This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5ZH-6U2OkyHfPmGjrXnhZXhJG58.roa File: 5ZH-6U2OkyHfPmGjrXnhZXhJG58.roa (raw, json) Hash identifier: KO281UI9Oy8JyYVK5JD2c2f5G+CrjKHPFe6fIfmJaEc= Subject key identifier: E5:91:FE:E9:4D:8E:93:21:DF:3E:61:A3:AD:79:E1:65:78:49:1B:9F Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B35BD3806763251580BE68D77F8751792 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5ZH-6U2OkyHfPmGjrXnhZXhJG58.roa Signing time: Fri 19 Dec 2025 08:32:31 +0000 ROA not before: Fri 19 Dec 2025 08:32:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5065 IP address blocks: 37.202.219.0/24 maxlen: 24 151.240.229.0/24 maxlen: 24 151.240.233.0/24 maxlen: 24 151.240.234.0/24 maxlen: 24 151.240.235.0/24 maxlen: 24 151.240.236.0/24 maxlen: 24 151.240.237.0/24 maxlen: 24 151.240.238.0/24 maxlen: 24 151.240.240.0/24 maxlen: 24 151.242.9.0/24 maxlen: 24 151.242.46.0/24 maxlen: 24 151.242.47.0/24 maxlen: 24 151.242.48.0/24 maxlen: 24 151.242.60.0/24 maxlen: 24 151.242.62.0/24 maxlen: 24 151.242.121.0/24 maxlen: 24 151.242.158.0/24 maxlen: 24 151.242.166.0/23 maxlen: 24 151.243.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:bd:38:06:76:32:51:58:0b:e6:8d:77:f8:75:17:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 19 08:32:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e591fee94d8e9321df3e61a3ad79e16578491b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e4:7e:ec:f1:73:bd:a6:71:a4:c4:29:b6:bd: 68:76:17:e2:05:2a:3c:44:d1:1a:35:d8:25:34:15: 27:55:fd:2a:a1:85:0f:fd:60:73:9e:f8:f1:c0:5e: 28:40:d7:43:3d:e2:6a:91:fc:2c:3b:ad:25:19:1b: 79:3c:c1:a1:60:b8:38:de:b4:33:c1:6a:cd:5f:27: 77:58:df:4e:49:88:a8:7c:d4:04:4a:fc:a5:0e:ee: 26:3f:73:ba:9b:ce:11:48:4e:66:26:75:ec:ba:c0: 84:84:54:e2:9f:b4:f7:a1:48:45:61:01:7f:56:17: 9d:9d:af:3e:7a:32:72:5e:00:d6:76:53:9a:d4:1e: e6:68:35:9c:d4:0f:39:71:68:7a:f3:04:b6:e7:1f: 7b:68:48:3a:4d:a1:a1:7e:3b:bf:8c:3a:10:88:92: 2b:52:7d:5d:11:81:88:e1:e7:c4:ec:54:43:56:b0: 60:9e:2e:aa:ec:52:73:b5:07:36:0d:fc:b2:96:56: da:24:38:d4:9b:57:1e:92:64:ea:20:80:f0:af:06: 9a:f0:62:b3:04:57:9d:aa:ed:0e:d6:87:5e:a9:ed: 62:1e:70:26:2b:36:b1:23:78:33:75:6c:fa:7f:ac: ad:3e:29:c3:78:3d:26:10:7c:60:7c:d5:f2:1a:13: 7b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:91:FE:E9:4D:8E:93:21:DF:3E:61:A3:AD:79:E1:65:78:49:1B:9F X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5ZH-6U2OkyHfPmGjrXnhZXhJG58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.219.0/24 