This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/8hiUoJXpUFjwNjwH-EyUEsyvNJE.roa File: 8hiUoJXpUFjwNjwH-EyUEsyvNJE.roa (raw, json) Hash identifier: 5QKVCEA5goz7gzKPSi27t+CZ7ACRkBJOGzF03bEMPg8= Subject key identifier: F2:18:94:A0:95:E9:50:58:F0:36:3C:07:F8:4C:94:12:CC:AF:34:91 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019AE17BA69D55040C64973CEA99C244B762 Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/8hiUoJXpUFjwNjwH-EyUEsyvNJE.roa Signing time: Tue 02 Dec 2025 23:52:48 +0000 ROA not before: Tue 02 Dec 2025 23:52:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9125 IP address blocks: 5.172.34.0/23 maxlen: 23 5.172.34.0/24 maxlen: 24 5.172.36.0/22 maxlen: 22 5.172.36.0/23 maxlen: 23 5.172.37.0/24 maxlen: 24 89.23.65.0/24 maxlen: 24 89.23.67.0/24 maxlen: 24 89.23.68.0/23 maxlen: 23 89.23.70.0/24 maxlen: 24 89.23.71.0/24 maxlen: 24 89.23.74.0/24 maxlen: 24 89.23.75.0/24 maxlen: 24 89.23.77.0/24 maxlen: 24 89.23.78.0/24 maxlen: 24 89.23.79.0/24 maxlen: 24 89.23.83.0/24 maxlen: 24 89.23.84.0/24 maxlen: 24 89.23.86.0/24 maxlen: 24 89.23.88.0/24 maxlen: 24 89.23.90.0/24 maxlen: 24 92.42.248.0/22 maxlen: 22 92.42.252.0/24 maxlen: 24 92.42.253.0/24 maxlen: 24 92.42.254.0/24 maxlen: 24 92.42.255.0/24 maxlen: 24 93.93.192.0/21 maxlen: 21 95.140.112.0/22 maxlen: 22 95.140.115.0/24 maxlen: 24 95.140.116.0/22 maxlen: 22 95.140.120.0/23 maxlen: 23 95.140.124.0/22 maxlen: 22 95.140.125.0/24 maxlen: 24 109.111.224.0/24 maxlen: 24 109.111.225.0/24 maxlen: 24 109.111.226.0/24 maxlen: 24 109.111.227.0/24 maxlen: 24 109.111.228.0/24 maxlen: 24 109.111.229.0/24 maxlen: 24 109.111.230.0/23 maxlen: 23 109.111.232.0/22 maxlen: 22 109.111.236.0/22 maxlen: 22 109.111.240.0/24 maxlen: 24 109.111.243.0/24 maxlen: 24 109.111.244.0/24 maxlen: 24 109.111.245.0/24 maxlen: 24 109.111.246.0/24 maxlen: 24 109.111.247.0/24 maxlen: 24 109.111.248.0/24 maxlen: 24 109.111.249.0/24 maxlen: 24 109.111.250.0/24 maxlen: 24 109.111.252.0/23 maxlen: 23 109.111.254.0/24 maxlen: 24 178.254.128.0/21 maxlen: 21 178.254.133.0/24 maxlen: 24 178.254.136.0/22 maxlen: 22 178.254.140.0/22 maxlen: 22 178.254.144.0/24 maxlen: 24 178.254.145.0/24 maxlen: 24 178.254.146.0/24 maxlen: 24 178.254.148.0/24 maxlen: 24 178.254.149.0/24 maxlen: 24 178.254.151.0/24 maxlen: 24 178.254.152.0/24 maxlen: 24 178.254.153.0/24 maxlen: 24 178.254.154.0/24 maxlen: 24 178.254.155.0/24 maxlen: 24 178.254.156.0/24 maxlen: 24 178.254.157.0/24 maxlen: 24 178.254.158.0/24 maxlen: 24 178.254.159.0/24 maxlen: 24 178.254.163.0/24 