e:e9:99:9c:a2:6b:9a:d7: d1:aa:0b:1e:78:47:f1:e4:77:15:b2:23:f2:75:5c:d1:45:c0: 38:ba:e8:9e:d9:4c:26:e2:ae:15:c2:9f:ef:e2:8d:35:b7:3e: 6d:83:bc:af:36:25:40:44:78:da:23:7a:67:03:70:15:ba:ed: 4e:0e:ee:de:85:dc:16:fe:dc:99:c7:7c:39:c5:60:5b:e7:4e: c5:da:9f:24:80:eb:69:ed:70:e8:2c:b6:8c:00:ef:80:a4:f7: 54:cb:57:4d:6d:a9:04:df:a0:63:01:a7:75:d8:92:a7:77:4a: d2:73:cb:4e:25:e6:72:ce:bd:cf:e3:18:56:a4:1d:4b:ed:92: f2:fc:09:7c -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAZrp/H5elAlWkLTqpp2zj+UhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjUxMjA0MTUzMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzM4MGRhOWJkOTcwYjA5YTIxYzY1ZWMzNzA1MWVkNDcyOTM1NjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtmxSltoIUIkQrndT7sxSXwHx9sb 1bGJSuEdgcdGiyiGAc+hIYkTpgORDtf+EMt3ASfpJNUktc/37QeiFQuEv0YjKBMG RxloJojLNb1kWNBwskzUHpmqoGwT2SCShMq7GPPl7xG0bB60DcfrjoWPfVK6itNq A421Sq9kO0aTkJW5ZgQVSMycOjvPQBPRbl+RGTy8fDyYLmdUy7+l9FjIrCTLMOVC EKwCbVhMrrj/gkA8FPen1SuqpVZ4hkvLW3Eutg9RF+dnxzAer+vavII9d1duX2nV AscmW7OyJn0Jv9ydPKovfZWt8qnakLfb2d88x/tZsoFxuhFFWESrNjZgYQIDAQAB o4ICaTCCAmUwHQYDVR0OBBYEFFw4Dam9lwsJohxl7DcFHtRyk1Y2MB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvWERnTnFiMlhDd21pSEdYc053VWUxSEtUVmpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQAAjh1AwQA BbQXAwQALQkRAwQALUKkAwQALVL9AwQCLVigAwQALYhzAwQALZVwAwQAXHblAwQC X9b4AwQBixzqAwQAjWKnAwQBqxZuAwQAuaFGAwQAuaaYAwQAwiQmAwQA1TtwMA0G CSqGSIb3DQEBCwUAA4IBAQAnKygA8uzx4RnFfzNbPu5thDbks7yvUv9JTtERMRU3 h1+N3BUmndiUY+JF1tnDNgmSNwZabmkCqMYbknXIDLnOUzh1dux4pcydGJ7QWOdh QzHJJ7WZxtLwj37FRcbL89lR7XI4N2azNtgYGJWS9xy9RAOVvBlpHumZnKJrmtfR qgseeEfx5HcVsiPydVzRRcA4uuie2Uwm4q4Vwp/v4o01tz5tg7yvNiVARHjaI3pn A3AVuu1ODu7ehdwW/tyZx3w5xWBb507F2p8kgOtp7XDoLLaMAO+ApPdUy1dNbakE 36BjAad12JKnd0rSc8tOJeZyzr3P4xhWpB1L7ZLy/Al8 -----END CERTIFICATE-----Generated at Fri Dec 5 16:41:11 2025 by rpki-client