This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/hXp18TXNc2vW47wzTsY3Gjk6q6s.roa
File: hXp18TXNc2vW47wzTsY3Gjk6q6s.roa (raw, json)
Hash identifier: DJL0LKz36E1xLvywkMqqpfB2MQ9fCk5DPu9pByzXtDE=
Subject key identifier: 85:7A:75:F1:35:CD:73:6B:D6:E3:BC:33:4E:C6:37:1A:39:3A:AB:AB
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 019B3719186E06CB9F135C8E3E37814A9BC0
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/hXp18TXNc2vW47wzTsY3Gjk6q6s.roa
Signing time: Fri 19 Dec 2025 14:52:30 +0000
ROA not before: Fri 19 Dec 2025 14:52:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26548
IP address blocks: 5.181.170.0/24 maxlen: 24
5.183.252.0/24 maxlen: 24
45.10.167.0/24 maxlen: 24
45.66.208.0/24 maxlen: 24
45.132.184.0/24 maxlen: 24
45.148.124.0/24 maxlen: 24
77.220.192.0/24 maxlen: 24
77.220.193.0/24 maxlen: 24
77.220.194.0/24 maxlen: 24
77.220.195.0/24 maxlen: 24
91.132.198.0/24 maxlen: 24
93.177.118.0/23 maxlen: 24
147.78.180.0/24 maxlen: 24
147.78.182.0/24 maxlen: 24
147.78.183.0/24 maxlen: 24
185.61.217.0/24 maxlen: 24
185.61.218.0/24 maxlen: 24
185.61.219.0/24 maxlen: 24
185.61.221.0/24 maxlen: 24
185.61.222.0/24 maxlen: 24
185.61.223.0/24 maxlen: 24
185.77.220.0/24 maxlen: 24
185.77.222.0/24 maxlen: 24
185.77.223.0/24 maxlen: 24
185.88.100.0/24 maxlen: 24
194.104.8.0/24 maxlen: 24
194.104.11.0/24 maxlen: 24
213.108.0.0/24 maxlen: 24
217.145.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:37:19:18:6e:06:cb:9f:13:5c:8e:3e:37:81:4a:9b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Dec 19 14:52:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=857a75f135cd736bd6e3bc334ec6371a393aabab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:31:dc:76:bd:bd:48:65:eb:cd:a4:88:0e:0d:
f9:20:6d:46:02:46:3b:63:2f:99:72:8a:6f:b0:63:
1f:88:6d:1f:39:c9:d0:ad:7e:eb:ce:60:ef:20:aa:
7e:1c:c2:68:7b:b8:82:ec:e3:96:ed:4b:df:58:f1:
7a:e6:5b:1b:d0:d3:1a:54:61:91:9a:18:98:39:48:
3f:57:66:13:d7:2e:c7:6e:c7:f5:c9:de:2a:0b:d5:
ed:8e:84:95:7a:af:a3:1d:5d:e7:e0:45:18:d4:ed:
f0:37:e8:d1:b8:e4:9a:89:51:fb:55:df:cd:bd:30:
38:16:be:77:c0:b2:ed:52:b9:6e:7c:2f:a4:cf:c7:
a9:20:92:c1:c0:3f:22:6b:c1:ef:18:af:6c:97:aa:
c9:2a:51:46:0d:b6:f8:1b:ed:9b:af:49:15:6c:67:
22:dc:4a:a0:f5:68:cc:07:1e:45:51:c6:f7:5b:4e:
b1:63:00:f7:c9:27:29:1a:0e:89:ef:97:57:80:ec:
32:eb:33:f6:6d:95:e8:db:43:b4:bc:8a:68:80:41:
b6:00:28:2b:a6:6d:39:7e:ce:49:64:97:f3:e8:56:
35:ac:94:35:7d:c8:fd:82:85:1d:14:b5:c1:05:48:
6c:c5:0a:32:a3:5c:40:64:b5:bb:f5:a2:54:47:28:
a4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7A:75:F1:35:CD:73:6B:D6:E3:BC:33:4E:C6:37:1A:39:3A:AB:AB
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/hXp18TXNc2vW47wzTsY3Gjk6q6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.170.0/24
5.183.252.0/24
45.10.167.0/24
