This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/ImHRlfwmPN78P_Oh9gE4V3RQlNI.roa File: ImHRlfwmPN78P_Oh9gE4V3RQlNI.roa (raw, json) Hash identifier: milMy3dSE5K3t0uErJqYwzKrh2KzlT2VgvjtrqJfAkI= Subject key identifier: 22:61:D1:95:FC:26:3C:DE:FC:3F:F3:A1:F6:01:38:57:74:50:94:D2 Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20 Certificate serial: 019AE7035E3776CD91B3DBEF5C500F8FBADA Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/ImHRlfwmPN78P_Oh9gE4V3RQlNI.roa Signing time: Thu 04 Dec 2025 01:39:08 +0000 ROA not before: Thu 04 Dec 2025 01:39:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 22616 IP address blocks: 147.161.128.0/23 maxlen: 24 159.254.60.0/23 maxlen: 24 159.254.62.0/23 maxlen: 24 159.254.64.0/23 maxlen: 24 159.254.66.0/23 maxlen: 24 159.254.69.0/24 maxlen: 24 159.254.84.0/24 maxlen: 24 159.254.85.0/24 maxlen: 24 159.254.86.0/24 maxlen: 24 159.254.92.0/24 maxlen: 24 159.254.93.0/24 maxlen: 24 159.254.94.0/24 maxlen: 24 159.254.95.0/24 maxlen: 24 159.254.96.0/24 maxlen: 24 159.254.97.0/24 maxlen: 24 159.254.99.0/24 maxlen: 24 159.254.100.0/24 maxlen: 24 159.254.182.0/23 maxlen: 24 159.254.184.0/23 maxlen: 24 164.137.4.0/24 maxlen: 24 164.137.5.0/24 maxlen: 24 164.137.6.0/24 maxlen: 24 164.137.7.0/24 maxlen: 24 164.137.8.0/24 maxlen: 24 164.137.9.0/24 maxlen: 24 164.137.10.0/24 maxlen: 24 164.137.11.0/24 maxlen: 24 164.137.12.0/24 maxlen: 24 164.137.13.0/24 maxlen: 24 164.137.14.0/24 maxlen: 24 164.137.15.0/24 maxlen: 24 164.137.16.0/24 maxlen: 24 164.137.17.0/24 maxlen: 24 164.137.18.0/24 maxlen: 24 164.137.19.0/24 maxlen: 24 164.137.20.0/24 maxlen: 24 164.137.21.0/24 maxlen: 24 164.137.22.0/24 maxlen: 24 164.137.23.0/24 maxlen: 24 164.137.24.0/24 maxlen: 24 164.137.25.0/24 maxlen: 24 164.137.26.0/24 maxlen: 24 164.137.27.0/24 maxlen: 24 164.137.28.0/24 maxlen: 24 164.137.29.0/24 maxlen: 24 164.137.30.0/24 maxlen: 24 164.137.31.0/24 maxlen: 24 164.137.32.0/24 maxlen: 24 164.137.33.0/24 maxlen: 24 164.137.34.0/24 maxlen: 24 164.137.35.0/24 maxlen: 24 164.137.36.0/24 maxlen: 24 164.137.37.0/24 maxlen: 24 164.137.38.0/24 maxlen: 24 164.137.39.0/24 maxlen: 24 164.137.40.0/24 maxlen: 24 164.137.41.0/24 maxlen: 24 164.137.42.0/24 maxlen: 24 164.137.43.0/24 maxlen: 24 164.137.44.0/24 maxlen: 24 164.137.45.0/24 maxlen: 24 164.137.46.0/24 maxlen: 24 164.137.47.0/24 maxlen: 24 164.137.48.0/24 maxlen: 24 164.137.49.0/24 maxlen: 24 164.137.50.0/24 maxlen: 24 164.137.51.0/24 maxlen: 24 164.137.52.0/24 maxlen: 24 164.137.53.0/24 maxlen: 24 2a03:eec0:3212::/48 maxlen: 48 2a03:eec0:321b::/48 maxlen: 48 2a03:eec0:322b::/48 maxlen: 48 2a03:eec0:322c::/48 maxlen: 48 2a03:eec0:322d::/48 maxlen: 48 2a03:eec0:322e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e7:03:5e:37:76:cd:91:b3:db:ef:5c:50:0f:8f:ba:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20 Validity Not Before: Dec 4 01:39:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2261d195fc263cdefc3ff3a1f6013857745094d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2f:24:0b:82:f5:41:e4:b9:f4:d5:00:b3:e7: a9:47:33:39:85:26:1f:5d:c5:b2:40:bd:b3:c6:d7: 5a:82:9d:3a:2a:24:2b:5c:80:1d:66:08:5d:7b:ea: 61:4c:2f:09:0b:54:1a:6c:fb:97:9e:2e:ca:88:24: ed:b7:80:a4:9d:5c:06:8d:21:a3:5a:66:ed:c2:ee: 91:98:38:a3:ef:12:3e:d0:39:34:ab:af:32:20:4d: 4a:9b:2d:da:86:35:79:f1:4f:3e:68:02:75:87:b9: c1:7e:d1:62:09:32:02:37:ba:ff:c9:58:d5:10:60: 68:c9:64:04:09:38:5b:17:e6:d8:7c:49:b3:db:71: