This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/1d7lht6j6g6IBSQE-kwlN6-n274.roa File: 1d7lht6j6g6IBSQE-kwlN6-n274.roa (raw, json) Hash identifier: FxkltwSbDgPJPiN3Ikj0L41qFz2SfTfsI4DWdFa9+DM= Subject key identifier: D5:DE:E5:86:DE:A3:EA:0E:88:05:24:04:FA:4C:25:37:AF:A7:DB:BE Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B55CA263046C190883F65F94D90F4E90C Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/1d7lht6j6g6IBSQE-kwlN6-n274.roa Signing time: Thu 25 Dec 2025 13:54:29 +0000 ROA not before: Thu 25 Dec 2025 13:54:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204997 IP address blocks: 45.144.64.0/24 maxlen: 24 45.144.65.0/24 maxlen: 24 45.144.66.0/24 maxlen: 24 45.144.67.0/24 maxlen: 24 46.17.104.0/24 maxlen: 24 91.217.81.0/24 maxlen: 24 139.28.222.0/24 maxlen: 24 139.28.223.0/24 maxlen: 24 147.78.64.0/24 maxlen: 24 147.78.65.0/24 maxlen: 24 147.78.66.0/24 maxlen: 24 147.78.67.0/24 maxlen: 24 185.17.3.0/24 maxlen: 24 185.104.248.0/24 maxlen: 24 185.104.249.0/24 maxlen: 24 185.139.68.0/24 maxlen: 24 185.139.69.0/24 maxlen: 24 185.139.70.0/24 maxlen: 24 185.139.71.0/24 maxlen: 24 185.174.138.0/24 maxlen: 24 185.180.230.0/24 maxlen: 24 185.180.231.0/24 maxlen: 24 185.188.182.0/24 maxlen: 24 185.188.183.0/24 maxlen: 24 185.189.12.0/22 maxlen: 22 185.189.12.0/24 maxlen: 24 185.189.13.0/24 maxlen: 24 185.189.14.0/24 maxlen: 24 185.189.15.0/24 maxlen: 24 185.195.24.0/24 maxlen: 24 185.195.25.0/24 maxlen: 24 185.195.26.0/24 maxlen: 24 185.195.27.0/24 maxlen: 24 185.204.0.0/24 maxlen: 24 185.204.2.0/24 maxlen: 24 185.204.3.0/24 maxlen: 24 185.212.148.0/24 maxlen: 24 185.244.172.0/24 maxlen: 24 185.244.173.0/24 maxlen: 24 185.252.146.0/24 maxlen: 24 185.252.147.0/24 maxlen: 24 185.255.132.0/24 maxlen: 24 185.255.133.0/24 maxlen: 24 185.255.134.0/24 maxlen: 24 185.255.135.0/24 maxlen: 24 193.109.78.0/24 maxlen: 24 193.109.79.0/24 maxlen: 24 195.66.114.0/24 maxlen: 24 2a04:5200:fb01::/48 maxlen: 48 2a04:5200:fb02::/48 maxlen: 48 2a04:5200:ff00::/48 maxlen: 48 2a04:5200:ff10::/48 maxlen: 48 2a04:5200:fff1::/48 maxlen: 48 2a04:5200:fff2::/48 maxlen: 48 2a04:5200:fff3::/48 maxlen: 48 2a04:5200:fff4::/48 maxlen: 48 2a04:5200:fff5::/48 maxlen: 48 2a04:5200:fff6::/48 maxlen: 48 2a04:5200:fff7::/48 maxlen: 48 2a04:5200:fff8::/48 maxlen: 48 2a04:5200:fff9::/48 maxlen: 48 2a04:5200:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:ca:26:30:46:c1:90:88:3f:65:f9:4d:90:f4:e9:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Dec 25 13:54:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d5dee586dea3ea0e88052404fa4c2537afa7dbbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:75:e0:8f:64:c1:ad:18:3c:b1:4b:94:d4:9d: 8c:e7:48:f3:6f:7f:ce:bc:2c:1a:bc:ec:bf:9c:3d: 84:19:f6:d3:d2:5c:5a:54:79:58:5a:00:da:5b:2a: da:a9:68:f2:03:4f:c5:5c:00:a9:b7:34:6e:9d:3f: 41:df:ef:3d:cf:33:32:04:fa:98:d6:e8:dc:c4:21: 81:ff:68:46:ae:51:ce:1f:e7:b8:00:59:86:c7:12: d7:97:a3:f2:df:3a:e2:1e:22:af:5f:7d:37:65:82: c7:b5:79:1b:f3:24:0c:26:d0:64:65:7e:e1:35:26: 8a:75:09:24:3a:62:be:2f:4f:15:21:b2:5e:b2:c1: 6a:8c:f3:fc:fe:ad:4b:2b:0a:cb:4d:1e:86:c2:46: a3:cb:25:ae:46:99:45:39:e6:eb:25:c1:d6:e3:83: 20:6c:e1:af:31:2e:3c:66:55:2e:eb:14:34:dd:23: e0:e7:d9:3d:b5:63:c0:ff:09:00:ab:4e:57:68:8b: b0:1c:8c:70:59:6a:2b:05:8e:3d:38:7d:18:76:80: ec:23:76:67:2d:cb:2f:1b:9a:5b:8d:0d:3c:94:78: