This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/TDfG5NF12hxSyXLWLA5stKOOtYA.roa File: TDfG5NF12hxSyXLWLA5stKOOtYA.roa (raw, json) Hash identifier: ZIIOgFqGU3wD4D80AI/qGFTgXGLSL893vgumKTjU8Dc= Subject key identifier: 4C:37:C6:E4:D1:75:DA:1C:52:C9:72:D6:2C:0E:6C:B4:A3:8E:B5:80 Certificate issuer: /CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0 Certificate serial: 019B2C816FB3F95B0129E203A555DE3D03AA Authority key identifier: A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/TDfG5NF12hxSyXLWLA5stKOOtYA.roa Signing time: Wed 17 Dec 2025 13:30:38 +0000 ROA not before: Wed 17 Dec 2025 13:30:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206492 IP address blocks: 5.154.170.0/24 maxlen: 24 45.150.248.0/22 maxlen: 22 185.185.32.0/22 maxlen: 22 185.185.32.0/24 maxlen: 24 194.148.52.0/22 maxlen: 22 2a0b:4d80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:81:6f:b3:f9:5b:01:29:e2:03:a5:55:de:3d:03:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0 Validity Not Before: Dec 17 13:30:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4c37c6e4d175da1c52c972d62c0e6cb4a38eb580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3d:74:45:9d:16:62:6a:84:16:f4:d8:ac:f2: 5c:3b:7b:54:b8:52:ab:75:63:de:ac:9d:97:37:18: 54:0a:9e:b6:20:75:81:f0:fa:b8:66:fe:df:12:31: ca:05:c0:39:24:0e:36:44:27:81:00:76:65:ab:eb: ab:81:93:be:a3:50:e6:91:fa:29:e0:91:16:d5:1c: 33:78:33:5e:40:c8:1a:b5:3e:7d:f4:f8:64:f4:36: 67:62:f9:7d:7b:87:62:8e:fe:68:d4:20:9b:d4:1f: 08:d4:00:cf:c1:9b:47:20:0d:79:e9:76:ce:d4:eb: 3d:df:68:91:9d:12:77:a8:dc:1b:62:48:05:47:20: 58:5b:49:3f:98:67:17:e4:ce:5b:83:f3:22:6b:97: c3:3a:df:72:6f:58:3e:71:aa:0a:9e:6f:b5:cf:0a: 54:26:c8:e4:e1:a1:64:5d:5d:83:e5:21:ac:03:3d: 2d:1e:41:47:3c:c8:da:2c:65:2c:98:e1:0a:4d:88: 05:ae:10:44:e4:41:e9:35:d6:5a:36:18:c7:95:1f: 92:d7:73:86:e9:74:d3:ea:48:c2:86:50:8f:4a:f5: f1:ec:70:fd:a0:86:a5:37:99:b0:ab:17:70:26:5a: c2:29:6f:22:8e:cb:83:03:97:8c:c9:13:b4:2e:4e: 2e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:37:C6:E4:D1:75:DA:1C:52:C9:72:D6:2C:0E:6C:B4:A3:8E:B5:80 X509v3 Authority Key Identifier: keyid:A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/TDfG5NF12hxSyXLWLA5stKOOtYA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.170.0/24 45.150.248.0/22 185.185.32.0/22 194.148.52.0/22 IPv6: 2a0b:4d80::/29 Signature Algorithm: sha256WithRSAEncryption 82:84:60:6c:04:0f:c1:e7:83:2c:31:9f:50:1f:77:68:c0:86: 8e:6b:3b:9e:8b:20:43:d7:87:9b:42:63:e8:75:2f:92:d1:e4: 