This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/SvUe214QH6Ya-cuQjZkktKdtLlE.roa File: SvUe214QH6Ya-cuQjZkktKdtLlE.roa (raw, json) Hash identifier: owxUW7VWw73BMkoM79NT87230Ehd2e45uip4EamL7jo= Subject key identifier: 4A:F5:1E:DB:5E:10:1F:A6:1A:F9:CB:90:8D:99:24:B4:A7:6D:2E:51 Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847 Certificate serial: 019ADDD4E53583D840B2CDAC55D52548944E Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/SvUe214QH6Ya-cuQjZkktKdtLlE.roa Signing time: Tue 02 Dec 2025 06:51:48 +0000 ROA not before: Tue 02 Dec 2025 06:51:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47524 IP address blocks: 24.133.0.0/16 maxlen: 24 24.133.152.0/22 maxlen: 24 24.133.156.0/22 maxlen: 24 46.196.0.0/15 maxlen: 24 83.138.192.0/18 maxlen: 24 94.54.0.0/15 maxlen: 24 94.55.64.0/20 maxlen: 24 94.55.80.0/21 maxlen: 24 94.55.88.0/22 maxlen: 24 94.55.96.0/22 maxlen: 24 94.55.112.0/22 maxlen: 24 94.55.116.0/22 maxlen: 24 94.55.120.0/23 maxlen: 24 94.55.122.0/23 maxlen: 24 94.55.124.0/23 maxlen: 24 94.55.126.0/24 maxlen: 24 94.55.127.0/24 maxlen: 24 176.240.0.0/16 maxlen: 24 178.233.0.0/16 maxlen: 24 185.26.68.0/22 maxlen: 24 185.26.68.0/24 maxlen: 24 185.26.69.0/24 maxlen: 24 185.26.70.0/24 maxlen: 24 185.26.71.0/24 maxlen: 24 2a00:1d58::/29 maxlen: 48 2a00:1d58::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:dd:d4:e5:35:83:d8:40:b2:cd:ac:55:d5:25:48:94:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847 Validity Not Before: Dec 2 06:51:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4af51edb5e101fa61af9cb908d9924b4a76d2e51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2b:ca:5d:37:af:34:22:7f:2e:58:86:df:b9: 89:ee:e8:51:c1:c0:62:55:38:1e:41:31:c6:33:c1: 4c:22:d2:25:6a:f7:bf:5c:33:cb:8c:ad:55:5b:b8: 78:54:6b:56:c1:b4:72:e9:46:31:3c:63:ee:4c:23: 02:42:60:cf:2b:4f:20:a4:81:93:69:57:7a:a5:d0: a8:23:51:50:5f:e0:44:29:c4:70:e3:d2:4d:15:fb: a2:48:7c:1f:cb:f9:9e:e9:95:19:0f:5a:65:7d:5e: 63:59:04:68:de:c8:d0:de:bd:27:73:7c:76:df:06: 66:bb:ae:92:99:a0:3c:9d:3c:01:6c:ef:2d:fe:33: 01:24:46:41:85:5c:ed:2d:e3:ec:ee:50:5a:a6:04: 29:86:d2:70:db:c7:a6:b0:55:d8:94:cc:2c:ea:d4: 5a:9a:8a:da:72:85:69:62:b9:95:d6:d6:68:56:33: ec:70:a6:e6:f6:1d:69:4e:f2:b6:d7:d6:71:66:16: c1:eb:ee:e9:55:97:20:60:4f:36:29:18:c9:34:8d: 99:ef:b2:48:f7:05:d1:cc:52:ee:b0:1c:89:35:5f: 5f:5c:4d:1c:cb:8f:34:dc:71:a0:25:03:0a:ce:38: 08:9a:65:88:75:95:21:b9:2b:46:a7:1e:bd:81:d3: 47:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F5:1E:DB:5E:10:1F:A6:1A:F9:CB:90:8D:99:24:B4:A7:6D:2E:51 X509v3 Authority Key Identifier: keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/SvUe214QH6Ya-cuQjZkktKdtLlE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.133.0.0/16 