This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/k8X6rpXsnvun5Vl5pXAh-mD2GZU.roa File: k8X6rpXsnvun5Vl5pXAh-mD2GZU.roa (raw, json) Hash identifier: G+fNQ144ywV3dbbQU91YZ/j14MM00nHsKiCj+xndi8c= Subject key identifier: 93:C5:FA:AE:95:EC:9E:FB:A7:E5:59:79:A5:70:21:FA:60:F6:19:95 Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019B2EA11F2453B0B4C5644B3A5DF243BDE8 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/k8X6rpXsnvun5Vl5pXAh-mD2GZU.roa Signing time: Wed 17 Dec 2025 23:24:29 +0000 ROA not before: Wed 17 Dec 2025 23:24:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9009 IP address blocks: 5.182.100.0/24 maxlen: 24 5.182.101.0/24 maxlen: 24 45.14.72.0/24 maxlen: 24 45.84.44.0/24 maxlen: 24 45.84.45.0/24 maxlen: 24 45.84.46.0/24 maxlen: 24 45.84.47.0/24 maxlen: 24 45.157.74.0/23 maxlen: 23 85.8.188.0/24 maxlen: 24 85.8.189.0/24 maxlen: 24 85.8.190.0/23 maxlen: 23 85.209.216.0/24 maxlen: 24 85.209.218.0/23 maxlen: 23 88.218.100.0/24 maxlen: 24 88.218.101.0/24 maxlen: 24 88.218.102.0/23 maxlen: 23 91.201.142.0/23 maxlen: 23 92.119.180.0/24 maxlen: 24 92.119.181.0/24 maxlen: 24 92.119.183.0/24 maxlen: 24 139.28.137.0/24 maxlen: 24 139.28.138.0/23 maxlen: 23 141.98.240.0/24 maxlen: 24 141.98.241.0/24 maxlen: 24 141.98.242.0/23 maxlen: 23 193.31.72.0/24 maxlen: 24 193.31.73.0/24 maxlen: 24 193.31.75.0/24 maxlen: 24 194.5.0.0/22 maxlen: 22 194.124.52.0/22 maxlen: 22 195.206.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:a1:1f:24:53:b0:b4:c5:64:4b:3a:5d:f2:43:bd:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Dec 17 23:24:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=93c5faae95ec9efba7e55979a57021fa60f61995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8b:68:64:d4:87:8b:00:44:89:9d:55:c7:a8: 9c:ba:a6:84:90:7d:70:cc:1d:5e:fb:fa:66:a0:39: bb:29:40:0d:0f:fc:5f:dc:72:f8:5e:c7:72:a3:2f: a4:67:39:0a:85:f0:c8:47:0e:9c:4f:2b:c0:fd:77: ec:16:46:cd:71:f3:f4:a2:1a:17:dc:7b:43:ac:42: 1f:84:8c:e8:4f:ea:6e:ef:7f:23:2e:a4:86:7d:e8: ff:58:60:b8:b6:d4:c8:df:11:84:86:fa:b7:56:4d: cd:c3:a0:91:5d:8e:71:e6:42:18:8a:a5:57:e3:d3: 78:17:d3:5e:0a:1b:1c:da:df:84:dc:4a:7b:ec:ca: af:a4:05:0c:94:40:ad:67:67:28:14:8e:f9:66:7b: cf:3a:ae:77:84:b2:e7:2e:52:a4:26:d5:a5:cf:91: 9b:5e:92:10:e0:5f:b5:5b:f5:da:27:17:fe:c5:1e: 6c:e0:c6:a8:36:90:c8:04:0e:a7:06:76:e4:f9:12: 69:2e:0d:40:ba:87:22:a0:c8:7d:e3:93:1b:d5:72: af:23:7b:ef:af:34:d7:80:da:4e:bd:c4:55:f1:af: e0:b7:32:51:87:64:20:5b:b7:97:65:24:ca:3b:a2: 0b:f8:5d:b6:69:41:5a:88:5d:ff:1c:6e:12:b1:2e: 75:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C5:FA:AE:95:EC:9E:FB:A7:E5:59:79:A5:70:21:FA:60:F6:19:95 