This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/5plB530qygQZgc5iy94cTTubXQY.roa File: 5plB530qygQZgc5iy94cTTubXQY.roa (raw, json) Hash identifier: bggGhARy6ftWuU+BuycqTEacDg0xLxj5VnkE+HMr4qY= Subject key identifier: E6:99:41:E7:7D:2A:CA:04:19:81:CE:62:CB:DE:1C:4D:3B:9B:5D:06 Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc Certificate serial: 019B35A7379C9C2BCAA95417AF5DC768745A Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/5plB530qygQZgc5iy94cTTubXQY.roa Signing time: Fri 19 Dec 2025 08:08:29 +0000 ROA not before: Fri 19 Dec 2025 08:08:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48282 IP address blocks: 45.150.36.0/24 maxlen: 24 45.150.37.0/24 maxlen: 24 45.150.38.0/24 maxlen: 24 45.150.39.0/24 maxlen: 24 62.113.112.0/24 maxlen: 24 62.113.113.0/24 maxlen: 24 62.113.114.0/24 maxlen: 24 62.113.115.0/24 maxlen: 24 62.113.116.0/24 maxlen: 24 62.113.117.0/24 maxlen: 24 62.113.118.0/24 maxlen: 24 62.113.119.0/24 maxlen: 24 83.217.212.0/24 maxlen: 24 83.217.213.0/24 maxlen: 24 83.217.214.0/24 maxlen: 24 83.217.215.0/24 maxlen: 24 84.54.44.0/24 maxlen: 24 84.54.47.0/24 maxlen: 24 85.198.108.0/24 maxlen: 24 85.198.109.0/24 maxlen: 24 85.198.110.0/24 maxlen: 24 85.198.111.0/24 maxlen: 24 88.210.34.0/24 maxlen: 24 88.210.35.0/24 maxlen: 24 88.210.52.0/24 maxlen: 24 88.210.53.0/24 maxlen: 24 88.210.54.0/24 maxlen: 24 88.210.55.0/24 maxlen: 24 88.218.60.0/24 maxlen: 24 88.218.61.0/24 maxlen: 24 88.218.62.0/24 maxlen: 24 88.218.63.0/24 maxlen: 24 91.142.72.0/24 maxlen: 24 91.142.73.0/24 maxlen: 24 91.142.74.0/24 maxlen: 24 91.142.75.0/24 maxlen: 24 91.184.244.0/24 maxlen: 24 91.184.245.0/24 maxlen: 24 91.184.246.0/24 maxlen: 24 91.184.247.0/24 maxlen: 24 91.212.150.0/24 maxlen: 24 93.183.92.0/24 maxlen: 24 93.183.93.0/24 maxlen: 24 93.183.94.0/24 maxlen: 24 93.183.95.0/24 maxlen: 24 94.103.83.0/24 maxlen: 24 94.103.84.0/24 maxlen: 24 94.103.85.0/24 maxlen: 24 94.103.86.0/24 maxlen: 24 94.103.87.0/24 maxlen: 24 94.103.88.0/24 maxlen: 24 94.103.89.0/24 maxlen: 24 94.103.90.0/24 maxlen: 24 94.103.91.0/24 maxlen: 24 94.103.92.0/24 maxlen: 24 94.103.93.0/24 maxlen: 24 95.142.33.0/24 maxlen: 24 95.142.34.0/24 maxlen: 24 95.142.45.0/24 maxlen: 24 95.142.46.0/24 maxlen: 24 95.142.47.0/24 maxlen: 24 109.172.84.0/24 maxlen: 24 109.172.85.0/24 maxlen: 24 109.172.86.0/24 maxlen: 24 109.172.87.0/24 maxlen: 24 109.172.88.0/24 maxlen: 24 109.172.89.0/24 maxlen: 24 109.172.90.0/24 maxlen: 24 109.172.91.0/24 maxlen: 24 178.20.40.0/24 maxlen: 24 178.20.41.0/24 maxlen: 24 178.20.42.0/24 maxlen: 24 178.20.43.0/24 maxlen: 24 178.20.44.0/24 maxlen: 24 178.20.45.0/24 maxlen: 24 178.20.46.0/24 maxlen: 24 178.20.47.0/24 maxlen: 24 178.130.131.0/24 maxlen: 24 178.217.98.0/24 maxlen: 24 178.217.99.0/24 