This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/XpM0u13UQnx3pztpCByG6UxZ-2I.roa File: XpM0u13UQnx3pztpCByG6UxZ-2I.roa (raw, json) Hash identifier: Mu57J8NWXi6FyZjx7jHPGC71AKi12J1qvmJX7D2YHPo= Subject key identifier: 5E:93:34:BB:5D:D4:42:7C:77:A7:3B:69:08:1C:86:E9:4C:59:FB:62 Certificate issuer: /CN=5484b53ec069e302623596fb3aa79f5d782c09f9 Certificate serial: 019B0C75424EF32F8E5A449CA5C9A9B048FC Authority key identifier: 54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/XpM0u13UQnx3pztpCByG6UxZ-2I.roa Signing time: Thu 11 Dec 2025 08:09:29 +0000 ROA not before: Thu 11 Dec 2025 08:09:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 34949 IP address blocks: 109.239.112.0/23 maxlen: 23 109.239.112.0/24 maxlen: 24 109.239.113.0/24 maxlen: 24 109.239.114.0/23 maxlen: 24 109.239.116.0/23 maxlen: 23 109.239.116.0/24 maxlen: 24 109.239.117.0/24 maxlen: 24 109.239.118.0/23 maxlen: 23 109.239.118.0/24 maxlen: 24 109.239.119.0/24 maxlen: 24 109.239.122.0/23 maxlen: 23 109.239.122.0/24 maxlen: 24 109.239.123.0/24 maxlen: 24 109.239.124.0/23 maxlen: 23 109.239.125.0/24 maxlen: 24 109.239.126.0/23 maxlen: 23 109.239.126.0/24 maxlen: 24 109.239.127.0/24 maxlen: 24 159.100.32.0/23 maxlen: 23 159.100.32.0/24 maxlen: 24 159.100.33.0/24 maxlen: 24 159.100.34.0/23 maxlen: 23 159.100.34.0/24 maxlen: 24 159.100.35.0/24 maxlen: 24 159.100.38.0/23 maxlen: 23 159.100.38.0/24 maxlen: 24 159.100.39.0/24 maxlen: 24 159.100.40.0/23 maxlen: 23 159.100.40.0/24 maxlen: 24 159.100.41.0/24 maxlen: 24 159.100.42.0/23 maxlen: 23 159.100.42.0/24 maxlen: 24 159.100.43.0/24 maxlen: 24 159.100.44.0/24 maxlen: 24 159.100.46.0/23 maxlen: 23 159.100.46.0/24 maxlen: 24 185.60.24.0/23 maxlen: 23 185.60.24.0/24 maxlen: 24 185.60.25.0/24 maxlen: 24 185.60.26.0/23 maxlen: 23 185.60.26.0/24 maxlen: 24 185.85.224.0/23 maxlen: 23 185.85.224.0/24 maxlen: 24 185.85.225.0/24 maxlen: 24 185.85.226.0/23 maxlen: 23 185.85.226.0/24 maxlen: 24 185.85.227.0/24 maxlen: 24 217.112.48.0/23 maxlen: 24 217.112.49.0/24 maxlen: 24 217.112.50.0/23 maxlen: 23 217.112.50.0/24 maxlen: 24 217.112.51.0/24 maxlen: 24 217.112.52.0/23 maxlen: 23 217.112.52.0/24 maxlen: 24 217.112.53.0/24 maxlen: 24 217.112.54.0/23 maxlen: 23 217.112.54.0/24 maxlen: 24 217.112.55.0/24 maxlen: 24 217.112.56.0/23 maxlen: 23 217.112.56.0/24 maxlen: 24 217.112.57.0/24 maxlen: 24 217.112.58.0/23 maxlen: 23 217.112.58.0/24 maxlen: 24 217.112.59.0/24 maxlen: 24 217.112.60.0/23 maxlen: 23 217.112.60.0/24 maxlen: 24 217.112.61.0/24 maxlen: 24 217.112.62.0/23 maxlen: 24 217.112.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:75:42:4e:f3:2f:8e:5a:44:9c:a5:c9:a9:b0:48:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5484b53ec069e302623596fb3aa79f5d782c09f9 Validity Not Before: Dec 11 08:09:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5e9334bb5dd4427c77a73b69081c86e94c59fb62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:de:08:55:e1:30:36:bd:b8:33:a9:fa:ce:95: 7e:c8:88:7c:db:27:1c:9c:6b:d0:f6:31:38:49:ea: 62:b9:7d:2f:1b:28:c3:5d:36:b9:cb:20:9b:6a:1f: 2a:e8:71:07:78:83:e8:70:da:38:bd:df:c6:33:07: d0:bf:34:e9:98:f2:05:61:7b:ee:1f:2b:90:06:8e: 1e:5e:bb:11:60:88:d9:40:e8:76:33:ff:5a:73:a4: 52:92:ca:81:9f:c0:c9:13:3b:87:15:90:79:c2:d4: d5:5a:2d:80:cb:b0:73:ae:ed:a0:fa:4a:d3:4c:90: f7:33:8c:6f:9f:f7:f2:80:f1:2e:26:c4:cf:99:38: f3:c0:79:c8:08:99:27:e4:01:6c:86:e7:65:2d:04: 