This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hWgmfWMpeO3YUGQf2HrhuZf0RKA.roa File: hWgmfWMpeO3YUGQf2HrhuZf0RKA.roa (raw, json) Hash identifier: gLsTkQiwP97E4xsrS8LRxCCbH1dcHV6s+rt1RUzT4xs= Subject key identifier: 85:68:26:7D:63:29:78:ED:D8:50:64:1F:D8:7A:E1:B9:97:F4:44:A0 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B2BB6135624F8E62D511BCA62C04AAD47 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hWgmfWMpeO3YUGQf2HrhuZf0RKA.roa Signing time: Wed 17 Dec 2025 09:48:31 +0000 ROA not before: Wed 17 Dec 2025 09:48:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214238 IP address blocks: 5.253.56.0/24 maxlen: 24 5.253.57.0/24 maxlen: 24 5.253.58.0/24 maxlen: 24 45.88.66.0/24 maxlen: 24 85.208.136.0/24 maxlen: 24 87.120.108.0/24 maxlen: 24 87.120.196.0/24 maxlen: 24 87.121.216.0/24 maxlen: 24 93.123.31.0/24 maxlen: 24 94.125.102.0/24 maxlen: 24 94.125.103.0/24 maxlen: 24 185.207.14.0/24 maxlen: 24 185.207.15.0/24 maxlen: 24 185.252.179.0/24 maxlen: 24 193.8.186.0/24 maxlen: 24 193.8.187.0/24 maxlen: 24 193.148.56.0/24 maxlen: 24 193.148.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:b6:13:56:24:f8:e6:2d:51:1b:ca:62:c0:4a:ad:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Dec 17 09:48:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8568267d632978edd850641fd87ae1b997f444a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1c:4b:08:12:27:fd:5b:cd:91:92:79:94:64: 87:e8:5d:32:71:df:f1:f5:7e:11:d4:f6:21:98:fc: ff:23:cd:fd:58:05:28:f8:a2:fc:48:04:2c:22:32: 93:98:73:13:53:b8:49:8b:bd:9f:0f:21:dc:cb:11: 73:f4:6d:6f:04:1e:e4:44:6a:17:65:0c:33:ea:b0: bc:13:de:f8:d2:77:1e:ab:dd:27:37:dc:d7:11:2c: 58:0c:bf:46:d6:14:32:5e:15:84:91:90:ee:71:0d: e7:3e:15:72:cb:2d:e5:9a:e7:35:d5:36:b8:65:f8: 45:49:18:24:85:9a:2d:2c:9e:fb:aa:3d:50:71:b7: 91:4e:be:02:6b:1f:5f:0c:c7:c7:e6:9d:7a:e4:5b: 7d:cb:68:11:79:4c:23:9d:1e:c8:fc:3f:58:01:06: 68:7e:f3:8f:3f:8c:74:a7:9b:d5:11:24:a3:5f:59: 00:28:3b:f6:8d:19:06:7c:9f:ec:29:a8:29:90:ed: 28:f5:23:af:12:fa:d3:cc:c9:32:9f:fb:40:6f:73: 73:ad:bc:34:61:98:bd:6a:4e:76:07:77:08:6b:b3: da:6c:83:53:c0:0e:d3:8d:04:5c:b1:2b:70:80:43: 85:14:de:3e:fb:33:9c:66:62:a9:ad:6f:a7:08:34: 2c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:68:26:7D:63:29:78:ED:D8:50:64:1F:D8:7A:E1:B9:97:F4:44:A0 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hWgmfWMpeO3YUGQf2HrhuZf0RKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.56.0-5.253.58.255 