maxlen: 24 185.209.28.0/24 maxlen: 24 185.209.29.0/24 maxlen: 24 185.209.30.0/24 maxlen: 24 185.209.31.0/24 maxlen: 24 185.231.152.0/24 maxlen: 24 185.231.153.0/24 maxlen: 24 185.231.154.0/24 maxlen: 24 185.231.155.0/24 maxlen: 24 192.144.56.0/24 maxlen: 24 192.144.57.0/24 maxlen: 24 192.144.58.0/24 maxlen: 24 192.144.59.0/24 maxlen: 24 193.178.170.0/24 maxlen: 24 195.2.66.0/24 maxlen: 24 195.2.67.0/24 maxlen: 24 195.2.70.0/24 maxlen: 24 195.2.71.0/24 maxlen: 24 195.2.73.0/24 maxlen: 24 195.2.74.0/24 maxlen: 24 195.2.75.0/24 maxlen: 24 195.2.76.0/24 maxlen: 24 195.2.78.0/24 maxlen: 24 195.2.79.0/24 maxlen: 24 195.2.80.0/24 maxlen: 24 195.2.81.0/24 maxlen: 24 195.2.84.0/24 maxlen: 24 195.2.85.0/24 maxlen: 24 212.118.45.0/24 maxlen: 24 212.118.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 11:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a7:37:9c:9c:2b:ca:a9:54:17:af:5d:c7:68:74:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5503251db69693362a927e2b130467945c54f0fc Validity Not Before: Dec 19 08:08:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e69941e77d2aca041981ce62cbde1c4d3b9b5d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5a:9a:35:6d:49:63:e9:cb:6e:3e:49:5c:af: 72:04:f6:6a:71:5a:b1:d9:c2:f8:f1:ad:0e:6f:1c: c5:c0:91:1b:6b:00:73:bf:d7:5c:25:7d:e2:93:fb: ba:dc:30:82:08:f6:34:c6:df:19:1e:67:36:b4:c9: ab:2e:9f:31:be:a4:db:1a:eb:0d:f3:08:6b:71:0a: 22:37:d7:e8:40:c3:be:41:87:0a:d1:80:06:ea:6f: cf:6c:fa:da:f6:e1:1b:58:3c:15:b9:80:65:fd:65: 86:d2:3d:ac:de:e2:23:fb:c0:61:1a:62:75:74:83: 91:dd:d5:ff:6e:f6:86:dc:c5:60:18:b5:ed:ba:f8: 26:69:24:00:f4:a1:30:2f:a9:1e:56:e1:69:b4:16: 07:b9:3b:a6:67:ff:50:54:11:73:d1:b9:f8:15:c5: 90:01:8c:30:97:88:43:83:37:b3:87:98:27:06:17: 2f:e3:42:e2:74:d5:fd:22:c1:ec:d0:1f:94:ed:c4: 9d:79:a4:0b:b7:9b:cc:25:24:d9:41:2d:bd:5b:1a: fa:87:87:2c:50:1f:31:1d:5e:56:aa:62:9a:f1:47: 36:a9:4b:af:56:d8:fb:7e:c9:21:f9:e8:4e:a6:f8: 8e:18:db:45:a9:9a:05:bb:bf:63:da:bd:1a:ba:99: 4b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:99:41:E7:7D:2A:CA:04:19:81:CE:62:CB:DE:1C:4D:3B:9B:5D:06 X509v3 Authority Key Identifier: keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/5plB530qygQZgc5iy94cTTubXQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.36.0/22 62.113.112.0/21 83.217.212.0/22 84.54.44.0/24 84.54.47.0/24 85.198.108.0/22 88.210.34.0/23 88.210.52.0/22 88.218.60.0/22 91.142.72.0/22 91.184.244.0/22 91.212.150.0/24 93.183.92.0/22 94.103.83.0-94.103.93.255 95.142.33.0-95.142.34.255 95.142.45.0-95.142.47.255 109.172.84.0-109.172.91.255 178.20.40.0/21 178.130.131.0/24 178.217.98.0/23 185.209.28.0/22 185.231.152.0/22 192.144.56.0/22 193.178.170.0/24 195.2.66.0/23 195.2.70.0/23 195.2.73.0-195.2.76.255 195.2.78.0-195.2.81.255 195.2.84.0/23 212.118.45.0/24 