This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/5Nvni1-D_t9292_BqmoyjYIbpMw.roa File: 5Nvni1-D_t9292_BqmoyjYIbpMw.roa (raw, json) Hash identifier: TLQzj78uUDb6pP5ISG5g+K+kbONmZOzZ/8l2OVk7XUU= Subject key identifier: E4:DB:E7:8B:5F:83:FE:DF:76:F7:6F:C1:AA:6A:32:8D:82:1B:A4:CC Certificate issuer: /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9 Certificate serial: 019AC4585A032A7C4468E878191BA5148CC8 Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/5Nvni1-D_t9292_BqmoyjYIbpMw.roa Signing time: Thu 27 Nov 2025 08:05:15 +0000 ROA not before: Thu 27 Nov 2025 08:05:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15704 IP address blocks: 85.85.104.0/21 maxlen: 21 85.85.112.0/20 maxlen: 20 85.85.160.0/20 maxlen: 21 85.85.176.0/20 maxlen: 21 85.85.200.0/21 maxlen: 21 85.85.224.0/20 maxlen: 20 85.86.24.0/21 maxlen: 21 85.86.32.0/21 maxlen: 21 85.86.56.0/21 maxlen: 21 85.86.64.0/21 maxlen: 21 85.86.176.0/21 maxlen: 24 85.86.184.0/21 maxlen: 24 85.86.208.0/21 maxlen: 21 85.86.216.0/22 maxlen: 22 85.86.232.0/21 maxlen: 21 85.86.240.0/21 maxlen: 22 85.86.248.0/21 maxlen: 24 85.87.0.0/16 maxlen: 24 85.87.8.0/21 maxlen: 22 85.87.160.0/21 maxlen: 22 85.87.176.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c4:58:5a:03:2a:7c:44:68:e8:78:19:1b:a5:14:8c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9 Validity Not Before: Nov 27 08:05:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e4dbe78b5f83fedf76f76fc1aa6a328d821ba4cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b1:8d:24:b3:da:df:05:af:ca:8f:68:86:d1: be:c8:bc:ff:5c:4e:3c:25:57:03:f7:85:91:8f:8f: f7:33:5d:86:bb:9a:98:1d:27:e4:51:1f:9d:16:13: 31:a7:a0:55:2b:2d:1c:f8:08:ef:a4:22:b8:24:7c: 8d:4a:c9:4a:c0:a1:3c:ad:6f:5d:f7:c5:b0:85:2c: 81:03:e4:d3:35:ed:10:85:35:23:5f:92:04:12:f9: 21:a3:ac:18:2a:07:9c:d0:29:a5:87:f8:fc:54:f2: ac:e7:69:16:7f:9f:2d:d1:c4:5c:b3:e9:11:2a:d9: 45:c9:b3:26:50:79:f9:f8:72:49:33:92:3e:fa:1b: 81:26:2f:bf:fc:16:4c:95:53:59:47:87:bd:77:8d: 90:77:0a:3a:3f:cd:6c:3e:47:4d:7e:6e:57:fc:69: 74:29:72:05:b1:88:f2:4f:5d:88:2e:61:f9:28:9a: 29:54:c5:3d:66:76:cb:f6:db:b5:16:ab:e4:d1:a4: b9:29:70:6f:45:89:00:aa:75:67:35:09:26:cd:60: b4:e4:b1:4b:20:5a:94:27:44:70:9a:46:18:e0:e7: 0b:28:fd:96:08:bf:5d:d0:cf:f1:74:7f:ca:c6:9e: 94:50:c5:07:57:ca:7f:65:bb:cf:67:18:e7:b5:7f: a4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DB:E7:8B:5F:83:FE:DF:76:F7:6F:C1:AA:6A:32:8D:82:1B:A4:CC X509v3 Authority Key Identifier: keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/5Nvni1-D_t9292_BqmoyjYIbpMw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.85.104.0-85.85.127.255 85.85.160.0/19 85.85.200.0/21 85.85.224.0/20 85.86.24.0-85.86.39.255 85.86.56.0-85.86.71.255 85.86.176.0/20 