This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/gsFkUpFIoMM9zjgI35LSOZ5SGws.roa File: gsFkUpFIoMM9zjgI35LSOZ5SGws.roa (raw, json) Hash identifier: zNHxoudHpYIw0kCYfeKBFZlkqxD9EgWNQoFiAHyaC1Q= Subject key identifier: 82:C1:64:52:91:48:A0:C3:3D:CE:38:08:DF:92:D2:39:9E:52:1B:0B Certificate issuer: /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7 Certificate serial: 019B07336D8B33F7533793DF8E51717DCF9D Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/gsFkUpFIoMM9zjgI35LSOZ5SGws.roa Signing time: Wed 10 Dec 2025 07:39:29 +0000 ROA not before: Wed 10 Dec 2025 07:39:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6205 IP address blocks: 104.247.170.0/24 maxlen: 24 104.247.171.0/24 maxlen: 24 104.247.172.0/24 maxlen: 24 104.247.174.0/24 maxlen: 24 104.247.175.0/24 maxlen: 24 104.247.176.0/24 maxlen: 24 104.247.177.0/24 maxlen: 24 104.247.178.0/24 maxlen: 24 104.247.180.0/24 maxlen: 24 104.247.181.0/24 maxlen: 24 104.247.182.0/24 maxlen: 24 104.247.183.0/24 maxlen: 24 104.247.184.0/24 maxlen: 24 104.247.185.0/24 maxlen: 24 104.247.186.0/24 maxlen: 24 104.247.187.0/24 maxlen: 24 104.247.188.0/24 maxlen: 24 104.247.189.0/24 maxlen: 24 104.247.190.0/24 maxlen: 24 104.247.191.0/24 maxlen: 24 185.73.84.0/24 maxlen: 24 185.73.129.0/24 maxlen: 24 185.73.130.0/24 maxlen: 24 185.73.131.0/24 maxlen: 24 185.137.215.0/24 maxlen: 24 2a03:a5a0:1::/48 maxlen: 48 2a03:a5a0:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 04:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:33:6d:8b:33:f7:53:37:93:df:8e:51:71:7d:cf:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7 Validity Not Before: Dec 10 07:39:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=82c164529148a0c33dce3808df92d2399e521b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:45:ef:f9:b7:c5:5f:77:f8:77:aa:8b:02:db: 43:20:b5:e8:e9:fe:ac:64:e4:47:a6:e9:ec:1e:10: d0:a7:2d:2a:87:98:aa:ba:fb:2b:31:4b:02:10:db: 31:8f:c8:aa:8d:3c:5d:1c:d7:f4:d1:76:eb:0d:1d: fd:9d:7a:74:93:e3:43:2e:b1:cd:a5:cb:6d:e1:a0: a8:7e:b4:38:f3:54:3b:c4:1a:91:40:89:e9:27:ed: ff:6f:a3:1e:fa:01:86:3f:b2:f3:53:74:fd:48:ce: 31:93:b2:30:79:1c:36:4d:51:a4:51:7f:13:47:68: 32:86:84:eb:69:a9:b0:8b:e6:a6:4e:78:0b:84:58: bb:32:85:34:a7:36:93:ac:01:0e:49:cf:a7:2d:b6: a9:d3:3b:0d:2a:86:dd:6c:74:70:9f:7b:d5:61:3c: f5:e4:df:d7:66:37:26:84:c6:b2:fb:88:01:7c:b0: 4b:a4:d9:d2:59:fc:d6:e3:45:a2:e9:9e:66:90:b7: 15:fb:87:06:da:39:17:0d:11:4b:de:98:20:9f:45: 02:4e:54:d9:8b:80:19:88:40:da:27:4d:71:9e:0f: 19:55:eb:41:5b:c1:e9:e3:a6:03:8b:a7:3a:d5:c0: 00:d6:35:1d:b0:61:1e:a5:1a:2c:6e:07:08:95:7e: c0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C1:64:52:91:48:A0:C3:3D:CE:38:08:DF:92:D2:39:9E:52:1B:0B X509v3 Authority Key Identifier: keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/gsFkUpFIoMM9zjgI35LSOZ5SGws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.247.170.0-104.247.172.255 