This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/hatM9e29oZLqohTezRhs0pobTPo.roa File: hatM9e29oZLqohTezRhs0pobTPo.roa (raw, json) Hash identifier: F6nkpB0hkurYv3UEzEF5feSFYVDAIvxRd/KqnsxhUoQ= Subject key identifier: 85:AB:4C:F5:ED:BD:A1:92:EA:A2:14:DE:CD:18:6C:D2:9A:1B:4C:FA Certificate issuer: /CN=34cde5a61145d3992eccdec7b7f0b87d566bddca Certificate serial: 019B0DE80B1AA5B40DC3694AF356655DC1FA Authority key identifier: 34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/hatM9e29oZLqohTezRhs0pobTPo.roa Signing time: Thu 11 Dec 2025 14:54:29 +0000 ROA not before: Thu 11 Dec 2025 14:54:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198726 IP address blocks: 5.10.0.0/21 maxlen: 21 91.137.64.0/20 maxlen: 20 91.137.88.0/21 maxlen: 21 91.137.96.0/20 maxlen: 20 91.137.112.0/22 maxlen: 22 91.137.116.0/23 maxlen: 23 91.137.120.0/22 maxlen: 22 91.137.124.0/22 maxlen: 22 185.14.64.0/22 maxlen: 22 185.35.216.0/22 maxlen: 22 185.233.220.0/22 maxlen: 22 185.238.160.0/22 maxlen: 22 185.240.224.0/22 maxlen: 22 2a02:acc1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:e8:0b:1a:a5:b4:0d:c3:69:4a:f3:56:65:5d:c1:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34cde5a61145d3992eccdec7b7f0b87d566bddca Validity Not Before: Dec 11 14:54:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=85ab4cf5edbda192eaa214decd186cd29a1b4cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:aa:61:56:c8:88:12:80:85:a2:28:9c:b6:16: 6e:d9:6a:75:07:36:d3:e8:8c:91:09:23:c5:58:78: 6a:16:ba:5e:14:94:87:41:ea:40:a4:aa:05:54:89: 74:8a:33:b8:7a:92:32:06:d6:b5:3d:50:96:b2:06: 05:db:91:1d:c4:a1:8a:ab:e4:c7:e2:3a:50:40:90: a4:a9:c3:ae:75:65:8a:19:47:22:6d:01:a1:2e:4b: 24:1c:c5:a1:b8:d2:19:b4:22:c4:30:93:4f:66:45: ea:16:a8:3a:0d:99:90:53:ff:90:94:52:c9:b1:9e: ab:27:e4:9e:6b:bf:b9:94:be:12:e9:d5:07:e1:3f: 3d:69:06:21:e4:04:8b:e8:26:74:27:b5:67:e9:f8: 01:94:e6:5b:f6:04:e4:91:ea:18:fe:13:fa:44:f5: 18:3c:aa:0d:51:ea:26:5a:20:dc:ec:fa:6f:78:25: b5:8f:6b:be:cb:8b:b9:b4:31:f7:02:a9:2c:5e:50: 8e:a6:80:1e:c6:93:b8:8c:26:77:24:81:32:20:eb: 1a:ee:dc:c1:11:31:6e:42:7d:94:a4:24:ab:7a:aa: 0a:89:ed:80:fd:0f:f3:4b:8f:8a:4c:08:f6:c1:58: e5:b4:f7:f9:1b:09:ab:58:bd:4f:34:e1:69:54:39: 32:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AB:4C:F5:ED:BD:A1:92:EA:A2:14:DE:CD:18:6C:D2:9A:1B:4C:FA X509v3 Authority Key Identifier: keyid:34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/hatM9e29oZLqohTezRhs0pobTPo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.0.0/21 91.137.64.0/20 91.137.88.0-91.137.117.255 91.137.120.0/21 185.14.64.0/22 185.35.216.0/22 185.233.220.0/22 185.238.160.0/22 185.240.224.0/22 IPv6: 