This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/5SYVUYrv8hryS3iXyQfidyzuW_I.roa File: 5SYVUYrv8hryS3iXyQfidyzuW_I.roa (raw, json) Hash identifier: 4C0zFn8Xp5N6KI8xu6BT4XHBH+KsxBWvvDXJcuwXp2A= Subject key identifier: E5:26:15:51:8A:EF:F2:1A:F2:4B:78:97:C9:07:E2:77:2C:EE:5B:F2 Certificate issuer: /CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030 Certificate serial: 019B365614927DBBFBF69220F09FA3FC1772 Authority key identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/5SYVUYrv8hryS3iXyQfidyzuW_I.roa Signing time: Fri 19 Dec 2025 11:19:29 +0000 ROA not before: Fri 19 Dec 2025 11:19:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15967 IP address blocks: 31.172.168.0/22 maxlen: 22 31.172.168.0/24 maxlen: 24 31.172.169.0/24 maxlen: 24 31.172.170.0/23 maxlen: 23 77.55.0.0/16 maxlen: 16 77.55.0.0/18 maxlen: 18 77.55.1.0/24 maxlen: 24 77.55.2.0/24 maxlen: 24 77.55.11.0/24 maxlen: 24 77.55.12.0/24 maxlen: 24 77.55.15.0/24 maxlen: 24 77.55.20.0/24 maxlen: 24 77.55.23.0/24 maxlen: 24 77.55.26.0/24 maxlen: 24 77.55.31.0/24 maxlen: 24 77.55.35.0/24 maxlen: 24 77.55.40.0/24 maxlen: 24 77.55.43.0/24 maxlen: 24 77.55.64.0/22 maxlen: 22 77.55.68.0/22 maxlen: 22 77.55.72.0/22 maxlen: 22 77.55.76.0/23 maxlen: 23 77.55.78.0/23 maxlen: 23 77.55.84.0/22 maxlen: 22 77.55.88.0/23 maxlen: 23 77.55.90.0/24 maxlen: 24 77.55.91.0/24 maxlen: 24 77.55.92.0/24 maxlen: 24 77.55.93.0/24 maxlen: 24 77.55.94.0/24 maxlen: 24 77.55.95.0/24 maxlen: 24 77.55.96.0/22 maxlen: 22 77.55.100.0/22 maxlen: 22 77.55.104.0/23 maxlen: 23 77.55.106.0/23 maxlen: 23 77.55.108.0/23 maxlen: 23 77.55.110.0/24 maxlen: 24 77.55.111.0/24 maxlen: 24 77.55.112.0/23 maxlen: 23 77.55.114.0/23 maxlen: 23 77.55.116.0/23 maxlen: 23 77.55.118.0/23 maxlen: 23 77.55.120.0/24 maxlen: 24 77.55.121.0/24 maxlen: 24 77.55.122.0/23 maxlen: 23 77.55.124.0/24 maxlen: 24 77.55.125.0/24 maxlen: 24 77.55.126.0/24 maxlen: 24 77.55.127.0/24 maxlen: 24 77.55.128.0/20 maxlen: 20 77.55.144.0/21 maxlen: 21 77.55.152.0/24 maxlen: 24 77.55.153.0/24 maxlen: 24 77.55.154.0/24 maxlen: 24 77.55.155.0/24 maxlen: 24 77.55.156.0/23 maxlen: 23 77.55.158.0/23 maxlen: 23 77.55.160.0/20 maxlen: 20 77.55.160.0/23 maxlen: 23 77.55.162.0/23 maxlen: 23 77.55.164.0/23 maxlen: 23 77.55.166.0/24 maxlen: 24 77.55.167.0/24 maxlen: 24 77.55.168.0/24 maxlen: 24 77.55.169.0/24 maxlen: 24 77.55.170.0/23 maxlen: 23 77.55.172.0/23 maxlen: 23 77.55.174.0/23 maxlen: 23 77.55.176.0/21 maxlen: 21 77.55.176.0/23 maxlen: 23 77.55.176.0/24 maxlen: 24 77.55.177.0/24 maxlen: 24 77.55.178.0/24 maxlen: 24 77.55.179.0/24 maxlen: 24 77.55.180.0/24 maxlen: 24 