45.88.66.0/24 85.208.136.0/24 87.120.108.0/24 87.120.196.0/24 87.121.216.0/24 93.123.31.0/24 94.125.102.0/23 185.207.14.0/23 185.252.179.0/24 193.8.186.0/23 193.148.56.0/23 Signature Algorithm: sha256WithRSAEncryption 68:c8:1d:40:2b:22:d5:78:cc:1d:ed:fa:15:e2:97:eb:ac:c6: ef:39:12:a6:14:6d:16:18:30:91:61:8e:dc:e2:d2:60:f3:87: 46:99:1d:5c:9d:00:0d:1b:39:bb:d9:6b:9b:b4:98:c0:f5:2d: 6b:59:57:3c:b3:da:0a:14:25:c7:4d:8e:9d:0f:a1:1f:4b:7c: 21:98:45:b0:0b:54:ce:dc:1f:05:23:7a:00:2d:35:4d:c7:14: 2c:40:1d:22:9f:84:9d:24:a7:f9:28:a0:57:e7:1e:67:76:76: dd:60:15:bb:2b:15:20:a4:f6:a4:c2:33:d4:e5:4a:84:5e:31: ae:9c:8a:79:3f:08:08:fe:a1:dc:67:6a:f1:b2:9e:8d:0f:7e: 19:dc:a2:08:04:f6:26:2b:f7:5f:a2:3b:29:ce:22:68:af:88: 3c:fc:5c:f6:69:c3:0f:2a:65:1f:f4:e5:49:4e:95:36:55:c1: ab:f9:1e:17:6e:bb:38:7c:c5:75:06:9d:40:89:03:dc:b4:c3: c2:9f:f4:eb:ec:eb:2a:2b:f6:41:8b:2b:a0:77:06:bf:c1:53: bd:42:f5:b5:ea:d0:5a:68:8d:76:fb:b1:a6:1c:12:c3:96:b9: 9d:61:34:6e:e8:d7:5d:0c:fd:1c:56:9e:86:d8:3e:7d:3a:5c: 23:a9:f3:8f -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgISAZsrthNWJPjmLVEbymLASq1HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMjE3MDk0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTY4MjY3ZDYzMjk3OGVkZDg1MDY0MWZkODdhZTFiOTk3ZjQ0NGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphxLCBIn/VvNkZJ5lGSH6F0ycd/x 9X4R1PYhmPz/I839WAUo+KL8SAQsIjKTmHMTU7hJi72fDyHcyxFz9G1vBB7kRGoX ZQwz6rC8E9740nceq90nN9zXESxYDL9G1hQyXhWEkZDucQ3nPhVyyy3lmuc11Ta4 ZfhFSRgkhZotLJ77qj1QcbeRTr4Cax9fDMfH5p165Ft9y2gReUwjnR7I/D9YAQZo fvOPP4x0p5vVESSjX1kAKDv2jRkGfJ/sKagpkO0o9SOvEvrTzMkyn/tAb3Nzrbw0 YZi9ak52B3cIa7PabINTwA7TjQRcsStwgEOFFN4++zOcZmKprW+nCDQsDwIDAQAB o4ICUzCCAk8wHQYDVR0OBBYEFIVoJn1jKXjt2FBkH9h64bmX9ESgMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvaFdnbWZXTXBlTzNZVUdRZjJIcmh1WmYwUktBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQMAwDBAMF/TgD BAAF/ToDBAAtWEIDBABV0IgDBABXeGwDBABXeMQDBABXedgDBABdex8DBAFefWYD BAG5zw4DBAC5/LMDBAHBCLoDBAHBlDgwDQYJKoZIhvcNAQELBQADggEBAGjIHUAr ItV4zB3t+hXil+usxu85EqYUbRYYMJFhjtzi0mDzh0aZHVydAA0bObvZa5u0mMD1 LWtZVzyz2goUJcdNjp0PoR9LfCGYRbALVM7cHwUjegAtNU3HFCxAHSKfhJ0kp/ko oFfnHmd2dt1gFbsrFSCk9qTCM9TlSoReMa6cink/CAj+odxnavGyno0PfhncoggE 9iYr91+iOynOImiviDz8XPZpww8qZR/05UlOlTZVwav5Hhduuzh8xXUGnUCJA9y0 w8Kf9Ovs6yor9kGLK6B3Br/BU71C9bXq0FpojXb7saYcEsOWuZ1hNG7o110M/RxW nobYPn06XCOp848= -----END CERTIFICATE-----Generated at Sat Dec 20 07:57:55 2025 by rpki-client