This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/h5_prNjcgRyXJELM8DURZLP5EFU.roa File: h5_prNjcgRyXJELM8DURZLP5EFU.roa (raw, json) Hash identifier: Z92j/9sBYKdyWUm0MRd6IKVfVn4W1nRxKsWy96cIZLs= Subject key identifier: 87:9F:E9:AC:D8:DC:81:1C:97:24:42:CC:F0:35:11:64:B3:F9:10:55 Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a Certificate serial: 019AFD775DC65DB04BA704AF40E78E29B94A Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/h5_prNjcgRyXJELM8DURZLP5EFU.roa Signing time: Mon 08 Dec 2025 10:17:29 +0000 ROA not before: Mon 08 Dec 2025 10:17:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48716 IP address blocks: 46.247.40.0/23 maxlen: 24 77.240.38.0/23 maxlen: 24 77.243.80.0/23 maxlen: 24 78.40.108.0/23 maxlen: 24 82.115.40.0/22 maxlen: 24 85.202.194.0/23 maxlen: 24 89.219.32.0/22 maxlen: 24 91.147.92.0/22 maxlen: 22 91.147.92.0/24 maxlen: 24 91.147.93.0/24 maxlen: 24 91.147.94.0/24 maxlen: 24 91.147.95.0/24 maxlen: 24 91.147.104.0/22 maxlen: 24 91.201.214.0/23 maxlen: 24 91.215.136.0/22 maxlen: 24 91.215.136.0/24 maxlen: 24 91.215.137.0/24 maxlen: 32 91.215.139.0/24 maxlen: 32 94.247.128.0/21 maxlen: 24 109.233.108.0/22 maxlen: 32 185.4.180.0/22 maxlen: 24 185.22.64.0/22 maxlen: 24 185.35.222.0/23 maxlen: 24 185.102.72.0/22 maxlen: 24 185.146.0.0/22 maxlen: 24 194.32.140.0/22 maxlen: 24 194.39.64.0/22 maxlen: 24 194.39.64.0/23 maxlen: 24 194.39.66.0/24 maxlen: 24 194.39.67.0/24 maxlen: 24 194.110.54.0/23 maxlen: 24 195.49.208.0/21 maxlen: 21 195.49.209.0/24 maxlen: 24 195.49.210.0/23 maxlen: 23 195.49.210.0/24 maxlen: 24 195.49.211.0/24 maxlen: 24 195.49.212.0/22 maxlen: 22 195.49.212.0/24 maxlen: 24 195.49.213.0/24 maxlen: 24 195.49.214.0/24 maxlen: 24 195.49.215.0/24 maxlen: 24 195.93.152.0/23 maxlen: 24 195.210.46.0/23 maxlen: 24 2a00:5da0::/36 maxlen: 48 2a00:5da0:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 16:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:77:5d:c6:5d:b0:4b:a7:04:af:40:e7:8e:29:b9:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a Validity Not Before: Dec 8 10:17:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=879fe9acd8dc811c972442ccf0351164b3f91055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:5b:a7:9d:0f:57:d0:04:74:a6:48:5a:ce:71: fe:8e:e9:cc:61:2e:74:76:90:9e:43:c9:8c:93:35: 7f:d6:b0:13:0f:2b:ce:b2:65:e9:69:e0:dc:9e:d8: 9c:84:42:97:27:c4:d0:20:5e:36:ae:a8:f7:ae:29: 62:7c:bc:78:23:da:1e:f1:6d:8b:30:a7:c5:e7:ae: 44:ed:e5:0b:f3:88:a8:70:48:3a:17:48:c9:0a:69: 2d:a1:7b:ef:1c:e5:9a:25:91:fe:b8:e6:62:58:ca: 36:83:28:78:8e:8d:f0:5d:0c:05:4d:fa:01:a1:a4: ab:c0:8f:3f:ce:80:45:ba:e1:e2:8d:f7:03:94:d0: 4e:12:28:f8:84:40:2f:f4:8b:7b:a8:39:4e:f6:4a: 01:66:95:78:ef:0e:84:bf:77:55:f3:a4:9f:0c:c2: 14:30:1a:ed:a3:ea:f8:ab:2a:89:0b:d2:94:6a:11: 43:43:a9:ac:59:de:8a:ef:ff:51:94:90:54:3e:00: 7c:55:7d:23:75:50:b7:ff:01:43:8d:1d:65:75:79: 32:1b:df:6a:be:b1:4c:dd:e9:19:73:27:57:4d:01: 39:63:34:4a:48:a8:33:24:c3:fa:83:49:77:21:67: bb:e2:70:11:62:87:63:a6:9d:44:d9:28:c5:82:64: 8b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9F:E9:AC:D8:DC:81:1C:97:24:42:CC:F0:35:11:64:B3:F9:10:55 X509v3 Authority Key Identifier: keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/h5_prNjcgRyXJELM8DURZLP5EFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.247.40.0/23 