58:c1:79:4b:8b:70:5d:86:88:47:1e:53:f1:d1:62: 62:de:2d:d3:13:25:6a:d2:27:c1:b4:47:be:27:1e: e3:5c:0d:3a:16:d4:c9:cb:11:06:ab:09:d0:3c:ce: 0e:13:32:16:21:77:5f:84:aa:50:0f:c7:02:b3:6e: 80:81:6a:5a:42:3a:85:4c:8c:8f:ba:58:71:a9:99: d9:77:cd:7c:5a:0f:fa:b0:0b:66:6b:9a:57:73:97: cc:3e:74:20:0c:6b:87:da:f1:49:ef:c3:4b:b0:8f: f0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:93:34:BB:5D:D4:42:7C:77:A7:3B:69:08:1C:86:E9:4C:59:FB:62 X509v3 Authority Key Identifier: keyid:54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/XpM0u13UQnx3pztpCByG6UxZ-2I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.239.112.0/21 109.239.122.0-109.239.127.255 159.100.32.0/22 159.100.38.0-159.100.44.255 159.100.46.0/23 185.60.24.0/22 185.85.224.0/22 217.112.48.0/20 Signature Algorithm: sha256WithRSAEncryption ac:14:1c:9b:fa:21:71:82:c7:4f:c8:63:3f:bd:52:b0:d8:39: a0:23:5e:c9:5e:a8:3d:80:a1:28:46:d5:df:b7:6e:35:85:0e: 5f:76:1a:b0:be:dc:7b:30:bb:65:0a:d5:3f:6c:78:85:45:6c: f4:df:64:2f:4c:28:84:7c:81:a3:39:2c:f7:45:9b:c3:67:e5: d6:49:5e:85:cf:0f:f7:3a:96:5c:ee:dd:24:ca:af:97:46:8c: 38:46:cc:81:77:ac:98:75:87:b0:6a:18:6f:79:46:fb:41:22: 35:eb:56:a1:c5:ca:ee:df:1c:2f:18:c5:79:8e:4a:b4:f9:78: 23:a3:0a:33:c5:a5:db:99:3b:44:28:4e:a0:10:38:69:29:7e: 1f:cb:e4:59:0e:0f:2a:23:56:c7:1e:e7:0d:43:eb:19:fd:42: 44:c7:22:cf:ea:ce:d1:15:62:44:38:15:d8:6f:49:cf:6b:33: 24:75:db:2c:de:d7:0f:fa:cc:62:a6:9e:0f:e8:36:8a:28:a5: 1a:05:6c:9e:1d:13:6f:9e:79:53:c3:d8:fb:69:9d:28:90:e2: 44:01:38:58:a0:04:d1:cc:9d:3d:25:04:8a:4e:41:79:56:a2: 58:52:2c:f6:b8:4f:05:7f:5c:d1:5d:11:65:a9:87:6a:f6:50: 0c:db:69:d7 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZsMdUJO8y+OWkScpcmpsEj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ODRiNTNlYzA2OWUzMDI2MjM1OTZmYjNhYTc5ZjVkNzgy YzA5ZjkwHhcNMjUxMjExMDgwOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTkzMzRiYjVkZDQ0MjdjNzdhNzNiNjkwODFjODZlOTRjNTlmYjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN4IVeEwNr24M6n6zpV+yIh82ycc nGvQ9jE4SepiuX0vGyjDXTa5yyCbah8q6HEHeIPocNo4vd/GMwfQvzTpmPIFYXvu HyuQBo4eXrsRYIjZQOh2M/9ac6RSksqBn8DJEzuHFZB5wtTVWi2Ay7Bzru2g+krT TJD3M4xvn/fygPEuJsTPmTjzwHnICJkn5AFshudlLQRYwXlLi3BdhohHHlPx0WJi 3i3TEyVq0ifBtEe+Jx7jXA06FtTJyxEGqwnQPM4OEzIWIXdfhKpQD8cCs26AgWpa QjqFTIyPulhxqZnZd818Wg/6sAtma5pXc5fMPnQgDGuH2vFJ78NLsI/wRwIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFF6TNLtd1EJ8d6c7aQgchulMWftiMB8GA1UdIwQY MBaAFFSEtT7AaeMCYjWW+zqnn114LAn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVklTMVBzQnA0d0ppTlpiN09xZWZYWGdzQ2ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jYTYxOGMtMzVjZS00ZDMxLWJiODkt Y2U4ZGQ2ODk4YjI3LzEvWHBNMHUxM1VRbngzcHp0cENCeUc2VXhaLTJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9jYTYxOGMtMzVjZS00ZDMxLWJiODktY2U4ZGQ2ODk4YjI3 LzEvVklTMVBzQnA0d0ppTlpiN09xZWZYWGdzQ2ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQDbe9wMAwD BAFt73oDBAdt7wADBAKfZCAwDAMEAZ9kJgMEAJ9kLAMEAZ9kLgMEArk8GAMEArlV 4AMEBNlwMDANBgkqhkiG9w0BAQsFAAOCAQEArBQcm/ohcYLHT8hjP71SsNg5oCNe yV6oPYChKEbV37duNYUOX3YasL7cezC7ZQrVP2x4hUVs9N9kL0wohHyBozks90Wb w2fl1klehc8P9zqWXO7dJMqvl0aMOEbMgXesmHWHsGoYb3lG+0EiNetWocXK7t8c LxjFeY5KtPl4I6MKM8Wl25k7RChOoBA4aSl+H8vkWQ4PKiNWxx7nDUPrGf1CRMci z+rO0RViRDgV2G9Jz2szJHXbLN7XD/rMYqaeD+g2iiilGgVsnh0Tb555U8PY+2md KJDiRAE4WKAE0cydPSUEik5BeVaiWFIs9rhPBX9c0V0RZamHavZQDNtp1w== -----END CERTIFICATE-----Generated at Thu Dec 18 07:04:12 2025 by rpki-client