This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/3j4TVDlr5ya34eIK5tEegAc3aPU.roa File: 3j4TVDlr5ya34eIK5tEegAc3aPU.roa (raw, json) Hash identifier: cPkb/fw62Ph7qprDyiHpgESmP2xlKBrLVzqR3BNFYFs= Subject key identifier: DE:3E:13:54:39:6B:E7:26:B7:E1:E2:0A:E6:D1:1E:80:07:37:68:F5 Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094 Certificate serial: 019B2CC077887DE926BE57023CD53159A192 Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/3j4TVDlr5ya34eIK5tEegAc3aPU.roa Signing time: Wed 17 Dec 2025 14:39:29 +0000 ROA not before: Wed 17 Dec 2025 14:39:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211183 IP address blocks: 5.35.124.0/24 maxlen: 24 5.35.125.0/24 maxlen: 24 5.35.126.0/24 maxlen: 24 5.35.127.0/24 maxlen: 24 5.253.62.0/24 maxlen: 24 37.140.241.0/24 maxlen: 24 45.128.204.0/24 maxlen: 24 79.133.181.0/24 maxlen: 24 79.133.182.0/24 maxlen: 24 79.133.183.0/24 maxlen: 24 89.191.225.0/24 maxlen: 24 91.200.84.0/24 maxlen: 24 94.154.11.0/24 maxlen: 24 130.49.143.0/24 maxlen: 24 130.49.153.0/24 maxlen: 24 155.212.245.0/24 maxlen: 24 155.212.246.0/24 maxlen: 24 155.212.247.0/24 maxlen: 24 185.198.152.0/24 maxlen: 24 185.239.50.0/24 maxlen: 24 185.239.51.0/24 maxlen: 24 185.240.103.0/24 maxlen: 24 185.244.51.0/24 maxlen: 24 185.250.44.0/24 maxlen: 24 185.250.46.0/24 maxlen: 24 185.250.47.0/24 maxlen: 24 193.187.96.0/24 maxlen: 24 194.5.78.0/24 maxlen: 24 194.5.79.0/24 maxlen: 24 195.93.252.0/24 maxlen: 24 217.171.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:c0:77:88:7d:e9:26:be:57:02:3c:d5:31:59:a1:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094 Validity Not Before: Dec 17 14:39:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=de3e1354396be726b7e1e20ae6d11e80073768f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:03:cd:10:9b:bf:36:b0:04:d9:a2:49:ef:5c: d9:a0:ac:86:fc:ba:18:2b:6f:a9:46:91:b0:40:87: ec:76:70:76:a9:23:e4:68:d7:55:1d:80:45:11:3a: 62:90:2f:39:f3:2f:0b:d1:59:4a:1b:29:15:5d:43: 4d:7c:e7:1c:ab:f5:6d:19:5a:d8:4a:1b:84:43:cd: fc:10:fb:7b:af:e1:35:08:d6:86:80:e8:03:8a:50: e5:d5:20:c6:07:91:b4:15:a9:8a:f6:3a:73:bf:54: 0a:8c:b2:73:49:51:9f:80:4b:04:27:6a:01:af:c7: d3:37:f3:3a:5f:82:07:c7:a5:8c:d7:b9:1e:49:4c: f8:44:11:69:5b:bb:e9:f8:61:cf:0f:d0:dc:4b:f5: e6:ab:0a:ad:53:29:0a:47:ad:33:bf:e4:b6:07:67: 95:c7:be:03:40:90:bc:d5:b6:dd:00:e1:f1:30:24: cf:1c:ec:08:29:0a:14:34:27:d1:1c:79:98:1d:4b: 4d:1c:b8:78:f2:9e:38:0d:25:77:fd:ca:ea:2e:2e: 70:b7:1b:b4:61:53:d3:f6:be:83:91:44:6f:17:3a: c1:dc:d5:9f:da:6f:e9:ae:49:e8:73:2e:dc:e0:56: 3c:87:26:c9:dd:23:73:45:73:f0:a3:c5:8f:c6:de: 75:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3E:13:54:39:6B:E7:26:B7:E1:E2:0A:E6:D1:1E:80:07:37:68:F5 X509v3 Authority Key Identifier: keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/3j4TVDlr5ya34eIK5tEegAc3aPU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.35.124.0/22 5.253.62.0/24 37.140.241.0/24 45.128.204.0/24 79.133.181.0-79.133.183.255 89.191.225.0/24 91.200.84.0/24 94.154.11.0/24 130.49.143.0/24 130.49.153.0/24 155.212.245.0-155.212.247.255 185.198.152.0/24 185.239.50.0/23 185.240.103.0/24 185.244.51.0/24 185.250.44.0/24 185.250.46.0/23 193.187.96.0/24 194.5.78.0/23 195.93.252.0/24 217.171.146.