X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/k8X6rpXsnvun5Vl5pXAh-mD2GZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.100.0/23 45.14.72.0/24 45.84.44.0/22 45.157.74.0/23 85.8.188.0/22 85.209.216.0/24 85.209.218.0/23 88.218.100.0/22 91.201.142.0/23 92.119.180.0/23 92.119.183.0/24 139.28.137.0-139.28.139.255 141.98.240.0/22 193.31.72.0/23 193.31.75.0/24 194.5.0.0/22 194.124.52.0/22 195.206.108.0/24 Signature Algorithm: sha256WithRSAEncryption 35:1e:0f:f0:66:ea:3b:1c:8f:cf:88:ad:56:6c:ad:27:96:61: 5d:23:52:4c:32:d2:7e:57:79:a0:7a:7c:88:2c:ab:03:60:9a: 5f:c7:ef:c9:9f:72:2a:e4:6e:11:55:ec:36:02:a2:d4:88:44: 86:a9:84:e9:af:f0:a7:29:aa:71:38:55:04:99:82:b0:7b:d4: 5b:e8:de:a1:72:84:00:89:57:1b:55:21:c6:0a:fe:b7:e5:0d: 67:e3:bb:ae:29:e2:68:99:30:99:03:3c:bf:70:7a:2d:50:da: df:23:9c:4c:bd:3e:ed:0b:67:cd:00:5c:b8:48:3f:f8:52:ca: f7:6c:2a:8e:cd:91:d1:f5:e5:b1:59:24:60:5e:bd:70:6d:aa: 4f:c2:ac:c5:6b:05:71:9b:74:06:27:fa:ab:a9:cc:90:f5:10: 50:92:b4:28:6a:8c:21:2a:18:f4:72:e3:da:7a:2c:47:65:3f: 6c:3f:35:58:82:42:b4:72:58:9f:b8:67:f4:9e:18:83:95:4b: f2:f0:6d:84:0a:bb:a5:27:3f:4f:56:4e:cd:62:9e:1d:f9:6b: 1b:ca:c3:a4:6d:6d:23:93:c0:0a:67:4e:1b:2c:8d:90:e7:8f: c1:6f:f6:11:f4:57:7f:40:e0:3b:59:a7:03:69:a1:20:67:d2: 05:2b:22:21 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgISAZsuoR8kU7C0xWRLOl3yQ73oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjUxMjE3MjMyNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2M1ZmFhZTk1ZWM5ZWZiYTdlNTU5NzlhNTcwMjFmYTYwZjYxOTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ItoZNSHiwBEiZ1Vx6icuqaEkH1w zB1e+/pmoDm7KUAND/xf3HL4Xsdyoy+kZzkKhfDIRw6cTyvA/XfsFkbNcfP0ohoX 3HtDrEIfhIzoT+pu738jLqSGfej/WGC4ttTI3xGEhvq3Vk3Nw6CRXY5x5kIYiqVX 49N4F9NeChsc2t+E3Ep77MqvpAUMlECtZ2coFI75ZnvPOq53hLLnLlKkJtWlz5Gb XpIQ4F+1W/XaJxf+xR5s4MaoNpDIBA6nBnbk+RJpLg1AuocioMh945Mb1XKvI3vv rzTXgNpOvcRV8a/gtzJRh2QgW7eXZSTKO6IL+F22aUFaiF3/HG4SsS51JwIDAQAB o4ICeDCCAnQwHQYDVR0OBBYEFJPF+q6V7J77p+VZeaVwIfpg9hmVMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvazhYNnJwWHNudnVuNVZsNXBYQWgtbUQyR1pVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEAQW2ZAME AC0OSAMEAi1ULAMEAS2dSgMEAlUIvAMEAFXR2AMEAVXR2gMEAljaZAMEAVvJjgME AVx3tAMEAFx3tzAMAwQAixyJAwQCixyIAwQCjWLwAwQBwR9IAwQAwR9LAwQCwgUA AwQCwnw0AwQAw85sMA0GCSqGSIb3DQEBCwUAA4IBAQA1Hg/wZuo7HI/PiK1WbK0n lmFdI1JMMtJ+V3mgenyILKsDYJpfx+/Jn3Iq5G4RVew2AqLUiESGqYTpr/CnKapx OFUEmYKwe9Rb6N6hcoQAiVcbVSHGCv635Q1n47uuKeJomTCZAzy/cHotUNrfI5xM vT7tC2fNAFy4SD/4Usr3bCqOzZHR9eWxWSRgXr1wbapPwqzFawVxm3QGJ/qrqcyQ 9RBQkrQoaowhKhj0cuPaeixHZT9sPzVYgkK0clifuGf0nhiDlUvy8G2ECrulJz9P Vk7NYp4d+WsbysOkbW0jk8AKZ04bLI2Q54/Bb/YR9Fd/QOA7WacDaaEgZ9IFKyIh -----END CERTIFICATE-----Generated at Sat Dec 20 07:43:06 2025 by rpki-client