This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/54lSm-if8ELWTIYkAhAOoMbu2hM.roa File: 54lSm-if8ELWTIYkAhAOoMbu2hM.roa (raw, json) Hash identifier: eepzl5G5+yZLJCVsC8qit6m/hfcvd8vyiAzHX6ajIxo= Subject key identifier: E7:89:52:9B:E8:9F:F0:42:D6:4C:86:24:02:10:0E:A0:C6:EE:DA:13 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B2D29C1A26EF0CE269080730D86B2626F Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/54lSm-if8ELWTIYkAhAOoMbu2hM.roa Signing time: Wed 17 Dec 2025 16:34:29 +0000 ROA not before: Wed 17 Dec 2025 16:34:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 2914 IP address blocks: 5.182.28.0/22 maxlen: 22 45.67.117.0/24 maxlen: 24 89.40.161.0/24 maxlen: 24 91.242.68.0/23 maxlen: 24 91.242.70.0/24 maxlen: 24 91.242.73.0/24 maxlen: 24 91.242.74.0/24 maxlen: 24 91.242.82.0/24 maxlen: 24 91.242.105.0/24 maxlen: 24 91.242.124.0/24 maxlen: 24 91.242.126.0/24 maxlen: 24 185.147.48.0/24 maxlen: 24 185.180.145.0/24 maxlen: 24 185.212.11.0/24 maxlen: 24 194.50.200.0/24 maxlen: 24 194.50.201.0/24 maxlen: 24 194.50.206.0/23 maxlen: 24 194.50.206.0/24 maxlen: 24 195.138.103.0/24 maxlen: 24 195.138.104.0/22 maxlen: 24 195.138.107.0/24 maxlen: 24 195.138.111.0/24 maxlen: 24 195.138.114.0/24 maxlen: 24 195.138.120.0/24 maxlen: 24 195.211.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:29:c1:a2:6e:f0:ce:26:90:80:73:0d:86:b2:62:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Dec 17 16:34:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e789529be89ff042d64c862402100ea0c6eeda13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a6:0c:12:ff:95:7b:a4:ef:69:cb:f6:1f:be: a3:3c:85:da:55:d9:55:aa:ac:6f:01:07:50:70:40: 08:d9:50:91:a6:bd:bd:1a:56:58:90:69:39:40:6d: ac:86:4a:5b:45:7f:6e:16:78:d2:ec:d4:bd:ae:cd: b9:48:4b:ab:d1:e4:69:a7:a5:34:0d:f3:ce:5b:c2: 40:fa:1f:ab:c9:3a:7b:c9:ff:9e:43:e3:33:01:ac: 15:e7:4d:86:e3:43:4e:da:5e:6e:b2:59:4f:0d:cc: 55:3d:cf:11:12:50:70:b3:32:90:ab:df:ea:41:af: 25:44:9c:c8:63:a4:07:fb:6b:67:cf:e6:7c:20:80: 09:53:37:b1:7c:7a:23:19:dc:9a:9f:a8:85:5a:a5: 8d:97:81:67:c4:3a:bb:b6:d1:cf:9d:cf:56:55:56: 53:2a:4a:2f:32:fe:b4:28:8a:91:35:5c:fb:30:05: d2:67:6e:7a:f1:e7:19:64:01:e6:de:d8:d4:38:3b: 18:34:77:34:5c:c8:f4:b0:e3:d0:b5:0e:4a:f6:79: 2a:5f:c5:99:64:c6:af:1a:6e:55:7d:56:36:2b:a9: 97:62:05:ab:90:e4:46:ea:b3:6a:95:fb:84:f2:cb: f1:95:7f:b9:5d:3c:ae:6b:ae:18:12:d1:9a:5b:60: 5f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:89:52:9B:E8:9F:F0:42:D6:4C:86:24:02:10:0E:A0:C6:EE:DA:13 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/54lSm-if8ELWTIYkAhAOoMbu2hM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.28.0/22 45.67.117.0/24 89.40.161.0/24 