77.240.38.0/23 77.243.80.0/23 78.40.108.0/23 82.115.40.0/22 85.202.194.0/23 89.219.32.0/22 91.147.92.0/22 91.147.104.0/22 91.201.214.0/23 91.215.136.0/22 94.247.128.0/21 109.233.108.0/22 185.4.180.0/22 185.22.64.0/22 185.35.222.0/23 185.102.72.0/22 185.146.0.0/22 194.32.140.0/22 194.39.64.0/22 194.110.54.0/23 195.49.208.0/21 195.93.152.0/23 195.210.46.0/23 IPv6: 2a00:5da0::/35 Signature Algorithm: sha256WithRSAEncryption 88:19:fd:d2:e9:e8:c6:7f:6f:a7:b0:21:80:67:37:b3:d6:5f: fd:f4:7c:fb:a0:a4:49:3a:48:63:61:fb:63:a3:36:4d:04:c7: 06:1c:73:2f:97:2c:d1:88:d6:7e:d5:5b:7b:a3:9a:8c:5f:10: 2f:9c:70:98:1c:6d:8c:9d:37:54:ab:f8:73:05:68:05:d3:c2: 70:ab:b8:ca:b7:e4:16:7d:b3:c1:97:e8:7a:9d:6d:7c:fe:6b: 42:f2:7d:60:31:92:5f:9e:b1:85:aa:67:4b:1a:23:c2:29:a1: 32:d8:9f:91:36:4d:e5:d2:46:9d:17:6e:59:38:83:bd:79:39: 40:58:cb:58:8e:c0:8e:4f:d3:00:96:fc:33:3c:25:cd:be:7d: 8d:0f:67:90:2f:6e:79:84:0c:f3:dd:f8:84:e6:1b:d9:bf:74: 6f:fe:cb:17:b0:3b:3e:0a:fb:30:26:79:69:4f:59:4b:44:f2: 2f:ac:21:ac:6a:62:22:b3:eb:59:a5:db:13:ed:e6:de:38:30: 3b:68:80:b1:60:14:d0:5b:ba:34:ac:de:52:1e:b5:c8:2e:6a: 9f:67:57:ca:8a:b5:c3:0d:49:50:a4:d7:5a:7e:e5:5a:29:8d: 12:69:da:3c:8a:5c:5d:41:b3:f6:04:d4:a3:09:69:74:8d:50: 3d:32:af:d5 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgISAZr9d13GXbBLpwSvQOeOKblKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NDdiNTlkMjFlYTM2YjMwNjJmY2E4MGNlNzVjMTYxNmFm NTExOWEwHhcNMjUxMjA4MTAxNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzlmZTlhY2Q4ZGM4MTFjOTcyNDQyY2NmMDM1MTE2NGIzZjkxMDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VunnQ9X0AR0pkhaznH+junMYS50 dpCeQ8mMkzV/1rATDyvOsmXpaeDcntichEKXJ8TQIF42rqj3rilifLx4I9oe8W2L MKfF565E7eUL84iocEg6F0jJCmktoXvvHOWaJZH+uOZiWMo2gyh4jo3wXQwFTfoB oaSrwI8/zoBFuuHijfcDlNBOEij4hEAv9It7qDlO9koBZpV47w6Ev3dV86SfDMIU MBrto+r4qyqJC9KUahFDQ6msWd6K7/9RlJBUPgB8VX0jdVC3/wFDjR1ldXkyG99q vrFM3ekZcydXTQE5YzRKSKgzJMP6g0l3IWe74nARYodjpp1E2SjFgmSLmQIDAQAB o4ICqDCCAqQwHQYDVR0OBBYEFIef6azY3IEclyRCzPA1EWSz+RBVMB8GA1UdIwQY MBaAFBhHtZ0h6jazBi/KgM51wWFq9RGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0VlMW5TSHFOck1HTDhxQXpuWEJZV3IxRVpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zODI0Y2QtZTUyNy00YWRjLWE0MTIt ZjkxYmI1MTc5MjE3LzEvaDVfcHJOamNnUnlYSkVMTThEVVJaTFA1RUZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8zODI0Y2QtZTUyNy00YWRjLWE0MTItZjkxYmI1MTc5MjE3 LzEvR0VlMW5TSHFOck1HTDhxQXpuWEJZV3IxRVpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG9BggrBgEFBQcBBwEB/wSBrTCBqjCBlwQCAAEwgZADBAEu 9ygDBAFN8CYDBAFN81ADBAFOKGwDBAJScygDBAFVysIDBAJZ2yADBAJbk1wDBAJb k2gDBAFbydYDBAJb14gDBANe94ADBAJt6WwDBAK5BLQDBAK5FkADBAG5I94DBAK5 ZkgDBAK5kgADBALCIIwDBALCJ0ADBAHCbjYDBAPDMdADBAHDXZgDBAHD0i4wDgQC AAIwCAMGBSoAXaAAMA0GCSqGSIb3DQEBCwUAA4IBAQCIGf3S6ejGf2+nsCGAZzez 1l/99Hz7oKRJOkhjYftjozZNBMcGHHMvlyzRiNZ+1Vt7o5qMXxAvnHCYHG2MnTdU q/hzBWgF08Jwq7jKt+QWfbPBl+h6nW18/mtC8n1gMZJfnrGFqmdLGiPCKaEy2J+R Nk3l0kadF25ZOIO9eTlAWMtYjsCOT9MAlvwzPCXNvn2ND2eQL255hAzz3fiE5hvZ v3Rv/ssXsDs+CvswJnlpT1lLRPIvrCGsamIis+tZpdsT7ebeODA7aICxYBTQW7o0 rN5SHrXILmqfZ1fKirXDDUlQpNdafuVaKY0Sado8ilxdQbP2BNSjCWl0jVA9Mq/V -----END CERTIFICATE-----Generated at Wed Dec 17 01:13:56 2025 by rpki-client