ee:2e:6a:36:71:b0:a6:d0:11:00:50:92:1c:86:30: fd:5e:68:c2:34:9b:ad:c9:0f:4a:c3:5e:85:58:08: fa:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DE:E5:86:DE:A3:EA:0E:88:05:24:04:FA:4C:25:37:AF:A7:DB:BE X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/1d7lht6j6g6IBSQE-kwlN6-n274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.64.0/22 46.17.104.0/24 91.217.81.0/24 139.28.222.0/23 147.78.64.0/22 185.17.3.0/24 185.104.248.0/23 185.139.68.0/22 185.174.138.0/24 185.180.230.0/23 185.188.182.0/23 185.189.12.0/22 185.195.24.0/22 185.204.0.0/24 185.204.2.0/23 185.212.148.0/24 185.244.172.0/23 185.252.146.0/23 185.255.132.0/22 193.109.78.0/23 195.66.114.0/24 IPv6: 2a04:5200:fb01::-2a04:5200:fb02:ffff:ffff:ffff:ffff:ffff 2a04:5200:ff00::/48 2a04:5200:ff10::/48 2a04:5200:fff1::-2a04:5200:fff9:ffff:ffff:ffff:ffff:ffff 2a04:5200:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 17:f3:01:63:42:23:92:ea:da:bd:c0:d9:57:1e:1d:d8:91:f7: c7:8e:ee:0a:01:88:93:55:8d:66:8d:ea:cf:c5:66:5c:41:49: 9f:fc:1b:72:a2:b6:55:44:f0:05:e1:82:ae:df:6c:fe:ad:ec: c0:b3:06:e1:8c:de:23:c1:12:77:0f:9f:a1:cb:89:6e:0f:f3: ce:0a:14:05:76:d6:7a:27:51:66:88:fe:5d:13:58:92:11:6c: 88:8d:3f:d4:26:8d:1f:da:e7:05:40:46:ab:22:07:80:65:03: 4f:e5:5c:a2:5e:6c:59:47:bb:a8:e5:7a:20:ce:0d:6d:e5:9b: 12:77:b6:83:25:ce:30:4e:23:04:d3:1c:96:ef:dd:bf:8e:77: a9:f1:41:f3:b1:b1:ea:2d:84:00:0d:33:41:65:16:7c:66:df: 10:7f:9e:41:bf:ae:47:f4:ba:25:4d:63:2f:68:6d:fa:10:a9: d1:19:84:a5:b3:24:56:f3:a6:b5:b5:e6:a7:80:90:d1:a0:ce: d6:55:b3:cd:fa:66:fe:55:40:d3:fe:35:9c:d8:59:3f:a4:c7: 53:bf:9f:fe:67:c6:35:b3:98:0f:ac:6e:43:ba:4f:96:2f:53: cd:64:9a:1c:6d:9b:e9:39:80:58:1c:23:93:77:4f:50:12:0f: e4:91:75:bd -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgISAZtVyiYwRsGQiD9l+U2Q9OkMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjUxMjI1MTM1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWRlZTU4NmRlYTNlYTBlODgwNTI0MDRmYTRjMjUzN2FmYTdkYmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXXgj2TBrRg8sUuU1J2M50jzb3/O vCwavOy/nD2EGfbT0lxaVHlYWgDaWyraqWjyA0/FXACptzRunT9B3+89zzMyBPqY 1ujcxCGB/2hGrlHOH+e4AFmGxxLXl6Py3zriHiKvX303ZYLHtXkb8yQMJtBkZX7h NSaKdQkkOmK+L08VIbJessFqjPP8/q1LKwrLTR6GwkajyyWuRplFOebrJcHW44Mg bOGvMS48ZlUu6xQ03SPg59k9tWPA/wkAq05XaIuwHIxwWWorBY49OH0YdoDsI3Zn LcsvG5pbjQ08lHjuLmo2cbCm0BEAUJIchjD9XmjCNJutyQ9Kw16FWAj65wIDAQAB o4IC0DCCAswwHQYDVR0OBBYEFNXe5Ybeo+oOiAUkBPpMJTevp9u+MB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvMWQ3bGh0Nmo2ZzZJQlNRRS1rd2xONi1uMjc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHlBggrBgEFBQcBBwEB/wSB1TCB0jCBhAQCAAEwfgMEAi2Q QAMEAC4RaAMEAFvZUQMEAYsc3gMEApNOQAMEALkRAwMEAblo+AMEArmLRAMEALmu igMEAbm05gMEAbm8tgMEArm9DAMEArnDGAMEALnMAAMEAbnMAgMEALnUlAMEAbn0 rAMEAbn8kgMEArn/hAMEAcFtTgMEAMNCcjBJBAIAAjBDMBIDBwAqBFIA+wEDBwAq BFIA+wIDBwAqBFIA/wADBwAqBFIA/xAwEgMHACoEUgD/8QMHASoEUgD/+AMHACoE UgD//zANBgkqhkiG9w0BAQsFAAOCAQEAF/MBY0IjkuravcDZVx4d2JH3x47uCgGI k1WNZo3qz8VmXEFJn/wbcqK2VUTwBeGCrt9s/q3swLMG4YzeI8ESdw+focuJbg/z zgoUBXbWeidRZoj+XRNYkhFsiI0/1CaNH9rnBUBGqyIHgGUDT+Vcol5sWUe7qOV6 IM4NbeWbEne2gyXOME4jBNMclu/dv453qfFB87Gx6i2EAA0zQWUWfGbfEH+eQb+u R/S6JU1jL2ht+hCp0RmEpbMkVvOmtbXmp4CQ0aDO1lWzzfpm/lVA0/41nNhZP6TH U7+f/mfGNbOYD6xuQ7pPli9TzWSaHG2b6TmAWBwjk3dPUBIP5JF1vQ== -----END CERTIFICATE-----Generated at Tue Dec 30 12:16:51 2025 by rpki-client