This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/sInIs7xXHV1rFZ5bvtNd0WwUPpw.roa File: sInIs7xXHV1rFZ5bvtNd0WwUPpw.roa (raw, json) Hash identifier: EJGW3a+HO7cOB4hx+9W+PpX32wwd64sc+89yoXDGxVA= Subject key identifier: B0:89:C8:B3:BC:57:1D:5D:6B:15:9E:5B:BE:D3:5D:D1:6C:14:3E:9C Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 019B226E42CB1B6E5FD4937328E628E34258 Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/sInIs7xXHV1rFZ5bvtNd0WwUPpw.roa Signing time: Mon 15 Dec 2025 14:33:29 +0000 ROA not before: Mon 15 Dec 2025 14:33:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 395954 IP address blocks: 152.163.16.0/22 maxlen: 22 152.163.32.0/22 maxlen: 22 152.163.56.0/22 maxlen: 22 152.163.80.0/22 maxlen: 22 152.163.132.0/22 maxlen: 22 152.163.184.0/22 maxlen: 22 152.163.208.0/22 maxlen: 22 152.163.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 00:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:6e:42:cb:1b:6e:5f:d4:93:73:28:e6:28:e3:42:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Dec 15 14:33:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b089c8b3bc571d5d6b159e5bbed35dd16c143e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a5:90:24:da:8c:16:1a:87:f0:ba:67:52:69: 3b:0f:96:ab:9d:21:aa:48:c2:b2:93:07:6e:e8:b6: 22:dd:26:cf:2a:89:7a:0d:3a:65:c6:ef:6d:02:51: 2d:41:a1:b7:33:20:c2:ef:2c:76:04:36:2b:09:17: 77:04:4c:a3:ec:bf:2f:6e:45:3f:93:79:64:4d:01: 3d:1b:31:f7:cf:29:7e:85:52:88:35:2e:2b:66:b0: d7:dd:e0:fb:ca:dc:1d:62:a3:48:49:eb:5a:c8:5b: 18:83:59:1f:b4:b5:51:78:1a:78:14:ce:29:7f:e6: 0c:a3:6e:09:80:4d:52:dd:57:e5:bc:b8:24:a0:14: 99:5d:75:04:ec:30:63:0d:ec:75:7a:4a:dd:47:10: cb:cd:08:73:e0:ac:2d:cb:ad:37:20:21:8e:68:75: 07:bc:6b:7a:b8:2b:0b:1b:63:b4:be:64:06:d4:bc: 99:ff:42:e5:05:85:da:61:b4:43:83:1a:1b:df:b8: 9f:49:29:4e:e9:99:97:c5:03:17:0f:43:97:1f:d6: f9:17:b4:d8:a0:a3:a9:05:b7:d9:b5:05:de:76:cd: b1:14:40:dd:10:d2:b9:2c:7b:c0:bc:b9:3e:1b:cc: 5d:10:3e:96:2d:5d:f7:f5:4b:4b:65:c3:e7:79:bf: ad:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:89:C8:B3:BC:57:1D:5D:6B:15:9E:5B:BE:D3:5D:D1:6C:14:3E:9C X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/sInIs7xXHV1rFZ5bvtNd0WwUPpw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.163.16.0/22 152.163.32.0/22 152.163.56.0/22 152.163.80.0/22 152.163.132.0/22 152.163.184.0/22 152.163.208.0/22 152.163.236.0/22 Signature Algorithm: sha256WithRSAEncryption 45:bb:cc:b0:bf:4a:47:da:b9:fd:2e:ca:04:60:6c:08:c6:47: 27:33:0d:df:7d:bb:0f:62:2a:c1:55:ac:d7:41:e5:4b:2c:42: 59:c3:bd:0e:63:5e:1e:cd:b5:be:90:c8:e5:00:d2:2a:b4:7e: 03:8f:b8:b3:5c:92:89:90:0d:ba:5a:cf:5f:d1:6a:47:99:c0: 60:58:0b:5f:ab:51:68:d5:0a:ef:0c:93:89:e8:58:dd:e9:a0: 57:08:62:c3:99:ec:a8:6e:e9:fb:49:b0:72:6c:93:4f:21:46: 2c:ab:53:5e:8d:e1:15:24:66:fa:18:46:77:f2:7d:0d:7b:d8: db:73:ea:fe:98:87:db:0b:20:88:d2:37:48:94:2a:07:87:7b: fc:1e:f0:e7:d0:d8:38:b0:db:a1:28:98:c8:b7:43:53:ea:c2: 27:e7:36:b4:bf:dc:c4:67:89:f0:62:92:fb:29:30:d5:e7:4f: ad:db:fd:06:f9:75:b6:8d:a9:e9:14:3d:cb:ad:92:18:9c:c2: a8:bd:b5:43:cc:d7:38:d1:63:6b:bf:1a:43:1d:ce:87:bb:d5: 2d:3a:5c:6e:5c:f3:8c:17:af:ae:1c:62:03:ef:b5:1d:4d:9e: 17:03:25:3c:ba:a4:04:e5:ef:ba:e3:eb:a0:cf:32:66:89:62: ee:08:02:fb -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZsibkLLG25f1JNzKOYo40JYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjUxMjE1MTQzMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDg5YzhiM2JjNTcxZDVkNmIxNTllNWJiZWQzNWRkMTZjMTQzZTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaWQJNqMFhqH8LpnUmk7D5arnSGq SMKykwdu6LYi3SbPKol6DTplxu9tAlEtQaG3MyDC7yx2BDYrCRd3BEyj7L8vbkU/ k3lkTQE9GzH3zyl+hVKINS4rZrDX3eD7ytwdYqNISetayFsYg1kftLVReBp4FM4p f+YMo24JgE1S3VflvLgkoBSZXXUE7DBjDex1ekrdRxDLzQhz4Kwty603ICGOaHUH vGt6uCsLG2O0vmQG1LyZ/0LlBYXaYbRDgxob37ifSSlO6ZmXxQMXD0OXH9b5F7TY oKOpBbfZtQXeds2xFEDdENK5LHvAvLk+G8xdED6WLV339UtLZcPneb+tAQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFLCJyLO8Vx1daxWeW77TXdFsFD6cMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvc0luSXM3eFhIVjFyRlo1YnZ0TmQwV3dVUHB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCmKMQAwQC mKMgAwQCmKM4AwQCmKNQAwQCmKOEAwQCmKO4AwQCmKPQAwQCmKPsMA0GCSqGSIb3 DQEBCwUAA4IBAQBFu8ywv0pH2rn9LsoEYGwIxkcnMw3ffbsPYirBVazXQeVLLEJZ w70OY14ezbW+kMjlANIqtH4Dj7izXJKJkA26Ws9f0WpHmcBgWAtfq1Fo1QrvDJOJ 6Fjd6aBXCGLDmeyobun7SbBybJNPIUYsq1NejeEVJGb6GEZ38n0Ne9jbc+r+mIfb CyCI0jdIlCoHh3v8HvDn0Ng4sNuhKJjIt0NT6sIn5za0v9zEZ4nwYpL7KTDV50+t 2/0G+XW2janpFD3LrZIYnMKovbVDzNc40WNrvxpDHc6Hu9UtOlxuXPOMF6+uHGID 77UdTZ4XAyU8uqQE5e+64+ugzzJmiWLuCAL7 -----END CERTIFICATE-----Generated at Fri Dec 19 08:34:26 2025 by rpki-client