This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/5TVXDvHrUo9nOaH68rT-eGLsNRU.roa File: 5TVXDvHrUo9nOaH68rT-eGLsNRU.roa (raw, json) Hash identifier: jeXKydzH35nqP1LdnFoXR93OfanPjGvmI9nXhjmWVwQ= Subject key identifier: E5:35:57:0E:F1:EB:52:8F:67:39:A1:FA:F2:B4:FE:78:62:EC:35:15 Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec Certificate serial: 019B45B7B33442235E2F1D4036243DF2BC10 Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/5TVXDvHrUo9nOaH68rT-eGLsNRU.roa Signing time: Mon 22 Dec 2025 11:00:25 +0000 ROA not before: Mon 22 Dec 2025 11:00:25 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 19905 IP address blocks: 2.96.0.0/13 maxlen: 24 62.24.128.0/17 maxlen: 24 62.241.160.0/19 maxlen: 24 78.144.0.0/13 maxlen: 24 79.77.0.0/16 maxlen: 24 79.78.0.0/15 maxlen: 24 80.40.0.0/13 maxlen: 24 81.1.64.0/18 maxlen: 24 81.86.0.0/16 maxlen: 24 81.178.0.0/15 maxlen: 24 83.67.0.0/16 maxlen: 24 84.43.0.0/17 maxlen: 24 87.242.128.0/17 maxlen: 24 89.168.128.0/17 maxlen: 24 89.240.0.0/14 maxlen: 24 92.16.0.0/12 maxlen: 24 145.255.240.0/21 maxlen: 24 185.24.12.0/22 maxlen: 24 185.173.120.0/22 maxlen: 24 185.175.48.0/22 maxlen: 24 185.175.144.0/22 maxlen: 24 193.218.99.0/24 maxlen: 24 194.106.32.0/19 maxlen: 24 194.247.224.0/19 maxlen: 24 195.112.0.0/18 maxlen: 24 195.137.0.0/17 maxlen: 24 195.149.0.0/18 maxlen: 24 212.1.128.0/19 maxlen: 24 212.67.96.0/19 maxlen: 24 212.74.96.0/19 maxlen: 24 212.139.0.0/16 maxlen: 24 212.159.128.0/18 maxlen: 24 213.78.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 23:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b7:b3:34:42:23:5e:2f:1d:40:36:24:3d:f2:bc:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec Validity Not Before: Dec 22 11:00:25 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e535570ef1eb528f6739a1faf2b4fe7862ec3515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:3f:00:56:6c:6f:f0:70:fb:0d:13:39:2f:b6: e8:3a:fe:68:a5:e1:3f:86:67:61:9c:05:fb:1e:2d: 48:dc:db:38:03:a5:ad:1b:55:6c:0a:50:bb:79:79: 29:98:27:bf:8b:76:d0:c6:4f:15:d9:36:8c:af:a4: 41:9d:bf:83:12:0d:42:79:a2:3d:03:ab:68:f5:c8: be:15:04:59:ad:09:fc:e2:b8:ac:7c:ba:96:75:a0: a6:31:e0:af:7e:44:29:16:1a:a4:8a:e7:22:70:2d: f4:97:d5:ce:07:ea:21:a4:12:23:9f:cf:ea:ee:71: dd:6f:51:33:7d:11:43:f7:c0:bf:9c:fb:06:80:9c: d5:17:25:a1:ed:87:90:dd:b0:9b:2b:c8:43:8a:b7: 2b:b2:7f:00:cd:4b:b0:5b:57:bc:a5:10:ab:56:f4: ee:22:97:9c:5f:fb:ef:0c:f6:00:e7:aa:b1:c4:87: 9d:6e:5d:cc:06:19:31:a8:1e:d8:4a:11:95:ad:3f: 53:d5:d7:6b:dc:95:b1:07:20:0b:83:08:81:69:e3: 48:dd:66:e0:ad:74:23:25:d6:eb:af:a7:fd:38:57: 23:41:67:63:b3:17:65:40:2d:41:52:4e:3b:3f:84: 21:95:39:36:aa:73:03:a1:ad:c5:48:8d:ba:7d:68: a8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:35:57:0E:F1:EB:52:8F:67:39:A1:FA:F2:B4:FE:78:62:EC:35:15 X509v3 Authority Key Identifier: keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/5TVXDvHrUo9nOaH68rT-eGLsNRU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.96.0.0/13 62.24.128.0/17 62.241.160.0/19 78.144.0.0/13 79.77.0.0-79.79.255.255 80.40.0.0/13 