This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/s1ZHZEq87nFgbU0mriTMmK5L8gY.roa File: s1ZHZEq87nFgbU0mriTMmK5L8gY.roa (raw, json) Hash identifier: C7mesh/i1BpIXScSjI822JIfZlA9Zp3VbAxsmknNnLo= Subject key identifier: B3:56:47:64:4A:BC:EE:71:60:6D:4D:26:AE:24:CC:98:AE:4B:F2:06 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019AB147ACE48780EDB119DD0936A958681F Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/s1ZHZEq87nFgbU0mriTMmK5L8gY.roa Signing time: Sun 23 Nov 2025 15:14:15 +0000 ROA not before: Sun 23 Nov 2025 15:14:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214238 IP address blocks: 2.56.122.0/24 maxlen: 24 45.15.125.0/24 maxlen: 24 45.15.128.0/24 maxlen: 24 45.15.129.0/24 maxlen: 24 45.15.130.0/24 maxlen: 24 45.15.131.0/24 maxlen: 24 45.15.147.0/24 maxlen: 24 45.15.152.0/24 maxlen: 24 45.15.153.0/24 maxlen: 24 45.83.150.0/24 maxlen: 24 45.83.151.0/24 maxlen: 24 45.128.55.0/24 maxlen: 24 45.128.56.0/24 maxlen: 24 45.128.73.0/24 maxlen: 24 45.128.74.0/24 maxlen: 24 45.128.75.0/24 maxlen: 24 139.28.235.0/24 maxlen: 24 141.98.160.0/24 maxlen: 24 185.203.4.0/24 maxlen: 24 185.203.5.0/24 maxlen: 24 185.203.6.0/24 maxlen: 24 185.203.7.0/24 maxlen: 24 194.76.136.0/24 maxlen: 24 194.76.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 09:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b1:47:ac:e4:87:80:ed:b1:19:dd:09:36:a9:58:68:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Nov 23 15:14:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b35647644abcee71606d4d26ae24cc98ae4bf206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:34:9c:e0:bb:e4:33:83:d3:50:9e:b8:38:43: e4:90:2c:6c:3c:ef:df:3a:33:2f:de:c9:f1:fd:56: ee:69:f6:d6:0b:ee:e3:2f:e7:62:ae:60:08:89:4c: 0c:3b:60:f7:c5:7c:a4:ab:50:a5:d1:c6:09:84:58: 3a:f3:2f:37:05:0c:5d:46:02:77:69:60:a5:22:72: 8d:32:b0:ed:3c:4c:cf:0e:ca:d9:8d:b8:e4:90:e5: 1d:6b:b2:de:f7:f6:c7:a9:d2:7d:56:3e:d2:42:cb: 04:49:79:ac:3f:71:4b:f1:e6:99:87:3c:2c:d1:7d: 73:85:06:0c:c1:da:58:97:1f:c7:35:3a:39:e0:21: 80:57:c3:33:7d:78:be:b3:e4:c0:57:36:05:9d:59: 52:d4:bb:36:09:90:e6:91:75:fb:f1:48:66:79:35: d6:14:70:39:e4:f2:8c:c8:28:2d:f9:2b:f5:32:f1: 52:64:b1:04:03:c9:40:33:23:50:d1:27:06:a5:07: 66:62:f6:d1:80:13:8c:0c:2c:ac:f3:57:e8:42:d2: 48:16:b0:00:86:bc:3d:f4:f0:f9:f8:c4:09:db:1e: 15:6c:6a:59:5f:a1:07:f8:47:cc:65:83:ab:59:df: b9:ea:19:76:cc:2b:35:73:3e:f9:ab:67:48:c7:44: 5a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:56:47:64:4A:BC:EE:71:60:6D:4D:26:AE:24:CC:98:AE:4B:F2:06 