This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/5Qif3k2Ow21b3T13qQcXmufX7BU.roa File: 5Qif3k2Ow21b3T13qQcXmufX7BU.roa (raw, json) Hash identifier: 8gXk3RE16mWmPyOZfLHtJ+nFQvLTvyP/a0OT6wOJZzI= Subject key identifier: E5:08:9F:DE:4D:8E:C3:6D:5B:DD:3D:77:A9:07:17:9A:E7:D7:EC:15 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B2C1BAD136C9746AF044A4A8DDF049238 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/5Qif3k2Ow21b3T13qQcXmufX7BU.roa Signing time: Wed 17 Dec 2025 11:39:29 +0000 ROA not before: Wed 17 Dec 2025 11:39:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 77.76.4.0/22 maxlen: 22 78.128.2.0/23 maxlen: 23 78.128.10.0/23 maxlen: 23 78.128.12.0/22 maxlen: 22 78.128.16.0/20 maxlen: 20 78.128.41.0/24 maxlen: 24 78.128.52.0/22 maxlen: 22 78.128.56.0/22 maxlen: 22 78.128.82.0/23 maxlen: 23 78.128.84.0/22 maxlen: 22 78.128.88.0/22 maxlen: 22 78.128.97.0/24 maxlen: 24 78.128.100.0/22 maxlen: 22 78.128.104.0/22 maxlen: 22 78.128.116.0/23 maxlen: 23 78.142.10.0/23 maxlen: 23 78.142.12.0/22 maxlen: 22 78.142.31.0/24 maxlen: 24 83.222.190.0/23 maxlen: 23 84.201.224.0/20 maxlen: 20 91.148.162.0/23 maxlen: 23 91.148.164.0/23 maxlen: 23 91.148.169.0/24 maxlen: 24 91.148.170.0/23 maxlen: 23 91.148.172.0/22 maxlen: 22 91.148.176.0/21 maxlen: 21 130.185.227.0/24 maxlen: 24 130.185.234.0/24 maxlen: 24 185.81.120.0/24 maxlen: 24 193.24.240.0/22 maxlen: 22 193.200.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:1b:ad:13:6c:97:46:af:04:4a:4a:8d:df:04:92:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Dec 17 11:39:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e5089fde4d8ec36d5bdd3d77a907179ae7d7ec15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:76:f8:9c:74:9e:68:34:5d:41:d4:4c:e6:92: 97:2d:3c:bf:11:07:f5:96:9e:c8:f2:25:23:70:68: 07:3f:01:54:94:b0:5e:77:df:08:72:2c:ac:bf:c2: e1:69:50:cd:93:9e:e9:1d:82:cb:7d:27:87:80:5f: ae:d7:bf:f5:87:f2:2c:3b:ef:3f:69:0c:b0:4d:b1: 65:db:2c:af:c4:d3:8d:2e:36:cf:0e:3c:1a:ff:73: 70:cc:b8:2c:6b:92:6e:20:9b:f4:e9:c7:3f:95:fe: ef:8d:c0:69:9d:91:f4:f1:f6:f7:96:5e:df:fb:63: 0b:63:b9:2b:43:68:e7:46:dc:c3:29:0b:11:43:f3: 05:09:07:bd:3c:a4:84:ed:01:c7:66:d8:bd:27:83: 2d:3d:17:18:4a:b9:4a:ce:c2:f5:f4:32:e0:58:49: 69:a9:7c:49:3e:9a:cd:35:d7:de:1e:0d:e5:fe:3b: 4d:ed:0a:32:d4:70:04:ce:c8:1d:a0:7a:c6:c0:73: 63:d2:aa:6b:bc:02:df:70:19:19:c6:c1:e9:e8:dc: 41:50:c0:2a:a7:4a:97:e6:a7:29:ed:61:23:b6:4d: 64:fa:4b:b5:96:fe:c4:3f:d3:e8:ec:e2:81:2e:a0: c7:0e:46:8d:0c:59:d1:d4:7d:74:df:0f:f3:8e:ab: 15:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:08:9F:DE:4D:8E:C3:6D:5B:DD:3D:77:A9:07:17:9A:E7:D7:EC:15 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/5Qif3k2Ow21b3T13qQcXmufX7BU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.76.4.0/22 78.128.2.0/23 