This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/iS8o9gZ8sosmgS8NovsHX2qnX8A.roa File: iS8o9gZ8sosmgS8NovsHX2qnX8A.roa (raw, json) Hash identifier: buFGoijWXB78YbjD7iYM92IIlbZ0CWNgPdVHPSsAz3U= Subject key identifier: 89:2F:28:F6:06:7C:B2:8B:26:81:2F:0D:A2:FB:07:5F:6A:A7:5F:C0 Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5 Certificate serial: 019B6119F57D3619F2E75FE01531C4807F82 Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/iS8o9gZ8sosmgS8NovsHX2qnX8A.roa Signing time: Sat 27 Dec 2025 18:37:29 +0000 ROA not before: Sat 27 Dec 2025 18:37:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202053 IP address blocks: 5.22.208.0/22 maxlen: 22 5.22.212.0/22 maxlen: 22 5.22.216.0/22 maxlen: 22 5.22.220.0/22 maxlen: 22 80.69.172.0/22 maxlen: 22 81.27.96.0/22 maxlen: 22 81.27.100.0/22 maxlen: 22 81.27.104.0/23 maxlen: 23 81.27.106.0/23 maxlen: 23 81.27.108.0/22 maxlen: 22 83.136.248.0/21 maxlen: 21 85.9.200.0/21 maxlen: 21 85.9.208.0/21 maxlen: 21 85.9.216.0/22 maxlen: 22 85.9.220.0/22 maxlen: 22 94.237.0.0/24 maxlen: 24 94.237.1.0/24 maxlen: 24 94.237.2.0/23 maxlen: 23 94.237.4.0/22 maxlen: 22 94.237.8.0/21 maxlen: 21 94.237.16.0/21 maxlen: 21 94.237.24.0/21 maxlen: 21 94.237.32.0/21 maxlen: 21 94.237.40.0/21 maxlen: 21 94.237.48.0/20 maxlen: 20 94.237.64.0/20 maxlen: 20 94.237.80.0/20 maxlen: 20 94.237.96.0/21 maxlen: 21 94.237.104.0/22 maxlen: 22 94.237.108.0/22 maxlen: 22 94.237.112.0/21 maxlen: 21 94.237.120.0/22 maxlen: 22 94.237.124.0/23 maxlen: 23 94.237.126.0/24 maxlen: 24 95.111.192.0/21 maxlen: 21 95.111.200.0/22 maxlen: 22 95.111.204.0/22 maxlen: 22 95.111.208.0/22 maxlen: 22 95.111.216.0/21 maxlen: 21 185.20.136.0/22 maxlen: 22 185.26.48.0/22 maxlen: 22 185.70.196.0/22 maxlen: 22 194.62.96.0/22 maxlen: 22 213.163.192.0/20 maxlen: 20 2a04:3540::/32 maxlen: 32 2a04:3541::/32 maxlen: 32 2a04:3541:8000::/34 maxlen: 34 2a04:3542::/32 maxlen: 32 2a04:3542:8000::/34 maxlen: 34 2a04:3543::/32 maxlen: 32 2a04:3544::/32 maxlen: 32 2a04:3544:8000::/34 maxlen: 34 2a04:3545::/32 maxlen: 32 2a04:3545:4000::/34 maxlen: 34 2a04:3545:8000::/34 maxlen: 34 2a04:3546::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:19:f5:7d:36:19:f2:e7:5f:e0:15:31:c4:80:7f:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5 Validity Not Before: Dec 27 18:37:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=892f28f6067cb28b26812f0da2fb075f6aa75fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9f:1b:39:4c:2a:ed:72:6f:4d:a6:e2:a9:2d: b5:e4:40:bb:45:1b:b9:41:3e:f6:da:df:e3:fa:43: 47:95:ae:c9:7e:c5:d6:5f:f6:b0:b5:b1:41:28:80: 12:bd:60:ba:fe:6c:38:4e:24:52:d6:84:dd:45:ce: 1a:40:2a:2b:9d:0a:ba:ab:29:f3:65:8e:ab:d0:ef: 8d:88:11:a7:0e:5f:81:80:03:11:b4:73:3c:27:dc: 7a:5c:f3:f7:92:99:13:40:39:92:7b:66:b8:35:c0: dc:58:cb:65:da:19:6a:f5:1f:a5:ba:65:3d:31:38: 41:c7:09:88:4b:85:87:7a:2f:e5:24:9a:ab:b0:20: 89:04:0d:2b:b3:6c:66:e5:58:6b:1f:4b:de:89:c6: 28:f7:51:4d:46:c4:89:65:c6:d3:7d:02:92:d3:31: 33:ea:ca:95:cd:fc:34:d5:78:41:b0:c3:a9:a6:ec: 6e:0b:f5:f5:cf:b0:00:fa:01:b1:ca:c6:ff:71:57: ff:9d:f1:63:9f:81:60:85:94:67:44:69:5c:e0:c1: 1c:68:a9:ed:34:dd:74:5b:a8:1e:02:c8:7b:97:65: 6c:a3:d1:c3:7d:65:6a:8c:5e:b8:8c:52:77:55:f5: