This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/GHbptIxWWe3RfwOGHOLhL-vzTRM.roa File: GHbptIxWWe3RfwOGHOLhL-vzTRM.roa (raw, json) Hash identifier: 2Gr+MavX74oGSvH6egWnzSu85+IJnQIfGmKNdWcljxM= Subject key identifier: 18:76:E9:B4:8C:56:59:ED:D1:7F:03:86:1C:E2:E1:2F:EB:F3:4D:13 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B35A738286E03E0A170A863AA8F1753CB Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/GHbptIxWWe3RfwOGHOLhL-vzTRM.roa Signing time: Fri 19 Dec 2025 08:08:29 +0000 ROA not before: Fri 19 Dec 2025 08:08:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200740 IP address blocks: 45.9.72.0/24 maxlen: 24 45.138.73.0/24 maxlen: 24 45.138.74.0/24 maxlen: 24 46.17.105.0/24 maxlen: 24 91.217.76.0/24 maxlen: 24 94.142.136.0/23 maxlen: 23 95.214.9.0/24 maxlen: 24 95.214.10.0/23 maxlen: 23 185.40.7.0/24 maxlen: 24 185.58.204.0/24 maxlen: 24 185.94.164.0/23 maxlen: 23 185.102.136.0/24 maxlen: 24 185.117.116.0/24 maxlen: 24 185.117.119.0/24 maxlen: 24 185.200.190.0/24 maxlen: 24 185.217.197.0/24 maxlen: 24 185.232.170.0/23 maxlen: 23 185.233.80.0/23 maxlen: 23 185.233.82.0/24 maxlen: 24 185.233.202.0/23 maxlen: 23 185.252.144.0/24 maxlen: 24 193.124.182.0/24 maxlen: 24 193.124.183.0/24 maxlen: 24 193.124.188.0/23 maxlen: 23 193.124.190.0/24 maxlen: 24 194.36.178.0/23 maxlen: 23 2a04:5200:68::/48 maxlen: 48 2a04:5201:2::/48 maxlen: 48 2a04:5201:4::/48 maxlen: 48 2a04:5201:6::/48 maxlen: 48 2a04:5201:7::/48 maxlen: 48 2a04:5201:9::/48 maxlen: 48 2a04:5201:10::/48 maxlen: 48 2a04:5201:8018::/48 maxlen: 48 2a04:5202::/48 maxlen: 48 2a0b:7780::/32 maxlen: 32 2a0b:7781::/32 maxlen: 32 2a0b:7782::/32 maxlen: 32 2a0b:7783::/32 maxlen: 32 2a0c:77c0::/32 maxlen: 32 2a0c:77c1::/32 maxlen: 32 2a0c:77c2::/32 maxlen: 32 2a0c:77c3::/32 maxlen: 32 2a0d:3880::/32 maxlen: 32 2a0d:3881::/32 maxlen: 32 2a0d:3882::/32 maxlen: 32 2a0d:3883::/32 maxlen: 32 2a0e:d604:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a7:38:28:6e:03:e0:a1:70:a8:63:aa:8f:17:53:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Dec 19 08:08:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1876e9b48c5659edd17f03861ce2e12febf34d13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:82:5c:e3:8a:65:a9:a7:9e:ae:a6:7d:c3:e9: 88:21:13:9a:63:4f:e6:f6:45:3a:3d:50:c8:a8:e3: c2:73:da:e3:23:80:47:80:81:df:44:75:d8:fa:3a: bb:fd:e0:e5:5c:d0:f6:ee:6f:e3:d7:00:b3:d2:ee: 7d:c9:8f:b6:d2:e9:b4:90:87:b0:7c:fe:cd:1d:0e: 1d:59:d9:31:e1:5d:19:cf:6e:a3:72:0b:b3:1e:d1: 04:aa:c0:0d:5e:a5:93:7a:0c:1b:47:10:ba:1a:af: f6:1a:29:07:5e:27:10:50:ca:8c:2d:68:d3:62:42: b5:6f:9e:37:38:a4:de:3e:f6:17:6e:47:37:01:e6: af:cb:f9:e6:be:07:18:9e:3b:54:06:fb:e9:b1:ef: f0:a2:c3:3e:85:f6:88:29:ca:f7:e6:88:98:42:6b: 43:2f:bd:9d:0e:33:8b:26:d5:22:e4:0a:e9:3b:d1: ff:9c:e8:91:9a:ad:75:d7:f7:e5:24:25:a4:68:4c: a8:b9:22:90:80:3d:9e:74:ea:d7:cf:52:75:3e:ae: 78:20:47:65:50:34:10:c5:bd:c4:78:d0:92:91:e5: 09:73:d4:ca:1d:e2:cc:7e:e9:10:ea:43:f9:35:b9: e7:a1:19:8a:fb:7d:01:0b:96:2e:bd:19:96:17:e7: 26:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:76:E9:B4:8C:56:59:ED:D1:7F:03:86:1C:E2:E1:2F:EB:F3:4D:13 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/GHbptIxWWe3RfwOGHOLhL-vzTRM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.72.0/24 