This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/5GwPbo7__4TJOwvRCe73j2O6xPU.roa File: 5GwPbo7__4TJOwvRCe73j2O6xPU.roa (raw, json) Hash identifier: 24uofXG+x5P8v+OHdd1JuXbfxl5UDoLkFS3hRtXAGVU= Subject key identifier: E4:6C:0F:6E:8E:FF:FF:84:C9:3B:0B:D1:09:EE:F7:8F:63:BA:C4:F5 Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5 Certificate serial: 019AE3BBD44FB2937DA8054585EB12DC3ED8 Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/5GwPbo7__4TJOwvRCe73j2O6xPU.roa Signing time: Wed 03 Dec 2025 10:22:08 +0000 ROA not before: Wed 03 Dec 2025 10:22:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16839 IP address blocks: 37.98.232.0/21 maxlen: 24 37.98.232.0/22 maxlen: 24 37.98.232.0/23 maxlen: 23 37.98.232.0/24 maxlen: 24 37.98.233.0/24 maxlen: 24 37.98.234.0/23 maxlen: 23 37.98.234.0/24 maxlen: 24 37.98.235.0/24 maxlen: 24 37.98.236.0/22 maxlen: 24 37.98.236.0/23 maxlen: 23 37.98.236.0/24 maxlen: 24 37.98.237.0/24 maxlen: 24 37.98.238.0/23 maxlen: 23 37.98.238.0/24 maxlen: 24 37.98.239.0/24 maxlen: 24 136.242.128.0/17 maxlen: 17 138.12.128.0/17 maxlen: 17 148.139.0.0/16 maxlen: 16 148.139.0.0/24 maxlen: 24 148.139.1.0/24 maxlen: 24 148.139.2.0/24 maxlen: 24 148.139.3.0/24 maxlen: 24 148.139.4.0/22 maxlen: 24 148.139.8.0/22 maxlen: 24 148.139.12.0/22 maxlen: 24 148.139.16.0/22 maxlen: 24 148.139.28.0/24 maxlen: 24 148.139.29.0/24 maxlen: 24 148.139.30.0/24 maxlen: 24 148.139.32.0/20 maxlen: 24 148.139.48.0/20 maxlen: 24 148.139.64.0/20 maxlen: 24 148.139.80.0/20 maxlen: 24 148.139.96.0/22 maxlen: 24 148.139.100.0/22 maxlen: 24 148.139.104.0/24 maxlen: 24 148.139.105.0/24 maxlen: 24 148.139.108.0/22 maxlen: 24 148.139.112.0/22 maxlen: 24 148.139.116.0/22 maxlen: 24 148.139.120.0/22 maxlen: 24 148.139.124.0/24 maxlen: 24 148.139.125.0/24 maxlen: 24 148.139.128.0/22 maxlen: 24 148.139.132.0/22 maxlen: 24 148.139.136.0/22 maxlen: 24 148.139.140.0/24 maxlen: 24 148.139.141.0/24 maxlen: 24 148.139.142.0/24 maxlen: 24 148.139.143.0/24 maxlen: 24 148.139.144.0/22 maxlen: 24 148.139.144.0/24 maxlen: 24 148.139.148.0/22 maxlen: 24 148.139.152.0/22 maxlen: 24 148.139.156.0/22 maxlen: 24 148.139.160.0/20 maxlen: 24 148.139.176.0/20 maxlen: 24 148.139.192.0/24 maxlen: 24 148.139.193.0/24 maxlen: 24 148.139.194.0/24 maxlen: 24 148.139.195.0/24 maxlen: 24 148.139.196.0/22 maxlen: 24 148.139.200.0/22 maxlen: 24 148.139.214.0/24 maxlen: 24 148.139.215.0/24 maxlen: 24 148.139.224.0/22 maxlen: 