This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/lQCOx5mZpME2iX9OaXhdcux5dcU.roa File: lQCOx5mZpME2iX9OaXhdcux5dcU.roa (raw, json) Hash identifier: ZZgiiURlTSAIebCK9DYQPnbDpFj81NSYcBYRFt0pa0A= Subject key identifier: 95:00:8E:C7:99:99:A4:C1:36:89:7F:4E:69:78:5D:72:EC:79:75:C5 Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019ABBD9F83B48C89C58D4172BFD14AF0542 Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/lQCOx5mZpME2iX9OaXhdcux5dcU.roa Signing time: Tue 25 Nov 2025 16:30:15 +0000 ROA not before: Tue 25 Nov 2025 16:30:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207569 IP address blocks: 46.243.1.0/24 maxlen: 24 46.243.4.0/24 maxlen: 24 46.243.6.0/24 maxlen: 24 89.44.86.0/24 maxlen: 24 95.81.79.0/24 maxlen: 24 95.81.113.0/24 maxlen: 24 95.81.126.0/24 maxlen: 24 95.81.127.0/24 maxlen: 24 103.85.114.0/24 maxlen: 24 103.85.115.0/24 maxlen: 24 104.128.128.0/24 maxlen: 24 104.128.129.0/24 maxlen: 24 104.128.130.0/24 maxlen: 24 104.128.131.0/24 maxlen: 24 104.128.132.0/24 maxlen: 24 104.128.133.0/24 maxlen: 24 104.128.134.0/24 maxlen: 24 104.128.135.0/24 maxlen: 24 104.128.136.0/24 maxlen: 24 104.128.137.0/24 maxlen: 24 104.128.138.0/24 maxlen: 24 104.128.139.0/24 maxlen: 24 104.128.140.0/24 maxlen: 24 104.128.141.0/24 maxlen: 24 104.128.142.0/24 maxlen: 24 104.128.143.0/24 maxlen: 24 2a0c:5d00:1002::/48 maxlen: 48 2a0c:5d00:2002::/48 maxlen: 48 2a0c:5d06:2002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:d9:f8:3b:48:c8:9c:58:d4:17:2b:fd:14:af:05:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Nov 25 16:30:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=95008ec79999a4c136897f4e69785d72ec7975c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e3:f3:68:28:3a:89:9d:ca:bf:22:54:8d:32: 60:43:1c:43:d5:bf:61:67:5e:cd:8f:fb:a6:8e:34: 0f:94:d0:56:a4:9d:1e:e7:22:ab:57:05:12:59:cc: 6e:3a:8f:c0:96:a4:8f:19:9c:19:73:c6:76:3e:e4: 0c:bf:89:83:9b:ae:ff:25:33:99:af:5d:7c:73:f1: ab:98:48:bf:f5:33:97:9f:23:7a:86:8c:0f:52:65: 35:57:32:b3:f3:06:f4:e5:52:14:34:39:de:27:a7: 24:d7:8f:6c:d1:74:8a:90:ce:b4:01:fb:d4:98:d2: b2:0b:b5:26:5f:b5:7b:6a:87:81:6b:75:23:86:e0: 47:1a:6d:42:e0:94:2d:b1:1b:cc:3c:54:ee:41:fe: b2:39:e3:69:1e:47:a0:4b:ae:9e:d3:e5:a3:68:a9: 7c:c3:78:57:bd:46:24:de:77:6d:7f:24:23:0b:1e: ec:59:43:f6:b0:01:a9:0e:72:0c:0c:c3:80:b7:5c: f5:b2:98:6e:e0:11:58:d5:90:d7:12:39:f5:a2:75: ec:42:6b:c8:c5:ce:cb:c3:e4:8d:ad:fd:c8:15:0d: 89:09:3a:df:fb:cb:0a:3e:f7:77:62:43:ce:9c:f9: e8:d9:d3:9a:ac:1b:75:fb:b2:2a:51:9e:ee:a5:de: 36:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:00:8E:C7:99:99:A4:C1:36:89:7F:4E:69:78:5D:72:EC:79:75:C5 