This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_c0pJJZ7zU5EHB0txGdfoaZUuHE.roa
File: _c0pJJZ7zU5EHB0txGdfoaZUuHE.roa (raw, json)
Hash identifier: JBEJnTbk0DUkFdoYHdzISJaKoNBjc9m3vJ4DFADUl0E=
Subject key identifier: FD:CD:29:24:96:7B:CD:4E:44:1C:1D:2D:C4:67:5F:A1:A6:54:B8:71
Certificate issuer: /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Certificate serial: 019AD943C38802CBD5835FD2C4C2A1373AC8
Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_c0pJJZ7zU5EHB0txGdfoaZUuHE.roa
Signing time: Mon 01 Dec 2025 09:34:48 +0000
ROA not before: Mon 01 Dec 2025 09:34:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25717
IP address blocks: 171.25.128.0/21 maxlen: 21
171.25.138.0/24 maxlen: 24
171.25.139.0/24 maxlen: 24
171.25.140.0/24 maxlen: 24
171.25.141.0/24 maxlen: 24
171.25.142.0/24 maxlen: 24
171.25.143.0/24 maxlen: 24
193.221.16.0/24 maxlen: 24
193.221.17.0/24 maxlen: 24
193.221.18.0/24 maxlen: 24
193.221.19.0/24 maxlen: 24
193.221.20.0/24 maxlen: 24
193.221.21.0/24 maxlen: 24
193.221.22.0/24 maxlen: 24
193.221.23.0/24 maxlen: 24
193.221.28.0/24 maxlen: 24
193.221.32.0/24 maxlen: 24
193.221.33.0/24 maxlen: 24
193.221.34.0/24 maxlen: 24
193.221.35.0/24 maxlen: 24
193.221.36.0/24 maxlen: 24
193.221.37.0/24 maxlen: 24
193.221.38.0/24 maxlen: 24
193.221.52.0/24 maxlen: 24
193.221.54.0/23 maxlen: 23
193.221.56.0/24 maxlen: 24
193.221.57.0/24 maxlen: 24
193.221.59.0/24 maxlen: 24
193.221.66.0/24 maxlen: 24
193.221.68.0/24 maxlen: 24
193.221.69.0/24 maxlen: 24
193.221.70.0/23 maxlen: 23
193.221.72.0/24 maxlen: 24
193.221.74.0/24 maxlen: 24
193.221.75.0/24 maxlen: 24
193.221.76.0/24 maxlen: 24
193.221.77.0/24 maxlen: 24
193.221.78.0/24 maxlen: 24
193.221.79.0/24 maxlen: 24
193.221.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:d9:43:c3:88:02:cb:d5:83:5f:d2:c4:c2:a1:37:3a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Validity
Not Before: Dec 1 09:34:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdcd2924967bcd4e441c1d2dc4675fa1a654b871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d0:43:df:10:a4:1e:97:88:82:7f:40:13:f1:
d9:20:cd:0d:24:54:f0:b2:eb:ca:63:d1:60:99:ec:
ec:bf:8f:1a:38:a9:e6:7d:e4:36:ae:43:8b:3c:93:
2c:29:22:c9:cb:4f:b5:a9:9a:27:5b:e1:f8:f6:d9:
cd:50:f2:b1:0b:a3:e1:97:53:06:98:2b:0f:2f:15:
28:4c:88:89:9c:97:cc:01:b1:7d:6f:2e:ad:9a:97:
f4:da:79:01:ff:3f:b1:a6:6f:7b:5a:44:29:c3:f9:
f2:7a:83:bf:cc:a7:97:e9:b1:21:1b:bf:1d:fa:a9:
d6:a0:17:74:54:0a:c1:ef:d1:6f:62:d3:da:88:7d:
70:25:f6:ee:f4:fa:84:26:15:de:bc:63:a5:28:eb:
c1:09:2e:42:42:e3:23:fd:dd:af:f4:ec:e9:e4:80:
12:b4:28:fd:69:19:15:c3:15:13:49:8f:3e:f1:93:
77:d8:cd:8e:14:22:43:50:f9:43:9a:d2:60:c2:cf:
6a:2f:05:c7:57:f8:05:c8:53:ff:f0:d0:00:ac:2f:
b6:80:67:5a:6e:74:95:2b:37:d3:03:a2:db:f7:8c:
87:a3:df:39:15:69:be:c8:d9:cf:3c:2b:fb:07:83:
e6:bb:e5:a8:b9:99:ce:cc:38:45:7c:9b:49:a0:38:
66:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CD:29:24:96:7B:CD:4E:44:1C:1D:2D:C4:67:5F:A1:A6:54:B8:71
X509v3 Authority Key Identifier:
keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_c0pJJZ7zU5EHB0txGdfoaZUuHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.25.128.0/21
171.25.138.0-171.25.143.255
193.221.16.0/21
193.221.28.0/24
193.221.32.0-193.221.38.255
193.221.52.0/24
193.221.54.0-193.221.57.255
193.221.59.0/24
193.221.66.0/24
193.221.68.0-193.221.72.255
193.221.74.0-193.221.80.255
Signature Algorithm: sha256WithRSAEncryption
04:41:99:59:6a:a2:b7:80:e5:9c:b1:a1:4b:dc:5b:f5:24:32:
63:48:5e:43:1a:58:58:7f:e0:13:e7:41:2d:d8:88:75:04:0f:
4d:60:47:10:e5:82:73:65:9d:51:ed:5a:53:81:fb:13:9d:3f:
c2:18:80:28:a1:b6:af:0e:34:87:46:8c:c4:75:b8:14:69:00:
5f:ae:1d:37:de:da:e9:11:19:e6:79:97:07:c9:8a:ae:5a:50:
4c:95:73:76:4d:02:3d:25:18:46:14:75:41:60:11:7a:b6:0d:
c1:0f:ab:61:16:6f:c4:9c:9e:80:6e:dc:bc:1f:df:e6:1e:d1:
a5:f0:b8:fa:cf:45:ae:a9:75:7e:86:60:9a:de:24:a7:8c:44:
f4:5f:1e:6c:2d:b1:5f:d8:9a:66:b6:44:a5:c5:5a:27:66:b2:
4b:44:23:8f:aa:22:4b:a5:37:38:56:77:80:f2:65:92:8a:32:
ab:50:49:8c:03:69:76:2d:2e:bb:39:0f:85:fd:7f:8d:80:e0:
08:c9:01:a5:40:f3:1d:f8:22:2d:c0:db:34:e2:51:b4:92:6b:
52:b4:a0:66:e4:ef:32:18:51:28:ff:b1:e5:a0:e6:ac:9b:b8:
a2:4f:25:cc:be:87:9b:ae:67:86:7d:23:e2:9d:e5:de:9c:46:
6d:5b:2b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:31:10 2025 by rpki-client