This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/ULilwJwlks2sPgTVgOcQHLDhOyI.roa File: ULilwJwlks2sPgTVgOcQHLDhOyI.roa (raw, json) Hash identifier: gfxGsdUh7muf8faV+aGa5Rl6NvW7CdBeP3HuizIzPoM= Subject key identifier: 50:B8:A5:C0:9C:25:92:CD:AC:3E:04:D5:80:E7:10:1C:B0:E1:3B:22 Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5 Certificate serial: 019A91F6BC252C42355CAE82A7C7BC5EB13E Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/ULilwJwlks2sPgTVgOcQHLDhOyI.roa Signing time: Mon 17 Nov 2025 13:17:37 +0000 ROA not before: Mon 17 Nov 2025 13:17:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202053 IP address blocks: 5.22.208.0/22 maxlen: 22 5.22.212.0/22 maxlen: 22 5.22.216.0/22 maxlen: 22 5.22.220.0/22 maxlen: 22 80.69.172.0/22 maxlen: 22 81.27.96.0/20 maxlen: 20 81.27.96.0/22 maxlen: 22 81.27.100.0/22 maxlen: 22 81.27.104.0/22 maxlen: 22 81.27.108.0/22 maxlen: 22 83.136.248.0/21 maxlen: 21 85.9.200.0/21 maxlen: 21 85.9.208.0/21 maxlen: 21 85.9.216.0/22 maxlen: 22 85.9.220.0/22 maxlen: 22 94.237.0.0/24 maxlen: 24 94.237.1.0/24 maxlen: 24 94.237.2.0/23 maxlen: 23 94.237.4.0/22 maxlen: 22 94.237.8.0/21 maxlen: 21 94.237.16.0/21 maxlen: 21 94.237.24.0/21 maxlen: 21 94.237.32.0/21 maxlen: 21 94.237.40.0/21 maxlen: 21 94.237.48.0/20 maxlen: 20 94.237.64.0/20 maxlen: 20 94.237.80.0/20 maxlen: 20 94.237.96.0/21 maxlen: 21 94.237.104.0/22 maxlen: 22 94.237.108.0/22 maxlen: 22 94.237.112.0/21 maxlen: 21 94.237.120.0/22 maxlen: 22 94.237.124.0/23 maxlen: 23 94.237.126.0/24 maxlen: 24 95.111.192.0/21 maxlen: 21 95.111.200.0/22 maxlen: 22 95.111.204.0/22 maxlen: 22 95.111.208.0/22 maxlen: 22 95.111.216.0/21 maxlen: 21 185.20.136.0/22 maxlen: 22 185.26.48.0/22 maxlen: 22 185.70.196.0/22 maxlen: 22 194.62.96.0/22 maxlen: 22 213.163.192.0/20 maxlen: 20 2a04:3540::/32 maxlen: 32 2a04:3541::/32 maxlen: 32 2a04:3541:8000::/34 maxlen: 34 2a04:3542::/32 maxlen: 32 2a04:3542:8000::/34 maxlen: 34 2a04:3543::/32 maxlen: 32 2a04:3544::/32 maxlen: 32 2a04:3544:8000::/34 maxlen: 34 2a04:3545::/32 maxlen: 32 2a04:3545:4000::/34 maxlen: 34 2a04:3545:8000::/34 maxlen: 34 2a04:3546::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:f6:bc:25:2c:42:35:5c:ae:82:a7:c7:bc:5e:b1:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5 Validity Not Before: Nov 17 13:17:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=50b8a5c09c2592cdac3e04d580e7101cb0e13b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3a:94:e3:e3:23:b1:da:bf:4f:59:7e:f4:7e: 9a:3d:2c:42:c6:96:29:c0:af:2e:43:ba:16:31:bb: 13:13:91:95:05:6f:5c:07:c0:0e:3a:d0:f5:a9:fd: c3:08:2f:d4:6f:54:2a:cc:f0:e3:e4:ab:ff:68:aa: 6a:fe:b3:af:82:69:73:2a:0e:fc:a2:0e:ce:00:41: a0:09:25:3e:8f:dc:e0:c2:2e:73:c4:20:ba:42:06: a4:76:6e:1a:0f:eb:bf:46:6b:8e:5e:fe:72:0b:ac: d7:3e:31:d6:1d:07:3c:46:17:ff:17:30:70:08:c7: fe:b7:9b:cd:60:82:8e:fa:cb:96:ce:b8:52:84:cd: 78:82:97:23:7d:d1:3c:20:60:eb:b8:73:3c:83:e5: 09:8a:a6:7b:56:16:71:3d:d2:c2:1c:7e:b8:c3:51: 43:b7:9c:85:e2:4e:d3:15:d4:11:30:0c:ae:cb:e3: 27:1b:3c:28:81:52:d1:f9:53:9d:30:8e:4a:a7:c2: 9f:e8:74:e5:14:37:14:2f:0f:53:dd:01:c8:f0:06: dc:95:71:35:bd:49:e9:1d:c3:84:15:98:0a:9c:72: 1e:28:3f:1f:d7:27:5e:08:42:68:6f:8a:b6:5f:a3: 