151.240.229.0/24 151.240.233.0-151.240.238.255 151.240.240.0/24 151.242.9.0/24 151.242.46.0-151.242.48.255 151.242.60.0/24 151.242.62.0/24 151.242.121.0/24 151.242.158.0/24 151.242.166.0/23 151.243.140.0/24 Signature Algorithm: sha256WithRSAEncryption 51:93:8b:c8:50:c5:bc:6e:b4:85:56:4a:a9:cc:9b:47:cd:ae: 91:ef:b8:aa:91:73:5d:e8:52:9c:18:e7:da:fb:05:51:4c:97: a9:5b:1d:cb:78:04:88:13:8d:db:41:eb:e0:72:6f:d5:64:46: 5a:1c:5c:b4:84:67:d3:20:6b:99:10:d2:cd:67:75:bd:f4:69: ab:cc:0e:be:57:94:ef:75:ff:28:4d:fb:59:25:80:89:c8:69: c1:87:19:24:6d:98:04:ce:26:30:92:8f:28:31:0d:b4:c6:f4: f1:3e:f4:99:10:cc:9a:f9:9c:90:d3:e3:a8:d9:dd:6c:ff:9f: 89:c5:79:32:30:e8:5a:96:a8:3e:a7:4f:aa:96:0b:d3:8c:da: 4e:29:ee:18:28:fb:b7:87:6e:3b:08:58:bf:1b:a2:43:09:33: 38:fb:d5:cb:b0:f8:d0:2f:89:21:8e:f3:c3:93:19:65:49:10: 5e:25:93:d9:9d:8b:ef:a8:1a:54:68:dc:aa:da:45:9a:17:5c: 18:5f:b1:a6:3f:9d:9e:63:c5:4d:32:a6:1c:ad:f2:26:ea:85: a2:45:f7:50:db:83:0a:ba:c7:80:fd:2c:45:b0:d2:e2:6d:05: 18:f5:27:e4:81:b2:3c:da:ff:19:ee:07:b5:9c:8f:77:16:5c: 0a:08:80:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgISAZs1vTgGdjJRWAvmjXf4dReSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjE5MDgzMjMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTkxZmVlOTRkOGU5MzIxZGYzZTYxYTNhZDc5ZTE2NTc4NDkxYjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeR+7PFzvaZxpMQptr1odhfiBSo8 RNEaNdglNBUnVf0qoYUP/WBznvjxwF4oQNdDPeJqkfwsO60lGRt5PMGhYLg43rQz wWrNXyd3WN9OSYiofNQESvylDu4mP3O6m84RSE5mJnXsusCEhFTin7T3oUhFYQF/ Vhedna8+ejJyXgDWdlOa1B7maDWc1A85cWh68wS25x97aEg6TaGhfju/jDoQiJIr Un1dEYGI4efE7FRDVrBgni6q7FJztQc2DfyyllbaJDjUm1cekmTqIIDwrwaa8GKz BFedqu0O1odeqe1iHnAmKzaxI3gzdWz6f6ytPinDeD0mEHxgfNXyGhN7NQIDAQAB o4ICWzCCAlcwHQYDVR0OBBYEFOWR/ulNjpMh3z5ho6154WV4SRufMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvNVpILTZVMk9reUhmUG1HanJYbmhaWGhKRzU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBeBAIAATBYAwQAJcrbAwQA l/DlMAwDBACX8OkDBACX8O4DBACX8PADBACX8gkwDAMEAZfyLgMEAJfyMAMEAJfy PAMEAJfyPgMEAJfyeQMEAJfyngMEAZfypgMEAJfzjDANBgkqhkiG9w0BAQsFAAOC AQEAUZOLyFDFvG60hVZKqcybR82uke+4qpFzXehSnBjn2vsFUUyXqVsdy3gEiBON 20Hr4HJv1WRGWhxctIRn0yBrmRDSzWd1vfRpq8wOvleU73X/KE37WSWAichpwYcZ JG2YBM4mMJKPKDENtMb08T70mRDMmvmckNPjqNndbP+ficV5MjDoWpaoPqdPqpYL 04zaTinuGCj7t4duOwhYvxuiQwkzOPvVy7D40C+JIY7zw5MZZUkQXiWT2Z2L76ga VGjcqtpFmhdcGF+xpj+dnmPFTTKmHK3yJuqFokX3UNuDCrrHgP0sRbDS4m0FGPUn 5IGyPNr/Ge4HtZyPdxZcCgiAhw== -----END CERTIFICATE-----Generated at Fri Dec 19 17:18:44 2025 by rpki-client