This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/n5YvfZ8ZMXvjamIBGQSH9xKjyIY.roa File: n5YvfZ8ZMXvjamIBGQSH9xKjyIY.roa (raw, json) Hash identifier: Lo/GWPSy2YW284HgZMglNnHmZZWcBF3OIdIQ/0+zNxk= Subject key identifier: 9F:96:2F:7D:9F:19:31:7B:E3:6A:62:01:19:04:87:F7:12:A3:C8:86 Certificate issuer: /CN=149d1f67a41ca2e405017cbe48bafff1733e3869 Certificate serial: 019AED5740966661BC74E5363E116E0CACD9 Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/n5YvfZ8ZMXvjamIBGQSH9xKjyIY.roa Signing time: Fri 05 Dec 2025 07:08:29 +0000 ROA not before: Fri 05 Dec 2025 07:08:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207728 IP address blocks: 31.10.5.0/24 maxlen: 24 31.210.170.0/23 maxlen: 24 31.210.172.0/24 maxlen: 24 31.210.173.0/24 maxlen: 24 46.28.234.0/24 maxlen: 24 62.204.42.0/24 maxlen: 24 85.136.181.0/24 maxlen: 24 85.136.182.0/24 maxlen: 24 85.136.183.0/24 maxlen: 24 87.236.177.0/24 maxlen: 24 93.88.74.0/24 maxlen: 24 93.88.75.0/24 maxlen: 24 103.65.230.0/24 maxlen: 24 103.65.231.0/24 maxlen: 24 104.192.42.0/24 maxlen: 24 138.226.220.0/24 maxlen: 24 138.226.221.0/24 maxlen: 24 138.226.222.0/24 maxlen: 24 138.226.223.0/24 maxlen: 24 148.227.170.0/24 maxlen: 24 185.162.8.0/24 maxlen: 24 185.162.9.0/24 maxlen: 24 185.162.11.0/24 maxlen: 24 185.204.52.0/24 maxlen: 24 185.204.54.0/24 maxlen: 24 185.204.55.0/24 maxlen: 24 194.146.127.0/24 maxlen: 24 2a12:9cc0::/48 maxlen: 48 2a12:9cc0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:57:40:96:66:61:bc:74:e5:36:3e:11:6e:0c:ac:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869 Validity Not Before: Dec 5 07:08:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9f962f7d9f19317be36a6201190487f712a3c886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f1:bb:ee:6f:59:fd:b5:00:8b:97:89:41:a7: b6:90:ff:a3:34:81:50:7c:dc:fa:e5:91:2a:b6:6d: d1:86:ff:28:70:40:45:f6:2d:aa:d8:bb:cd:1e:08: 99:10:05:8d:f2:2e:7b:fd:bb:c2:91:b2:28:2c:04: 54:59:a8:57:65:5c:a7:b0:b3:58:e6:d0:fc:fc:22: f5:8e:8e:81:dc:c6:3a:47:2b:da:f6:db:33:12:31: 50:87:4c:5d:89:9d:00:c7:7e:ba:19:9f:6a:14:3a: 30:ac:61:f8:22:86:da:da:76:61:85:04:11:60:53: ac:be:30:40:d4:cf:9c:45:5d:64:c4:40:d1:d8:ba: 48:c0:0d:12:dd:a6:48:a9:5f:35:70:93:73:e7:cb: 58:b2:62:48:80:03:95:29:24:65:49:65:a4:08:2a: 75:75:25:58:39:6b:e8:3f:8d:43:6a:39:07:22:7f: d1:71:96:cc:70:7f:3e:5e:a9:33:28:04:bc:06:d5: e8:5a:56:e8:1e:6e:6c:7f:a8:d9:87:97:80:52:e2: 77:d6:bd:83:f6:47:fa:f2:ed:cc:e7:b8:bd:9e:76: a5:8a:cc:97:b0:78:2d:b3:ee:d7:88:ca:07:4c:15: 74:33:9e:7c:81:5c:8f:8c:e7:3f:67:e0:b1:7a:a1: 09:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:96:2F:7D:9F:19:31:7B:E3:6A:62:01:19:04:87:F7:12:A3:C8:86 X509v3 Authority Key Identifier: keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/n5YvfZ8ZMXvjamIBGQSH9xKjyIY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.10.5.0/24 31.210.170.0-31.210.173.255 46.28.234.0/24 