e9:3c:b2:6c:bc:31:0a:6c:78:fb:b8:bb:e2:59:e7: 32:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2F:28:F6:06:7C:B2:8B:26:81:2F:0D:A2:FB:07:5F:6A:A7:5F:C0 X509v3 Authority Key Identifier: keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/iS8o9gZ8sosmgS8NovsHX2qnX8A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.22.208.0/20 80.69.172.0/22 81.27.96.0/20 83.136.248.0/21 85.9.200.0-85.9.223.255 94.237.0.0-94.237.126.255 95.111.192.0-95.111.211.255 95.111.216.0/21 185.20.136.0/22 185.26.48.0/22 185.70.196.0/22 194.62.96.0/22 213.163.192.0/20 IPv6: 2a04:3540::-2a04:3546:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 56:78:0b:09:5b:15:3a:67:84:30:5a:58:15:32:95:ff:17:62: bb:0d:6d:bd:eb:6a:0b:47:18:81:f9:ff:84:43:1d:1d:d1:0b: 24:c9:e0:6f:5f:0b:fa:09:18:d5:2d:60:55:b6:4b:fb:55:4a: 3c:f8:6b:89:7b:0c:65:ff:a0:ef:79:e3:7b:08:84:6c:2b:d2: 05:04:e7:43:fe:da:5d:c2:a8:6e:b1:e2:a2:74:9d:fa:d0:61: c0:84:61:45:5d:22:8e:ef:ff:ec:23:74:75:7d:0a:a7:42:75: 61:10:59:da:7d:b9:2a:38:08:3f:76:2b:2f:2f:b5:0e:95:1f: b2:05:f3:93:73:8a:9f:01:64:ea:b8:e6:8a:0f:45:18:67:28: 0a:27:e8:4c:5a:21:6f:85:15:ae:e4:16:7e:0c:3f:90:a8:ad: f5:33:fa:aa:30:99:11:06:d0:b5:16:30:58:f9:ea:63:b9:79: f3:79:8a:0e:4b:47:09:47:ff:e5:27:81:fe:88:e8:a3:1e:c8: a4:b9:6e:41:99:e7:d4:2a:45:5b:07:c6:ba:54:86:c6:6d:b9: b4:c7:ea:1f:ba:86:e1:14:f2:07:d8:b1:a7:e4:80:39:ff:e2: ed:11:e8:b1:da:07:e7:f0:08:92:c6:68:cd:14:e9:b8:92:ed: c7:8b:f6:e9 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZthGfV9Nhny51/gFTHEgH+CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OWExZjJkYmY3YjdhODRhZTU3YjhkNjc0MjZiN2U0ZTQy MGZhYjUwHhcNMjUxMjI3MTgzNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTJmMjhmNjA2N2NiMjhiMjY4MTJmMGRhMmZiMDc1ZjZhYTc1ZmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo58bOUwq7XJvTabiqS215EC7RRu5 QT722t/j+kNHla7JfsXWX/awtbFBKIASvWC6/mw4TiRS1oTdRc4aQCornQq6qynz ZY6r0O+NiBGnDl+BgAMRtHM8J9x6XPP3kpkTQDmSe2a4NcDcWMtl2hlq9R+lumU9 MThBxwmIS4WHei/lJJqrsCCJBA0rs2xm5VhrH0veicYo91FNRsSJZcbTfQKS0zEz 6sqVzfw01XhBsMOppuxuC/X1z7AA+gGxysb/cVf/nfFjn4FghZRnRGlc4MEcaKnt NN10W6geAsh7l2Vso9HDfWVqjF64jFJ3VfXpPLJsvDEKbHj7uLviWecydQIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFIkvKPYGfLKLJoEvDaL7B19qp1/AMB8GA1UdIwQY MBaAFAmaHy2/e3qErle41nQmt+TkIPq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kNDJhYmItMzM0Mi00ODg3LWFmNDAt OWNkNjhmMjIxZTIxLzEvaVM4bzlnWjhzb3NtZ1M4Tm92c0hYMnFuWDhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kNDJhYmItMzM0Mi00ODg3LWFmNDAtOWNkNjhmMjIxZTIx LzEvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTBrBAIAATBlAwQEBRbQ AwQCUEWsAwQEURtgAwQDU4j4MAwDBANVCcgDBAVVCcAwCwMDAF7tAwQAXu1+MAwD BAZfb8ADBAJfb9ADBANfb9gDBAK5FIgDBAK5GjADBAK5RsQDBALCPmADBATVo8Aw FgQCAAIwEDAOAwUGKgQ1QAMFACoENUYwDQYJKoZIhvcNAQELBQADggEBAFZ4Cwlb FTpnhDBaWBUylf8XYrsNbb3ragtHGIH5/4RDHR3RCyTJ4G9fC/oJGNUtYFW2S/tV Sjz4a4l7DGX/oO9543sIhGwr0gUE50P+2l3CqG6x4qJ0nfrQYcCEYUVdIo7v/+wj dHV9CqdCdWEQWdp9uSo4CD92Ky8vtQ6VH7IF85Nzip8BZOq45ooPRRhnKAon6Exa IW+FFa7kFn4MP5CorfUz+qowmREG0LUWMFj56mO5efN5ig5LRwlH/+Ungf6I6KMe yKS5bkGZ59QqRVsHxrpUhsZtubTH6h+6huEU8gfYsafkgDn/4u0R6LHaB+fwCJLG aM0U6biS7ceL9uk= -----END CERTIFICATE-----Generated at Sun Dec 28 07:27:22 2025 by rpki-client