45.138.73.0-45.138.74.255 46.17.105.0/24 91.217.76.0/24 94.142.136.0/23 95.214.9.0-95.214.11.255 185.40.7.0/24 185.58.204.0/24 185.94.164.0/23 185.102.136.0/24 185.117.116.0/24 185.117.119.0/24 185.200.190.0/24 185.217.197.0/24 185.232.170.0/23 185.233.80.0-185.233.82.255 185.233.202.0/23 185.252.144.0/24 193.124.182.0/23 193.124.188.0-193.124.190.255 194.36.178.0/23 IPv6: 2a04:5200:68::/48 2a04:5201:2::/48 2a04:5201:4::/48 2a04:5201:6::/47 2a04:5201:9::/48 2a04:5201:10::/48 2a04:5201:8018::/48 2a04:5202::/48 2a0b:7780::/30 2a0c:77c0::/30 2a0d:3880::/30 2a0e:d604:2::/48 Signature Algorithm: sha256WithRSAEncryption 67:1f:92:9c:7e:6b:a1:a2:f7:62:b9:58:b5:9b:b2:ca:dd:36: 8b:9d:86:5b:9a:29:da:7f:d2:7a:91:59:a5:53:e9:0b:76:04: ff:ea:47:d1:8b:cd:eb:6b:3b:67:cd:ef:f1:70:87:2d:e6:44: 93:c2:45:3f:79:d5:61:a8:cb:fb:54:52:79:25:cb:74:05:03: 1d:f3:f1:3b:65:a1:83:d4:92:48:be:d2:9e:17:4a:34:4e:f4: 56:84:3c:9c:25:f7:bc:16:0d:ff:50:41:60:6a:78:47:4a:e9: 8c:6c:02:f2:cf:2e:f3:2a:8c:37:b7:80:69:25:a8:20:dd:c0: 08:6c:ae:0c:e4:34:59:99:ab:97:20:71:35:34:e2:f1:12:9b: 92:50:5e:66:13:7f:79:5b:d7:5c:66:6a:37:63:36:7f:d0:a1: 92:24:d2:a4:b9:8c:7e:60:e9:e5:4e:8c:41:c3:33:af:cd:5f: 4d:9f:df:0d:05:59:c9:32:54:cd:18:d3:05:38:d3:aa:08:5c: fb:11:84:7e:b5:b0:ad:96:00:f2:c4:6d:d9:0e:7b:88:11:a0: d8:8e:fa:96:30:4b:2c:d4:aa:0f:ba:09:ad:70:c9:9c:1d:06: 80:da:6a:44:b5:71:d8:31:9c:6a:98:ae:7c:0b:cb:90:5c:87: 8c:56:c2:4d -----BEGIN CERTIFICATE----- MIIGCzCCBPOgAwIBAgISAZs1pzgobgPgoXCoY6qPF1PLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjUxMjE5MDgwODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODc2ZTliNDhjNTY1OWVkZDE3ZjAzODYxY2UyZTEyZmViZjM0ZDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIJc44plqaeerqZ9w+mIIROaY0/m 9kU6PVDIqOPCc9rjI4BHgIHfRHXY+jq7/eDlXND27m/j1wCz0u59yY+20um0kIew fP7NHQ4dWdkx4V0Zz26jcguzHtEEqsANXqWTegwbRxC6Gq/2GikHXicQUMqMLWjT YkK1b543OKTePvYXbkc3Aeavy/nmvgcYnjtUBvvpse/wosM+hfaIKcr35oiYQmtD L72dDjOLJtUi5ArpO9H/nOiRmq111/flJCWkaEyouSKQgD2edOrXz1J1Pq54IEdl UDQQxb3EeNCSkeUJc9TKHeLMfukQ6kP5NbnnoRmK+30BC5YuvRmWF+cmtwIDAQAB o4IDFzCCAxMwHQYDVR0OBBYEFBh26bSMVlnt0X8Dhhzi4S/r800TMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvR0hicHRJeFdXZTNSZndPR0hPTGhMLXZ6VFJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBKwYIKwYBBQUHAQcBAf8EggEaMIIBFjCBpQQCAAEwgZ4D BAAtCUgwDAMEAC2KSQMEAC2KSgMEAC4RaQMEAFvZTAMEAV6OiDAMAwQAX9YJAwQC X9YIAwQAuSgHAwQAuTrMAwQBuV6kAwQAuWaIAwQAuXV0AwQAuXV3AwQAuci+AwQA udnFAwQBueiqMAwDBAS56VADBAC56VIDBAG56coDBAC5/JADBAHBfLYwDAMEAsF8 vAMEAMF8vgMEAcIksjBsBAIAAjBmAwcAKgRSAABoAwcAKgRSAQACAwcAKgRSAQAE AwcBKgRSAQAGAwcAKgRSAQAJAwcAKgRSAQAQAwcAKgRSAYAYAwcAKgRSAgAAAwUC Kgt3gAMFAioMd8ADBQIqDTiAAwcAKg7WBAACMA0GCSqGSIb3DQEBCwUAA4IBAQBn H5KcfmuhovdiuVi1m7LK3TaLnYZbminaf9J6kVmlU+kLdgT/6kfRi83raztnze/x cIct5kSTwkU/edVhqMv7VFJ5Jct0BQMd8/E7ZaGD1JJIvtKeF0o0TvRWhDycJfe8 Fg3/UEFganhHSumMbALyzy7zKow3t4BpJagg3cAIbK4M5DRZmauXIHE1NOLxEpuS UF5mE395W9dcZmo3YzZ/0KGSJNKkuYx+YOnlToxBwzOvzV9Nn98NBVnJMlTNGNMF ONOqCFz7EYR+tbCtlgDyxG3ZDnuIEaDYjvqWMEss1KoPugmtcMmcHQaA2mpEtXHY MZxqmK58C8uQXIeMVsJN -----END CERTIFICATE-----Generated at Sat Dec 20 05:28:38 2025 by rpki-client