This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/4CZL39u6EkvmfRWfrvmQhA9Ubpg.roa File: 4CZL39u6EkvmfRWfrvmQhA9Ubpg.roa (raw, json) Hash identifier: 7KT8zX1ut3NI1KMa06d5NbNTRIbK0mONunluRgrTKdc= Subject key identifier: E0:26:4B:DF:DB:BA:12:4B:E6:7D:15:9F:AE:F9:90:84:0F:54:6E:98 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019AA59C4D318465C29FC6B25AC9A488E8D2 Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/4CZL39u6EkvmfRWfrvmQhA9Ubpg.roa Signing time: Fri 21 Nov 2025 08:51:15 +0000 ROA not before: Fri 21 Nov 2025 08:51:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41564 IP address blocks: 5.153.236.0/24 maxlen: 24 5.153.239.0/24 maxlen: 24 5.157.8.0/24 maxlen: 24 5.157.13.0/24 maxlen: 24 5.157.14.0/24 maxlen: 24 5.157.17.0/24 maxlen: 24 5.157.22.0/24 maxlen: 24 5.157.27.0/24 maxlen: 24 5.157.41.0/24 maxlen: 24 5.157.42.0/24 maxlen: 24 5.157.45.0/24 maxlen: 24 5.157.56.0/24 maxlen: 24 5.157.58.0/24 maxlen: 24 5.157.59.0/24 maxlen: 24 5.157.60.0/24 maxlen: 24 5.157.61.0/24 maxlen: 24 5.157.62.0/24 maxlen: 24 5.157.63.0/24 maxlen: 24 23.92.127.0/24 maxlen: 24 104.160.2.0/24 maxlen: 24 104.160.4.0/24 maxlen: 24 104.160.6.0/24 maxlen: 24 104.160.10.0/24 maxlen: 24 151.237.186.0/24 maxlen: 24 192.40.88.0/24 maxlen: 24 2a02:5740::/48 maxlen: 48 2a02:5740:1::/48 maxlen: 48 2a02:5740:11::/48 maxlen: 48 2a02:5740:18::/48 maxlen: 48 2a02:5740:21::/48 maxlen: 48 2a02:5740:22::/48 maxlen: 48 2a02:5740:180::/48 maxlen: 48 2a02:5741:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:9c:4d:31:84:65:c2:9f:c6:b2:5a:c9:a4:88:e8:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Nov 21 08:51:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e0264bdfdbba124be67d159faef990840f546e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:92:ff:0f:da:0f:6d:d1:f1:74:de:46:eb:f7: e2:39:bc:5b:e3:b7:c1:88:a3:fd:cc:ae:86:13:22: 12:84:00:06:e9:68:79:2a:fc:91:e8:90:ff:0e:6f: 70:13:d5:fe:13:2d:d6:8f:c2:1b:0d:63:60:38:02: b7:23:ea:c8:3f:f3:cd:66:03:c5:e9:94:f6:35:e7: d6:59:57:96:cf:22:41:df:26:b5:26:7d:61:bd:79: 4c:0b:f9:a9:b4:cd:db:17:0b:6f:57:d7:3e:81:f0: 26:ca:f7:66:cd:c2:e2:1c:60:d9:80:ce:cd:47:95: d0:c7:17:2f:e2:5e:6b:34:7f:86:3f:77:56:61:3b: d2:95:f8:28:86:12:a3:83:1f:e0:d1:a0:bf:1e:30: 35:d2:15:a5:c5:34:ec:d4:3a:6c:a8:f9:2d:de:d3: 4a:c7:07:18:0a:e6:f4:1b:fa:e9:94:88:ec:eb:b9: 01:17:a5:80:b3:bb:a0:eb:0c:09:12:30:9c:3e:6b: 48:f4:5d:63:3b:a9:c5:53:9c:06:8f:06:f3:ef:83: ce:16:66:36:da:ab:8c:f3:b7:6d:29:23:5d:35:5e: 1c:d3:04:df:9c:e2:5b:1f:2a:aa:53:54:d3:5e:72: 4a:bb:db:2e:f5:ec:e9:51:cb:71:44:f5:e1:98:41: be:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:26:4B:DF:DB:BA:12:4B:E6:7D:15:9F:AE:F9:90:84:0F:54:6E:98 X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/4CZL39u6EkvmfRWfrvmQhA9Ubpg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.153.236.0/24 5.153.239.0/24 5.157.8.0/24 