This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Ww7OVYdAPU7gNnVqHLoZlfFf9ZM.roa File: Ww7OVYdAPU7gNnVqHLoZlfFf9ZM.roa (raw, json) Hash identifier: bX1lwSpMRLFh5867c9RorxZiDJiTjEIYcIcgGkgbW9g= Subject key identifier: 5B:0E:CE:55:87:40:3D:4E:E0:36:75:6A:1C:BA:19:95:F1:5F:F5:93 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B35B5DDE237EE472FEF1E64E5F252ECE3 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Ww7OVYdAPU7gNnVqHLoZlfFf9ZM.roa Signing time: Fri 19 Dec 2025 08:24:29 +0000 ROA not before: Fri 19 Dec 2025 08:24:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205090 IP address blocks: 45.9.73.0/24 maxlen: 24 45.9.75.0/24 maxlen: 24 45.89.65.0/24 maxlen: 24 45.90.216.0/24 maxlen: 24 45.90.217.0/24 maxlen: 24 45.90.218.0/24 maxlen: 24 45.90.219.0/24 maxlen: 24 45.95.202.0/24 maxlen: 24 45.95.203.0/24 maxlen: 24 45.132.255.0/24 maxlen: 24 45.142.122.0/24 maxlen: 24 84.252.73.0/24 maxlen: 24 84.252.74.0/24 maxlen: 24 84.252.75.0/24 maxlen: 24 85.209.2.0/24 maxlen: 24 185.102.139.0/24 maxlen: 24 185.103.109.0/24 maxlen: 24 185.104.251.0/24 maxlen: 24 185.112.101.0/24 maxlen: 24 185.112.102.0/24 maxlen: 24 185.112.103.0/24 maxlen: 24 185.217.198.0/24 maxlen: 24 185.217.199.0/24 maxlen: 24 185.221.160.0/24 maxlen: 24 185.221.162.0/24 maxlen: 24 185.232.169.0/24 maxlen: 24 185.233.83.0/24 maxlen: 24 185.233.200.0/24 maxlen: 24 193.162.143.0/24 maxlen: 24 193.168.227.0/24 maxlen: 24 2a09:5302::/32 maxlen: 32 2a09:5302:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:b5:dd:e2:37:ee:47:2f:ef:1e:64:e5:f2:52:ec:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Dec 19 08:24:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5b0ece5587403d4ee036756a1cba1995f15ff593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7e:87:fb:cc:6c:52:a3:00:51:54:21:52:cb: ed:ef:1d:bd:13:c0:18:94:57:78:05:21:2c:fe:2e: 1c:13:0e:f3:e0:7d:52:34:91:e0:2a:ef:24:c4:38: bd:9c:87:ae:32:c2:34:07:b7:a3:62:c7:a3:ce:0f: ad:a2:10:1f:60:4e:0b:21:fd:12:d8:34:6f:41:dc: 00:cf:e7:53:b4:9e:7f:bd:d9:1e:1b:a4:23:42:50: 2c:b9:05:65:6b:ed:0f:c5:85:fe:3a:5b:c6:81:2f: 5f:00:35:3f:90:a6:25:0c:ea:8f:77:a7:1e:98:1e: 34:5e:a5:f3:7c:bd:8e:34:64:a8:2c:39:9a:88:c6: e1:0f:b9:86:67:df:83:d8:1c:e0:25:56:97:00:f2: e4:68:ab:d8:de:77:44:68:a4:38:ea:47:53:6f:cf: b1:e0:ae:10:3e:66:90:38:39:a5:e0:dd:04:02:dd: 9b:a2:db:09:80:69:ec:25:c3:a8:b1:05:8f:11:e3: 21:0a:2f:f2:a6:90:86:3e:70:0e:63:06:d6:cb:90: 33:1d:36:81:f9:50:f2:af:0e:a2:f5:b8:22:6b:9e: d1:00:b5:5d:69:e4:e9:f0:f4:d1:dd:6d:05:64:92: bb:a8:98:b9:e6:73:20:73:de:c3:f7:c5:89:11:1f: e0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0E:CE:55:87:40:3D:4E:E0:36:75:6A:1C:BA:19:95:F1:5F:F5:93 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Ww7OVYdAPU7gNnVqHLoZlfFf9ZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.73.0/24 