This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/sAgYpAx2ySk_qrFpkKWzUwkzeQ0.roa File: sAgYpAx2ySk_qrFpkKWzUwkzeQ0.roa (raw, json) Hash identifier: EpoUUKIoe2eQHYZNup7omTlc9X6JverAoDRjL0+dPjo= Subject key identifier: B0:08:18:A4:0C:76:C9:29:3F:AA:B1:69:90:A5:B3:53:09:33:79:0D Certificate issuer: /CN=1795ac843cd8ba90188f7313652bb561299b296f Certificate serial: 019AF7DF7B9D51D1168A43BF5B39AEE1AB54 Authority key identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/sAgYpAx2ySk_qrFpkKWzUwkzeQ0.roa Signing time: Sun 07 Dec 2025 08:13:29 +0000 ROA not before: Sun 07 Dec 2025 08:13:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31313 IP address blocks: 86.105.108.0/22 maxlen: 24 86.105.216.0/22 maxlen: 24 89.35.192.0/24 maxlen: 24 89.41.56.0/23 maxlen: 24 89.42.116.0/23 maxlen: 24 89.43.190.0/23 maxlen: 24 89.124.128.0/18 maxlen: 24 89.124.192.0/19 maxlen: 24 89.200.246.0/23 maxlen: 24 89.200.247.0/24 maxlen: 24 91.235.4.0/23 maxlen: 24 93.113.29.0/24 maxlen: 24 130.195.57.0/24 maxlen: 24 176.126.252.0/22 maxlen: 24 176.126.252.0/24 maxlen: 24 176.126.253.0/24 maxlen: 24 176.126.254.0/24 maxlen: 24 176.126.255.0/24 maxlen: 24 185.57.80.0/22 maxlen: 24 185.57.80.0/24 maxlen: 24 185.57.81.0/24 maxlen: 24 185.57.83.0/24 maxlen: 24 185.233.148.0/22 maxlen: 24 185.233.148.0/24 maxlen: 24 185.233.149.0/24 maxlen: 24 185.233.150.0/24 maxlen: 24 185.233.151.0/24 maxlen: 24 193.151.28.0/22 maxlen: 24 193.169.21.0/24 maxlen: 24 195.242.244.0/22 maxlen: 24 203.25.143.0/24 maxlen: 24 213.177.0.0/19 maxlen: 24 2a00:5dc0::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:df:7b:9d:51:d1:16:8a:43:bf:5b:39:ae:e1:ab:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1795ac843cd8ba90188f7313652bb561299b296f Validity Not Before: Dec 7 08:13:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b00818a40c76c9293faab16990a5b3530933790d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dc:e2:98:47:64:94:8d:f0:0f:aa:74:5d:d6: 20:c0:1f:35:a2:99:18:fd:58:73:d7:88:8d:4e:f3: bb:15:99:62:4b:c2:74:c8:01:cd:c1:a2:ee:ed:1e: d2:7e:5d:e1:09:03:bc:0f:4d:b7:cb:b5:f1:9f:08: ce:a2:a3:e0:4e:35:6b:64:07:a2:30:5f:35:7e:e6: 01:3b:f4:40:88:8d:64:14:23:22:36:98:aa:d9:76: 73:b5:9b:fe:9b:2e:4f:b8:ba:58:91:dc:60:39:09: d7:8b:d9:d1:ef:ec:43:47:88:a2:e6:ae:8f:71:86: 78:a9:c7:47:c9:58:26:7c:f8:e9:4d:5c:4d:d2:5d: 5a:6a:da:89:59:1f:f5:67:fc:2d:fa:eb:91:ed:25: e3:97:f2:22:6c:52:22:fd:04:55:72:e1:66:bf:85: b6:91:b0:38:8a:15:e7:ca:de:7a:1d:e4:2d:a3:61: 4c:41:a8:70:1b:52:7e:08:98:35:4d:f4:b8:dd:4d: 08:8d:d5:b0:de:aa:ad:63:ee:66:d6:fc:ed:01:6e: e0:7c:37:7e:06:ed:f0:cf:2b:a3:ee:bf:69:b6:6d: 76:36:37:ec:a5:f6:bb:2b:ff:4f:84:df:4d:b6:73: f6:1b:fd:36:00:8c:0b:51:f0:ee:45:dc:9a:14:ef: 7d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:08:18:A4:0C:76:C9:29:3F:AA:B1:69:90:A5:B3:53:09:33:79:0D X509v3 Authority Key Identifier: keyid:17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/sAgYpAx2ySk_qrFpkKWzUwkzeQ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.105.108.0/22 86.105.216.0/22 89.35.192.0/24 