This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/299uhEpzGFJEXIhUZ3hch4enjKM.roa File: 299uhEpzGFJEXIhUZ3hch4enjKM.roa (raw, json) Hash identifier: 307PCiw/T4zXNlSyH03hWBls0NiBUzu1YZmXwWv4GKg= Subject key identifier: DB:DF:6E:84:4A:73:18:52:44:5C:88:54:67:78:5C:87:87:A7:8C:A3 Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Certificate serial: 019AC703D440139F7B6A4A93558209A88177 Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/299uhEpzGFJEXIhUZ3hch4enjKM.roa Signing time: Thu 27 Nov 2025 20:31:48 +0000 ROA not before: Thu 27 Nov 2025 20:31:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6424 IP address blocks: 5.183.96.0/22 maxlen: 24 103.243.124.0/22 maxlen: 24 146.19.95.0/24 maxlen: 24 146.19.249.0/24 maxlen: 24 185.112.251.0/24 maxlen: 24 185.162.183.0/24 maxlen: 24 185.166.144.0/24 maxlen: 24 188.93.192.0/21 maxlen: 24 188.93.196.0/24 maxlen: 24 188.93.198.0/24 maxlen: 24 188.93.199.0/24 maxlen: 24 193.107.13.0/24 maxlen: 24 193.109.184.0/21 maxlen: 24 193.109.184.0/24 maxlen: 24 193.163.151.0/24 maxlen: 24 212.52.23.0/24 maxlen: 24 2001:b18::/32 maxlen: 48 2001:b18:a::/48 maxlen: 48 2001:b18:b::/48 maxlen: 48 2001:b18:1000::/48 maxlen: 48 2001:b18:1001::/48 maxlen: 48 2001:b18:1002::/48 maxlen: 48 2001:b18:1008::/48 maxlen: 48 2001:b18:1012::/48 maxlen: 48 2001:b18:1016::/48 maxlen: 48 2001:b18:1018::/48 maxlen: 48 2001:b18:1020::/48 maxlen: 48 2001:b18:1031::/48 maxlen: 48 2001:b18:1091::/48 maxlen: 48 2a0b:e740::/29 maxlen: 29 2a0d:82c0::/29 maxlen: 48 2a0d:82c0::/32 maxlen: 32 2a0d:82c7:d::/48 maxlen: 48 2a0e:5f00::/29 maxlen: 48 2a0e:5f00::/32 maxlen: 32 2a0f:7700::/29 maxlen: 29 2a0f:8900::/29 maxlen: 29 2a0f:d300::/29 maxlen: 29 2a10:ee40::/29 maxlen: 29 2a11:c00::/29 maxlen: 29 2a12:c1c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c7:03:d4:40:13:9f:7b:6a:4a:93:55:82:09:a8:81:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Validity Not Before: Nov 27 20:31:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dbdf6e844a731852445c885467785c8787a78ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:95:5b:f8:67:1d:37:8f:da:6a:5b:6d:c9:06: f3:13:f0:63:bf:f8:ea:9f:6a:01:ee:62:1d:75:a5: 6b:ac:b5:0b:be:c5:28:5b:b0:66:58:80:5a:ae:23: 5d:91:0a:85:4b:47:c2:fd:4a:67:06:dc:50:19:90: f1:b5:34:96:a0:e7:bd:b3:93:91:66:50:f9:09:12: 0b:47:97:04:22:a8:4d:51:5b:4b:e6:63:f6:4e:2e: 64:9a:0a:42:dc:ed:10:0d:f2:fd:36:04:04:7e:59: 73:f7:ce:65:36:e9:c4:62:d6:71:2e:fc:5e:2c:f4: 08:cb:dd:2e:bb:11:83:66:96:83:43:3d:c1:0c:a0: 8a:63:ce:30:f7:8a:b2:cb:a7:04:2a:94:e7:13:4a: 07:56:3e:c2:36:43:85:4b:b0:80:ec:8e:06:71:41: e2:9f:cc:5f:cd:39:c7:be:32:00:87:78:e6:d7:9d: 10:a3:94:cd:dc:39:8d:6b:e6:2f:7a:df:39:0e:9b: 51:26:89:04:c7:60:63:52:d0:73:ea:6a:6a:3f:56: 6d:3c:64:65:c1:ea:35:e5:0e:11:d8:98:a6:3e:e7: b9:29:42:ee:41:78:03:d5:d3:44:d9:06:6d:78:e3: 29:2c:f7:8f:dc:f5:6f:98:ef:51:ca:6c:42:fb:67: 91:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:DF:6E:84:4A:73:18:52:44:5C:88:54:67:78:5C:87:87:A7:8C:A3 