45.9.75.0/24 45.89.65.0/24 45.90.216.0/22 45.95.202.0/23 45.132.255.0/24 45.142.122.0/24 84.252.73.0-84.252.75.255 85.209.2.0/24 185.102.139.0/24 185.103.109.0/24 185.104.251.0/24 185.112.101.0-185.112.103.255 185.217.198.0/23 185.221.160.0/24 185.221.162.0/24 185.232.169.0/24 185.233.83.0/24 185.233.200.0/24 193.162.143.0/24 193.168.227.0/24 IPv6: 2a09:5302::/32 Signature Algorithm: sha256WithRSAEncryption 30:f8:0a:f9:23:d7:34:ce:cd:c3:7c:6c:74:19:34:87:c7:d7: a6:4e:80:a2:a2:61:d2:b4:51:5f:6a:c4:b9:aa:a3:cb:72:9c: 10:24:98:f2:5c:ca:80:ed:c7:5e:80:ed:f0:f1:50:b1:d7:bd: b6:6b:6b:c5:2b:b7:3d:3f:af:3d:86:79:84:95:0d:4a:4f:f7: f9:88:b4:ce:ac:bf:61:79:3c:c1:a0:8f:20:ac:54:ec:1b:c9: 21:1a:66:17:94:b5:8a:52:c0:26:8b:36:35:2f:97:8c:90:e8: 38:01:92:1c:ee:0e:44:3c:1a:21:b8:2f:69:06:d0:86:91:16: 69:62:2e:ca:fd:b7:64:a7:b4:48:19:7f:7b:1c:64:a8:88:13: 7b:91:6e:17:8c:b8:8b:9c:61:3a:8a:9d:2f:ad:df:e6:94:c2: 7d:9c:6c:3a:ad:f9:70:46:59:96:ef:c9:3e:bd:ee:5d:d7:9b: a7:d8:57:e2:da:74:a0:39:11:16:78:ca:5d:c3:6c:8f:17:3a: 40:4a:6b:97:d0:0e:bf:71:c7:58:9c:8c:55:9d:a2:28:68:57: 05:43:24:9f:b6:4f:19:af:8a:22:37:1f:57:08:e5:9f:32:28: 4a:f3:38:1a:d0:5d:2b:63:fd:cb:b9:a3:99:a5:cf:54:7b:9e: a4:15:6b:54 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZs1td3iN+5HL+8eZOXyUuzjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjUxMjE5MDgyNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjBlY2U1NTg3NDAzZDRlZTAzNjc1NmExY2JhMTk5NWYxNWZmNTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH6H+8xsUqMAUVQhUsvt7x29E8AY lFd4BSEs/i4cEw7z4H1SNJHgKu8kxDi9nIeuMsI0B7ejYsejzg+tohAfYE4LIf0S 2DRvQdwAz+dTtJ5/vdkeG6QjQlAsuQVla+0PxYX+OlvGgS9fADU/kKYlDOqPd6ce mB40XqXzfL2ONGSoLDmaiMbhD7mGZ9+D2BzgJVaXAPLkaKvY3ndEaKQ46kdTb8+x 4K4QPmaQODml4N0EAt2botsJgGnsJcOosQWPEeMhCi/yppCGPnAOYwbWy5AzHTaB +VDyrw6i9bgia57RALVdaeTp8PTR3W0FZJK7qJi55nMgc97D98WJER/gpwIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFFsOzlWHQD1O4DZ1ahy6GZXxX/WTMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvV3c3T1ZZZEFQVTdnTm5WcUhMb1psZkZmOVpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG6BggrBgEFBQcBBwEB/wSBqjCBpzCBlQQCAAEwgY4DBAAt CUkDBAAtCUsDBAAtWUEDBAItWtgDBAEtX8oDBAAthP8DBAAtjnowDAMEAFT8SQME AlT8SAMEAFXRAgMEALlmiwMEALlnbQMEALlo+zAMAwQAuXBlAwQDuXBgAwQBudnG AwQAud2gAwQAud2iAwQAueipAwQAuelTAwQAuenIAwQAwaKPAwQAwajjMA0EAgAC MAcDBQAqCVMCMA0GCSqGSIb3DQEBCwUAA4IBAQAw+Ar5I9c0zs3DfGx0GTSHx9em ToCiomHStFFfasS5qqPLcpwQJJjyXMqA7cdegO3w8VCx1722a2vFK7c9P689hnmE lQ1KT/f5iLTOrL9heTzBoI8grFTsG8khGmYXlLWKUsAmizY1L5eMkOg4AZIc7g5E PBohuC9pBtCGkRZpYi7K/bdkp7RIGX97HGSoiBN7kW4XjLiLnGE6ip0vrd/mlMJ9 nGw6rflwRlmW78k+ve5d15un2Ffi2nSgOREWeMpdw2yPFzpASmuX0A6/ccdYnIxV naIoaFcFQySftk8Zr4oiNx9XCOWfMihK8zga0F0rY/3LuaOZpc9Ue56kFWtU -----END CERTIFICATE-----Generated at Sat Dec 20 03:52:51 2025 by rpki-client