62.204.42.0/24 85.136.181.0-85.136.183.255 87.236.177.0/24 93.88.74.0/23 103.65.230.0/23 104.192.42.0/24 138.226.220.0/22 148.227.170.0/24 185.162.8.0/23 185.162.11.0/24 185.204.52.0/24 185.204.54.0/23 194.146.127.0/24 IPv6: 2a12:9cc0::/47 Signature Algorithm: sha256WithRSAEncryption 3e:25:66:60:c8:15:df:1c:92:75:0b:42:ea:24:e5:74:ed:99: 24:bf:e8:25:25:08:e4:c0:e4:4e:48:fe:85:6d:c3:7e:b5:c6: 05:4c:a5:53:41:87:3c:c7:eb:e1:43:2c:d2:58:61:4e:c3:57: ed:41:3a:03:67:a4:7b:42:da:f7:19:8e:81:e9:df:3e:6f:30: e7:21:a6:94:a4:d0:dd:14:d2:ac:34:ad:33:66:79:9d:40:49: 7c:03:0d:41:71:0d:c2:7a:c1:a6:9d:9e:4b:77:b6:02:b5:1b: da:78:72:4b:2c:a2:22:a5:15:43:1d:b2:d0:24:16:5a:dc:c9: c9:a2:69:02:cb:31:07:7f:71:45:6f:50:5b:17:7b:ae:cd:54: 4e:f9:92:12:bb:1d:32:88:ed:d8:9d:6d:2b:bd:fc:78:c9:34: 6b:3a:9c:43:ef:d8:3d:20:93:0e:32:78:8e:8f:19:d2:20:6e: c3:7b:e5:4f:a4:42:3b:df:4d:89:5e:6e:d6:73:17:df:87:b9: 5d:93:46:47:3b:06:6b:46:46:25:1f:c3:0d:cc:93:c3:9f:98: 5f:44:85:d6:1c:fd:35:93:72:ee:1a:a6:10:82:14:43:56:98: 98:8a:ce:53:d0:a9:cf:87:6f:fc:d1:e4:d5:1d:6e:92:76:3e: a0:a2:0b:b4 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZrtV0CWZmG8dOU2PhFuDKzZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0OWQxZjY3YTQxY2EyZTQwNTAxN2NiZTQ4YmFmZmYxNzMz ZTM4NjkwHhcNMjUxMjA1MDcwODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Zjk2MmY3ZDlmMTkzMTdiZTM2YTYyMDExOTA0ODdmNzEyYTNjODg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfG77m9Z/bUAi5eJQae2kP+jNIFQ fNz65ZEqtm3Rhv8ocEBF9i2q2LvNHgiZEAWN8i57/bvCkbIoLARUWahXZVynsLNY 5tD8/CL1jo6B3MY6Ryva9tszEjFQh0xdiZ0Ax366GZ9qFDowrGH4Ioba2nZhhQQR YFOsvjBA1M+cRV1kxEDR2LpIwA0S3aZIqV81cJNz58tYsmJIgAOVKSRlSWWkCCp1 dSVYOWvoP41DajkHIn/RcZbMcH8+XqkzKAS8BtXoWlboHm5sf6jZh5eAUuJ31r2D 9kf68u3M57i9nnalisyXsHgts+7XiMoHTBV0M558gVyPjOc/Z+CxeqEJnQIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFJ+WL32fGTF742piARkEh/cSo8iGMB8GA1UdIwQY MBaAFBSdH2ekHKLkBQF8vki6//FzPjhpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9iNTA5MGEtZWM1OC00NmRiLTlkZDkt NTQ4NTY4MmEwNWY1LzEvbjVZdmZaOFpNWHZqYW1JQkdRU0g5eEtqeUlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9iNTA5MGEtZWM1OC00NmRiLTlkZDktNTQ4NTY4MmEwNWY1 LzEvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGcBggrBgEFBQcBBwEB/wSBjDCBiTB2BAIAATBwAwQAHwoF MAwDBAEf0qoDBAEf0qwDBAAuHOoDBAA+zCowDAMEAFWItQMEA1WIsAMEAFfssQME AV1YSgMEAWdB5gMEAGjAKgMEAori3AMEAJTjqgMEAbmiCAMEALmiCwMEALnMNAME AbnMNgMEAMKSfzAPBAIAAjAJAwcBKhKcwAAAMA0GCSqGSIb3DQEBCwUAA4IBAQA+ JWZgyBXfHJJ1C0LqJOV07Zkkv+glJQjkwOROSP6FbcN+tcYFTKVTQYc8x+vhQyzS WGFOw1ftQToDZ6R7Qtr3GY6B6d8+bzDnIaaUpNDdFNKsNK0zZnmdQEl8Aw1BcQ3C esGmnZ5Ld7YCtRvaeHJLLKIipRVDHbLQJBZa3MnJomkCyzEHf3FFb1BbF3uuzVRO +ZISux0yiO3YnW0rvfx4yTRrOpxD79g9IJMOMniOjxnSIG7De+VPpEI7302JXm7W cxffh7ldk0ZHOwZrRkYlH8MNzJPDn5hfRIXWHP01k3LuGqYQghRDVpiYis5T0KnP h2/80eTVHW6Sdj6gogu0 -----END CERTIFICATE-----Generated at Sat Dec 6 21:29:54 2025 by rpki-client