77.55.181.0/24 maxlen: 24 77.55.182.0/23 maxlen: 23 77.55.184.0/23 maxlen: 23 77.55.186.0/23 maxlen: 23 77.55.188.0/23 maxlen: 23 77.55.190.0/24 maxlen: 24 77.55.191.0/24 maxlen: 24 77.55.192.0/20 maxlen: 20 77.55.208.0/20 maxlen: 20 77.55.224.0/20 maxlen: 20 77.55.240.0/23 maxlen: 23 77.55.242.0/23 maxlen: 23 77.55.245.0/24 maxlen: 24 77.55.246.0/24 maxlen: 24 77.55.247.0/24 maxlen: 24 77.55.248.0/22 maxlen: 22 77.55.252.0/23 maxlen: 23 77.55.254.0/24 maxlen: 24 77.55.255.0/24 maxlen: 24 85.128.128.0/17 maxlen: 17 85.128.128.0/24 maxlen: 24 85.128.129.0/24 maxlen: 24 85.128.130.0/24 maxlen: 24 85.128.131.0/24 maxlen: 24 85.128.132.0/23 maxlen: 23 85.128.134.0/24 maxlen: 24 85.128.135.0/24 maxlen: 24 85.128.136.0/22 maxlen: 22 85.128.140.0/23 maxlen: 23 85.128.142.0/24 maxlen: 24 85.128.143.0/24 maxlen: 24 85.128.144.0/20 maxlen: 20 85.128.160.0/19 maxlen: 19 85.128.192.0/18 maxlen: 18 2a01:6100::/32 maxlen: 32 2a01:6100::/48 maxlen: 48 2a01:6100:111::/48 maxlen: 48 2a01:6100:fe00::/48 maxlen: 48 2a01:6100:fe01::/48 maxlen: 48 2a01:6100:fe02::/48 maxlen: 48 2a01:6100:fe10::/48 maxlen: 48 2a01:6100:fe11::/48 maxlen: 48 2a01:6100:fe12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 17:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:56:14:92:7d:bb:fb:f6:92:20:f0:9f:a3:fc:17:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030 Validity Not Before: Dec 19 11:19:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e52615518aeff21af24b7897c907e2772cee5bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:64:dd:6e:f3:4f:ab:c4:d3:4d:a2:f4:88:51: 65:ca:84:0c:f4:12:88:8c:95:33:ed:6f:59:1e:01: c3:d5:1e:56:94:06:af:2f:a1:83:be:fe:ae:98:28: 42:4d:d8:13:70:e7:df:cd:e0:5b:c0:d1:5e:5d:6b: 70:38:d4:e6:79:43:bf:4a:9d:85:d5:9b:2c:b0:5b: c8:2d:02:95:73:a1:36:81:a6:8e:9b:d6:23:6f:68: 28:bc:54:17:dd:a9:71:c5:d6:31:e5:f4:52:d8:8b: 98:12:2c:04:0f:10:70:0d:d2:f8:24:23:c5:7f:ae: d9:d6:32:b6:ed:1b:e3:c9:a6:8c:14:cb:48:6d:5b: 8a:4d:45:60:bc:dd:e0:92:ae:f1:d3:b9:87:19:37: ac:fc:b6:22:15:f2:a3:6f:73:be:94:58:aa:64:ab: e7:79:51:37:29:3b:05:7a:a1:b7:80:e8:06:f8:99: 9a:fe:01:c9:cf:26:ff:fd:e9:ae:93:1d:e1:c0:aa: 65:0f:fa:95:ba:48:61:9d:99:7a:e7:e1:06:1b:7c: 95:05:cf:75:62:84:46:b8:3c:38:d6:f1:81:3a:cf: fe:93:c6:c5:9b:bf:0e:73:b0:0e:02:ac:16:f1:d6: fc:6f:ab:2a:b0:95:1a:e2:4f:57:a8:ee:15:98:82: 3e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:26:15:51:8A:EF:F2:1A:F2:4B:78:97:C9:07:E2:77:2C:EE:5B:F2 X509v3 Authority Key Identifier: keyid:C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/5SYVUYrv8hryS3iXyQfidyzuW_I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.172.168.0/22 