This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/DLcmVggPxlYicd1UJ74OUmjpAhM.roa File: DLcmVggPxlYicd1UJ74OUmjpAhM.roa (raw, json) Hash identifier: Znonzij//XWf2yzkuH8Mh75Es0bpLodvR5ACxP5Yyz8= Subject key identifier: 0C:B7:26:56:08:0F:C6:56:22:71:DD:54:27:BE:0E:52:68:E9:02:13 Certificate issuer: /CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a Certificate serial: 019AEEE92B1AC5178655F695423662C41570 Authority key identifier: 5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/DLcmVggPxlYicd1UJ74OUmjpAhM.roa Signing time: Fri 05 Dec 2025 14:27:29 +0000 ROA not before: Fri 05 Dec 2025 14:27:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43242 IP address blocks: 78.135.0.0/22 maxlen: 22 78.135.4.0/22 maxlen: 22 78.135.8.0/21 maxlen: 21 78.135.16.0/20 maxlen: 20 78.135.32.0/19 maxlen: 19 78.135.32.0/22 maxlen: 22 78.135.36.0/22 maxlen: 22 78.135.40.0/22 maxlen: 22 78.135.44.0/22 maxlen: 22 78.135.48.0/22 maxlen: 22 78.135.52.0/22 maxlen: 22 78.135.56.0/22 maxlen: 22 78.135.60.0/22 maxlen: 22 185.171.92.0/22 maxlen: 22 185.171.92.0/24 maxlen: 24 185.171.94.0/24 maxlen: 24 2a0a:1900::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:e9:2b:1a:c5:17:86:55:f6:95:42:36:62:c4:15:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a Validity Not Before: Dec 5 14:27:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0cb72656080fc6562271dd5427be0e5268e90213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:16:2a:7c:3b:b6:9f:22:2a:4d:fd:0f:d2:66: 3e:6e:65:e3:fa:e5:34:a0:4d:94:3f:43:a8:ed:a3: 1b:d3:0c:78:75:0a:0c:91:fd:c2:e7:4c:18:20:a6: c9:82:44:ed:e1:ce:20:e0:88:c2:6d:0a:ef:a7:e0: fe:7a:c7:91:55:2b:28:86:e0:f4:f4:bb:a4:d1:53: 5e:9d:79:33:21:07:60:55:51:6e:3d:9c:0d:08:93: b6:14:80:0b:88:66:bc:17:79:56:17:38:a4:de:ac: d6:18:31:d5:7b:4c:5b:19:77:18:eb:1a:ce:1a:24: c5:6d:ad:33:39:90:21:a4:53:3a:a5:22:e8:8c:79: 58:05:99:91:a6:e1:29:e7:a8:f5:0d:9a:ea:2c:69: a5:27:79:36:aa:a1:ce:97:86:50:5a:46:5f:4c:a9: 44:7c:e0:b0:25:ce:f7:c1:79:45:ab:d1:7f:af:af: c5:e0:db:f9:bb:bd:98:49:c0:6d:f2:e6:d1:0f:f4: 81:d3:54:c8:2a:49:c0:f7:56:a2:ad:c4:92:3d:47: 01:8f:2e:69:ed:84:7a:08:b0:75:04:eb:a9:04:d3: f8:bb:8e:ca:05:9f:fc:7d:41:fc:05:11:49:9c:f6: ac:6c:00:d9:5b:42:3e:10:2b:ab:b0:fc:77:73:90: d8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B7:26:56:08:0F:C6:56:22:71:DD:54:27:BE:0E:52:68:E9:02:13 X509v3 Authority Key Identifier: keyid:5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/DLcmVggPxlYicd1UJ74OUmjpAhM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.135.0.0/18 185.171.92.0/22 IPv6: 2a0a:1900::/29 