24 148.139.228.0/22 maxlen: 24 148.139.232.0/22 maxlen: 24 148.139.236.0/22 maxlen: 24 148.139.240.0/22 maxlen: 24 148.139.244.0/22 maxlen: 24 148.139.248.0/22 maxlen: 24 148.139.252.0/22 maxlen: 24 157.5.128.0/17 maxlen: 17 157.70.0.0/17 maxlen: 17 163.120.128.0/17 maxlen: 17 165.171.0.0/17 maxlen: 17 2a04:37c0::/29 maxlen: 48 2a04:37c0:3110::/48 maxlen: 48 2a04:37c0:3120::/48 maxlen: 48 2a04:37c0:3510::/48 maxlen: 48 2a04:37c0:3520::/48 maxlen: 48 2a04:37c0:3910::/48 maxlen: 48 2a04:37c0:3920::/48 maxlen: 48 2a04:37c0:4110::/48 maxlen: 48 2a04:37c0:4120::/48 maxlen: 48 2a04:37c0:4410::/48 maxlen: 48 2a04:37c0:4420::/48 maxlen: 48 2a04:37c0:4430::/48 maxlen: 48 2a04:37c0:4910::/48 maxlen: 48 2a04:37c0:4920::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:bb:d4:4f:b2:93:7d:a8:05:45:85:eb:12:dc:3e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5 Validity Not Before: Dec 3 10:22:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e46c0f6e8effff84c93b0bd109eef78f63bac4f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f0:b8:b1:a9:94:33:f3:3c:2a:64:4a:84:1c: 3c:31:4c:94:72:40:12:b8:13:2b:0c:2d:f4:49:14: 65:f7:e3:11:bc:e5:6b:dc:08:4a:4e:e0:6b:55:39: 64:7c:ee:7d:68:3c:65:c6:11:0e:c1:a9:98:b1:2d: 36:ca:f7:3b:c8:3d:8b:e0:7a:13:d0:f1:99:e1:bf: ee:eb:c4:08:61:f6:ce:d5:38:51:b9:1d:5a:64:ef: 14:98:bb:90:e2:4b:00:70:c3:fc:21:da:79:79:ca: a7:f2:60:5d:46:53:45:8f:01:21:96:9e:db:9d:dd: cd:e4:3f:61:c6:d3:bd:86:ed:1e:16:6b:73:a9:29: 56:c7:e0:58:11:90:0b:28:24:6f:31:44:45:8d:f1: 1b:03:b9:50:5f:02:f6:92:ef:13:a5:45:08:09:f0: 47:cc:69:c5:ff:f7:61:b7:24:bc:36:50:cb:2f:13: 3c:91:5a:3d:c7:5d:87:57:f0:03:49:a2:68:9a:22: e0:9c:a5:f5:11:55:33:f6:d2:45:81:63:aa:9d:07: 55:d3:6d:6e:8b:4e:f6:4a:27:a3:33:56:af:bc:ab: 14:d6:03:40:b9:4b:64:74:40:94:7b:e5:f2:80:6e: f3:05:2b:8d:b5:37:ae:6b:51:99:32:2c:47:31:d8: 06:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6C:0F:6E:8E:FF:FF:84:C9:3B:0B:D1:09:EE:F7:8F:63:BA:C4:F5 X509v3 Authority Key Identifier: keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/5GwPbo7__4TJOwvRCe73j2O6xPU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.98.232.0/21 136.242.128.0/17 138.12.128.0/17 148.139.0.0/16 157.5.128.0/17 157.70.0.0/17 163.120.128.0/17 165.171.0.0/17 IPv6: 2a04:37c0::/29 Signature Algorithm: sha256WithRSAEncryption 33:73:dc:5f:bb:96:82:f1:76:8f:14:b8:6a:2f:fe:01:55:c1: 07:83:97:5a:4b:ed:13:fa:d7:02:64:f4:db:42:d0:ef:6e:82: e4:29:36:0f:5e:16:15:e6:be:89:4b:ba:43:2a:cb:3e:e3:af: 