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:10:e2:ea:8a:22:40:86:47:45:ab:28:aa:51:d9:7f:d4:62: fb:99:b3:a7:9a:dc:43:5d:83:b0:49:0f:9f:57:91:ac:52:c9: 93:72:d7:5c:0f:85:ad:91:aa:e9:1d:16:b6:a7:ee:3d:79:33: 18:99:8e:f0:c0:ae:35:a3:ae:de:33:04:0a:31:69:9e:a8:dc: b1:8a:57:45:f6:8d:f1:45:29:27:92:8d:82:a9:5d:39:81:08: fe:50:93:95:c7:6e:de:8a:0c:19:4f:eb:20:7e:df:ed:4a:1a: 8b:1c:23:49:da:62:bf:cd:f5:b1:6d:ae:3c:85:a5:38:37:ec: ac:25:fa:d4:34:02:f6:ea:65:2a:55:e0:3b:97:be:f9:e3:d0: d1:dd:bb:d9:38:f5:fb:c5:a7:b4:6c:f7:bf:26:ce:ca:fb:db: 4f:7c:c4:56:f3:81:90:f4:cc:b0:a9:bf:61:a0:bc:84:fb:1c: da:83:a0:27:c3:04:3d:12:5d:4d:ee:4d:3c:ac:d0:a3:a5:6f: 38:72:5e:09:bc:92:47:72:82:0a:36:b1:bd:38:76:12:46:18: 99:3f:92:c6:c4:5b:20:5a:bd:99:95:95:e3:62:76:eb:ff:df: 2d:70:c4:64:7e:c4:ad:c7:78:97:02:0b:a0:b0:3f:7d:fe:91: b6:e4:d7:75 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgISAZsswHeIfekmvlcCPNUxWaGSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYmU2NWFlMjNmMjA3ZmE2OTUyNTVmNTVhOTA3YWMxNjA4 YmUwOTQwHhcNMjUxMjE3MTQzOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTNlMTM1NDM5NmJlNzI2YjdlMWUyMGFlNmQxMWU4MDA3Mzc2OGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgPNEJu/NrAE2aJJ71zZoKyG/LoY K2+pRpGwQIfsdnB2qSPkaNdVHYBFETpikC858y8L0VlKGykVXUNNfOccq/VtGVrY ShuEQ838EPt7r+E1CNaGgOgDilDl1SDGB5G0FamK9jpzv1QKjLJzSVGfgEsEJ2oB r8fTN/M6X4IHx6WM17keSUz4RBFpW7vp+GHPD9DcS/XmqwqtUykKR60zv+S2B2eV x74DQJC81bbdAOHxMCTPHOwIKQoUNCfRHHmYHUtNHLh48p44DSV3/crqLi5wtxu0 YVPT9r6DkURvFzrB3NWf2m/prknocy7c4FY8hybJ3SNzRXPwo8WPxt513QIDAQAB o4ICljCCApIwHQYDVR0OBBYEFN4+E1Q5a+cmt+HiCubRHoAHN2j1MB8GA1UdIwQY MBaAFF++Za4j8gf6aVJV9VqQesFgi+CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUt NDkyYWIzNzI2ODlkLzEvM2o0VFZEbHI1eWEzNGVJSzV0RWVnQWMzYVBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUtNDkyYWIzNzI2ODlk LzEvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGrBggrBgEFBQcBBwEB/wSBmzCBmDCBlQQCAAEwgY4DBAIF I3wDBAAF/T4DBAAljPEDBAAtgMwwDAMEAE+FtQMEA0+FsAMEAFm/4QMEAFvIVAME AF6aCwMEAIIxjwMEAIIxmTAMAwQAm9T1AwQDm9TwAwQAucaYAwQBue8yAwQAufBn AwQAufQzAwQAufosAwQBufouAwQAwbtgAwQBwgVOAwQAw138AwQA2auSMA0GCSqG SIb3DQEBCwUAA4IBAQAMEOLqiiJAhkdFqyiqUdl/1GL7mbOnmtxDXYOwSQ+fV5Gs UsmTctdcD4WtkarpHRa2p+49eTMYmY7wwK41o67eMwQKMWmeqNyxildF9o3xRSkn ko2CqV05gQj+UJOVx27eigwZT+sgft/tShqLHCNJ2mK/zfWxba48haU4N+ysJfrU NAL26mUqVeA7l77549DR3bvZOPX7xae0bPe/Js7K+9tPfMRW84GQ9Mywqb9hoLyE +xzag6AnwwQ9El1N7k08rNCjpW84cl4JvJJHcoIKNrG9OHYSRhiZP5LGxFsgWr2Z lZXjYnbr/98tcMRkfsStx3iXAgugsD99/pG25Nd1 -----END CERTIFICATE-----Generated at Sun Dec 21 00:08:59 2025 by rpki-client