This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/aTYH8WLc2Uw_7C2gcxcXUDSiXNE.roa File: aTYH8WLc2Uw_7C2gcxcXUDSiXNE.roa (raw, json) Hash identifier: uLUo/4kACROoANdVMI4SZiElSQhSuepEBxz4gCNJik0= Subject key identifier: 69:36:07:F1:62:DC:D9:4C:3F:EC:2D:A0:73:17:17:50:34:A2:5C:D1 Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019B359D24FA5BDE9524F5178CB3B472A7E3 Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/aTYH8WLc2Uw_7C2gcxcXUDSiXNE.roa Signing time: Fri 19 Dec 2025 07:57:29 +0000 ROA not before: Fri 19 Dec 2025 07:57:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15723 IP address blocks: 5.178.4.0/22 maxlen: 22 5.178.4.0/24 maxlen: 24 5.178.5.0/24 maxlen: 24 5.178.6.0/24 maxlen: 24 5.178.7.0/24 maxlen: 24 5.178.9.0/24 maxlen: 24 5.178.10.0/24 maxlen: 24 5.178.11.0/24 maxlen: 24 5.178.12.0/22 maxlen: 22 5.178.12.0/24 maxlen: 24 5.178.13.0/24 maxlen: 24 5.178.14.0/24 maxlen: 24 5.178.15.0/24 maxlen: 24 46.23.100.0/22 maxlen: 22 46.23.100.0/24 maxlen: 24 46.23.101.0/24 maxlen: 24 46.23.102.0/24 maxlen: 24 46.23.103.0/24 maxlen: 24 62.217.128.0/19 maxlen: 19 62.217.128.0/20 maxlen: 20 62.217.128.0/24 maxlen: 24 62.217.129.0/24 maxlen: 24 62.217.130.0/24 maxlen: 24 62.217.131.0/24 maxlen: 24 62.217.132.0/24 maxlen: 24 62.217.134.0/24 maxlen: 24 62.217.138.0/24 maxlen: 24 62.217.140.0/24 maxlen: 24 62.217.141.0/24 maxlen: 24 62.217.142.0/24 maxlen: 24 62.217.144.0/20 maxlen: 20 62.217.144.0/24 maxlen: 24 62.217.145.0/24 maxlen: 24 62.217.146.0/24 maxlen: 24 62.217.147.0/24 maxlen: 24 62.217.148.0/24 maxlen: 24 62.217.149.0/24 maxlen: 24 62.217.150.0/24 maxlen: 24 62.217.151.0/24 maxlen: 24 62.217.152.0/24 maxlen: 24 62.217.153.0/24 maxlen: 24 62.217.154.0/24 maxlen: 24 62.217.155.0/24 maxlen: 24 62.217.156.0/24 maxlen: 24 62.217.157.0/24 maxlen: 24 62.217.158.0/24 maxlen: 24 62.217.159.0/24 maxlen: 24 88.151.199.0/24 maxlen: 24 109.205.208.0/24 maxlen: 24 109.205.215.0/24 maxlen: 24 185.81.216.0/24 maxlen: 24 185.81.217.0/24 maxlen: 24 185.81.219.0/24 maxlen: 24 188.64.8.0/22 maxlen: 22 188.64.8.0/24 maxlen: 24 188.64.9.0/24 maxlen: 24 188.64.10.0/24 maxlen: 24 188.64.11.0/24 maxlen: 24 188.64.12.0/22 maxlen: 22 188.64.12.0/24 maxlen: 24 188.64.13.0/24 maxlen: 24 188.64.14.0/24 maxlen: 24 188.64.15.0/24 maxlen: 24 2a00:48c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:9d:24:fa:5b:de:95:24:f5:17:8c:b3:b4:72:a7:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Dec 19 07:57:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=693607f162dcd94c3fec2da07317175034a25cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4c:ad:6c:00:a3:c9:96:97:f8:bc:bb:75:99: 4c:94:73:bc:08:26:82:2b:9d:67:58:6d:2b:03:67: 9f:fb:58:73:36:0c:5a:17:c2:6b:ad:92:b4:ab:fd: 60:cf:c1:05:cc:fa:1a:5f:c4:e4:24:d4:9b:11:1c: 96:0b:79:c5:64:0d:2b:f7:44:3a:63:3e:8f:bb:11: 2a:b8:55:53:03:2d:bb:52:80:75:01:c6:b7:d4:6e: b6:71:32:65:3f:95:90:c1:17:0b:06:38:85:0d:36: 35:f0:4c:c7:7f:e3:cd:6a:c6:bb:38:f3:69:76:80: 04:92:87:d6:82:90:fc:70:8f:eb:31:b3:c7:77:37: bc:79:e4:ed:8e:3b:8d:c3:a8:af:e5:e7:ad:5c:99: d2:6b:fb:d7:a4:b9:22:64:ac:9c:86:78:24:9b:b2: 34:3b:d4:38:85:4f:60:90:9d:ff:df:4c:a4:f7:92: bd:4b:56:5f:c3:f8:01:fb:4d:00:b6:c2:51:9a:d1: 28:66:88:4d:ae:c5:90:d6:1c:77:3e:ad:c9:2a:21: 5d:09:24:77:56:d3:d1:4e:82:67:6d:df:79:2f:e5: 29:c8:e3:f5:ad:b0:36:cb:a3:e5:e4:d3:84:2f:db: 7d:29:a5:29:36:b5:2c:28:15:22:39:bb:d2:79:de: 22:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:36:07:F1:62:DC:D9:4C:3F:EC:2D:A0:73:17:17:50:34:A2:5C:D1 X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/aTYH8WLc2Uw_7C2gcxcXUDSiXNE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.178.4.0/22 5.178.9.0-5.178.15.255 46.23.100.0/22 62.217.128.0/19 88.151.199.0/24 109.205.208.0/24 109.205.215.0/24 185.81.216.0/23 185.81.219.0/24 188.64.8.0/21 IPv6: 2a00:48c0::/32 Signature Algorithm: sha256WithRSAEncryption 73:35:a3:f4:69:53:12:9b:7a:bd:a9:e5:1d:ce:85:a2:4d:ab: 00:5e:9d:68:c9:8b:c1:5c:78:68:cd:5e:0a:59:f7:0f:a4:ed: 72:46:09:7c:d9:a3:de:ec:ea:b9:35:01:8d:6e:1d:71:ae:8f: 86:70:65:7c:94:ff:f2:5d:1b:8b:20:97:04:fa:cf:30:c4:ae: ec:f3:43:99:09:05:b4:52:03:c4:2b:14:57:38:2e:e6:02:c2: 36:08:21:f7:ae:57:e6:72:28:05:f0:17:98:0f:59:9e:48:2f: a0:96:8b:aa:4a:e7:5a:9b:e4:87:2e:61:eb:f3:ac:c5:41:17: d7:cf:37:f6:81:3a:87:a9:b2:14:75:45:b9:78:4f:62:40:e7: af:e6:92:2a:15:50:e0:06:b1:23:0c:0f:36:ba:50:f6:ea:4e: 28:bc:29:39:a8:74:75:33:52:5d:96:b6:1a:3a:67:1a:d3:6d: 86:35:42:72:29:2a:72:ce:32:5b:64:f2:77:76:29:80:e4:0c: b7:54:e4:4d:10:39:6a:76:ba:38:c2:06:75:9e:f6:53:db:2b: 3d:c3:97:8d:64:3b:12:f4:76:09:76:ed:7a:5c:7c:c4:4b:f1: d8:68:63:7b:5f:49:1b:06:ea:7d:bb:1b:2c:68:3b:78:db:b9: 6b:41:23:3a -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgISAZs1nST6W96VJPUXjLO0cqfjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjUxMjE5MDc1NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTM2MDdmMTYyZGNkOTRjM2ZlYzJkYTA3MzE3MTc1MDM0YTI1Y2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kytbACjyZaX+Ly7dZlMlHO8CCaC K51nWG0rA2ef+1hzNgxaF8JrrZK0q/1gz8EFzPoaX8TkJNSbERyWC3nFZA0r90Q6 Yz6PuxEquFVTAy27UoB1Aca31G62cTJlP5WQwRcLBjiFDTY18EzHf+PNasa7OPNp doAEkofWgpD8cI/rMbPHdze8eeTtjjuNw6iv5eetXJnSa/vXpLkiZKychngkm7I0 O9Q4hU9gkJ3/30yk95K9S1Zfw/gB+00AtsJRmtEoZohNrsWQ1hx3Pq3JKiFdCSR3 VtPRToJnbd95L+UpyOP1rbA2y6Pl5NOEL9t9KaUpNrUsKBUiObvSed4iHwIDAQAB o4ICVjCCAlIwHQYDVR0OBBYEFGk2B/Fi3NlMP+wtoHMXF1A0olzRMB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvYVRZSDhXTGMyVXdfN0MyZ2N4Y1hVRFNpWE5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzBKBAIAATBEAwQCBbIEMAwD BAAFsgkDBAQFsgADBAIuF2QDBAU+2YADBABYl8cDBABtzdADBABtzdcDBAG5UdgD BAC5UdsDBAO8QAgwDQQCAAIwBwMFACoASMAwDQYJKoZIhvcNAQELBQADggEBAHM1 o/RpUxKber2p5R3OhaJNqwBenWjJi8FceGjNXgpZ9w+k7XJGCXzZo97s6rk1AY1u HXGuj4ZwZXyU//JdG4sglwT6zzDEruzzQ5kJBbRSA8QrFFc4LuYCwjYIIfeuV+Zy KAXwF5gPWZ5IL6CWi6pK51qb5IcuYevzrMVBF9fPN/aBOoepshR1Rbl4T2JA56/m kioVUOAGsSMMDza6UPbqTii8KTmodHUzUl2Wtho6ZxrTbYY1QnIpKnLOMltk8nd2 KYDkDLdU5E0QOWp2ujjCBnWe9lPbKz3Dl41kOxL0dgl27XpcfMRL8dhoY3tfSRsG 6n27GyxoO3jbuWtBIzo= -----END CERTIFICATE-----Generated at Sat Dec 20 18:04:25 2025 by rpki-client