maxlen: 24 178.254.165.0/24 maxlen: 24 178.254.169.0/24 maxlen: 24 178.254.172.0/24 maxlen: 24 178.254.175.0/24 maxlen: 24 178.254.177.0/24 maxlen: 24 178.254.183.0/24 maxlen: 24 178.254.184.0/24 maxlen: 24 178.254.187.0/24 maxlen: 24 178.254.188.0/22 maxlen: 24 185.157.44.0/24 maxlen: 24 193.104.68.0/24 maxlen: 24 217.169.208.0/20 maxlen: 20 217.169.208.0/22 maxlen: 22 217.169.212.0/22 maxlen: 22 217.169.216.0/22 maxlen: 22 217.169.219.0/24 maxlen: 24 217.169.220.0/22 maxlen: 22 2a02:b58::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e1:7b:a6:9d:55:04:0c:64:97:3c:ea:99:c2:44:b7:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Dec 2 23:52:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f21894a095e95058f0363c07f84c9412ccaf3491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d4:0b:73:6d:77:af:65:6a:72:26:40:1d:b4: 25:6d:09:5b:13:9a:a0:53:ea:b7:8d:f3:87:7c:d3: 92:d9:f8:81:24:be:c2:72:15:17:8d:d6:55:af:1a: e7:78:d3:a3:cc:81:69:c6:12:5b:d1:1f:67:ce:75: 0f:2b:48:35:21:37:f1:15:c6:cd:75:69:c2:f8:dc: 7c:bf:c3:6e:db:ea:46:ee:dd:1e:37:48:92:57:9e: 45:e4:f2:6c:69:88:ae:a9:3c:e3:db:84:94:ce:8c: 61:d8:fa:a0:81:d4:1b:82:59:a2:c8:8e:61:a6:cf: 4d:0b:38:ac:4d:37:04:c9:cb:ed:e5:e8:3e:25:f7: 4e:a6:54:44:63:bc:16:e0:70:ba:49:95:8c:6b:ed: 35:7d:de:71:9c:b9:f7:c0:61:83:0f:c2:1c:93:46: b1:1c:2b:3f:ce:79:bd:45:ec:9f:bc:31:ea:b3:8f: 47:66:9c:3f:d6:14:0c:1a:8e:25:3f:07:25:9c:7e: e6:57:b9:80:bd:78:86:8e:40:8c:c4:59:66:c9:0c: 5c:e1:75:de:27:d9:1b:b5:85:77:1e:54:42:b7:2f: f0:fb:a9:44:79:5d:e0:ff:7f:cc:94:4f:31:e4:30: 7b:dc:7e:c3:82:8f:5f:77:0a:7b:23:ee:cd:33:7a: 43:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:18:94:A0:95:E9:50:58:F0:36:3C:07:F8:4C:94:12:CC:AF:34:91 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/8hiUoJXpUFjwNjwH-EyUEsyvNJE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.34.0-5.172.39.255 89.23.65.0/24 89.23.67.0-89.23.71.255 89.23.74.0/23 89.23.77.0-89.23.79.255 89.23.83.0-89.23.84.255 89.23.86.0/24 89.23.88.0/24 89.23.90.0/24 92.42.248.0/21 93.93.192.0/21 95.140.112.0-95.140.121.255 95.140.124.0/22 109.111.224.0-109.111.240.255 109.111.243.0-109.111.250.255 109.111.252.0-109.111.254.255 178.254.128.0-178.254.146.255 178.254.148.0/23 178.254.151.0-178.254.159.255 178.254.163.0/24 178.254.165.0/24 178.254.169.0/24 178.254.172.0/24 178.254.175.0/24 178.254.177.0/24 178.254.183.0-178.254.184.255 178.254.187.0-178.254.191.255 185.157.44.0/24 193.104.68.0/24 217.169.208.0/20 IPv6: 2a02:b58::/32 Signature Algorithm: sha256WithRSAEncryption 