This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/T9skIwsDNjppIFwpBxsNxIjwfqM.roa File: T9skIwsDNjppIFwpBxsNxIjwfqM.roa (raw, json) Hash identifier: jbyvfRXjWqpPo+XXIyeuppHCGdxHWDVqk3uxeKJtal4= Subject key identifier: 4F:DB:24:23:0B:03:36:3A:69:20:5C:29:07:1B:0D:C4:88:F0:7E:A3 Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 019B1817779C2CE289C01A611CF2B31EDC0B Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/T9skIwsDNjppIFwpBxsNxIjwfqM.roa Signing time: Sat 13 Dec 2025 14:22:29 +0000 ROA not before: Sat 13 Dec 2025 14:22:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48678 IP address blocks: 5.180.105.0/24 maxlen: 24 5.180.106.0/24 maxlen: 24 5.180.107.0/24 maxlen: 24 45.131.0.0/24 maxlen: 24 45.131.1.0/24 maxlen: 24 45.131.2.0/24 maxlen: 24 45.131.3.0/24 maxlen: 24 45.136.4.0/24 maxlen: 24 77.83.200.0/24 maxlen: 24 77.83.201.0/24 maxlen: 24 77.83.202.0/24 maxlen: 24 91.208.204.0/24 maxlen: 24 194.116.237.0/24 maxlen: 24 2a09:8780::/29 maxlen: 29 2a0f:b700::/29 maxlen: 29 2a0f:e900::/29 maxlen: 29 2a0f:eb00::/29 maxlen: 29 2a0f:eb05::/32 maxlen: 32 2a0f:eb07::/32 maxlen: 32 2a0f:ed00::/29 maxlen: 29 2a0f:ed03::/32 maxlen: 32 2a0f:f900::/29 maxlen: 29 2a13:a440:7::/48 maxlen: 48 2a13:a441::/32 maxlen: 32 2a13:a445::/32 maxlen: 32 2a13:a447::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:17:77:9c:2c:e2:89:c0:1a:61:1c:f2:b3:1e:dc:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Dec 13 14:22:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4fdb24230b03363a69205c29071b0dc488f07ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:32:64:03:04:0b:c4:ec:92:9e:5f:48:22:de: 3b:55:87:c1:34:62:48:0f:d1:4b:5f:9c:24:26:d0: 5a:cb:e3:47:54:a0:36:6d:be:37:2f:74:8c:1d:da: 12:4e:9e:0e:fe:61:66:b5:49:6f:e0:ef:c1:c1:19: 16:7b:49:15:33:6d:6b:01:92:73:2b:1f:a5:86:47: 83:ae:83:0d:cd:70:1b:82:fc:bf:c6:42:02:95:47: 34:f3:fe:46:af:f6:8a:ff:08:21:73:95:b8:75:7a: 6b:d5:92:19:b1:77:a4:be:b5:4b:e3:32:65:17:5a: a4:99:62:8a:68:71:06:e5:bb:b8:78:72:c1:fa:5c: 96:2d:4b:07:05:ec:9e:27:dc:19:77:6d:4b:17:dd: 8d:65:89:8e:28:b3:91:8c:61:0c:1d:51:f5:22:b2: e8:e5:13:b9:36:8a:55:3b:8a:ff:a5:ca:f2:0b:44: 95:fd:7a:68:cd:c9:27:57:64:b5:a4:a0:53:80:61: 38:48:8c:a8:93:7c:ad:28:8b:62:07:7a:6e:23:20: 33:09:24:40:e7:43:6b:14:59:a6:30:72:fb:b2:93: 14:13:ec:f8:c4:16:fc:41:9f:35:11:cb:b1:ad:b4: 20:88:08:13:58:67:c7:41:75:5e:99:2f:49:52:71: ba:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DB:24:23:0B:03:36:3A:69:20:5C:29:07:1B:0D:C4:88:F0:7E:A3 X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/T9skIwsDNjppIFwpBxsNxIjwfqM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.105.0-5.180.107.255 