104.247.174.0-104.247.178.255 104.247.180.0-104.247.191.255 185.73.84.0/24 185.73.129.0-185.73.131.255 185.137.215.0/24 IPv6: 2a03:a5a0:1::/48 2a03:a5a0:4::/48 Signature Algorithm: sha256WithRSAEncryption 09:5f:97:e7:3a:7c:4e:28:80:b8:ff:0c:f4:a4:76:2f:2e:b9: 45:0d:21:68:23:78:4a:4e:3b:05:0d:42:e7:8f:c1:82:f5:87: bb:bf:83:52:0f:f7:76:39:d5:d0:cd:1d:52:2e:2d:d4:d8:cf: bb:3b:ad:16:ec:c6:0d:d8:d0:69:b1:44:a9:9a:85:ed:2d:49: 7f:aa:21:26:e2:13:b9:11:03:52:c6:f1:c7:c3:0c:c8:95:ba: b1:35:f7:80:1e:40:3d:5c:55:3c:50:3c:14:1b:6e:6a:8d:c3: c3:d4:d8:5c:46:29:6e:79:28:a6:4a:00:cb:8c:bd:f1:27:e2: e5:ab:81:c4:80:a0:f6:68:3a:90:30:47:bd:ff:d7:18:9c:a6: e7:27:a7:a9:8e:a3:1a:c6:e7:1d:98:bc:90:f3:4c:e6:e0:83: 91:f3:02:9a:70:ff:92:16:be:73:c6:98:fa:29:b9:9a:62:1f: b2:43:00:54:60:cf:c7:72:ca:8e:ec:9f:e2:9a:28:b6:79:cc: 45:e9:43:2e:8b:54:7e:4e:18:a8:dc:09:fb:e5:3d:1e:21:ef: 14:29:d9:7c:a9:9e:33:c7:7e:ec:4f:cc:f9:b3:d8:3d:cf:15: 6a:10:b5:7c:8b:19:f5:a1:a8:c3:e6:d0:9b:e6:e6:53:12:88: 9c:8e:97:76 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgISAZsHM22LM/dTN5PfjlFxfc+dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhY2RjMWUyNDdmYWE5NTMxODA4MmE0YWM1ZWRiZDgwNTEx ZjhkZjcwHhcNMjUxMjEwMDczOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmMxNjQ1MjkxNDhhMGMzM2RjZTM4MDhkZjkyZDIzOTllNTIxYjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEXv+bfFX3f4d6qLAttDILXo6f6s ZORHpunsHhDQpy0qh5iquvsrMUsCENsxj8iqjTxdHNf00XbrDR39nXp0k+NDLrHN pctt4aCofrQ481Q7xBqRQInpJ+3/b6Me+gGGP7LzU3T9SM4xk7IweRw2TVGkUX8T R2gyhoTraamwi+amTngLhFi7MoU0pzaTrAEOSc+nLbap0zsNKobdbHRwn3vVYTz1 5N/XZjcmhMay+4gBfLBLpNnSWfzW40Wi6Z5mkLcV+4cG2jkXDRFL3pggn0UCTlTZ i4AZiEDaJ01xng8ZVetBW8Hp46YDi6c61cAA1jUdsGEepRosbgcIlX7ANwIDAQAB o4ICYTCCAl0wHQYDVR0OBBYEFILBZFKRSKDDPc44CN+S0jmeUhsLMB8GA1UdIwQY MBaAFOrNweJH+qlTGAgqSsXtvYBRH433MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnMzQjRrZjZxVk1ZQ0NwS3hlMjlnRkVmamZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lNmM0NGMtMzEyNS00ZmU2LWEwMGQt NjI4Y2NmMDBkZmJkLzEvZ3NGa1VwRklvTU05empnSTM1TFNPWjVTR3dzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9lNmM0NGMtMzEyNS00ZmU2LWEwMGQtNjI4Y2NmMDBkZmJk LzEvNnMzQjRrZjZxVk1ZQ0NwS3hlMjlnRkVmamZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBKBAIAATBEMAwDBAFo96oD BABo96wwDAMEAWj3rgMEAGj3sjAMAwQCaPe0AwQGaPeAAwQAuUlUMAwDBAC5SYED BAK5SYADBAC5idcwGAQCAAIwEgMHACoDpaAAAQMHACoDpaAABDANBgkqhkiG9w0B AQsFAAOCAQEACV+X5zp8TiiAuP8M9KR2Ly65RQ0haCN4Sk47BQ1C54/BgvWHu7+D Ug/3djnV0M0dUi4t1NjPuzutFuzGDdjQabFEqZqF7S1Jf6ohJuITuREDUsbxx8MM yJW6sTX3gB5APVxVPFA8FBtuao3Dw9TYXEYpbnkopkoAy4y98Sfi5auBxICg9mg6 kDBHvf/XGJym5yenqY6jGsbnHZi8kPNM5uCDkfMCmnD/kha+c8aY+im5mmIfskMA VGDPx3LKjuyf4pootnnMRelDLotUfk4YqNwJ++U9HiHvFCnZfKmeM8d+7E/M+bPY Pc8VahC1fIsZ9aGow+bQm+bmUxKInI6Xdg== -----END CERTIFICATE-----Generated at Fri Dec 12 12:37:36 2025 by rpki-client