This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/J5KdMPKBe2h6SjZNCTwzxLTh5qo.roa File: J5KdMPKBe2h6SjZNCTwzxLTh5qo.roa (raw, json) Hash identifier: KNyDCoJAWtwIvDhzS9J61EmVOXLdQVnuR1eSGkf8S5M= Subject key identifier: 27:92:9D:30:F2:81:7B:68:7A:4A:36:4D:09:3C:33:C4:B4:E1:E6:AA Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B35A738E6392E28273B233B99B8B80480 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/J5KdMPKBe2h6SjZNCTwzxLTh5qo.roa Signing time: Fri 19 Dec 2025 08:08:30 +0000 ROA not before: Fri 19 Dec 2025 08:08:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210644 IP address blocks: 45.142.122.0/24 maxlen: 24 91.103.252.0/23 maxlen: 23 185.106.93.0/24 maxlen: 24 185.106.94.0/24 maxlen: 24 185.112.83.0/24 maxlen: 24 185.125.230.0/24 maxlen: 24 185.174.136.0/24 maxlen: 24 185.174.137.0/24 maxlen: 24 185.229.65.0/24 maxlen: 24 185.229.66.0/24 maxlen: 24 194.67.201.0/24 maxlen: 24 2a0e:d606::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a7:38:e6:39:2e:28:27:3b:23:3b:99:b8:b8:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Dec 19 08:08:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=27929d30f2817b687a4a364d093c33c4b4e1e6aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b5:9e:f2:a7:38:42:13:6b:e5:29:00:42:3d: 10:b2:bf:55:1c:97:65:77:32:ac:49:5a:46:b7:ce: da:9b:32:0a:1a:ea:b3:2d:13:29:36:78:1d:84:aa: 64:46:90:42:0e:2f:25:52:91:5c:50:2b:a0:ff:46: 40:d0:f0:41:f1:ee:26:16:86:2e:1f:2e:89:47:d4: 75:73:8b:07:ee:89:d2:0f:1a:97:c6:80:fe:a3:78: 9f:96:c2:c3:8c:17:06:be:8e:e4:79:03:c7:63:3a: e3:2f:14:4e:7f:6b:08:87:e9:51:14:2d:56:5e:7b: 3d:de:74:3e:34:13:d7:a7:2b:33:51:49:8b:89:98: cd:06:1d:69:d8:e6:f3:8d:79:54:16:aa:87:6c:06: 2f:b1:bb:00:a4:9f:16:36:be:5d:db:cf:7a:9b:3f: 46:78:89:7d:e4:2a:0b:3c:71:36:9c:0d:c7:ec:cb: ca:d3:66:0f:89:73:ae:58:d7:55:7c:67:4d:bb:4d: 5f:72:2a:27:ff:05:d9:1a:43:9a:44:c0:3e:fe:56: aa:16:eb:73:6c:57:b4:51:40:a8:fc:84:42:0e:a2: ae:ba:d4:aa:54:5e:54:be:d8:23:57:64:8a:09:a8: 34:12:ef:6a:9f:a2:df:24:bc:12:ff:4f:95:5b:a4: 77:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:92:9D:30:F2:81:7B:68:7A:4A:36:4D:09:3C:33:C4:B4:E1:E6:AA X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/J5KdMPKBe2h6SjZNCTwzxLTh5qo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.122.0/24 91.103.252.0/23 185.106.93.0-185.106.94.255 185.112.83.0/24 185.125.230.0/24 