This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/qGFUGJuxspgWAhMTwEHWda1tK4I.roa File: qGFUGJuxspgWAhMTwEHWda1tK4I.roa (raw, json) Hash identifier: kE0iH6eXvZqbSdSc8x4s8TfLFvAMHZpfdERWbyCEcBY= Subject key identifier: A8:61:54:18:9B:B1:B2:98:16:02:13:13:C0:41:D6:75:AD:6D:2B:82 Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Certificate serial: 019B2BF0A5ED0A0AB2E23B9E585CD5284B88 Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/qGFUGJuxspgWAhMTwEHWda1tK4I.roa Signing time: Wed 17 Dec 2025 10:52:29 +0000 ROA not before: Wed 17 Dec 2025 10:52:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48551 IP address blocks: 5.253.225.0/24 maxlen: 24 31.193.186.0/24 maxlen: 24 45.94.252.0/24 maxlen: 24 45.94.254.0/24 maxlen: 24 45.94.255.0/24 maxlen: 24 45.150.150.0/24 maxlen: 24 45.159.196.0/24 maxlen: 24 45.159.197.0/24 maxlen: 24 45.159.198.0/24 maxlen: 24 45.159.199.0/24 maxlen: 24 91.217.177.0/24 maxlen: 24 103.216.60.0/24 maxlen: 24 103.216.61.0/24 maxlen: 24 103.216.62.0/24 maxlen: 24 103.216.63.0/24 maxlen: 24 157.119.188.0/24 maxlen: 24 157.119.190.0/24 maxlen: 24 157.119.191.0/24 maxlen: 24 185.63.114.0/24 maxlen: 24 185.74.221.0/24 maxlen: 24 185.86.180.0/24 maxlen: 24 185.86.181.0/24 maxlen: 24 185.128.40.0/24 maxlen: 24 185.149.192.0/24 maxlen: 24 185.159.189.0/24 maxlen: 24 185.228.58.0/24 maxlen: 24 185.229.135.0/24 maxlen: 24 185.236.36.0/24 maxlen: 24 185.236.37.0/24 maxlen: 24 185.236.38.0/24 maxlen: 24 185.236.39.0/24 maxlen: 24 185.238.143.0/24 maxlen: 24 185.252.84.0/24 maxlen: 24 193.27.9.0/24 maxlen: 24 194.147.212.0/24 maxlen: 24 194.147.222.0/24 maxlen: 24 195.114.4.0/24 maxlen: 24 195.114.5.0/24 maxlen: 24 195.114.8.0/24 maxlen: 24 195.114.9.0/24 maxlen: 24 2a0d:9500::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f0:a5:ed:0a:0a:b2:e2:3b:9e:58:5c:d5:28:4b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Validity Not Before: Dec 17 10:52:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a86154189bb1b29816021313c041d675ad6d2b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:41:5f:62:ba:73:58:12:8f:32:25:c6:25:7a: f8:3b:d4:37:d4:6b:c4:c1:f7:eb:ec:e9:bf:2d:14: cc:88:a0:87:06:4a:fb:34:0d:9d:c5:34:70:0b:b7: e5:c9:73:03:ca:83:d0:61:bd:7b:dd:1c:b3:ac:e2: 3c:b3:69:65:f9:93:fd:11:9f:4f:07:46:95:22:15: 95:ac:6f:11:c2:54:99:08:a0:c5:2f:73:dc:55:85: cc:f4:15:1b:d2:99:7e:b1:e6:85:76:33:12:e4:72: e6:1e:d8:15:57:67:24:a0:d3:8b:d6:7c:97:cb:a2: a1:4e:b0:12:fa:4e:91:51:99:b3:11:bb:0b:e8:d1: 02:89:61:2e:9a:ac:8c:41:18:0d:48:2f:c4:a7:f0: 29:46:c6:96:85:f6:08:ce:0b:37:24:e1:f8:3f:45: b1:c6:ca:b7:54:94:ab:18:3e:4d:8d:61:b9:7f:77: 0c:89:f1:b5:12:55:71:10:03:88:ab:72:12:74:f5: ff:e7:2e:2d:80:89:c6:3d:49:98:cf:7e:95:7e:19: 28:23:62:74:22:6f:17:43:7b:b9:ad:04:c8:0f:ca: 40:07:a7:d7:9f:cd:89:f8:34:ac:c8:8e:1d:cc:23: 4d:07:b8:94:86:d5:bb:ef:a0:69:1c:2b:0b:ca:c3: 71:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:61:54:18:9B:B1:B2:98:16:02:13:13:C0:41:D6:75:AD:6D:2B:82 X509v3 Authority Key Identifier: keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/qGFUGJuxspgWAhMTwEHWda1tK4I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.225.0/24 