45.131.0.0/22 45.136.4.0/24 77.83.200.0-77.83.202.255 91.208.204.0/24 194.116.237.0/24 IPv6: 2a09:8780::/29 2a0f:b700::/29 2a0f:e900::/29 2a0f:eb00::/29 2a0f:ed00::/29 2a0f:f900::/29 2a13:a440:7::/48 2a13:a441::/32 2a13:a445::/32 2a13:a447::/32 Signature Algorithm: sha256WithRSAEncryption 28:82:ff:7c:c3:1d:0e:f3:c9:82:4e:14:90:bd:5b:e1:21:b0: 6f:2a:6a:07:9a:cf:2e:fb:60:76:cb:22:13:4f:8a:d9:c0:49: 2e:e7:a1:46:e3:73:ed:84:b3:59:88:65:2f:9a:78:31:d2:70: b7:ea:0e:ae:6b:69:57:92:35:66:8f:4b:88:55:8f:14:e9:2c: fb:3b:61:75:67:af:c3:bb:2a:6b:30:dd:20:da:04:92:7a:9f: e4:92:5b:75:56:fc:b4:e5:02:b3:ea:3b:be:9b:8d:8e:2a:57: 08:61:5a:41:01:0b:91:a1:17:d1:5b:02:58:e5:f0:85:b1:d7: 3c:e6:9f:a4:44:3c:99:3f:3c:bb:52:5a:7e:4f:1d:0c:60:85: d6:e3:0e:ab:17:88:ff:9b:b0:66:8b:7e:28:46:11:61:e2:1d: 6c:dd:6f:ae:ab:48:7b:60:4b:9f:bb:1e:eb:52:d7:79:2a:be: f0:4b:2d:6c:78:cd:05:e3:7f:da:5e:a4:a8:ec:14:d9:82:8a: 16:98:b1:6a:a2:48:ef:42:db:67:d7:97:1b:61:10:b7:80:31: 23:ac:b6:ee:62:58:27:21:db:43:11:a7:4e:e5:b9:80:63:44: dc:c9:93:cc:16:88:af:2e:d7:3e:1a:ca:36:09:18:ae:f5:54: c0:48:68:c2 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZsYF3ecLOKJwBphHPKzHtwLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjUxMjEzMTQyMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmRiMjQyMzBiMDMzNjNhNjkyMDVjMjkwNzFiMGRjNDg4ZjA3ZWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTJkAwQLxOySnl9IIt47VYfBNGJI D9FLX5wkJtBay+NHVKA2bb43L3SMHdoSTp4O/mFmtUlv4O/BwRkWe0kVM21rAZJz Kx+lhkeDroMNzXAbgvy/xkIClUc08/5Gr/aK/wghc5W4dXpr1ZIZsXekvrVL4zJl F1qkmWKKaHEG5bu4eHLB+lyWLUsHBeyeJ9wZd21LF92NZYmOKLORjGEMHVH1IrLo 5RO5NopVO4r/pcryC0SV/XpozcknV2S1pKBTgGE4SIyok3ytKItiB3puIyAzCSRA 50NrFFmmMHL7spMUE+z4xBb8QZ81EcuxrbQgiAgTWGfHQXVemS9JUnG6YQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFE/bJCMLAzY6aSBcKQcbDcSI8H6jMB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvVDlza0l3c0ROanBwSUZ3cEJ4c054SWp3ZnFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGfBggrBgEFBQcBBwEB/wSBjzCBjDA6BAIAATA0MAwDBAAF tGkDBAIFtGgDBAItgwADBAAtiAQwDAMEA01TyAMEAE1TygMEAFvQzAMEAMJ07TBO BAIAAjBIAwUDKgmHgAMFAyoPtwADBQMqD+kAAwUDKg/rAAMFAyoP7QADBQMqD/kA AwcAKhOkQAAHAwUAKhOkQQMFACoTpEUDBQAqE6RHMA0GCSqGSIb3DQEBCwUAA4IB AQAogv98wx0O88mCThSQvVvhIbBvKmoHms8u+2B2yyITT4rZwEku56FG43PthLNZ iGUvmngx0nC36g6ua2lXkjVmj0uIVY8U6Sz7O2F1Z6/DuyprMN0g2gSSep/kklt1 Vvy05QKz6ju+m42OKlcIYVpBAQuRoRfRWwJY5fCFsdc85p+kRDyZPzy7Ulp+Tx0M YIXW4w6rF4j/m7Bmi34oRhFh4h1s3W+uq0h7YEufux7rUtd5Kr7wSy1seM0F43/a XqSo7BTZgooWmLFqokjvQttn15cbYRC3gDEjrLbuYlgnIdtDEadO5bmAY0TcyZPM FoivLtc+Gso2CRiu9VTASGjC -----END CERTIFICATE-----Generated at Fri Dec 19 10:17:26 2025 by rpki-client