2a02:acc1::/32 Signature Algorithm: sha256WithRSAEncryption 73:d9:dc:21:5e:44:86:c3:91:12:7c:ac:dd:c5:50:09:45:50: 64:59:ad:02:b7:73:55:2f:40:2a:4a:ff:1d:70:26:fb:c0:5e: 70:79:c4:13:7a:35:a1:75:37:7f:90:5b:13:8a:0f:84:34:12: b1:e0:27:7e:62:79:02:0b:5d:87:74:ca:68:b7:d2:6f:60:ce: bd:ea:09:33:cd:d2:eb:f9:3a:98:c5:a1:f9:b6:2f:eb:e7:34: 3d:8c:54:d6:4d:6b:c6:98:71:71:cd:45:82:9f:13:82:e2:04: c8:fc:2c:ee:66:be:be:fa:f4:2d:e0:fa:14:d5:c7:f0:4e:9b: ca:8c:6e:ed:88:c0:73:4d:d7:ff:e0:8e:65:0f:12:4e:28:d7: d4:19:17:b0:fa:80:5f:55:1a:93:83:c4:ef:0f:bf:dd:07:19: 49:ca:c6:a5:df:93:be:79:cf:a2:f1:00:b0:4b:60:6f:99:ff: f2:ec:a8:c1:5b:16:ae:34:34:31:0f:8d:95:ee:5b:6e:fe:0b: 4b:e9:03:1c:31:f5:df:31:42:c4:62:92:c0:d9:b6:ab:7f:e8: 25:ba:bd:c2:e9:54:6d:0e:31:ad:a1:f1:a8:2d:9f:f8:14:e7: 6a:5e:d8:b9:a1:52:c4:ad:e4:22:cf:87:9f:9a:01:e6:15:42: 57:e5:26:b8 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgISAZsN6AsapbQNw2lK81ZlXcH6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0Y2RlNWE2MTE0NWQzOTkyZWNjZGVjN2I3ZjBiODdkNTY2 YmRkY2EwHhcNMjUxMjExMTQ1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWFiNGNmNWVkYmRhMTkyZWFhMjE0ZGVjZDE4NmNkMjlhMWI0Y2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraphVsiIEoCFoiicthZu2Wp1BzbT 6IyRCSPFWHhqFrpeFJSHQepApKoFVIl0ijO4epIyBta1PVCWsgYF25EdxKGKq+TH 4jpQQJCkqcOudWWKGUcibQGhLkskHMWhuNIZtCLEMJNPZkXqFqg6DZmQU/+QlFLJ sZ6rJ+Sea7+5lL4S6dUH4T89aQYh5ASL6CZ0J7Vn6fgBlOZb9gTkkeoY/hP6RPUY PKoNUeomWiDc7PpveCW1j2u+y4u5tDH3AqksXlCOpoAexpO4jCZ3JIEyIOsa7tzB ETFuQn2UpCSreqoKie2A/Q/zS4+KTAj2wVjltPf5GwmrWL1PNOFpVDkyPwIDAQAB o4ICUDCCAkwwHQYDVR0OBBYEFIWrTPXtvaGS6qIU3s0YbNKaG0z6MB8GA1UdIwQY MBaAFDTN5aYRRdOZLszex7fwuH1Wa93KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk0zbHBoRkYwNWt1ek43SHRfQzRmVlpyM2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iNDJjNTMtZTA1YS00ZDc3LTgyZWUt NWVmMzYyMjZhNzY3LzEvaGF0TTllMjlvWkxxb2hUZXpSaHMwcG9iVFBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iNDJjNTMtZTA1YS00ZDc3LTgyZWUtNWVmMzYyMjZhNzY3 LzEvTk0zbHBoRkYwNWt1ek43SHRfQzRmVlpyM2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTBEBAIAATA+AwQDBQoAAwQE W4lAMAwDBANbiVgDBAFbiXQDBANbiXgDBAK5DkADBAK5I9gDBAK56dwDBAK57qAD BAK58OAwDQQCAAIwBwMFACoCrMEwDQYJKoZIhvcNAQELBQADggEBAHPZ3CFeRIbD kRJ8rN3FUAlFUGRZrQK3c1UvQCpK/x1wJvvAXnB5xBN6NaF1N3+QWxOKD4Q0ErHg J35ieQILXYd0ymi30m9gzr3qCTPN0uv5OpjFofm2L+vnND2MVNZNa8aYcXHNRYKf E4LiBMj8LO5mvr769C3g+hTVx/BOm8qMbu2IwHNN1//gjmUPEk4o19QZF7D6gF9V GpODxO8Pv90HGUnKxqXfk755z6LxALBLYG+Z//LsqMFbFq40NDEPjZXuW27+C0vp Axwx9d8xQsRiksDZtqt/6CW6vcLpVG0OMa2h8agtn/gU52pe2LmhUsSt5CLPh5+a AeYVQlflJrg= -----END CERTIFICATE-----Generated at Fri Dec 26 17:17:45 2025 by rpki-client