6d:4f:5c:2a:c3:2c:47:97:68:8d:c7:6b:ae:1a:01:8f:f1:99: de:5f:1d:7c:c9:66:9f:07:05:5c:c3:c6:44:31:20:8f:ba:65: 01:90:ab:d2:cb:c3:ae:03:e8:14:c6:8a:3f:25:8a:2e:69:0a: 00:25:20:75:2d:2c:46:3c:0f:6b:e3:20:3d:c2:86:be:a5:34: 9a:4e:cf:f0:b1:28:b6:92:1a:67:00:9f:6c:45:05:5b:d3:28: 4a:8b:ad:f4:23:1f:03:94:27:c2:9f:3a:5a:d9:37:3b:93:cf: 26:92:1a:94:8a:5e:6c:9e:e5:4c:8a:b5:f6:fb:82:33:12:ed: 55:8c:20:ac:f7:c3:00:19:c5:b9:e9:61:84:e7:f6:d6:7f:6e: 86:0f:40:96:b8:b5:63:38:e6:e7:4a:58:4a:ad:cb:01:c6:4d: 39:a4:3f:af:52:9c:2a:67:d8:fc:18:ae:7e:98:53:63:9f:61: dc:25:b5:3e:9d:c4:a5:46:b3:95:76:af:24:f7:f2:2e:b7:48: 40:a3:0d:50:7d:a4:5b:32:2e:ef:0b:2e:4d:5d:dd:43:5a:34: 6d:78:50:a8 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZssgW+z+VsBKeIDpVXePQOqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZWE4ZGUzMWNlY2E1NTgwM2NmM2FmMTRkNGE3Mjc5YWU4 NDQ2ZDAwHhcNMjUxMjE3MTMzMDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzM3YzZlNGQxNzVkYTFjNTJjOTcyZDYyYzBlNmNiNGEzOGViNTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D10RZ0WYmqEFvTYrPJcO3tUuFKr dWPerJ2XNxhUCp62IHWB8Pq4Zv7fEjHKBcA5JA42RCeBAHZlq+urgZO+o1Dmkfop 4JEW1RwzeDNeQMgatT599Phk9DZnYvl9e4dijv5o1CCb1B8I1ADPwZtHIA156XbO 1Os932iRnRJ3qNwbYkgFRyBYW0k/mGcX5M5bg/Mia5fDOt9yb1g+caoKnm+1zwpU Jsjk4aFkXV2D5SGsAz0tHkFHPMjaLGUsmOEKTYgFrhBE5EHpNdZaNhjHlR+S13OG 6XTT6kjChlCPSvXx7HD9oIalN5mwqxdwJlrCKW8ijsuDA5eMyRO0Lk4ubwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFEw3xuTRddocUsly1iwObLSjjrWAMB8GA1UdIwQY MBaAFKHqjeMc7KVYA8868U1KcnmuhEbQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2VxTjR4enNwVmdEenpyeFRVcHllYTZFUnRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jYTk5ZDgtODUyNy00NWI4LWFmNmEt NzY1MjYyZjI5ZWFmLzEvVERmRzVORjEyaHhTeVhMV0xBNXN0S09PdFlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9jYTk5ZDgtODUyNy00NWI4LWFmNmEtNzY1MjYyZjI5ZWFm LzEvb2VxTjR4enNwVmdEenpyeFRVcHllYTZFUnRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQABZqqAwQC LZb4AwQCubkgAwQCwpQ0MA0EAgACMAcDBQMqC02AMA0GCSqGSIb3DQEBCwUAA4IB AQCChGBsBA/B54MsMZ9QH3dowIaOazueiyBD14ebQmPodS+S0eRtT1wqwyxHl2iN x2uuGgGP8ZneXx18yWafBwVcw8ZEMSCPumUBkKvSy8OuA+gUxoo/JYouaQoAJSB1 LSxGPA9r4yA9woa+pTSaTs/wsSi2khpnAJ9sRQVb0yhKi630Ix8DlCfCnzpa2Tc7 k88mkhqUil5snuVMirX2+4IzEu1VjCCs98MAGcW56WGE5/bWf26GD0CWuLVjOObn SlhKrcsBxk05pD+vUpwqZ9j8GK5+mFNjn2HcJbU+ncSlRrOVdq8k9/Iut0hAow1Q faRbMi7vCy5NXd1DWjRteFCo -----END CERTIFICATE-----Generated at Wed Dec 17 19:16:47 2025 by rpki-client