185.174.136.0/23 185.229.65.0-185.229.66.255 194.67.201.0/24 IPv6: 2a0e:d606::/48 Signature Algorithm: sha256WithRSAEncryption 16:e6:e7:5f:84:d5:dd:0b:e0:b9:23:91:32:92:5c:88:2b:ef: ee:6d:41:42:1a:9b:19:ba:f1:f2:c9:88:fa:14:4b:6b:b4:49: 85:5e:39:f5:f1:91:8e:17:5b:21:bd:6c:84:6c:26:21:d6:43: 90:af:b2:e7:b6:34:5a:41:b4:c6:e7:1a:ea:5d:90:fb:46:86: d8:47:2c:8d:ba:67:27:bb:fb:42:1a:01:88:06:9d:e3:83:ec: e9:08:aa:f9:88:2b:a3:59:9f:e0:5c:f7:e5:15:8b:25:a9:9b: 9f:1d:67:33:c4:e8:f2:c1:8e:d4:80:de:98:8a:96:41:2b:12: 40:a4:c8:55:8c:38:32:8d:49:69:fe:16:6a:64:15:e1:d8:70: 48:5d:42:75:0e:0d:de:4d:27:f4:4c:01:e7:5f:47:1e:aa:de: d8:2b:fe:fe:b3:9c:ca:d4:35:e8:94:ee:50:1a:ab:48:df:68: a6:f7:21:7c:1c:9a:8a:a8:58:e5:91:68:b7:59:12:f8:68:34: 5f:8e:3e:a1:2b:c6:b4:23:8c:0e:ba:1c:6b:72:d2:d0:21:44: 5d:1e:ca:13:c7:97:3b:e3:6d:19:e8:50:21:85:4a:c0:03:d5: 6e:3d:18:c1:f0:d9:e8:16:10:27:e9:a7:56:47:a5:1a:ff:62: 79:12:45:19 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZs1pzjmOS4oJzsjO5m4uASAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjUxMjE5MDgwODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzkyOWQzMGYyODE3YjY4N2E0YTM2NGQwOTNjMzNjNGI0ZTFlNmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbWe8qc4QhNr5SkAQj0Qsr9VHJdl dzKsSVpGt87amzIKGuqzLRMpNngdhKpkRpBCDi8lUpFcUCug/0ZA0PBB8e4mFoYu Hy6JR9R1c4sH7onSDxqXxoD+o3iflsLDjBcGvo7keQPHYzrjLxROf2sIh+lRFC1W Xns93nQ+NBPXpyszUUmLiZjNBh1p2ObzjXlUFqqHbAYvsbsApJ8WNr5d2896mz9G eIl95CoLPHE2nA3H7MvK02YPiXOuWNdVfGdNu01fcion/wXZGkOaRMA+/laqFutz bFe0UUCo/IRCDqKuutSqVF5UvtgjV2SKCag0Eu9qn6LfJLwS/0+VW6R3OQIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFCeSnTDygXtoeko2TQk8M8S04eaqMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvSjVLZE1QS0JlMmg2U2paTkNUd3p4TFRoNXFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBGBAIAATBAAwQALY56AwQB W2f8MAwDBAC5al0DBAC5al4DBAC5cFMDBAC5feYDBAG5rogwDAMEALnlQQMEALnl QgMEAMJDyTAPBAIAAjAJAwcAKg7WBgAAMA0GCSqGSIb3DQEBCwUAA4IBAQAW5udf hNXdC+C5I5EyklyIK+/ubUFCGpsZuvHyyYj6FEtrtEmFXjn18ZGOF1shvWyEbCYh 1kOQr7LntjRaQbTG5xrqXZD7RobYRyyNumcnu/tCGgGIBp3jg+zpCKr5iCujWZ/g XPflFYslqZufHWczxOjywY7UgN6YipZBKxJApMhVjDgyjUlp/hZqZBXh2HBIXUJ1 Dg3eTSf0TAHnX0ceqt7YK/7+s5zK1DXolO5QGqtI32im9yF8HJqKqFjlkWi3WRL4 aDRfjj6hK8a0I4wOuhxrctLQIURdHsoTx5c7420Z6FAhhUrAA9VuPRjB8NnoFhAn 6adWR6Ua/2J5EkUZ -----END CERTIFICATE-----Generated at Sat Dec 20 01:11:57 2025 by rpki-client