ad:94:01:51:17:82:eb:a4:6c:77:8c:0d:5e:e5:b9: 23:22:c7:51:f6:ba:ae:ac:00:78:94:24:c2:21:c1: f1:03:dc:3d:8d:67:13:5d:34:b2:ca:2f:73:21:65: 49:4b:77:99:a5:5d:b1:0f:42:50:ba:99:03:29:56: 82:29:d1:76:ae:af:76:ce:13:28:62:bf:e9:48:9c: 3b:29:5c:2f:50:19:8b:2b:35:ad:da:64:73:82:73: dd:65:b0:bc:2d:8e:a6:1f:41:df:02:94:21:c3:bc: 22:2c:91:71:0e:a8:6f:1f:aa:58:2d:dc:2d:2d:78: 55:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:61:D1:95:FC:26:3C:DE:FC:3F:F3:A1:F6:01:38:57:74:50:94:D2 X509v3 Authority Key Identifier: keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/ImHRlfwmPN78P_Oh9gE4V3RQlNI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.161.128.0/23 159.254.60.0-159.254.67.255 159.254.69.0/24 159.254.84.0-159.254.86.255 159.254.92.0-159.254.97.255 159.254.99.0-159.254.100.255 159.254.182.0-159.254.185.255 164.137.4.0-164.137.53.255 IPv6: 2a03:eec0:3212::/48 2a03:eec0:321b::/48 2a03:eec0:322b::-2a03:eec0:322e:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 50:aa:67:66:6d:2a:26:8c:e6:d2:f6:b0:c0:3b:34:6b:c6:e5: 53:27:8c:4f:a8:fb:aa:20:8f:c3:bd:ff:f6:41:e7:26:82:55: 24:44:d8:d8:e9:6a:f0:1c:33:5b:91:2d:fb:3e:07:2d:77:08: f6:4b:a4:8e:18:e5:d3:aa:15:8a:f5:33:69:3f:25:55:22:bd: a9:86:1a:82:c4:2d:1f:c4:9c:7d:57:fd:12:57:47:bb:f6:f4: 05:92:5a:2f:fa:ad:78:08:74:ef:af:95:ff:ca:cd:da:bd:14: 90:d0:e2:13:94:9b:46:3e:71:8f:ad:72:fc:1b:08:37:4b:f2: 60:26:7a:c4:f5:57:86:20:ab:33:25:5e:35:50:7b:00:d0:b9: cf:b2:84:52:f8:01:f7:99:9b:08:b2:15:bd:9c:3e:07:b8:71: 31:4b:24:15:3f:5a:0f:83:30:90:79:d2:fc:2e:86:e6:e0:c1: 65:95:13:b3:06:4b:5f:43:80:b2:e4:44:81:62:d4:47:15:82: bd:d6:21:58:8c:ff:4f:62:af:0f:0c:45:4e:0b:23:1c:a2:7c: 0e:4c:87:59:f8:1c:af:bc:1e:80:4b:2d:1f:a7:a5:03:d2:37: c2:22:57:c9:6b:ba:9b:89:69:a7:f8:23:66:6c:ab:ef:91:e5: bc:e6:17:23 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgISAZrnA143ds2Rs9vvXFAPj7raMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi OGFhMjAwHhcNMjUxMjA0MDEzOTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjYxZDE5NWZjMjYzY2RlZmMzZmYzYTFmNjAxMzg1Nzc0NTA5NGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS8kC4L1QeS59NUAs+epRzM5hSYf XcWyQL2zxtdagp06KiQrXIAdZghde+phTC8JC1QabPuXni7KiCTtt4CknVwGjSGj Wmbtwu6RmDij7xI+0Dk0q68yIE1Kmy3ahjV58U8+aAJ1h7nBftFiCTICN7r/yVjV EGBoyWQECThbF+bYfEmz23GtlAFRF4LrpGx3jA1e5bkjIsdR9rqurAB4lCTCIcHx A9w9jWcTXTSyyi9zIWVJS3eZpV2xD0JQupkDKVaCKdF2rq92zhMoYr/pSJw7KVwv UBmLKzWt2mRzgnPdZbC8LY6mH0HfApQhw7wiLJFxDqhvH6pYLdwtLXhViwIDAQAB o4IClDCCApAwHQYDVR0OBBYEFCJh0ZX8Jjze/D/zofYBOFd0UJTSMB8GA1UdIwQY MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt YjliNjU0MDJiOTI4LzEvSW1IUmxmd21QTjc4UF9PaDlnRTRWM1JRbE5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4 LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljBmBAIAATBgAwQBk6GA MAwDBAKf/jwDBAKf/kADBACf/kUwDAMEAp/+VAMEAJ/+VjAMAwQCn/5cAwQBn/5g MAwDBACf/mMDBACf/mQwDAMEAZ/+tgMEAZ/+uDAMAwQCpIkEAwQBpIk0MCwEAgAC MCYDBwAqA+7AMhIDBwAqA+7AMhswEgMHACoD7sAyKwMHACoD7sAyLjANBgkqhkiG 9w0BAQsFAAOCAQEAUKpnZm0qJozm0vawwDs0a8blUyeMT6j7qiCPw73/9kHnJoJV JETY2Olq8BwzW5Et+z4HLXcI9kukjhjl06oVivUzaT8lVSK9qYYagsQtH8ScfVf9 EldHu/b0BZJaL/qteAh076+V/8rN2r0UkNDiE5SbRj5xj61y/BsIN0vyYCZ6xPVX hiCrMyVeNVB7ANC5z7KEUvgB95mbCLIVvZw+B7hxMUskFT9aD4MwkHnS/C6G5uDB ZZUTswZLX0OAsuREgWLURxWCvdYhWIz/T2KvDwxFTgsjHKJ8DkyHWfgcr7wegEst H6elA9I3wiJXyWu6m4lpp/gjZmyr75HlvOYXIw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:41:59 2025 by rpki-client