5.157.13.0-5.157.14.255 5.157.17.0/24 5.157.22.0/24 5.157.27.0/24 5.157.41.0-5.157.42.255 5.157.45.0/24 5.157.56.0/24 5.157.58.0-5.157.63.255 23.92.127.0/24 104.160.2.0/24 104.160.4.0/24 104.160.6.0/24 104.160.10.0/24 151.237.186.0/24 192.40.88.0/24 IPv6: 2a02:5740::/47 2a02:5740:11::/48 2a02:5740:18::/48 2a02:5740:21::-2a02:5740:22:ffff:ffff:ffff:ffff:ffff 2a02:5740:180::/48 2a02:5741:6::/48 Signature Algorithm: sha256WithRSAEncryption 28:78:00:c2:86:87:ca:2c:a9:72:a5:aa:d5:a5:41:fc:5c:72: e4:8a:f4:05:ea:a6:6f:6f:65:c0:30:8c:fb:10:ad:bc:e7:7a: d0:5d:47:39:a4:3f:02:5e:d9:70:cd:73:fc:21:a9:f5:56:78: 50:2a:37:8c:35:02:bd:71:09:f0:4d:4d:94:f2:9e:82:bd:58: ac:9f:29:59:f3:d5:8b:ca:06:b1:87:cf:d5:9f:2d:f1:6c:f3: 19:e6:76:dc:5c:52:42:86:d4:1d:93:46:82:e2:78:2a:47:3e: d8:f5:78:03:3b:8c:76:38:81:05:04:11:bc:89:46:fd:00:a3: 8b:5a:80:9f:61:bd:f9:aa:05:86:02:36:89:45:57:dc:c1:ab: 5b:48:23:af:4e:4b:f1:16:17:ab:bf:1f:40:47:d8:8e:cb:da: 85:a8:fc:59:e1:ad:b4:30:d5:99:30:4c:e7:d4:b9:5b:79:63: 30:4c:d5:fd:90:7a:eb:82:97:7c:98:fd:82:8a:cc:08:27:6c: 9b:98:44:6c:d2:97:7d:bc:4c:d7:69:1a:df:3a:ee:b8:2c:26: 51:3c:4a:dd:48:e1:1f:a9:fb:1e:52:c6:c6:e2:bf:29:25:bb: 4c:f7:b7:c4:ea:5d:d2:a1:be:ed:54:5f:92:c3:dc:55:0a:4a: a5:f6:64:9a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgISAZqlnE0xhGXCn8ayWsmkiOjSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjUxMTIxMDg1MTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDI2NGJkZmRiYmExMjRiZTY3ZDE1OWZhZWY5OTA4NDBmNTQ2ZTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5L/D9oPbdHxdN5G6/fiObxb47fB iKP9zK6GEyIShAAG6Wh5KvyR6JD/Dm9wE9X+Ey3Wj8IbDWNgOAK3I+rIP/PNZgPF 6ZT2NefWWVeWzyJB3ya1Jn1hvXlMC/mptM3bFwtvV9c+gfAmyvdmzcLiHGDZgM7N R5XQxxcv4l5rNH+GP3dWYTvSlfgohhKjgx/g0aC/HjA10hWlxTTs1DpsqPkt3tNK xwcYCub0G/rplIjs67kBF6WAs7ug6wwJEjCcPmtI9F1jO6nFU5wGjwbz74POFmY2 2quM87dtKSNdNV4c0wTfnOJbHyqqU1TTXnJKu9su9ezpUctxRPXhmEG+3QIDAQAB o4IC1TCCAtEwHQYDVR0OBBYEFOAmS9/buhJL5n0Vn675kIQPVG6YMB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvNENaTDM5dTZFa3ZtZlJXZnJ2bVFoQTlVYnBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHqBggrBgEFBQcBBwEB/wSB2jCB1zCBiwQCAAEwgYQDBAAF mewDBAAFme8DBAAFnQgwDAMEAAWdDQMEAAWdDgMEAAWdEQMEAAWdFgMEAAWdGzAM AwQABZ0pAwQABZ0qAwQABZ0tAwQABZ04MAwDBAEFnToDBAYFnQADBAAXXH8DBABo oAIDBABooAQDBABooAYDBABooAoDBACX7boDBADAKFgwRwQCAAIwQQMHASoCV0AA AAMHACoCV0AAEQMHACoCV0AAGDASAwcAKgJXQAAhAwcAKgJXQAAiAwcAKgJXQAGA AwcAKgJXQQAGMA0GCSqGSIb3DQEBCwUAA4IBAQAoeADChofKLKlyparVpUH8XHLk ivQF6qZvb2XAMIz7EK2853rQXUc5pD8CXtlwzXP8Ian1VnhQKjeMNQK9cQnwTU2U 8p6CvVisnylZ89WLygaxh8/Vny3xbPMZ5nbcXFJChtQdk0aC4ngqRz7Y9XgDO4x2 OIEFBBG8iUb9AKOLWoCfYb35qgWGAjaJRVfcwatbSCOvTkvxFhervx9AR9iOy9qF qPxZ4a20MNWZMEzn1LlbeWMwTNX9kHrrgpd8mP2CiswIJ2ybmERs0pd9vEzXaRrf Ou64LCZRPErdSOEfqfseUsbG4r8pJbtM97fE6l3Sob7tVF+Sw9xVCkql9mSa -----END CERTIFICATE-----Generated at Sat Dec 6 18:40:21 2025 by rpki-client