This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/CSTvZtXWOFtr9XnKGuJzA-7Z-XU.roa File: CSTvZtXWOFtr9XnKGuJzA-7Z-XU.roa (raw, json) Hash identifier: 8odrQPLSRNTPHny0FTMeILDCc46I+6CB3uL4mZODC1Q= Subject key identifier: 09:24:EF:66:D5:D6:38:5B:6B:F5:79:CA:1A:E2:73:03:EE:D9:F9:75 Certificate issuer: /CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db Certificate serial: 019B3727BE0611E8D8B37EC07D12B31878AD Authority key identifier: DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/CSTvZtXWOFtr9XnKGuJzA-7Z-XU.roa Signing time: Fri 19 Dec 2025 15:08:29 +0000 ROA not before: Fri 19 Dec 2025 15:08:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41960 IP address blocks: 2.56.216.0/22 maxlen: 24 5.183.132.0/22 maxlen: 24 37.148.184.0/21 maxlen: 24 45.10.124.0/22 maxlen: 24 45.95.252.0/22 maxlen: 24 45.140.156.0/22 maxlen: 24 45.151.116.0/22 maxlen: 24 77.73.224.0/21 maxlen: 24 85.184.8.0/21 maxlen: 24 93.188.64.0/22 maxlen: 24 94.142.253.0/24 maxlen: 24 171.22.176.0/22 maxlen: 24 185.116.12.0/22 maxlen: 24 185.234.152.0/23 maxlen: 24 185.234.154.0/24 maxlen: 24 185.239.168.0/23 maxlen: 24 185.239.170.0/24 maxlen: 24 185.249.136.0/22 maxlen: 24 185.251.152.0/22 maxlen: 24 185.253.48.0/22 maxlen: 24 193.105.183.0/24 maxlen: 24 194.61.84.0/24 maxlen: 24 194.61.86.0/24 maxlen: 24 195.184.86.0/23 maxlen: 24 195.184.90.0/23 maxlen: 24 195.238.86.0/23 maxlen: 24 212.19.192.0/19 maxlen: 24 212.26.192.0/19 maxlen: 24 212.57.48.0/20 maxlen: 24 213.156.0.0/20 maxlen: 24 213.173.56.0/22 maxlen: 24 217.8.96.0/20 maxlen: 24 2001:6e0::/29 maxlen: 48 2a02:690::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:27:be:06:11:e8:d8:b3:7e:c0:7d:12:b3:18:78:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db Validity Not Before: Dec 19 15:08:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0924ef66d5d6385b6bf579ca1ae27303eed9f975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:54:10:04:93:e1:bc:fa:1e:bb:21:d0:91:78: ff:a4:d4:40:41:cb:31:53:f3:db:07:a3:21:87:a0: 23:77:1f:d4:9f:c3:0d:2d:78:b2:27:0b:d3:f4:e6: 93:21:3a:32:aa:ff:0d:f5:15:3b:47:23:fe:6e:e0: 8a:6a:38:cb:a9:39:44:5d:cd:27:1e:5d:99:a0:52: f0:82:be:07:a8:14:6f:dd:95:f3:f6:94:ce:20:b6: ac:a6:07:44:34:de:6f:3c:70:3b:39:9b:ac:91:47: 92:01:3f:6c:87:8c:a7:c3:63:3f:e4:c0:76:6f:51: f5:47:62:d6:c7:33:07:f0:38:21:5c:64:c9:65:f0: 4e:d1:33:65:69:45:83:f2:fe:38:8c:65:35:ff:14: 28:7b:aa:23:23:c3:b1:6b:f4:ff:8d:6a:50:d9:df: 3c:8e:91:ac:37:f4:af:bf:cc:3e:4a:5e:e1:7c:ad: 32:04:14:f9:18:c1:40:04:04:ee:50:84:da:61:ac: c4:c0:47:4e:4a:59:0d:39:ee:33:b1:cf:dd:af:20: c3:15:60:31:60:f8:2d:69:fc:6d:f2:8b:af:c2:55: 56:a1:3b:13:90:1a:c3:05:38:f7:df:96:cc:de:d8: 98:80:61:6f:9a:aa:3c:cb:4a:1a:d5:fb:0a:24:60: a5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:24:EF:66:D5:D6:38:5B:6B:F5:79:CA:1A:E2:73:03:EE:D9:F9:75 X509v3 Authority Key Identifier: keyid:DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/CSTvZtXWOFtr9XnKGuJzA-7Z-XU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.216.0/22 5.183.132.0/22 37.148.184.0/21 45.10.124.0/22 45.95.252.0/22 45.140.156.0/22 45.151.116.0/22 77.73.224.0/21 85.184.8.0/21 93.188.64.0/22 94.142.253.0/24 171.22.176.0/22 185.116.12.0/22 