X509v3 Authority Key Identifier: keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/299uhEpzGFJEXIhUZ3hch4enjKM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.96.0/22 103.243.124.0/22 146.19.95.0/24 146.19.249.0/24 185.112.251.0/24 185.162.183.0/24 185.166.144.0/24 188.93.192.0/21 193.107.13.0/24 193.109.184.0/21 193.163.151.0/24 212.52.23.0/24 IPv6: 2001:b18::/32 2a0b:e740::/29 2a0d:82c0::/29 2a0e:5f00::/29 2a0f:7700::/29 2a0f:8900::/29 2a0f:d300::/29 2a10:ee40::/29 2a11:c00::/29 2a12:c1c0::/29 Signature Algorithm: sha256WithRSAEncryption b1:57:cd:37:e0:5d:ea:92:34:a1:1b:60:79:7c:b3:d3:40:4c: 04:1c:77:92:8a:1c:e7:4e:dd:0e:0d:7d:74:35:32:56:c4:2f: 40:ac:ab:40:6c:18:3d:23:70:31:98:f3:56:3d:bd:eb:43:c2: 37:13:28:14:c4:86:f2:f1:fa:e9:16:28:bd:2c:b0:00:2b:1c: 5a:95:c9:81:09:9d:b1:27:b8:f4:dd:ac:04:9b:58:89:4f:e9: dd:0e:05:2c:7e:79:3d:9e:7d:e9:6e:46:7d:62:71:ee:5a:44: e4:b1:17:28:ad:76:ed:c3:62:b0:5d:a0:8e:3e:66:d5:25:46: ba:12:f2:93:f3:9f:fb:aa:74:d6:19:2b:0a:83:50:01:00:ac: 2f:85:54:d5:a7:66:b1:33:50:4e:2f:33:eb:89:c5:d9:f8:34: 0f:b2:47:bc:4b:e0:9a:06:fc:4c:e9:2c:7c:33:b4:c2:69:36: e4:ae:da:19:12:b0:9f:28:3a:91:c6:b7:01:9d:54:a8:86:0a: 01:74:a7:89:da:43:bb:0d:f3:99:df:1f:9f:ec:7c:02:30:f5: a4:56:af:48:2b:51:e6:b1:46:1b:62:9b:07:63:fe:50:bf:25: be:d4:a2:05:26:91:6e:0d:47:34:93:cf:63:4b:10:fd:b6:58: 51:3c:a2:da -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgISAZrHA9RAE597akqTVYIJqIF3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi NjMwYmYwHhcNMjUxMTI3MjAzMTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmRmNmU4NDRhNzMxODUyNDQ1Yzg4NTQ2Nzc4NWM4Nzg3YTc4Y2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5Vb+GcdN4/aalttyQbzE/Bjv/jq n2oB7mIddaVrrLULvsUoW7BmWIBariNdkQqFS0fC/UpnBtxQGZDxtTSWoOe9s5OR ZlD5CRILR5cEIqhNUVtL5mP2Ti5kmgpC3O0QDfL9NgQEfllz985lNunEYtZxLvxe LPQIy90uuxGDZpaDQz3BDKCKY84w94qyy6cEKpTnE0oHVj7CNkOFS7CA7I4GcUHi n8xfzTnHvjIAh3jm150Qo5TN3DmNa+Yvet85DptRJokEx2BjUtBz6mpqP1ZtPGRl weo15Q4R2JimPue5KULuQXgD1dNE2QZteOMpLPeP3PVvmO9RymxC+2eRSwIDAQAB o4ICnDCCApgwHQYDVR0OBBYEFNvfboRKcxhSRFyIVGd4XIeHp4yjMB8GA1UdIwQY MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt MTQ3MGFjMzY0ZGQyLzEvMjk5dWhFcHpHRkpFWEloVVozaGNoNGVuaktNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGxBggrBgEFBQcBBwEB/wSBoTCBnjBOBAIAATBIAwQCBbdg AwQCZ/N8AwQAkhNfAwQAkhP5AwQAuXD7AwQAuaK3AwQAuaaQAwQDvF3AAwQAwWsN AwQDwW24AwQAwaOXAwQA1DQXMEwEAgACMEYDBQAgAQsYAwUDKgvnQAMFAyoNgsAD BQMqDl8AAwUDKg93AAMFAyoPiQADBQMqD9MAAwUDKhDuQAMFAyoRDAADBQMqEsHA MA0GCSqGSIb3DQEBCwUAA4IBAQCxV8034F3qkjShG2B5fLPTQEwEHHeSihznTt0O DX10NTJWxC9ArKtAbBg9I3AxmPNWPb3rQ8I3EygUxIby8frpFii9LLAAKxxalcmB CZ2xJ7j03awEm1iJT+ndDgUsfnk9nn3pbkZ9YnHuWkTksRcorXbtw2KwXaCOPmbV JUa6EvKT85/7qnTWGSsKg1ABAKwvhVTVp2axM1BOLzPricXZ+DQPske8S+CaBvxM 6Sx8M7TCaTbkrtoZErCfKDqRxrcBnVSohgoBdKeJ2kO7DfOZ3x+f7HwCMPWkVq9I K1HmsUYbYpsHY/5QvyW+1KIFJpFuDUc0k89jSxD9tlhRPKLa -----END CERTIFICATE-----Generated at Sat Dec 6 05:09:13 2025 by rpki-client