31.193.186.0/24 45.94.252.0/24 45.94.254.0/23 45.150.150.0/24 45.159.196.0/22 91.217.177.0/24 103.216.60.0/22 157.119.188.0/24 157.119.190.0/23 185.63.114.0/24 185.74.221.0/24 185.86.180.0/23 185.128.40.0/24 185.149.192.0/24 185.159.189.0/24 185.228.58.0/24 185.229.135.0/24 185.236.36.0/22 185.238.143.0/24 185.252.84.0/24 193.27.9.0/24 194.147.212.0/24 194.147.222.0/24 195.114.4.0/23 195.114.8.0/23 IPv6: 2a0d:9500::/29 Signature Algorithm: sha256WithRSAEncryption 2c:f9:30:6a:4f:4f:61:8d:be:d0:a8:48:05:85:6c:67:14:e0: a9:0c:df:89:c1:cf:62:e9:b7:ca:97:69:bc:15:30:17:28:c5: 44:9d:16:b9:5f:a1:ac:92:41:a0:f2:30:47:3c:f8:25:c1:37: 26:8b:f0:2c:48:6f:03:58:99:aa:b7:6e:ab:9b:3d:a9:18:ca: 1d:f9:2a:86:1c:54:9e:0a:cf:51:b9:0d:3a:01:72:a1:b6:fb: 13:e9:00:f7:52:40:d2:de:db:26:dd:3f:6f:e9:58:34:a5:69: 56:c0:8a:49:fb:e9:0e:66:74:59:f2:bd:b6:b2:9b:d8:f6:94: 98:fe:96:5c:9c:5c:b9:1b:29:ed:9d:6f:80:ec:14:67:2a:8b: 9d:9c:90:4c:be:a9:a6:f8:44:72:31:2c:f4:2f:53:9e:55:2c: b3:e9:51:02:43:b6:f8:77:e0:fc:e5:67:64:4e:d5:38:78:b4: 4a:d5:fa:21:64:4b:86:22:c2:dc:ec:86:07:90:78:57:e5:d3: 40:48:c4:f9:50:64:c6:16:bf:bf:1a:46:03:8b:4e:80:d3:b9: 3a:d0:1d:f3:75:6e:9c:a5:4a:65:ca:97:62:18:ec:32:21:bf: 62:82:b1:b7:db:0b:6e:f6:c1:de:eb:cf:a8:69:66:a5:8c:0d: 3b:3d:61:88 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgISAZsr8KXtCgqy4jueWFzVKEuIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNDdhYTA5ZjJjNjEwZjZmNDRiNGU3NWMxY2Q5ZGNkMzg4 NGU1NWQwHhcNMjUxMjE3MTA1MjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODYxNTQxODliYjFiMjk4MTYwMjEzMTNjMDQxZDY3NWFkNmQyYjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkFfYrpzWBKPMiXGJXr4O9Q31GvE wffr7Om/LRTMiKCHBkr7NA2dxTRwC7flyXMDyoPQYb173RyzrOI8s2ll+ZP9EZ9P B0aVIhWVrG8RwlSZCKDFL3PcVYXM9BUb0pl+seaFdjMS5HLmHtgVV2ckoNOL1nyX y6KhTrAS+k6RUZmzEbsL6NECiWEumqyMQRgNSC/Ep/ApRsaWhfYIzgs3JOH4P0Wx xsq3VJSrGD5NjWG5f3cMifG1ElVxEAOIq3ISdPX/5y4tgInGPUmYz36VfhkoI2J0 Im8XQ3u5rQTID8pAB6fXn82J+DSsyI4dzCNNB7iUhtW776BpHCsLysNxKwIDAQAB o4ICszCCAq8wHQYDVR0OBBYEFKhhVBibsbKYFgITE8BB1nWtbSuCMB8GA1UdIwQY MBaAFItHqgnyxhD29EtOdcHNnc04hOVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgt NTAwMTUzOWQ3MTg1LzEvcUdGVUdKdXhzcGdXQWhNVHdFSFdkYTF0SzRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgtNTAwMTUzOWQ3MTg1 LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHIBggrBgEFBQcBBwEB/wSBuDCBtTCBowQCAAEwgZwDBAAF /eEDBAAfwboDBAAtXvwDBAEtXv4DBAAtlpYDBAItn8QDBABb2bEDBAJn2DwDBACd d7wDBAGdd74DBAC5P3IDBAC5St0DBAG5VrQDBAC5gCgDBAC5lcADBAC5n70DBAC5 5DoDBAC55YcDBAK57CQDBAC57o8DBAC5/FQDBADBGwkDBADCk9QDBADCk94DBAHD cgQDBAHDcggwDQQCAAIwBwMFAyoNlQAwDQYJKoZIhvcNAQELBQADggEBACz5MGpP T2GNvtCoSAWFbGcU4KkM34nBz2Lpt8qXabwVMBcoxUSdFrlfoaySQaDyMEc8+CXB NyaL8CxIbwNYmaq3bqubPakYyh35KoYcVJ4Kz1G5DToBcqG2+xPpAPdSQNLe2ybd P2/pWDSlaVbAikn76Q5mdFnyvbaym9j2lJj+llycXLkbKe2db4DsFGcqi52ckEy+ qab4RHIxLPQvU55VLLPpUQJDtvh34PzlZ2RO1Th4tErV+iFkS4YiwtzshgeQeFfl 00BIxPlQZMYWv78aRgOLToDTuTrQHfN1bpylSmXKl2IY7DIhv2KCsbfbC272wd7r z6hpZqWMDTs9YYg= -----END CERTIFICATE-----Generated at Fri Dec 19 09:56:46 2025 by rpki-client