91.242.68.0-91.242.70.255 91.242.73.0-91.242.74.255 91.242.82.0/24 91.242.105.0/24 91.242.124.0/24 91.242.126.0/24 185.147.48.0/24 185.180.145.0/24 185.212.11.0/24 194.50.200.0/23 194.50.206.0/23 195.138.103.0-195.138.107.255 195.138.111.0/24 195.138.114.0/24 195.138.120.0/24 195.211.48.0/24 Signature Algorithm: sha256WithRSAEncryption a1:8f:1a:3b:d0:bf:d1:f4:ba:cf:53:97:b6:be:60:93:0f:af: d0:5e:e2:d3:69:d4:5f:02:81:11:f4:e0:2c:38:9a:7d:ed:31: 18:2f:2c:2e:f2:07:0e:12:d8:b6:64:b8:ed:2e:b4:b8:1e:a5: 9f:ae:f3:73:8d:26:a8:3c:28:bc:ba:fb:2e:dc:68:9b:f9:93: e4:a7:7d:a6:9a:6e:0b:78:2a:69:4c:bf:4a:4e:c7:57:48:98: 38:c9:54:4f:86:e2:db:5f:ff:99:87:a6:2a:09:0e:af:98:16: 99:27:e3:83:75:33:a7:87:83:91:af:15:02:f7:be:c5:1f:38: 10:ba:18:b9:93:7b:a5:31:ec:3e:83:5c:bd:65:7d:aa:3d:7b: 52:27:75:2b:6f:60:80:86:96:a3:e3:65:ea:09:17:8e:7d:a8: 9b:20:90:cf:db:7d:8f:ca:b0:8a:56:ab:ab:7a:f1:f8:21:fe: c1:a5:dd:44:22:cb:16:97:86:93:e9:b2:ca:4b:a5:b8:9b:bf: 44:2b:d7:34:62:9f:fb:ec:38:6e:68:51:d5:02:1c:0b:be:bc: 32:4b:c5:54:5d:29:67:59:00:eb:12:0e:56:cb:38:1a:37:95: 77:34:f1:18:7e:b6:25:0e:16:88:a1:53:78:66:ff:e1:ac:72: c4:1b:48:00 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISAZstKcGibvDOJpCAcw2GsmJvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjUxMjE3MTYzNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzg5NTI5YmU4OWZmMDQyZDY0Yzg2MjQwMjEwMGVhMGM2ZWVkYTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6YMEv+Ve6Tvacv2H76jPIXaVdlV qqxvAQdQcEAI2VCRpr29GlZYkGk5QG2shkpbRX9uFnjS7NS9rs25SEur0eRpp6U0 DfPOW8JA+h+ryTp7yf+eQ+MzAawV502G40NO2l5usllPDcxVPc8RElBwszKQq9/q Qa8lRJzIY6QH+2tnz+Z8IIAJUzexfHojGdyan6iFWqWNl4FnxDq7ttHPnc9WVVZT KkovMv60KIqRNVz7MAXSZ2568ecZZAHm3tjUODsYNHc0XMj0sOPQtQ5K9nkqX8WZ ZMavGm5VfVY2K6mXYgWrkORG6rNqlfuE8svxlX+5XTyua64YEtGaW2BfwQIDAQAB o4ICkjCCAo4wHQYDVR0OBBYEFOeJUpvon/BC1kyGJAIQDqDG7toTMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvNTRsU20taWY4RUxXVElZa0FoQU9vTWJ1MmhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGnBggrBgEFBQcBBwEB/wSBlzCBlDCBkQQCAAEwgYoDBAIF thwDBAAtQ3UDBABZKKEwDAMEAlvyRAMEAFvyRjAMAwQAW/JJAwQAW/JKAwQAW/JS AwQAW/JpAwQAW/J8AwQAW/J+AwQAuZMwAwQAubSRAwQAudQLAwQBwjLIAwQBwjLO MAwDBADDimcDBALDimgDBADDim8DBADDinIDBADDingDBADD0zAwDQYJKoZIhvcN AQELBQADggEBAKGPGjvQv9H0us9Tl7a+YJMPr9Be4tNp1F8CgRH04Cw4mn3tMRgv LC7yBw4S2LZkuO0utLgepZ+u83ONJqg8KLy6+y7caJv5k+Snfaaabgt4KmlMv0pO x1dImDjJVE+G4ttf/5mHpioJDq+YFpkn44N1M6eHg5GvFQL3vsUfOBC6GLmTe6Ux 7D6DXL1lfao9e1IndStvYICGlqPjZeoJF459qJsgkM/bfY/KsIpWq6t68fgh/sGl 3UQiyxaXhpPpsspLpbibv0Qr1zRin/vsOG5oUdUCHAu+vDJLxVRdKWdZAOsSDlbL OBo3lXc08Rh+tiUOFoihU3hm/+GscsQbSAA= -----END CERTIFICATE-----Generated at Fri Dec 19 03:56:59 2025 by rpki-client