78.128.10.0-78.128.31.255 78.128.41.0/24 78.128.52.0-78.128.59.255 78.128.82.0-78.128.91.255 78.128.97.0/24 78.128.100.0-78.128.107.255 78.128.116.0/23 78.142.10.0-78.142.15.255 78.142.31.0/24 83.222.190.0/23 84.201.224.0/20 91.148.162.0-91.148.165.255 91.148.169.0-91.148.183.255 130.185.227.0/24 130.185.234.0/24 185.81.120.0/24 193.24.240.0/22 193.200.14.0/23 Signature Algorithm: sha256WithRSAEncryption a1:41:75:51:58:d9:d0:9b:9b:59:0a:ca:78:81:c0:23:e5:93: bb:9f:23:5e:b4:91:ea:1d:96:39:d5:fc:2e:22:23:63:b0:5f: 7e:f5:22:8a:4f:d4:a8:d1:b1:ed:00:e2:45:c3:13:58:c8:5f: 21:24:38:15:97:f3:a2:24:03:6f:0b:e9:9a:8d:5f:3b:99:21: fe:5e:9a:e1:68:c4:bb:29:ed:dc:fe:ec:e9:31:c1:e2:06:32: 6c:78:a2:57:06:9e:05:27:e2:03:4e:f3:de:e9:e8:6e:eb:bc: 38:3d:c2:0d:57:a6:4a:d6:a3:a4:79:6b:94:e8:3a:4c:67:9b: 1e:3e:d3:cb:fc:3d:ca:33:1b:bd:e9:98:65:71:27:1a:d3:5c: e3:7c:85:ee:4c:d1:97:b2:d5:5a:37:85:a4:70:51:f2:64:c9: ef:bd:6a:c2:59:8a:58:c4:6f:02:e2:ca:28:1d:1a:96:4f:f3: 46:8e:49:f3:b3:92:ef:6e:12:cb:25:a8:a8:8a:53:73:57:e4: 5f:af:8a:0e:09:21:fe:2d:b0:52:05:df:e6:27:fa:f1:ef:93: 22:bf:53:98:e9:ec:23:bd:ad:c9:09:cc:29:df:a8:ab:d2:1e: 51:91:a9:58:c3:9f:16:ef:2d:7e:0c:aa:0f:38:3c:d8:28:80: da:d0:45:ba -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgISAZssG60TbJdGrwRKSo3fBJI4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjUxMjE3MTEzOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTA4OWZkZTRkOGVjMzZkNWJkZDNkNzdhOTA3MTc5YWU3ZDdlYzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXb4nHSeaDRdQdRM5pKXLTy/EQf1 lp7I8iUjcGgHPwFUlLBed98Iciysv8LhaVDNk57pHYLLfSeHgF+u17/1h/IsO+8/ aQywTbFl2yyvxNONLjbPDjwa/3NwzLgsa5JuIJv06cc/lf7vjcBpnZH08fb3ll7f +2MLY7krQ2jnRtzDKQsRQ/MFCQe9PKSE7QHHZti9J4MtPRcYSrlKzsL19DLgWElp qXxJPprNNdfeHg3l/jtN7Qoy1HAEzsgdoHrGwHNj0qprvALfcBkZxsHp6NxBUMAq p0qX5qcp7WEjtk1k+ku1lv7EP9Po7OKBLqDHDkaNDFnR1H103w/zjqsVQQIDAQAB o4ICuDCCArQwHQYDVR0OBBYEFOUIn95NjsNtW909d6kHF5rn1+wVMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvNVFpZjNrMk93MjFiM1QxM3FRY1htdWZYN0JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHNBggrBgEFBQcBBwEB/wSBvTCBujCBtwQCAAEwgbADBAJN TAQDBAFOgAIwDAMEAU6ACgMEBU6AAAMEAE6AKTAMAwQCToA0AwQCToA4MAwDBAFO gFIDBAJOgFgDBABOgGEwDAMEAk6AZAMEAk6AaAMEAU6AdDAMAwQBTo4KAwQETo4A AwQATo4fAwQBU96+AwQEVMngMAwDBAFblKIDBAFblKQwDAMEAFuUqQMEA1uUsAME AIK54wMEAIK56gMEALlReAMEAsEY8AMEAcHIDjANBgkqhkiG9w0BAQsFAAOCAQEA oUF1UVjZ0JubWQrKeIHAI+WTu58jXrSR6h2WOdX8LiIjY7BffvUiik/UqNGx7QDi RcMTWMhfISQ4FZfzoiQDbwvpmo1fO5kh/l6a4WjEuynt3P7s6THB4gYybHiiVwae BSfiA07z3unobuu8OD3CDVemStajpHlrlOg6TGebHj7Ty/w9yjMbvemYZXEnGtNc 43yF7kzRl7LVWjeFpHBR8mTJ771qwlmKWMRvAuLKKB0alk/zRo5J87OS724SyyWo qIpTc1fkX6+KDgkh/i2wUgXf5if68e+TIr9TmOnsI72tyQnMKd+oq9IeUZGpWMOf Fu8tfgyqDzg82CiA2tBFug== -----END CERTIFICATE-----Generated at Sat Dec 20 11:37:12 2025 by rpki-client