89.41.56.0/23 89.42.116.0/23 89.43.190.0/23 89.124.128.0-89.124.223.255 89.200.246.0/23 91.235.4.0/23 93.113.29.0/24 130.195.57.0/24 176.126.252.0/22 185.57.80.0/22 185.233.148.0/22 193.151.28.0/22 193.169.21.0/24 195.242.244.0/22 203.25.143.0/24 213.177.0.0/19 IPv6: 2a00:5dc0::/29 Signature Algorithm: sha256WithRSAEncryption b0:fc:05:69:1c:47:72:e3:43:81:c7:50:b5:a5:0b:d5:4c:b5: 28:bf:b1:7d:2d:0b:31:98:ff:f9:4a:69:1c:21:ca:23:df:32: 2e:fd:7c:ff:ee:f4:80:ef:e4:78:7e:02:ff:25:81:d4:8d:7d: aa:71:52:0d:e3:52:4d:81:67:83:e5:71:55:63:18:8c:f5:9e: 7e:1f:13:f3:84:94:e9:97:18:0e:df:87:6a:be:54:f7:15:26: f6:8c:9b:ab:8e:32:fc:4a:f9:f7:5a:97:8b:3c:06:21:e7:30: dd:d1:c1:70:1a:ff:85:9b:3e:0e:59:81:dc:36:e3:ff:81:13: 11:00:1b:5c:f6:9e:73:8e:93:8c:28:4c:2f:6f:47:2a:1a:e9: 5b:97:c1:95:43:21:43:b9:e8:50:30:3d:b8:0e:2a:c8:f1:d0: 82:32:7a:82:ad:0b:ae:b9:93:9f:2c:0b:04:08:9f:3f:20:84: f9:f6:81:c4:84:d7:04:77:97:cf:d0:8b:2c:a8:d4:b9:b4:75: e2:20:ed:1d:a3:d2:d9:60:f2:b5:ae:65:89:00:c3:a1:c0:0d: 76:90:18:a8:10:da:c4:b9:a0:87:7b:3a:37:d3:97:3b:67:c2: f8:33:9a:7f:3d:ec:fe:06:bd:01:0c:0b:e3:e6:71:e9:f5:ea: 5e:89:b7:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZr333udUdEWikO/Wzmu4atUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OTVhYzg0M2NkOGJhOTAxODhmNzMxMzY1MmJiNTYxMjk5 YjI5NmYwHhcNMjUxMjA3MDgxMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDA4MThhNDBjNzZjOTI5M2ZhYWIxNjk5MGE1YjM1MzA5MzM3OTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNzimEdklI3wD6p0XdYgwB81opkY /Vhz14iNTvO7FZliS8J0yAHNwaLu7R7Sfl3hCQO8D023y7XxnwjOoqPgTjVrZAei MF81fuYBO/RAiI1kFCMiNpiq2XZztZv+my5PuLpYkdxgOQnXi9nR7+xDR4ii5q6P cYZ4qcdHyVgmfPjpTVxN0l1aatqJWR/1Z/wt+uuR7SXjl/IibFIi/QRVcuFmv4W2 kbA4ihXnyt56HeQto2FMQahwG1J+CJg1TfS43U0IjdWw3qqtY+5m1vztAW7gfDd+ Bu3wzyuj7r9ptm12Njfspfa7K/9PhN9NtnP2G/02AIwLUfDuRdyaFO99QwIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFLAIGKQMdskpP6qxaZCls1MJM3kNMB8GA1UdIwQY MBaAFBeVrIQ82LqQGI9zE2UrtWEpmylvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVXc2hEell1cEFZajNNVFpTdTFZU21iS1c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS82NjgzZjQtM2VlYy00ZGNiLTg3ODct NzMxYWJjNmY3NWNhLzEvc0FnWXBBeDJ5U2tfcXJGcGtLV3pVd2t6ZVEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS82NjgzZjQtM2VlYy00ZGNiLTg3ODctNzMxYWJjNmY3NWNh LzEvRjVXc2hEell1cEFZajNNVFpTdTFZU21iS1c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGlBggrBgEFBQcBBwEB/wSBlTCBkjCBgAQCAAEwegMEAlZp bAMEAlZp2AMEAFkjwAMEAVkpOAMEAVkqdAMEAVkrvjAMAwQHWXyAAwQFWXzAAwQB Wcj2AwQBW+sEAwQAXXEdAwQAgsM5AwQCsH78AwQCuTlQAwQCuemUAwQCwZccAwQA wakVAwQCw/L0AwQAyxmPAwQF1bEAMA0EAgACMAcDBQMqAF3AMA0GCSqGSIb3DQEB CwUAA4IBAQCw/AVpHEdy40OBx1C1pQvVTLUov7F9LQsxmP/5SmkcIcoj3zIu/Xz/ 7vSA7+R4fgL/JYHUjX2qcVIN41JNgWeD5XFVYxiM9Z5+HxPzhJTplxgO34dqvlT3 FSb2jJurjjL8Svn3WpeLPAYh5zDd0cFwGv+Fmz4OWYHcNuP/gRMRABtc9p5zjpOM KEwvb0cqGulbl8GVQyFDuehQMD24DirI8dCCMnqCrQuuuZOfLAsECJ8/IIT59oHE hNcEd5fP0IssqNS5tHXiIO0do9LZYPK1rmWJAMOhwA12kBioENrEuaCHezo305c7 Z8L4M5p/Pez+Br0BDAvj5nHp9epeibfJ -----END CERTIFICATE-----Generated at Sun Dec 21 03:21:34 2025 by rpki-client