46.196.0.0/15 83.138.192.0/18 94.54.0.0/15 176.240.0.0/16 178.233.0.0/16 185.26.68.0/22 IPv6: 2a00:1d58::/29 Signature Algorithm: sha256WithRSAEncryption 16:6e:d5:90:59:c7:68:e3:57:dc:58:8d:b1:e6:3b:98:bf:90: 18:1f:c6:89:cd:97:00:7c:9d:7e:13:e2:49:95:93:5d:2f:64: 3a:d9:f0:17:ea:54:77:f6:bc:25:46:3a:b2:ba:4c:44:9c:13: 09:93:bc:4d:3d:5e:9c:9c:b2:7d:63:40:08:7f:5b:c5:a8:6f: 44:eb:35:61:d1:00:79:34:12:22:af:84:4f:e5:a1:92:f2:c9: 03:7c:df:c1:61:0d:7a:0f:ac:24:02:a1:dd:d6:87:33:4b:28: e8:d5:88:1c:2a:18:53:3f:e8:e2:b5:58:94:54:1b:66:a8:f5: aa:83:05:f8:4f:2d:08:df:95:c7:4f:89:86:f1:1d:2e:d0:6a: 56:12:40:f2:32:11:4d:21:26:5b:4f:53:76:45:39:40:ca:0f: 1a:34:b6:0d:fc:27:8d:92:85:5e:41:d7:8a:2e:ce:dc:6f:63: 49:25:9a:5c:f1:a4:d6:fc:e8:80:03:aa:27:c9:db:e1:64:43: a3:0d:79:a0:57:73:64:31:c1:12:f1:53:c0:75:b8:a6:cc:61: b4:e9:0a:c1:63:95:10:5c:e1:a0:a5:8a:da:c9:9c:13:d4:c3: 38:5f:1f:8b:aa:09:4a:06:9f:06:83:9c:ed:58:12:47:1d:92: 5b:a4:92:67 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZrd1OU1g9hAss2sVdUlSJROMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMGRhOWU3YWYwMWRlNzU0NDhmNDkwNmFhYzQxYmQyOTY0 ZTg4NDcwHhcNMjUxMjAyMDY1MTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWY1MWVkYjVlMTAxZmE2MWFmOWNiOTA4ZDk5MjRiNGE3NmQyZTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCvKXTevNCJ/LliG37mJ7uhRwcBi VTgeQTHGM8FMItIlave/XDPLjK1VW7h4VGtWwbRy6UYxPGPuTCMCQmDPK08gpIGT aVd6pdCoI1FQX+BEKcRw49JNFfuiSHwfy/me6ZUZD1plfV5jWQRo3sjQ3r0nc3x2 3wZmu66SmaA8nTwBbO8t/jMBJEZBhVztLePs7lBapgQphtJw28emsFXYlMws6tRa moracoVpYrmV1tZoVjPscKbm9h1pTvK219ZxZhbB6+7pVZcgYE82KRjJNI2Z77JI 9wXRzFLusByJNV9fXE0cy4803HGgJQMKzjgImmWIdZUhuStGpx69gdNHMwIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFEr1HtteEB+mGvnLkI2ZJLSnbS5RMB8GA1UdIwQY MBaAFCENqeevAd51RI9JBqrEG9KWTohHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mMjc4MjEtNGNjZi00ZDJlLThiMTUt NmUxMjc3NGY4NTFlLzEvU3ZVZTIxNFFINllhLWN1UWpaa2t0S2R0TGxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9mMjc4MjEtNGNjZi00ZDJlLThiMTUtNmUxMjc3NGY4NTFl LzEvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDArBAIAATAlAwMAGIUDAwEu xAMEBlOKwAMDAV42AwMAsPADAwCy6QMEArkaRDANBAIAAjAHAwUDKgAdWDANBgkq hkiG9w0BAQsFAAOCAQEAFm7VkFnHaONX3FiNseY7mL+QGB/Gic2XAHydfhPiSZWT XS9kOtnwF+pUd/a8JUY6srpMRJwTCZO8TT1enJyyfWNACH9bxahvROs1YdEAeTQS Iq+ET+WhkvLJA3zfwWENeg+sJAKh3daHM0so6NWIHCoYUz/o4rVYlFQbZqj1qoMF +E8tCN+Vx0+JhvEdLtBqVhJA8jIRTSEmW09TdkU5QMoPGjS2DfwnjZKFXkHXii7O 3G9jSSWaXPGk1vzogAOqJ8nb4WRDow15oFdzZDHBEvFTwHW4psxhtOkKwWOVEFzh oKWK2smcE9TDOF8fi6oJSgafBoOc7VgSRx2SW6SSZw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:52:04 2025 by rpki-client