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/s1ZHZEq87nFgbU0mriTMmK5L8gY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.122.0/24 45.15.125.0/24 45.15.128.0/22 45.15.147.0/24 45.15.152.0/23 45.83.150.0/23 45.128.55.0-45.128.56.255 45.128.73.0-45.128.75.255 139.28.235.0/24 141.98.160.0/24 185.203.4.0/22 194.76.136.0/24 194.76.138.0/24 Signature Algorithm: sha256WithRSAEncryption 09:a7:9f:ba:e3:c1:a1:2d:2b:03:5c:52:e4:c0:71:08:1d:31: 49:d7:d3:08:fe:9a:6f:98:3e:1d:bc:55:4b:5f:09:c7:4e:b9: b3:5e:4d:29:d1:aa:09:90:f2:0f:4f:b3:cf:c2:a6:a4:e1:cd: 64:c9:24:ba:0b:24:31:ba:8c:0b:9d:05:dc:52:18:8d:3d:a3: cc:54:07:a9:14:9b:bc:b0:e8:3b:c6:96:67:cb:39:60:bc:ac: 78:3c:2b:5f:ca:62:44:6e:7a:2a:3c:3c:dd:1c:6f:dc:2e:c3: 91:ab:c5:f5:0b:d9:50:b9:93:f4:cd:03:4b:89:31:73:0b:64: 14:4c:f4:42:f9:5b:83:f8:d7:bc:53:4b:f8:84:8b:49:88:cd: bf:f1:64:37:7d:ec:14:83:c8:2f:32:5b:f6:67:6d:c4:f2:91: 13:5f:c6:a5:19:91:ab:80:c7:a5:c9:56:02:d4:0b:f7:68:97: f9:f0:cf:fa:5a:51:66:4a:77:cc:cd:6b:53:9d:4b:29:aa:6d: bf:76:8f:99:0e:7a:a0:05:69:e6:dd:41:9b:22:bd:cc:ed:63: dc:bb:f5:db:1c:0c:37:55:62:8f:81:2e:30:66:dc:00:fa:f8: 24:0e:dd:c8:a5:f4:0a:b4:56:ec:58:69:01:bb:d6:08:99:06: ef:09:a6:ae -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgISAZqxR6zkh4DtsRndCTapWGgfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjUxMTIzMTUxNDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzU2NDc2NDRhYmNlZTcxNjA2ZDRkMjZhZTI0Y2M5OGFlNGJmMjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jSc4LvkM4PTUJ64OEPkkCxsPO/f OjMv3snx/VbuafbWC+7jL+dirmAIiUwMO2D3xXykq1Cl0cYJhFg68y83BQxdRgJ3 aWClInKNMrDtPEzPDsrZjbjkkOUda7Le9/bHqdJ9Vj7SQssESXmsP3FL8eaZhzws 0X1zhQYMwdpYlx/HNTo54CGAV8MzfXi+s+TAVzYFnVlS1Ls2CZDmkXX78UhmeTXW FHA55PKMyCgt+Sv1MvFSZLEEA8lAMyNQ0ScGpQdmYvbRgBOMDCys81foQtJIFrAA hrw99PD5+MQJ2x4VbGpZX6EH+EfMZYOrWd+56hl2zCs1cz75q2dIx0Ra/wIDAQAB o4ICYTCCAl0wHQYDVR0OBBYEFLNWR2RKvO5xYG1NJq4kzJiuS/IGMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvczFaSFpFcTg3bkZnYlUwbXJpVE1tSzVMOGdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBkBAIAATBeAwQAAjh6AwQA LQ99AwQCLQ+AAwQALQ+TAwQBLQ+YAwQBLVOWMAwDBAAtgDcDBAAtgDgwDAMEAC2A SQMEAi2ASAMEAIsc6wMEAI1ioAMEArnLBAMEAMJMiAMEAMJMijANBgkqhkiG9w0B AQsFAAOCAQEACaefuuPBoS0rA1xS5MBxCB0xSdfTCP6ab5g+HbxVS18Jx065s15N KdGqCZDyD0+zz8KmpOHNZMkkugskMbqMC50F3FIYjT2jzFQHqRSbvLDoO8aWZ8s5 YLyseDwrX8piRG56Kjw83Rxv3C7DkavF9QvZULmT9M0DS4kxcwtkFEz0Qvlbg/jX vFNL+ISLSYjNv/FkN33sFIPILzJb9mdtxPKRE1/GpRmRq4DHpclWAtQL92iX+fDP +lpRZkp3zM1rU51LKaptv3aPmQ56oAVp5t1BmyK9zO1j3Lv12xwMN1Vij4EuMGbc APr4JA7dyKX0CrRW7FhpAbvWCJkG7wmmrg== -----END CERTIFICATE-----Generated at Fri Dec 5 16:41:11 2025 by rpki-client