77.55.0.0/16 85.128.128.0/17 IPv6: 2a01:6100::/32 Signature Algorithm: sha256WithRSAEncryption 5e:58:2b:d2:7e:47:9b:e7:45:96:02:4b:92:7b:a2:47:b5:5a: 1c:4e:3a:92:0e:25:17:b0:e5:3a:1e:ba:c1:bd:2e:73:ce:7e: e9:f8:e9:20:e9:26:7e:42:26:f2:a9:3c:b1:fe:58:0a:95:9b: cb:d4:0c:39:50:ed:df:d0:36:e8:8e:9f:67:eb:f9:b7:87:d1: 7c:6e:e0:ed:b8:15:fd:36:66:33:7f:37:8e:77:3a:f6:90:1b: 88:36:19:fd:53:f4:64:c2:34:6a:c1:99:56:c8:df:ca:47:14: 87:52:d7:21:14:d1:5a:16:60:5b:2d:47:50:1e:f2:4d:81:83: 6e:c8:ef:55:25:4a:7b:ec:71:5b:a7:c2:38:59:3e:35:01:71: 06:19:d1:ea:c2:db:8e:7e:70:6e:fe:31:4b:a9:90:70:7d:f5: 1a:81:3b:16:94:8a:d6:9a:eb:c3:e1:d3:59:39:05:28:a2:4c: dd:0f:f3:4a:39:a7:b4:32:c3:7a:2d:27:94:19:9f:2b:95:ab: 21:54:2c:5b:65:61:46:3d:6d:c9:66:5e:ec:1b:8a:e5:54:2f: 5f:66:be:4d:f7:64:61:f9:ae:70:46:1c:19:61:05:29:93:37: f9:ec:52:10:a0:a3:c0:1e:45:1e:b0:39:5a:57:c4:6e:93:e0: 89:54:7f:ff -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZs2VhSSfbv79pIg8J+j/BdyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YTJmNDI0MDdmMjFjOWQ3NjkwZmIzMGZkOGNkYjJiZmRm NmQwMzAwHhcNMjUxMjE5MTExOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTI2MTU1MThhZWZmMjFhZjI0Yjc4OTdjOTA3ZTI3NzJjZWU1YmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmTdbvNPq8TTTaL0iFFlyoQM9BKI jJUz7W9ZHgHD1R5WlAavL6GDvv6umChCTdgTcOffzeBbwNFeXWtwONTmeUO/Sp2F 1ZsssFvILQKVc6E2gaaOm9Yjb2govFQX3alxxdYx5fRS2IuYEiwEDxBwDdL4JCPF f67Z1jK27RvjyaaMFMtIbVuKTUVgvN3gkq7x07mHGTes/LYiFfKjb3O+lFiqZKvn eVE3KTsFeqG3gOgG+Jma/gHJzyb//emukx3hwKplD/qVukhhnZl65+EGG3yVBc91 YoRGuDw41vGBOs/+k8bFm78Oc7AOAqwW8db8b6sqsJUa4k9XqO4VmII+1QIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFOUmFVGK7/Ia8kt4l8kH4ncs7lvyMB8GA1UdIwQY MBaAFMWi9CQH8hyddpD7MP2M2yv99tAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGFMMEpBZnlISjEya1Bzd19ZemJLXzMyMERBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xYTE4ZTEtNjdjOC00OTJlLThmYmEt ZmI1YzYyZTQyZjZiLzEvNVNZVlVZcnY4aHJ5UzNpWHlRZmlkeXp1V19JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8xYTE4ZTEtNjdjOC00OTJlLThmYmEtZmI1YzYyZTQyZjZi LzEveGFMMEpBZnlISjEya1Bzd19ZemJLXzMyMERBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwQCH6yoAwMA TTcDBAdVgIAwDQQCAAIwBwMFACoBYQAwDQYJKoZIhvcNAQELBQADggEBAF5YK9J+ R5vnRZYCS5J7oke1WhxOOpIOJRew5ToeusG9LnPOfun46SDpJn5CJvKpPLH+WAqV m8vUDDlQ7d/QNuiOn2fr+beH0Xxu4O24Ff02ZjN/N453OvaQG4g2Gf1T9GTCNGrB mVbI38pHFIdS1yEU0VoWYFstR1Ae8k2Bg27I71UlSnvscVunwjhZPjUBcQYZ0erC 245+cG7+MUupkHB99RqBOxaUitaa68Ph01k5BSiiTN0P80o5p7Qyw3otJ5QZnyuV qyFULFtlYUY9bclmXuwbiuVUL19mvk33ZGH5rnBGHBlhBSmTN/nsUhCgo8AeRR6w OVpXxG6T4IlUf/8= -----END CERTIFICATE-----Generated at Mon Dec 22 03:29:03 2025 by rpki-client