This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/8LdKjmmRFspBva59gTRvEJDyC7s.roa File: 8LdKjmmRFspBva59gTRvEJDyC7s.roa (raw, json) Hash identifier: GcpsTHxi3ZG8tETWo5oxKbnWLb/jW7ozr4maXyFDKLI= Subject key identifier: F0:B7:4A:8E:69:91:16:CA:41:BD:AE:7D:81:34:6F:10:90:F2:0B:BB Certificate issuer: /CN=2037512e5355e815acf064603f8ae3f5528a5e3b Certificate serial: 019AC64825BB00F27386AA5F28871F059277 Authority key identifier: 20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/8LdKjmmRFspBva59gTRvEJDyC7s.roa Signing time: Thu 27 Nov 2025 17:06:48 +0000 ROA not before: Thu 27 Nov 2025 17:06:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60404 IP address blocks: 5.2.64.0/20 maxlen: 20 5.2.67.0/24 maxlen: 24 5.2.70.0/24 maxlen: 24 5.255.96.0/19 maxlen: 19 88.214.28.0/24 maxlen: 24 88.214.29.0/24 maxlen: 24 88.214.30.0/24 maxlen: 24 88.214.31.0/24 maxlen: 24 103.251.164.0/22 maxlen: 22 103.251.164.0/24 maxlen: 24 103.251.165.0/24 maxlen: 24 103.251.166.0/24 maxlen: 24 103.251.167.0/24 maxlen: 24 150.129.8.0/22 maxlen: 22 150.129.8.0/24 maxlen: 24 150.129.9.0/24 maxlen: 24 150.129.10.0/24 maxlen: 24 185.31.172.0/22 maxlen: 22 192.76.150.0/24 maxlen: 24 192.76.153.0/24 maxlen: 24 192.76.160.0/24 maxlen: 24 192.76.163.0/24 maxlen: 24 2a01:6340::/29 maxlen: 29 2a04:52c0::/32 maxlen: 32 2a04:52c0:1::/48 maxlen: 64 2a04:52c0:138::/48 maxlen: 64 2a04:52c0:139::/48 maxlen: 64 2a04:52c0:140::/48 maxlen: 64 2a04:52c0:141::/48 maxlen: 64 2a04:52c0:142::/48 maxlen: 64 2a04:52c0:1000::/48 maxlen: 64 2a04:52c0:5001::/48 maxlen: 64 2a04:52c0:6000::/36 maxlen: 64 2a04:52c0:7000::/36 maxlen: 64 2a0f:6bc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c6:48:25:bb:00:f2:73:86:aa:5f:28:87:1f:05:92:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2037512e5355e815acf064603f8ae3f5528a5e3b Validity Not Before: Nov 27 17:06:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f0b74a8e699116ca41bdae7d81346f1090f20bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:78:1a:09:e6:ac:37:bf:e1:7d:f4:4f:cf:57: 7e:a9:c5:51:9e:15:07:e9:d2:45:de:3d:f1:c8:86: 81:20:92:9a:37:32:c8:4f:f2:f3:80:8a:4e:7c:3d: c2:62:e3:6b:5a:90:1e:4c:1a:32:fb:9d:98:8a:11: 3e:a2:72:15:c6:63:d0:7d:6e:f7:97:51:2c:23:ea: 58:51:10:ff:57:e2:b5:91:f4:02:ec:d4:94:b0:3f: 8b:6a:b9:4b:9f:a6:a7:eb:3c:1a:63:f6:2d:0d:45: 47:ac:c2:11:3b:8f:e5:34:51:11:80:2a:5f:64:62: 90:21:40:79:1d:f6:49:2c:6d:79:f6:51:0b:47:f7: 3b:1a:3c:4e:80:8e:f6:19:73:35:a4:db:cc:30:e4: 02:4e:70:d1:52:d6:87:3e:69:34:f5:05:47:9d:be: 60:6e:16:c0:24:45:63:f1:d5:45:fa:39:2a:3b:1c: 0b:4a:10:d8:04:a6:1e:ef:77:b9:e7:c5:10:39:53: 7a:a0:1a:17:4c:e7:68:a0:f8:b1:db:3e:20:c8:90: 4d:49:90:1d:70:40:a6:94:ff:1b:23:5b:a0:c1:0b: 2c:92:ab:cc:f0:e0:f3:46:54:e1:0f:28:e3:16:82: 48:e3:98:e0:29:0c:6f:6d:a3:3f:50:6b:af:07:eb: e0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B7:4A:8E:69:91:16:CA:41:BD:AE:7D:81:34:6F:10:90:F2:0B:BB X509v3 Authority Key Identifier: keyid:20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/8LdKjmmRFspBva59gTRvEJDyC7s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.2.64.0/20 5.255.96.0/19 88.214.28.0/22 103.251.164.0/22 150.129.8.0/22 185.31.172.0/22 192.76.150.0/24 192.76.153.0/24 192.76.160.0/24 192.76.163.0/24 IPv6: 2a01:6340::/29 2a04:52c0::/32 2a0f:6bc0::/29 Signature Algorithm: sha256WithRSAEncryption 5d:9b:0d:0b:04:eb:a1:32:8a:df:69:1c:ab:f6:fa:e4:c5:cf: 2a:7a:7d:41:95:07:3f:9a:11:3a:7b:56:ba:07:6d:a3:14:32: b0:37:76:16:c1:68:5b:6e:0d:6a:ec:8d:20:e0:b5:ee:8e:06: d7:49:27:5e:69:fa:94:e7:e8:10:39:a4:14:51:85:81:7d:74: 30:13:dd:ad:8f:a3:2b:73:ad:c6:7f:fa:33:c0:b3:33:6d:6a: b7:46:c9:60:80:1a:bc:b2:48:dc:8d:03:20:39:8e:fd:d8:85: 8f:41:21:b0:07:d9:9b:85:75:c0:d8:63:e5:fe:6b:18:94:56: 4b:cf:d8:1d:c7:22:50:e5:95:70:9d:5c:74:e3:13:b1:53:95: 84:7b:49:70:a5:72:74:47:9e:8d:5b:fb:7e:44:fa:4c:31:48: f6:1e:50:4e:88:05:c3:19:39:ed:97:1b:86:65:45:ff:61:3b: 5d:a3:3c:97:78:88:5b:42:24:fb:7f:2f:3d:fe:33:ef:1b:a6: ba:aa:a9:4f:fc:2a:5d:02:f3:c6:97:d9:cf:6c:fa:28:85:34: 54:33:4e:25:e9:5b:88:d8:34:65:ca:00:c5:39:c7:99:ee:63: 77:e8:41:f6:5a:92:2e:c6:84:74:1f:e9:c8:7c:12:40:c2:58: 57:c7:e1:a2 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgISAZrGSCW7APJzhqpfKIcfBZJ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMzc1MTJlNTM1NWU4MTVhY2YwNjQ2MDNmOGFlM2Y1NTI4 YTVlM2IwHhcNMjUxMTI3MTcwNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGI3NGE4ZTY5OTExNmNhNDFiZGFlN2Q4MTM0NmYxMDkwZjIwYmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzngaCeasN7/hffRPz1d+qcVRnhUH 6dJF3j3xyIaBIJKaNzLIT/LzgIpOfD3CYuNrWpAeTBoy+52YihE+onIVxmPQfW73 l1EsI+pYURD/V+K1kfQC7NSUsD+LarlLn6an6zwaY/YtDUVHrMIRO4/lNFERgCpf ZGKQIUB5HfZJLG159lELR/c7GjxOgI72GXM1pNvMMOQCTnDRUtaHPmk09QVHnb5g bhbAJEVj8dVF+jkqOxwLShDYBKYe73e558UQOVN6oBoXTOdooPix2z4gyJBNSZAd cECmlP8bI1ugwQsskqvM8ODzRlThDyjjFoJI45jgKQxvbaM/UGuvB+vg3QIDAQAB o4ICXDCCAlgwHQYDVR0OBBYEFPC3So5pkRbKQb2ufYE0bxCQ8gu7MB8GA1UdIwQY MBaAFCA3US5TVegVrPBkYD+K4/VSil47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSURkUkxsTlY2QldzOEdSZ1A0cmo5VktLWGpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iMTQ3NWQtZmNjMi00OGJiLWFlMDEt YzJiYTI0NjUzZjdiLzEvOExkS2ptbVJGc3BCdmE1OWdUUnZFSkR5QzdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9iMTQ3NWQtZmNjMi00OGJiLWFlMDEtYzJiYTI0NjUzZjdi LzEvSURkUkxsTlY2QldzOEdSZ1A0cmo5VktLWGpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTBCBAIAATA8AwQEBQJAAwQF Bf9gAwQCWNYcAwQCZ/ukAwQCloEIAwQCuR+sAwQAwEyWAwQAwEyZAwQAwEygAwQA wEyjMBsEAgACMBUDBQMqAWNAAwUAKgRSwAMFAyoPa8AwDQYJKoZIhvcNAQELBQAD ggEBAF2bDQsE66Eyit9pHKv2+uTFzyp6fUGVBz+aETp7VroHbaMUMrA3dhbBaFtu DWrsjSDgte6OBtdJJ15p+pTn6BA5pBRRhYF9dDAT3a2PoytzrcZ/+jPAszNtardG yWCAGryySNyNAyA5jv3YhY9BIbAH2ZuFdcDYY+X+axiUVkvP2B3HIlDllXCdXHTj E7FTlYR7SXClcnRHno1b+35E+kwxSPYeUE6IBcMZOe2XG4ZlRf9hO12jPJd4iFtC JPt/Lz3+M+8bprqqqU/8Kl0C88aX2c9s+iiFNFQzTiXpW4jYNGXKAMU5x5nuY3fo QfZaki7GhHQf6ch8EkDCWFfH4aI= -----END CERTIFICATE-----Generated at Sat Dec 6 13:20:02 2025 by rpki-client