45.66.208.0/24
45.132.184.0/24
45.148.124.0/24
77.220.192.0/22
91.132.198.0/24
93.177.118.0/23
147.78.180.0/24
147.78.182.0/23
185.61.217.0-185.61.219.255
185.61.221.0-185.61.223.255
185.77.220.0/24
185.77.222.0/23
185.88.100.0/24
194.104.8.0/24
194.104.11.0/24
213.108.0.0/24
217.145.224.0/24
Signature Algorithm: sha256WithRSAEncryption
93:0b:cc:07:10:1a:21:9d:6a:dc:bd:3c:64:d9:38:d0:4f:6e:
69:0f:a3:2c:58:78:d9:73:1e:01:43:d3:00:94:57:e5:c4:db:
8b:ae:2c:be:e2:3d:f7:a0:3c:4b:a7:e3:16:b6:ce:db:48:e3:
0e:a6:a6:57:1b:4f:d9:6f:d1:73:af:24:2b:71:51:be:05:1d:
ea:4d:7d:93:d9:97:67:05:dc:b1:8e:b9:7f:8f:30:a5:d8:4c:
9a:e6:8b:bc:ea:12:b4:22:84:2e:96:fa:7d:5b:84:78:63:f1:
0d:80:62:39:6a:4c:93:c6:03:bf:7b:23:c7:55:fb:38:cd:2e:
c2:7d:f6:8c:b1:18:3e:97:0e:7a:fa:e3:27:b0:4c:ba:cc:12:
32:d3:4c:49:76:9a:ff:22:07:a3:dd:7f:63:f6:ee:84:cc:ae:
09:1d:2f:22:4a:2a:53:56:f5:28:4b:3f:de:38:33:3f:f5:e4:
23:54:3f:bc:bd:a1:f4:55:37:08:2f:16:0f:fb:9a:56:3d:9f:
0e:33:29:67:0f:f3:f1:3c:48:0d:08:c5:f6:97:17:f6:01:36:
30:6e:79:ba:7b:c8:af:a0:5d:d8:9f:2f:eb:57:ae:06:9b:b1:
95:9b:7a:55:73:ad:34:a9:5b:33:df:ca:71:7d:0c:06:f0:13:
f5:c9:10:a3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgISAZs3GRhuBsufE1yOPjeBSpvAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4
OWU4NWIwHhcNMjUxMjE5MTQ1MjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTdhNzVmMTM1Y2Q3MzZiZDZlM2JjMzM0ZWM2MzcxYTM5M2FhYmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1THcdr29SGXrzaSIDg35IG1GAkY7
Yy+ZcopvsGMfiG0fOcnQrX7rzmDvIKp+HMJoe7iC7OOW7UvfWPF65lsb0NMaVGGR
mhiYOUg/V2YT1y7Hbsf1yd4qC9XtjoSVeq+jHV3n4EUY1O3wN+jRuOSaiVH7Vd/N
vTA4Fr53wLLtUrlufC+kz8epIJLBwD8ia8HvGK9sl6rJKlFGDbb4G+2br0kVbGci
3Eqg9WjMBx5FUcb3W06xYwD3yScpGg6J75dXgOwy6zP2bZXo20O0vIpogEG2ACgr
pm05fs5JZJfz6FY1rJQ1fcj9goUdFLXBBUhsxQoyo1xAZLW79aJURyikOwIDAQAB
o4ICkDCCAowwHQYDVR0OBBYEFIV6dfE1zXNr1uO8M07GNxo5OqurMB8GA1UdIwQY
MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt
NmVlNTM0ZDkyZTUyLzEvaFhwMThUWE5jMnZXNDd3elRzWTNHams2cTZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy
LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGlBggrBgEFBQcBBwEB/wSBlTCBkjCBjwQCAAEwgYgDBAAF
taoDBAAFt/wDBAAtCqcDBAAtQtADBAAthLgDBAAtlHwDBAJN3MADBABbhMYDBAFd
sXYDBACTTrQDBAGTTrYwDAMEALk92QMEArk92DAMAwQAuT3dAwQFuT3AAwQAuU3c
AwQBuU3eAwQAuVhkAwQAwmgIAwQAwmgLAwQA1WwAAwQA2ZHgMA0GCSqGSIb3DQEB
CwUAA4IBAQCTC8wHEBohnWrcvTxk2TjQT25pD6MsWHjZcx4BQ9MAlFflxNuLriy+
4j33oDxLp+MWts7bSOMOpqZXG0/Zb9FzryQrcVG+BR3qTX2T2ZdnBdyxjrl/jzCl
2Eya5ou86hK0IoQulvp9W4R4Y/ENgGI5akyTxgO/eyPHVfs4zS7CffaMsRg+lw56
+uMnsEy6zBIy00xJdpr/Igej3X9j9u6EzK4JHS8iSipTVvUoSz/eODM/9eQjVD+8
vaH0VTcILxYP+5pWPZ8OMylnD/PxPEgNCMX2lxf2ATYwbnm6e8ivoF3Yny/rV64G
m7GVm3pVc600qVsz38pxfQwG8BP1yRCj
-----END CERTIFICATE-----
Generated at Sat Dec 20 04:36:06 2025 by rpki-client