81.1.64.0/18 81.86.0.0/16 81.178.0.0/15 83.67.0.0/16 84.43.0.0/17 87.242.128.0/17 89.168.128.0/17 89.240.0.0/14 92.16.0.0/12 145.255.240.0/21 185.24.12.0/22 185.173.120.0/22 185.175.48.0/22 185.175.144.0/22 193.218.99.0/24 194.106.32.0/19 194.247.224.0/19 195.112.0.0/18 195.137.0.0/17 195.149.0.0/18 212.1.128.0/19 212.67.96.0/19 212.74.96.0/19 212.139.0.0/16 212.159.128.0/18 213.78.0.0/16 Signature Algorithm: sha256WithRSAEncryption 23:c0:d2:7c:65:d8:e6:65:29:e7:fd:1b:11:b5:6f:6d:b2:89: 5b:c4:19:88:cc:5d:91:b7:75:12:af:14:c1:2f:82:b3:4a:61: d4:3f:83:2c:7d:5b:87:b2:c1:4b:07:b2:d5:f8:79:51:51:20: 3b:a8:22:e0:3c:7c:06:88:ea:ae:26:28:16:bd:06:c8:e8:1a: d9:d3:37:a0:39:ce:6a:aa:1c:9f:3c:90:52:bb:cd:e0:d1:7a: 48:51:92:1c:58:ee:9f:b6:95:90:88:e5:60:0c:33:5a:ee:85: 4c:0b:5f:3e:4a:7c:98:78:7f:98:3e:ea:5a:fd:6d:dc:3b:c0: 00:94:16:a8:1b:37:69:e2:f5:b3:22:ff:d8:da:8a:a4:78:d2: 69:9d:84:97:94:20:6e:91:91:36:ec:52:ba:21:3e:62:7f:34: 39:0c:37:66:47:24:c7:63:4e:98:21:ee:0e:ed:6d:90:12:fd: 07:8c:bb:aa:55:45:14:db:af:f6:a8:98:5e:01:43:91:af:1c: a8:98:e4:3c:5a:05:34:e6:cc:1d:ff:46:a7:e5:e5:db:5e:37: 16:d4:81:06:8a:f4:d3:c2:2e:c4:21:85:0f:46:32:c2:e0:a7: 14:9e:59:35:54:fc:da:24:21:43:29:f6:2c:9a:1d:d0:81:2d: e0:6c:ab:b5 -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgISAZtFt7M0QiNeLx1ANiQ98rwQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ODA3ZjZkNTBkOTdkOTcxZGNmMmUyZTUwNjRlOWI5MDdh ZGIzZWMwHhcNMjUxMjIyMTEwMDI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTM1NTcwZWYxZWI1MjhmNjczOWExZmFmMmI0ZmU3ODYyZWMzNTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8z8AVmxv8HD7DRM5L7boOv5opeE/ hmdhnAX7Hi1I3Ns4A6WtG1VsClC7eXkpmCe/i3bQxk8V2TaMr6RBnb+DEg1CeaI9 A6to9ci+FQRZrQn84risfLqWdaCmMeCvfkQpFhqkiucicC30l9XOB+ohpBIjn8/q 7nHdb1EzfRFD98C/nPsGgJzVFyWh7YeQ3bCbK8hDircrsn8AzUuwW1e8pRCrVvTu IpecX/vvDPYA56qxxIedbl3MBhkxqB7YShGVrT9T1ddr3JWxByALgwiBaeNI3Wbg rXQjJdbrr6f9OFcjQWdjsxdlQC1BUk47P4QhlTk2qnMDoa3FSI26fWiotQIDAQAB o4ICxDCCAsAwHQYDVR0OBBYEFOU1Vw7x61KPZzmh+vK0/nhi7DUVMB8GA1UdIwQY MBaAFKmAf21Q2X2XHc8uLlBk6bkHrbPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzIt MGQ4ZjdkZDhjY2U2LzEvNVRWWER2SHJVbzluT2FINjhyVC1lR0xzTlJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzItMGQ4ZjdkZDhjY2U2 LzEvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHZBggrBgEFBQcBBwEB/wSByTCBxjCBwwQCAAEwgbwDAwMC YAMEBz4YgAMEBT7xoAMDA06QMAoDAwBPTQMDBE9AAwMDUCgDBAZRAUADAwBRVgMD AVGyAwMAU0MDBAdUKwADBAdX8oADBAdZqIADAwJZ8AMDBFwQAwQDkf/wAwQCuRgM AwQCua14AwQCua8wAwQCua+QAwQAwdpjAwQFwmogAwQFwvfgAwQGw3AAAwQHw4kA AwQGw5UAAwQF1AGAAwQF1ENgAwQF1EpgAwMA1IsDBAbUn4ADAwDVTjANBgkqhkiG 9w0BAQsFAAOCAQEAI8DSfGXY5mUp5/0bEbVvbbKJW8QZiMxdkbd1Eq8UwS+Cs0ph 1D+DLH1bh7LBSwey1fh5UVEgO6gi4Dx8BojqriYoFr0GyOga2dM3oDnOaqocnzyQ UrvN4NF6SFGSHFjun7aVkIjlYAwzWu6FTAtfPkp8mHh/mD7qWv1t3DvAAJQWqBs3 aeL1syL/2NqKpHjSaZ2El5QgbpGRNuxSuiE+Yn80OQw3Zkckx2NOmCHuDu1tkBL9 B4y7qlVFFNuv9qiYXgFDka8cqJjkPFoFNObMHf9Gp+Xl2143FtSBBor008IuxCGF D0YywuCnFJ5ZNVT82iQhQyn2LJod0IEt4GyrtQ== -----END CERTIFICATE-----Generated at Sat Dec 27 07:21:28 2025 by rpki-client