04:1b:17:16:06:86:1a:a7:ea:b3:dc:d5:2d:1b:69:6a:f2:55: 21:2c:c3:13:08:43:8f:13:30:7d:50:0d:94:9c:b7:66:af:1f: 76:f3:d3:c5:0e:34:da:4e:10:69:d8:b7:e8:f2:4e:19:b9:54: 92:47:ab:57:22:94:40:53:7f:57:1d:4a:10:d5:d0:21:54:18: e4:5f:2a:16:93:cb:4e:b1:e8:4c:f2:10:a3:7a:11:48:d3:4f: 5e:fa:48:b7:1f:f6:22:4f:88:46:3a:2c:98:73:76:27:32:e6: 3d:42:43:e9:9f:b2:4c:0d:51:fb:0b:3b:a2:8f:d7:ae:52:73: 12:cc:a7:30:31:12:04:ec:d3:a8:a3:43:22:25:50:e9:8e:9f: 99:3b:8c:d0:5e:51:3f:bd:6f:c0:58:1f:e0:f3:42:3e:02:d6: a5:53:f3:06:03:bf:12:90:8e:79:c1:f8:5f:91:64:c4:97:8f: d3:3d:fd:9d:92:9a:d1:2f:32:ff:2b:aa:04:79:03:48:b7:7e: 34:5d:af:c9 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZrju9RPspN9qAVFhesS3D7YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYzM4YTA2YTM5YjIwYjhkYTQwMDA5MjM3ZDc2YWNkZDI4 ZTcxYTUwHhcNMjUxMjAzMTAyMjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDZjMGY2ZThlZmZmZjg0YzkzYjBiZDEwOWVlZjc4ZjYzYmFjNGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9PC4samUM/M8KmRKhBw8MUyUckAS uBMrDC30SRRl9+MRvOVr3AhKTuBrVTlkfO59aDxlxhEOwamYsS02yvc7yD2L4HoT 0PGZ4b/u68QIYfbO1ThRuR1aZO8UmLuQ4ksAcMP8Idp5ecqn8mBdRlNFjwEhlp7b nd3N5D9hxtO9hu0eFmtzqSlWx+BYEZALKCRvMURFjfEbA7lQXwL2ku8TpUUICfBH zGnF//dhtyS8NlDLLxM8kVo9x12HV/ADSaJomiLgnKX1EVUz9tJFgWOqnQdV021u i072SiejM1avvKsU1gNAuUtkdECUe+XygG7zBSuNtTeua1GZMixHMdgGewIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFORsD26O//+EyTsL0Qnu949jusT1MB8GA1UdIwQY MBaAFAHDigajmyC42kAAkjfXas3SjnGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWNPS0JxT2JJTGphUUFDU045ZHF6ZEtPY2FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS82YThlNWUtMzliNi00N2UzLWJiYjAt YjI5ZjEwY2MwMzI4LzEvNUd3UGJvN19fNFRKT3d2UkNlNzNqMk82eFBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS82YThlNWUtMzliNi00N2UzLWJiYjAtYjI5ZjEwY2MwMzI4 LzEvQWNPS0JxT2JJTGphUUFDU045ZHF6ZEtPY2FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjA1BAIAATAvAwQDJWLoAwQH iPKAAwQHigyAAwMAlIsDBAedBYADBAedRgADBAejeIADBAelqwAwDQQCAAIwBwMF AyoEN8AwDQYJKoZIhvcNAQELBQADggEBADNz3F+7loLxdo8UuGov/gFVwQeDl1pL 7RP61wJk9NtC0O9uguQpNg9eFhXmvolLukMqyz7jrwQbFxYGhhqn6rPc1S0baWry VSEswxMIQ48TMH1QDZSct2avH3bz08UONNpOEGnYt+jyThm5VJJHq1cilEBTf1cd ShDV0CFUGORfKhaTy06x6EzyEKN6EUjTT176SLcf9iJPiEY6LJhzdicy5j1CQ+mf skwNUfsLO6KP165ScxLMpzAxEgTs06ijQyIlUOmOn5k7jNBeUT+9b8BYH+DzQj4C 1qVT8wYDvxKQjnnB+F+RZMSXj9M9/Z2SmtEvMv8rqgR5A0i3fjRdr8k= -----END CERTIFICATE-----Generated at Sat Dec 6 17:48:04 2025 by rpki-client