85.86.208.0-85.86.219.255 85.86.232.0-85.87.255.255 Signature Algorithm: sha256WithRSAEncryption 95:d7:ad:d0:3e:d7:66:da:e7:bd:ce:31:4e:e0:78:ef:ba:5d: 5a:71:4b:4d:aa:a8:65:0f:86:c8:cb:d3:66:1f:fe:5a:63:c7: f7:7c:3a:44:58:f6:43:16:e2:19:8c:a0:d5:4f:29:67:18:ee: 65:4d:4e:3c:26:15:89:a2:55:d0:72:85:08:69:af:ec:a2:86: c4:2a:99:9b:17:d9:95:ca:d5:d0:32:95:a0:31:52:d4:89:c7: 25:f2:77:43:52:02:c0:a2:fa:37:a1:01:ff:6d:01:6b:81:cf: f7:77:b8:85:cd:3c:9f:02:e1:b7:25:e3:32:13:7b:38:ae:2b: a1:4d:3c:ce:4d:19:a8:24:86:e5:52:5e:c5:36:91:7d:38:b6: 84:c1:26:7b:0e:63:2a:38:3d:cd:7f:a2:1a:80:2c:80:c3:0f: 97:df:83:66:e0:d6:de:99:1e:ce:82:13:90:c0:81:76:63:93: 6f:40:c5:d1:88:56:9e:9e:1e:b8:64:ff:64:79:d8:0a:de:07: f1:a1:8a:0c:32:f6:e6:2f:b8:1b:de:df:56:6f:f7:00:19:80: f5:91:58:a6:47:40:a8:01:83:88:99:80:8c:c2:4d:e8:4e:8a: fb:4f:11:41:11:99:22:1a:4c:c9:50:b4:51:ec:86:d9:aa:97: 53:1c:e5:83 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgISAZrEWFoDKnxEaOh4GRulFIzIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZTM5YjQxMDc0YzdkNmFkYzhlZTI3NGUyMzlmN2I4ZWIz NTg1ZTkwHhcNMjUxMTI3MDgwNTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGRiZTc4YjVmODNmZWRmNzZmNzZmYzFhYTZhMzI4ZDgyMWJhNGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrGNJLPa3wWvyo9ohtG+yLz/XE48 JVcD94WRj4/3M12Gu5qYHSfkUR+dFhMxp6BVKy0c+AjvpCK4JHyNSslKwKE8rW9d 98WwhSyBA+TTNe0QhTUjX5IEEvkho6wYKgec0Cmlh/j8VPKs52kWf58t0cRcs+kR KtlFybMmUHn5+HJJM5I++huBJi+//BZMlVNZR4e9d42Qdwo6P81sPkdNfm5X/Gl0 KXIFsYjyT12ILmH5KJopVMU9ZnbL9tu1Fqvk0aS5KXBvRYkAqnVnNQkmzWC05LFL IFqUJ0RwmkYY4OcLKP2WCL9d0M/xdH/Kxp6UUMUHV8p/ZbvPZxjntX+kBwIDAQAB o4ICYDCCAlwwHQYDVR0OBBYEFOTb54tfg/7fdvdvwapqMo2CG6TMMB8GA1UdIwQY MBaAFA/jm0EHTH1q3I7idOI597jrNYXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRC1PYlFRZE1mV3JjanVKMDRqbjN1T3MxaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xM2VhMWYtMGJjMS00NTdjLThhYjUt MDRlODEyZDQ4ZTcyLzEvNU52bmkxLURfdDkyOTJfQnFtb3lqWUlicE13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8xM2VhMWYtMGJjMS00NTdjLThhYjUtMDRlODEyZDQ4ZTcy LzEvRC1PYlFRZE1mV3JjanVKMDRqbjN1T3MxaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/BGcwZTBjBAIAATBdMAwDBANVVWgD BAdVVQADBAVVVaADBANVVcgDBARVVeAwDAMEA1VWGAMEA1VWIDAMAwQDVVY4AwQD VVZAAwQEVVawMAwDBARVVtADBAJVVtgwCwMEA1VW6AMDA1VQMA0GCSqGSIb3DQEB CwUAA4IBAQCV163QPtdm2ue9zjFO4Hjvul1acUtNqqhlD4bIy9NmH/5aY8f3fDpE WPZDFuIZjKDVTylnGO5lTU48JhWJolXQcoUIaa/soobEKpmbF9mVytXQMpWgMVLU iccl8ndDUgLAovo3oQH/bQFrgc/3d7iFzTyfAuG3JeMyE3s4riuhTTzOTRmoJIbl Ul7FNpF9OLaEwSZ7DmMqOD3Nf6IagCyAww+X34Nm4NbemR7OghOQwIF2Y5NvQMXR iFaenh64ZP9kedgK3gfxoYoMMvbmL7gb3t9Wb/cAGYD1kVimR0CoAYOImYCMwk3o Tor7TxFBEZkiGkzJULRR7IbZqpdTHOWD -----END CERTIFICATE-----Generated at Sat Dec 6 18:09:38 2025 by rpki-client