87:17:e8:d0:78:31:6a:a9:e3:9b:ad:34:5f:fb:88:20:9b:31: 5c:2a:b8:fe:d7:66:60:93:2b:b7:3a:d7:3b:52:a5:06:8a:fc: 4e:86:c4:9a:f4:11:1e:2f:d7:95:05:65:a4:5c:33:ad:6e:f6: bd:b8:80:d5:90:8a:05:00:cb:22:15:8f:df:1f:8d:ad:14:7a: 23:54:78:60:69:35:c8:40:26:51:97:1f:3d:1c:15:d0:50:b7: cf:88:19:a4:06:52:0d:54:7b:fd:a1:80:4b:88:c1:62:33:06: 75:ec:5a:8e:c2:9d:f6:cd:09:f3:8b:26:26:6d:fe:02:60:7d: 65:42:dc:35:64:b0:db:a3:df:c7:c9:65:d3:7f:ef:91:27:2a: 72:3f:5e:4b:c3:64:74:d9:ff:e3:47:99:49:8e:26:31:12:a2: 96:01:cc:93:53:fb:27:5c:63:54:3d:db:1f:94:b2:9b:56:1c: 8a:00:15:b1:35:57:35:32:07:0a:76:69:5e:af:54:fc:4b:e0: f0:02:c8:e9:d1:b1:6d:d1:10:d7:06:42:c6:f3:c0:ec:00:ed: 25:52:48:46:59:f4:b1:92:90:cb:d4:06:f6:86:9c:6b:92:be: ff:49:cd:32:39:79:1c:39:7e:6a:22:ba:31:83:3c:48:78:f1: 1c:d7:be:23 -----BEGIN CERTIFICATE----- MIIGJDCCBQygAwIBAgISAZrhe6adVQQMZJc86pnCRLdiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjUxMjAyMjM1MjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjE4OTRhMDk1ZTk1MDU4ZjAzNjNjMDdmODRjOTQxMmNjYWYzNDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNQLc213r2VqciZAHbQlbQlbE5qg U+q3jfOHfNOS2fiBJL7CchUXjdZVrxrneNOjzIFpxhJb0R9nznUPK0g1ITfxFcbN dWnC+Nx8v8Nu2+pG7t0eN0iSV55F5PJsaYiuqTzj24SUzoxh2PqggdQbglmiyI5h ps9NCzisTTcEycvt5eg+JfdOplREY7wW4HC6SZWMa+01fd5xnLn3wGGDD8Ick0ax HCs/znm9ReyfvDHqs49HZpw/1hQMGo4lPwclnH7mV7mAvXiGjkCMxFlmyQxc4XXe J9kbtYV3HlRCty/w+6lEeV3g/3/MlE8x5DB73H7Dgo9fdwp7I+7NM3pDcwIDAQAB o4IDMDCCAywwHQYDVR0OBBYEFPIYlKCV6VBY8DY8B/hMlBLMrzSRMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvOGhpVW9KWHBVRmp3Tmp3SC1FeVVFc3l2TkpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBRAYIKwYBBQUHAQcBAf8EggEzMIIBLzCCARwEAgABMIIB FDAMAwQBBawiAwQDBawgAwQAWRdBMAwDBABZF0MDBANZF0ADBAFZF0owDAMEAFkX TQMEBFkXQDAMAwQAWRdTAwQAWRdUAwQAWRdWAwQAWRdYAwQAWRdaAwQDXCr4AwQD XV3AMAwDBARfjHADBAFfjHgDBAJfjHwwDAMEBW1v4AMEAG1v8DAMAwQAbW/zAwQA bW/6MAwDBAJtb/wDBABtb/4wDAMEB7L+gAMEALL+kgMEAbL+lDAMAwQAsv6XAwQF sv6AAwQAsv6jAwQAsv6lAwQAsv6pAwQAsv6sAwQAsv6vAwQAsv6xMAwDBACy/rcD BACy/rgwDAMEALL+uwMEBrL+gAMEALmdLAMEAMFoRAMEBNmp0DANBAIAAjAHAwUA KgILWDANBgkqhkiG9w0BAQsFAAOCAQEAhxfo0Hgxaqnjm600X/uIIJsxXCq4/tdm YJMrtzrXO1KlBor8TobEmvQRHi/XlQVlpFwzrW72vbiA1ZCKBQDLIhWP3x+NrRR6 I1R4YGk1yEAmUZcfPRwV0FC3z4gZpAZSDVR7/aGAS4jBYjMGdexajsKd9s0J84sm Jm3+AmB9ZULcNWSw26Pfx8ll03/vkScqcj9eS8NkdNn/40eZSY4mMRKilgHMk1P7 J1xjVD3bH5Sym1YcigAVsTVXNTIHCnZpXq9U/Evg8ALI6dGxbdEQ1wZCxvPA7ADt JVJIRln0sZKQy9QG9oaca5K+/0nNMjl5HDl+aiK6MYM8SHjxHNe+Iw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:42:19 2025 by rpki-client