X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/lQCOx5mZpME2iX9OaXhdcux5dcU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.1.0/24 46.243.4.0/24 46.243.6.0/24 89.44.86.0/24 95.81.79.0/24 95.81.113.0/24 95.81.126.0/23 103.85.114.0/23 104.128.128.0/20 IPv6: 2a0c:5d00:1002::/48 2a0c:5d00:2002::/48 2a0c:5d06:2002::/48 Signature Algorithm: sha256WithRSAEncryption 7f:19:e7:73:11:a0:f0:ce:65:b0:06:02:97:84:13:00:64:3a: f5:60:8c:46:6e:94:cd:0c:dc:b9:9f:ea:33:22:1b:33:48:16: 86:77:1e:ac:86:72:50:8a:f6:70:6d:e4:38:01:49:ec:b2:2e: 06:e7:c3:85:b5:c5:5b:89:57:04:f6:9e:fb:e8:99:02:9b:73: 8b:e2:fd:aa:83:0f:07:98:02:68:f4:53:95:5e:bf:ce:01:10: 65:e5:6c:83:e0:01:bf:f5:75:cb:33:f1:97:af:43:20:c2:c3: 7d:6f:59:f7:f1:6c:24:6d:bf:c4:2c:8a:f6:2a:dd:01:9f:88: 00:4e:a7:57:04:01:e8:92:fd:a2:9a:55:f6:ac:7c:25:f0:e3: 9a:99:65:92:e5:7d:c3:d3:3a:df:d0:22:89:6d:09:ac:3d:4f: 7b:70:f6:e6:4d:26:00:43:0a:39:4e:ee:7d:79:66:43:e9:c5: 65:4d:00:fc:12:30:64:3e:5e:7e:51:03:d5:b4:71:9e:03:e9: e8:ab:b3:44:fe:19:41:87:7d:42:3e:ae:6b:47:f1:61:ff:5a: c2:4a:86:72:23:dc:08:ff:e6:46:f6:95:44:88:a0:20:3b:53: b8:a7:c0:d9:18:79:6c:d5:56:e2:a5:ad:4a:e7:be:57:79:9d: e9:e0:3b:4e -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgISAZq72fg7SMicWNQXK/0UrwVCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjUxMTI1MTYzMDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTAwOGVjNzk5OTlhNGMxMzY4OTdmNGU2OTc4NWQ3MmVjNzk3NWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+PzaCg6iZ3KvyJUjTJgQxxD1b9h Z17Nj/umjjQPlNBWpJ0e5yKrVwUSWcxuOo/AlqSPGZwZc8Z2PuQMv4mDm67/JTOZ r118c/GrmEi/9TOXnyN6howPUmU1VzKz8wb05VIUNDneJ6ck149s0XSKkM60AfvU mNKyC7UmX7V7aoeBa3UjhuBHGm1C4JQtsRvMPFTuQf6yOeNpHkegS66e0+WjaKl8 w3hXvUYk3ndtfyQjCx7sWUP2sAGpDnIMDMOAt1z1sphu4BFY1ZDXEjn1onXsQmvI xc7Lw+SNrf3IFQ2JCTrf+8sKPvd3YkPOnPno2dOarBt1+7IqUZ7upd428QIDAQAB o4ICXDCCAlgwHQYDVR0OBBYEFJUAjseZmaTBNol/Tml4XXLseXXFMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvbFFDT3g1bVpwTUUyaVg5T2FYaGRjdXg1ZGNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTA8BAIAATA2AwQALvMBAwQA LvMEAwQALvMGAwQAWSxWAwQAX1FPAwQAX1FxAwQBX1F+AwQBZ1VyAwQEaICAMCEE AgACMBsDBwAqDF0AEAIDBwAqDF0AIAIDBwAqDF0GIAIwDQYJKoZIhvcNAQELBQAD ggEBAH8Z53MRoPDOZbAGApeEEwBkOvVgjEZulM0M3Lmf6jMiGzNIFoZ3HqyGclCK 9nBt5DgBSeyyLgbnw4W1xVuJVwT2nvvomQKbc4vi/aqDDweYAmj0U5Vev84BEGXl bIPgAb/1dcsz8ZevQyDCw31vWffxbCRtv8QsivYq3QGfiABOp1cEAeiS/aKaVfas fCXw45qZZZLlfcPTOt/QIoltCaw9T3tw9uZNJgBDCjlO7n15ZkPpxWVNAPwSMGQ+ Xn5RA9W0cZ4D6eirs0T+GUGHfUI+rmtH8WH/WsJKhnIj3Aj/5kb2lUSIoCA7U7in wNkYeWzVVuKlrUrnvld5nengO04= -----END CERTIFICATE-----Generated at Sun Dec 7 05:20:10 2025 by rpki-client