185.234.152.0-185.234.154.255 185.239.168.0-185.239.170.255 185.249.136.0/22 185.251.152.0/22 185.253.48.0/22 193.105.183.0/24 194.61.84.0/24 194.61.86.0/24 195.184.86.0/23 195.184.90.0/23 195.238.86.0/23 212.19.192.0/19 212.26.192.0/19 212.57.48.0/20 213.156.0.0/20 213.173.56.0/22 217.8.96.0/20 IPv6: 2001:6e0::/29 2a02:690::/29 Signature Algorithm: sha256WithRSAEncryption 18:5f:ac:49:ff:3b:d7:c2:cf:cb:74:4e:06:10:a4:05:81:36: f7:92:1c:fc:44:a0:9e:f9:4b:fb:60:40:73:75:11:45:46:5b: 0e:96:0b:76:9e:23:eb:a8:26:d7:38:76:1d:c7:31:30:f7:50: 1e:13:85:f4:56:b8:e2:aa:3b:05:2c:0a:45:a2:2f:b9:07:a9: 77:8a:1c:94:e5:c9:b4:21:4a:ff:9d:c2:54:9f:b0:74:2b:bc: 05:45:d2:6b:a9:1e:4f:18:a4:9b:67:0f:08:03:ee:bb:6e:e5: ad:c8:99:e1:31:eb:fa:c9:12:5e:d6:3e:c3:1c:8d:c4:81:76: 21:bb:0c:69:66:d5:01:99:66:b1:80:de:9f:50:df:f0:7e:a1: 1d:0e:58:1d:d2:04:20:92:94:ff:71:d0:8a:d9:14:5c:24:df: 3a:ca:79:68:7f:45:79:da:0f:97:b0:62:fe:eb:ef:4c:35:cc: 47:82:c6:4b:52:d3:bf:56:97:d9:dc:b8:1b:6b:82:cf:98:98: 7a:0d:cb:fd:bb:b8:9c:66:03:dc:76:01:ee:8a:18:e0:46:68: 3e:f2:c2:cf:f1:d4:8b:f7:29:2e:63:3e:11:b0:1e:86:09:42: 76:a8:a1:4d:29:6e:ba:42:5d:ab:22:16:3c:ad:2b:b8:77:85: 0d:83:be:37 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgISAZs3J74GEejYs37AfRKzGHitMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYTEyMjA3YWY0ZDE4NmM0NGRhMjUzM2MwYjhmMWZkMWY1 NWQ4ZGIwHhcNMjUxMjE5MTUwODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTI0ZWY2NmQ1ZDYzODViNmJmNTc5Y2ExYWUyNzMwM2VlZDlmOTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFQQBJPhvPoeuyHQkXj/pNRAQcsx U/PbB6Mhh6Ajdx/Un8MNLXiyJwvT9OaTIToyqv8N9RU7RyP+buCKajjLqTlEXc0n Hl2ZoFLwgr4HqBRv3ZXz9pTOILaspgdENN5vPHA7OZuskUeSAT9sh4ynw2M/5MB2 b1H1R2LWxzMH8DghXGTJZfBO0TNlaUWD8v44jGU1/xQoe6ojI8Oxa/T/jWpQ2d88 jpGsN/Svv8w+Sl7hfK0yBBT5GMFABATuUITaYazEwEdOSlkNOe4zsc/dryDDFWAx YPgtafxt8ouvwlVWoTsTkBrDBTj335bM3tiYgGFvmqo8y0oa1fsKJGClHwIDAQAB o4IC4jCCAt4wHQYDVR0OBBYEFAkk72bV1jhba/V5yhricwPu2fl1MB8GA1UdIwQY MBaAFNuhIgevTRhsRNolM8C48f0fVdjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjZFaUI2OU5HR3hFMmlVendManhfUjlWMk5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jODAxMGUtMzI4OS00YTM2LWEyYjgt MTJiMmJjNTgwNTNhLzEvQ1NUdlp0WFdPRnRyOVhuS0d1SnpBLTdaLVhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9jODAxMGUtMzI4OS00YTM2LWEyYjgtMTJiMmJjNTgwNTNh LzEvMjZFaUI2OU5HR3hFMmlVendManhfUjlWMk5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH3BggrBgEFBQcBBwEB/wSB5zCB5DCBywQCAAEwgcQDBAIC ONgDBAIFt4QDBAMllLgDBAItCnwDBAItX/wDBAItjJwDBAItl3QDBANNSeADBANV uAgDBAJdvEADBABejv0DBAKrFrADBAK5dAwwDAMEA7nqmAMEALnqmjAMAwQDue+o AwQAue+qAwQCufmIAwQCufuYAwQCuf0wAwQAwWm3AwQAwj1UAwQAwj1WAwQBw7hW AwQBw7haAwQBw+5WAwQF1BPAAwQF1BrAAwQE1DkwAwQE1ZwAAwQC1a04AwQE2Qhg MBQEAgACMA4DBQMgAQbgAwUDKgIGkDANBgkqhkiG9w0BAQsFAAOCAQEAGF+sSf87 18LPy3ROBhCkBYE295Ic/ESgnvlL+2BAc3URRUZbDpYLdp4j66gm1zh2HccxMPdQ HhOF9Fa44qo7BSwKRaIvuQepd4oclOXJtCFK/53CVJ+wdCu8BUXSa6keTxikm2cP CAPuu27lrciZ4THr+skSXtY+wxyNxIF2IbsMaWbVAZlmsYDen1Df8H6hHQ5YHdIE IJKU/3HQitkUXCTfOsp5aH9FedoPl7Bi/uvvTDXMR4LGS1LTv1aX2dy4G2uCz5iY eg3L/bu4nGYD3HYB7ooY4EZoPvLCz/HUi/cpLmM+EbAehglCdqihTSluukJdqyIW PK0ruHeFDYO+Nw== -----END CERTIFICATE-----Generated at Sat Dec 20 15:38:24 2025 by rpki-client