212.118.56.0/24 Signature Algorithm: sha256WithRSAEncryption 55:59:1d:f3:29:aa:66:ac:16:90:1a:4f:d3:4e:3b:d8:7e:3f: 42:ac:7d:71:45:4c:f8:0b:fe:c0:c9:c1:29:f0:c6:c8:7d:98: 58:04:9a:ed:a5:5e:10:26:b9:fb:2a:34:e1:cd:e0:61:fa:6f: 40:68:cc:71:32:ed:02:ff:11:d2:fc:49:2f:59:59:be:8f:cc: 4e:23:ff:c9:d1:18:e6:bb:f6:cc:12:28:99:a2:62:d5:41:e8: e7:d7:44:0e:38:bd:09:97:bb:f6:dc:1f:4d:1b:c7:ac:e3:b8: e1:09:10:87:ab:4c:68:90:11:89:47:62:02:04:f3:5b:2c:7d: 64:5e:6e:bc:1e:9d:51:0d:b2:6f:cc:ea:51:d2:aa:e6:d0:f6: 3f:16:ad:62:e2:c0:52:ab:43:7d:0d:f9:47:f3:85:39:dc:41: 3f:80:90:62:92:9b:9f:03:71:42:73:da:2b:61:68:80:c9:37: 3d:a4:ce:a4:65:79:27:65:ec:66:ac:35:db:3b:41:8c:15:ae: c4:b2:ef:1e:74:8b:2f:19:4b:fa:1a:99:77:a2:76:e1:c1:ee: ac:7f:19:e0:73:a2:2e:b8:a9:43:a8:bc:7e:f5:99:6e:cd:51: 5d:4d:e1:a6:e4:0f:4e:9e:a1:89:25:49:89:97:10:52:6c:23: d6:34:34:74 -----BEGIN CERTIFICATE----- MIIF5zCCBM+gAwIBAgISAZs1pzecnCvKqVQXr13HaHRaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MDMyNTFkYjY5NjkzMzYyYTkyN2UyYjEzMDQ2Nzk0NWM1 NGYwZmMwHhcNMjUxMjE5MDgwODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjk5NDFlNzdkMmFjYTA0MTk4MWNlNjJjYmRlMWM0ZDNiOWI1ZDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFqaNW1JY+nLbj5JXK9yBPZqcVqx 2cL48a0ObxzFwJEbawBzv9dcJX3ik/u63DCCCPY0xt8ZHmc2tMmrLp8xvqTbGusN 8whrcQoiN9foQMO+QYcK0YAG6m/PbPra9uEbWDwVuYBl/WWG0j2s3uIj+8BhGmJ1 dIOR3dX/bvaG3MVgGLXtuvgmaSQA9KEwL6keVuFptBYHuTumZ/9QVBFz0bn4FcWQ AYwwl4hDgzezh5gnBhcv40LidNX9IsHs0B+U7cSdeaQLt5vMJSTZQS29Wxr6h4cs UB8xHV5WqmKa8Uc2qUuvVtj7fskh+ehOpviOGNtFqZoFu79j2r0auplLewIDAQAB o4IC8zCCAu8wHQYDVR0OBBYEFOaZQed9KsoEGYHOYsveHE07m10GMB8GA1UdIwQY MBaAFFUDJR22lpM2KpJ+KxMEZ5RcVPD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jN2I5ZGMtN2FjNi00YWNhLWE0M2It M2NiYWQ1YjkwNGI1LzEvNXBsQjUzMHF5Z1FaZ2M1aXk5NGNUVHViWFFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jN2I5ZGMtN2FjNi00YWNhLWE0M2ItM2NiYWQ1YjkwNGI1 LzEvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBBwYIKwYBBQUHAQcBAf8EgfcwgfQwgfEEAgABMIHqAwQC LZYkAwQDPnFwAwQCU9nUAwQAVDYsAwQAVDYvAwQCVcZsAwQBWNIiAwQCWNI0AwQC WNo8AwQCW45IAwQCW7j0AwQAW9SWAwQCXbdcMAwDBABeZ1MDBAFeZ1wwDAMEAF+O IQMEAF+OIjAMAwQAX44tAwQEX44gMAwDBAJtrFQDBAJtrFgDBAOyFCgDBACygoMD BAGy2WIDBAK50RwDBAK555gDBALAkDgDBADBsqoDBAHDAkIDBAHDAkYwDAMEAMMC SQMEAMMCTDAMAwQBwwJOAwQBwwJQAwQBwwJUAwQA1HYtAwQA1HY4MA0GCSqGSIb3 DQEBCwUAA4IBAQBVWR3zKapmrBaQGk/TTjvYfj9CrH1xRUz4C/7AycEp8MbIfZhY BJrtpV4QJrn7KjThzeBh+m9AaMxxMu0C/xHS/EkvWVm+j8xOI//J0Rjmu/bMEiiZ omLVQejn10QOOL0Jl7v23B9NG8es47jhCRCHq0xokBGJR2ICBPNbLH1kXm68Hp1R DbJvzOpR0qrm0PY/Fq1i4sBSq0N9DflH84U53EE/gJBikpufA3FCc9orYWiAyTc9 pM6kZXknZexmrDXbO0GMFa7Esu8edIsvGUv6Gpl3onbhwe6sfxngc6IuuKlDqLx+ 9ZluzVFdTeGm5A9OnqGJJUmJlxBSbCPWNDR0 -----END CERTIFICATE-----Generated at Sat Dec 20 21:03:31 2025 by rpki-client