This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/Gig8YJaKR3YRz83NwNP5ZC6-LAU.roa File: Gig8YJaKR3YRz83NwNP5ZC6-LAU.roa (raw, json) Hash identifier: WnjJ8+hzlWOc++QXO9+VfS6aVxahP1ZmpuYGenOLhF4= Subject key identifier: 1A:28:3C:60:96:8A:47:76:11:CF:CD:CD:C0:D3:F9:64:2E:BE:2C:05 Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e Certificate serial: 019B2212B39B2D9DC7EEBE4BC401C19F3086 Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/Gig8YJaKR3YRz83NwNP5ZC6-LAU.roa Signing time: Mon 15 Dec 2025 12:53:29 +0000 ROA not before: Mon 15 Dec 2025 12:53:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197540 IP address blocks: 152.53.0.0/16 maxlen: 24 152.53.5.0/24 maxlen: 24 152.53.7.0/24 maxlen: 24 152.53.12.0/22 maxlen: 24 152.53.16.0/22 maxlen: 24 152.53.20.0/22 maxlen: 24 152.53.32.0/22 maxlen: 24 152.53.42.0/24 maxlen: 24 152.53.42.0/27 maxlen: 27 152.53.42.64/28 maxlen: 28 152.53.43.0/24 maxlen: 24 152.53.43.64/27 maxlen: 27 152.53.44.0/22 maxlen: 24 152.53.48.0/22 maxlen: 22 152.53.60.0/24 maxlen: 24 152.53.61.0/24 maxlen: 24 152.53.64.0/22 maxlen: 24 152.53.84.0/22 maxlen: 22 152.53.92.0/22 maxlen: 22 152.53.100.0/22 maxlen: 22 152.53.104.0/22 maxlen: 22 152.53.108.0/22 maxlen: 22 152.53.112.0/22 maxlen: 22 152.53.116.0/22 maxlen: 22 152.53.124.0/22 maxlen: 22 152.53.128.0/20 maxlen: 22 152.53.144.0/22 maxlen: 22 152.53.148.0/22 maxlen: 22 152.53.152.0/22 maxlen: 22 152.53.160.0/22 maxlen: 22 152.53.172.0/22 maxlen: 22 152.53.176.0/22 maxlen: 22 152.53.180.0/22 maxlen: 22 152.53.184.0/22 maxlen: 24 152.53.188.0/22 maxlen: 22 152.53.196.0/22 maxlen: 22 152.53.200.0/24 maxlen: 24 152.53.202.0/24 maxlen: 24 152.53.204.0/22 maxlen: 22 152.53.212.0/24 maxlen: 24 152.53.224.0/22 maxlen: 22 152.53.228.0/22 maxlen: 22 152.53.236.0/22 maxlen: 22 152.53.244.0/22 maxlen: 22 152.53.248.0/22 maxlen: 22 152.53.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:12:b3:9b:2d:9d:c7:ee:be:4b:c4:01:c1:9f:30:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e Validity Not Before: Dec 15 12:53:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1a283c60968a477611cfcdcdc0d3f9642ebe2c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ac:ea:34:2c:9b:d8:eb:a8:eb:c2:33:39:8a: 02:e8:de:c2:fa:e8:23:8a:86:80:9e:4f:c1:75:08: 61:87:e2:e3:28:47:cf:a5:5d:32:29:b4:7d:7f:23: 65:af:34:58:ff:c9:59:c5:ae:9d:72:61:dd:c8:3b: ff:5a:37:16:6c:b7:7c:7b:94:f0:fd:43:26:fe:f4: a1:27:6d:48:05:0e:0c:3e:02:aa:b1:f9:5a:34:ba: d6:18:49:76:8e:b1:2e:14:fb:dd:59:6a:49:9b:71: 56:41:45:dd:ba:6d:07:41:23:a1:62:c5:a7:a2:11: 56:25:f0:e2:a5:81:32:e2:4d:eb:1b:d4:b4:39:a3: 83:ed:df:99:33:00:1c:cf:1a:9a:9a:10:88:09:de: 0b:51:42:7b:27:6e:dd:ac:62:68:3c:cb:ec:4a:84: a8:aa:ff:3a:e4:46:2b:82:73:8f:0a:a8:7e:39:6e: 91:ec:03:f8:26:a6:d7:d9:18:9f:79:c2:95:18:68: 7f:86:23:40:41:7b:7d:42:34:b0:06:ad:fe:9b:81: c1:65:76:d3:96:74:6e:db:94:61:b7:dd:ce:84:f6: a1:aa:d5:39:72:5d:4b:a7:8c:16:2d:36:c6:eb:97: eb:73:4a:b8:68:39:b5:31:da:20:49:98:6a:f7:1b: 8f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:28:3C:60:96:8A:47:76:11:CF:CD:CD:C0:D3:F9:64:2E:BE:2C:05 X509v3 Authority Key Identifier: keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/Gig8YJaKR3YRz83NwNP5ZC6-LAU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.53.0.0/16 Signature Algorithm: sha256WithRSAEncryption b8:c5:ef:c3:6b:26:cb:25:76:58:2a:25:51:f6:8a:24:cc:c9: 79:d5:12:b4:6b:69:2b:4d:17:c5:76:bf:12:f2:79:55:f2:cc: 97:08:c8:e5:f4:a7:36:77:43:42:ba:19:91:02:3b:82:7f:15: fe:cc:f0:30:c7:cb:27:fb:aa:4a:91:d4:bd:80:f3:e2:8d:50: c0:ab:d8:db:31:1e:ff:eb:49:eb:e7:d3:1f:eb:1f:45:f7:86: d0:67:f1:5f:ef:ee:9d:93:32:61:93:e1:04:c5:28:f5:1f:18: 32:cc:16:33:0c:44:1f:f0:c5:3d:44:65:d9:6d:b5:d2:e0:2a: c6:f1:de:38:4d:9e:bc:47:de:03:dc:1a:29:c2:6c:03:31:03: 58:56:64:40:0c:14:67:d3:31:c1:40:91:4c:8a:1c:78:ce:48: 2b:8a:9e:57:17:41:24:bb:02:74:f9:b0:f6:aa:6b:2c:9f:4f: 62:83:d7:f7:41:33:18:ca:8f:7b:f4:8d:8a:62:ab:13:23:f1: 74:15:16:3c:24:07:be:a6:13:20:cd:9d:e1:a4:7a:f4:f4:54: 2e:3b:29:6d:af:39:2b:8e:b8:61:c2:5c:c6:f8:5a:c4:54:c1: 7c:c7:d3:2b:3e:32:11:6d:8f:2b:0a:59:37:34:65:d2:71:1b: 07:b6:10:ec -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZsiErObLZ3H7r5LxAHBnzCGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMGIzN2I2ZjRiNDQ1NjQ1ZTY5OTNhOWM1ZWM2MDg0OTI0 MjVmMGUwHhcNMjUxMjE1MTI1MzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTI4M2M2MDk2OGE0Nzc2MTFjZmNkY2RjMGQzZjk2NDJlYmUyYzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6zqNCyb2Ouo68IzOYoC6N7C+ugj ioaAnk/BdQhhh+LjKEfPpV0yKbR9fyNlrzRY/8lZxa6dcmHdyDv/WjcWbLd8e5Tw /UMm/vShJ21IBQ4MPgKqsflaNLrWGEl2jrEuFPvdWWpJm3FWQUXdum0HQSOhYsWn ohFWJfDipYEy4k3rG9S0OaOD7d+ZMwAczxqamhCICd4LUUJ7J27drGJoPMvsSoSo qv865EYrgnOPCqh+OW6R7AP4JqbX2RifecKVGGh/hiNAQXt9QjSwBq3+m4HBZXbT lnRu25Rht93OhPahqtU5cl1Lp4wWLTbG65frc0q4aDm1MdogSZhq9xuP8QIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFBooPGCWikd2Ec/NzcDT+WQuviwFMB8GA1UdIwQY MBaAFNALN7b0tEVkXmmTqcXsYISSQl8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEt N2RiNjg2OGQ4NDc0LzEvR2lnOFlKYUtSM1lSejgzTndOUDVaQzYtTEFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEtN2RiNjg2OGQ4NDc0 LzEvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmDUwDQYJ KoZIhvcNAQELBQADggEBALjF78NrJssldlgqJVH2iiTMyXnVErRraStNF8V2vxLy eVXyzJcIyOX0pzZ3Q0K6GZECO4J/Ff7M8DDHyyf7qkqR1L2A8+KNUMCr2NsxHv/r Sevn0x/rH0X3htBn8V/v7p2TMmGT4QTFKPUfGDLMFjMMRB/wxT1EZdlttdLgKsbx 3jhNnrxH3gPcGinCbAMxA1hWZEAMFGfTMcFAkUyKHHjOSCuKnlcXQSS7AnT5sPaq ayyfT2KD1/dBMxjKj3v0jYpiqxMj8XQVFjwkB76mEyDNneGkevT0VC47KW2vOSuO uGHCXMb4WsRUwXzH0ys+MhFtjysKWTc0ZdJxGwe2EOw= -----END CERTIFICATE-----Generated at Sat Dec 20 11:10:16 2025 by rpki-client