Signature Algorithm: sha256WithRSAEncryption 38:c5:92:c9:76:31:70:3a:46:3a:bc:2a:58:29:a1:06:5c:af: 1e:09:65:2c:cb:db:59:35:48:43:5c:22:02:3a:76:bb:e8:dd: fb:75:94:5f:90:e7:9d:d0:6b:55:6c:6f:fd:ff:e2:a8:95:e1: 24:84:6a:5a:69:c3:d7:f0:f1:c5:a5:6b:4e:b9:28:01:8a:f8: 5e:53:17:be:bb:5e:a6:17:92:c5:e4:0d:53:dc:6b:b0:af:86: ef:bf:7d:8a:fe:2e:a2:d2:a6:d8:81:27:07:8f:40:4c:88:79: 95:d7:67:69:07:21:aa:98:3d:5d:7a:3a:5e:88:a2:3b:03:91: 02:50:e6:22:92:f3:75:9a:e6:85:dc:b4:a7:11:83:fc:5b:18: 17:2d:d0:3e:ad:78:26:e6:87:c7:a2:c0:48:0f:27:88:50:89: a0:28:93:af:b2:7e:a3:54:04:77:78:00:8a:6d:67:a8:f6:06: 0d:a0:80:1a:80:68:1e:92:0a:f8:d6:68:1c:36:5e:c1:96:88: 18:b7:c8:dc:82:6d:aa:91:73:49:68:3c:b4:70:38:a6:7f:5e: 14:13:55:92:9c:cf:e2:f5:cb:32:0e:f3:1b:39:48:bc:68:43: d0:f7:8d:14:aa:7b:aa:c9:d6:fe:1f:02:9e:77:ba:1d:dd:75: 29:db:96:7f -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZru6SsaxReGVfaVQjZixBVwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTRjNGJjNGQyNTYzZTI1MmViZmNjMGZiYzJhYzE5OWNj ZTYwOGEwHhcNMjUxMjA1MTQyNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2I3MjY1NjA4MGZjNjU2MjI3MWRkNTQyN2JlMGU1MjY4ZTkwMjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihYqfDu2nyIqTf0P0mY+bmXj+uU0 oE2UP0Oo7aMb0wx4dQoMkf3C50wYIKbJgkTt4c4g4IjCbQrvp+D+eseRVSsohuD0 9Luk0VNenXkzIQdgVVFuPZwNCJO2FIALiGa8F3lWFzik3qzWGDHVe0xbGXcY6xrO GiTFba0zOZAhpFM6pSLojHlYBZmRpuEp56j1DZrqLGmlJ3k2qqHOl4ZQWkZfTKlE fOCwJc73wXlFq9F/r6/F4Nv5u72YScBt8ubRD/SB01TIKknA91aircSSPUcBjy5p 7YR6CLB1BOupBNP4u47KBZ/8fUH8BRFJnPasbADZW0I+ECursPx3c5DYlQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAy3JlYID8ZWInHdVCe+DlJo6QITMB8GA1UdIwQY MBaAFFqUxLxNJWPiUuv8wPvCrBmczmCKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BURXZFMGxZLUpTNl96QS04S3NHWnpPWUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9jNGNjYzMtNjVkNi00ODVkLTliZTAt YTdhNWY0NzhkZDcyLzEvRExjbVZnZ1B4bFlpY2QxVUo3NE9VbWpwQWhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9jNGNjYzMtNjVkNi00ODVkLTliZTAtYTdhNWY0NzhkZDcy LzEvV3BURXZFMGxZLUpTNl96QS04S3NHWnpPWUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQGTocAAwQC uatcMA0EAgACMAcDBQMqChkAMA0GCSqGSIb3DQEBCwUAA4IBAQA4xZLJdjFwOkY6 vCpYKaEGXK8eCWUsy9tZNUhDXCICOna76N37dZRfkOed0GtVbG/9/+KoleEkhGpa acPX8PHFpWtOuSgBivheUxe+u16mF5LF5A1T3Guwr4bvv32K/i6i0qbYgScHj0BM iHmV12dpByGqmD1dejpeiKI7A5ECUOYikvN1muaF3LSnEYP8WxgXLdA+rXgm5ofH osBIDyeIUImgKJOvsn6jVAR3eACKbWeo9gYNoIAagGgekgr41mgcNl7BlogYt8jc gm2qkXNJaDy0cDimf14UE1WSnM/i9csyDvMbOUi8aEPQ940Uqnuqydb+HwKed7od 3XUp25Z/ -----END CERTIFICATE-----Generated at Sat Dec 6 21:11:14 2025 by rpki-client