40:62:ee:2e:d2:b2:80:4a:09:c6:b7:06:27:68:fc: 61:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B8:A5:C0:9C:25:92:CD:AC:3E:04:D5:80:E7:10:1C:B0:E1:3B:22 X509v3 Authority Key Identifier: keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/ULilwJwlks2sPgTVgOcQHLDhOyI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.22.208.0/20 80.69.172.0/22 81.27.96.0/20 83.136.248.0/21 85.9.200.0-85.9.223.255 94.237.0.0-94.237.126.255 95.111.192.0-95.111.211.255 95.111.216.0/21 185.20.136.0/22 185.26.48.0/22 185.70.196.0/22 194.62.96.0/22 213.163.192.0/20 IPv6: 2a04:3540::-2a04:3546:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 8c:7e:dd:8d:92:0d:0a:99:34:71:89:36:53:c1:0b:46:3e:f2: c6:74:4c:8b:cc:da:d1:6e:f0:00:c9:f1:ad:d8:60:76:4a:fd: 78:e0:cb:a9:fc:30:39:63:68:a9:d4:49:29:12:38:e9:e2:d4: eb:b1:51:31:c8:bb:d9:a5:4d:06:0a:77:40:61:a4:9e:da:0c: 7e:bf:f7:cd:1c:0d:35:a3:85:21:34:bc:96:11:9e:4d:17:cd: a3:52:7b:85:2e:52:03:fa:7c:23:41:57:8f:2b:1a:46:ff:0b: e2:0e:d5:06:7a:ca:ba:d8:8a:1a:da:ec:a4:e1:eb:a5:98:43: 3f:20:6e:b3:31:c2:1e:fe:46:8d:cb:9c:eb:43:7b:70:e3:2f: 42:a3:f0:1a:9c:3a:40:90:98:75:f5:ed:51:b5:1f:53:db:85: 78:11:6f:65:b0:35:e9:43:cd:cb:be:26:b4:89:f6:bf:c3:46: 5d:b1:f5:f8:09:c5:15:5a:0c:ea:4e:2a:16:c5:46:5b:ae:5e: be:e7:9d:50:83:59:39:65:4a:fa:5d:7d:a3:00:55:91:df:10: 0e:16:a1:09:0a:10:d1:be:1c:14:b4:30:28:28:2d:3d:6f:12: af:1d:39:32:43:0b:11:95:2e:65:4d:bf:71:1e:d6:f0:e2:b1: 72:ee:00:53 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZqR9rwlLEI1XK6Cp8e8XrE+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OWExZjJkYmY3YjdhODRhZTU3YjhkNjc0MjZiN2U0ZTQy MGZhYjUwHhcNMjUxMTE3MTMxNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGI4YTVjMDljMjU5MmNkYWMzZTA0ZDU4MGU3MTAxY2IwZTEzYjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjqU4+Mjsdq/T1l+9H6aPSxCxpYp wK8uQ7oWMbsTE5GVBW9cB8AOOtD1qf3DCC/Ub1QqzPDj5Kv/aKpq/rOvgmlzKg78 og7OAEGgCSU+j9zgwi5zxCC6Qgakdm4aD+u/RmuOXv5yC6zXPjHWHQc8Rhf/FzBw CMf+t5vNYIKO+suWzrhShM14gpcjfdE8IGDruHM8g+UJiqZ7VhZxPdLCHH64w1FD t5yF4k7TFdQRMAyuy+MnGzwogVLR+VOdMI5Kp8Kf6HTlFDcULw9T3QHI8AbclXE1 vUnpHcOEFZgKnHIeKD8f1ydeCEJob4q2X6NAYu4u0rKASgnGtwYnaPxhmwIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFFC4pcCcJZLNrD4E1YDnEByw4TsiMB8GA1UdIwQY MBaAFAmaHy2/e3qErle41nQmt+TkIPq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kNDJhYmItMzM0Mi00ODg3LWFmNDAt OWNkNjhmMjIxZTIxLzEvVUxpbHdKd2xrczJzUGdUVmdPY1FITERoT3lJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kNDJhYmItMzM0Mi00ODg3LWFmNDAtOWNkNjhmMjIxZTIx LzEvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTBrBAIAATBlAwQEBRbQ AwQCUEWsAwQEURtgAwQDU4j4MAwDBANVCcgDBAVVCcAwCwMDAF7tAwQAXu1+MAwD BAZfb8ADBAJfb9ADBANfb9gDBAK5FIgDBAK5GjADBAK5RsQDBALCPmADBATVo8Aw FgQCAAIwEDAOAwUGKgQ1QAMFACoENUYwDQYJKoZIhvcNAQELBQADggEBAIx+3Y2S DQqZNHGJNlPBC0Y+8sZ0TIvM2tFu8ADJ8a3YYHZK/Xjgy6n8MDljaKnUSSkSOOni 1OuxUTHIu9mlTQYKd0BhpJ7aDH6/980cDTWjhSE0vJYRnk0XzaNSe4UuUgP6fCNB V48rGkb/C+IO1QZ6yrrYihra7KTh66WYQz8gbrMxwh7+Ro3LnOtDe3DjL0Kj8Bqc OkCQmHX17VG1H1PbhXgRb2WwNelDzcu+JrSJ9r/DRl2x9fgJxRVaDOpOKhbFRluu Xr7nnVCDWTllSvpdfaMAVZHfEA4WoQkKENG+HBS0MCgoLT1vEq8dOTJDCxGVLmVN v3Ee1vDisXLuAFM= -----END CERTIFICATE-----Generated at Fri Dec 19 11:56:54 2025 by rpki-client